agent v0.85.0 WIP: F12/F11/F10/F9/F2/F1 boot-recovery plane + appliance self-heal (pre-build)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017CDMFpFx84pfviCTVuGGhf

internal/guesthook/netreassert.go

@@ -42,8 +42,8 @@ func PostStartNetworkReassert(ctx context.Context, vmid string) {
 // real host surface).
 func postStartNetworkReassert(ctx context.Context, vmid string, ops netReasserter, sees func(ctx context.Context, vmid, path string) bool) {
 	for _, res := range ops.ReassertNetworkAutomounts(ctx) {
-		if res.Err != nil || res.Action == storage.NetReassertSkipNone {
-			continue // already reported by the ops logger / nothing expected in the guest
+		if !res.Remediates() {
+			continue // foreign/errored rows expect nothing in the guest (already logged by the ops layer)
 		}
 		if sees(ctx, vmid, res.Where) {
 			fmt.Fprintf(os.Stderr, "felhom-agent guest-hook: vmid %s post-start — network share %s visible in guest (%s)\n",