e436b61368
§6a (new): the local-API implementation — stable leaf-SHA-256 pin, token->guest self-scoping (cross-guest 403), bootstrap.json contract + controller ingestion (c), baked-controller deploy (no registry cred in guest), firewall narrowing. §9 slice table: back-half = slice 8A implemented (8B quiesce / 8C de-priv split out); build-golden.sh bakes the controller. §13 + doc changelog. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>