Loaded native contract identity after package validation.
Admit one file or directory without following a reparse point.
Admit one file or directory without following a reparse point.
Create and verify a protected runtime root beneath owned authority.
Spawn a process atomically assigned to a dedicated kill-on-close job.
Application-owned authority wrapper that scopes every native resource.