Set and validate the publication identity through its retained descriptor so restrictive process masks cannot weaken or remove the required mode.
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
