[reiase]

-M workloads can now discover or start a same-user daemon with a retained memory pool. Docker start, completion and automatic removal also retain the correct owner generation through fast exits and concurrent operations.

Changes

• Add trusted companion dispatch, private same-user discovery, bounded startup/readiness and manager stop/restart handling. Persist resolved pool sockets in workload records.
• Add managed Linux VM filesystems with persistent guest UID/GID/mode metadata while preserving host-account ownership, read-only checks and snapshot exclusions. Keep the public VM API uniform and validate attachment failures atomically.
• Retry bounded registry throttling and transient blob transfers with fresh temporary files and digest verification. Preserve main's custom registry CA support and unified canonical V2 image store.
• Harden owner-lease transfer, completion observation, automatic removal/name reuse, retained volumes and publication cleanup. Extend lifecycle, API, CLI and chaos-runner contracts.
• Restore CI formatting and the exact source budget. Register the historical OpenSandbox comparison as engineering evidence under lab-notes, preserve its data, and remove the unused unregistered placeholder. Update bilingual links, timeout documentation and translation records.

Rebase and validation

Rebased onto latest fetched main fbf9877952969dca98084eb257c4cf23f0b75dd6 (#56). Updated head: b5e95f1721c2bdce333d969e19cfadc708937637.

• Targeted runtime/CLI/daemon/VM tests: 1253 passed, 21 existing skips, including shared-image-store, real TLS registry/cache-backend, daemon discovery and external VM API contracts.
• Full Python selection: 520 passed, 28 skipped across six suites (548 total). The focused 43-test selection overlaps and is not added to that total. Script/task-routing checks also passed.
• All-target strict Clippy for the four affected packages, rustfmt, and warnings-denied API rustdoc passed.
• Strict bilingual documentation build: 127 pairs and 257 pages passed. Benchmark inventory verifies 42 articles and 6 dynamic tables.
• Linux dependency-budget model: 236 runtime dependencies and 303 Core public declarations unchanged; exact source baseline is 241543 lines. No performance threshold or semantic-approval ledger changed.

Local execution used macOS ARM64. Linux managed-filesystem behavior, Linux/KVM runtime contracts and the new head's performance gate require CI validation; earlier-head results do not substitute for the rebased head. This update did not run or publish new performance measurements. The prior CI failures were Python formatting, missing benchmark-document inventory and an unrecorded intentional source-budget increase; each is addressed here.