📖About & Usage

Provisions and governs per-agent OS identities so each agent can perform ONLY its own privileged work. Each agent owns a locked OS user that owns its privileged write surface; owner-daemons run as that user and serve a verified request queue any agent may append to. Radagast is backup admin (provision/de-provision, fallback operator). This is agent-identity management, distinct from the end-user (users table) record.