//! Deferred runtime-only security surfaces.
//!
//! The release-handles ownership/write-access policy is now executable in
//! `cross_user_release_handles`; daemon peer-credential wiring remains a later
//! runtime integration task.
