Establish OS-level identity isolation for Carolverse agents so each agents privileged work can be performed ONLY by that agent (its own locked OS user owning its privileged write\u2026