Verified native Linux AMD64/ARM64 runtime from b1334fa (CI 38835869020). Adds optional operator CPU/memory/PID ceilings, read-only capability metadata and stopped-container policy reconciliation; defaults and running apps are unchanged. Retains scoped provider access, renewal and background-agent policy. This is not a Desktop installer, native Windows/macOS validation, real-model proof, disk quota or aggregate resource budget. Experimental prerelease; no production deployment.