EZA-001 experimental Linux evidence release

The preserved native run used a custodian under UID/GID 5200 and an executor under UID/GID 5206. One authorized transaction wrote object:X = linux-isolation-207-authorized, consuming one grant and one prepared handle. The tested no-authority, consumed-grant replay and spent-handle requests produced no additional protected writes. The out-of-scope request was refused as a replay; independent scope enforcement was not isolated.

A fresh read-only review confirmed the saved receipts, ledger chain and current authority/witness agreement, unchanged ledger/checkpoint identities, and passing installed security/runtime and maintenance verification. Original failures and refusals remain in the evidence.

The owner reported denied manual UID 5206 write-open attempts against four protected files. The located records do not preserve the test code, exact targets, errno values or Terminal results, so that filesystem claim remains inconclusive. The live same-tick mutation scenario was not executed. This release makes no universal security or production-readiness claim.

Release artifact, SHA-256 identities, detached signature and verification instructions: [insert verified publication URL only after owner-authorized signing and publication].

Draft only. Do not post before the exact signed artifact set is published and independently downloaded and verified.
