- 34/34 games rebuilt from the original dumps match the known-good builds;
all reinstalled through the agent and launch-tested with 0 regressions
(docs/parity-report.md, docs/parity-device-report.md).
- Agent: stop rootless podman leaking a kernel keyring per Lepton launch
(keyring=false; ~200 launches exhausted the quota), report key usage,
detect failed container starts, new `cleanup` command.
- Oculus OS stubs and Meta permission declarations are now recipe/heuristic
driven instead of automatic, so known-good games stay unchanged.
- Triage tuned (optional dlopen probes are info, not fatal); report command,
test-only device parity, docs updated.
