chris 9 days ago Stub-burndown register S5 (P2). Files: kernel/src/crypto/*.Blocks Phase 3 pantry-local-install (signed indexes) and later WireGuard.