For the maintainer's strict review (decision 22), 2026-10-28 ~23:20 UTC. These supersede the copies in stageA-record.tar: start-ocx.cr now binds the daemon account's homes (/home/ocx/X) at /root/X inside its namespace, so patterns and r-senders.json stay as they are. Not committed.
