Merge nucleic/clever-velvet-gecko-cppk into dev

README.md

@@ -4,8 +4,24 @@ Design doc: [docs/NASH.md](../docs/NASH.md). Vendored fork base:
 [`third_party/brush/`](../third_party/brush/) (brush, pinned at
 `brush-shell-v0.4.0`; fork patches are marked with `// nash:` comments).
 
-- `nash/` — the shell binary (M0: transparent embedding of the brush CLI).
+Status (NASH.md): **M0–M2 complete**; M3's image + host work ships via narOS N2/N3 —
-- `nash-observe/` — event model, taps, and transport (lands in M1).
+`naros-agent` bakes the `/bin/sh` divert and `Project.swift` pins it — with the M3
+*gates* (in-image corpus parity, <3% overhead, a clean dogfood week) still pending.
+
+- `nash/` — the shell binary. More than the M0 embedding now: it loads the trusted,
+  root-owned operator policy (`policy.rs`, NASH.md §4.3 — kill switch, real-bash
+  target, `require_observation`), installs the `nash-observe` gate, flushes events at
+  exit, and applies the compat fallback for `-c` input brush can't parse, deferring to
+  brush for everything else.
+- `nash-observe/` — shipped: the `brush_core::gate::Gate` impl, shell-batch event model,
+  data-flow taps with caps/redaction, near-live batching, and the transport chain (unix
+  socket → HTTP → JSONL spool). Events reach the app's feed and land durably in the
+  `nash_event` table (`GRDBMetadataStore+NashEvents`).
+- `naros-init/` — narOS PID-1 supervisor for container surfaces (NAROS.md §5): reaps
+  zombies, forwards SIGTERM/SIGINT, supervises a primary command as the container
+  entrypoint (`naros-init -- CMD …`, exiting with its status) or acts as the keepalive
+  when given none, and under `NAROS_BRIDGE=1` also restarts the control bridge with
+  backoff. Shipped as a Debian package by `os/packages/`.
 - `corpus/` — transcript-replay compat harness: `replay.py` runs every command
   in `corpus.jsonl` under bash and nash in identical fresh workspaces and diffs
   exit/stdout/filesystem (stderr reported separately). Divergences are tracked