feat(runtime): install pinned artifacts in a private owner store

Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

docs/evidence/SAND-WP-0015-protected-local-install-2026-09-08.json

@@ -0,0 +1,40 @@
+{
+  "date": "2026-09-08",
+  "scope": "local owner artifact installation; not Railiance admission",
+  "host": "bnt-lap001",
+  "owner_uid": 1000,
+  "store_mode": "0700",
+  "runtime_path": "/home/worsch/.local/share/sandboxer/runtimes/5cf9a16c5d77a16bdb2cb5b3df06ea655356bc2d44741791e3fedfee20d7e922",
+  "runtime_sha256": "5cf9a16c5d77a16bdb2cb5b3df06ea655356bc2d44741791e3fedfee20d7e922",
+  "binary_version": "2.1.263",
+  "binary_sha256": "26d020351e8112f4006790f3cfce43b4c9df0c1bb1d0e542364d64151b81d5ba",
+  "candidate_rebuilt": false,
+  "installed_entries": 358,
+  "installed_regular_bytes": 245176062,
+  "root_owned": false,
+  "smoke": {
+    "ok": true,
+    "sandbox_id": "51b59587",
+    "rein_cli_started": true,
+    "adapter_imported": true,
+    "claude_version": "2.1.263 (Claude Code)",
+    "runtime_readonly": true,
+    "source_absent": true,
+    "home_outside_workspace": true,
+    "home_mode": "0700",
+    "worktree_clean": true,
+    "interfaces": [
+      "lo"
+    ],
+    "python_prefix": "/opt/sandboxer/runtime",
+    "https_proxy_present": true,
+    "credential_refs": [],
+    "private_state_persisted": true,
+    "workspace_removed": true,
+    "proxy_removed": true,
+    "exit_code": 0
+  },
+  "model_run_proven": false,
+  "profile_activated": false,
+  "credential_delivery_configured": false
+}