trust: low reserved outsider-mobile
Display name: (reserved)
Role: outsider-mobile slot 2
(no per-machine network metadata — populate from pk cockpit once activated)
What this surface IS: the per-machine view. Status / connection info / quick links. Edit policy + display name + allowed_ops from the pk cockpit.
Conventions: see apps/README.apps.2.0_about_eduz.ai_subdomains.md (taxonomy) and docs/2.3_security_universe_plan.md (security tiering).