provisional property
A supervisor's greeting, not a handshake.
fleury serve (bridge mode) sends one the moment an app connects. It
completes nothing: it tells the app that the socket is owned by a
supervisor that reaps, so the app waits for the browser's own INIT
however long the operator takes instead of dying at the silent-peer
fuse — the contract a spawn-mode standby already has. The real peer's
INIT then negotiates the session from scratch, at whatever protocol
version it speaks. The size and capabilities carried here are
placeholders and are never adopted.
Trust: the fuse guards against a peer that connects and never speaks. A provisional INIT can only come from whatever the app's handle points at, which is the same trust domain as the handle file itself.
Implementation
final bool provisional;