[starmorph]

Same-user tool processes can signal the credential-holding Node runner to activate Inspector, bypassing the protection provided by its execute-only binary. Launch the runner with --disable-sigusr1 through a shared as-runner.sh --node path used by investigations and verification probes.

The installer requires Node >=22.19 with actual flag support. Runtime verification sends a same-user signal and checks that Inspector remains inactive, alongside the existing /proc isolation check. Unsupported runtimes and launches that strip the flag fail verification.

Validation:

• The runtime-script regression reproduced inspectorActive: true before the fix and returns false afterward.
• Focused sandbox tests: 25 passed. Shell syntax checks passed.
• Independently reran typecheck and the full suite: 82 passed, 1 live-model test skipped. git diff --check passed.

Rollout requires a successful snapshot refresh; deploying services alone does not update scripts already captured in snapshots. Live Render identity and loopback behavior were not exercised locally.

Fixes #21.