CoulombCore (92.205.130.254) authenticates as tegwick via id_ops in ssh config, not root. Omit SANDBOXER_SSH_USER to let OpenSSH apply config; set SANDBOXER_SSH_USER only to override.
Add meta-framework spec, pydantic schemas, profile/extension YAML, extension registry, ext.compose-ssh backend, SandboxManager with State Hub events, CLI commands, integration docs, capability registry entry, and compose-e2e runbook. Nine unit tests pass. T10 remote smoke test remains for operator.
Scaffold sandboxer package (src layout, typer CLI stub, pytest, ruff), Makefile targets, and document install/test/lint/build commands in AGENTS.md and stack-and-commands.md. Mark bootstrap workplan finished.
