SourceOS Immutable, local-first OS substrate (workstation + edge) with verifiable policy and user-space isolation. No community automation dependency.