Binder protocols

`dev.zorin.core.IDeviceCore/default`

Bounded observability API inherited from Native Lab. Existing transaction order is append-only for compatibility with the manual no-DEX NDK client.

`dev.zorin.trust.ITrustCore/default`

Trust/control plane v1:

getProtocolVersion()
getCapabilities()
getRuntimeStatus()
getDeviceIdentitySummary()
getUsbTrustStatus()
getCallerIdentity()
signChallenge(byte[], String)
evaluatePolicy(String action, String resource, String contextJson)

signChallenge() is intentionally unavailable in the scaffold until a hardware-backed KeyMint/Keystore2 provider is integrated for the target product. Do not add a transparent software-key fallback.

Исходник