Explicitly enrolled privileged Lua implementations for local agent bindings. Manifests and script bytes are inspected without evaluating Lua.