What the agents that run beside a protected system share, which keep its own access control in step with the policies instead of standing in its request path: the launcher and its settings, the timers that sync and read the system's audit, the sync's handling of snapshots, and the files that remember where an audit was read to; a Java 17 library on the agent core