feat(rfc): Section 17 — c.Process() primitive spec
Full design spec for process management as Core subsystem:
- 17.1: Primitive concept (interface in core/go, impl in go-process)
- 17.2: Process struct + accessor
- 17.3: Sync execution (Run, RunIn, RunWithEnv)
- 17.4: Async execution (Start + ProcessOptions)
- 17.5: ProcessHandle (IsRunning, Kill, Done, Wait, Info)
- 17.6: IPC messages (ProcessRun/Start/Kill + Started/Output/Exited/Killed)
- 17.7: Permission by registration (no handler = no capability)
- 17.8: Per-package convenience helpers
- 17.9: go-process implementation (IPC handler registration)
- 17.10: Migration path (current → target)
Key insight: registration IS permission. Sandboxed Core without
go-process cannot execute external commands. No config, no tokens,
no capability files — the service exists or it doesn't.
Co-Authored-By: Virgil <virgil@lethean.io>