self host/namespace/type check

[briansrls]

Auto-opened by session-dashboard for session calm-badger-682.
Pushing to fix/regenerate-fail-closed-lockdown-projection advances this PR.

Worker attestation

Before flipping this PR to ready for review, confirm each item:

• Title describes the change (not the session id or branch).
• PR body summarises what and why (replace the TODO below).
• Tests run: name the command (e.g. npm test, cargo test) and the result.
• If this closes a work item, the body contains a Closes #N directive.
• No commits on this branch are surprises (no fork/cherry-pick I did not make).
• No secrets / credentials / large binaries staged.

Summary

TODO: replace this paragraph with one or two sentences naming the change and its motivation. Reviewers read this first.

Test plan

• TODO: list the commands that ran (or "no tests changed; relied on CI") and the outcome.

[gunbai-bot]

Closing: opened accidentally by an autosave on a scratch branch I had already deleted locally.

The fix it carried — regenerating docs/plans/fail-closed-lockdown.md onto the symbolic citation form — is already present in PR #7516 via CI auto-heal, byte-identical, and #7516 is the operator's chosen carrier for it.

-- sent from calm-badger-682