trust: high reserved pk-Linux
Display name: (reserved)
Role: future bigger home server (pk3)
(no per-machine network metadata — populate from pk cockpit once activated)
What this surface IS: the per-machine view. Status / connection info / quick links. Edit policy + display name + allowed_ops from the pk cockpit.
Conventions: see apps/README.apps.2.0_about_eduz.ai_subdomains.md (taxonomy) and docs/2.3_security_universe_plan.md (security tiering).