DL-512

Each boot lints the stored default with the default door before mounting doors and fails startup on a hit; the fetch re-checks only the Runner’s rules, failing closed with a named error; an orphaned profile key on the effective bundle logs a Warn and delivers.

Status: Active (Matt, 2026-10-13)