# Single-owner handle claim (K1231–K1235)

`Table<N>` holds fixed-capacity live handle claims. `claim(raw)` rejects zero,
duplicate live raw tokens, and full capacity before publishing an owner.
`Owned` is neither `Copy` nor `Clone`; moving it transfers the sole Rust owner.
An explicit `close` consumes it and disarms `Drop`. Otherwise `Drop` invokes
`close_raw` exactly once. A second raw close returns `Stale` and does not change
the live inventory.

The table is a local user-side ownership model, not a kernel descriptor table.
It has no unsafe code. The separate guest-only `NativeHandle` uses an
experimental v3 Open6/Close7 wire and disarms before explicit close. Its raw
close method is unsafe because it can invalidate a live owner. K1235 must
verify the matching kernel close authority and stale rejection in EL0.