# Foreground command ownership (K1271–K1275)

One shell owns at most one foreground child. A failed spawn leaves the slot
empty. A successful spawn publishes one nonzero child identity. Starting a
second child while the first is owned is rejected.

The foreground slot is cleared only after a successful wait returns the
child's actual exit or fault outcome. A failed wait keeps the identity for
retry. The adapter must preserve these spawn and wait guarantees.

This `no_std` coordinator is a local policy model. Actual EL0 command
execution, process table ownership and product acceptance need guest evidence.