glove-vfs

One virtual filesystem for a whole agent. A zero-dependency Vfs contract plus backends (in-memory, host directory copy-on-write, object storage), a mount table that composes them into a single tree, path-scoped access policies, an optional metadata/proven