AppArmor profile

A kernel-enforced confinement description. deputyOS ships one per profile (e.g. deputyos.openclaw, deputyos.hermes, deputyos.khoj) plus one for the voice relay. Lives at /etc/apparmor.d/deputyos.<id> on the device; loaded into enforce mode at boot. See Reference → System → AppArmor profiles.