Expand bounded awk/expr/test toward Issue 7; refresh man, profile 1.0.18,

posix matrix/dashboard, and syscalls/process_table schema alignment (v8).

Booter: replication_operator_sketch/corestore hints, HRPC allowlist tests,
Protomux cap channel 65536-byte bound + export, Wasm posix_profile_peek,
swarm-disk and security_posture docs.

Coreutils/kernel: pkg-swarm-index pathCapabilityEnvelopeVerify on get;
pathcap-verify --trusted failure hint; rebuild bins and sync seeder.

Docs: KERNEL_CONTRACT, kernel-extensions, capabilities index, environment
appendix (warm-cache tuning, cap channel, Wasm env), handbook observability,
vault threat model (multisig), developer-guide ctx/HRPC/Wasm, DOCUMENTATION
release-checklist note, release-checklist optional tier1 drift.

Changelog maintenance in bare-os-booter and bare-os-protocol.

kernel/bin/test

@@ -156,6 +156,25 @@ async function evalTest(ctx, args) {
     }
     if (op === '=') return a === b
     if (op === '!=') return a !== b
+    if (op === '-nt' || op === '-ot' || op === '-ef') {
+      const s1 = await ctx.vfs.stat(a)
+      const s2 = await ctx.vfs.stat(b)
+      if (!s1 || !s2) return false
+      if (op === '-ef') {
+        const i1 = s1.ino != null ? String(s1.ino) : ''
+        const i2 = s2.ino != null ? String(s2.ino) : ''
+        const d1 = s1.dev != null ? String(s1.dev) : ''
+        const d2 = s2.dev != null ? String(s2.dev) : ''
+        if (i1 && i2 && d1 && d2) return i1 === i2 && d1 === d2
+        return a === b
+      }
+      const t1 = Number(s1.mtimeMs)
+      const t2 = Number(s2.mtimeMs)
+      const m1 = Number.isFinite(t1) ? t1 : 0
+      const m2 = Number.isFinite(t2) ? t2 : 0
+      if (op === '-nt') return m1 > m2
+      if (op === '-ot') return m1 < m2
+    }
     return false
   }
   if (args.length === 2) {