Let systemd own unsigned Gjallar continuity

crates/idunn-daemon/src/main.rs

@@ -5578,7 +5578,7 @@ fn swarm_targets(options: &SwarmOptions) -> Result<Vec<DaemonTarget>> {
                 daemon_id: "yggdrasil-gjallar".to_string(),
                 verse_id: "yggdrasil.local".to_string(),
                 name: "Yggdrasil Gjallar Eve surface compositor".to_string(),
-                health_contract: locally_supervised_health_contract(
+                health_contract: health_contract(
                     "gjallar.cultnet-rudp-composition-health",
                     "dependency-unavailable",
                 ),
@@ -8464,7 +8464,7 @@ mod tests {
                 "codex/yggdrasil-aggregate-daemon",
                 "/srv/gjallar/deploy/deployment.env",
                 "gjallar",
-                true,
+                false,
             ),
         ] {
             let target = targets

docs/gjallar.md

@@ -38,6 +38,9 @@ clients, and agent readers lower the same aggregate without becoming its owner.
 - State: `/var/lib/gamecult/gjallar/gjallar.service.cc`.
 - Deployment: immutable source/dependency pins, a digest-pinned .NET SDK image,
   and Idunn's root-owned `gjallar` actuator manifest.
+- Continuity: systemd restarts the admitted release. Until Gjallar publishes
+  authenticated C# health, Idunn observes its diagnostic health but does not
+  restart merely because authenticated publication is missing.
 
 ## Runtime Contract