More work on tentacles.

internal/app/tentacles.go

@@ -34,6 +34,7 @@ type tentacleCommand struct {
 // native publication; mutex protects dispatch snapshots and immediate disable.
 // Only explicitly granted presentation commands reach the core output owner.
 type tentacleRuntime struct {
+	remotePolicy     *tentacle.RemotePolicy
 	readerSettings   *preferencesWorker
 	extensionChanges chan struct{}
 	forms            tentacleForms
@@ -421,6 +422,14 @@ func (runtime *tentacleRuntime) report(message string) {
 
 // makeManager runs on the lifecycle worker, never on input or GTK callbacks.
 func (runtime *tentacleRuntime) makeManager() (*tentacle.Manager, error) {
+	manager, err := runtime.make_manager()
+	if err == nil && runtime.remotePolicy != nil {
+		err = manager.UseRemotePolicy(runtime.remotePolicy)
+	}
+	return manager, err
+}
+
+func (runtime *tentacleRuntime) make_manager() (*tentacle.Manager, error) {
 	if runtime.newManager != nil {
 		return runtime.newManager()
 	}