Add lease-bound Remote key IPC and SDK validation

sdk/go/tentacle/remote_key.go

@@ -0,0 +1,16 @@
+// Copyright (c) 2026 Storm Dragon
+// Authors: Storm Dragon, Angus Kola
+// SPDX-License-Identifier: GPL-3.0-or-later
+
+package tentacle
+
+import "git.stormux.org/storm/cthulhu/internal/tentaclewire"
+
+type RemoteKey = tentaclewire.RemoteKey
+type RemoteKeyRequest = tentaclewire.RemoteKeyRequest
+
+func ValidRemoteKey(key RemoteKey) bool { return tentaclewire.ValidRemoteKey(key) }
+
+func ValidRemoteKeyRequest(request RemoteKeyRequest) bool {
+	return tentaclewire.ValidRemoteKeyRequest(request)
+}

sdk/go/tentacle/session.go

@@ -180,7 +180,8 @@ func (client *SessionClient) write(output io.Writer) {
 
 // Call has a two-second maximum deadline. Timeout/cancellation retires the
 // session, so an abandoned effect cannot leave unbounded pending calls behind.
-// The host currently implements remote.open, remote.close and remote.heartbeat.
+// Typed desktop operations require separately attached reader owners; a
+// successful call acknowledges admission, not delivery to a desktop/backend.
 func (client *SessionClient) Call(ctx context.Context, method string, params any, result any) error {
 	if ctx == nil {
 		return errors.New("nil session call context")