iii-core-primitives

Mostly coherent documentation for iii primitives, but it expands execution trust by instructing installation of registry, OCI, and local workers that may run arbitrary code or add powerful capabilities. No direct credential harvesting or confirmed exfiltration is shown, so this is better classified as medium-risk/suspicious supply-chain and transitive-trust exposure rather than malware.