Start only the host-approved immutable website snapshot. No shell commands, arbitrary paths or executable server code. Return the real startup receipt or execution-permission request.