--sudo option: 6-layer elevation architecture with pulse tracing (v5.14)

v6.0 pipe separation: normal Eye -> wkappbot_eye_ipc (tick IPC only), admin Eye -> wkappbot_elevated (command proxy only). Must not mix -- normal Eye intercepted elevated connections before this split. --sudo is a SESSION START trigger. Launcher checks admin Eye liveness on wkappbot_elevated; reuses existing admin Eye if alive. Core/SudoHandler owns admin spawning, waits indefinitely after UAC until admin Eye ready OR spawned process dies. Once admin path started, no user-mode fallback; proxy failure aborts. User Eye refuses --sudo with [EYE:FALLBACK] + exit 125. IsAvailable->Ping migration for liveness. Proxy stdout/stderr captured as UTF-8 (StandardOutputEncoding=UTF8). Eye evict null cmdline = admin-elevated process, skip (not evict).

Steps