magic-context: add cross-process compartment lease safety