diff --git a/qemu/rootfs/sbin/init b/qemu/rootfs/sbin/init
index 9ab1638..1c072fd 100755
--- a/qemu/rootfs/sbin/init
+++ b/qemu/rootfs/sbin/init
@@ -84,6 +84,9 @@ export WARDEN_HPMCU=0
 # post-apply "reboot" surfaces as a clean flared error; the scenario harness
 # performs the actual reboot into the applied slot.
 export WARDEN_HARD_RESET=0
+# Production init scripts create this volatile socket directory before their
+# daemons start. The compact QEMU rootfs must provide the same contract.
+mkdir -p /run/warden
 # OTA apply is opt-in per boot (run.sh --allow-apply): writing rootfs_b is
 # safe inside disk.img but must never be the default posture.
 if grep -qw warden.fwapply /proc/cmdline; then