@tangle-network/agent-runtime 0.286.0 → 0.287.1

package/dist/testing.d.ts

@@ -1,5 +1,5 @@
-import { Ac as SuperviseTestOptions, Mc as superviseWithTestBrain, Tn as driverAgent, Zt as RunGraphTestOptions, tn as runGraphWithTestBrain, ul as SupervisorAgentTestDeps, wn as DriverAgentOptions, yl as supervisorAgentWithTestBrain } from "./index-BspUvwtx.js";
-import { Kn as ToolLoopCallContext, qn as ToolLoopChat } from "./stream-agent-turn-CaLVbKSY.js";
+import { Ac as SuperviseTestOptions, Mc as superviseWithTestBrain, Tn as driverAgent, Zt as RunGraphTestOptions, tn as runGraphWithTestBrain, ul as SupervisorAgentTestDeps, wn as DriverAgentOptions, yl as supervisorAgentWithTestBrain } from "./index-bw6F9zYu.js";
+import { Kn as ToolLoopCallContext, qn as ToolLoopChat } from "./stream-agent-turn-CUMwVuOz.js";
 import { AgentImprovementProposal, AgentProfile, AgentProfileImprovementMeasuredComparison, SandboxSizePreset } from "@tangle-network/agent-interface";
 //#region src/testing/index.d.ts
 /** A proposal produced by Runtime's opaque profile-improvement path. */

package/dist/testing.js

@@ -1,14 +1,14 @@
 import { O as immutableCandidateValue, w as canonicalCandidateDigest$1 } from "./workspace-archive-MhowMCmp.js";
-import { f as verifyAgentImprovementProposal } from "./improvement-cycle-Cm_YPUwJ.js";
+import { f as verifyAgentImprovementProposal } from "./improvement-cycle-DBvwFjzV.js";
 import { i as applyExactAgentProfileDiff, p as parseExactAgentProfile } from "./profile-C4NDjZyB.js";
-import { r as driverAgent } from "./coordination-driver-CLqj3s53.js";
-import { a as superviseWithTestBrain, h as supervisorAgentWithTestBrain } from "./supervise-Dgfve4nM.js";
-import { i as runGraphWithTestBrain } from "./graph-to6d8CPK.js";
+import { r as driverAgent } from "./coordination-driver-JuhaM7h9.js";
+import { a as superviseWithTestBrain, h as supervisorAgentWithTestBrain } from "./supervise-C-OUl-0_.js";
+import { i as runGraphWithTestBrain } from "./graph-BrbDHk_N.js";
 import { SANDBOX_SIZE_PRESET_NAMES, canonicalAgentProfileDigest } from "@tangle-network/agent-interface";
 //#region src/testing/fixtures/agent-improvement-proposal.json
 var agent_improvement_proposal_default = {
 	changedSurfaces: ["prompt"],
-	digest: "sha256:0bdb2ee4bdd9dbd1423a6b9460a239d360b287e9a999fc9de112abbcd6d9a179",
+	digest: "sha256:74a384270db9ec81273d835f9a5ca58bfcae65fd1a3c6726d8a76de202792a4f",
 	evaluation: {
 		"decision": {
 			"contributingChecks": [
@@ -4579,7 +4579,7 @@ var agent_improvement_proposal_default = {
 		],
 		"metadata": {
 			"fixture": "agent-improvement-proposal",
-			"runtimeVersion": "0.286.0"
+			"runtimeVersion": "0.287.1"
 		},
 		"objectives": [
 			{
@@ -4690,8 +4690,8 @@ var agent_improvement_proposal_default = {
 			"baselineContentHash": "sha256:5c21ee53e513fc604cb09754e21c392b24a424da0ef37dbf8f1ee4a8a0b08f09",
 			"candidateContentHash": "sha256:60fcbb1c728194bd51d7d19cb732d1c3f1881dce7e0a6266b41c8b98cfd65693",
 			"kind": "agent-eval-loop",
-			"recordDigest": "sha256:62fe853c8ba86a49e7297389cd7d045f53a98b396500db9160aa94b2a3da9969",
-			"runId": "agent-runtime-0.286.0-proposal-fixture",
+			"recordDigest": "sha256:4fbd49f487cdc3c39227e5a0f1edc5fddc026de81f8316b4a32a738507399c55",
+			"runId": "agent-runtime-0.287.1-proposal-fixture",
 			"schema": "agent-candidate-experiment"
 		}
 	},
@@ -4714,13 +4714,13 @@ var agent_improvement_proposal_default = {
 	}],
 	kind: "agent-improvement-proposal",
 	proposedAt: "2026-07-10T01:00:00.000Z",
-	runId: "agent-runtime-0.286.0-proposal-fixture"
+	runId: "agent-runtime-0.287.1-proposal-fixture"
 };
 //#endregion
 //#region src/testing/fixtures/agent-profile-improvement-proposal.json
 var agent_profile_improvement_proposal_default = {
 	changedSurfaces: ["prompt", "skills"],
-	digest: "sha256:ed9681233c29af4fb29019b51588ff5140844b92b0327fa9227275d0fb6a0847",
+	digest: "sha256:07a9787d1b86722e3772e344ff4475f5843ef3adfbae51713a7975337155f48d",
 	evaluation: {
 		"decision": {
 			"contributingChecks": [
@@ -6354,7 +6354,7 @@ var agent_profile_improvement_proposal_default = {
 		],
 		"metadata": {
 			"fixture": "agent-profile-improvement-proposal",
-			"runtimeVersion": "0.286.0"
+			"runtimeVersion": "0.287.1"
 		},
 		"objectives": [
 			{
@@ -6465,7 +6465,7 @@ var agent_profile_improvement_proposal_default = {
 			"baselineContentHash": "sha256:21c495a37c418c10bde64fbaa188beddeed31f1f051ea60a6a6582a9ee0db704",
 			"candidateContentHash": "sha256:103f77bc8481601eef1ad5fe6ba84a40dffabc3a44f421f8c8559121edab84e9",
 			"kind": "agent-eval-loop",
-			"recordDigest": "sha256:e2bdfd2d42a76497049c35a618ef9511a07cb558e1622b62541fc0b63da94798",
+			"recordDigest": "sha256:9dfb96341ebe388ed169662248fb7a4a437d57e41e3b40720667d172cedcb362",
 			"runId": "profile-improvement-1",
 			"schema": "agent-profile-improvement-experiment"
 		}

package/dist/tui/index.d.ts

@@ -1,4 +1,4 @@
-import { Ct as ProvisionSupervisorConnection, Dt as provisionSupervisor, Et as SupervisorCleanupReceipt, Tt as ProvisionedSupervisor, wt as ProvisionSupervisorRequest } from "../index-BspUvwtx.js";
+import { Ct as ProvisionSupervisorConnection, Dt as provisionSupervisor, Et as SupervisorCleanupReceipt, Tt as ProvisionedSupervisor, wt as ProvisionSupervisorRequest } from "../index-bw6F9zYu.js";
 //#region src/tui/top-app.d.ts
 /**
  * The interactive side of the supervisor-run TUI: a keypress/mouse loop over the frames

package/dist/tui/index.js

@@ -1,3 +1,3 @@
-import { t as provisionSupervisor } from "../provision-supervisor-CoXCyrZX.js";
+import { t as provisionSupervisor } from "../provision-supervisor-Cqsvapjc.js";
 import { a as renderTopFrameWithLayout, i as renderTopFrame, n as runTopApp, r as loadTopSnapshot, t as renderTopOnce } from "../top-app-DaiR4LXM.js";
 export { loadTopSnapshot, provisionSupervisor, renderTopFrame, renderTopFrameWithLayout, renderTopOnce, runTopApp };

package/dist/{types-wIVzqXdQ.d.ts → types-D5n136cu.d.ts}

@@ -4839,6 +4839,13 @@ type SpawnEvent = {
   verdict?: DefaultVerdict;
   seq: number;
   at: string;
+} | {
+  /** Capture output retained independently of terminal outcome, spend, and recovery state. */
+  kind: 'execution-evidence';
+  id: NodeId;
+  outRef: string;
+  seq: number;
+  at: string;
 } | {
   /** Volatile transport/session binding for exactly one attempt. The full binding is retained
    * only by digest; descriptor fields are safe structural labels, never credential-bearing URLs. */
@@ -5820,4 +5827,4 @@ interface WidenGate<Out> {
 }
 //#endregion
 export { SpawnJournal as $, RuntimeStreamEvent as $a, Iteration as $i, ReadableEnvironment as $n, RetainedInteractiveBindingError as $r, RuntimeStreamEventCollector as $t, NodeExecutionIdentity as A, RuntimeRunStatus as Aa, RetainedRunStartMaterial as Ai, RetainedPendingCause as An, ContinuationPanelInput as Ar, TraceContext as At, ResultBlobStore as B, AgentTaskRunResult as Ba, ReservationHolder as Bi, ReconnectRetainedInteractiveRunOptions as Bn, distillFindings as Br, OtelSpan as Bt, ExecutorToolCall as C, Validator as Ca, RetainedRunEffect as Ci, SessionTraceBox as Cn, CheckUnavailableError as Cr, WorkspaceCheckpointMarker as Ct, MaterializedExecutionIdentity as D, RuntimeRunOptions as Da, RetainedRunIntentAdmission as Di, decodeToolPart as Dn, ContinuationEntry as Dr, workerTraceEnv as Dt, HeldEnvironment as E, RuntimeRunHandle as Ea, RetainedRunHandle as Ei, createPushTraceSource as En, ContinuationContext as Er, readWorkerTraceContext as Et, ProviderModelAttemptEvidence as F, AgentExecutionBackend as Fa, BudgetPoolRestore as Fi, ScopeProgressInput as Fn, VerdictSummary as Fr, LoopSpanNode as Ft, RootMaterialization as G, OpenAIChatResponseFormat as Ga, ReservationWaitRefused as Gi, RetainedInteractiveStartMaterial as Gn, AgentEvalError$1 as Gr, createOpenInferenceFileExporter as Gt, ResumedWork as H, AgentTaskStatus as Ha, ReservationShortfall as Hi, RetainedInteractiveAdmissionHook as Hn, failedItems as Hr, buildLoopOtelSpans as Ht, ProviderModelExecutionEvidence as I, AgentKnowledgeProvider as Ia, BudgetReadout as Ii, TeamProgress as In, admitContinuationPolicy as Ir, OtelAttribute as It, RootStreamReceipt as J, RunAgentTaskOptions as Ja, spendFromUsageEvents as Ji, HarnessTranscriptCapture as Jn, ConfigError as Jr, loopEventToOtelSpan as Jt, RootProviderModelEvidence as K, OpenAIChatTool as Ka, ReserveOptions as Ki, StartRetainedInteractiveRunOptions as Kn, AgentEvalErrorCode as Kr, createOtelExporter as Kt, RecursiveReservationPolicy as L, AgentRuntimeEvent as La, BudgetReconcileFault as Li, WorkerProgress as Ln, admitFinding as Lr, OtelExportConfig as Lt, NodeSnapshot as M, AgentAdapter as Ma, StartRetainedRunInEnvironmentOptions as Mi, ActivityNote as Mn, ContinuationPolicy as Mr, mergeTraceEnv as Mt, NodeStatus as N, AgentBackendContext as Na, StartRetainedRunOptions as Ni, DEFAULT_STALL_AFTER_MS as Nn, ContinuationProfile as Nr, readTraceContextFromEnv as Nt, MaterializedModelIdentity as O, RuntimeRunPersistenceAdapter as Oa, RetainedRunReplayPoint as Oi, sandboxSessionTraceSource as On, ContinuationNoteInput as Or, workerTraceHeaders as Ot, ProfileMaterializationReceipt as P, AgentBackendInput as Pa, BudgetPool as Pi, ExecutorProgress as Pn, PanelFinding as Pr, traceContextToEnv as Pt, SpawnEvent as Q, RuntimeSessionStore as Qa, ExecCtx as Qi, HarnessTranscriptUnavailableReason as Qn, RetainedInteractiveAdmissionError as Qr, RuntimeEventCollector as Qt, ResourceLimit as R, AgentRuntimeEventSink as Ra, LeakedReservation as Ri, createActivityLog as Rn, checkVerdictOf as Rr, OtelExportStats as Rt, ExecutorTeardownWarning as S, ValidationCtx as Sa, RetainedRunDispatchedAdmission as Si, SessionMessageLike as Sn, CheckRead as Sr, WorkerTraceUnavailableReason as St, Handle as T, RuntimeRunCost as Ta, RetainedRunEventOptions as Ti, TraceSource as Tn, ContinuationAppend as Tr, WorkerTraceSeamCarrier as Tt, RetainedExecutionState as U, BackendErrorDetail as Ua, ReservationStage as Ui, RetainedInteractiveEnvironmentInput as Un, passedItems as Ur, buildLoopSpanNodes as Ut, ResumedKeyState as V, AgentTaskSpec as Va, ReservationRejection as Vi, RecoverRetainedInteractiveRunOptions as Vn, expandQuestions as Vr, RuntimeEventOtelOptions as Vt, RootHandle as W, KnowledgeReadinessDecision as Wa, ReservationTicket as Wi, RetainedInteractiveRunHandle as Wn, verdictFromJudgeScore as Wr, buildRuntimeEventOtelSpans as Wt, Scope as X, RuntimeCanonicalStreamEvent as Xa, DefaultVerdict$1 as Xi, HarnessTranscriptFile as Xn, NotFoundError as Xr, padTraceId as Xt, Runtime as Y, RunAgentTaskStreamOptions as Ya, AgentRunSpec as Yi, HarnessTranscriptEvidence as Yn, JudgeError as Yr, padSpanId as Yt, Settled as Z, RuntimeSession as Za, Driver as Zi, HarnessTranscriptUnavailable as Zn, PlannerError as Zr, toOtelAttributes as Zt, ExecutorMaterialization as _, MountRecorder as _a, RetainedInteractiveStartedAdmission as _i, isWaitOutcome as _n, upstreamUnavailableSignal as _r, WaitOpts as _t, BudgetOverspend as a, LoopLineageOptions as aa, WorkerSlots as ai, createRuntimeEventCollector as an, DriverAttemptsExhaustedError as ar, SpendGap as at, ExecutorRegistry as b, SandboxClient as ba, RetainedRunCancelOptions as bi, validateWaitSpec as bn, CONTINUATIONS_DIR as br, WorkerInteractiveUnavailableReason as bt, EnvironmentTeardownReceipt as c, LoopResult as ca, NativeContextContinuationHandle as ci, sanitizeKnowledgeReadinessReport as cn, DriverContractState as cr, SubtreeSummary as ct, ExecutorAccounting as d, LoopTeardownFailedPayload as da, RecoverRetainedRunIntentOptions as di, WaitOutcome as dn, DriverProgressMark as dr, SupervisorOpts as dt, LoopDecisionPayload as ea, RetainedRunAdmissionError as ei, RuntimeStreamEventSink as en, captureHarnessTranscript as er, SpawnOpts as et, ExecutorCancellation as f, LoopTokenUsage as fa, RecoverRetainedRunOptions as fi, WaitProbe as fn, DriverReentry as fr, TokenUsageProvenance as ft, ExecutorFactory as g, MountManifestEntry as ga, RetainedInteractiveIntentAdmission as gi, createWaitProbes as gn, summarizeDriverAttempts as gr, UsageEvent as gt, ExecutorExecutionBinding as h, LoopWinner as ha, RetainedInteractiveEnvironmentAdmission as hi, WaitSpec as hn, classifyDriverFailure as hr, UnknownMaterializationReason as ht, Budget as i, LoopIterationStartedPayload as ia, SlotPermit as ii, SanitizedKnowledgeRequirement as in, DriverAttemptStop as ir, SpendChannel as it, NodeId as j, startRuntimeRun as ja, RetainedRunTurnInput as ji, ActivityLog as jn, ContinuationPanelResult as jr, createPropagatingTraceEmitter as jt, NoWinnerError as k, RuntimeRunRow as ka, RetainedRunSnapshot as ki, RetainedChildRecovery as kn, ContinuationPanel as kr, workerTraceSeamKey as kt, ExecutionBindingReceipt as l, LoopSandboxPlacement as la, NativeContextContinuationInput as li, sanitizeRuntimeStreamEvent as ln, DriverFailureClass as lr, SupervisedResult as lt, ExecutorContext as m, LoopTraceEvent as ma, RetainedInteractiveAdmission as mi, WaitRejection as mn, DriverRetryPolicy as mr, UnconfirmedTeardown as mt, AgentExecutionRef as n, LoopIterationDispatchPayload as na, RuntimeRunStateError as ni, RuntimeTelemetryOptions as nn, persistHarnessTranscript as nr, SpawnRejection as nt, BudgetViolation as o, LoopPlanDescription as oa, createWorkerSlots as oi, createRuntimeStreamEventCollector as on, DriverBudgetReadout as or, SteerableRootHandle as ot, ExecutorCancellationRequest as p, LoopTraceEmitter as pa, RecoverRetainedRunResult as pi, WaitProbeRegistry as pn, DriverRepromptRefusal as pr, TreeView as pt, RootSignal as q, OpenAIChatToolChoice as qa, createBudgetPool as qi, HarnessTranscriptArtifact as qn, BackendTransportError as qr, generateSpanId as qt, AgentSpec as r, LoopIterationEndedPayload as ra, ValidationError as ri, SanitizedKnowledgeReadinessReport as rn, DriverAttemptRecord as rr, Spend as rt, DefaultVerdict as s, LoopPlanPayload as sa, NativeContextContinuationExecution as si, sanitizeAgentRuntimeEvent as sn, DriverContinuationRecord as sr, SubtreeResult as st, Agent as t, LoopEndedPayload as ta, RetainedRunDispatchBindingError as ti, RuntimeStreamEventSummary as tn, harnessTranscriptArtifact as tr, SpawnPrior as tt, Executor as u, LoopStartedPayload as ua, ReconnectRetainedRunOptions as ui, PendingWait as un, DriverLoopRecord as ur, Supervisor as ut, ExecutorNodeContext as v, OutputAdapter as va, RetainedRunAdmission as vi, pollFor as vn, UnavailablePausePolicy as vr, WidenGate as vt, FleetYield as w, RuntimeRunCompleteInput as wa, RetainedRunEnvironmentAdmission as wi, ToolStepInput as wn, CheckVerdict as wr, WorkerTraceResolver as wt, ExecutorResult as x, SelectionReceipt as xa, RetainedRunCancellation as xi, waitUntil as xn, CONTINUATION_FACTS as xr, WorkerTraceEvidence as xt, ExecutorProgressEvent as y, RunProvenance as ya, RetainedRunAdmissionHook as yi, timerAt as yn, AdmittedFinding as yr, WorkerInteractiveSession as yt, ResourceSpend as z, AgentTaskContext as za, ReservationFloor as zi, readWorkerProgress as zn, composeContinuationNote as zr, OtelExporter as zt };
-//# sourceMappingURL=types-wIVzqXdQ.d.ts.map
+//# sourceMappingURL=types-D5n136cu.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-runtime",
-  "version": "0.286.0",
+  "version": "0.287.1",
   "description": "Shared task-lifecycle skeleton for agents: a recursive loop kernel for chat turns, one-shot tasks, and multi-attempt loops, with trace capture and eval-gated self-improvement. Domain behavior lives in adapters; scoring and ship-gates in @tangle-network/agent-eval.",
   "homepage": "https://github.com/tangle-network/agent-runtime#readme",
   "repository": {
@@ -98,10 +98,10 @@
     "@arethetypeswrong/cli": "0.18.5",
     "@biomejs/biome": "^2.5.11",
     "@modelcontextprotocol/sdk": "1.30.0",
-    "@tangle-network/agent-eval": "0.199.0",
-    "@tangle-network/agent-interface": "^2.14.0",
-    "@tangle-network/agent-provider-tangle": "1.7.0",
-    "@tangle-network/sandbox": ">=0.36.4 <0.48.0",
+    "@tangle-network/agent-eval": "0.203.0",
+    "@tangle-network/agent-interface": "^2.15.0",
+    "@tangle-network/agent-provider-tangle": "2.0.0",
+    "@tangle-network/sandbox": ">=0.58.4 <0.59.0",
     "@types/node": "26.4.0",
     "@types/tar-stream": "3.1.4",
     "miniflare": "4.20260722.0",
@@ -122,17 +122,17 @@
   },
   "license": "MIT",
   "peerDependencies": {
-    "@tangle-network/agent-eval": ">=0.199.0 <0.200.0",
-    "@tangle-network/agent-interface": "^2.14.0",
-    "@tangle-network/sandbox": ">=0.36.4 <0.48.0 || ^0.49.0-0 || ^0.50.0 || ^0.51.0 || ^0.52.0 || ^0.53.0 || ^0.54.0 || ^0.55.0 || ^0.56.0 || ^0.57.0 || ^0.58.0"
+    "@tangle-network/agent-eval": ">=0.201.0 <0.204.0",
+    "@tangle-network/agent-interface": "^2.15.0",
+    "@tangle-network/sandbox": ">=0.58.4 <0.59.0"
   },
   "dependencies": {
-    "@tangle-network/agent-core": ">=0.9.6 <0.10.0",
-    "@tangle-network/agent-knowledge": "^17.1.10",
+    "@tangle-network/agent-core": ">=0.10.2 <0.11.0",
+    "@tangle-network/agent-knowledge": "^18.0.0",
     "@tangle-network/agent-profile-materialize": ">=0.20.1 <0.21.0",
-    "@tangle-network/agent-trace-contract": "^1.2.0",
+    "@tangle-network/agent-trace-contract": "^2.0.0",
     "tar-stream": "3.2.1",
-    "zod": "4.5.4"
+    "zod": "4.6.5"
   },
   "scripts": {
     "build": "tsdown",

package/skills/profile-authoring/SKILL.md

@@ -123,7 +123,9 @@ Hard limits live in Runtime options and per-assignment budgets: `budget`, `worke
 Prompt text enforces no limit.
 `maxTokens` is settled after the work: an overspent child keeps its output and carries a `budgetViolation`.
 A child's total counts input tokens on every turn, so reserve turns times context.
-Give each paid job its own named key with a dollar cap, and state the dollars before launch.
+For paid calls, use the execution owner's named credential and enforceable dollar limit.
+For subscriptions, retain token, iteration, time, and compute bounds that the installed path can enforce.
+An unmeasured dollar cost stays unknown; an unsupported dollar cap is not protection.
 
 ## 8. Register arms, a control and outcomes
 
@@ -153,6 +155,16 @@ Group retries of the same assignment into one lineage when comparing teams.
 Grant `submit_result` only when Runtime gives that node an independent check; otherwise its settlement stays unassessed.
 Grant only the observation, steering and journal tools that the assignment needs.
 Set `harness`, `model.default` and `model.provider` explicitly, and validate against the current `agentProfileSchema`.
+
+For subscription execution, select a harness and model that the granted account can serve.
+The private executor resolves the authorized credential and materializes the harness's authentication files.
+Keep credential references in supported configuration; keep credential values outside profiles, tasks, resources, and journals.
+Runtime descendants use the same configured provider and credential resolver; author their profiles rather than copying login files.
+Check the child's materialization receipt and actual session before claiming that account or harness executed.
+Grant only the models and authentication routes the execution owner authorized.
+When the run requires cloud execution, place its controller, root, and descendants through the maintained managed-cloud deployment.
+When mounted, [execution and credentials](references/execution-and-credentials.md) explains binding, renewal, and recovery in more detail.
+
 A tool name must be one the harness publishes, and a refused name fails the same way on retry.
 `ls`, `list` and `find` are not tool names; select paths with a glob tool and search contents with a grep tool.
 Inspect materialized permissions and served tools before relying on a restriction.

package/skills/profile-authoring/references/execution-and-credentials.md

@@ -0,0 +1,73 @@
+# Execution and credentials
+
+## Choose the profile; inherit the authorized execution
+
+The profile defines the harness, model, instructions, capabilities, and research behavior.
+The private executor supplies authentication and placement under the run's authority.
+An account credential does not select a different model or grant additional tools.
+
+Select the harness and model explicitly from the installed capability contract.
+Use the granted provider for the root and its Runtime descendants.
+Let its credential resolver select an authorized account for each exact profile and creation identity.
+Use the installed provider's supported static binding when no dynamic selector is configured.
+Account selection, quota, validity, and renewal belong to that account owner.
+
+The executor materializes credentials in the format the selected harness requires.
+Authentication files are private execution inputs, even when they are ordinary files inside the sandbox.
+Keep their values outside public profiles, mounted research inputs, prompts, and evidence archives.
+Use supported secret references or private backend configuration at the execution boundary.
+Read the current schema before naming a profile field; metadata alone does not configure authentication.
+
+The director authors each descendant's profile and grants its permitted capabilities.
+It does not need to perform an interactive login or export a parent's token.
+A descendant that can spawn receives the complete profile-authoring skill and the same authorized execution path.
+Changing its harness requires a granted authentication route for that harness.
+Native harness subagents and Runtime descendants remain distinct observation units.
+
+## Cloud execution and persistence
+
+When the run requires cloud execution, place its controller, root, and descendants in the managed cloud.
+Use the maintained managed-process deployment and ingress rather than a detached host process.
+Choose a distinct run identity and immutable controller image for each commission.
+The ingress binds each Runtime actor to its own authenticated listener.
+Research policy stays in profiles and the registered method, not the ingress.
+
+Retain the original workspace and native session through the execution owner's supported continuation path.
+Record account changes, renewal, reconnects, and native-session changes separately.
+A fresh environment with copied files is not proof that the original native session resumed.
+Preserve partial artifacts before environment cleanup and archive them through the existing storage path.
+Check that retained capture excludes authentication files and other private credentials.
+
+## What proves execution
+
+Separate configuration, materialization, model execution, research progress, and outside acceptance.
+For a root and a recursively spawned child, inspect:
+
+- The exact authored profile and materialization receipt.
+- The cloud placement, Runtime actor, and native session identities.
+- The granted account reference and actual harness/model evidence, without credential values.
+- The first model invocation and a real tool action.
+- The child-to-grandchild edge when claiming recursion.
+- Retrievable trace and artifact bytes after capture.
+
+A merged source change or published package does not prove a running deployment supports it.
+A supported deployment does not prove an account was used.
+An agent's claim of delegation does not prove that its child executed.
+Keep missing identity, usage, cost, and renewal evidence unknown.
+
+The operator establishes the execution path before research begins.
+When an authorized capability fails inside a run, retain its receipt and use the granted reporting or recovery tool.
+Continue useful research through capabilities that remain available within the same authority.
+
+## Maintained contracts
+
+Use these owners for changing fields and commands instead of copying an API catalog into this skill.
+
+- [Runtime profile and execution composition](https://github.com/tangle-network/agent-runtime/blob/main/docs/canonical-api.md#15-the-agentprofile-rule-author-the-profile-the-substrate-materializes-it).
+- [Runtime managed compute](https://github.com/tangle-network/agent-runtime/blob/main/docs/agent-managed-compute/README.md).
+- [Portable profile schema](https://github.com/tangle-network/agent-sdk/blob/main/packages/agent-interface/src/profile-schema.ts).
+- [Tangle provider credentials and execution](https://github.com/tangle-network/agent-sdk/blob/main/packages/agent-provider-tangle/README.md).
+- [Discovery cloud submission and retention](https://github.com/tangle-network/discovery-lab/blob/master/README.md).
+
+Read the installed provider's contract before using a newer source-only resolver or capability.
+The core skill remains sufficient to author a child; mount this reference when its assignment includes execution integration.