Containment belongs in the runtime
A field-level containment floor lets agents change capabilities while preventing them from changing scope and gate fields. The rule is enforced where configuration is written, rather than relying on prompt instructions.
Memory without another service
SQLite FTS5 provides searchable memory without an embedding service or network dependency in the memory path. Context compaction is progressive and managed by the runtime.
A turn outlives its connection
Generation is detached from the client connection. A browser can reconnect to a turn by its ID instead of losing the work on refresh.