Description
Placed app services already share request traces, but eager DFS projection cannot represent incremental safe tool carry, review revisits or conditional agents. Add the reviewed generic executor without importing sibling workloads or installing concrete transports and custody logic.
Acceptance Criteria
- #1 Actual executed stages produce one coherent trace and native generations and workflows, tools-only retrieval has no fabricated generation, and weighted bounded outcomes are deterministic.
- #2 Producing-agent preflight selection, deny and redaction barriers, local fail-open versus enclosing cancellation, content budgets and conditional paths are proved at real local HTTP and encoder boundaries.
- #3 Native cumulative duration and token observations, tag channels, rating requests and pod resources reflect executed work without duplicate or skipped-stage model telemetry; unsupported local spanmetrics refuses explicitly.
Definition of Done
- #1 just check (fmt-check, lint, gen-check, env-check, docs-check, test, race, hygiene, ui-check, compose-check, helm-test, lab-check, signal-fidelity)
- #2 just gen (only if a blueprint field, construct/workload config struct, or a skill under plugins/synthkit/skills/ changed)
- #3 just dump — inventory diffed against signals/
Implementation Plan
Use the reviewed app-first bounded state machine and exact shared stage and rating ABI now delivered on main. Keep implementation app-only; supply public load, encoder and stage-barrier proof separately, with no transport, custody or sibling-workload import. Root integration remains a distinct task.
Final Summary
Delivered bounded executor component at c0982f09ceca1b01ffb9e5220d0d592b35cc79d5. Combined guarded repair review passed; aggregate CodeRabbit covered 19 files and named-minor delta covered five with zero remaining findings. Exact tree374075e43ed2956f6d019f75833e0600929fc838 passed full remote just check including race. Public boot/live/persisted restore reject unwired collaborators; actual native encoder inventory verifies eight cumulative histograms/twelve points/four model services and fifteen spans/five KSM-joined services, with legacy CLI dump byte-identical and schema/skill generation validated. Pipeline unsupported log/RUM/unbound-node declarations and metadata-only thinking fail closed. This component is not runtime custody admission or production adapter/live-backend verification; parent integration remains open.