Tools

Tools are the concrete operations available to the runtime or a provider: Git, project commands, tests, builds, provider subprocesses and Dashboard actions. They are different from a provider (who reasons and executes) and from a Skill (a governed reusable instruction package).

Runtime boundaries

• Git operations are scoped to the registered project and prepared worktree.
• Provider subprocesses have bounded output and inactivity protection.
• Deterministic validation runs diff checks, secret scanning and the checks appropriate to the detected project layout.
• Dashboard and Chat mutations go through application commands and access checks.

The packaged runtime does not run npm install or npm ci inside a managed project. Prepare the project’s own dependencies before execution; Environment Doctor reports missing toolchains.

Evidence

Tool calls, command output summaries, test results and changed files are persisted as task evidence. Secrets, private paths and oversized output are redacted or bounded. A tool error is not silently converted into a successful step.