diff --git a/CLAUDE.md b/CLAUDE.md
index 6a302ca9..c710f10e 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -74,7 +74,7 @@ Headline entrypoints: `runAgentTask`/`runAgentTaskStream` (`src/run.ts`), the mu
 
 ## Commands
 
-- `pnpm run lint` (Biome — **not** `npx biome`), `pnpm run build`, `pnpm test`, `pnpm run typecheck`. Tests live next to code and under `tests/`; the loops kernel is covered by `tests/loops/`.
+- `pnpm run lint` (Biome — **not** `npx biome`), `pnpm run build`, `pnpm test`, `pnpm run typecheck`. Tests live next to code and under `tests/`; the execution kernel is covered by `tests/kernel/`.
 - **Publish gotcha (Tangle obfuscate step):** never give a module-global `const` an UPPERCASE-prefixed name — the obfuscator (`--rename-globals false`) trips `pnpm pack`/verify-dist on a banned UPPERCASE pattern. (e.g. `SIDECAR_PERMISSION_KEYS` → `CANONICAL_PERMISSION_KEYS`.) Lowercase or rename module-globals.
 - Verify with the dedicated tools (Edit/Read errors if a change failed) — don't re-read files just to confirm an edit landed.
 
diff --git a/README.md b/README.md
index a48be4c8..c3729c6e 100644
--- a/README.md
+++ b/README.md
@@ -31,7 +31,7 @@ That file defines the scripted `worker`, `output`, and `validator` used below so
 Replace the scripted worker with a sandbox, CLI bridge, or router backend without changing the driver.
 
 ```ts
-import { inProcessSandboxClient, runAgentRounds } from '@tangle-network/agent-runtime/loops'
+import { inProcessSandboxClient, runAgentRounds } from '@tangle-network/agent-runtime/kernel'
 
 const result = await runAgentRounds<Task, Note, 'refine' | 'pick-winner' | 'fail'>({
   task: { prompt: 'Write a one-line release note for one-click restore.' },
@@ -113,7 +113,7 @@ For a repeated initial dispatch, reuse both `sessionId` and `turnId`; `execution
 One supervisor spawns and steers workers toward a goal. Where the workers run (an in-process loop, or a sandboxed coding harness) is one data value; the budget, journaling, and stopping are handled for you.
 
 ```ts
-import { supervise } from '@tangle-network/agent-runtime/loops'
+import { supervise } from '@tangle-network/agent-runtime/kernel'
 
 const result = await supervise(
   { name: 'supervisor', harness: null, systemPrompt: 'Delegate to workers; do not solve the task yourself.' },
@@ -434,11 +434,11 @@ The general-purpose pieces, by import path. Every export with its one-line summa
 
 | Primitive | What it does | Import |
 |---|---|---|
-| Chat-turn runtime | Stream and persist one production chat turn (`handleChatTurn`); derive its stable execution and turn identity (`deriveExecutionId`); normalize any backend's stream into one event shape (`streamAgentTurn`) | `/durable` · `/loops` |
-| Supervision | One agent spawns, budgets, and steers workers toward a goal (`supervise`, `delegate`), on an in-process loop or a sandboxed coding harness | `/loops` · `/mcp` |
-| Loop kernel + combinators | Write a driver (`plan`/`decide`) and run it (`runAgentRounds`), or compose fixed shapes: refine (`loopUntil`), best-of-N (`fanout`), chain (`pipeline`), multi-judge (`panel`) | `/loops` |
+| Chat-turn runtime | Stream and persist one production chat turn (`handleChatTurn`); derive its stable execution and turn identity (`deriveExecutionId`); normalize any backend's stream into one event shape (`streamAgentTurn`) | `/durable` · `/kernel` |
+| Supervision | One agent spawns, budgets, and steers workers toward a goal (`supervise`, `delegate`), on an in-process loop or a sandboxed coding harness | `/kernel` · `/mcp` |
+| Loop kernel + combinators | Write a driver (`plan`/`decide`) and run it (`runAgentRounds`), or compose fixed shapes: refine (`loopUntil`), best-of-N (`fanout`), chain (`pipeline`), multi-judge (`panel`) | `/kernel` |
 | Improvement driver | Optimize one part of an agent and ship only if it wins on tasks it never practiced on (`improve`); production proposal/review/activation flow | root · `/intelligence` |
-| Benchmarks + leaderboards | Compare strategies with significance stats (`runBenchmark`), stand up a harness×model leaderboard (`defineLeaderboard`, `leaderboard`) | `/loops` |
+| Benchmarks + leaderboards | Compare strategies with significance stats (`runBenchmark`), stand up a harness×model leaderboard (`defineLeaderboard`, `leaderboard`) | `/kernel` |
 | Knowledge improvement | Produce a measured candidate copy of a KB/wiki/RAG corpus without touching the live one (`runKnowledgeImprovementJob`) | `/knowledge` |
 | MCP tool servers | Give an agent a `delegate` tool or live worker-coordination tools over MCP | `/mcp` |
 | Conversations + durability | Multi-turn two-agent sessions with SQL-backed resume (D1/pg/sqlite/libSQL adapters) | `/conversation` |
diff --git a/bench/HARNESS.md b/bench/HARNESS.md
index eecb5e23..fb7c2baa 100644
--- a/bench/HARNESS.md
+++ b/bench/HARNESS.md
@@ -4,7 +4,7 @@ If you're an agent picking this up: read this page, then run `pnpm help` + `pnpm
 do NOT re-derive the harness from source. This map is SHORT on purpose; if it disagrees
 with the code, the code wins — fix this page in the same turn (the anti-rediscovery law).
 Verified against source 2026-07-18 · agent-eval pinned `0.122.8`. The CANONICAL surface is now
-the published optimization suite (`@tangle-network/agent-runtime/loops`): `Environment` +
+the published optimization suite (`@tangle-network/agent-runtime/kernel`): `Environment` +
 `Strategy`/`defineStrategy` + `runBenchmark` — see the section below FIRST. The recursive
 diverse-vs-blind gate runs through the keystone (`gate-cli.mts` → `runGate`);
 the offline selector replay (`corpus-replay.mts` / `corpus-report.mts`) gates the legacy corpora.
diff --git a/bench/src/aec-gate.mts b/bench/src/aec-gate.mts
index aab9d79d..c5f0952c 100644
--- a/bench/src/aec-gate.mts
+++ b/bench/src/aec-gate.mts
@@ -22,7 +22,7 @@ import { resolveAdapter } from './adapters'
 import type { BenchmarkAdapter, BenchTask } from './benchmarks/types'
 import { type AttemptRecord, appendRunRecord, buildRunRecordFromAttempts } from './corpus'
 import { composeStrategies } from './directives'
-import { type RouterConfig, routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { type RouterConfig, routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 import { pool } from './stats.mts'
 
 function must(name: string): string {
diff --git a/bench/src/benchmarks/agentbench.ts b/bench/src/benchmarks/agentbench.ts
index 0632d153..007fbdad 100644
--- a/bench/src/benchmarks/agentbench.ts
+++ b/bench/src/benchmarks/agentbench.ts
@@ -9,7 +9,7 @@
 
 import { readFile } from 'node:fs/promises'
 import { join } from 'node:path'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import { benchRoot } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/benchmarks/appworld.ts b/bench/src/benchmarks/appworld.ts
index bfa8f234..c30ead86 100644
--- a/bench/src/benchmarks/appworld.ts
+++ b/bench/src/benchmarks/appworld.ts
@@ -22,7 +22,7 @@
 import { spawn } from 'node:child_process'
 import { join } from 'node:path'
 import { createInterface } from 'node:readline'
-import { type OutputAdapter, routerToolLoop, type ToolSpec } from '@tangle-network/agent-runtime/loops'
+import { type OutputAdapter, routerToolLoop, type ToolSpec } from '@tangle-network/agent-runtime/kernel'
 import { benchRoot, preflightVenvImports, runVenvScriptStdin, venvPython } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/benchmarks/bfcl.ts b/bench/src/benchmarks/bfcl.ts
index dd312dd7..7c653b31 100644
--- a/bench/src/benchmarks/bfcl.ts
+++ b/bench/src/benchmarks/bfcl.ts
@@ -11,7 +11,7 @@
 
 import { readFile, stat } from 'node:fs/promises'
 import { join } from 'node:path'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import { benchRoot } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/benchmarks/commit0.ts b/bench/src/benchmarks/commit0.ts
index 6f8306d3..0816297b 100644
--- a/bench/src/benchmarks/commit0.ts
+++ b/bench/src/benchmarks/commit0.ts
@@ -23,7 +23,7 @@
 
 import { join } from 'node:path'
 import { readFile } from 'node:fs/promises'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import { benchRoot, preflightVenvImports, runVenvScriptStdin, venvPythonAt } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/benchmarks/dabstep.ts b/bench/src/benchmarks/dabstep.ts
index 0fb17932..45d784fc 100644
--- a/bench/src/benchmarks/dabstep.ts
+++ b/bench/src/benchmarks/dabstep.ts
@@ -11,7 +11,7 @@
 
 import { join } from 'node:path'
 import { access, readFile, stat } from 'node:fs/promises'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import { benchRoot, runVenvPython, runVenvScriptStdin } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/benchmarks/enterpriseops-gym.ts b/bench/src/benchmarks/enterpriseops-gym.ts
index d3af1e73..213c1b04 100644
--- a/bench/src/benchmarks/enterpriseops-gym.ts
+++ b/bench/src/benchmarks/enterpriseops-gym.ts
@@ -30,7 +30,7 @@
 
 import { mkdir, readFile, rm, writeFile } from 'node:fs/promises'
 import { join } from 'node:path'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import { benchRoot, runVenvScriptStdin } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/benchmarks/programbench.ts b/bench/src/benchmarks/programbench.ts
index 82e4d6b9..234bc36e 100644
--- a/bench/src/benchmarks/programbench.ts
+++ b/bench/src/benchmarks/programbench.ts
@@ -25,7 +25,7 @@
 
 import { join } from 'node:path'
 import { readFile } from 'node:fs/promises'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import { benchRoot, preflightVenvImports, runVenvScriptStdin } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/benchmarks/rag-shared.ts b/bench/src/benchmarks/rag-shared.ts
index 882557a0..8065d1d2 100644
--- a/bench/src/benchmarks/rag-shared.ts
+++ b/bench/src/benchmarks/rag-shared.ts
@@ -1,5 +1,5 @@
 import { readFile } from 'node:fs/promises'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import type { BenchScore, BenchTask, LoadOptions } from './types'
 
 export const FINAL_ANSWER_SENTINEL = 'FINAL ANSWER:'
diff --git a/bench/src/benchmarks/swe-bench.ts b/bench/src/benchmarks/swe-bench.ts
index 71fc9b83..db21f412 100644
--- a/bench/src/benchmarks/swe-bench.ts
+++ b/bench/src/benchmarks/swe-bench.ts
@@ -13,7 +13,7 @@
  */
 
 import { join } from 'node:path'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import {
   preflightVenvImports,
   readJsonReport,
diff --git a/bench/src/benchmarks/tau-bench-shared.ts b/bench/src/benchmarks/tau-bench-shared.ts
index da9e9c62..d6b0014f 100644
--- a/bench/src/benchmarks/tau-bench-shared.ts
+++ b/bench/src/benchmarks/tau-bench-shared.ts
@@ -9,7 +9,7 @@
 
 import { readFile, stat } from 'node:fs/promises'
 import { resolve } from 'node:path'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import { runVenvPython } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/benchmarks/toollm.ts b/bench/src/benchmarks/toollm.ts
index bc2d6c75..12332797 100644
--- a/bench/src/benchmarks/toollm.ts
+++ b/bench/src/benchmarks/toollm.ts
@@ -9,7 +9,7 @@
 
 import { readFile } from 'node:fs/promises'
 import { join } from 'node:path'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import { benchRoot } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/benchmarks/types.ts b/bench/src/benchmarks/types.ts
index b02c16d0..d24def67 100644
--- a/bench/src/benchmarks/types.ts
+++ b/bench/src/benchmarks/types.ts
@@ -8,7 +8,7 @@
  * from the benchmark's published evaluation harness.
  */
 
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 
 export interface BenchTask {
   /** Stable benchmark instance id. */
diff --git a/bench/src/benchmarks/webarena-verified.ts b/bench/src/benchmarks/webarena-verified.ts
index 1d671dec..3ee509ce 100644
--- a/bench/src/benchmarks/webarena-verified.ts
+++ b/bench/src/benchmarks/webarena-verified.ts
@@ -9,7 +9,7 @@
 
 import { access, readFile, stat } from 'node:fs/promises'
 import { join, resolve } from 'node:path'
-import type { OutputAdapter } from '@tangle-network/agent-runtime/loops'
+import type { OutputAdapter } from '@tangle-network/agent-runtime/kernel'
 import { benchRoot, runVenvPython } from './_harness'
 import type { BenchmarkAdapter, BenchScore, BenchTask, LoadOptions } from './types'
 
diff --git a/bench/src/clbench-codebase-gate.mts b/bench/src/clbench-codebase-gate.mts
index 1619f1c3..317fb6d1 100644
--- a/bench/src/clbench-codebase-gate.mts
+++ b/bench/src/clbench-codebase-gate.mts
@@ -31,7 +31,7 @@ import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { promisify } from 'node:util'
-import { acquireSandbox } from '@tangle-network/agent-runtime/loops'
+import { acquireSandbox } from '@tangle-network/agent-runtime/kernel'
 import { Sandbox } from '@tangle-network/sandbox'
 import { composeStrategies } from './directives'
 import { type AttemptRecord, appendRunRecord, buildRunRecordFromAttempts } from './corpus'
diff --git a/bench/src/clbench-context-gate.mts b/bench/src/clbench-context-gate.mts
index df79b892..ecf33784 100644
--- a/bench/src/clbench-context-gate.mts
+++ b/bench/src/clbench-context-gate.mts
@@ -36,7 +36,7 @@ import { execFileSync } from 'node:child_process'
 import { existsSync, readFileSync } from 'node:fs'
 import { composeStrategies } from './directives'
 import { type AttemptRecord, appendRunRecord, buildRunRecordFromAttempts } from './corpus'
-import { type RouterConfig, routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { type RouterConfig, routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 import { selfConsistencySelect, verifierGroundedSelect } from './selector'
 import { type PairedLift, pairedLift, pool } from './stats.mts'
 
diff --git a/bench/src/cloud-loop.mts b/bench/src/cloud-loop.mts
index 8ab65ad6..ea71198e 100644
--- a/bench/src/cloud-loop.mts
+++ b/bench/src/cloud-loop.mts
@@ -30,7 +30,7 @@
  *     env MODEL=gpt-4.1 ROUNDS=3 pnpm exec tsx src/cloud-loop.mts
  */
 import { createChatClient } from '@tangle-network/agent-eval'
-import { observe, openSandboxRun } from '@tangle-network/agent-runtime/loops'
+import { observe, openSandboxRun } from '@tangle-network/agent-runtime/kernel'
 import { Sandbox } from '@tangle-network/sandbox'
 import { answerOutput, sandboxAgentRun } from './sandbox-run'
 
diff --git a/bench/src/commit0-env-run.mts b/bench/src/commit0-env-run.mts
index d3de31ea..389aba1e 100644
--- a/bench/src/commit0-env-run.mts
+++ b/bench/src/commit0-env-run.mts
@@ -10,7 +10,7 @@
  */
 import { readFileSync } from 'node:fs'
 import { join } from 'node:path'
-import { adaptiveRefine, printBenchmarkReport, refine, runBenchmark, sample, type Strategy } from '@tangle-network/agent-runtime/loops'
+import { adaptiveRefine, printBenchmarkReport, refine, runBenchmark, sample, type Strategy } from '@tangle-network/agent-runtime/kernel'
 import { type Commit0Row, createCommit0Environment, rowToTask } from './commit0-env'
 
 function must(name: string): string {
diff --git a/bench/src/commit0-env.ts b/bench/src/commit0-env.ts
index 18f6e062..a7c90c70 100644
--- a/bench/src/commit0-env.ts
+++ b/bench/src/commit0-env.ts
@@ -20,7 +20,7 @@ import { mkdtempSync, rmSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { promisify } from 'node:util'
-import type { AgenticSurface, AgenticTask, AgenticTool, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/loops'
+import type { AgenticSurface, AgenticTask, AgenticTool, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/kernel'
 
 const exec = promisify(execFile)
 
diff --git a/bench/src/commit0-gate.mts b/bench/src/commit0-gate.mts
index dc61ab4d..ea2711bc 100644
--- a/bench/src/commit0-gate.mts
+++ b/bench/src/commit0-gate.mts
@@ -57,7 +57,7 @@ import {
   type Deliverable,
   openSandboxRun,
   type SandboxRun,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { Sandbox } from '@tangle-network/sandbox'
 import { createCommit0Adapter } from './benchmarks/commit0'
 import type { BenchTask } from './benchmarks/types'
diff --git a/bench/src/corpus.ts b/bench/src/corpus.ts
index 85276e16..cfe35a1b 100644
--- a/bench/src/corpus.ts
+++ b/bench/src/corpus.ts
@@ -16,7 +16,7 @@ import { appendFile, mkdir } from 'node:fs/promises'
 import { dirname } from 'node:path'
 import { hashContent, type RunSplitTag, validateRunRecord } from '@tangle-network/agent-eval'
 import type { CorpusRecord } from '@tangle-network/agent-eval/rl'
-import type { Iteration } from '@tangle-network/agent-runtime/loops'
+import type { Iteration } from '@tangle-network/agent-runtime/kernel'
 import type { BenchRuntimeDecisionPoint, BenchRuntimeHookEvent } from './runtime-hook-recorder'
 
 /** One attempt within a condition-run: the prompt/steer sent, the output, the
diff --git a/bench/src/examples/lean-proof-gate.mts b/bench/src/examples/lean-proof-gate.mts
index 5bb372ce..f67a2740 100644
--- a/bench/src/examples/lean-proof-gate.mts
+++ b/bench/src/examples/lean-proof-gate.mts
@@ -22,7 +22,7 @@ import {
   runBenchmark,
   sample,
   sampleThenRefine,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { ensureLeanImage, leanCheck } from './lean-verify.js'
 
 // Real, mathlib-free Lean 4 theorems (compile in core Lean). `header` is everything up to `:=`;
diff --git a/bench/src/examples/math-demo.mts b/bench/src/examples/math-demo.mts
index 76dd4813..240254d9 100644
--- a/bench/src/examples/math-demo.mts
+++ b/bench/src/examples/math-demo.mts
@@ -19,7 +19,7 @@ import {
   runBenchmark,
   sample,
   sampleThenRefine,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 
 // GSM8K-style problems; meta.answer is the ground truth the deployable check compares to.
 const problems: Array<{ q: string; answer: number }> = [
diff --git a/bench/src/examples/strategy-demo.mts b/bench/src/examples/strategy-demo.mts
index f0d0ad6a..5705d2cd 100644
--- a/bench/src/examples/strategy-demo.mts
+++ b/bench/src/examples/strategy-demo.mts
@@ -12,7 +12,7 @@
  * Toy task = only a router key needed (no dataset, no sandbox). Run from bench/:
  *   TANGLE_API_KEY=... WORKER_MODEL=gpt-4o-mini tsx src/examples/strategy-demo.mts
  */
-import { adaptiveRefine, type AgenticTask, type ArtifactHandle, defineStrategy, type Environment, printBenchmarkReport, refine, runBenchmark, sample } from '@tangle-network/agent-runtime/loops'
+import { adaptiveRefine, type AgenticTask, type ArtifactHandle, defineStrategy, type Environment, printBenchmarkReport, refine, runBenchmark, sample } from '@tangle-network/agent-runtime/kernel'
 
 // ── 1. Implement an Environment (the only thing a new domain writes) ──────────────
 // A toy: the agent must drive a counter to exactly the target using the increment tool.
diff --git a/bench/src/fleet.mts b/bench/src/fleet.mts
index a05e0c27..1b14f62e 100644
--- a/bench/src/fleet.mts
+++ b/bench/src/fleet.mts
@@ -13,7 +13,7 @@
  * Run it twice: the second run injects the first run's learnings into the workers.
  */
 import { createChatClient } from '@tangle-network/agent-eval'
-import { FileCorpus, observe, openSandboxRun, renderReport } from '@tangle-network/agent-runtime/loops'
+import { FileCorpus, observe, openSandboxRun, renderReport } from '@tangle-network/agent-runtime/kernel'
 import { Sandbox } from '@tangle-network/sandbox'
 import { answerOutput, sandboxAgentRun, type WorkerBackendType } from './sandbox-run'
 
diff --git a/bench/src/gate-cli.mts b/bench/src/gate-cli.mts
index 94fde519..70f33530 100644
--- a/bench/src/gate-cli.mts
+++ b/bench/src/gate-cli.mts
@@ -15,7 +15,7 @@
  * single CLI run is the instrument, not the significance test).
  */
 
-import type { AgentProfile } from '@tangle-network/agent-runtime/loops'
+import type { AgentProfile } from '@tangle-network/agent-runtime/kernel'
 import { resolveAdapter } from './adapters'
 import { runGate } from './gate'
 
diff --git a/bench/src/gate.test.mts b/bench/src/gate.test.mts
index 42ef65ba..976eb66e 100644
--- a/bench/src/gate.test.mts
+++ b/bench/src/gate.test.mts
@@ -19,7 +19,7 @@ import type {
   Executor,
   ExecutorFactory,
   ExecutorResult,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import type { BenchmarkAdapter, BenchScore, BenchTask } from './benchmarks/types'
 import { runGate, type SolveTask } from './gate'
 
diff --git a/bench/src/gate.ts b/bench/src/gate.ts
index 9adb59f9..ad9afdd6 100644
--- a/bench/src/gate.ts
+++ b/bench/src/gate.ts
@@ -46,7 +46,7 @@ import type {
   Spend,
   SupervisedResult,
   TrajectoryReport,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import {
   definePersona,
   routerChatWithUsage,
@@ -56,7 +56,7 @@ import {
   InMemorySpawnJournal,
   runPersonified,
   trajectoryReport,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import type { BenchmarkAdapter, BenchTask } from './benchmarks/types'
 
 /** A fanout child's task: the prompt to solve with + the instance to grade against. The instance
diff --git a/bench/src/generate-eval/certify.ts b/bench/src/generate-eval/certify.ts
index f21b8fcc..e1186dfa 100644
--- a/bench/src/generate-eval/certify.ts
+++ b/bench/src/generate-eval/certify.ts
@@ -24,7 +24,7 @@ import { execSync } from 'node:child_process'
 import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { dirname, join, resolve } from 'node:path'
-import { routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 import { scoreTask, taskToPrompt } from '../search-bench/tasks'
 import { type EvalCertification, type GeneratedEval, generatedEvalSchemaVersion, parseCandidate } from './schema'
 
diff --git a/bench/src/humaneval-gate.mts b/bench/src/humaneval-gate.mts
index ef27b586..0bd02232 100644
--- a/bench/src/humaneval-gate.mts
+++ b/bench/src/humaneval-gate.mts
@@ -43,7 +43,7 @@
 
 import { composeStrategies } from './directives'
 import { basePrompt, type CheckResult, extractCode, type HumanEvalTask, loadHumanEval, runChecker } from './benchmarks/humaneval'
-import { type RouterConfig, routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { type RouterConfig, routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 import { selfConsistencySelect, verifierGroundedSelect } from './selector'
 import { type PairedLift, pairedLift, pool } from './stats.mts'
 
diff --git a/bench/src/humaneval-repair-gate.mts b/bench/src/humaneval-repair-gate.mts
index 88cd2474..3ebbc10b 100644
--- a/bench/src/humaneval-repair-gate.mts
+++ b/bench/src/humaneval-repair-gate.mts
@@ -20,7 +20,7 @@
  *     tsx src/humaneval-repair-gate.mts
  */
 import { type HumanEvalTask, basePrompt, extractCode, loadHumanEval, runChecker } from './benchmarks/humaneval'
-import { type RouterConfig, type ToolSpec, routerChatWithUsage, routerToolLoop } from '@tangle-network/agent-runtime/loops'
+import { type RouterConfig, type ToolSpec, routerChatWithUsage, routerToolLoop } from '@tangle-network/agent-runtime/kernel'
 import { verifierGroundedSelect } from './selector'
 import { type PairedLift, pairedLift, pool } from './stats.mts'
 
diff --git a/bench/src/research-shot.ts b/bench/src/research-shot.ts
index 1076fdc8..5dad6268 100644
--- a/bench/src/research-shot.ts
+++ b/bench/src/research-shot.ts
@@ -10,7 +10,7 @@
  * — the only difference is who drives the rounds (a flat best-of-k pool vs the real
  * `runLoop` kernel with analyst steering).
  */
-import { routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 
 export interface ShotCfg {
   model: string
diff --git a/bench/src/resolve-client.ts b/bench/src/resolve-client.ts
index e93d5987..5a03ab0f 100644
--- a/bench/src/resolve-client.ts
+++ b/bench/src/resolve-client.ts
@@ -24,7 +24,7 @@ import {
   inlineSandboxClient,
   resolveSandboxClient,
   type SandboxClient,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { Sandbox } from '@tangle-network/sandbox'
 import { makeSearchExecutor, webSearchTool } from './search-tool'
 
diff --git a/bench/src/router-executor.ts b/bench/src/router-executor.ts
index ebc34f90..c4b1dbd1 100644
--- a/bench/src/router-executor.ts
+++ b/bench/src/router-executor.ts
@@ -20,7 +20,7 @@ import {
   type ExecutorResult,
   inlineSandboxClient,
   type SandboxClient,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { runResearchShot, type ShotCfg } from './research-shot'
 
 export function routerSandboxClient(cfg: ShotCfg): SandboxClient {
diff --git a/bench/src/run-benchmarks-report.ts b/bench/src/run-benchmarks-report.ts
index ea0a248e..9a4f0de9 100644
--- a/bench/src/run-benchmarks-report.ts
+++ b/bench/src/run-benchmarks-report.ts
@@ -16,7 +16,7 @@ import {
   renderLeaderboardHtml,
   renderLeaderboardMarkdown,
   renderLeaderboardSvg,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import type { BenchCellTaskResult, RunBenchmarksReport } from './run-benchmarks'
 
 /** Project the runner's per-task results into `RunRecord`s the leaderboard engine reads. Cost/tokens are
diff --git a/bench/src/run-benchmarks.test.mts b/bench/src/run-benchmarks.test.mts
index 0291ee47..45c00738 100644
--- a/bench/src/run-benchmarks.test.mts
+++ b/bench/src/run-benchmarks.test.mts
@@ -137,7 +137,7 @@ async function main(): Promise<void> {
   assert.equal(leakyPrompts[1]!.includes(leakyGold), false, 'retry prompt redacts hidden gold fields')
   assert.match(leakyPrompts[1]!, /publicHint/)
 
-  const runtime = await import('@tangle-network/agent-runtime/loops')
+  const runtime = await import('@tangle-network/agent-runtime/kernel')
   if (runtime.openSandboxRun.toString().includes('beforeStart')) {
     // The default shot path supports benchmark-owned box setup/extract without real sandbox infra.
     const order: string[] = []
diff --git a/bench/src/run-benchmarks.ts b/bench/src/run-benchmarks.ts
index e55e5c3a..e72bcbeb 100644
--- a/bench/src/run-benchmarks.ts
+++ b/bench/src/run-benchmarks.ts
@@ -34,8 +34,8 @@ import type {
   AgentRunSpec,
   Deliverable,
   OpenSandboxRunOptions,
-} from '@tangle-network/agent-runtime/loops'
-import { openSandboxRun } from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
+import { openSandboxRun } from '@tangle-network/agent-runtime/kernel'
 import type { SandboxEvent } from '@tangle-network/sandbox'
 import { resolveAdapter } from './adapters'
 import type { BenchmarkAdapter, BenchScore, BenchTask } from './benchmarks/types'
diff --git a/bench/src/sandbox-run.ts b/bench/src/sandbox-run.ts
index 4271f387..79e67f98 100644
--- a/bench/src/sandbox-run.ts
+++ b/bench/src/sandbox-run.ts
@@ -14,7 +14,7 @@ import {
   type AgentRunSpec,
   type OutputAdapter,
   routerChatWithUsage,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 // `BackendType` is the sandbox SDK's harness union — its canonical home. agent-runtime consumes
 // it from there too; it is not re-exported from the loops barrel.
 import type { BackendType } from '@tangle-network/sandbox'
diff --git a/bench/src/search-bench/bridge.ts b/bench/src/search-bench/bridge.ts
index 2613499b..2a36549b 100644
--- a/bench/src/search-bench/bridge.ts
+++ b/bench/src/search-bench/bridge.ts
@@ -12,7 +12,7 @@
  * The bridge model id IS the harness selector (e.g. `claude-code/sonnet`,
  * `opencode/zai-coding-plan/glm-5.1`), so `harness` here is just the label.
  */
-import { createExecutor } from '@tangle-network/agent-runtime/loops'
+import { createExecutor } from '@tangle-network/agent-runtime/kernel'
 import type { SearchArm } from './profiles'
 import { armLabel } from './profiles'
 import type { SearchCellResult } from './run.mts'
diff --git a/bench/src/search-bench/parametric-check.mts b/bench/src/search-bench/parametric-check.mts
index 40667467..9780fb7e 100644
--- a/bench/src/search-bench/parametric-check.mts
+++ b/bench/src/search-bench/parametric-check.mts
@@ -11,7 +11,7 @@
  */
 import { writeFileSync } from 'node:fs'
 import { runPool } from '../run-pool'
-import { routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 import { freshTasks } from './tasks-fresh'
 import { scoreTask, taskToPrompt } from './tasks'
 
diff --git a/bench/src/search-bench/run.mts b/bench/src/search-bench/run.mts
index f99528db..10d97fbb 100644
--- a/bench/src/search-bench/run.mts
+++ b/bench/src/search-bench/run.mts
@@ -15,7 +15,7 @@
  */
 import { appendFileSync, mkdirSync, writeFileSync } from 'node:fs'
 import { dirname } from 'node:path'
-import { extractLlmCallEvent, openSandboxRun } from '@tangle-network/agent-runtime/loops'
+import { extractLlmCallEvent, openSandboxRun } from '@tangle-network/agent-runtime/kernel'
 import { Sandbox, type SandboxEvent } from '@tangle-network/sandbox'
 import { answerOutput, sandboxAgentRun, type WorkerBackendType } from '../sandbox-run'
 import { type BridgeCfg, runBridgeCell } from './bridge'
diff --git a/bench/src/search-tool.ts b/bench/src/search-tool.ts
index a21a1f5f..0205bc11 100644
--- a/bench/src/search-tool.ts
+++ b/bench/src/search-tool.ts
@@ -13,7 +13,7 @@
  * a recall-only answer; a valid-but-empty result returns an explicit "no results"
  * string the model can reason about.
  */
-import type { ToolSpec } from '@tangle-network/agent-runtime/loops'
+import type { ToolSpec } from '@tangle-network/agent-runtime/kernel'
 
 export const webSearchTool: ToolSpec = {
   type: 'function',
diff --git a/bench/src/swe-arena/fixtures/factory/loops-28/calibration.md b/bench/src/swe-arena/fixtures/factory/loops-28/calibration.md
index 51414cbb..47346e5e 100644
--- a/bench/src/swe-arena/fixtures/factory/loops-28/calibration.md
+++ b/bench/src/swe-arena/fixtures/factory/loops-28/calibration.md
@@ -43,5 +43,5 @@ All three fail at collection: `src/best-effort.ts`, `src/worker-clone.ts`, `src/
 - Tests spawn `git` in temporary directories with identity passed inline, and use symlink/chmod, so they are POSIX-only. The judge runs in the pinned factory container with network disabled and no operator environment. **Excluded: none.**
 - `tests/worker-evidence.test.ts` imports the bound constants (`EVIDENCE_MAX_CHARS` etc.) and asserts **relative to them** (`length ≤ EVIDENCE_MAX_CHARS`, tail contains `'v'.repeat(VERIFY_TAIL_CHARS)`) — exact values are the builder's choice; the names and semantics are contract and are in `spec.md`. Not trimmed: self-referencing bounds have behavioral content (bounding + tail retention).
 - One pinned prose contract: the best-effort delivery commit subject must contain `best-effort delivery from <label>` and `no worker passed the verify gate` — promoted into `spec.md` as acceptance criteria.
-- Judge imports `@tangle-network/agent-runtime/loops` (`gitWorkspace`, `runInWorkspace`) — a published npm dependency already in the base lockfile, not sibling unmerged work.
+- Judge imports `@tangle-network/agent-runtime/kernel` (`gitWorkspace`, `runInWorkspace`) — a published npm dependency already in the base lockfile, not sibling unmerged work.
 - Scope note: the merged PR also tuned worker budgets and prompts (`extensions/pi/`, `src/top-model.ts`); the judge does not cover those, so this instance grades the three library modules only. The spec describes the modules as the deliverable.
diff --git a/bench/src/swe-arena/fixtures/gen1-salvage/cand1-76a8590.diff b/bench/src/swe-arena/fixtures/gen1-salvage/cand1-76a8590.diff
index 7ff4135e..ff0ab3ae 100644
--- a/bench/src/swe-arena/fixtures/gen1-salvage/cand1-76a8590.diff
+++ b/bench/src/swe-arena/fixtures/gen1-salvage/cand1-76a8590.diff
@@ -71,7 +71,7 @@ index e83e6d9..3529d79 100644
 --- a/extensions/pi/loops.ts
 +++ b/extensions/pi/loops.ts
 @@ -42,7 +42,7 @@ import {
- } from '@tangle-network/agent-runtime/loops'
+ } from '@tangle-network/agent-runtime/kernel'
  import { resumeStrategyLoop } from '../../src/runner.js'
  import { cancelStrategyLoop, listStrategyLoops, renderStrategyLoop, startStrategyLoop } from '../../src/strategy-loop.js'
 -import { type BestEffortDelivery, deliverBestEffortPatch } from '../../src/best-effort.js'
diff --git a/bench/src/swe-bench-env.ts b/bench/src/swe-bench-env.ts
index 7c0ac562..67747770 100644
--- a/bench/src/swe-bench-env.ts
+++ b/bench/src/swe-bench-env.ts
@@ -16,7 +16,7 @@ import { execFile } from 'node:child_process'
 import { cpSync, existsSync, lstatSync, mkdtempSync, readdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs'
 import { join, sep } from 'node:path'
 import { promisify } from 'node:util'
-import type { AgenticSurface, AgenticTask, AgenticTool, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/loops'
+import type { AgenticSurface, AgenticTask, AgenticTool, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/kernel'
 import { runVenvPython } from './benchmarks/_harness'
 import { createSweBenchAdapter, type SweBenchAdapterOptions } from './benchmarks/swe-bench'
 import type { BenchTask } from './benchmarks/types'
diff --git a/bench/src/swe-emit-patch.mts b/bench/src/swe-emit-patch.mts
index f837f706..51d7e124 100644
--- a/bench/src/swe-emit-patch.mts
+++ b/bench/src/swe-emit-patch.mts
@@ -22,8 +22,8 @@
  */
 import { execFile } from 'node:child_process'
 import { promisify } from 'node:util'
-import type { AgenticSurface, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/loops'
-import { refine, runAgentic } from '@tangle-network/agent-runtime/loops'
+import type { AgenticSurface, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/kernel'
+import { refine, runAgentic } from '@tangle-network/agent-runtime/kernel'
 import { createSweBenchEnvironment, SWE_SEED_PROMPT, SWE_SEED_PROMPT_WITH_RUN } from './swe-bench-env'
 
 const exec = promisify(execFile)
diff --git a/bench/src/swe-improve.mts b/bench/src/swe-improve.mts
index a1b3f7ec..53b98f10 100644
--- a/bench/src/swe-improve.mts
+++ b/bench/src/swe-improve.mts
@@ -32,8 +32,8 @@ import {
   canonicalCandidateDigest,
   type AgentProfile,
 } from '@tangle-network/agent-interface'
-import type { AgenticSurface, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/loops'
-import { refine, runAgentic } from '@tangle-network/agent-runtime/loops'
+import type { AgenticSurface, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/kernel'
+import { refine, runAgentic } from '@tangle-network/agent-runtime/kernel'
 import type { DispatchContext, JudgeConfig, Scenario } from '@tangle-network/agent-eval/contract'
 import { createSweBenchAdapter } from './benchmarks/swe-bench'
 import type { BenchTask } from './benchmarks/types'
diff --git a/bench/src/swe-local-proof.mts b/bench/src/swe-local-proof.mts
index c45a06b6..6847a083 100644
--- a/bench/src/swe-local-proof.mts
+++ b/bench/src/swe-local-proof.mts
@@ -20,8 +20,8 @@ import { mkdtempSync, rmSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { promisify } from 'node:util'
-import type { AgenticSurface, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/loops'
-import { refine, runAgentic } from '@tangle-network/agent-runtime/loops'
+import type { AgenticSurface, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/kernel'
+import { refine, runAgentic } from '@tangle-network/agent-runtime/kernel'
 import type { BenchScore } from './benchmarks/types'
 import { createSweBenchEnvironment } from './swe-bench-env'
 
diff --git a/bench/src/swe-repro-calibrate.mts b/bench/src/swe-repro-calibrate.mts
index cffef10a..b06db532 100644
--- a/bench/src/swe-repro-calibrate.mts
+++ b/bench/src/swe-repro-calibrate.mts
@@ -27,7 +27,7 @@ import { appendFileSync, cpSync, mkdtempSync, rmSync, writeFileSync } from 'node
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { promisify } from 'node:util'
-import type { AgenticTask, ArtifactHandle } from '@tangle-network/agent-runtime/loops'
+import type { AgenticTask, ArtifactHandle } from '@tangle-network/agent-runtime/kernel'
 import type { BenchTask } from './benchmarks/types'
 import { createSweBenchEnvironment, resolveImageForMetadata } from './swe-bench-env'
 import {
diff --git a/bench/src/swe-self-improve.mts b/bench/src/swe-self-improve.mts
index 069f3b31..06bad9e5 100644
--- a/bench/src/swe-self-improve.mts
+++ b/bench/src/swe-self-improve.mts
@@ -10,7 +10,7 @@
 import { mkdtempSync, rmSync } from 'node:fs'
 import { join } from 'node:path'
 import { createChatClient } from '@tangle-network/agent-eval'
-import { refine, runAgentic, runStrategyEvolution, sample } from '@tangle-network/agent-runtime/loops'
+import { refine, runAgentic, runStrategyEvolution, sample } from '@tangle-network/agent-runtime/kernel'
 import { createSweBenchEnvironment } from './swe-bench-env'
 
 async function main(): Promise<void> {
diff --git a/bench/src/swe-stream.mts b/bench/src/swe-stream.mts
index df73014a..722fd13c 100644
--- a/bench/src/swe-stream.mts
+++ b/bench/src/swe-stream.mts
@@ -65,8 +65,8 @@ import { homedir } from 'node:os'
 import { join } from 'node:path'
 import { promisify } from 'node:util'
 import { applyKnowledgeWriteBlocks, buildKnowledgeIndex, initKnowledgeBase, searchKnowledge } from '@tangle-network/agent-knowledge'
-import type { AgenticSurface, AgenticTask, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/loops'
-import { refine, runAgentic } from '@tangle-network/agent-runtime/loops'
+import type { AgenticSurface, AgenticTask, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/kernel'
+import { refine, runAgentic } from '@tangle-network/agent-runtime/kernel'
 import type { BenchTask } from './benchmarks/types'
 import { createSweBenchEnvironment, resolveImageForMetadata, SWE_SEED_PROMPT } from './swe-bench-env'
 import {
diff --git a/bench/src/swe-structural.mts b/bench/src/swe-structural.mts
index 2fe34a41..baeaa7f2 100644
--- a/bench/src/swe-structural.mts
+++ b/bench/src/swe-structural.mts
@@ -49,8 +49,8 @@ import { execFile } from 'node:child_process'
 import { appendFileSync, existsSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
 import { join } from 'node:path'
 import { promisify } from 'node:util'
-import type { AgenticSurface, AgenticTask, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/loops'
-import { refine, runAgentic } from '@tangle-network/agent-runtime/loops'
+import type { AgenticSurface, AgenticTask, ArtifactHandle, SurfaceScore } from '@tangle-network/agent-runtime/kernel'
+import { refine, runAgentic } from '@tangle-network/agent-runtime/kernel'
 import type { BenchTask } from './benchmarks/types'
 import { createSweBenchEnvironment, resolveImageForMetadata, SWE_SEED_PROMPT } from './swe-bench-env'
 import {
diff --git a/bench/src/tb-container-executor.test.mts b/bench/src/tb-container-executor.test.mts
index d738866d..3ffc125d 100644
--- a/bench/src/tb-container-executor.test.mts
+++ b/bench/src/tb-container-executor.test.mts
@@ -7,7 +7,7 @@ import type {
   Executor,
   ExecutorContext,
   ExecutorResult,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import {
   buildTbDockerExecArgs,
   createTbContainerExecutor,
diff --git a/bench/src/worker-blender.ts b/bench/src/worker-blender.ts
index a0ff7a64..6e03c6f8 100644
--- a/bench/src/worker-blender.ts
+++ b/bench/src/worker-blender.ts
@@ -18,7 +18,7 @@ import type { Span } from '@tangle-network/agent-eval'
 import type { BenchTask } from './benchmarks/types'
 import { DEFAULT_BLENDER_DIRECTIVE } from './directives'
 import { runRefineLoop } from './refine-loop'
-import { routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 
 export { DEFAULT_BLENDER_DIRECTIVE } from './directives'
 
diff --git a/bench/src/worker-browser.ts b/bench/src/worker-browser.ts
index 8a6c717b..013ec70a 100644
--- a/bench/src/worker-browser.ts
+++ b/bench/src/worker-browser.ts
@@ -18,7 +18,7 @@
 import { readFile } from 'node:fs/promises'
 import type { Span } from '@tangle-network/agent-eval'
 import type { BenchTask } from './benchmarks/types'
-import { routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 
 export interface BrowserLocalConfig {
   routerBaseUrl: string
diff --git a/bench/src/worker-build123d.ts b/bench/src/worker-build123d.ts
index 583fda52..179af399 100644
--- a/bench/src/worker-build123d.ts
+++ b/bench/src/worker-build123d.ts
@@ -21,7 +21,7 @@ import type { Span } from '@tangle-network/agent-eval'
 import type { BenchTask } from './benchmarks/types'
 import { DEFAULT_BUILD123D_DIRECTIVE } from './directives'
 import { runRefineLoop } from './refine-loop'
-import { routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 
 export { DEFAULT_BUILD123D_DIRECTIVE } from './directives'
 
diff --git a/bench/src/worker-cad.ts b/bench/src/worker-cad.ts
index 9873e393..2799fd51 100644
--- a/bench/src/worker-cad.ts
+++ b/bench/src/worker-cad.ts
@@ -17,7 +17,7 @@ import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { promisify } from 'node:util'
-import { acquireSandbox, routerChatWithUsage } from '@tangle-network/agent-runtime/loops'
+import { acquireSandbox, routerChatWithUsage } from '@tangle-network/agent-runtime/kernel'
 import { Sandbox } from '@tangle-network/sandbox'
 import type { Span } from '@tangle-network/agent-eval'
 import type { BenchTask } from './benchmarks/types'
diff --git a/bench/src/worker.ts b/bench/src/worker.ts
index faf4e1c6..ed831195 100644
--- a/bench/src/worker.ts
+++ b/bench/src/worker.ts
@@ -10,7 +10,7 @@ import {
   type AgentRunSpec,
   type Deliverable,
   openSandboxRun,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { Sandbox } from '@tangle-network/sandbox'
 import type { BenchTask } from './benchmarks/types'
 import {
diff --git a/bench/tsconfig.json b/bench/tsconfig.json
index 0662034a..32d1bcd5 100644
--- a/bench/tsconfig.json
+++ b/bench/tsconfig.json
@@ -13,7 +13,7 @@
     "resolveJsonModule": true,
     "paths": {
       "@tangle-network/agent-runtime": ["../src/index.ts"],
-      "@tangle-network/agent-runtime/loops": ["../src/runtime/index.ts"],
+      "@tangle-network/agent-runtime/kernel": ["../src/runtime/index.ts"],
       "@tangle-network/sandbox": ["../node_modules/@tangle-network/sandbox"]
     }
   },
diff --git a/docs/MAINTAINING.md b/docs/MAINTAINING.md
index 13e62a7b..d69a13c2 100644
--- a/docs/MAINTAINING.md
+++ b/docs/MAINTAINING.md
@@ -24,8 +24,9 @@ turns them into a red build. The decision table's "do this, not that" is *judgme
 
 - Produced by `pnpm run docs:api` (TypeDoc + `typedoc-plugin-markdown`, config in
   `typedoc.json`). Entry points are the source files behind the public `package.json`
-  `exports` subpaths (the `./loops` alias of `./runtime` is intentionally not a second
-  entry — same source file).
+  `exports` subpaths. `./kernel` is the one subpath whose public name differs from its
+  source path (`src/runtime/index.ts`); `scripts/check-docs-freshness.mjs` resolves it
+  through a curated subpath→entryPoint map.
 - It reads **source** (`src/**`), not `dist/`. No build is required first.
 - It is **committed** to the repo so it is grep-able and PR-reviewable like the rest
   of `docs/`, and so the freshness gate can diff against it.
@@ -86,9 +87,10 @@ seven classes:
    §3 (not §5–§7 narrative prose), code-fences skipped, and lowercase method/field/option
    names + ALL-CAPS labels + generic params are not flagged — only a renamed, removed, or
    fabricated exported Type. This guards the bulk of the doc, not just the §2 table.
-5. **Exports-subpath coverage** — every `package.json` `exports` subpath (except the
-   `./loops`→`./runtime` alias) must have a matching `typedoc.json` entryPoint, so a new
-   public subpath can't ship undocumented (no api page, clean diff, symbols unguarded).
+5. **Exports-subpath coverage** — every `package.json` `exports` subpath must have a
+   matching `typedoc.json` entryPoint (name-derived, or via the curated map for `./kernel`),
+   so a new public subpath can't ship undocumented (no api page, clean diff, symbols
+   unguarded).
 6. **Prose-symbol resolution** — every backticked symbol in the **curated docs**
    (`canonical-api.md`, `concepts.md`, `architecture.md`), outside fenced code, must resolve
    to an export in `src/**` ∪ `bench/src/**` ∪ any `@tangle-network/*` substrate package
diff --git a/docs/agent-managed-compute/README.md b/docs/agent-managed-compute/README.md
index f5fae938..27305668 100644
--- a/docs/agent-managed-compute/README.md
+++ b/docs/agent-managed-compute/README.md
@@ -81,9 +81,9 @@ This table tracks the existing documents that materially overlap this plan.
 
 | Capability | Current status | Evidence |
 |---|---|---|
-| Agent calls coordination actions through real HTTP MCP | Implemented in one process | `tests/loops/coordination-mcp.test.ts` |
-| Driver dynamically spawns, waits for, and selects children | Implemented | `tests/loops/coordination-driver.test.ts` |
-| Recursive driver starts another driver | Implemented | `tests/loops/coordination-driver.test.ts` |
+| Agent calls coordination actions through real HTTP MCP | Implemented in one process | `tests/kernel/coordination-mcp.test.ts` |
+| Driver dynamically spawns, waits for, and selects children | Implemented | `tests/kernel/coordination-driver.test.ts` |
+| Recursive driver starts another driver | Implemented | `tests/kernel/coordination-driver.test.ts` |
 | Shared budget and depth limits across a tree | Implemented | `src/runtime/supervise/budget.ts`, `src/runtime/supervise/scope.ts` |
 | Provider-neutral compute adapter | Implemented | `src/runtime/environment-provider.ts` |
 | One-shot delegation restart recovery | Partially implemented | `src/mcp/task-queue.ts` |
diff --git a/docs/agent-managed-compute/current-state.md b/docs/agent-managed-compute/current-state.md
index af2fdbe5..74cbbfbe 100644
--- a/docs/agent-managed-compute/current-state.md
+++ b/docs/agent-managed-compute/current-state.md
@@ -13,10 +13,10 @@ The full suite includes these focused local coordination files:
 
 ```bash
 pnpm exec vitest run \
-  tests/loops/coordination-mcp.test.ts \
-  tests/loops/supervisor-agent.test.ts \
-  tests/loops/coordination.test.ts \
-  tests/loops/event-bus.test.ts \
+  tests/kernel/coordination-mcp.test.ts \
+  tests/kernel/supervisor-agent.test.ts \
+  tests/kernel/coordination.test.ts \
+  tests/kernel/event-bus.test.ts \
   tests/mcp/task-queue-durable.test.ts \
   src/runtime/environment-provider.test.ts
 ```
diff --git a/docs/api/index.md b/docs/api/index.md
index a63109d7..94b0b0b4 100644
--- a/docs/api/index.md
+++ b/docs/api/index.md
@@ -5925,7 +5925,7 @@ Findings to fall back to when the generation had NO failing cells, so a
 
 ##### budget
 
-> **budget**: [`Budget`](runtime.md#budget-13)
+> **budget**: [`Budget`](#budget-4)
 
 ##### readinessCheck?
 
@@ -5961,7 +5961,7 @@ Findings to fall back to when the generation had NO failing cells, so a
 
 ##### runSupervised?
 
-> `optional` **runSupervised?**: (`profile`, `task`, `opts`) => `Promise`\<[`SupervisedResult`](runtime.md#supervisedresult)\<`unknown`\>\>
+> `optional` **runSupervised?**: (`profile`, `task`, `opts`) => `Promise`\<[`SupervisedResult`](#supervisedresult)\<`unknown`\>\>
 
 ###### Parameters
 
@@ -5979,7 +5979,7 @@ Findings to fall back to when the generation had NO failing cells, so a
 
 ###### Returns
 
-`Promise`\<[`SupervisedResult`](runtime.md#supervisedresult)\<`unknown`\>\>
+`Promise`\<[`SupervisedResult`](#supervisedresult)\<`unknown`\>\>
 
 ##### candidateArtifacts?
 
@@ -6209,7 +6209,7 @@ Findings to fall back to when the generation had NO failing cells, so a
 
 ##### supervised
 
-> **supervised**: [`SupervisedResult`](runtime.md#supervisedresult)\<`unknown`\>
+> **supervised**: [`SupervisedResult`](#supervisedresult)\<`unknown`\>
 
 ##### metadata
 
@@ -6255,7 +6255,7 @@ Findings to fall back to when the generation had NO failing cells, so a
 
 ##### budget
 
-> **budget**: [`Budget`](runtime.md#budget-13)
+> **budget**: [`Budget`](#budget-4)
 
 ##### backend?
 
@@ -6287,7 +6287,7 @@ Findings to fall back to when the generation had NO failing cells, so a
 
 ##### runSupervised?
 
-> `optional` **runSupervised?**: (`profile`, `task`, `opts`) => `Promise`\<[`SupervisedResult`](runtime.md#supervisedresult)\<`unknown`\>\>
+> `optional` **runSupervised?**: (`profile`, `task`, `opts`) => `Promise`\<[`SupervisedResult`](#supervisedresult)\<`unknown`\>\>
 
 ###### Parameters
 
@@ -6305,7 +6305,7 @@ Findings to fall back to when the generation had NO failing cells, so a
 
 ###### Returns
 
-`Promise`\<[`SupervisedResult`](runtime.md#supervisedresult)\<`unknown`\>\>
+`Promise`\<[`SupervisedResult`](#supervisedresult)\<`unknown`\>\>
 
 ***
 
@@ -6416,7 +6416,7 @@ The supervisor-authored harness profiles — one fanout item (one worktree-CLI l
 
 ##### budget
 
-> **budget**: [`Budget`](runtime.md#budget-13)
+> **budget**: [`Budget`](#budget-4)
 
 **`Experimental`**
 
@@ -6636,6 +6636,34 @@ Max research rounds (correct-on-veto remediation). Default 1.
 
 ***
 
+### AnalystRegistry
+
+#### Properties
+
+##### kinds
+
+> `readonly` **kinds**: readonly `object`[]
+
+##### run
+
+> `readonly` **run**: (`kindId`, `trace`) => `Promise`\<`unknown`\>
+
+###### Parameters
+
+###### kindId
+
+`string`
+
+###### trace
+
+`unknown`
+
+###### Returns
+
+`Promise`\<`unknown`\>
+
+***
+
 ### ModelInfo
 
 A model entry as returned by the Tangle Router `/v1/models` endpoint.
@@ -7692,209 +7720,1059 @@ Stable runtime-side identifier. Adapters may translate to their own primary key.
 
 ##### cost
 
-> **cost**: [`RuntimeRunCost`](#runtimeruncost)
+> **cost**: [`RuntimeRunCost`](#runtimeruncost)
+
+##### startedAt
+
+> **startedAt**: `string`
+
+##### completedAt?
+
+> `optional` **completedAt?**: `string`
+
+##### metadata?
+
+> `optional` **metadata?**: `Record`\<`string`, `unknown`\>
+
+***
+
+### RuntimeRunPersistenceAdapter
+
+**`Stable`**
+
+#### Methods
+
+##### upsert()
+
+> **upsert**(`row`): `void` \| `Promise`\<`void`\>
+
+Called once when `handle.persist()` runs. Implementations write `row` to
+their durable store (D1, postgres, KV) and return whatever the consumer
+wants the caller to see (often the storage-side row id). Errors thrown
+here propagate out of `persist()` so the caller can decide whether to
+retry or log-and-continue.
+
+###### Parameters
+
+###### row
+
+[`RuntimeRunRow`](#runtimerunrow)
+
+###### Returns
+
+`void` \| `Promise`\<`void`\>
+
+***
+
+### RuntimeRunOptions
+
+**`Stable`**
+
+#### Properties
+
+##### workspaceId
+
+> **workspaceId**: `string`
+
+##### sessionId?
+
+> `optional` **sessionId?**: `string`
+
+##### agentId?
+
+> `optional` **agentId?**: `string`
+
+##### taskSpec
+
+> **taskSpec**: [`AgentTaskSpec`](#agenttaskspec)
+
+##### scenarioId?
+
+> `optional` **scenarioId?**: `string`
+
+##### adapter?
+
+> `optional` **adapter?**: [`RuntimeRunPersistenceAdapter`](#runtimerunpersistenceadapter)
+
+Optional persistence adapter; if omitted, `persist()` is a no-op.
+
+##### id?
+
+> `optional` **id?**: `string`
+
+Override the row id; default = `${taskSpec.id}:${random suffix}`.
+
+##### now?
+
+> `optional` **now?**: () => `number`
+
+Override the clock; default = `Date.now()`. Useful for deterministic tests.
+
+###### Returns
+
+`number`
+
+***
+
+### RuntimeRunHandle
+
+**`Stable`**
+
+#### Properties
+
+##### id
+
+> `readonly` **id**: `string`
+
+Stable id assigned at start.
+
+##### workspaceId
+
+> `readonly` **workspaceId**: `string`
+
+##### sessionId
+
+> `readonly` **sessionId**: `string` \| `undefined`
+
+##### taskSpec
+
+> `readonly` **taskSpec**: [`AgentTaskSpec`](#agenttaskspec)
+
+##### status
+
+> `readonly` **status**: [`RuntimeRunStatus`](#runtimerunstatus)
+
+#### Methods
+
+##### observe()
+
+> **observe**(`event`): `void`
+
+Observe a single `RuntimeStreamEvent`. The handle ignores non-cost events
+(text deltas, tool calls) silently so consumers can pipe the whole stream
+through `handle.observe`. `llm_call` events update the ledger.
+
+###### Parameters
+
+###### event
+
+[`RuntimeStreamEvent`](#runtimestreamevent)
+
+###### Returns
+
+`void`
+
+##### cost()
+
+> **cost**(): [`RuntimeRunCost`](#runtimeruncost)
+
+Snapshot of the current cost ledger. Safe to call at any time.
+
+###### Returns
+
+[`RuntimeRunCost`](#runtimeruncost)
+
+##### complete()
+
+> **complete**(`input`): `void`
+
+Transition to a terminal state. Idempotent for the same status; throws
+`RuntimeRunStateError` for a different terminal status (state machines
+don't time-travel).
+
+###### Parameters
+
+###### input
+
+[`RuntimeRunCompleteInput`](#runtimeruncompleteinput)
+
+###### Returns
+
+`void`
+
+##### toRow()
+
+> **toRow**(`metadata?`): [`RuntimeRunRow`](#runtimerunrow)
+
+Build the current row without writing it. Useful for tests + dry runs.
+
+###### Parameters
+
+###### metadata?
+
+`Record`\<`string`, `unknown`\>
+
+###### Returns
+
+[`RuntimeRunRow`](#runtimerunrow)
+
+##### persist()
+
+> **persist**(`metadata?`): `Promise`\<`void`\>
+
+Persist the current row via the configured adapter. Must be called after
+`complete()`. Idempotent for the same terminal state (the adapter sees
+the same row on retry).
+
+###### Parameters
+
+###### metadata?
+
+`Record`\<`string`, `unknown`\>
+
+###### Returns
+
+`Promise`\<`void`\>
+
+***
+
+### FinalizeContext
+
+What a finalizer gets to decide with. `delivered` is the ONLY output material; `allSettled`
+ and `tree` are metadata (record a disagreement, count the downs); `blobs` re-reads delivered
+ artifacts only; `budget` is the conserved-pool readout at finalize time.
+
+#### Properties
+
+##### delivered
+
+> `readonly` **delivered**: readonly [`DeliveredOutput`](runtime.md#deliveredoutput)[]
+
+##### allSettled
+
+> `readonly` **allSettled**: readonly [`FinalizerSettled`](runtime.md#finalizersettled)[]
+
+##### tree
+
+> `readonly` **tree**: [`TreeView`](runtime.md#treeview)
+
+##### blobs
+
+> `readonly` **blobs**: `Pick`\<[`ResultBlobStore`](runtime.md#resultblobstore), `"get"`\>
+
+##### budget
+
+> `readonly` **budget**: `Readonly`\<\{ `tokensLeft`: `number`; `usdLeft`: `number`; `usdCapped`: `boolean`; `deadlineMs`: `number`; `reservedTokens`: `number`; \}\>
+
+***
+
+### Executor
+
+The leaf runtime — ONE open interface, not a closed union. `execute` returns a
+`Promise<ExecutorResult>` for one-shot executors OR an `AsyncIterable<UsageEvent>` for
+streaming ones; a streaming executor reports incremental normalized usage as it runs
+(the budget pool reconciles against it) and exposes its terminal artifact via
+`resultArtifact()`. Both shapes normalize usage to `UsageEvent` so the conserved pool
+meters every runtime identically.
+
+Built-in implementations (in `runtime.ts`, NOT variants here): router/inline (a direct
+Router/HTTP inference call, no box), sandbox (COMPOSES `runAgentRounds` as a leaf, forwarding
+PR #150's optional `lineage` passthrough — does NOT reinvent checkpoint/fork), cli
+(Halo/RLM subprocess; `budgetExempt`, excluded from equal-k by construction). A user's
+own agent (mastra/agno/raw HTTP/anything) is first-class by implementing this interface.
+
+#### Type Parameters
+
+##### Out
+
+`Out`
+
+#### Properties
+
+##### runtime
+
+> `readonly` **runtime**: [`Runtime`](runtime.md#runtime-2)
+
+Stable runtime tag for traces + the equal-k exemption check.
+
+##### budgetExempt?
+
+> `readonly` `optional` **budgetExempt?**: `boolean`
+
+When true, this executor's spend is NOT metered against the conserved pool and its
+iterations are excluded from the equal-k assertion (a `cli` subprocess without
+token accounting). Fail-loud everywhere else: a metered executor MUST report usage.
+
+#### Methods
+
+##### execute()
+
+> **execute**(`task`, `signal`): `Promise`\<[`ExecutorResult`](runtime.md#executorresult)\<`Out`\>\> \| `AsyncIterable`\<[`UsageEvent`](runtime.md#usageevent), `any`, `any`\>
+
+One-shot → resolves a `ExecutorResult`; streaming → yields incremental `UsageEvent`s and
+the terminal artifact is read from `resultArtifact()` after the stream drains.
+`signal` is the spawn-scoped abort (chains the acquire lifecycle for sandbox).
+
+###### Parameters
+
+###### task
+
+`unknown`
+
+###### signal
+
+`AbortSignal`
+
+###### Returns
+
+`Promise`\<[`ExecutorResult`](runtime.md#executorresult)\<`Out`\>\> \| `AsyncIterable`\<[`UsageEvent`](runtime.md#usageevent), `any`, `any`\>
+
+##### deliver()?
+
+> `optional` **deliver**(`msg`): `void`
+
+Optional inbox: receive an out-of-band message from the driver mid-run (the `send`/`steer_agent`
+verb). A streaming executor drains pending messages between turns and folds them into the next
+step (a steer / interrupt / resume). A one-shot executor that can't be steered mid-flight omits
+this; `Scope.send` then returns `false` for it. Never throws — a malformed message is the
+executor's to ignore.
+
+###### Parameters
+
+###### msg
+
+`unknown`
+
+###### Returns
+
+`void`
+
+##### progress()?
+
+> `optional` **progress**(): [`ExecutorProgress`](runtime.md#executorprogress) \| `undefined`
+
+Optional LIVE progress: what this worker is doing RIGHT NOW, read synchronously and
+cheaply while `execute` is still streaming. The scope already derives activity timing,
+turns, and spend from the metered usage stream for EVERY executor; this adds only what
+the executor alone knows — the harness's tool/file activity, its own turn count, and how
+many delivered steers it has not yet folded in. Never throws; a read that cannot be
+answered returns `undefined`.
+
+This is the observe half of steering: `deliver` lets a driver correct a worker, and this
+is the evidence it corrects FROM. An executor that implements neither cannot be supervised
+mid-flight — it can only be waited on.
+
+###### Returns
+
+[`ExecutorProgress`](runtime.md#executorprogress) \| `undefined`
+
+##### traceSource()?
+
+> `optional` **traceSource**(): [`TraceSource`](runtime.md#tracesource-1) \| `undefined`
+
+Optional live tool-call trace for the ONLINE detectors (`watchTrace`). An executor that
+can see its worker's tool calls exposes them here, so a supervisor can run the streaming
+repeated-action / error-streak panel over a RUNNING worker and raise a `finding` the
+moment it loops, instead of discovering it at settle. Omitted = no online detection for
+this runtime (the settle-time analyzers still work).
+
+###### Returns
+
+[`TraceSource`](runtime.md#tracesource-1) \| `undefined`
+
+##### teardown()
+
+> **teardown**(`grace`): `Promise`\<\{ `destroyed`: `boolean`; \}\>
+
+Tear the executor's resources down. `grace` mirrors the OTP shutdown spec
+(`'brutalKill'` = immediate, a number = ms grace, `'infinity'` = await clean exit).
+
+###### Parameters
+
+###### grace
+
+`number` \| `"brutalKill"` \| `"infinity"`
+
+###### Returns
+
+`Promise`\<\{ `destroyed`: `boolean`; \}\>
+
+##### resultArtifact()
+
+> **resultArtifact**(): `object`
+
+The replay source (B1): the content-addressed `outRef` + the materialized output the
+driver branched on, its verdict, and the conserved spend. Read once, after settle.
+
+###### Returns
+
+`object`
+
+###### outRef
+
+> **outRef**: `string`
+
+###### out
+
+> **out**: `Out`
+
+###### verdict?
+
+> `optional` **verdict?**: `DefaultVerdict`
+
+###### spent
+
+> **spent**: [`Spend`](#spend)
+
+##### metered()?
+
+> `optional` **metered**(): [`Spend`](#spend) \| `undefined`
+
+A driver-executor's OWN-inference subtree total (rolled up from its nested tree's `metered`
+events) — the parent scope journals it as a `metered` event for this node on settle, on BOTH
+the done AND the down/crash paths, so a crashed sub-driver's partial inference still re-homes
+(the pool already debited it via `observe`; the journal must match). NOT reconciled, so it never
+trips the reservation clamp. Read on settle, valid after `execute` resolves OR throws. Leaf
+executors omit it (returns `undefined`).
+
+###### Returns
+
+[`Spend`](#spend) \| `undefined`
+
+***
+
+### AgentSpec
+
+`AgentProfile` does NOT carry a `harness`/backend field — `harness` lives on the
+sandbox SDK's `BackendConfig`, not the portable profile. So an agent is mapped to its
+executor through this MINIMAL wrapper, never by fabricating a field onto `AgentProfile`.
+
+Resolution (in `runtime.ts`):
+ - `executor` present        → BYO: use it verbatim (a user's own `Executor`).
+ - `harness === null`        → router/inline: a direct Router call, no box.
+ - `harness` is a `BackendType` → sandbox: compose `runAgentRounds` against `profile` on that backend.
+Fail loud on an unresolvable spec (no executor and an unknown harness).
+
+#### Properties
+
+##### profile
+
+> `readonly` **profile**: `AgentProfile`
+
+##### harness
+
+> `readonly` **harness**: `BackendType` \| `null`
+
+`null` selects router/inline; a `BackendType` selects the sandboxed harness.
+
+##### executor?
+
+> `readonly` `optional` **executor?**: [`Executor`](#executor-2)\<`unknown`\>
+
+Bring-your-own executor: when set, overrides harness-based resolution entirely.
+
+***
+
+### ExecutorRegistry
+
+The OPEN resolver: maps an `AgentSpec` to a `ExecutorFactory`. The default
+registry resolves the three built-ins AND accepts a BYO `executor`/factory; callers
+register more runtimes by name. NOT a closed switch — registration is the extension
+point, mirroring the open `Executor` interface.
+
+#### Methods
+
+##### register()
+
+> **register**\<`Out`\>(`runtime`, `factory`): `void`
+
+Register a factory for a named runtime. Throws on a duplicate name (fail loud).
+
+###### Type Parameters
+
+###### Out
+
+`Out`
+
+###### Parameters
+
+###### runtime
+
+[`Runtime`](runtime.md#runtime-2)
+
+###### factory
+
+[`ExecutorFactory`](runtime.md#executorfactory)\<`Out`\>
+
+###### Returns
+
+`void`
+
+##### resolve()
+
+> **resolve**\<`Out`\>(`spec`): \{ `succeeded`: `true`; `value`: [`ExecutorFactory`](runtime.md#executorfactory)\<`Out`\>; \} \| \{ `succeeded`: `false`; `error`: `string`; \}
+
+Resolve a spec to a factory. Precedence: a BYO `spec.executor` → a trivial factory
+returning it; else `harness === null` → the `'router'` factory; else a registered
+factory for the harness-derived runtime. Returns a typed outcome — the caller
+inspects `succeeded` before `value` (no silent fallback).
+
+###### Type Parameters
+
+###### Out
+
+`Out`
+
+###### Parameters
+
+###### spec
+
+[`AgentSpec`](#agentspec)
+
+###### Returns
+
+\{ `succeeded`: `true`; `value`: [`ExecutorFactory`](runtime.md#executorfactory)\<`Out`\>; \} \| \{ `succeeded`: `false`; `error`: `string`; \}
+
+***
+
+### Budget
+
+A budget envelope on a spawn or the root. All ceilings; the pool reserves against them.
+
+#### Properties
+
+##### maxIterations
+
+> `readonly` **maxIterations**: `number`
+
+##### maxTokens
+
+> `readonly` **maxTokens**: `number`
+
+##### maxUsd?
+
+> `readonly` `optional` **maxUsd?**: `number`
+
+##### deadlineMs?
+
+> `readonly` `optional` **deadlineMs?**: `number`
+
+***
+
+### Spend
+
+Conserved spend, reconciled from the normalized `UsageEvent` stream. Tokens and usd
+ are separate channels (never folded).
+
+#### Properties
+
+##### iterations
+
+> **iterations**: `number`
+
+##### tokens
+
+> **tokens**: [`LoopTokenUsage`](runtime.md#looptokenusage)
+
+##### usdKnown?
+
+> `optional` **usdKnown?**: `boolean`
+
+Dollar accounting is known unless explicitly false. A false value must not be treated as $0
+ when enforcing a dollar-denominated comparison or limit.
+
+##### usd
+
+> **usd**: `number`
+
+##### ms
+
+> **ms**: `number`
+
+***
+
+### Scope
+
+The budget-conserving reactive scope an `Agent.act` runs inside. `spawn` reserves
+budget atomically from the shared pool and fails closed when the pool cannot cover it.
+`next()` waits for one settlement from this scope's live set; `view` reads live state,
+not the replay log.
+
+#### Type Parameters
+
+##### Out
+
+`Out`
+
+#### Properties
+
+##### signal
+
+> `readonly` **signal**: `AbortSignal`
+
+This scope's abort signal — aborted when the run is cancelled, a breaker trips, the pool
+ is exhausted, or a parent scope cascades. A long-running driver `act` over this scope reads
+ it to break promptly (the conserved pool + driver-stop are the other bounds). A nested
+ scope carries its own signal, chained off its driver child's abort.
+
+##### resume?
+
+> `readonly` `optional` **resume?**: [`ResumedWork`](runtime.md#resumedwork)\<`Out`\>
+
+Prior committed work, present ONLY on a resumed run (`undefined` on a fresh run, which is
+every run that did not pass `SupervisorOpts.resume`). The supervisor `loadTree`s the journal
+first; when a non-empty tree exists it rehydrates the already-settled children (via
+`replaySpawnTree`) and hands them here so a resume-aware `act` re-uses them instead of
+re-spawning committed work. A resume-blind driver simply ignores it and re-spawns — correct
+but redundant. The scope's spawn ordinal + cursor seq are already advanced past the recorded
+maxima, so any NEW spawn appends without colliding with a journaled event.
+
+##### view
+
+> `readonly` **view**: [`TreeView`](runtime.md#treeview)
+
+The live tree — reads the in-memory nursery, not the journal.
+
+##### budget
+
+> `readonly` **budget**: `Readonly`\<\{ `tokensLeft`: `number`; `usdLeft`: `number`; `usdCapped`: `boolean`; `deadlineMs`: `number`; `reservedTokens`: `number`; \}\>
+
+Conserved-pool readouts (post-reservation).
+
+#### Methods
+
+##### spawn()
+
+> **spawn**\<`C`\>(`agent`, `task`, `opts`): \{ `ok`: `true`; `handle`: [`Handle`](runtime.md#handle-2)\<`C`\>; `prior?`: [`SpawnPrior`](runtime.md#spawnprior)\<`C`\>; \} \| \{ `ok`: `false`; `reason`: [`SpawnRejection`](runtime.md#spawnrejection); \}
+
+Spawn a child. Reserves `opts.budget` from the conserved pool atomically; refunds the
+unspent remainder on settle. Returns a typed outcome — fail-closed on an exhausted
+pool, an exceeded depth ceiling, or a still-live duplicate `key` (the caller inspects
+`ok` before `handle`). A KEYED spawn whose key already settled `done` spends nothing:
+it returns the committed result on `prior` instead of re-running (see `SpawnOpts.key`).
+
+###### Type Parameters
+
+###### C
+
+`C`
+
+###### Parameters
+
+###### agent
+
+[`Agent`](runtime.md#agent-1)\<`unknown`, `C`\>
+
+###### task
+
+`unknown`
+
+###### opts
+
+[`SpawnOpts`](runtime.md#spawnopts)
+
+###### Returns
+
+\{ `ok`: `true`; `handle`: [`Handle`](runtime.md#handle-2)\<`C`\>; `prior?`: [`SpawnPrior`](runtime.md#spawnprior)\<`C`\>; \} \| \{ `ok`: `false`; `reason`: [`SpawnRejection`](runtime.md#spawnrejection); \}
+
+##### next()
+
+> **next**(): `Promise`\<[`Settled`](#settled)\<`Out`\> \| `null`\>
+
+ray.wait n=1 over this scope's in-memory live set; resolves as each child settles;
+ `null` when the live set is empty.
+
+###### Returns
+
+`Promise`\<[`Settled`](#settled)\<`Out`\> \| `null`\>
+
+##### nextResolved()
+
+> **nextResolved**(): `Promise`\<[`Settled`](#settled)\<`Out`\> \| `null`\>
+
+Non-blocking twin of `next()`: deliver an ALREADY-settled, undelivered child, or `null`
+when none is ready — never awaits a live child. The driver's post-loop drain reads this so
+a child that settled while the driver was busy (or after it stopped pulling) still reaches
+the finalize ledger instead of being silently lost.
+
+###### Returns
+
+`Promise`\<[`Settled`](#settled)\<`Out`\> \| `null`\>
+
+##### send()
+
+> **send**(`nodeId`, `msg`): `boolean`
+
+Steer a RUNNING child out-of-band — deliver a message to its executor's inbox (the driver's
+`send` verb: next-instruction, interrupt, or resume). Returns `true` if the message was
+delivered to a live child whose executor accepts delivery, `false` otherwise (unknown id,
+already settled, or an executor with no inbox). The executor drains its inbox between turns;
+a leaf that does not implement `deliver` simply cannot be steered mid-flight. In-process this
+is a direct call; the sandbox/Agent-Bus transports surface the SAME verb as an MCP tool.
+
+###### Parameters
+
+###### nodeId
+
+`string`
+
+###### msg
+
+`unknown`
+
+###### Returns
+
+`boolean`
+
+##### wait()
+
+> **wait**(`spec`, `opts`): \{ `ok`: `true`; `handle`: [`Handle`](runtime.md#handle-2)\<[`WaitOutcome`](runtime.md#waitoutcome)\>; \} \| \{ `ok`: `false`; `reason`: [`WaitRejection`](runtime.md#waitrejection); \}
+
+Arm a WAIT-STATE node: a first-class tree node that waits on wall-clock time (`timer`) or on
+a named external predicate (`poll`) and settles through THIS scope's `next()` cursor like any
+other child — but holds no executor, no sandbox, and no conserved budget. Waiting costs zero
+tokens and zero dollars by construction.
+
+It is journaled (`waiting` → `woken`) with its ABSOLUTE deadline, so a run that dies mid-wait
+resumes still waiting: the supervisor surfaces the un-woken waits on `Scope.resume.waits`, and
+re-arming the same `label` adopts the recorded node id and original instant instead of
+restarting the countdown.
+
+Fail-closed admission, mirroring `spawn`: `invalid-spec`, `unknown-probe` (a `poll` naming a
+predicate this run's registry cannot resolve), or `deadline-exceeded` (the wait would outlive
+the pool's hard wall-clock ceiling — a wait never extends a budget guard).
+
+NOT `await_event`: that is an in-run rendezvous on the coordination bus whose 15s fence makes
+the caller re-poll — each re-poll a driver inference turn against a process that must stay up,
+and nothing about it survives a restart. See `supervise/wait.ts`.
+
+###### Parameters
+
+###### spec
+
+[`WaitSpec`](runtime.md#waitspec)
+
+###### opts
+
+[`WaitOpts`](runtime.md#waitopts)
+
+###### Returns
+
+\{ `ok`: `true`; `handle`: [`Handle`](runtime.md#handle-2)\<[`WaitOutcome`](runtime.md#waitoutcome)\>; \} \| \{ `ok`: `false`; `reason`: [`WaitRejection`](runtime.md#waitrejection); \}
+
+##### progress()
+
+> **progress**(`nodeId`, `opts?`): [`WorkerProgress`](runtime.md#workerprogress) \| `undefined`
+
+The LIVE read-model of one child, valid WHILE it runs: last-activity timestamp, idle time,
+a derived `stalled` flag, tokens/turns spent so far, whether a steer can even reach it
+(`steerable`), and whatever tool activity its executor exposes. `undefined` for an unknown
+id. This is the counterpart to `send`: a driver that can steer but cannot observe has
+nothing to steer on, which is precisely why steering went unused.
+
+Pull-based and side-effect free — reading it starts no timer and spends nothing. `now` and
+`stallAfterMs` are injectable so a caller (and a test) controls what counts as stalled.
+
+###### Parameters
+
+###### nodeId
+
+`string`
+
+###### opts?
+
+###### now?
+
+`number`
+
+###### stallAfterMs?
+
+`number`
+
+###### Returns
+
+[`WorkerProgress`](runtime.md#workerprogress) \| `undefined`
+
+##### traceSource()
+
+> **traceSource**(`nodeId`): [`TraceSource`](runtime.md#tracesource-1) \| `undefined`
+
+The live tool-call trace of one child when its executor exposes one (`Executor.traceSource`),
+ for running the online detector panel over a RUNNING worker. `undefined` otherwise.
+
+###### Parameters
+
+###### nodeId
+
+`string`
+
+###### Returns
+
+[`TraceSource`](runtime.md#tracesource-1) \| `undefined`
+
+##### meter()
+
+> **meter**(`spend`, `detail?`): `Promise`\<`void`\>
+
+Meter the driver's OWN compute against the conserved pool — its inference turns, which are
+real tokens/usd but not a spawned child (no reserve/reconcile). A direct `free → committed`
+debit, so equal-k counts the driver's tokens AND the in-loop budget guard (`budget.tokensLeft`)
+halts a driver that thinks the pool dry. `detail` rides an `agent.turn` trace event for live
+observability (turn index, tool calls, cumulative spend). It also journals a `metered` event —
+the durable twin of the pool debit (as `settled` is the twin of `reconcile`) — so every
+journal-based cost reader (`spentFromJournal`, `trajectoryReport`) sums driver inference
+automatically. A leaf never calls this; a driver meters each chat turn and awaits it (the
+metered event is cost-critical, so it lands before the join-barrier roll-up).
+
+###### Parameters
+
+###### spend
+
+[`Spend`](#spend)
+
+###### detail?
+
+`Record`\<`string`, `unknown`\>
+
+###### Returns
+
+`Promise`\<`void`\>
+
+***
+
+### Supervisor
+
+Owns the conserved pool, the spawn log, the abort cascade, the OTP intensity breaker,
+and the root handle. `run` executes the root `Agent` to completion; `attach` wires a
+live `RootHandle` (the Q2 substrate the chat/pi-viz client later consumes).
+
+#### Type Parameters
+
+##### Task
+
+`Task`
+
+##### Out
+
+`Out`
+
+#### Methods
 
-##### startedAt
+##### run()
 
-> **startedAt**: `string`
+> **run**(`root`, `task`, `opts`): `Promise`\<[`SupervisedResult`](#supervisedresult)\<`Out`\>\>
 
-##### completedAt?
+###### Parameters
 
-> `optional` **completedAt?**: `string`
+###### root
 
-##### metadata?
+[`Agent`](runtime.md#agent-1)\<`Task`, `Out`\>
 
-> `optional` **metadata?**: `Record`\<`string`, `unknown`\>
+###### task
 
-***
+`Task`
 
-### RuntimeRunPersistenceAdapter
+###### opts
 
-**`Stable`**
+[`SupervisorOpts`](runtime.md#supervisoropts)
 
-#### Methods
+###### Returns
 
-##### upsert()
+`Promise`\<[`SupervisedResult`](#supervisedresult)\<`Out`\>\>
 
-> **upsert**(`row`): `void` \| `Promise`\<`void`\>
+##### attach()
 
-Called once when `handle.persist()` runs. Implementations write `row` to
-their durable store (D1, postgres, KV) and return whatever the consumer
-wants the caller to see (often the storage-side row id). Errors thrown
-here propagate out of `persist()` so the caller can decide whether to
-retry or log-and-continue.
+> **attach**(`h`): `void`
 
 ###### Parameters
 
-###### row
+###### h
 
-[`RuntimeRunRow`](#runtimerunrow)
+[`RootHandle`](runtime.md#roothandle)\<`Out`\>
 
 ###### Returns
 
-`void` \| `Promise`\<`void`\>
+`void`
 
 ***
 
-### RuntimeRunOptions
+### Driver
 
-**`Stable`**
+**`Experimental`**
 
-#### Properties
+#### Type Parameters
 
-##### workspaceId
+##### Task
 
-> **workspaceId**: `string`
+`Task`
 
-##### sessionId?
+##### Output
 
-> `optional` **sessionId?**: `string`
+`Output`
 
-##### agentId?
+##### Decision
 
-> `optional` **agentId?**: `string`
+`Decision`
 
-##### taskSpec
+#### Properties
 
-> **taskSpec**: [`AgentTaskSpec`](#agenttaskspec)
+##### name?
 
-##### scenarioId?
+> `readonly` `optional` **name?**: `string`
 
-> `optional` **scenarioId?**: `string`
+**`Experimental`**
 
-##### adapter?
+Stable identifier surfaced in trace events. Default `'driver'`.
 
-> `optional` **adapter?**: [`RuntimeRunPersistenceAdapter`](#runtimerunpersistenceadapter)
+#### Methods
 
-Optional persistence adapter; if omitted, `persist()` is a no-op.
+##### plan()
 
-##### id?
+> **plan**(`task`, `history`): `Promise`\<`Task`[]\>
 
-> `optional` **id?**: `string`
+**`Experimental`**
 
-Override the row id; default = `${taskSpec.id}:${random suffix}`.
+Tasks to issue this iteration. `[task]` → refine; N copies → fanout;
+`[]` → no more work this round (kernel proceeds to `decide`).
 
-##### now?
+###### Parameters
 
-> `optional` **now?**: () => `number`
+###### task
 
-Override the clock; default = `Date.now()`. Useful for deterministic tests.
+`Task`
+
+###### history
+
+readonly [`Iteration`](runtime.md#iteration-1)\<`Task`, `Output`\>[]
 
 ###### Returns
 
-`number`
+`Promise`\<`Task`[]\>
 
-***
+##### decide()
 
-### RuntimeRunHandle
+> **decide**(`history`): `Decision` \| `Promise`\<`Decision`\>
 
-**`Stable`**
+**`Experimental`**
 
-#### Properties
+Inspect history and return the next state. The kernel terminates the
+loop when `decide` returns a value listed in `isTerminalDecision`
+(`'stop' | 'pick-winner' | 'fail' | 'done'`), when `maxIterations`
+is hit, or when the abort signal fires.
 
-##### id
+###### Parameters
 
-> `readonly` **id**: `string`
+###### history
 
-Stable id assigned at start.
+readonly [`Iteration`](runtime.md#iteration-1)\<`Task`, `Output`\>[]
 
-##### workspaceId
+###### Returns
 
-> `readonly` **workspaceId**: `string`
+`Decision` \| `Promise`\<`Decision`\>
 
-##### sessionId
+##### describePlan()?
 
-> `readonly` **sessionId**: `string` \| `undefined`
+> `optional` **describePlan**(): [`LoopPlanDescription`](runtime.md#loopplandescription) \| `undefined`
 
-##### taskSpec
+**`Experimental`**
 
-> `readonly` **taskSpec**: [`AgentTaskSpec`](#agenttaskspec)
+Optional: describe the move `plan()` just produced, for trace emission.
+The kernel calls this immediately after `plan()` and emits the result in
+the `loop.plan` event so a topology viewer can render the agent's chosen
+move + rationale (not just the inferred fan-width). Drivers whose topology
+is a pure function of count (refine/fanout-vote) omit it — the kernel
+infers `moveKind` from the planned-task count. A driver that authors its
+own topology returns its chosen move's kind + rationale here.
 
-##### status
+###### Returns
 
-> `readonly` **status**: [`RuntimeRunStatus`](#runtimerunstatus)
+[`LoopPlanDescription`](runtime.md#loopplandescription) \| `undefined`
 
-#### Methods
+##### selectWinner()?
 
-##### observe()
+> `optional` **selectWinner**(`history`): [`LoopWinner`](runtime.md#loopwinner)\<`Task`, `Output`\> \| `undefined`
 
-> **observe**(`event`): `void`
+**`Experimental`**
 
-Observe a single `RuntimeStreamEvent`. The handle ignores non-cost events
-(text deltas, tool calls) silently so consumers can pipe the whole stream
-through `handle.observe`. `llm_call` events update the ledger.
+Optional: the driver AUTHORS the winner instead of the kernel's argmax. The
+kernel consults this at finalize ONLY when the caller did not pass an explicit
+`selectWinner` to runAgentRounds. Return the driver-declared winner (e.g. from a
+`select` topology move) or `undefined` to fall through to the default
+(best-valid-score, earliest index). This is the SELECTOR role made
+agent-authorable — the planner runs the selection, not the kernel.
 
 ###### Parameters
 
-###### event
+###### history
 
-[`RuntimeStreamEvent`](#runtimestreamevent)
+readonly [`Iteration`](runtime.md#iteration-1)\<`Task`, `Output`\>[]
 
 ###### Returns
 
-`void`
+[`LoopWinner`](runtime.md#loopwinner)\<`Task`, `Output`\> \| `undefined`
 
-##### cost()
+***
 
-> **cost**(): [`RuntimeRunCost`](#runtimeruncost)
+### LoopResult
 
-Snapshot of the current cost ledger. Safe to call at any time.
+**`Experimental`**
 
-###### Returns
+#### Type Parameters
 
-[`RuntimeRunCost`](#runtimeruncost)
+##### Task
 
-##### complete()
+`Task`
 
-> **complete**(`input`): `void`
+##### Output
 
-Transition to a terminal state. Idempotent for the same status; throws
-`RuntimeRunStateError` for a different terminal status (state machines
-don't time-travel).
+`Output`
 
-###### Parameters
+##### Decision
 
-###### input
+`Decision`
 
-[`RuntimeRunCompleteInput`](#runtimeruncompleteinput)
+#### Properties
 
-###### Returns
+##### decision
 
-`void`
+> **decision**: `Decision`
 
-##### toRow()
+**`Experimental`**
 
-> **toRow**(`metadata?`): [`RuntimeRunRow`](#runtimerunrow)
+##### iterations
 
-Build the current row without writing it. Useful for tests + dry runs.
+> **iterations**: [`Iteration`](runtime.md#iteration-1)\<`Task`, `Output`\>[]
 
-###### Parameters
+**`Experimental`**
 
-###### metadata?
+##### winner?
 
-`Record`\<`string`, `unknown`\>
+> `optional` **winner?**: [`LoopWinner`](runtime.md#loopwinner)\<`Task`, `Output`\>
 
-###### Returns
+**`Experimental`**
 
-[`RuntimeRunRow`](#runtimerunrow)
+##### durationMs
 
-##### persist()
+> **durationMs**: `number`
 
-> **persist**(`metadata?`): `Promise`\<`void`\>
+**`Experimental`**
 
-Persist the current row via the configured adapter. Must be called after
-`complete()`. Idempotent for the same terminal state (the adapter sees
-the same row on retry).
+##### costUsd
 
-###### Parameters
+> **costUsd**: `number`
 
-###### metadata?
+**`Experimental`**
 
-`Record`\<`string`, `unknown`\>
+Sum of every iteration's `costUsd`.
 
-###### Returns
+##### tokenUsage
 
-`Promise`\<`void`\>
+> **tokenUsage**: [`LoopTokenUsage`](runtime.md#looptokenusage)
+
+**`Experimental`**
+
+Sum of every iteration's token usage. `loopDispatch` commits it through
+ the campaign's paid-call receipt.
+
+##### provenance
+
+> **provenance**: [`RunProvenance`](runtime.md#runprovenance)
+
+**`Experimental`**
+
+Domain-free run provenance for auditability: the mount manifest recorded
+ during `prepareBox` and the selection receipts for how the winner was
+ chosen. Always present; empty arrays when nothing was recorded.
 
 ***
 
@@ -9113,7 +9991,7 @@ keeping the backend transport thin lets domain repos own MCP plumbing.
 
 ##### status
 
-> **status**: `"completed"` \| `"failed"` \| `"aborted"` \| `"active"`
+> **status**: `"aborted"` \| `"completed"` \| `"failed"` \| `"active"`
 
 ##### resumeToken?
 
@@ -10633,6 +11511,16 @@ Mode → configured runner. Partial: only register the modes a
 
 ***
 
+### CoordinationEvent
+
+> **CoordinationEvent** = \{ `type`: `"question"`; `question`: [`QuestionRecord`](mcp.md#questionrecord); \} \| \{ `type`: `"settled"`; `worker`: [`SettledWorker`](mcp.md#settledworker); \} \| \{ `type`: `"finding"`; `finding`: [`AnalystFindingEvent`](runtime.md#analystfindingevent); \} \| \{ `type`: `"steer"`; `down`: [`DownMessageEvent`](runtime.md#downmessageevent); \} \| \{ `type`: `"answer"`; `down`: [`DownMessageEvent`](runtime.md#downmessageevent); `questionId`: `string`; \}
+
+Every message on the one typed pipe. UP (child→parent): question / settled / finding — queued for
+ the driver to `pull`. DOWN (parent→child): steer / answer — record-only (history + subscribers),
+ routed to the child inbox. New kinds are additive.
+
+***
+
 ### WorktreeCheckRunner
 
 > **WorktreeCheckRunner** = (`opts`) => `Promise`\<\{ `exitCode`: `number` \| `null`; `output`: `string`; \}\>
@@ -10711,6 +11599,168 @@ loop or product harness that is running the profile.
 
 ***
 
+### SupervisorFinalizer
+
+> **SupervisorFinalizer** = (`ctx`) => `Promise`\<`unknown` \| `undefined`\> \| `unknown` \| `undefined`
+
+The finalization seam: ledger in, output (or `undefined` = nothing deliverable) out.
+
+#### Parameters
+
+##### ctx
+
+[`FinalizeContext`](#finalizecontext)
+
+#### Returns
+
+`Promise`\<`unknown` \| `undefined`\> \| `unknown` \| `undefined`
+
+***
+
+### Settled
+
+> **Settled**\<`Out`\> = \{ `kind`: `"done"`; `handle`: [`Handle`](runtime.md#handle-2)\<`Out`\>; `out`: `Out`; `outRef`: `string`; `verdict?`: `DefaultVerdict`; `spent`: [`Spend`](#spend); `seq`: `number`; \} \| \{ `kind`: `"down"`; `handle`: [`Handle`](runtime.md#handle-2)\<`Out`\>; `reason`: `string`; `infra`: `boolean`; `restartCount`: `number`; `seq`: `number`; \}
+
+A settled child, delivered by `scope.next()`. `seq` is the monotonic cursor order
+`next()` yielded this settlement (B2) — NOT wall-clock — and replay delivers strictly
+in `seq` order. `outRef` rehydrates `out` from the `ResultBlobStore` on replay.
+
+#### Type Parameters
+
+##### Out
+
+`Out`
+
+#### Union Members
+
+##### Type Literal
+
+\{ `kind`: `"done"`; `handle`: [`Handle`](runtime.md#handle-2)\<`Out`\>; `out`: `Out`; `outRef`: `string`; `verdict?`: `DefaultVerdict`; `spent`: [`Spend`](#spend); `seq`: `number`; \}
+
+***
+
+##### Type Literal
+
+\{ `kind`: `"down"`; `handle`: [`Handle`](runtime.md#handle-2)\<`Out`\>; `reason`: `string`; `infra`: `boolean`; `restartCount`: `number`; `seq`: `number`; \}
+
+###### kind
+
+> **kind**: `"down"`
+
+###### handle
+
+> **handle**: [`Handle`](runtime.md#handle-2)\<`Out`\>
+
+###### reason
+
+> **reason**: `string`
+
+###### infra
+
+> **infra**: `boolean`
+
+True = infrastructure failure (excluded from merge `n` / equal-k), not a bad result.
+
+###### restartCount
+
+> **restartCount**: `number`
+
+###### seq
+
+> **seq**: `number`
+
+***
+
+### SupervisedResult
+
+> **SupervisedResult**\<`Out`\> = \{ `kind`: `"winner"`; `out`: `Out`; `outRef`: `string`; `verdict?`: `DefaultVerdict`; `tree`: [`TreeView`](runtime.md#treeview); `spentTotal`: [`Spend`](#spend); `spentBreakdown?`: \{ `driverInference`: [`Spend`](#spend); `childWork`: [`Spend`](#spend); \}; \} \| \{ `kind`: `"no-winner"`; `reason`: `"all-children-down"` \| `"budget-exhausted"` \| `"aborted"`; `tree`: [`TreeView`](runtime.md#treeview); `downCount`: `number`; `spentTotal`: [`Spend`](#spend); \}
+
+Typed terminal result (M2) — a no-winner is NEVER coerced to a best-effort output.
+
+#### Type Parameters
+
+##### Out
+
+`Out`
+
+#### Union Members
+
+##### Type Literal
+
+\{ `kind`: `"winner"`; `out`: `Out`; `outRef`: `string`; `verdict?`: `DefaultVerdict`; `tree`: [`TreeView`](runtime.md#treeview); `spentTotal`: [`Spend`](#spend); `spentBreakdown?`: \{ `driverInference`: [`Spend`](#spend); `childWork`: [`Spend`](#spend); \}; \}
+
+###### kind
+
+> **kind**: `"winner"`
+
+###### out
+
+> **out**: `Out`
+
+###### outRef
+
+> **outRef**: `string`
+
+###### verdict?
+
+> `optional` **verdict?**: `DefaultVerdict`
+
+###### tree
+
+> **tree**: [`TreeView`](runtime.md#treeview)
+
+###### spentTotal
+
+> **spentTotal**: [`Spend`](#spend)
+
+###### spentBreakdown?
+
+> `optional` **spentBreakdown?**: `object`
+
+Where `spentTotal` went: `driverInference` = the drivers' own chat turns (metered via
+ `Scope.meter`); `childWork` = every spawned child's reconciled spend (the journal sum).
+ `driverInference + childWork === spentTotal`. Present whenever any driver metered.
+
+###### spentBreakdown.driverInference
+
+> **driverInference**: [`Spend`](#spend)
+
+###### spentBreakdown.childWork
+
+> **childWork**: [`Spend`](#spend)
+
+***
+
+##### Type Literal
+
+\{ `kind`: `"no-winner"`; `reason`: `"all-children-down"` \| `"budget-exhausted"` \| `"aborted"`; `tree`: [`TreeView`](runtime.md#treeview); `downCount`: `number`; `spentTotal`: [`Spend`](#spend); \}
+
+###### kind
+
+> **kind**: `"no-winner"`
+
+###### reason
+
+> **reason**: `"all-children-down"` \| `"budget-exhausted"` \| `"aborted"`
+
+###### tree
+
+> **tree**: [`TreeView`](runtime.md#treeview)
+
+###### downCount
+
+> **downCount**: `number`
+
+###### spentTotal
+
+> **spentTotal**: [`Spend`](#spend)
+
+The conserved spend incurred before the run failed — real cost is paid even when no
+ worker delivers, so the caller always learns what the delegation actually spent. Summed
+ off the same journal the `winner` path reads.
+
+***
+
 ### RuntimeStreamEventSink
 
 > **RuntimeStreamEventSink** = (`event`) => `void`
diff --git a/docs/api/mcp.md b/docs/api/mcp.md
index 2d28856b..b7d05041 100644
--- a/docs/api/mcp.md
+++ b/docs/api/mcp.md
@@ -4059,7 +4059,7 @@ Epoch ms the ledger recorded this settlement — the resolution a progress-based
 
 ##### scope
 
-> `readonly` **scope**: [`Scope`](runtime.md#scope-1)\<`unknown`\>
+> `readonly` **scope**: [`Scope`](index.md#scope)\<`unknown`\>
 
 ##### blobs
 
@@ -4071,11 +4071,11 @@ Epoch ms the ledger recorded this settlement — the resolution a progress-based
 
 ##### perWorker
 
-> `readonly` **perWorker**: [`Budget`](runtime.md#budget-13)
+> `readonly` **perWorker**: [`Budget`](index.md#budget-4)
 
 ##### analysts?
 
-> `readonly` `optional` **analysts?**: [`AnalystRegistry`](runtime.md#analystregistry)
+> `readonly` `optional` **analysts?**: [`AnalystRegistry`](index.md#analystregistry)
 
 ##### onEvent?
 
@@ -4085,7 +4085,7 @@ Epoch ms the ledger recorded this settlement — the resolution a progress-based
 
 ###### event
 
-[`CoordinationEvent`](runtime.md#coordinationevent)
+[`CoordinationEvent`](index.md#coordinationevent)
 
 ###### Returns
 
@@ -4233,7 +4233,7 @@ readonly [`QuestionRecord`](#questionrecord)[]
 
 ##### history()
 
-> **history**(): readonly [`BusRecord`](runtime.md#busrecord)\<[`CoordinationEvent`](runtime.md#coordinationevent)\>[]
+> **history**(): readonly [`BusRecord`](runtime.md#busrecord)\<[`CoordinationEvent`](index.md#coordinationevent)\>[]
 
 The full ordered log of every bus event — UP (settled / question / finding) and DOWN
  (steer / answer) — the observability audit + replay trail. Each record carries seq,
@@ -4241,7 +4241,7 @@ The full ordered log of every bus event — UP (settled / question / finding) an
 
 ###### Returns
 
-readonly [`BusRecord`](runtime.md#busrecord)\<[`CoordinationEvent`](runtime.md#coordinationevent)\>[]
+readonly [`BusRecord`](runtime.md#busrecord)\<[`CoordinationEvent`](index.md#coordinationevent)\>[]
 
 ##### stats()
 
@@ -5731,7 +5731,7 @@ after `intervalMs`; `completed` / `failed` settle the record.
 
 ### DelegateResult
 
-> **DelegateResult** = \{ `status`: `"winner"`; `out`: `unknown`; `outRef`: `string`; `spentTotal`: [`Spend`](runtime.md#spend); \} \| \{ `status`: `"no-winner"`; `reason`: `string`; `spentTotal`: [`Spend`](runtime.md#spend); \}
+> **DelegateResult** = \{ `status`: `"winner"`; `out`: `unknown`; `outRef`: `string`; `spentTotal`: [`Spend`](index.md#spend); \} \| \{ `status`: `"no-winner"`; `reason`: `string`; `spentTotal`: [`Spend`](index.md#spend); \}
 
 The synchronous result the `delegate` tool returns to the calling agent: the delivered output (or
  the no-winner reason) PLUS the conserved spend of the whole delegation.
@@ -7741,13 +7741,13 @@ Re-exports [AnalystFindingEvent](runtime.md#analystfindingevent)
 
 ### AnalystRegistry
 
-Re-exports [AnalystRegistry](runtime.md#analystregistry)
+Re-exports [AnalystRegistry](index.md#analystregistry)
 
 ***
 
 ### CoordinationEvent
 
-Re-exports [CoordinationEvent](runtime.md#coordinationevent)
+Re-exports [CoordinationEvent](index.md#coordinationevent)
 
 ***
 
diff --git a/docs/api/primitive-catalog.md b/docs/api/primitive-catalog.md
index 72e1f451..c2a85e8f 100644
--- a/docs/api/primitive-catalog.md
+++ b/docs/api/primitive-catalog.md
@@ -15,7 +15,7 @@ Every subpath this package declares in `package.json` `exports`. Reach for these
 
 ### Root — task lifecycle, conversation, RSI verbs, observability
 
-Import from `@tangle-network/agent-runtime` — 398 exports.
+Import from `@tangle-network/agent-runtime` — 413 exports.
 
 | Symbol | Kind | Summary |
 |---|---|---|
@@ -178,13 +178,18 @@ Import from `@tangle-network/agent-runtime` — 398 exports.
 | `AgentCandidateRepositoryPort` | interface | Resolves a declared GitHub repository to an already-present local Git object store. |
 | `AgentCandidateTaskExecution` | interface | Runtime placement for one exact cell from a signed candidate experiment. |
 | `AgentCandidateWorkspacePort` | interface | Materializes an already-verified workspace archive. |
+| `AgentSpec` | interface | `AgentProfile` does NOT carry a `harness`/backend field — `harness` lives on the |
 | `BackendErrorDetail` | interface | Typed transport / backend failure detail. Carried on `backend_error` and |
 | `BackendRetryPolicy` | interface | Retry policy for transient transport errors (rate limits, upstream |
+| `Budget` | interface | A budget envelope on a spawn or the root. All ceilings; the pool reserves against them. |
 | `BuildAgentCandidateBundleInput` | interface | Complete measured surfaces and execution policy compiled into one candidate bundle. |
 | `BuildPromptFindingsInput` | interface | Evidence supplied to a generated tool or MCP build instruction. |
 | `CandidateGenerator` | interface | The byte-producing path that differs between the cheap |
 | `CircuitBreakerConfig` | interface | Circuit-breaker tuning. `failuresToOpen` consecutive failures opens it; closed only after `cooldownMs`. |
 | `D1DatabaseLike` | interface | Structural type matching the surface of `D1Database` we depend on, so the |
+| `Executor` | interface | The leaf runtime — ONE open interface, not a closed union. `execute` returns a |
+| `ExecutorRegistry` | interface | The OPEN resolver: maps an `AgentSpec` to a `ExecutorFactory`. The default |
+| `FinalizeContext` | interface | What a finalizer gets to decide with. `delivered` is the ONLY output material; `allSettled` |
 | `ImproveCandidateValidationInput` | interface | Exact materialized profile presented for validation before any candidate run. |
 | `ImproveCost` | interface | Normalized spend reported for one Runtime improvement run. |
 | `ImproveLineage` | interface | Optimizer ancestry sealed into downstream candidate experiments. |
@@ -199,7 +204,10 @@ Import from `@tangle-network/agent-runtime` — 398 exports.
 | `RouterEnv` | interface | Env keys the router base URL is resolved from. |
 | `RunRecord` | interface | Mandatory paper-grade fields for a single evaluation run. Optional |
 | `RuntimeHooks` | interface | The observation seam attached to a running loop (never to the portable genome). |
+| `Scope` | interface | The budget-conserving reactive scope an `Agent.act` runs inside. `spawn` reserves |
+| `Spend` | interface | Conserved spend, reconciled from the normalized `UsageEvent` stream. Tokens and usd |
 | `SqlAdapter` | interface | Minimal SQL driver shape. Implementations forward to whichever client the |
+| `Supervisor` | interface | Owns the conserved pool, the spawn log, the abort cascade, the OTP intensity breaker, |
 | `ToolLoopAssistantToolCall` | interface | One OpenAI-shaped tool-call entry carried on an assistant message. |
 | `VerifyResult` | interface | Outcome of verifying a candidate worktree. `feedback` (compiler errors, |
 | `AgentBackendKind` | type | The transport a chat backend runs on. |
@@ -220,6 +228,7 @@ Import from `@tangle-network/agent-runtime` — 398 exports.
 | `AgentEvalErrorCode` | type | Error taxonomy for `@tangle-network/agent-eval`. |
 | `AgenticGeneratorShotDisposition` | type | Worktree decision emitted before a completed shot is retried, accepted, or |
 | `AgenticGeneratorShotExecution` | type | Frozen exact harness result for an author shot: full streams, process state, |
+| `CoordinationEvent` | type | Every message on the one typed pipe. UP (child→parent): question / settled / finding — queued for |
 | `ImproveCodeRunOptions` | type | Runtime-owned code search in isolated git worktrees. |
 | `ImproveMethodFactory` | type | Build a complete method after trace findings are available. |
 | `ImproveMethodOptions` | type | Complete-method configuration for every non-code profile surface. |
@@ -237,6 +246,9 @@ Import from `@tangle-network/agent-runtime` — 398 exports.
 | `RetryableErrorPredicate` | type | Pure judgment of whether an error is worth retrying. Defaults: TimeoutError, AbortError, fetch-level network errors. |
 | `RetryBackoff` | type | Backoff between attempts. Constant ms, or `(attempt: 1-indexed) => ms`. |
 | `RuntimeHookPhase` | type | Runtime hook contracts. Hooks are execution-scoped observers, not part of an |
+| `Settled` | type | A settled child, delivered by `scope.next()`. `seq` is the monotonic cursor order |
+| `SupervisedResult` | type | Typed terminal result (M2) — a no-winner is NEVER coerced to a best-effort output. |
+| `SupervisorFinalizer` | type | The finalization seam: ledger in, output (or `undefined` = nothing deliverable) out. |
 | `ToolCallOutcome` | type | Outcome of one tool dispatch — structurally compatible with a hub/integration |
 | `ToolLoopMessage` | type | A message in the running conversation the loop sends to `streamTurn`. |
 | `ToolLoopStopReason` | type | Why the loop stopped. `completed` = model finished naturally; `stuck-loop` = |
@@ -244,7 +256,7 @@ Import from `@tangle-network/agent-runtime` — 398 exports.
 | `Verifier` | type | Verifies the edited worktree. Sync or async; throws only on a setup fault |
 | `WorktreeCheckRunner` | type | The single shell-command-in-worktree runner seam (replaces the per-executor copies). |
 
-**Undocumented supporting types** (add a TSDoc line at the declaration to earn a table row): `AgentAdapter`, `AgentBackendContext`, `AgentBackendInput`, `AgentCandidateContainerPort`, `AgentCandidateExecutionAttemptRef`, `AgentCandidateExecutionPorts`, `AgentCandidateExecutorWorkspaceFile`, `AgentCandidateExecutorWorkspaceInput`, `AgentCandidateMemoryPort`, `AgentCandidateMemoryResetResult`, `AgentCandidateModelPort`, `AgentCandidatePreparationEvidence`, `AgentCandidateProtectedModelActivation`, `AgentCandidateProtectedModelReservation`, `AgentCandidateProtectedModelSettlement`, `AgentCandidateProtectedRunCapture`, `AgentCandidateVerificationPorts`, `AgentCandidateWorkspaceArchiveLimits`, `AgentExecutionBackend`, `AgenticGeneratorOptions`, `AgenticGeneratorShotReceipt`, `AgentKnowledgeProvider`, `AgentKnowledgeReadinessCheckOptions`, `AgentTaskContext`, `AgentTaskRunResult`, `AgentTaskSpec`, `BackendCallPolicy`, `CanonicalCandidateDocument`, `CaptureAgentCandidateWorkspaceOptions`, `CapturedAgentCandidateWorkspace`, `ChatModelCandidate`, `ControlBudget`, `ControlEvalResult`, `ControlRunResult`, `ControlStep`, `Conversation`, `ConversationDriveState`, `ConversationJournal`, `ConversationJournalEntry`, `ConversationParticipant`, `ConversationPolicy`, `ConversationResult`, `ConversationTurn`, `CreateAgentCandidateWorkspacePortOptions`, `CreateKnowledgeImprovementActivationExecutorOptions`, `CreateProtectedAgentCandidateModelPortOptions`, `D1StmtLike`, `DataAcquisitionPlan`, `DelegatedLoopResult`, `DisposePreparedAgentCandidateOptions`, `DriverLoopGeneratorOptions`, `EvalRunEvent`, `EvalRunGeneration`, `EvalRunsExportConfig`, `EvalRunsExportResult`, `ExactProcessCandidateExecutorOptions`, `ExecutePreparedAgentCandidateOptions`, `FileAgentCandidateExecutionClaimStoreOptions`, `HaltContext`, `HaltSignal`, `ImproveCodeOptions`, `ImproveCodeResult`, `ImprovementCodeCandidate`, `ImprovementProfileCandidate`, `ImproveMethodContext`, `ImproveMethodResult`, `ImproveSkillsOptions`, `InMemoryAgentCandidateExecutionClaimStoreOptions`, `KnowledgeImprovementActivationExecutor`, `KnowledgeImprovementCandidatePair`, `KnowledgeImprovementExperimentBundles`, `KnowledgeImprovementJobMeasurement`, `KnowledgeImprovementJobResult`, `KnowledgeReadinessCheckInput`, `KnowledgeReadinessDecision`, `KnowledgeReadinessReport`, `KnowledgeRequirement`, `LoopRunnerCliArgs`, `LoopRunnerCliResult`, `McpServeSpec`, `OfficialSensitiveCandidateInput`, `OtelAttribute`, `OtelExportConfig`, `OtelExporter`, `OtelSpan`, `PersonaConversationResult`, `PrepareAgentCandidateExecutionOptions`, `PreparedAgentCandidateExecution`, `PreparedAgentCandidateInstruction`, `PreparedAgentCandidateLaunch`, `PreparedAgentCandidateTrace`, `RawTraceDistillerOptions`, `RecoverExpiredAgentCandidateOptions`, `ReflectiveGeneratorOptions`, `ResearchLoopResult`, `ResearchLoopRunnerOptions`, `ResolveAgentBackendOptions`, `ResolvedAgentCandidateContainer`, `ResolvedChatModel`, `RunAgentTaskOptions`, `RunAgentTaskStreamOptions`, `RunConversationOptions`, `RunDelegatedLoopOptions`, `RunKnowledgeImprovementJobOptions`, `RunPersonaConfig`, `RunPersonaConversationOptions`, `RuntimeDecisionEvidenceRef`, `RuntimeDecisionPoint`, `RuntimeEventCollector`, `RuntimeEventOtelOptions`, `RuntimeHookContext`, `RuntimeHookErrorContext`, `RuntimeHookEvent`, `RuntimeRunCompleteInput`, `RuntimeRunCost`, `RuntimeRunHandle`, `RuntimeRunOptions`, `RuntimeRunPersistenceAdapter`, `RuntimeRunRow`, `RuntimeSession`, `RuntimeSessionStore`, `RuntimeStreamEventCollector`, `RuntimeStreamEventSummary`, `RuntimeTelemetryOptions`, `RunToolLoopOptions`, `SanitizedKnowledgeReadinessReport`, `SanitizedKnowledgeRequirement`, `ServerSentEventOptions`, `StreamToolLoopOptions`, `SupervisedKnowledgeUpdateInput`, `SupervisedKnowledgeUpdateOptions`, `SupervisedKnowledgeUpdateResult`, `ToolLoopCall`, `ToolLoopResult`, `VerifiedAgentCandidate`, `VetoedFact`, `WorktreeLoopRunnerOptions`, `AgentCandidateModelGrantActivateInput`, `AgentCandidateModelGrantReserveInput`, `AgentCandidateModelGrantSettleInput`, `AgentCandidateOutputPurpose`, `AgentCandidateRetryRejection`, `AgentCandidateRunFinalization`, `AgentRuntimeEvent`, `AgentRuntimeEventSink`, `AgentTaskStatus`, `AuthSource`, `ChatModelValidation`, `ControlDecision`, `ConversationStreamEvent`, `DeepReadonly`, `DelegatedLoopMode`, `DelegatedLoopRegistry`, `DelegatedLoopRunner`, `ForwardHeaderName`, `HaltPredicate`, `HaltReason`, `ImproveCandidateValidator`, `ImprovementCandidate`, `ImproveMethodSource`, `ImproveOptimizationRunOptions`, `ImproveProfileSurface`, `ImproveResult`, `KnowledgeReadinessCheck`, `KnowledgeReadinessCheckResult`, `RuntimeDecisionKind`, `RuntimeHookTarget`, `RuntimeRunStatus`, `RuntimeStreamEvent`, `RuntimeStreamEventSink`, `StreamToolLoopYield`, `SupervisedKnowledgeUpdater`, `ToolLoopEvent`, `TurnOrder`.
+**Undocumented supporting types** (add a TSDoc line at the declaration to earn a table row): `AgentAdapter`, `AgentBackendContext`, `AgentBackendInput`, `AgentCandidateContainerPort`, `AgentCandidateExecutionAttemptRef`, `AgentCandidateExecutionPorts`, `AgentCandidateExecutorWorkspaceFile`, `AgentCandidateExecutorWorkspaceInput`, `AgentCandidateMemoryPort`, `AgentCandidateMemoryResetResult`, `AgentCandidateModelPort`, `AgentCandidatePreparationEvidence`, `AgentCandidateProtectedModelActivation`, `AgentCandidateProtectedModelReservation`, `AgentCandidateProtectedModelSettlement`, `AgentCandidateProtectedRunCapture`, `AgentCandidateVerificationPorts`, `AgentCandidateWorkspaceArchiveLimits`, `AgentExecutionBackend`, `AgenticGeneratorOptions`, `AgenticGeneratorShotReceipt`, `AgentKnowledgeProvider`, `AgentKnowledgeReadinessCheckOptions`, `AgentTaskContext`, `AgentTaskRunResult`, `AgentTaskSpec`, `AnalystRegistry`, `BackendCallPolicy`, `CanonicalCandidateDocument`, `CaptureAgentCandidateWorkspaceOptions`, `CapturedAgentCandidateWorkspace`, `ChatModelCandidate`, `ControlBudget`, `ControlEvalResult`, `ControlRunResult`, `ControlStep`, `Conversation`, `ConversationDriveState`, `ConversationJournal`, `ConversationJournalEntry`, `ConversationParticipant`, `ConversationPolicy`, `ConversationResult`, `ConversationTurn`, `CreateAgentCandidateWorkspacePortOptions`, `CreateKnowledgeImprovementActivationExecutorOptions`, `CreateProtectedAgentCandidateModelPortOptions`, `D1StmtLike`, `DataAcquisitionPlan`, `DelegatedLoopResult`, `DisposePreparedAgentCandidateOptions`, `Driver`, `DriverLoopGeneratorOptions`, `EvalRunEvent`, `EvalRunGeneration`, `EvalRunsExportConfig`, `EvalRunsExportResult`, `ExactProcessCandidateExecutorOptions`, `ExecutePreparedAgentCandidateOptions`, `FileAgentCandidateExecutionClaimStoreOptions`, `HaltContext`, `HaltSignal`, `ImproveCodeOptions`, `ImproveCodeResult`, `ImprovementCodeCandidate`, `ImprovementProfileCandidate`, `ImproveMethodContext`, `ImproveMethodResult`, `ImproveSkillsOptions`, `InMemoryAgentCandidateExecutionClaimStoreOptions`, `KnowledgeImprovementActivationExecutor`, `KnowledgeImprovementCandidatePair`, `KnowledgeImprovementExperimentBundles`, `KnowledgeImprovementJobMeasurement`, `KnowledgeImprovementJobResult`, `KnowledgeReadinessCheckInput`, `KnowledgeReadinessDecision`, `KnowledgeReadinessReport`, `KnowledgeRequirement`, `LoopResult`, `LoopRunnerCliArgs`, `LoopRunnerCliResult`, `McpServeSpec`, `OfficialSensitiveCandidateInput`, `OtelAttribute`, `OtelExportConfig`, `OtelExporter`, `OtelSpan`, `PersonaConversationResult`, `PrepareAgentCandidateExecutionOptions`, `PreparedAgentCandidateExecution`, `PreparedAgentCandidateInstruction`, `PreparedAgentCandidateLaunch`, `PreparedAgentCandidateTrace`, `RawTraceDistillerOptions`, `RecoverExpiredAgentCandidateOptions`, `ReflectiveGeneratorOptions`, `ResearchLoopResult`, `ResearchLoopRunnerOptions`, `ResolveAgentBackendOptions`, `ResolvedAgentCandidateContainer`, `ResolvedChatModel`, `RunAgentTaskOptions`, `RunAgentTaskStreamOptions`, `RunConversationOptions`, `RunDelegatedLoopOptions`, `RunKnowledgeImprovementJobOptions`, `RunPersonaConfig`, `RunPersonaConversationOptions`, `RuntimeDecisionEvidenceRef`, `RuntimeDecisionPoint`, `RuntimeEventCollector`, `RuntimeEventOtelOptions`, `RuntimeHookContext`, `RuntimeHookErrorContext`, `RuntimeHookEvent`, `RuntimeRunCompleteInput`, `RuntimeRunCost`, `RuntimeRunHandle`, `RuntimeRunOptions`, `RuntimeRunPersistenceAdapter`, `RuntimeRunRow`, `RuntimeSession`, `RuntimeSessionStore`, `RuntimeStreamEventCollector`, `RuntimeStreamEventSummary`, `RuntimeTelemetryOptions`, `RunToolLoopOptions`, `SanitizedKnowledgeReadinessReport`, `SanitizedKnowledgeRequirement`, `ServerSentEventOptions`, `StreamToolLoopOptions`, `SupervisedKnowledgeUpdateInput`, `SupervisedKnowledgeUpdateOptions`, `SupervisedKnowledgeUpdateResult`, `ToolLoopCall`, `ToolLoopResult`, `VerifiedAgentCandidate`, `VetoedFact`, `WorktreeLoopRunnerOptions`, `AgentCandidateModelGrantActivateInput`, `AgentCandidateModelGrantReserveInput`, `AgentCandidateModelGrantSettleInput`, `AgentCandidateOutputPurpose`, `AgentCandidateRetryRejection`, `AgentCandidateRunFinalization`, `AgentRuntimeEvent`, `AgentRuntimeEventSink`, `AgentTaskStatus`, `AuthSource`, `ChatModelValidation`, `ControlDecision`, `ConversationStreamEvent`, `DeepReadonly`, `DelegatedLoopMode`, `DelegatedLoopRegistry`, `DelegatedLoopRunner`, `ForwardHeaderName`, `HaltPredicate`, `HaltReason`, `ImproveCandidateValidator`, `ImprovementCandidate`, `ImproveMethodSource`, `ImproveOptimizationRunOptions`, `ImproveProfileSurface`, `ImproveResult`, `KnowledgeReadinessCheck`, `KnowledgeReadinessCheckResult`, `RuntimeDecisionKind`, `RuntimeHookTarget`, `RuntimeRunStatus`, `RuntimeStreamEvent`, `RuntimeStreamEventSink`, `StreamToolLoopYield`, `SupervisedKnowledgeUpdater`, `ToolLoopEvent`, `TurnOrder`.
 
 ### Vertical agent — manifest + surface proposal source
 
@@ -469,9 +481,9 @@ Import from `@tangle-network/agent-runtime/intelligence` — 166 exports.
 
 **Undocumented supporting types** (add a TSDoc line at the declaration to earn a table row): `AgentCandidateExperimentCellPlacement`, `AgentImprovementActivationResultStore`, `AgentImprovementActivationTargetPlan`, `AgentImprovementProfileReplacement`, `AgentImprovementProfileStateDigestInput`, `AgentImprovementProfileStateResolverInput`, `AgentImprovementProposal`, `AgentImprovementTargetProfileDiffOptions`, `AgentProfileImprovementActivationTargetPlan`, `CreateAgentImprovementActivationOptions`, `CreateAgentImprovementActivationResultOptions`, `CreateAgentImprovementProposalOptions`, `CreateExactProcessCandidateExperimentExecutorOptions`, `ExactProcessCandidateExperimentExecution`, `ExactProcessCandidateExperimentExecutor`, `ExecuteAgentCandidateExperimentCellOptions`, `ExecuteAgentImprovementActivationInput`, `ExecuteAgentImprovementActivationOptions`, `OptimizationActivationReceipt`, `OptimizationReceiptCost`, `ProposeAgentImprovementOptions`, `ProposeAgentImprovementResult`, `ProposeAgentProfileImprovementResult`, `PullCertifiedOptions`, `ReviewAgentImprovementInput`, `RunAgentCandidateExperimentOptions`, `RunAgentCandidateExperimentResult`, `SealedCandidateActivationTransitionInput`, `VerifyCandidateExecutionEvidenceOptions`, `AgentImprovementActivationIntent`, `AgentImprovementActivationOutcome`, `AgentImprovementActivationTargetIdentity`, `AgentImprovementActivationTransitionInput`, `AgentImprovementAnalysisOptions`, `AgentImprovementProfileActivationInput`, `AgentImprovementProfileActivationPreparation`, `AgentImprovementProfileActivationTarget`, `AgentImprovementProfileSurface`, `AgentImprovementProfileTargetState`, `AgentImprovementProfileTargetTransition`, `AgentImprovementReviewDecision`, `AgentProfileImprovementActivationOperation`, `AgentProfileMeasuredSurface`.
 
-### Recursive atom + loop kernel (alias of ./runtime)
+### Execution kernel — recursive atom, supervision, executors, round-synchronous loop
 
-Import from `@tangle-network/agent-runtime/loops` — 594 exports.
+Import from `@tangle-network/agent-runtime/kernel` — 594 exports.
 
 | Symbol | Kind | Summary |
 |---|---|---|
diff --git a/docs/api/profiles.md b/docs/api/profiles.md
index 930d4d33..506d147d 100644
--- a/docs/api/profiles.md
+++ b/docs/api/profiles.md
@@ -1677,7 +1677,7 @@ picks the highest-scoring valid output.
 
 ##### driver
 
-> **driver**: [`Driver`](runtime.md#driver-2)\<[`ResearchTask`](#researchtask), [`ResearchOutput`](#researchoutput), `"done"`\>
+> **driver**: [`Driver`](index.md#driver)\<[`ResearchTask`](#researchtask), [`ResearchOutput`](#researchoutput), `"done"`\>
 
 ***
 
diff --git a/docs/api/runtime.md b/docs/api/runtime.md
index 4530d2e7..a123b1a0 100644
--- a/docs/api/runtime.md
+++ b/docs/api/runtime.md
@@ -629,7 +629,7 @@ FS-backed `CoordinationLog`: append-only JSONL, fsynced per record.
 
 ###### event
 
-[`CoordinationEvent`](#coordinationevent)
+[`CoordinationEvent`](index.md#coordinationevent)
 
 ###### at
 
@@ -663,34 +663,6 @@ FS-backed `CoordinationLog`: append-only JSONL, fsynced per record.
 
 ## Interfaces
 
-### AnalystRegistry
-
-#### Properties
-
-##### kinds
-
-> `readonly` **kinds**: readonly `object`[]
-
-##### run
-
-> `readonly` **run**: (`kindId`, `trace`) => `Promise`\<`unknown`\>
-
-###### Parameters
-
-###### kindId
-
-`string`
-
-###### trace
-
-`unknown`
-
-###### Returns
-
-`Promise`\<`unknown`\>
-
-***
-
 ### AnalystFindingEvent
 
 A trace-analyst result re-entered as a message on the bus (the `finding` event kind).
@@ -1184,7 +1156,7 @@ Trajectory-grounded evidence for the verdict (specific calls/patterns).
 
 ##### recommendation
 
-> **recommendation**: `"abort"` \| `"continue"` \| `"steer"`
+> **recommendation**: `"abort"` \| `"steer"` \| `"continue"`
 
 The single recommended intervention.
 
@@ -2606,7 +2578,7 @@ Map the finished loop to the artifact the judges score. Default:
 
 ###### result
 
-[`LoopResult`](#loopresult)\<`Task`, `Output`, `Decision`\>
+[`LoopResult`](index.md#loopresult)\<`Task`, `Output`, `Decision`\>
 
 ###### Returns
 
@@ -2642,7 +2614,7 @@ Resolve the model actually served from the completed loop.
 
 ###### result
 
-[`LoopResult`](#loopresult)\<`Task`, `Output`, `Decision`\>
+[`LoopResult`](index.md#loopresult)\<`Task`, `Output`, `Decision`\>
 
 ###### scenario
 
@@ -2718,7 +2690,7 @@ Map the finished loop to the artifact the campaign judges score.
 
 ###### result
 
-[`LoopResult`](#loopresult)\<`Task`, `Output`, `Decision`\>
+[`LoopResult`](index.md#loopresult)\<`Task`, `Output`, `Decision`\>
 
 ###### Returns
 
@@ -2752,7 +2724,7 @@ Resolve the model actually served from the completed loop.
 
 ###### result
 
-[`LoopResult`](#loopresult)\<`Task`, `Output`, `Decision`\>
+[`LoopResult`](index.md#loopresult)\<`Task`, `Output`, `Decision`\>
 
 ###### scenario
 
@@ -3002,7 +2974,7 @@ The analyst agent the combinator spawns over the trace. `harness` is the persona
 
 ##### budget
 
-> `readonly` **budget**: [`Budget`](#budget-13)
+> `readonly` **budget**: [`Budget`](index.md#budget-4)
 
 The conserved budget reserved for one analyst spawn. The pool reserves against it and fails
  closed; an analyst that cannot be admitted is a fail-loud abort, never silent empty findings.
@@ -3097,7 +3069,7 @@ Stable persona name — used as the trace/journal label root, never as content.
 
 ##### root
 
-> `readonly` **root**: [`AgentSpec`](#agentspec)
+> `readonly` **root**: [`AgentSpec`](index.md#agentspec)
 
 The root agent's executor mapping (profile + harness + optional BYO executor). The
 shape's root `Agent` carries THIS as its `executorSpec`; child specs the shape spawns
@@ -3179,7 +3151,7 @@ thread the seams onto each spawn. Exactly one is required — fail loud if neith
 
 ##### registry?
 
-> `readonly` `optional` **registry?**: [`ExecutorRegistry`](#executorregistry)
+> `readonly` `optional` **registry?**: [`ExecutorRegistry`](index.md#executorregistry)
 
 A registry whose factories already capture their seams. Highest precedence.
 
@@ -3210,7 +3182,7 @@ The minimal input to build a `Persona`. Mirrors `Persona` but lets the builder d
 
 ##### root
 
-> `readonly` **root**: [`AgentSpec`](#agentspec)
+> `readonly` **root**: [`AgentSpec`](index.md#agentspec)
 
 ##### directive
 
@@ -3248,7 +3220,7 @@ against them and fails closed, so an over-eager shape can never overspend.
 
 ##### perChild
 
-> `readonly` **perChild**: [`Budget`](#budget-13)
+> `readonly` **perChild**: [`Budget`](index.md#budget-4)
 
 Per-child spawn budget the shape reserves for each leaf/sub-loop it opens.
 
@@ -3310,7 +3282,7 @@ spec drives the resolved `Executor`; `act` exists only to satisfy the `Agent` sh
 
 ###### spec
 
-[`AgentSpec`](#agentspec)
+[`AgentSpec`](index.md#agentspec)
 
 ###### Returns
 
@@ -3318,7 +3290,7 @@ spec drives the resolved `Executor`; `act` exists only to satisfy the `Agent` sh
 
 ##### childSpec()
 
-> **childSpec**(`profile`, `harness?`): [`AgentSpec`](#agentspec)
+> **childSpec**(`profile`, `harness?`): [`AgentSpec`](index.md#agentspec)
 
 Derive a child `AgentSpec` from the persona's root spec with an overridden profile —
  the seam a shape uses to give a worker a narrower role/prompt than the root persona.
@@ -3335,7 +3307,7 @@ Derive a child `AgentSpec` from the persona's root spec with an overridden profi
 
 ###### Returns
 
-[`AgentSpec`](#agentspec)
+[`AgentSpec`](index.md#agentspec)
 
 ***
 
@@ -3450,7 +3422,7 @@ A resolved shape factory OR a registered shape name.
 
 ##### budget
 
-> `readonly` **budget**: [`Budget`](#budget-13)
+> `readonly` **budget**: [`Budget`](index.md#budget-4)
 
 ##### shapeBudget?
 
@@ -3594,7 +3566,7 @@ Read this stage's settled child output into the typed `StepOut` the next stage f
 
 ###### settled
 
-[`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`StepOut`\>\>
+[`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`StepOut`\>\>
 
 ###### Returns
 
@@ -3709,7 +3681,7 @@ Per-item child label (defaults to `item:<index>` in the impl).
 
 ##### itemSpec()?
 
-> `optional` **itemSpec**(`item`, `index`, `ctx`): [`AgentSpec`](#agentspec)
+> `optional` **itemSpec**(`item`, `index`, `ctx`): [`AgentSpec`](index.md#agentspec)
 
 Optional per-item `AgentSpec` override. When set, each item's child is spawned against the
 returned spec instead of `persona.root` — the seam a heterogeneous fanout uses to give each
@@ -3732,7 +3704,7 @@ leaf). Absent ⇒ every item runs against the persona's root spec (the homogeneo
 
 ###### Returns
 
-[`AgentSpec`](#agentspec)
+[`AgentSpec`](index.md#agentspec)
 
 ***
 
@@ -3758,7 +3730,7 @@ How a fanout's synthesis child is built + read. `synthesisTask` projects the dra
 
 ###### gathered
 
-readonly [`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
+readonly [`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
 
 ###### ctx
 
@@ -3776,7 +3748,7 @@ readonly [`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
 
 ###### settled
 
-[`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`D`\>\>
+[`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`D`\>\>
 
 ###### Returns
 
@@ -3849,7 +3821,7 @@ Fold one settled step into the accumulated state (the loop's running deliverable
 
 ###### settled
 
-[`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`D`\>\>
+[`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`D`\>\>
 
 ###### Returns
 
@@ -4117,7 +4089,7 @@ Build the verifier child's task from the implement child's settled candidate.
 
 ###### candidate
 
-[`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`Candidate`\>\>
+[`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`Candidate`\>\>
 
 ###### ctx
 
@@ -4137,7 +4109,7 @@ Project the gated (verifier-`valid`) candidate into the terminal deliverable.
 
 ###### candidate
 
-[`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`Candidate`\>\>
+[`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`Candidate`\>\>
 
 ###### verdict
 
@@ -4245,7 +4217,7 @@ Synthesize the terminal deliverable from every settled lineage (selector≠judge
 
 ###### gathered
 
-readonly [`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
+readonly [`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
 
 ###### ctx
 
@@ -4289,7 +4261,7 @@ When true, `decide` may read `settled.verdict` directly — collides with the st
 
 ###### settled
 
-[`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`D`\>\>
+[`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`D`\>\>
 
 ###### findings
 
@@ -4344,7 +4316,7 @@ A lineage the gate may widen toward — the settled child that looked promising
 
 ###### spent
 
-> **spent**: [`Spend`](#spend)
+> **spent**: [`Spend`](index.md#spend)
 
 ###### seq
 
@@ -4418,7 +4390,7 @@ Opaque root-task framing (whatever the combinator was invoked with).
 
 ##### settledSoFar
 
-> `readonly` **settledSoFar**: readonly [`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
+> `readonly` **settledSoFar**: readonly [`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
 
 The children this combinator has drained off `scope.next()`, in cursor order.
 
@@ -4453,7 +4425,7 @@ explicitly NOT for steering — reading it to steer is the coupling the architec
 
 ##### settledSoFar
 
-> `readonly` **settledSoFar**: readonly [`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
+> `readonly` **settledSoFar**: readonly [`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
 
 ##### lastValidScore?
 
@@ -4691,20 +4663,20 @@ shape: `parent`/`children` are the actual spawn edges the run took, not a planne
 
 ##### status
 
-> `readonly` **status**: `"failed"` \| `"cancelled"` \| `"pending"` \| `"done"` \| `"waiting"`
+> `readonly` **status**: `"done"` \| `"failed"` \| `"cancelled"` \| `"pending"` \| `"waiting"`
 
 Terminal status the journal recorded for this node. `'waiting'` is a wait-state node that was
  armed and never woken — the journal's record of a run that died mid-wait.
 
 ##### ownSpend
 
-> `readonly` **ownSpend**: [`Spend`](#spend)
+> `readonly` **ownSpend**: [`Spend`](index.md#spend)
 
 This node's OWN conserved spend (from its `settled` event).
 
 ##### rolledUpSpend
 
-> `readonly` **rolledUpSpend**: [`Spend`](#spend)
+> `readonly` **rolledUpSpend**: [`Spend`](index.md#spend)
 
 This node's spend PLUS every descendant's — the rolled-up subtree cost. The cost a parent
  "really" consumed inclusive of its children's fanout (the equal-k-on-cost basis).
@@ -4746,7 +4718,7 @@ Every node, in cursor/spawn order — the realized tree (`parent`/`children` are
 
 ##### total
 
-> `readonly` **total**: [`Spend`](#spend)
+> `readonly` **total**: [`Spend`](index.md#spend)
 
 The root's rolled-up spend — the whole run's conserved total (tokens + usd + iterations + ms).
 
@@ -5587,7 +5559,7 @@ The headline when both `refine` and `sample` ran: paired-bootstrap lift of refin
 
 ##### driver
 
-> **driver**: [`Driver`](#driver-2)\<`Task`, `Output`, `Decision`\>
+> **driver**: [`Driver`](index.md#driver)\<`Task`, `Output`, `Decision`\>
 
 **`Experimental`**
 
@@ -7970,7 +7942,7 @@ Open/close artifacts the body manages itself (e.g. one persistent handle for dep
 
 ##### scope
 
-> `readonly` **scope**: [`Scope`](#scope-1)\<[`Outcome`](#outcome-1)\<`unknown`\>\>
+> `readonly` **scope**: [`Scope`](index.md#scope)\<[`Outcome`](#outcome-1)\<`unknown`\>\>
 
 #### Methods
 
@@ -8230,7 +8202,7 @@ budget: refine→max shots; sample→rollout width.
 
 ##### rootBudget?
 
-> `optional` **rootBudget?**: [`Budget`](#budget-13)
+> `optional` **rootBudget?**: [`Budget`](index.md#budget-4)
 
 ***
 
@@ -8835,7 +8807,7 @@ Where/how each worker runs the surface task.
 
 ##### budget?
 
-> `readonly` `optional` **budget?**: [`Budget`](#budget-13)
+> `readonly` `optional` **budget?**: [`Budget`](index.md#budget-4)
 
 The conserved compute pool for the whole supervised run. Default: sized off the worker's inner-loop
  bounds for a handful of worker spawns — raise it to let the driver try more.
@@ -8849,7 +8821,7 @@ The driver brain's router substrate (its own inference). Default: the worker's r
 
 ##### analysts?
 
-> `readonly` `optional` **analysts?**: [`AnalystRegistry`](#analystregistry) \| `null`
+> `readonly` `optional` **analysts?**: [`AnalystRegistry`](index.md#analystregistry) \| `null`
 
 The self-improvement lens fed to the driver on each settled worker. Default `failuresAnalyst()`
  (target the still-failing tests). Pass a custom registry to change it, or `null` to turn the
@@ -9066,7 +9038,7 @@ caller inspects `ok` before `ticket`.
 
 ###### b
 
-[`Budget`](#budget-13)
+[`Budget`](index.md#budget-4)
 
 ###### Returns
 
@@ -9088,7 +9060,7 @@ a double refund would silently break conservation).
 
 ###### spent
 
-[`Spend`](#spend)
+[`Spend`](index.md#spend)
 
 ###### Returns
 
@@ -9096,7 +9068,7 @@ a double refund would silently break conservation).
 
 ##### spendFrom()
 
-> **spendFrom**(`events`): `Promise`\<[`Spend`](#spend)\>
+> **spendFrom**(`events`): `Promise`\<[`Spend`](index.md#spend)\>
 
 Fold a normalized `UsageEvent` stream (or array) into a `Spend`. Tokens via
  `addTokenUsage`, usd on its own channel, iterations from `'iteration'` events.
@@ -9110,7 +9082,7 @@ Fold a normalized `UsageEvent` stream (or array) into a `Spend`. Tokens via
 
 ###### Returns
 
-`Promise`\<[`Spend`](#spend)\>
+`Promise`\<[`Spend`](index.md#spend)\>
 
 ##### readout()
 
@@ -9139,7 +9111,7 @@ only makes the live `readout()` reflect driver inference for the in-loop guard.
 
 ###### spend
 
-[`Spend`](#spend)
+[`Spend`](index.md#spend)
 
 ###### Returns
 
@@ -9228,7 +9200,7 @@ Resolve a spawned `profile` to a worker LEAF or a driver child (the recursion se
 
 ##### perWorker
 
-> `readonly` **perWorker**: [`Budget`](#budget-13)
+> `readonly` **perWorker**: [`Budget`](index.md#budget-4)
 
 Per-child budget reserved from the conserved pool on each spawn.
 
@@ -9241,7 +9213,7 @@ Hard cap on simultaneously-LIVE workers — `spawn_agent` fails closed once this
 
 ##### analysts?
 
-> `readonly` `optional` **analysts?**: [`AnalystRegistry`](#analystregistry)
+> `readonly` `optional` **analysts?**: [`AnalystRegistry`](index.md#analystregistry)
 
 The analyst lenses available to the driver. Required for `analyzeOnSettle` (and `run_analyst`).
  Unset → no analyst feed (status quo: the driver gets settled outputs, no findings).
@@ -9384,7 +9356,7 @@ Pass-through subscriber for every coordination bus event (settled / question / f
 
 ###### event
 
-[`CoordinationEvent`](#coordinationevent)
+[`CoordinationEvent`](index.md#coordinationevent)
 
 ###### Returns
 
@@ -9400,7 +9372,7 @@ Questions + findings a durable coordination log replayed from a prior process of
 
 ##### finalizer?
 
-> `readonly` `optional` **finalizer?**: [`SupervisorFinalizer`](#supervisorfinalizer)
+> `readonly` `optional` **finalizer?**: [`SupervisorFinalizer`](index.md#supervisorfinalizer)
 
 How the settled-worker ledger becomes the run's output. Default `bestDelivered` — the single
  highest-scoring DELIVERED child (the exact keep-best every existing caller had). Runs under
@@ -9448,7 +9420,7 @@ The durable coordination side-log seam. `append` records one bus event (kinds it
 
 ###### event
 
-[`CoordinationEvent`](#coordinationevent)
+[`CoordinationEvent`](index.md#coordinationevent)
 
 ###### at
 
@@ -9508,7 +9480,7 @@ nobody is left to read a finding, and analysts spend real compute). Returns the
 
 ##### history
 
-> **history**: () => readonly [`BusRecord`](#busrecord)\<[`CoordinationEvent`](#coordinationevent)\>[]
+> **history**: () => readonly [`BusRecord`](#busrecord)\<[`CoordinationEvent`](index.md#coordinationevent)\>[]
 
 The full ordered bus-event log — observability audit + replay trail.
 
@@ -9518,7 +9490,7 @@ The full ordered log of every bus event — UP (settled / question / finding) an
 
 ###### Returns
 
-readonly [`BusRecord`](#busrecord)\<[`CoordinationEvent`](#coordinationevent)\>[]
+readonly [`BusRecord`](#busrecord)\<[`CoordinationEvent`](index.md#coordinationevent)\>[]
 
 ##### stats
 
@@ -9613,7 +9585,7 @@ WHERE the authored workers run — the worker-execution backend (`router-tools`
 
 ##### budget?
 
-> `readonly` `optional` **budget?**: [`Budget`](#budget-13)
+> `readonly` `optional` **budget?**: [`Budget`](index.md#budget-4)
 
 The conserved compute pool for the whole delegation. Defaults to [defaultDelegateBudget](#defaultdelegatebudget).
 
@@ -9761,7 +9733,7 @@ Called once per settlement, in cursor order, BEFORE the freed slot is refilled 
 
 ###### settled
 
-[`Settled`](#settled-3)\<`Out`\>
+[`Settled`](index.md#settled)\<`Out`\>
 
 ###### Returns
 
@@ -9792,7 +9764,7 @@ drained to completion (no orphan, no lost settlement). Use it for a progress/pla
 
 ##### settled
 
-> `readonly` **settled**: readonly [`Settled`](#settled-3)\<`Out`\>[]
+> `readonly` **settled**: readonly [`Settled`](index.md#settled)\<`Out`\>[]
 
 Every settlement, in the order `scope.next()` yielded them.
 
@@ -10087,36 +10059,6 @@ One DELIVERED child, materialized: settled `done`, oracle-passed, output rehydra
 
 ***
 
-### FinalizeContext
-
-What a finalizer gets to decide with. `delivered` is the ONLY output material; `allSettled`
- and `tree` are metadata (record a disagreement, count the downs); `blobs` re-reads delivered
- artifacts only; `budget` is the conserved-pool readout at finalize time.
-
-#### Properties
-
-##### delivered
-
-> `readonly` **delivered**: readonly [`DeliveredOutput`](#deliveredoutput)[]
-
-##### allSettled
-
-> `readonly` **allSettled**: readonly [`FinalizerSettled`](#finalizersettled)[]
-
-##### tree
-
-> `readonly` **tree**: [`TreeView`](#treeview)
-
-##### blobs
-
-> `readonly` **blobs**: `Pick`\<[`ResultBlobStore`](#resultblobstore), `"get"`\>
-
-##### budget
-
-> `readonly` **budget**: `Readonly`\<\{ `tokensLeft`: `number`; `usdLeft`: `number`; `usdCapped`: `boolean`; `deadlineMs`: `number`; `reservedTokens`: `number`; \}\>
-
-***
-
 ### InboxMessage
 
 **`Experimental`**
@@ -10612,7 +10554,7 @@ The fields are exactly `SupervisorOpts`' `journal` / `blobs` / `executors`.
 
 ##### executors
 
-> `readonly` **executors**: [`ExecutorRegistry`](#executorregistry)
+> `readonly` **executors**: [`ExecutorRegistry`](index.md#executorregistry)
 
 ##### resume?
 
@@ -10942,7 +10884,7 @@ Generic environment provider executor config. External packages implement
 
 ##### runtime?
 
-> `optional` **runtime?**: [`Runtime`](#runtime-3)
+> `optional` **runtime?**: [`Runtime`](#runtime-2)
 
 **`Experimental`**
 
@@ -11177,11 +11119,11 @@ Drive the worker to settlement. `signal` is the spawn-scoped abort handed to `ex
 
 ##### artifact()
 
-> **artifact**(): \{ `outRef`: `string`; `out`: `unknown`; `spent`: [`Spend`](#spend); \} \| `undefined`
+> **artifact**(): \{ `outRef`: `string`; `out`: `unknown`; `spent`: [`Spend`](index.md#spend); \} \| `undefined`
 
 ###### Returns
 
-\{ `outRef`: `string`; `out`: `unknown`; `spent`: [`Spend`](#spend); \} \| `undefined`
+\{ `outRef`: `string`; `out`: `unknown`; `spent`: [`Spend`](index.md#spend); \} \| `undefined`
 
 ##### teardown()
 
@@ -11307,7 +11249,7 @@ Content-addressed result store backing `outRef` rehydration.
 
 ##### executors
 
-> `readonly` **executors**: [`ExecutorRegistry`](#executorregistry)
+> `readonly` **executors**: [`ExecutorRegistry`](index.md#executorregistry)
 
 The open executor resolver (BYO → router/inline → registered harness factory).
 
@@ -11391,7 +11333,7 @@ continue past, so a freshly-spawned child never reuses a journaled `seq`. Absent
 
 ###### settled
 
-> `readonly` **settled**: readonly [`Settled`](#settled-3)\<`unknown`\>[]
+> `readonly` **settled**: readonly [`Settled`](index.md#settled)\<`unknown`\>[]
 
 ###### view
 
@@ -11436,11 +11378,11 @@ Prior committed spend summed off the journal (settled child work + metered infer
 
 ###### priorSpend.childWork
 
-> `readonly` **childWork**: [`Spend`](#spend)
+> `readonly` **childWork**: [`Spend`](index.md#spend)
 
 ###### priorSpend.driverInference
 
-> `readonly` **driverInference**: [`Spend`](#spend)
+> `readonly` **driverInference**: [`Spend`](index.md#spend)
 
 ***
 
@@ -11590,7 +11532,7 @@ Materialize the view. Pass the live `Scope` to include the worker feed and tree
 
 ###### scope?
 
-[`Scope`](#scope-1)\<`unknown`\>
+[`Scope`](index.md#scope)\<`unknown`\>
 
 ###### opts?
 
@@ -11616,7 +11558,7 @@ Evaluate a rule against the current view.
 
 ###### scope?
 
-[`Scope`](#scope-1)\<`unknown`\>
+[`Scope`](index.md#scope)\<`unknown`\>
 
 ###### opts?
 
@@ -11750,7 +11692,7 @@ Idle time that counts as stalled, passed through to the live progress read. Omit
 
 ##### budget
 
-> `readonly` **budget**: [`Budget`](#budget-13)
+> `readonly` **budget**: [`Budget`](index.md#budget-4)
 
 The conserved compute pool for the whole run.
 
@@ -11822,7 +11764,7 @@ Runs an `extraTools` call; null/undefined falls through to the coordination disp
 
 ##### perWorker?
 
-> `readonly` `optional` **perWorker?**: [`Budget`](#budget-13)
+> `readonly` `optional` **perWorker?**: [`Budget`](index.md#budget-4)
 
 Per-child budget reserved on each spawn. Defaults to a quarter of the pool's tokens.
 
@@ -11836,7 +11778,7 @@ Hard cap on simultaneously-LIVE workers — `spawn_agent` fails closed once this
 
 ##### analysts?
 
-> `readonly` `optional` **analysts?**: [`AnalystRegistry`](#analystregistry)
+> `readonly` `optional` **analysts?**: [`AnalystRegistry`](index.md#analystregistry)
 
 Analyst lenses available to the driver. Required for `analyzeOnSettle`. Unset → status quo
  (the driver receives settled worker outputs, no analyst findings).
@@ -11981,7 +11923,7 @@ Restrict the run to this subset of models. When set, every configured model —
 
 ##### finalizer?
 
-> `readonly` `optional` **finalizer?**: [`SupervisorFinalizer`](#supervisorfinalizer)
+> `readonly` `optional` **finalizer?**: [`SupervisorFinalizer`](index.md#supervisorfinalizer)
 
 How the settled-worker ledger becomes the run's output. Default `bestDelivered` — the single
  highest-scoring DELIVERED child (the exact behavior every existing caller had). Alternatives:
@@ -12038,7 +11980,7 @@ Resolve a spawned worker `profile` to a leaf agent — the recursion seam (same
 
 ##### perWorker
 
-> `readonly` **perWorker**: [`Budget`](#budget-13)
+> `readonly` **perWorker**: [`Budget`](index.md#budget-4)
 
 Per-child budget reserved from the conserved pool on each spawn.
 
@@ -12097,7 +12039,7 @@ Runs an `extraTools` call; null/undefined falls through to the coordination disp
 
 ##### analysts?
 
-> `readonly` `optional` **analysts?**: [`AnalystRegistry`](#analystregistry)
+> `readonly` `optional` **analysts?**: [`AnalystRegistry`](index.md#analystregistry)
 
 Analyst lenses available to the driver (both arms). Required for `analyzeOnSettle`.
 
@@ -12169,7 +12111,7 @@ Pass-through subscriber for every coordination bus event (both arms) — the sea
 
 ###### event
 
-[`CoordinationEvent`](#coordinationevent)
+[`CoordinationEvent`](index.md#coordinationevent)
 
 ###### Returns
 
@@ -12184,7 +12126,7 @@ Questions + findings replayed from a prior process of this run (a durable coordi
 
 ##### finalizer?
 
-> `readonly` `optional` **finalizer?**: [`SupervisorFinalizer`](#supervisorfinalizer)
+> `readonly` `optional` **finalizer?**: [`SupervisorFinalizer`](index.md#supervisorfinalizer)
 
 How the settled ledger becomes the run's output (both arms). Default `bestDelivered` — the
  exact keep-best every existing caller had. Always runs under the delivered-only invariant.
@@ -12382,7 +12324,7 @@ unordered collection. `scope.next()` delivers strictly in recorded `seq` order.
 
 ###### scope
 
-[`Scope`](#scope-1)\<`Out`\>
+[`Scope`](index.md#scope)\<`Out`\>
 
 ###### Returns
 
@@ -12390,20 +12332,9 @@ unordered collection. `scope.next()` delivers strictly in recorded `seq` order.
 
 ***
 
-### Executor
-
-The leaf runtime — ONE open interface, not a closed union. `execute` returns a
-`Promise<ExecutorResult>` for one-shot executors OR an `AsyncIterable<UsageEvent>` for
-streaming ones; a streaming executor reports incremental normalized usage as it runs
-(the budget pool reconciles against it) and exposes its terminal artifact via
-`resultArtifact()`. Both shapes normalize usage to `UsageEvent` so the conserved pool
-meters every runtime identically.
+### ExecutorResult
 
-Built-in implementations (in `runtime.ts`, NOT variants here): router/inline (a direct
-Router/HTTP inference call, no box), sandbox (COMPOSES `runAgentRounds` as a leaf, forwarding
-PR #150's optional `lineage` passthrough — does NOT reinvent checkpoint/fork), cli
-(Halo/RLM subprocess; `budgetExempt`, excluded from equal-k by construction). A user's
-own agent (mastra/agno/raw HTTP/anything) is first-class by implementing this interface.
+Terminal artifact of a one-shot `Executor.execute`.
 
 #### Type Parameters
 
@@ -12413,161 +12344,138 @@ own agent (mastra/agno/raw HTTP/anything) is first-class by implementing this in
 
 #### Properties
 
-##### runtime
-
-> `readonly` **runtime**: [`Runtime`](#runtime-3)
-
-Stable runtime tag for traces + the equal-k exemption check.
-
-##### budgetExempt?
-
-> `readonly` `optional` **budgetExempt?**: `boolean`
-
-When true, this executor's spend is NOT metered against the conserved pool and its
-iterations are excluded from the equal-k assertion (a `cli` subprocess without
-token accounting). Fail-loud everywhere else: a metered executor MUST report usage.
-
-#### Methods
+##### outRef
 
-##### execute()
+> **outRef**: `string`
 
-> **execute**(`task`, `signal`): `AsyncIterable`\<[`UsageEvent`](#usageevent), `any`, `any`\> \| `Promise`\<[`ExecutorResult`](#executorresult)\<`Out`\>\>
+##### out
 
-One-shot → resolves a `ExecutorResult`; streaming → yields incremental `UsageEvent`s and
-the terminal artifact is read from `resultArtifact()` after the stream drains.
-`signal` is the spawn-scoped abort (chains the acquire lifecycle for sandbox).
+> **out**: `Out`
 
-###### Parameters
+##### verdict?
 
-###### task
+> `optional` **verdict?**: `DefaultVerdict`
 
-`unknown`
+##### spent
 
-###### signal
+> **spent**: [`Spend`](index.md#spend)
 
-`AbortSignal`
+***
 
-###### Returns
+### ExecutorContext
 
-`AsyncIterable`\<[`UsageEvent`](#usageevent), `any`, `any`\> \| `Promise`\<[`ExecutorResult`](#executorresult)\<`Out`\>\>
+Construction context handed to a `ExecutorFactory` — the seams a built-in needs
+ (sandbox client for the sandbox executor, router config for router/inline) without
+ the factory reaching into module globals.
 
-##### deliver()?
+#### Properties
 
-> `optional` **deliver**(`msg`): `void`
+##### signal
 
-Optional inbox: receive an out-of-band message from the driver mid-run (the `send`/`steer_agent`
-verb). A streaming executor drains pending messages between turns and folds them into the next
-step (a steer / interrupt / resume). A one-shot executor that can't be steered mid-flight omits
-this; `Scope.send` then returns `false` for it. Never throws — a malformed message is the
-executor's to ignore.
+> `readonly` **signal**: `AbortSignal`
 
-###### Parameters
+##### seams
 
-###### msg
+> `readonly` **seams**: `Readonly`\<`Record`\<`string`, `unknown`\>\>
 
-`unknown`
+Opaque seams the registry threads through; a built-in narrows what it needs.
 
-###### Returns
+***
 
-`void`
+### SpawnOpts
 
-##### progress()?
+#### Properties
 
-> `optional` **progress**(): [`ExecutorProgress`](#executorprogress) \| `undefined`
+##### budget
 
-Optional LIVE progress: what this worker is doing RIGHT NOW, read synchronously and
-cheaply while `execute` is still streaming. The scope already derives activity timing,
-turns, and spend from the metered usage stream for EVERY executor; this adds only what
-the executor alone knows — the harness's tool/file activity, its own turn count, and how
-many delivered steers it has not yet folded in. Never throws; a read that cannot be
-answered returns `undefined`.
+> `readonly` **budget**: [`Budget`](index.md#budget-4)
 
-This is the observe half of steering: `deliver` lets a driver correct a worker, and this
-is the evidence it corrects FROM. An executor that implements neither cannot be supervised
-mid-flight — it can only be waited on.
+##### label
 
-###### Returns
+> `readonly` **label**: `string`
 
-[`ExecutorProgress`](#executorprogress) \| `undefined`
+##### restart?
 
-##### traceSource()?
+> `readonly` `optional` **restart?**: [`Restart`](#restart)
 
-> `optional` **traceSource**(): [`TraceSource`](#tracesource-1) \| `undefined`
+##### shutdown?
 
-Optional live tool-call trace for the ONLINE detectors (`watchTrace`). An executor that
-can see its worker's tool calls exposes them here, so a supervisor can run the streaming
-repeated-action / error-streak panel over a RUNNING worker and raise a `finding` the
-moment it loops, instead of discovering it at settle. Omitted = no online detection for
-this runtime (the settle-time analyzers still work).
+> `readonly` `optional` **shutdown?**: `number` \| `"brutalKill"` \| `"infinity"`
 
-###### Returns
+Teardown grace handed to the executor when this node is reaped.
 
-[`TraceSource`](#tracesource-1) \| `undefined`
+##### key?
 
-##### teardown()
+> `readonly` `optional` **key?**: `string`
 
-> **teardown**(`grace`): `Promise`\<\{ `destroyed`: `boolean`; \}\>
+Semantic identity of this assignment ACROSS process lifetimes. A keyed spawn is
+idempotent per key: once a child spawned under a key settles `done` — in this process or in a
+journaled prior one — spawning the same key returns that committed result (`prior.state:
+'completed'`) instead of paying for the work again. A key whose prior attempt settled `down`
+or was journaled as started-but-never-settled spawns FRESH but says so explicitly
+(`prior.state: 'retried' | 'lost'`), and a key that is currently LIVE is refused
+(`'duplicate-key'`) — the same assignment can never run twice concurrently. Unkeyed spawns
+(the default) are position-identified and always run.
 
-Tear the executor's resources down. `grace` mirrors the OTP shutdown spec
-(`'brutalKill'` = immediate, a number = ms grace, `'infinity'` = await clean exit).
+***
 
-###### Parameters
+### Handle
 
-###### grace
+A live child handle. `abort()` is defined over the ACQUIRE lifecycle: it chains into
+the `acquireSandbox` signal and reaps a find-by-name orphan box, so a node aborted
+mid-acquire never leaks (M1).
 
-`number` \| `"brutalKill"` \| `"infinity"`
+#### Type Parameters
 
-###### Returns
+##### Out
 
-`Promise`\<\{ `destroyed`: `boolean`; \}\>
+`Out`
 
-##### resultArtifact()
+#### Properties
 
-> **resultArtifact**(): `object`
+##### id
 
-The replay source (B1): the content-addressed `outRef` + the materialized output the
-driver branched on, its verdict, and the conserved spend. Read once, after settle.
+> `readonly` **id**: `string`
 
-###### Returns
+##### label
 
-`object`
+> `readonly` **label**: `string`
 
-###### outRef
+##### status
 
-> **outRef**: `string`
+> `readonly` **status**: [`NodeStatus`](#nodestatus)
 
-###### out
+##### \_\_out?
 
-> **out**: `Out`
+> `readonly` `optional` **\_\_out?**: `Out`
 
-###### verdict?
+Phantom: binds the handle to the child's output type so `spawn<C>` returns a
+ `Handle<C>` distinct from a `Handle<other>`. Type-only — never present at runtime.
 
-> `optional` **verdict?**: `DefaultVerdict`
+#### Methods
 
-###### spent
+##### abort()
 
-> **spent**: [`Spend`](#spend)
+> **abort**(`reason?`): `void`
 
-##### metered()?
+###### Parameters
 
-> `optional` **metered**(): [`Spend`](#spend) \| `undefined`
+###### reason?
 
-A driver-executor's OWN-inference subtree total (rolled up from its nested tree's `metered`
-events) — the parent scope journals it as a `metered` event for this node on settle, on BOTH
-the done AND the down/crash paths, so a crashed sub-driver's partial inference still re-homes
-(the pool already debited it via `observe`; the journal must match). NOT reconciled, so it never
-trips the reservation clamp. Read on settle, valid after `execute` resolves OR throws. Leaf
-executors omit it (returns `undefined`).
+`string`
 
 ###### Returns
 
-[`Spend`](#spend) \| `undefined`
+`void`
 
 ***
 
-### ExecutorResult
+### ResumedWork
 
-Terminal artifact of a one-shot `Executor.execute`.
+The committed work a resumed run inherits from its journal. `settled` is the replayed
+`Settled[]` (cursor-ordered, rehydrated from the blob store by `replaySpawnTree`); `view`
+is the tree as `materializeTreeView` folded it at the recorded cursor position. A
+resume-aware `act` reads `scope.resume?.settled` to pick up where the crashed run left off.
 
 #### Type Parameters
 
@@ -12577,669 +12485,129 @@ Terminal artifact of a one-shot `Executor.execute`.
 
 #### Properties
 
-##### outRef
-
-> **outRef**: `string`
-
-##### out
-
-> **out**: `Out`
-
-##### verdict?
+##### settled
 
-> `optional` **verdict?**: `DefaultVerdict`
+> `readonly` **settled**: readonly [`Settled`](index.md#settled)\<`Out`\>[]
 
-##### spent
+##### view
 
-> **spent**: [`Spend`](#spend)
+> `readonly` **view**: [`TreeView`](#treeview)
 
-***
+##### waits
 
-### AgentSpec
+> `readonly` **waits**: readonly [`PendingWait`](#pendingwait)[]
 
-`AgentProfile` does NOT carry a `harness`/backend field — `harness` lives on the
-sandbox SDK's `BackendConfig`, not the portable profile. So an agent is mapped to its
-executor through this MINIMAL wrapper, never by fabricating a field onto `AgentProfile`.
+Wait-state nodes the journal shows as ARMED but never woken — the run died mid-wait. Each
+carries the ORIGINAL arm instant and absolute deadline, so re-arming the same `label` through
+`Scope.wait` resumes the countdown instead of restarting it. Empty on a fresh run and on a
+resumed run that was not waiting.
 
-Resolution (in `runtime.ts`):
- - `executor` present        → BYO: use it verbatim (a user's own `Executor`).
- - `harness === null`        → router/inline: a direct Router call, no box.
- - `harness` is a `BackendType` → sandbox: compose `runAgentRounds` against `profile` on that backend.
-Fail loud on an unresolvable spec (no executor and an unknown harness).
+##### keys
 
-#### Properties
+> `readonly` **keys**: `ReadonlyMap`\<`string`, [`ResumedKeyState`](#resumedkeystate)\<`Out`\>\>
 
-##### profile
+Keyed assignments from the prior journal: `SpawnOpts.key` → what the journal proves about it.
+`completed`/`down` carry the rehydrated settlement; `in-doubt` means the spawn was journaled
+but no settlement ever landed — the process died with it in flight. `Scope.spawn` consults
+this so a keyed re-spawn resolves instead of duplicating (see `SpawnOpts.key`). Empty when no
+prior spawn carried a key.
 
-> `readonly` **profile**: `AgentProfile`
+##### priorSpend
 
-##### harness
+> `readonly` **priorSpend**: `object`
 
-> `readonly` **harness**: `BackendType` \| `null`
+The conserved spend the prior process(es) already committed for this run, summed off the same
+journal replay reads: every `settled` child's reconciled spend (`childWork`) plus every
+`metered` driver-inference record (`driverInference`). What a resume-aware driver reports as
+"already paid" — the run's final `spentTotal` includes it because the journal spans processes.
 
-`null` selects router/inline; a `BackendType` selects the sandboxed harness.
+###### childWork
 
-##### executor?
+> `readonly` **childWork**: [`Spend`](index.md#spend)
 
-> `readonly` `optional` **executor?**: [`Executor`](#executor)\<`unknown`\>
+###### driverInference
 
-Bring-your-own executor: when set, overrides harness-based resolution entirely.
+> `readonly` **driverInference**: [`Spend`](index.md#spend)
 
 ***
 
-### ExecutorContext
+### ResumedKeyState
 
-Construction context handed to a `ExecutorFactory` — the seams a built-in needs
- (sandbox client for the sandbox executor, router config for router/inline) without
- the factory reaching into module globals.
+What the journal proves about one keyed assignment at resume time.
 
-#### Properties
+#### Type Parameters
 
-##### signal
+##### Out
 
-> `readonly` **signal**: `AbortSignal`
+`Out` = `unknown`
 
-##### seams
+#### Properties
 
-> `readonly` **seams**: `Readonly`\<`Record`\<`string`, `unknown`\>\>
+##### id
 
-Opaque seams the registry threads through; a built-in narrows what it needs.
+> `readonly` **id**: `string`
 
-***
+##### label
 
-### ExecutorRegistry
+> `readonly` **label**: `string`
 
-The OPEN resolver: maps an `AgentSpec` to a `ExecutorFactory`. The default
-registry resolves the three built-ins AND accepts a BYO `executor`/factory; callers
-register more runtimes by name. NOT a closed switch — registration is the extension
-point, mirroring the open `Executor` interface.
+##### state
 
-#### Methods
+> `readonly` **state**: `"down"` \| `"completed"` \| `"in-doubt"`
 
-##### register()
+##### settled?
 
-> **register**\<`Out`\>(`runtime`, `factory`): `void`
+> `readonly` `optional` **settled?**: [`Settled`](index.md#settled)\<`Out`\>
 
-Register a factory for a named runtime. Throws on a duplicate name (fail loud).
+The rehydrated settlement; absent exactly when `state` is `'in-doubt'`.
 
-###### Type Parameters
+***
 
-###### Out
+### NodeSnapshot
 
-`Out`
+#### Properties
 
-###### Parameters
+##### id
 
-###### runtime
+> `readonly` **id**: `string`
 
-[`Runtime`](#runtime-3)
+##### parent?
 
-###### factory
+> `readonly` `optional` **parent?**: `string`
 
-[`ExecutorFactory`](#executorfactory)\<`Out`\>
+##### label
 
-###### Returns
+> `readonly` **label**: `string`
 
-`void`
+##### status
 
-##### resolve()
+> `readonly` **status**: [`NodeStatus`](#nodestatus)
 
-> **resolve**\<`Out`\>(`spec`): \{ `succeeded`: `true`; `value`: [`ExecutorFactory`](#executorfactory)\<`Out`\>; \} \| \{ `succeeded`: `false`; `error`: `string`; \}
+##### runtime
 
-Resolve a spec to a factory. Precedence: a BYO `spec.executor` → a trivial factory
-returning it; else `harness === null` → the `'router'` factory; else a registered
-factory for the harness-derived runtime. Returns a typed outcome — the caller
-inspects `succeeded` before `value` (no silent fallback).
+> `readonly` **runtime**: [`Runtime`](#runtime-2)
 
-###### Type Parameters
+##### budget
 
-###### Out
+> `readonly` **budget**: [`Budget`](index.md#budget-4)
 
-`Out`
+##### spent
 
-###### Parameters
+> `readonly` **spent**: [`Spend`](index.md#spend)
 
-###### spec
+Conserved spend so far for this node.
 
-[`AgentSpec`](#agentspec)
+##### outRef?
 
-###### Returns
+> `readonly` `optional` **outRef?**: `string`
 
-\{ `succeeded`: `true`; `value`: [`ExecutorFactory`](#executorfactory)\<`Out`\>; \} \| \{ `succeeded`: `false`; `error`: `string`; \}
+`outRef` once the node is `done` (the replay/result pointer).
 
 ***
 
-### Budget
+### TreeView
 
-A budget envelope on a spawn or the root. All ceilings; the pool reserves against them.
-
-#### Properties
-
-##### maxIterations
-
-> `readonly` **maxIterations**: `number`
-
-##### maxTokens
-
-> `readonly` **maxTokens**: `number`
-
-##### maxUsd?
-
-> `readonly` `optional` **maxUsd?**: `number`
-
-##### deadlineMs?
-
-> `readonly` `optional` **deadlineMs?**: `number`
-
-***
-
-### Spend
-
-Conserved spend, reconciled from the normalized `UsageEvent` stream. Tokens and usd
- are separate channels (never folded).
-
-#### Properties
-
-##### iterations
-
-> **iterations**: `number`
-
-##### tokens
-
-> **tokens**: [`LoopTokenUsage`](#looptokenusage)
-
-##### usdKnown?
-
-> `optional` **usdKnown?**: `boolean`
-
-Dollar accounting is known unless explicitly false. A false value must not be treated as $0
- when enforcing a dollar-denominated comparison or limit.
-
-##### usd
-
-> **usd**: `number`
-
-##### ms
-
-> **ms**: `number`
-
-***
-
-### SpawnOpts
-
-#### Properties
-
-##### budget
-
-> `readonly` **budget**: [`Budget`](#budget-13)
-
-##### label
-
-> `readonly` **label**: `string`
-
-##### restart?
-
-> `readonly` `optional` **restart?**: [`Restart`](#restart)
-
-##### shutdown?
-
-> `readonly` `optional` **shutdown?**: `number` \| `"brutalKill"` \| `"infinity"`
-
-Teardown grace handed to the executor when this node is reaped.
-
-##### key?
-
-> `readonly` `optional` **key?**: `string`
-
-Semantic identity of this assignment ACROSS process lifetimes. A keyed spawn is
-idempotent per key: once a child spawned under a key settles `done` — in this process or in a
-journaled prior one — spawning the same key returns that committed result (`prior.state:
-'completed'`) instead of paying for the work again. A key whose prior attempt settled `down`
-or was journaled as started-but-never-settled spawns FRESH but says so explicitly
-(`prior.state: 'retried' | 'lost'`), and a key that is currently LIVE is refused
-(`'duplicate-key'`) — the same assignment can never run twice concurrently. Unkeyed spawns
-(the default) are position-identified and always run.
-
-***
-
-### Handle
-
-A live child handle. `abort()` is defined over the ACQUIRE lifecycle: it chains into
-the `acquireSandbox` signal and reaps a find-by-name orphan box, so a node aborted
-mid-acquire never leaks (M1).
-
-#### Type Parameters
-
-##### Out
-
-`Out`
-
-#### Properties
-
-##### id
-
-> `readonly` **id**: `string`
-
-##### label
-
-> `readonly` **label**: `string`
-
-##### status
-
-> `readonly` **status**: [`NodeStatus`](#nodestatus)
-
-##### \_\_out?
-
-> `readonly` `optional` **\_\_out?**: `Out`
-
-Phantom: binds the handle to the child's output type so `spawn<C>` returns a
- `Handle<C>` distinct from a `Handle<other>`. Type-only — never present at runtime.
-
-#### Methods
-
-##### abort()
-
-> **abort**(`reason?`): `void`
-
-###### Parameters
-
-###### reason?
-
-`string`
-
-###### Returns
-
-`void`
-
-***
-
-### Scope
-
-The budget-conserving reactive scope an `Agent.act` runs inside. `spawn` reserves
-budget atomically from the shared pool and fails closed when the pool cannot cover it.
-`next()` waits for one settlement from this scope's live set; `view` reads live state,
-not the replay log.
-
-#### Type Parameters
-
-##### Out
-
-`Out`
-
-#### Properties
-
-##### signal
-
-> `readonly` **signal**: `AbortSignal`
-
-This scope's abort signal — aborted when the run is cancelled, a breaker trips, the pool
- is exhausted, or a parent scope cascades. A long-running driver `act` over this scope reads
- it to break promptly (the conserved pool + driver-stop are the other bounds). A nested
- scope carries its own signal, chained off its driver child's abort.
-
-##### resume?
-
-> `readonly` `optional` **resume?**: [`ResumedWork`](#resumedwork)\<`Out`\>
-
-Prior committed work, present ONLY on a resumed run (`undefined` on a fresh run, which is
-every run that did not pass `SupervisorOpts.resume`). The supervisor `loadTree`s the journal
-first; when a non-empty tree exists it rehydrates the already-settled children (via
-`replaySpawnTree`) and hands them here so a resume-aware `act` re-uses them instead of
-re-spawning committed work. A resume-blind driver simply ignores it and re-spawns — correct
-but redundant. The scope's spawn ordinal + cursor seq are already advanced past the recorded
-maxima, so any NEW spawn appends without colliding with a journaled event.
-
-##### view
-
-> `readonly` **view**: [`TreeView`](#treeview)
-
-The live tree — reads the in-memory nursery, not the journal.
-
-##### budget
-
-> `readonly` **budget**: `Readonly`\<\{ `tokensLeft`: `number`; `usdLeft`: `number`; `usdCapped`: `boolean`; `deadlineMs`: `number`; `reservedTokens`: `number`; \}\>
-
-Conserved-pool readouts (post-reservation).
-
-#### Methods
-
-##### spawn()
-
-> **spawn**\<`C`\>(`agent`, `task`, `opts`): \{ `ok`: `true`; `handle`: [`Handle`](#handle-2)\<`C`\>; `prior?`: [`SpawnPrior`](#spawnprior)\<`C`\>; \} \| \{ `ok`: `false`; `reason`: [`SpawnRejection`](#spawnrejection); \}
-
-Spawn a child. Reserves `opts.budget` from the conserved pool atomically; refunds the
-unspent remainder on settle. Returns a typed outcome — fail-closed on an exhausted
-pool, an exceeded depth ceiling, or a still-live duplicate `key` (the caller inspects
-`ok` before `handle`). A KEYED spawn whose key already settled `done` spends nothing:
-it returns the committed result on `prior` instead of re-running (see `SpawnOpts.key`).
-
-###### Type Parameters
-
-###### C
-
-`C`
-
-###### Parameters
-
-###### agent
-
-[`Agent`](#agent-1)\<`unknown`, `C`\>
-
-###### task
-
-`unknown`
-
-###### opts
-
-[`SpawnOpts`](#spawnopts)
-
-###### Returns
-
-\{ `ok`: `true`; `handle`: [`Handle`](#handle-2)\<`C`\>; `prior?`: [`SpawnPrior`](#spawnprior)\<`C`\>; \} \| \{ `ok`: `false`; `reason`: [`SpawnRejection`](#spawnrejection); \}
-
-##### next()
-
-> **next**(): `Promise`\<[`Settled`](#settled-3)\<`Out`\> \| `null`\>
-
-ray.wait n=1 over this scope's in-memory live set; resolves as each child settles;
- `null` when the live set is empty.
-
-###### Returns
-
-`Promise`\<[`Settled`](#settled-3)\<`Out`\> \| `null`\>
-
-##### nextResolved()
-
-> **nextResolved**(): `Promise`\<[`Settled`](#settled-3)\<`Out`\> \| `null`\>
-
-Non-blocking twin of `next()`: deliver an ALREADY-settled, undelivered child, or `null`
-when none is ready — never awaits a live child. The driver's post-loop drain reads this so
-a child that settled while the driver was busy (or after it stopped pulling) still reaches
-the finalize ledger instead of being silently lost.
-
-###### Returns
-
-`Promise`\<[`Settled`](#settled-3)\<`Out`\> \| `null`\>
-
-##### send()
-
-> **send**(`nodeId`, `msg`): `boolean`
-
-Steer a RUNNING child out-of-band — deliver a message to its executor's inbox (the driver's
-`send` verb: next-instruction, interrupt, or resume). Returns `true` if the message was
-delivered to a live child whose executor accepts delivery, `false` otherwise (unknown id,
-already settled, or an executor with no inbox). The executor drains its inbox between turns;
-a leaf that does not implement `deliver` simply cannot be steered mid-flight. In-process this
-is a direct call; the sandbox/Agent-Bus transports surface the SAME verb as an MCP tool.
-
-###### Parameters
-
-###### nodeId
-
-`string`
-
-###### msg
-
-`unknown`
-
-###### Returns
-
-`boolean`
-
-##### wait()
-
-> **wait**(`spec`, `opts`): \{ `ok`: `true`; `handle`: [`Handle`](#handle-2)\<[`WaitOutcome`](#waitoutcome)\>; \} \| \{ `ok`: `false`; `reason`: [`WaitRejection`](#waitrejection); \}
-
-Arm a WAIT-STATE node: a first-class tree node that waits on wall-clock time (`timer`) or on
-a named external predicate (`poll`) and settles through THIS scope's `next()` cursor like any
-other child — but holds no executor, no sandbox, and no conserved budget. Waiting costs zero
-tokens and zero dollars by construction.
-
-It is journaled (`waiting` → `woken`) with its ABSOLUTE deadline, so a run that dies mid-wait
-resumes still waiting: the supervisor surfaces the un-woken waits on `Scope.resume.waits`, and
-re-arming the same `label` adopts the recorded node id and original instant instead of
-restarting the countdown.
-
-Fail-closed admission, mirroring `spawn`: `invalid-spec`, `unknown-probe` (a `poll` naming a
-predicate this run's registry cannot resolve), or `deadline-exceeded` (the wait would outlive
-the pool's hard wall-clock ceiling — a wait never extends a budget guard).
-
-NOT `await_event`: that is an in-run rendezvous on the coordination bus whose 15s fence makes
-the caller re-poll — each re-poll a driver inference turn against a process that must stay up,
-and nothing about it survives a restart. See `supervise/wait.ts`.
-
-###### Parameters
-
-###### spec
-
-[`WaitSpec`](#waitspec)
-
-###### opts
-
-[`WaitOpts`](#waitopts)
-
-###### Returns
-
-\{ `ok`: `true`; `handle`: [`Handle`](#handle-2)\<[`WaitOutcome`](#waitoutcome)\>; \} \| \{ `ok`: `false`; `reason`: [`WaitRejection`](#waitrejection); \}
-
-##### progress()
-
-> **progress**(`nodeId`, `opts?`): [`WorkerProgress`](#workerprogress) \| `undefined`
-
-The LIVE read-model of one child, valid WHILE it runs: last-activity timestamp, idle time,
-a derived `stalled` flag, tokens/turns spent so far, whether a steer can even reach it
-(`steerable`), and whatever tool activity its executor exposes. `undefined` for an unknown
-id. This is the counterpart to `send`: a driver that can steer but cannot observe has
-nothing to steer on, which is precisely why steering went unused.
-
-Pull-based and side-effect free — reading it starts no timer and spends nothing. `now` and
-`stallAfterMs` are injectable so a caller (and a test) controls what counts as stalled.
-
-###### Parameters
-
-###### nodeId
-
-`string`
-
-###### opts?
-
-###### now?
-
-`number`
-
-###### stallAfterMs?
-
-`number`
-
-###### Returns
-
-[`WorkerProgress`](#workerprogress) \| `undefined`
-
-##### traceSource()
-
-> **traceSource**(`nodeId`): [`TraceSource`](#tracesource-1) \| `undefined`
-
-The live tool-call trace of one child when its executor exposes one (`Executor.traceSource`),
- for running the online detector panel over a RUNNING worker. `undefined` otherwise.
-
-###### Parameters
-
-###### nodeId
-
-`string`
-
-###### Returns
-
-[`TraceSource`](#tracesource-1) \| `undefined`
-
-##### meter()
-
-> **meter**(`spend`, `detail?`): `Promise`\<`void`\>
-
-Meter the driver's OWN compute against the conserved pool — its inference turns, which are
-real tokens/usd but not a spawned child (no reserve/reconcile). A direct `free → committed`
-debit, so equal-k counts the driver's tokens AND the in-loop budget guard (`budget.tokensLeft`)
-halts a driver that thinks the pool dry. `detail` rides an `agent.turn` trace event for live
-observability (turn index, tool calls, cumulative spend). It also journals a `metered` event —
-the durable twin of the pool debit (as `settled` is the twin of `reconcile`) — so every
-journal-based cost reader (`spentFromJournal`, `trajectoryReport`) sums driver inference
-automatically. A leaf never calls this; a driver meters each chat turn and awaits it (the
-metered event is cost-critical, so it lands before the join-barrier roll-up).
-
-###### Parameters
-
-###### spend
-
-[`Spend`](#spend)
-
-###### detail?
-
-`Record`\<`string`, `unknown`\>
-
-###### Returns
-
-`Promise`\<`void`\>
-
-***
-
-### ResumedWork
-
-The committed work a resumed run inherits from its journal. `settled` is the replayed
-`Settled[]` (cursor-ordered, rehydrated from the blob store by `replaySpawnTree`); `view`
-is the tree as `materializeTreeView` folded it at the recorded cursor position. A
-resume-aware `act` reads `scope.resume?.settled` to pick up where the crashed run left off.
-
-#### Type Parameters
-
-##### Out
-
-`Out`
-
-#### Properties
-
-##### settled
-
-> `readonly` **settled**: readonly [`Settled`](#settled-3)\<`Out`\>[]
-
-##### view
-
-> `readonly` **view**: [`TreeView`](#treeview)
-
-##### waits
-
-> `readonly` **waits**: readonly [`PendingWait`](#pendingwait)[]
-
-Wait-state nodes the journal shows as ARMED but never woken — the run died mid-wait. Each
-carries the ORIGINAL arm instant and absolute deadline, so re-arming the same `label` through
-`Scope.wait` resumes the countdown instead of restarting it. Empty on a fresh run and on a
-resumed run that was not waiting.
-
-##### keys
-
-> `readonly` **keys**: `ReadonlyMap`\<`string`, [`ResumedKeyState`](#resumedkeystate)\<`Out`\>\>
-
-Keyed assignments from the prior journal: `SpawnOpts.key` → what the journal proves about it.
-`completed`/`down` carry the rehydrated settlement; `in-doubt` means the spawn was journaled
-but no settlement ever landed — the process died with it in flight. `Scope.spawn` consults
-this so a keyed re-spawn resolves instead of duplicating (see `SpawnOpts.key`). Empty when no
-prior spawn carried a key.
-
-##### priorSpend
-
-> `readonly` **priorSpend**: `object`
-
-The conserved spend the prior process(es) already committed for this run, summed off the same
-journal replay reads: every `settled` child's reconciled spend (`childWork`) plus every
-`metered` driver-inference record (`driverInference`). What a resume-aware driver reports as
-"already paid" — the run's final `spentTotal` includes it because the journal spans processes.
-
-###### childWork
-
-> `readonly` **childWork**: [`Spend`](#spend)
-
-###### driverInference
-
-> `readonly` **driverInference**: [`Spend`](#spend)
-
-***
-
-### ResumedKeyState
-
-What the journal proves about one keyed assignment at resume time.
-
-#### Type Parameters
-
-##### Out
-
-`Out` = `unknown`
-
-#### Properties
-
-##### id
-
-> `readonly` **id**: `string`
-
-##### label
-
-> `readonly` **label**: `string`
-
-##### state
-
-> `readonly` **state**: `"completed"` \| `"down"` \| `"in-doubt"`
-
-##### settled?
-
-> `readonly` `optional` **settled?**: [`Settled`](#settled-3)\<`Out`\>
-
-The rehydrated settlement; absent exactly when `state` is `'in-doubt'`.
-
-***
-
-### NodeSnapshot
-
-#### Properties
-
-##### id
-
-> `readonly` **id**: `string`
-
-##### parent?
-
-> `readonly` `optional` **parent?**: `string`
-
-##### label
-
-> `readonly` **label**: `string`
-
-##### status
-
-> `readonly` **status**: [`NodeStatus`](#nodestatus)
-
-##### runtime
-
-> `readonly` **runtime**: [`Runtime`](#runtime-3)
-
-##### budget
-
-> `readonly` **budget**: [`Budget`](#budget-13)
-
-##### spent
-
-> `readonly` **spent**: [`Spend`](#spend)
-
-Conserved spend so far for this node.
-
-##### outRef?
-
-> `readonly` `optional` **outRef?**: `string`
-
-`outRef` once the node is `done` (the replay/result pointer).
-
-***
-
-### TreeView
-
-The live tree — what `scope.view` / `RootHandle.view()` materialize for a viewer.
+The live tree — what `scope.view` / `RootHandle.view()` materialize for a viewer.
 
 #### Properties
 
@@ -13369,69 +12737,13 @@ Content-addressed result blobs (the `outRef` → artifact map) backing the repla
 
 ***
 
-### Supervisor
-
-Owns the conserved pool, the spawn log, the abort cascade, the OTP intensity breaker,
-and the root handle. `run` executes the root `Agent` to completion; `attach` wires a
-live `RootHandle` (the Q2 substrate the chat/pi-viz client later consumes).
-
-#### Type Parameters
-
-##### Task
-
-`Task`
-
-##### Out
-
-`Out`
-
-#### Methods
-
-##### run()
-
-> **run**(`root`, `task`, `opts`): `Promise`\<[`SupervisedResult`](#supervisedresult)\<`Out`\>\>
-
-###### Parameters
-
-###### root
-
-[`Agent`](#agent-1)\<`Task`, `Out`\>
-
-###### task
-
-`Task`
-
-###### opts
-
-[`SupervisorOpts`](#supervisoropts)
-
-###### Returns
-
-`Promise`\<[`SupervisedResult`](#supervisedresult)\<`Out`\>\>
-
-##### attach()
-
-> **attach**(`h`): `void`
-
-###### Parameters
-
-###### h
-
-[`RootHandle`](#roothandle)\<`Out`\>
-
-###### Returns
-
-`void`
-
-***
-
 ### SupervisorOpts
 
 #### Properties
 
 ##### budget
 
-> `readonly` **budget**: [`Budget`](#budget-13)
+> `readonly` **budget**: [`Budget`](index.md#budget-4)
 
 The root conserved-pool ceiling (tokens + usd + iterations + deadline).
 
@@ -13455,7 +12767,7 @@ Result payload store backing `outRef` rehydration.
 
 ##### executors
 
-> `readonly` **executors**: [`ExecutorRegistry`](#executorregistry)
+> `readonly` **executors**: [`ExecutorRegistry`](index.md#executorregistry)
 
 Executor resolution — the open registry mapping `AgentSpec` → `Executor`.
 
@@ -13614,7 +12926,7 @@ Default impl returns false for every settlement (flat — never widens).
 
 ###### settled
 
-[`Settled`](#settled-3)\<`Out`\>
+[`Settled`](index.md#settled)\<`Out`\>
 
 ###### budget
 
@@ -14725,123 +14037,6 @@ Summed LLM token usage across every `llm_call` event in this iteration.
 
 ***
 
-### Driver
-
-**`Experimental`**
-
-#### Type Parameters
-
-##### Task
-
-`Task`
-
-##### Output
-
-`Output`
-
-##### Decision
-
-`Decision`
-
-#### Properties
-
-##### name?
-
-> `readonly` `optional` **name?**: `string`
-
-**`Experimental`**
-
-Stable identifier surfaced in trace events. Default `'driver'`.
-
-#### Methods
-
-##### plan()
-
-> **plan**(`task`, `history`): `Promise`\<`Task`[]\>
-
-**`Experimental`**
-
-Tasks to issue this iteration. `[task]` → refine; N copies → fanout;
-`[]` → no more work this round (kernel proceeds to `decide`).
-
-###### Parameters
-
-###### task
-
-`Task`
-
-###### history
-
-readonly [`Iteration`](#iteration-1)\<`Task`, `Output`\>[]
-
-###### Returns
-
-`Promise`\<`Task`[]\>
-
-##### decide()
-
-> **decide**(`history`): `Decision` \| `Promise`\<`Decision`\>
-
-**`Experimental`**
-
-Inspect history and return the next state. The kernel terminates the
-loop when `decide` returns a value listed in `isTerminalDecision`
-(`'stop' | 'pick-winner' | 'fail' | 'done'`), when `maxIterations`
-is hit, or when the abort signal fires.
-
-###### Parameters
-
-###### history
-
-readonly [`Iteration`](#iteration-1)\<`Task`, `Output`\>[]
-
-###### Returns
-
-`Decision` \| `Promise`\<`Decision`\>
-
-##### describePlan()?
-
-> `optional` **describePlan**(): [`LoopPlanDescription`](#loopplandescription) \| `undefined`
-
-**`Experimental`**
-
-Optional: describe the move `plan()` just produced, for trace emission.
-The kernel calls this immediately after `plan()` and emits the result in
-the `loop.plan` event so a topology viewer can render the agent's chosen
-move + rationale (not just the inferred fan-width). Drivers whose topology
-is a pure function of count (refine/fanout-vote) omit it — the kernel
-infers `moveKind` from the planned-task count. A driver that authors its
-own topology returns its chosen move's kind + rationale here.
-
-###### Returns
-
-[`LoopPlanDescription`](#loopplandescription) \| `undefined`
-
-##### selectWinner()?
-
-> `optional` **selectWinner**(`history`): [`LoopWinner`](#loopwinner)\<`Task`, `Output`\> \| `undefined`
-
-**`Experimental`**
-
-Optional: the driver AUTHORS the winner instead of the kernel's argmax. The
-kernel consults this at finalize ONLY when the caller did not pass an explicit
-`selectWinner` to runAgentRounds. Return the driver-declared winner (e.g. from a
-`select` topology move) or `undefined` to fall through to the default
-(best-valid-score, earliest index). This is the SELECTOR role made
-agent-authorable — the planner runs the selection, not the kernel.
-
-###### Parameters
-
-###### history
-
-readonly [`Iteration`](#iteration-1)\<`Task`, `Output`\>[]
-
-###### Returns
-
-[`LoopWinner`](#loopwinner)\<`Task`, `Output`\> \| `undefined`
-
-***
-
 ### LoopPlanDescription
 
 **`Experimental`**
@@ -14850,84 +14045,36 @@ Driver-supplied description of the just-planned move.
 
 #### Properties
 
-##### kind
-
-> **kind**: `string`
-
-**`Experimental`**
-
-Topology move this round — e.g. `'refine' | 'fanout' | 'verify' | 'stop'`.
-
-##### rationale?
-
-> `optional` **rationale?**: `string`
-
-**`Experimental`**
-
-Why the driver chose this move (the agent's rationale), when available.
-
-##### parentIndex?
-
-> `optional` **parentIndex?**: `number`
-
-**`Experimental`**
-
-Iteration index this round branches FROM, when the driver declares it.
-Overrides the kernel's inferred branch point — lets a planner that
-branches off a specific (non-winner) iteration emit faithful edge lineage.
-Omit to keep the inferred (best-valid / latest) branch point.
-
-***
-
-### LoopWinner
-
-**`Experimental`**
-
-#### Type Parameters
-
-##### Task
-
-`Task`
-
-##### Output
-
-`Output`
-
-#### Properties
-
-##### task
-
-> **task**: `Task`
-
-**`Experimental`**
-
-##### output
-
-> **output**: `Output`
-
-**`Experimental`**
-
-##### verdict?
+##### kind
 
-> `optional` **verdict?**: `DefaultVerdict`
+> **kind**: `string`
 
 **`Experimental`**
 
-##### iterationIndex
+Topology move this round — e.g. `'refine' | 'fanout' | 'verify' | 'stop'`.
 
-> **iterationIndex**: `number`
+##### rationale?
+
+> `optional` **rationale?**: `string`
 
 **`Experimental`**
 
-##### agentRunName
+Why the driver chose this move (the agent's rationale), when available.
 
-> **agentRunName**: `string`
+##### parentIndex?
+
+> `optional` **parentIndex?**: `number`
 
 **`Experimental`**
 
+Iteration index this round branches FROM, when the driver declares it.
+Overrides the kernel's inferred branch point — lets a planner that
+branches off a specific (non-winner) iteration emit faithful edge lineage.
+Omit to keep the inferred (best-valid / latest) branch point.
+
 ***
 
-### LoopResult
+### LoopWinner
 
 **`Experimental`**
 
@@ -14941,63 +14088,38 @@ Omit to keep the inferred (best-valid / latest) branch point.
 
 `Output`
 
-##### Decision
-
-`Decision`
-
 #### Properties
 
-##### decision
-
-> **decision**: `Decision`
-
-**`Experimental`**
-
-##### iterations
-
-> **iterations**: [`Iteration`](#iteration-1)\<`Task`, `Output`\>[]
-
-**`Experimental`**
-
-##### winner?
+##### task
 
-> `optional` **winner?**: [`LoopWinner`](#loopwinner)\<`Task`, `Output`\>
+> **task**: `Task`
 
 **`Experimental`**
 
-##### durationMs
+##### output
 
-> **durationMs**: `number`
+> **output**: `Output`
 
 **`Experimental`**
 
-##### costUsd
+##### verdict?
 
-> **costUsd**: `number`
+> `optional` **verdict?**: `DefaultVerdict`
 
 **`Experimental`**
 
-Sum of every iteration's `costUsd`.
-
-##### tokenUsage
+##### iterationIndex
 
-> **tokenUsage**: [`LoopTokenUsage`](#looptokenusage)
+> **iterationIndex**: `number`
 
 **`Experimental`**
 
-Sum of every iteration's token usage. `loopDispatch` commits it through
- the campaign's paid-call receipt.
-
-##### provenance
+##### agentRunName
 
-> **provenance**: [`RunProvenance`](#runprovenance)
+> **agentRunName**: `string`
 
 **`Experimental`**
 
-Domain-free run provenance for auditability: the mount manifest recorded
- during `prepareBox` and the selection receipts for how the winner was
- chosen. Always present; empty arrays when nothing was recorded.
-
 ***
 
 ### SandboxClient
@@ -15783,7 +14905,7 @@ The spawn label (`shot:0`, `analyst:1`, a nested agent's label) — the row name
 
 ##### status
 
-> **status**: `"running"` \| `"done"` \| `"down"`
+> **status**: `"done"` \| `"down"` \| `"running"`
 
 ##### usd
 
@@ -15997,16 +15119,6 @@ Present when a commit was attempted (valid, or `commitOnInvalid`).
 
 ## Type Aliases
 
-### CoordinationEvent
-
-> **CoordinationEvent** = \{ `type`: `"question"`; `question`: [`QuestionRecord`](mcp.md#questionrecord); \} \| \{ `type`: `"settled"`; `worker`: [`SettledWorker`](mcp.md#settledworker); \} \| \{ `type`: `"finding"`; `finding`: [`AnalystFindingEvent`](#analystfindingevent); \} \| \{ `type`: `"steer"`; `down`: [`DownMessageEvent`](#downmessageevent); \} \| \{ `type`: `"answer"`; `down`: [`DownMessageEvent`](#downmessageevent); `questionId`: `string`; \}
-
-Every message on the one typed pipe. UP (child→parent): question / settled / finding — queued for
- the driver to `pull`. DOWN (parent→child): steer / answer — record-only (history + subscribers),
- routed to the child inbox. New kinds are additive.
-
-***
-
 ### MakeWorkerAgent
 
 > **MakeWorkerAgent** = (`profile`) => [`Agent`](#agent-1)\<`unknown`, `unknown`\>
@@ -16224,7 +15336,7 @@ synthesizes the terminal `Outcome<D>`. The shape is STRUCTURE; the persona is CO
 
 ### RunPersonified
 
-> **RunPersonified** = \<`Task`, `D`\>(`options`) => `Promise`\<[`SupervisedResult`](#supervisedresult)\<[`Outcome`](#outcome-1)\<`D`\>\>\>
+> **RunPersonified** = \<`Task`, `D`\>(`options`) => `Promise`\<[`SupervisedResult`](index.md#supervisedresult)\<[`Outcome`](#outcome-1)\<`D`\>\>\>
 
 The composed run signature.
 
@@ -16246,7 +15358,7 @@ The composed run signature.
 
 #### Returns
 
-`Promise`\<[`SupervisedResult`](#supervisedresult)\<[`Outcome`](#outcome-1)\<`D`\>\>\>
+`Promise`\<[`SupervisedResult`](index.md#supervisedresult)\<[`Outcome`](#outcome-1)\<`D`\>\>\>
 
 ***
 
@@ -16879,24 +15991,6 @@ Why the dispatcher stopped admitting work. `drained` = the queue ran dry (the or
 
 ***
 
-### SupervisorFinalizer
-
-> **SupervisorFinalizer** = (`ctx`) => `Promise`\<`unknown` \| `undefined`\> \| `unknown` \| `undefined`
-
-The finalization seam: ledger in, output (or `undefined` = nothing deliverable) out.
-
-#### Parameters
-
-##### ctx
-
-[`FinalizeContext`](#finalizecontext)
-
-#### Returns
-
-`Promise`\<`unknown` \| `undefined`\> \| `unknown` \| `undefined`
-
-***
-
 ### RunContext
 
 > **RunContext** = [`InMemoryRunContext`](#inmemoryruncontext)
@@ -16967,7 +16061,7 @@ How to run a sandboxed harness as the DRIVER, with the coordination verbs mounte
 
 ###### scope
 
-[`Scope`](#scope-1)\<`unknown`\>
+[`Scope`](index.md#scope)\<`unknown`\>
 
 ###### coordinationMcpUrl
 
@@ -17000,7 +16094,7 @@ External executors can register additional runtime strings without widening this
 
 ### ExecutorFactory
 
-> **ExecutorFactory**\<`Out`\> = (`spec`, `ctx`) => [`Executor`](#executor)\<`Out`\>
+> **ExecutorFactory**\<`Out`\> = (`spec`, `ctx`) => [`Executor`](index.md#executor-2)\<`Out`\>
 
 Builds a fresh `Executor` for one spawn from the resolved spec. Per-spawn (not
 shared) so each child owns its own box/abort/teardown lifecycle. A BYO factory lets a
@@ -17016,7 +16110,7 @@ user supply construction args without pre-instantiating.
 
 ##### spec
 
-[`AgentSpec`](#agentspec)
+[`AgentSpec`](index.md#agentspec)
 
 ##### ctx
 
@@ -17024,7 +16118,7 @@ user supply construction args without pre-instantiating.
 
 #### Returns
 
-[`Executor`](#executor)\<`Out`\>
+[`Executor`](index.md#executor-2)\<`Out`\>
 
 ***
 
@@ -17067,7 +16161,7 @@ Fail-closed spawn rejections: an exhausted pool, an exceeded recursion ceiling,
 
 ### SpawnPrior
 
-> **SpawnPrior**\<`Out`\> = \{ `state`: `"completed"`; `settled`: [`Settled`](#settled-3)\<`Out`\> & `object`; \} \| \{ `state`: `"retried"`; `priorId`: [`NodeId`](#nodeid-1); `reason`: `string`; \} \| \{ `state`: `"lost"`; `priorId`: [`NodeId`](#nodeid-1); \}
+> **SpawnPrior**\<`Out`\> = \{ `state`: `"completed"`; `settled`: [`Settled`](index.md#settled)\<`Out`\> & `object`; \} \| \{ `state`: `"retried"`; `priorId`: [`NodeId`](#nodeid-1); `reason`: `string`; \} \| \{ `state`: `"lost"`; `priorId`: [`NodeId`](#nodeid-1); \}
 
 What a KEYED spawn resolved to when the key had a prior attempt. Absent on a fresh key (and on
 every unkeyed spawn). `'completed'` is the exactly-once path: NOTHING was spawned — the handle
@@ -17086,63 +16180,9 @@ live sandbox box) extends this union with an adoption state; none of the built-i
 
 ***
 
-### Settled
-
-> **Settled**\<`Out`\> = \{ `kind`: `"done"`; `handle`: [`Handle`](#handle-2)\<`Out`\>; `out`: `Out`; `outRef`: `string`; `verdict?`: `DefaultVerdict`; `spent`: [`Spend`](#spend); `seq`: `number`; \} \| \{ `kind`: `"down"`; `handle`: [`Handle`](#handle-2)\<`Out`\>; `reason`: `string`; `infra`: `boolean`; `restartCount`: `number`; `seq`: `number`; \}
-
-A settled child, delivered by `scope.next()`. `seq` is the monotonic cursor order
-`next()` yielded this settlement (B2) — NOT wall-clock — and replay delivers strictly
-in `seq` order. `outRef` rehydrates `out` from the `ResultBlobStore` on replay.
-
-#### Type Parameters
-
-##### Out
-
-`Out`
-
-#### Union Members
-
-##### Type Literal
-
-\{ `kind`: `"done"`; `handle`: [`Handle`](#handle-2)\<`Out`\>; `out`: `Out`; `outRef`: `string`; `verdict?`: `DefaultVerdict`; `spent`: [`Spend`](#spend); `seq`: `number`; \}
-
-***
-
-##### Type Literal
-
-\{ `kind`: `"down"`; `handle`: [`Handle`](#handle-2)\<`Out`\>; `reason`: `string`; `infra`: `boolean`; `restartCount`: `number`; `seq`: `number`; \}
-
-###### kind
-
-> **kind**: `"down"`
-
-###### handle
-
-> **handle**: [`Handle`](#handle-2)\<`Out`\>
-
-###### reason
-
-> **reason**: `string`
-
-###### infra
-
-> **infra**: `boolean`
-
-True = infrastructure failure (excluded from merge `n` / equal-k), not a bad result.
-
-###### restartCount
-
-> **restartCount**: `number`
-
-###### seq
-
-> **seq**: `number`
-
-***
-
 ### SpawnEvent
 
-> **SpawnEvent** = \{ `kind`: `"spawned"`; `id`: [`NodeId`](#nodeid-1); `parent?`: [`NodeId`](#nodeid-1); `label`: `string`; `key?`: `string`; `budget`: [`Budget`](#budget-13); `runtime`: [`Runtime`](#runtime-3); `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"settled"`; `id`: [`NodeId`](#nodeid-1); `status`: `"done"` \| `"down"`; `outRef?`: `string`; `verdict?`: `DefaultVerdict`; `spent`: [`Spend`](#spend); `infra?`: `boolean`; `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"cancelled"`; `id`: [`NodeId`](#nodeid-1); `reason`: `string`; `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"waiting"`; `id`: [`NodeId`](#nodeid-1); `parent?`: [`NodeId`](#nodeid-1); `label`: `string`; `spec`: [`WaitSpec`](#waitspec); `armedAt`: `number`; `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"woken"`; `id`: [`NodeId`](#nodeid-1); `by`: `"fired"` \| `"timeout"` \| `"cancelled"`; `outRef?`: `string`; `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"metered"`; `id`: [`NodeId`](#nodeid-1); `spend`: [`Spend`](#spend); `seq`: `number`; `at`: `string`; \}
+> **SpawnEvent** = \{ `kind`: `"spawned"`; `id`: [`NodeId`](#nodeid-1); `parent?`: [`NodeId`](#nodeid-1); `label`: `string`; `key?`: `string`; `budget`: [`Budget`](index.md#budget-4); `runtime`: [`Runtime`](#runtime-2); `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"settled"`; `id`: [`NodeId`](#nodeid-1); `status`: `"done"` \| `"down"`; `outRef?`: `string`; `verdict?`: `DefaultVerdict`; `spent`: [`Spend`](index.md#spend); `infra?`: `boolean`; `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"cancelled"`; `id`: [`NodeId`](#nodeid-1); `reason`: `string`; `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"waiting"`; `id`: [`NodeId`](#nodeid-1); `parent?`: [`NodeId`](#nodeid-1); `label`: `string`; `spec`: [`WaitSpec`](#waitspec); `armedAt`: `number`; `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"woken"`; `id`: [`NodeId`](#nodeid-1); `by`: `"fired"` \| `"timeout"` \| `"cancelled"`; `outRef?`: `string`; `seq`: `number`; `at`: `string`; \} \| \{ `kind`: `"metered"`; `id`: [`NodeId`](#nodeid-1); `spend`: [`Spend`](index.md#spend); `seq`: `number`; `at`: `string`; \}
 
 Journaled spawn-tree events (B1/B2). `seq` is the cursor order; `at` is an ISO
  timestamp for human inspection only (NOT a replay input).
@@ -17151,7 +16191,7 @@ Journaled spawn-tree events (B1/B2). `seq` is the cursor order; `at` is an ISO
 
 ##### Type Literal
 
-\{ `kind`: `"spawned"`; `id`: [`NodeId`](#nodeid-1); `parent?`: [`NodeId`](#nodeid-1); `label`: `string`; `key?`: `string`; `budget`: [`Budget`](#budget-13); `runtime`: [`Runtime`](#runtime-3); `seq`: `number`; `at`: `string`; \}
+\{ `kind`: `"spawned"`; `id`: [`NodeId`](#nodeid-1); `parent?`: [`NodeId`](#nodeid-1); `label`: `string`; `key?`: `string`; `budget`: [`Budget`](index.md#budget-4); `runtime`: [`Runtime`](#runtime-2); `seq`: `number`; `at`: `string`; \}
 
 ###### kind
 
@@ -17178,11 +16218,11 @@ The semantic spawn key (`SpawnOpts.key`), when the spawn carried one — what a
 
 ###### budget
 
-> **budget**: [`Budget`](#budget-13)
+> **budget**: [`Budget`](index.md#budget-4)
 
 ###### runtime
 
-> **runtime**: [`Runtime`](#runtime-3)
+> **runtime**: [`Runtime`](#runtime-2)
 
 ###### seq
 
@@ -17196,7 +16236,7 @@ The semantic spawn key (`SpawnOpts.key`), when the spawn carried one — what a
 
 ##### Type Literal
 
-\{ `kind`: `"settled"`; `id`: [`NodeId`](#nodeid-1); `status`: `"done"` \| `"down"`; `outRef?`: `string`; `verdict?`: `DefaultVerdict`; `spent`: [`Spend`](#spend); `infra?`: `boolean`; `seq`: `number`; `at`: `string`; \}
+\{ `kind`: `"settled"`; `id`: [`NodeId`](#nodeid-1); `status`: `"done"` \| `"down"`; `outRef?`: `string`; `verdict?`: `DefaultVerdict`; `spent`: [`Spend`](index.md#spend); `infra?`: `boolean`; `seq`: `number`; `at`: `string`; \}
 
 ###### kind
 
@@ -17222,7 +16262,7 @@ Content-addressed result pointer; rehydrates `out` from `ResultBlobStore`.
 
 ###### spent
 
-> **spent**: [`Spend`](#spend)
+> **spent**: [`Spend`](index.md#spend)
 
 ###### infra?
 
@@ -17324,7 +16364,7 @@ A wait-state node SETTLED — the cursor-namespace twin of `settled`, kept disti
 
 ##### Type Literal
 
-\{ `kind`: `"metered"`; `id`: [`NodeId`](#nodeid-1); `spend`: [`Spend`](#spend); `seq`: `number`; `at`: `string`; \}
+\{ `kind`: `"metered"`; `id`: [`NodeId`](#nodeid-1); `spend`: [`Spend`](index.md#spend); `seq`: `number`; `at`: `string`; \}
 
 ###### kind
 
@@ -17344,7 +16384,7 @@ A driver's OWN inference spend, journaled separately from spawned-child work —
 
 ###### spend
 
-> **spend**: [`Spend`](#spend)
+> **spend**: [`Spend`](index.md#spend)
 
 ###### seq
 
@@ -17356,96 +16396,6 @@ A driver's OWN inference spend, journaled separately from spawned-child work —
 
 ***
 
-### SupervisedResult
-
-> **SupervisedResult**\<`Out`\> = \{ `kind`: `"winner"`; `out`: `Out`; `outRef`: `string`; `verdict?`: `DefaultVerdict`; `tree`: [`TreeView`](#treeview); `spentTotal`: [`Spend`](#spend); `spentBreakdown?`: \{ `driverInference`: [`Spend`](#spend); `childWork`: [`Spend`](#spend); \}; \} \| \{ `kind`: `"no-winner"`; `reason`: `"all-children-down"` \| `"budget-exhausted"` \| `"aborted"`; `tree`: [`TreeView`](#treeview); `downCount`: `number`; `spentTotal`: [`Spend`](#spend); \}
-
-Typed terminal result (M2) — a no-winner is NEVER coerced to a best-effort output.
-
-#### Type Parameters
-
-##### Out
-
-`Out`
-
-#### Union Members
-
-##### Type Literal
-
-\{ `kind`: `"winner"`; `out`: `Out`; `outRef`: `string`; `verdict?`: `DefaultVerdict`; `tree`: [`TreeView`](#treeview); `spentTotal`: [`Spend`](#spend); `spentBreakdown?`: \{ `driverInference`: [`Spend`](#spend); `childWork`: [`Spend`](#spend); \}; \}
-
-###### kind
-
-> **kind**: `"winner"`
-
-###### out
-
-> **out**: `Out`
-
-###### outRef
-
-> **outRef**: `string`
-
-###### verdict?
-
-> `optional` **verdict?**: `DefaultVerdict`
-
-###### tree
-
-> **tree**: [`TreeView`](#treeview)
-
-###### spentTotal
-
-> **spentTotal**: [`Spend`](#spend)
-
-###### spentBreakdown?
-
-> `optional` **spentBreakdown?**: `object`
-
-Where `spentTotal` went: `driverInference` = the drivers' own chat turns (metered via
- `Scope.meter`); `childWork` = every spawned child's reconciled spend (the journal sum).
- `driverInference + childWork === spentTotal`. Present whenever any driver metered.
-
-###### spentBreakdown.driverInference
-
-> **driverInference**: [`Spend`](#spend)
-
-###### spentBreakdown.childWork
-
-> **childWork**: [`Spend`](#spend)
-
-***
-
-##### Type Literal
-
-\{ `kind`: `"no-winner"`; `reason`: `"all-children-down"` \| `"budget-exhausted"` \| `"aborted"`; `tree`: [`TreeView`](#treeview); `downCount`: `number`; `spentTotal`: [`Spend`](#spend); \}
-
-###### kind
-
-> **kind**: `"no-winner"`
-
-###### reason
-
-> **reason**: `"all-children-down"` \| `"budget-exhausted"` \| `"aborted"`
-
-###### tree
-
-> **tree**: [`TreeView`](#treeview)
-
-###### downCount
-
-> **downCount**: `number`
-
-###### spentTotal
-
-> **spentTotal**: [`Spend`](#spend)
-
-The conserved spend incurred before the run failed — real cost is paid even when no
- worker delivers, so the caller always learns what the delegation actually spent. Summed
- off the same journal the `winner` path reads.
-
-***
-
 ### RootSignal
 
 > **RootSignal** = \{ `kind`: `"pause"`; \} \| \{ `kind`: `"resume"`; \} \| \{ `kind`: `"cancel"`; `reason?`: `string`; \} \| \{ `kind`: `"ask"`; `question`: `string`; \}
@@ -17724,7 +16674,7 @@ The default registry `runPersonified` resolves a shape name against. Empty by co
 
 ### ~~runLoop~~
 
-> `const` **runLoop**: \<`Task`, `Output`, `Decision`\>(`options`) => `Promise`\<[`LoopResult`](#loopresult)\<`Task`, `Output`, `Decision`\>\> = `runAgentRounds`
+> `const` **runLoop**: \<`Task`, `Output`, `Decision`\>(`options`) => `Promise`\<[`LoopResult`](index.md#loopresult)\<`Task`, `Output`, `Decision`\>\> = `runAgentRounds`
 
 Pre-rename name for [runAgentRounds](#runagentrounds); identical function, kept so existing
 call sites keep working.
@@ -17763,13 +16713,13 @@ rounds, no winner selection.
 
 #### Returns
 
-`Promise`\<[`LoopResult`](#loopresult)\<`Task`, `Output`, `Decision`\>\>
+`Promise`\<[`LoopResult`](index.md#loopresult)\<`Task`, `Output`, `Decision`\>\>
 
 #### Deprecated
 
 Use [runAgentRounds](#runagentrounds). The clearer name says what it is: the
 multi-agent fanout/vote/refine kernel over sandboxes, NOT the one-turn tool loop
-(`runToolLoop` / `streamToolLoop`, package root entry). `runLoop` shipped on `/loops`
+(`runToolLoop` / `streamToolLoop`, package root entry). `runLoop` shipped on `/kernel`
 next to `routerToolLoop`, which made the two read as variants of one thing. The alias
 is removed in the next major.
 
@@ -17777,7 +16727,7 @@ is removed in the next major.
 
 ### strategyAuthorContract
 
-> `const` **strategyAuthorContract**: "\nYou author an OPTIMIZATION STRATEGY for an agentic loop system. A strategy decides how to\nspend a compute budget to beat a task's deployable check. You compose exactly two steps:\n\n  shot(spec?: \{ handle?, messages?, steer?, persona?, tools? \}): Promise\<ShotResult \| null\>\n    Runs ONE worker attempt (a bounded tool loop) over an artifact.\n    - omit handle  =\> the shot opens its OWN fresh artifact and closes it after (a sample).\n    - pass handle  =\> the shot CONTINUES that artifact (state accumulates across shots).\n    - messages     =\> the carried conversation (pass the previous ShotResult.messages to continue).\n    - steer        =\> a corrective instruction injected before the shot.\n    - persona      =\> \{ systemPrompt?, model? \} — give THIS shot its own role and/or model\n      (multi-agent strategies: a researcher shot then an engineer shot, a panel of k\n      personas over one budget). On a fresh shot the systemPrompt replaces the task's; on\n      a carried conversation it arrives as a hand-off message. Same conserved budget.\n    - tools        =\> string\[\] — restrict THIS shot to a subset of the task's tools by\n      name (focus an explore shot on read-only tools, an execute shot on write tools).\n      Restriction-only; unknown names make the shot fail. ALWAYS select from\n      await listTools(handle) — never hardcode. Omitted =\> the shot sees every tool.\n    ShotResult = \{ messages, score (0..1 on the task's check), passes, total, completions, toolErrors \}\n    Returns null if the attempt failed infra-wise.\n\n  critique(messages): Promise\<string \| null\>\n    A firewalled trace-analyst reads the attempt's trajectory and returns ONE corrective\n    instruction (or null when it judges the work complete). Costs ~1 completion.\n\n  consult(messages, instruction): Promise\<string \| null\>\n    The RAW analyst channel: the same firewalled critic answers YOUR instruction over the\n    trajectory verbatim (no reformatting) — use it when you need a specific reply format\n    (a decision, a prediction). Costs ~1 completion.\n\n  surface.open(task) / surface.close(handle)\n    Open a persistent artifact you manage yourself (remember to close in a finally).\n    close is idempotent — closing an already-closed handle is a safe no-op.\n\n  listTools(handle): Promise\<Array\<\{ name, description? \}\>\>\n    The tools THIS task actually offers. TOOL SETS VARY PER TASK — if you restrict a\n    shot with \`tools\`, you MUST pick names from await listTools(handle); hardcoding\n    names from an example kills your shots on every task whose tools differ.\n\nRules:\n- ALWAYS await every shot/critique/surface call — a floating promise that rejects\n  crashes the whole benchmark run.\n- Stay within ~budget total shots; every shot/critique spends from a conserved pool.\n- For a FRESH attempt OMIT \`messages\` entirely (never pass \`\[\]\` — an empty array is a\n  fresh conversation too, but be explicit). To CONTINUE, pass the previous\n  ShotResult.messages unchanged.\n- Return \{ score, resolved, completions, progression, shots \} — score = the BEST checkpoint\n  you reached (keep-best, never final-state), progression = score after each shot.\n- The module must be EXACTLY this shape (no other imports, no commentary outside code):\n\nimport \{ defineStrategy \} from '@tangle-network/agent-runtime/loops'\nexport default defineStrategy('your-strategy-name', async (\{ surface, task, budget, shot, critique, listTools \}) =\> \{\n  // your composition (listTools comes from the destructured context — it is NOT a global)\n\})\n"
+> `const` **strategyAuthorContract**: "\nYou author an OPTIMIZATION STRATEGY for an agentic loop system. A strategy decides how to\nspend a compute budget to beat a task's deployable check. You compose exactly two steps:\n\n  shot(spec?: \{ handle?, messages?, steer?, persona?, tools? \}): Promise\<ShotResult \| null\>\n    Runs ONE worker attempt (a bounded tool loop) over an artifact.\n    - omit handle  =\> the shot opens its OWN fresh artifact and closes it after (a sample).\n    - pass handle  =\> the shot CONTINUES that artifact (state accumulates across shots).\n    - messages     =\> the carried conversation (pass the previous ShotResult.messages to continue).\n    - steer        =\> a corrective instruction injected before the shot.\n    - persona      =\> \{ systemPrompt?, model? \} — give THIS shot its own role and/or model\n      (multi-agent strategies: a researcher shot then an engineer shot, a panel of k\n      personas over one budget). On a fresh shot the systemPrompt replaces the task's; on\n      a carried conversation it arrives as a hand-off message. Same conserved budget.\n    - tools        =\> string\[\] — restrict THIS shot to a subset of the task's tools by\n      name (focus an explore shot on read-only tools, an execute shot on write tools).\n      Restriction-only; unknown names make the shot fail. ALWAYS select from\n      await listTools(handle) — never hardcode. Omitted =\> the shot sees every tool.\n    ShotResult = \{ messages, score (0..1 on the task's check), passes, total, completions, toolErrors \}\n    Returns null if the attempt failed infra-wise.\n\n  critique(messages): Promise\<string \| null\>\n    A firewalled trace-analyst reads the attempt's trajectory and returns ONE corrective\n    instruction (or null when it judges the work complete). Costs ~1 completion.\n\n  consult(messages, instruction): Promise\<string \| null\>\n    The RAW analyst channel: the same firewalled critic answers YOUR instruction over the\n    trajectory verbatim (no reformatting) — use it when you need a specific reply format\n    (a decision, a prediction). Costs ~1 completion.\n\n  surface.open(task) / surface.close(handle)\n    Open a persistent artifact you manage yourself (remember to close in a finally).\n    close is idempotent — closing an already-closed handle is a safe no-op.\n\n  listTools(handle): Promise\<Array\<\{ name, description? \}\>\>\n    The tools THIS task actually offers. TOOL SETS VARY PER TASK — if you restrict a\n    shot with \`tools\`, you MUST pick names from await listTools(handle); hardcoding\n    names from an example kills your shots on every task whose tools differ.\n\nRules:\n- ALWAYS await every shot/critique/surface call — a floating promise that rejects\n  crashes the whole benchmark run.\n- Stay within ~budget total shots; every shot/critique spends from a conserved pool.\n- For a FRESH attempt OMIT \`messages\` entirely (never pass \`\[\]\` — an empty array is a\n  fresh conversation too, but be explicit). To CONTINUE, pass the previous\n  ShotResult.messages unchanged.\n- Return \{ score, resolved, completions, progression, shots \} — score = the BEST checkpoint\n  you reached (keep-best, never final-state), progression = score after each shot.\n- The module must be EXACTLY this shape (no other imports, no commentary outside code):\n\nimport \{ defineStrategy \} from '@tangle-network/agent-runtime/kernel'\nexport default defineStrategy('your-strategy-name', async (\{ surface, task, budget, shot, critique, listTools \}) =\> \{\n  // your composition (listTools comes from the destructured context — it is NOT a global)\n\})\n"
 
 The compressed consumable a skill carries: everything an author needs to emit a loop.
 
@@ -17839,7 +16789,7 @@ Default thresholds for `ProfileRichnessThresholds` — 600 chars / 6 lines minim
 
 ### defaultDelegateBudget
 
-> `const` **defaultDelegateBudget**: [`Budget`](#budget-13)
+> `const` **defaultDelegateBudget**: [`Budget`](index.md#budget-4)
 
 The conserved pool a `delegate()` call applies when the caller does not pass its own `budget`.
  A modest token ceiling + a small iteration ceiling — generous enough for a few-worker decompose,
@@ -17849,7 +16799,7 @@ The conserved pool a `delegate()` call applies when the caller does not pass its
 
 ### bestDelivered
 
-> `const` **bestDelivered**: [`SupervisorFinalizer`](#supervisorfinalizer)
+> `const` **bestDelivered**: [`SupervisorFinalizer`](index.md#supervisorfinalizer)
 
 Keep-best under the completion oracle — the DEFAULT finalizer and the exact behavior every
  existing caller had: the highest-scoring delivered child's output, `undefined` when nothing
@@ -17859,7 +16809,7 @@ Keep-best under the completion oracle — the DEFAULT finalizer and the exact be
 
 ### collectDelivered
 
-> `const` **collectDelivered**: [`SupervisorFinalizer`](#supervisorfinalizer)
+> `const` **collectDelivered**: [`SupervisorFinalizer`](index.md#supervisorfinalizer)
 
 Every verified distinct output, highest score first — the shape for competing hypotheses, a
 Pareto front, or a recorded evaluator split (three judges 2:1 → both outputs survive, with
@@ -17871,7 +16821,7 @@ an empty collection is a no-winner, not a winner wrapping `[]`.
 
 ### PI\_RUNTIME
 
-> `const` **PI\_RUNTIME**: [`Runtime`](#runtime-3) = `'pi'`
+> `const` **PI\_RUNTIME**: [`Runtime`](#runtime-2) = `'pi'`
 
 The runtime name `piExecutor` registers under.
 
@@ -17948,7 +16898,7 @@ artifacts hash identically regardless of key insertion order.
 
 ### replaySpawnTree()
 
-> **replaySpawnTree**(`journal`, `blobs`, `root`): `Promise`\<[`Settled`](#settled-3)\<`unknown`\>[]\>
+> **replaySpawnTree**(`journal`, `blobs`, `root`): `Promise`\<[`Settled`](index.md#settled)\<`unknown`\>[]\>
 
 Re-feed a journaled spawn tree in strict `seq` order, rehydrating each settled
 child's `out` from the blob store by `outRef`, and return the `Settled[]` exactly
@@ -17976,7 +16926,7 @@ rehydrate — a silent gap would let `act` branch on the wrong evidence.
 
 #### Returns
 
-`Promise`\<[`Settled`](#settled-3)\<`unknown`\>[]\>
+`Promise`\<[`Settled`](index.md#settled)\<`unknown`\>[]\>
 
 ***
 
@@ -18760,7 +17710,7 @@ Fail loud (no silent empty findings):
 
 ##### scope
 
-[`Scope`](#scope-1)\<[`Outcome`](#outcome-1)\<`D`\>\>
+[`Scope`](index.md#scope)\<[`Outcome`](#outcome-1)\<`D`\>\>
 
 ##### options
 
@@ -18837,7 +17787,7 @@ readonly `AnalystFinding`[]
 
 ##### settledSoFar
 
-readonly [`Settled`](#settled-3)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
+readonly [`Settled`](index.md#settled)\<[`Outcome`](#outcome-1)\<`D`\>\>[]
 
 #### Returns
 
@@ -19192,7 +18142,7 @@ unrunnable — refuse it at definition time, not at the first spawn. Pure; no I/
 
 ### runPersonified()
 
-> **runPersonified**\<`Task`, `D`\>(`options`): `Promise`\<[`SupervisedResult`](#supervisedresult)\<[`Outcome`](#outcome-1)\<`D`\>\>\>
+> **runPersonified**\<`Task`, `D`\>(`options`): `Promise`\<[`SupervisedResult`](index.md#supervisedresult)\<[`Outcome`](#outcome-1)\<`D`\>\>\>
 
 Compose the persona + chosen shape onto a fresh keystone `Supervisor`. Resolves the shape
 (a factory verbatim, or a registered name through `builtinShapes`), applies it to a
@@ -19218,7 +18168,7 @@ default-shape fallback.
 
 #### Returns
 
-`Promise`\<[`SupervisedResult`](#supervisedresult)\<[`Outcome`](#outcome-1)\<`D`\>\>\>
+`Promise`\<[`SupervisedResult`](index.md#supervisedresult)\<[`Outcome`](#outcome-1)\<`D`\>\>\>
 
 ***
 
@@ -19594,7 +18544,7 @@ Pretty-print a report — the "free optimization" verdict, with the cost vector.
 
 ### runAgentRounds()
 
-> **runAgentRounds**\<`Task`, `Output`, `Decision`\>(`options`): `Promise`\<[`LoopResult`](#loopresult)\<`Task`, `Output`, `Decision`\>\>
+> **runAgentRounds**\<`Task`, `Output`, `Decision`\>(`options`): `Promise`\<[`LoopResult`](index.md#loopresult)\<`Task`, `Output`, `Decision`\>\>
 
 **`Experimental`**
 
@@ -19630,7 +18580,7 @@ rounds, no winner selection.
 
 #### Returns
 
-`Promise`\<[`LoopResult`](#loopresult)\<`Task`, `Output`, `Decision`\>\>
+`Promise`\<[`LoopResult`](index.md#loopresult)\<`Task`, `Output`, `Decision`\>\>
 
 ***
 
@@ -20018,7 +18968,7 @@ refuses local processes. A profile with no MCP surface returns zero tools.
 
 ### naiveDriver()
 
-> **naiveDriver**\<`Task`, `Output`\>(`options`): [`Driver`](#driver-2)\<`Task`, `Output`, [`SteeringDecision`](#steeringdecision)\>
+> **naiveDriver**\<`Task`, `Output`\>(`options`): [`Driver`](index.md#driver)\<`Task`, `Output`, [`SteeringDecision`](#steeringdecision)\>
 
 `naiveDriver` — the no-signal steering control.
 
@@ -20048,13 +18998,13 @@ attributable to the grader's findings.
 
 #### Returns
 
-[`Driver`](#driver-2)\<`Task`, `Output`, [`SteeringDecision`](#steeringdecision)\>
+[`Driver`](index.md#driver)\<`Task`, `Output`, [`SteeringDecision`](#steeringdecision)\>
 
 ***
 
 ### dumbDriver()
 
-> **dumbDriver**\<`Task`, `Output`\>(`options`): [`Driver`](#driver-2)\<`Task`, `Output`, [`SteeringDecision`](#steeringdecision)\>
+> **dumbDriver**\<`Task`, `Output`\>(`options`): [`Driver`](index.md#driver)\<`Task`, `Output`, [`SteeringDecision`](#steeringdecision)\>
 
 `dumbDriver` — the pass/fail-only steering control.
 
@@ -20087,7 +19037,7 @@ exactly the value the findings add over a bare boolean.
 
 #### Returns
 
-[`Driver`](#driver-2)\<`Task`, `Output`, [`SteeringDecision`](#steeringdecision)\>
+[`Driver`](index.md#driver)\<`Task`, `Output`, [`SteeringDecision`](#steeringdecision)\>
 
 ***
 
@@ -20097,7 +19047,7 @@ exactly the value the findings add over a bare boolean.
 
 Static CONTRACT lint over an authored strategy module — the module-boundary
  enforcement of the harness's two measurement invariants:
-   - author blindness: the only import allowed is the loops surface. A body that could
+   - author blindness: the only import allowed is the kernel surface. A body that could
      reach the filesystem, network, or process could read or mutate verifier/artifact
      state outside the brokered shots, and the harness-verified score would stop
      meaning "what the shots achieved".
@@ -20692,7 +19642,7 @@ Budget note: `runAgentic`'s `budget` sizes the pool — pass at least
 
 ### failuresAnalyst()
 
-> **failuresAnalyst**(): [`AnalystRegistry`](#analystregistry)
+> **failuresAnalyst**(): [`AnalystRegistry`](index.md#analystregistry)
 
 The default self-improvement LENS — authored content, not a code path. On each settled worker it hands
  the driver the still-FAILING tests (not just a score), so the next spawn targets the persistently-hard
@@ -20700,7 +19650,7 @@ The default self-improvement LENS — authored content, not a code path. On each
 
 #### Returns
 
-[`AnalystRegistry`](#analystregistry)
+[`AnalystRegistry`](index.md#analystregistry)
 
 ***
 
@@ -20870,7 +19820,7 @@ Turn a [ProfileRichness](#profilerichness) verdict into a bus-routable `AnalystF
 
 ### spendFromUsageEvents()
 
-> **spendFromUsageEvents**(`events`): [`Spend`](#spend)
+> **spendFromUsageEvents**(`events`): [`Spend`](index.md#spend)
 
 Fold a normalized `UsageEvent` array into a `Spend`. Tokens and usd are separate
  channels; iterations come from `'iteration'` events. Pure; `ms` stays zero (the
@@ -20884,7 +19834,7 @@ Fold a normalized `UsageEvent` array into a `Spend`. Tokens and usd are separate
 
 #### Returns
 
-[`Spend`](#spend)
+[`Spend`](index.md#spend)
 
 ***
 
@@ -20901,7 +19851,7 @@ readout's `deadlineMs` is a stable wall-clock instant, not a shrinking remainder
 
 ##### root
 
-[`Budget`](#budget-13)
+[`Budget`](index.md#budget-4)
 
 ##### now?
 
@@ -20915,7 +19865,7 @@ readout's `deadlineMs` is a stable wall-clock instant, not a shrinking remainder
 
 ### gateOnDeliverable()
 
-> **gateOnDeliverable**\<`Out`\>(`inner`, `deliverable`): [`Executor`](#executor)\<`Out`\>
+> **gateOnDeliverable**\<`Out`\>(`inner`, `deliverable`): [`Executor`](index.md#executor-2)\<`Out`\>
 
 Wrap an `Executor` so its settlement `valid` reflects the deliverable check, not the
 inner verdict. Handles both `execute` shapes (one-shot `Promise<ExecutorResult>` and
@@ -20932,7 +19882,7 @@ executor has produced its output. The inner `score` is preserved; only `valid` i
 
 ##### inner
 
-[`Executor`](#executor)\<`Out`\>
+[`Executor`](index.md#executor-2)\<`Out`\>
 
 ##### deliverable
 
@@ -20940,7 +19890,7 @@ executor has produced its output. The inner `score` is preserved; only `valid` i
 
 #### Returns
 
-[`Executor`](#executor)\<`Out`\>
+[`Executor`](index.md#executor-2)\<`Out`\>
 
 ***
 
@@ -21004,7 +19954,7 @@ Stand up the coordination MCP over a live scope. The HOST address is `127.0.0.1`
 
 ###### scope
 
-[`Scope`](#scope-1)\<`unknown`\>
+[`Scope`](index.md#scope)\<`unknown`\>
 
 ###### blobs
 
@@ -21016,7 +19966,7 @@ Stand up the coordination MCP over a live scope. The HOST address is `127.0.0.1`
 
 ###### perWorker
 
-[`Budget`](#budget-13)
+[`Budget`](index.md#budget-4)
 
 ###### maxLiveWorkers?
 
@@ -21043,7 +19993,7 @@ Max wall-clock ms a single `await_event` may block before returning a re-pollabl
 
 ###### analysts?
 
-[`AnalystRegistry`](#analystregistry)
+[`AnalystRegistry`](index.md#analystregistry)
 
 Trace-analyst lenses the driver can run (`run_analyst`) or auto-fire on settle.
 
@@ -21089,7 +20039,7 @@ Questions replayed from a prior process of this run — seeds the question ledge
 
 ### delegate()
 
-> **delegate**\<`Out`\>(`intent`, `opts?`): `Promise`\<[`SupervisedResult`](#supervisedresult)\<`Out`\>\>
+> **delegate**\<`Out`\>(`intent`, `opts?`): `Promise`\<[`SupervisedResult`](index.md#supervisedresult)\<`Out`\>\>
 
 Delegate an INTENT to a default authoring supervisor and return its `SupervisedResult` unchanged.
 
@@ -21115,7 +20065,7 @@ authored worker's delivered output; a `no-winner` result names why (never a fabr
 
 #### Returns
 
-`Promise`\<[`SupervisedResult`](#supervisedresult)\<`Out`\>\>
+`Promise`\<[`SupervisedResult`](index.md#supervisedresult)\<`Out`\>\>
 
 ***
 
@@ -21182,7 +20132,7 @@ a whole round, a slow child never idles the other slots.
 
 ##### scope
 
-[`Scope`](#scope-1)\<`Out`\>
+[`Scope`](index.md#scope)\<`Out`\>
 
 ##### opts
 
@@ -21266,7 +20216,7 @@ readonly `object`[]
 
 ##### budget
 
-[`Budget`](#budget-13)
+[`Budget`](index.md#budget-4)
 
 #### Returns
 
@@ -21314,7 +20264,7 @@ On a run that never resumed there is nothing to merge and the live view is retur
 
 ##### scope
 
-`Pick`\<[`Scope`](#scope-1)\<`unknown`\>, `"view"` \| `"resume"`\>
+`Pick`\<[`Scope`](index.md#scope)\<`unknown`\>, `"view"` \| `"resume"`\>
 
 #### Returns
 
@@ -21360,7 +20310,7 @@ blob reader that throws on any ref outside that set. This is the one call site b
 
 ##### finalizer
 
-[`SupervisorFinalizer`](#supervisorfinalizer)
+[`SupervisorFinalizer`](index.md#supervisorfinalizer)
 
 ##### args
 
@@ -21570,7 +20520,7 @@ per-vendor adapter or a closed `inline|sandbox|cli` switch — those bypass the
 
 ### createExecutorRegistry()
 
-> **createExecutorRegistry**(): [`ExecutorRegistry`](#executorregistry)
+> **createExecutorRegistry**(): [`ExecutorRegistry`](index.md#executorregistry)
 
 The open resolver/registry. Pre-registers the three built-ins under their
 runtime tags (`'router'`, `'sandbox'`, `'cli'`) and accepts `register(name,
@@ -21584,7 +20534,7 @@ harness-derived runtime (`'sandbox'` for any `BackendType`); else fail loud.
 
 #### Returns
 
-[`ExecutorRegistry`](#executorregistry)
+[`ExecutorRegistry`](index.md#executorregistry)
 
 ***
 
@@ -21608,7 +20558,7 @@ One steerable sandbox worker. The returned session is inert until `stream()` is
 
 ### createScope()
 
-> **createScope**\<`Out`\>(`args`): [`Scope`](#scope-1)\<`Out`\>
+> **createScope**\<`Out`\>(`args`): [`Scope`](index.md#scope)\<`Out`\>
 
 Create the reactive `Scope` a driver's `Agent.act` runs inside: spawn children on an atomically reserved conserved budget, settle via the `next()` cursor, journal for replay.
 
@@ -21626,7 +20576,7 @@ Create the reactive `Scope` a driver's `Agent.act` runs inside: spawn children o
 
 #### Returns
 
-[`Scope`](#scope-1)\<`Out`\>
+[`Scope`](index.md#scope)\<`Out`\>
 
 ***
 
@@ -21654,7 +20604,7 @@ Fail loud on a `down` settlement: only a `done` child is an iteration.
 
 ##### settled
 
-[`Settled`](#settled-3)\<`Out`\>
+[`Settled`](index.md#settled)\<`Out`\>
 
 #### Returns
 
@@ -21693,7 +20643,7 @@ Build a `ProgressSample` from a scope settlement. The objective is the verdict s
 
 ##### settled
 
-[`Settled`](#settled-3)\<`unknown`\>
+[`Settled`](index.md#settled)\<`unknown`\>
 
 ##### at
 
@@ -21834,7 +20784,7 @@ Build the worker seam from a backend (WHERE workers run) + an optional completio
 
 ### supervise()
 
-> **supervise**(`profile`, `task`, `opts`): `Promise`\<[`SupervisedResult`](#supervisedresult)\<`unknown`\>\>
+> **supervise**(`profile`, `task`, `opts`): `Promise`\<[`SupervisedResult`](index.md#supervisedresult)\<`unknown`\>\>
 
 One-call supervisor: build + run a supervisor from its profile with sensible defaults; the raw `supervisorAgent` + `createSupervisor().run` seams stay available for power use.
 
@@ -21854,7 +20804,7 @@ One-call supervisor: build + run a supervisor from its profile with sensible def
 
 #### Returns
 
-`Promise`\<[`SupervisedResult`](#supervisedresult)\<`unknown`\>\>
+`Promise`\<[`SupervisedResult`](index.md#supervisedresult)\<`unknown`\>\>
 
 ***
 
@@ -21882,7 +20832,7 @@ Build a supervisor `Agent` from its profile: the brain resolves from `profile.ha
 
 ### createSupervisor()
 
-> **createSupervisor**\<`Task`, `Out`\>(): [`Supervisor`](#supervisor-1)\<`Task`, `Out`\>
+> **createSupervisor**\<`Task`, `Out`\>(): [`Supervisor`](index.md#supervisor)\<`Task`, `Out`\>
 
 Create a supervisor that owns one recursive agent execution tree.
 
@@ -21898,7 +20848,7 @@ Create a supervisor that owns one recursive agent execution tree.
 
 #### Returns
 
-[`Supervisor`](#supervisor-1)\<`Task`, `Out`\>
+[`Supervisor`](index.md#supervisor)\<`Task`, `Out`\>
 
 ***
 
@@ -22170,7 +21120,7 @@ Structural validation, independent of the run. Returns null when the spec is usa
 
 ### createWorktreeCliExecutor()
 
-> **createWorktreeCliExecutor**(`options`): [`Executor`](#executor)\<[`WorktreeHarnessResult`](#worktreeharnessresult)\>
+> **createWorktreeCliExecutor**(`options`): [`Executor`](index.md#executor-2)\<[`WorktreeHarnessResult`](#worktreeharnessresult)\>
 
 **`Experimental`**
 
@@ -22188,7 +21138,7 @@ before `execute()` resolves throws.
 
 #### Returns
 
-[`Executor`](#executor)\<[`WorktreeHarnessResult`](#worktreeharnessresult)\>
+[`Executor`](index.md#executor-2)\<[`WorktreeHarnessResult`](#worktreeharnessresult)\>
 
 ***
 
@@ -22368,6 +21318,18 @@ The clone is removed after; durable state lives only in the ref.
 
 ## References
 
+### AnalystRegistry
+
+Re-exports [AnalystRegistry](index.md#analystregistry)
+
+***
+
+### CoordinationEvent
+
+Re-exports [CoordinationEvent](index.md#coordinationevent)
+
+***
+
 ### WorktreeCheckRunner
 
 Re-exports [WorktreeCheckRunner](index.md#worktreecheckrunner)
@@ -22431,3 +21393,81 @@ Re-exports [SandboxClientProviderOptions](runtime/environment-provider.md#sandbo
 ### sandboxClientAsProvider
 
 Re-exports [sandboxClientAsProvider](runtime/environment-provider.md#sandboxclientasprovider)
+
+***
+
+### FinalizeContext
+
+Re-exports [FinalizeContext](index.md#finalizecontext)
+
+***
+
+### SupervisorFinalizer
+
+Re-exports [SupervisorFinalizer](index.md#supervisorfinalizer)
+
+***
+
+### AgentSpec
+
+Re-exports [AgentSpec](index.md#agentspec)
+
+***
+
+### Budget
+
+Re-exports [Budget](index.md#budget-4)
+
+***
+
+### Executor
+
+Re-exports [Executor](index.md#executor-2)
+
+***
+
+### ExecutorRegistry
+
+Re-exports [ExecutorRegistry](index.md#executorregistry)
+
+***
+
+### Scope
+
+Re-exports [Scope](index.md#scope)
+
+***
+
+### Settled
+
+Re-exports [Settled](index.md#settled)
+
+***
+
+### Spend
+
+Re-exports [Spend](index.md#spend)
+
+***
+
+### SupervisedResult
+
+Re-exports [SupervisedResult](index.md#supervisedresult)
+
+***
+
+### Supervisor
+
+Re-exports [Supervisor](index.md#supervisor)
+
+***
+
+### Driver
+
+Re-exports [Driver](index.md#driver)
+
+***
+
+### LoopResult
+
+Re-exports [LoopResult](index.md#loopresult)
diff --git a/docs/api/runtime/environment-provider.md b/docs/api/runtime/environment-provider.md
index 2f373d52..438fa85d 100644
--- a/docs/api/runtime/environment-provider.md
+++ b/docs/api/runtime/environment-provider.md
@@ -260,7 +260,7 @@ Options for running a provider as a supervise-mode executor.
 
 ##### runtime?
 
-> `optional` **runtime?**: [`Runtime`](../runtime.md#runtime-3)
+> `optional` **runtime?**: [`Runtime`](../runtime.md#runtime-2)
 
 **`Experimental`**
 
diff --git a/docs/canonical-api.md b/docs/canonical-api.md
index d40b3db0..232ea5fa 100644
--- a/docs/canonical-api.md
+++ b/docs/canonical-api.md
@@ -10,7 +10,7 @@ Run pnpm docs:freshness after editing this file. -->
 > `sandbox` must satisfy `>=0.15.0 <0.16.0`.
 > Portable profile and tool-part types come from `@tangle-network/agent-interface` `>=0.36.0 <0.37.0`.
 >
-> **`./loops` is the runtime barrel**: `package.json` maps it to `src/runtime/index.ts`. Everything below labelled `/loops` is the recursive-atom + loop-kernel surface.
+> **`./kernel` is the execution kernel**: `package.json` maps it to `src/runtime/index.ts`. Everything below labelled `/kernel` lives there — the recursive atom (`Scope`/`Supervisor`), the executor registry, budget conservation, the finalizer seam, analyst wiring, and the round-synchronous loop.
 >
 > **Read this before writing any orchestration, optimization, or measurement code in this repo.** If you are about to write a persona⟷agent conversation runner, a "skill optimizer", a "profile-seam", a depth-vs-breadth A/B harness, a bootstrap loop, or a `new Sandbox(...)` + stream + read dance: **stop**, it already exists, and a parallel copy will silently break one of the guarantees the existing primitives enforce: equal compute per compared arm ("equal-k"), the attempt-picker never being the grader ("selector≠judge"), complete usage capture, or eval running the same code path as production.
 
@@ -37,7 +37,7 @@ Two standing rules: the model that picks the best attempt is never the model tha
 Two substrates implement the same recursive-atom over the one `Executor` port and share `defaultSelectWinner`: a deliberate pair, **do not invent a third**.
 The reactive `Supervisor`/`Scope` plus personify combinators drive dynamic agent trees; the round-synchronous `runAgentRounds` kernel is one leaf backend.
 `inlineSandboxClient` adapts any non-box `Executor` into a `SandboxClient` for `runAgentRounds`, and `settledToIteration` bridges reactive `Settled` results into the kernel's `Iteration`.
-`runAgentRounds` was named `runLoop`, which remains a deprecated `/loops` alias.
+`runAgentRounds` was named `runLoop`, which remains a deprecated `/kernel` alias.
 It is separate from root `runToolLoop` and `streamToolLoop`, which run one chat turn and fold tool calls back into it.
 
 ## 1.5 The AgentProfile rule: author the profile, the substrate materializes it
@@ -63,7 +63,7 @@ A general "loop" primitive is the single most common modelling error in this rep
 
 **FIXED shape → a combinator you compose:**
 
-| You want… | Shape | Use (`/loops`) |
+| You want… | Shape | Use (`/kernel`) |
 |---|---|---|
 | refine ONE artifact over rounds until a check passes | depth | `loopUntil` |
 | try N independent attempts, keep the best | breadth | `fanout` |
@@ -78,34 +78,34 @@ A general "loop" primitive is the single most common modelling error in this rep
 | I want to… | Use (import) | Do NOT build |
 |---|---|---|
 | Run one product chat turn with streamed events, ordered persistence hooks, and stable execution/turn identity | `handleChatTurn(...)` + `deriveExecutionId(...)`: `/durable`; pass the derived id as both `executionId` and `turnId` on initial dispatch | importing the broad package entry from an edge worker, treating `executionId` alone as dispatch idempotency, or rebuilding framing and persistence ordering in the product |
-| Run a supervisor toward a goal with default setup | `supervise(profile, task, { budget, backend? })`: `/loops` | hand-wiring `createSupervisor().run` + `blobs`/`perWorker`/`journal`/`executors`; reaching for lower-level calls before you need a specific counterparty |
-| **Supervise agents to solve a graded `AgenticSurface` task** (workers `runAgentic` the surface, settle on its own check, driver self-improves from the failing tests) | `superviseSurface(profile, task, { surface, worker })`: `/loops` | a worker-seam + a "self-improving supervisor" wrapper around `supervise()`; passing a custom `makeWorkerAgent` that runs `runAgentic` |
-| Run a profile through a topology shape over the keystone Supervisor, end-to-end | `runPersonified({ persona, shape, task, budget })`: `/loops` | a hand-rolled `createSupervisor().run` + seam-wiring helper |
-| Loop a worker over one evolving artifact, K rounds, stop-when-good | `loopUntil(seed, spec)` as the `shape`: `/loops` | a `while(!done){runWorker();decide()}` hand-loop or "multi-attempt refine driver" |
-| Run a worker agent under test conversing with a **simulated-user persona**, K rounds, worker-only metered | `runPersonaConversation({ worker, persona, backendFor, systemPromptOf })`: root `.` (also `/loops`) | a hand-rolled per-agent `dispatchWithSurface` bridge / eval-dispatch loop |
+| Run a supervisor toward a goal with default setup | `supervise(profile, task, { budget, backend? })`: `/kernel` | hand-wiring `createSupervisor().run` + `blobs`/`perWorker`/`journal`/`executors`; reaching for lower-level calls before you need a specific counterparty |
+| **Supervise agents to solve a graded `AgenticSurface` task** (workers `runAgentic` the surface, settle on its own check, driver self-improves from the failing tests) | `superviseSurface(profile, task, { surface, worker })`: `/kernel` | a worker-seam + a "self-improving supervisor" wrapper around `supervise()`; passing a custom `makeWorkerAgent` that runs `runAgentic` |
+| Run a profile through a topology shape over the keystone Supervisor, end-to-end | `runPersonified({ persona, shape, task, budget })`: `/kernel` | a hand-rolled `createSupervisor().run` + seam-wiring helper |
+| Loop a worker over one evolving artifact, K rounds, stop-when-good | `loopUntil(seed, spec)` as the `shape`: `/kernel` | a `while(!done){runWorker();decide()}` hand-loop or "multi-attempt refine driver" |
+| Run a worker agent under test conversing with a **simulated-user persona**, K rounds, worker-only metered | `runPersonaConversation({ worker, persona, backendFor, systemPromptOf })`: root `.` (also `/kernel`) | a hand-rolled per-agent `dispatchWithSurface` bridge / eval-dispatch loop |
 | Run **two `AgentProfile`s head-to-head** with a separate resumable session for each actor | `runConversation(...)` from root `.` | a hand-rolled two-agent turn loop |
 | Drop a persona⟷agent conversation into an eval matrix as its dispatch | `runPersonaDispatch` → `runProfileMatrix({ dispatch })`: root `.` / `agent-eval/campaign` | a per-agent custom dispatch bridge |
-| Best-of-N / parallel-research / map-reduce at equal compute | `fanout(items, opts)`: `/loops` | `Promise.all` over N calls + manual argmax/merge (bypasses the budget pool → breaks equal-k) |
-| Produce-then-gate with a real checker | `verify(spec)`: `/loops` | "generate, then self-check with the same model, ship if ok" (collapses selector+judge) |
-| Multi-judge review / rubric quorum over one artifact | `panel(spec)`: `/loops` | a judge ensemble that feeds one judge's score into another |
-| Fixed sequential chain (plan→implement→…) | `pipeline(stages)`: `/loops` | hand-chained `await`s passing outputs along |
-| Adaptive tree search / progressive widening | `widen(spec)` + `flatWidenGate()`: `/loops` | a best-first/MCTS that reads child *scores* to expand (selector=judge); keep `flatWidenGate()` until your gate is proven |
-| Define the profile record for a personified run | `definePersona(input)`: `/loops` | a "profile-seam" / agent-config wrapper carrying model+prompt+tools+role |
+| Best-of-N / parallel-research / map-reduce at equal compute | `fanout(items, opts)`: `/kernel` | `Promise.all` over N calls + manual argmax/merge (bypasses the budget pool → breaks equal-k) |
+| Produce-then-gate with a real checker | `verify(spec)`: `/kernel` | "generate, then self-check with the same model, ship if ok" (collapses selector+judge) |
+| Multi-judge review / rubric quorum over one artifact | `panel(spec)`: `/kernel` | a judge ensemble that feeds one judge's score into another |
+| Fixed sequential chain (plan→implement→…) | `pipeline(stages)`: `/kernel` | hand-chained `await`s passing outputs along |
+| Adaptive tree search / progressive widening | `widen(spec)` + `flatWidenGate()`: `/kernel` | a best-first/MCTS that reads child *scores* to expand (selector=judge); keep `flatWidenGate()` until your gate is proven |
+| Define the profile record for a personified run | `definePersona(input)`: `/kernel` | a "profile-seam" / agent-config wrapper carrying model+prompt+tools+role |
 | Make a worker self-verify / iterate / audit | a **hook / process / skill on its authored `AgentProfile`**: §1.5 | a per-round judge, a `while(!done)` loop, or a bash hill-climb (it's a profile lever) |
 | Run an authored profile with Claude Code, Codex, OpenCode, or another supported harness | author the `AgentProfile` with `@tangle-network/agent-interface`; `@tangle-network/sandbox` materializes it for the selected harness | a harness-specific profile or config writer |
-| Have the supervisor design its workers | author a **full `AgentProfile`** per sub-task (prompt+skills+tools+mcp+hooks+subagents): `/loops` | author a bare `systemPrompt` string (a worker can't act on levers it has no levers for) |
-| Write a custom driver Agent and run it directly | `createSupervisor().run(root, task, opts)`: `/loops` | a bespoke orchestrator that spawns sub-agents and tallies cost (equal-compute claim breaks there) |
-| Run depth-vs-breadth (or a custom strategy) over a stateful tool domain | `runAgentic({ surface, task, mode\|strategy, budget })`: `/loops` | a hand-rolled `Supervisor.run` + journal/registry, or a depth/breadth loop |
-| Author a new topology/strategy compactly | `defineStrategy(name, body)` using `ctx.shot()`+`ctx.critique()`: `/loops` | a 70-line driver with `scope.spawn`/`scope.next` ceremony, or trusting a body-returned score |
-| Compare strategies + get a significance report on a domain | `runBenchmark({ environment, tasks, worker, strategies })`: `/loops` | your own strategy-comparison loop / paired-bootstrap / Pareto math |
-| Add a stateful tool-using domain | implement `AgenticSurface` (5 hooks: open/tools/call/score/close): `/loops` | a bespoke per-benchmark agent runner / tool-loop harness |
-| Run a sandbox coding rollout, round-synchronous (fresh box per round) | `runAgentRounds(options)`: `/loops` | a `new Sandbox()`+acquire+stream+parse+delete loop, or a 2nd winner-selector |
-| Run **agent-eval fixture folders** through Runtime `runAgentRounds` | agent-eval fixture loading/planning, then `loopCampaignDispatch(...)`: `/loops`; it starts the Runtime cell inside Eval's paid-call lifecycle | a one-off `runCampaign` dispatch, or attaching a completed `LoopResult` after paid work already ran |
-| Run + **resume** ONE persistent box across turns | `openSandboxRun(client, opts, deliverable)`: `/loops` | a per-domain `new Sandbox`+`box.fs.read`+delete copy |
-| Run **ONE agent turn** on any substrate: box (`streamPrompt`), cli-bridge/router `Executor`, or in-process chat backend: as ONE normalized `RuntimeStreamEvent` stream with a guaranteed terminal result+usage event; opt into in-stream `tool_call`/`tool_result` with `preserveToolParts`, or tap the raw sandbox events with `onRawEvent` | `streamAgentTurn(backend, prompt, { signal, timeoutMs, preserveToolParts?, onRawEvent? })` + `collectAgentTurn(stream)`: `/loops` | a per-provider stream→event mapper zoo, a hand-faked box around a non-box executor, or raw fetch leaking through the turn abstraction |
-| Pick the **execution transport a driven loop runs on** (`sandbox` box / cli-bridge / router) from a product flag | `resolveSandboxClient({ backend })`: `/loops` | a per-product `if (backend === 'router') …` branch re-wiring `createExecutor` + `inlineSandboxClient` |
+| Have the supervisor design its workers | author a **full `AgentProfile`** per sub-task (prompt+skills+tools+mcp+hooks+subagents): `/kernel` | author a bare `systemPrompt` string (a worker can't act on levers it has no levers for) |
+| Write a custom driver Agent and run it directly | `createSupervisor().run(root, task, opts)`: `/kernel` | a bespoke orchestrator that spawns sub-agents and tallies cost (equal-compute claim breaks there) |
+| Run depth-vs-breadth (or a custom strategy) over a stateful tool domain | `runAgentic({ surface, task, mode\|strategy, budget })`: `/kernel` | a hand-rolled `Supervisor.run` + journal/registry, or a depth/breadth loop |
+| Author a new topology/strategy compactly | `defineStrategy(name, body)` using `ctx.shot()`+`ctx.critique()`: `/kernel` | a 70-line driver with `scope.spawn`/`scope.next` ceremony, or trusting a body-returned score |
+| Compare strategies + get a significance report on a domain | `runBenchmark({ environment, tasks, worker, strategies })`: `/kernel` | your own strategy-comparison loop / paired-bootstrap / Pareto math |
+| Add a stateful tool-using domain | implement `AgenticSurface` (5 hooks: open/tools/call/score/close): `/kernel` | a bespoke per-benchmark agent runner / tool-loop harness |
+| Run a sandbox coding rollout, round-synchronous (fresh box per round) | `runAgentRounds(options)`: `/kernel` | a `new Sandbox()`+acquire+stream+parse+delete loop, or a 2nd winner-selector |
+| Run **agent-eval fixture folders** through Runtime `runAgentRounds` | agent-eval fixture loading/planning, then `loopCampaignDispatch(...)`: `/kernel`; it starts the Runtime cell inside Eval's paid-call lifecycle | a one-off `runCampaign` dispatch, or attaching a completed `LoopResult` after paid work already ran |
+| Run + **resume** ONE persistent box across turns | `openSandboxRun(client, opts, deliverable)`: `/kernel` | a per-domain `new Sandbox`+`box.fs.read`+delete copy |
+| Run **ONE agent turn** on any substrate: box (`streamPrompt`), cli-bridge/router `Executor`, or in-process chat backend: as ONE normalized `RuntimeStreamEvent` stream with a guaranteed terminal result+usage event; opt into in-stream `tool_call`/`tool_result` with `preserveToolParts`, or tap the raw sandbox events with `onRawEvent` | `streamAgentTurn(backend, prompt, { signal, timeoutMs, preserveToolParts?, onRawEvent? })` + `collectAgentTurn(stream)`: `/kernel` | a per-provider stream→event mapper zoo, a hand-faked box around a non-box executor, or raw fetch leaking through the turn abstraction |
+| Pick the **execution transport a driven loop runs on** (`sandbox` box / cli-bridge / router) from a product flag | `resolveSandboxClient({ backend })`: `/kernel` | a per-product `if (backend === 'router') …` branch re-wiring `createExecutor` + `inlineSandboxClient` |
 | Pick the **chat backend an in-process turn runs on** (`router`/`tcloud`/`cli-bridge`/`sandbox`) from a product flag | `resolveAgentBackend({ backend })`: root `.` | the copy-pasted `backend-name → createOpenAICompatibleBackend` branch every eval product hand-rolled (the copies drift) |
-| Pick / register a leaf backend, or bring your own agent | `createExecutor({ backend })` / `createExecutorRegistry()` / implement `Executor`: `/loops` | a per-vendor adapter or closed `inline\|sandbox\|cli` switch (won't report through the `UsageEvent` channel) |
+| Pick / register a leaf backend, or bring your own agent | `createExecutor({ backend })` / `createExecutorRegistry()` / implement `Executor`: `/kernel` | a per-vendor adapter or closed `inline\|sandbox\|cli` switch (won't report through the `UsageEvent` channel) |
 | Optimize text or named components with upstream GEPA | `officialGepa({ recipe, ... })`, passed as `improve(...).method` from root `.` | a local GEPA approximation, prompt mutation loop, or silent fallback when Python is unavailable |
 | Optimize one text surface with Microsoft SkillOpt | `officialSkillOpt({ trainer, optimizer, ... })`, passed as `improve(...).method` from root `.` | Runtime-owned SkillOpt search or a silent local fallback |
 | Improve one profile coordinate | `improve(profile, { surface, executionRef, method, trainScenarios, selectionScenarios, testScenarios, judges, agent, costCeiling })` from root `.`; `executionRef` binds saved work to executable behavior, `agent` receives the exact complete candidate profile, and the total-cost option limits the whole run | an implicit per-surface optimizer, a method that sees final-test cases, an unmeasured profile mutation, or separate optimizer and final-test spend limits |
@@ -113,15 +113,15 @@ A general "loop" primitive is the single most common modelling error in this rep
 | Compare complete optimization methods directly | `compareOptimizationMethods(...)` from `agent-eval/campaign` | comparing one method's training score to another method's final score |
 | Improve repository code | `improve({ surface: 'code', code, scenarios, judge, agent, budget })` from root `.` | passing code through a text optimizer or managing candidate worktrees in product code |
 | Decide ship/hold on a candidate (campaign context) | `defaultProductionGate({ holdoutScenarios, deltaThreshold })`; compose with `heldOutGate` / `composeGate`: `agent-eval/contract` | a raw `h1>h0` point comparison on the training set |
-| Decide ship/hold from a **`BenchmarkReport`** (per-task cells) | `promotionGate({ report, incumbent, candidate })`: `/loops` | comparing two strategies' mean scores directly; re-deriving the bootstrap |
-| Run the full multi-generation strategy flywheel + certify | `runStrategyEvolution(config)`: `/loops` | a bespoke gen0→author→gen1→holdout loop with hand-rolled champion selection |
+| Decide ship/hold from a **`BenchmarkReport`** (per-task cells) | `promotionGate({ report, incumbent, candidate })`: `/kernel` | comparing two strategies' mean scores directly; re-deriving the bootstrap |
+| Run the full multi-generation strategy flywheel + certify | `runStrategyEvolution(config)`: `/kernel` | a bespoke gen0→author→gen1→holdout loop with hand-rolled champion selection |
 | Add or run a benchmark from the CLI/harness | `ADAPTERS` / `resolveAdapter(key)`, run via `bench/src/gate-cli.mts` | a per-script `switch(bench)` or a local benchmark-factory map |
 | Wire a new benchmark | implement `BenchmarkAdapter` (5 methods) + feed to `runGate`: `bench` | a bespoke per-benchmark run script with its own (self-authored) scoring |
-| Measure a topology on a benchmark at equal compute | `runGate(cfg)` (or `runAgentic`/`runBenchmark`): equal-k holds via the conserved budget pool: `bench`/`/loops` | a batch-blind/batch-oracle/compare zoo, your own usage capture, or equal-k bookkeeping |
-| Observe a run's full cost/time | `createWaterfallCollector()` → `anytimeReport()`: `/loops` | a per-step cost/token tally by inspecting events yourself (drifts from billed totals) |
-| Meter **one `openSandboxRun` cell's token/cost usage** (the metering seam for bench cells) | `sumSandboxUsage(events)`: `/loops` (folds `extractLlmCallEvent` over the run's events) | a per-bench usage tally re-parsing raw sandbox events (misses usage → integrity-guard rejects the cell) |
-| Stand up a **product eval leaderboard** (declare `cases` + `prompt` + `score` → harness×model matrix + ranked board): START HERE (product leaderboards) | `defineLeaderboard(spec)`: `/loops` (every default overridable: `backends`/`dispatch`/`judges` seams; `runProfileMatrix` stays public as the escape floor; `toBenchmarkAdapter()` registers it into a benchmark registry) | the hand-rolled `expandProfileAxes` + `loopDispatch` + `runProfileMatrix` assembly (~650 lines/product) with its stale cell-cache, zero-token stub-cell, and missing-model-snapshot footguns |
-| Render a **multi-profile × multi-axis benchmark leaderboard** (ranked board + score matrix + SVG/HTML charts) from an EXISTING fleet of matrix runs | `leaderboard(records)` + `renderLeaderboardMarkdown` / `renderLeaderboardSvg` / `renderLeaderboardHtml`: `/loops` (feed it `runProfileMatrix().records`, any domain; `defineLeaderboard` calls these for you) | a per-benchmark report/chart renderer; hand-rolled SVG/markdown tables; a curated subset of axes |
+| Measure a topology on a benchmark at equal compute | `runGate(cfg)` (or `runAgentic`/`runBenchmark`): equal-k holds via the conserved budget pool: `bench`/`/kernel` | a batch-blind/batch-oracle/compare zoo, your own usage capture, or equal-k bookkeeping |
+| Observe a run's full cost/time | `createWaterfallCollector()` → `anytimeReport()`: `/kernel` | a per-step cost/token tally by inspecting events yourself (drifts from billed totals) |
+| Meter **one `openSandboxRun` cell's token/cost usage** (the metering seam for bench cells) | `sumSandboxUsage(events)`: `/kernel` (folds `extractLlmCallEvent` over the run's events) | a per-bench usage tally re-parsing raw sandbox events (misses usage → integrity-guard rejects the cell) |
+| Stand up a **product eval leaderboard** (declare `cases` + `prompt` + `score` → harness×model matrix + ranked board): START HERE (product leaderboards) | `defineLeaderboard(spec)`: `/kernel` (every default overridable: `backends`/`dispatch`/`judges` seams; `runProfileMatrix` stays public as the escape floor; `toBenchmarkAdapter()` registers it into a benchmark registry) | the hand-rolled `expandProfileAxes` + `loopDispatch` + `runProfileMatrix` assembly (~650 lines/product) with its stale cell-cache, zero-token stub-cell, and missing-model-snapshot footguns |
+| Render a **multi-profile × multi-axis benchmark leaderboard** (ranked board + score matrix + SVG/HTML charts) from an EXISTING fleet of matrix runs | `leaderboard(records)` + `renderLeaderboardMarkdown` / `renderLeaderboardSvg` / `renderLeaderboardHtml`: `/kernel` (feed it `runProfileMatrix().records`, any domain; `defineLeaderboard` calls these for you) | a per-benchmark report/chart renderer; hand-rolled SVG/markdown tables; a curated subset of axes |
 | Attach N observers to a running loop | `composeRuntimeHooks(...)`: root export | a second event-bus or callback-prop zoo (there is ONE stream) |
 | Ship traces to an OTLP collector | `createOtelExporter()` + `buildLoopOtelSpans()`: root export | your own OTLP serializer or pulling the OTEL SDK |
 | Know **what got mounted into a run** / **why a candidate won** | `result.provenance.mounts` / `result.provenance.selectionReceipts` (`MountManifestEntry`/`SelectionReceipt`/`RunProvenance`); declare mounts via the `recordMount` recorder in `prepareBox`: root export | re-reading box contents to reconstruct what was mounted, or re-deriving which candidate the selector picked |
diff --git a/docs/glossary.md b/docs/glossary.md
index 1196b99b..713a402e 100644
--- a/docs/glossary.md
+++ b/docs/glossary.md
@@ -5,7 +5,7 @@
 **Track:** reference · **Role:** canonical (terms). One definition per concept, grounded to `file:line`. When a term has drifted into synonyms, the **canonical** word is marked and the synonyms are listed as "avoid / say X instead". If code and this file disagree, the code wins — fix this file the same turn (the anti-staleness law, `CLAUDE.md`).
 
 Two substrates run the same "recursive agent decision" atom — the round-synchronous `runAgentRounds` and the reactive `Scope`/`Supervisor`. Terms below note which substrate they belong to; several are shared.
-`runAgentRounds` was named `runLoop`; that name is still exported from `/loops` as a deprecated alias. Neither is `runToolLoop`/`streamToolLoop` (package root), which run ONE chat turn and fold its tool calls back in.
+`runAgentRounds` was named `runLoop`; that name is still exported from `/kernel` as a deprecated alias. Neither is `runToolLoop`/`streamToolLoop` (package root), which run ONE chat turn and fold its tool calls back in.
 
 ## The execution units (most-confused — read first)
 
@@ -66,7 +66,7 @@ The shape grows by LLM decision through the **coordination toolbox** over a live
 | Term | Meaning | Anchor |
 |---|---|---|
 | **Agent.act** | The recursive atom: `act(task, scope) → Out`. A driver IS an `act` that spawns into its `scope`; replay-safe. The Supervisor calls `root.act(task, scope)`. | `supervise/types.ts:50`; `supervisor.ts:145` |
-| **Coordination toolbox ("Scope-as-MCP")** | The operator/driver verbs exposed as MCP tools over a live `Scope`: `spawn_agent`→`scope.spawn`, `await_event`→`scope.next` (the wake event), `steer_agent`→`scope.send` (chat/interrupt a running child), `observe_agent`→`scope.view`, `stop`, `list_analysts`/`run_analyst`. **Built + tested**, public on the `./mcp` subpath. This is how an LLM driver spawns and talks to its sub-agents. | `mcp/tools/coordination.ts`; tests `tests/loops/coordination.test.ts` |
+| **Coordination toolbox ("Scope-as-MCP")** | The operator/driver verbs exposed as MCP tools over a live `Scope`: `spawn_agent`→`scope.spawn`, `await_event`→`scope.next` (the wake event), `steer_agent`→`scope.send` (chat/interrupt a running child), `observe_agent`→`scope.view`, `stop`, `list_analysts`/`run_analyst`. **Built + tested**, public on the `./mcp` subpath. This is how an LLM driver spawns and talks to its sub-agents. | `mcp/tools/coordination.ts`; tests `tests/kernel/coordination.test.ts` |
 | **Scope.send / deliver** | The "steer a live worker" verb the toolbox's `steer_agent` binds to: `scope.send(nodeId, msg)` → child executor's `deliver()` inbox. **In-process binding is real**; the cross-box (A2A) binding is task #13. | `supervise/scope.ts:290` |
 | **Agent Bus / A2A** | The cross-process agent↔agent transport for the same verbs — **designed, not adopted**. The in-process toolbox works today; this is the unfinished edge. | task #13; `docs/agent-bus-protocol.md` |
 
diff --git a/docs/learning-flywheel.md b/docs/learning-flywheel.md
index b01b09ce..de6daf87 100644
--- a/docs/learning-flywheel.md
+++ b/docs/learning-flywheel.md
@@ -314,8 +314,8 @@ A separate final-test partition is required because source labels alone cannot p
   leaf execution backend) and the canonical agent-driver:
   `createCoordinationTools` (`src/mcp/tools/coordination.ts`) over the `Scope`/`Supervisor`
   substrate (`src/runtime/supervise/`), with `runAgentic`/`defineStrategy`/`runPersonified`.
-- **The published optimization suite**: `@tangle-network/agent-runtime/loops` (a build
-  alias — the source is `src/runtime/`, there is no `src/loops/` directory):
+- **The published optimization suite**: `@tangle-network/agent-runtime/kernel` (source:
+  `src/runtime/`):
   `Environment`/`Strategy`/`defineStrategy`/`ShotPersona` (`strategy.ts`), `runBenchmark`
   (`run-benchmark.ts`), `createVerifierEnvironment`/`createMcpEnvironment`,
   `harvestCorpus`, `authorStrategy` (`strategy-author.ts`), `auditIntent`, and
diff --git a/docs/research/simplification-plan.md b/docs/research/simplification-plan.md
index 80e291b3..8ffca6a0 100644
--- a/docs/research/simplification-plan.md
+++ b/docs/research/simplification-plan.md
@@ -87,7 +87,7 @@ The entries below preserve earlier decisions and rejected designs.
 |---|---|---|
 | `.` (main) | **KEEP, shrink** | core: AgentProfile + run/improve/gate + handleChatTurn. Hide conversation plumbing + journal types. |
 | `./runtime` (362 symbols) | **KEEP, SHRINK hard** | → ~100. Move seams/factories/recursion-plumbing to `./supervise/internal`. |
-| `./loops` | **KEEP/MERGE** | the strategy+benchmark surface (refine/sample/runBenchmark/gate). |
+| `./kernel` | **KEEP/MERGE** | the strategy+benchmark surface (refine/sample/runBenchmark/gate). |
 | `./mcp` (178) | **KEEP, shrink** | coordination + delegation tools; hide trace collectors + task-queue internals. |
 | `./agent` | **KEEP** | `defineAgent` / profile authoring. |
 | `./profiles` | **MERGE → ./agent** | one profile surface. |
@@ -155,7 +155,7 @@ The naming work converged on these calls. Each is settled — do not re-propose;
 
 1. **`AgentRunSpec` → `SandboxIterationSpec` — name DECIDED, rename DEFERRED.** The target name is right (it is the per-iteration sandbox spec, not a generic "agent run"), but the symbol is PUBLIC at `src/runtime/index.ts` with a ~28-file blast radius across the fleet. A rename needs a major bump + consumer migration PRs (the §9 non-goal: no public rename without that), so it is OUT of a usability PR. Ship the rename in its own breaking release with deprecation aliases one cycle.
 2. **`improvementDriver` KEEPS its internal name.** `improve()` is the public improvement verb; `improvementDriver` is the private code-surface implementation behind it. Profile fields use complete agent-eval methods and never receive this proposer.
-3. **`runLoop` KEEPS its name AND stays public.** It is a published `/loops` primitive (the round-synchronous leaf kernel the sandbox benches drive); internalizing or renaming it would break consumers for no taxonomy gain. The Scope/Supervisor core is the PREFERRED path for new recursive work, but `runLoop` is not deprecated.
+3. **`runLoop` KEEPS its name AND stays public.** It is a published `/kernel` primitive (the round-synchronous leaf kernel the sandbox benches drive); internalizing or renaming it would break consumers for no taxonomy gain. The Scope/Supervisor core is the PREFERRED path for new recursive work, but `runLoop` is not deprecated.
 4. **`runAgentic` and `runPersonified` BOTH stay.** They are distinct contracts (one-shot agentic run vs persona-driven cross-run combinator), not duplicates — a merge would conflate two real shapes. WS2's "one documented run path" is satisfied by `supervise()` as the one-call entry; the lower-level combinators remain for power use.
 5. **Superseded.** Every profile field now requires a complete method. Runtime supplies no zero-config prompt, skill, memory, or profile optimizer. Code requires explicit worktree configuration.
 
diff --git a/examples/ablation-suite/ablation.ts b/examples/ablation-suite/ablation.ts
index da1234ac..4e547745 100644
--- a/examples/ablation-suite/ablation.ts
+++ b/examples/ablation-suite/ablation.ts
@@ -27,7 +27,7 @@ import {
   sample,
   sampleThenRefine,
   superviseSurface,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { codingEnv, codingTasks } from '../self-improving-coder/self-improving-coder'
 import { countingSurface } from './counting-surface'
 import { optimizeDriverPrompt } from './gepa-driver-prompt'
diff --git a/examples/ablation-suite/counting-surface.ts b/examples/ablation-suite/counting-surface.ts
index 1f14e641..b57939a9 100644
--- a/examples/ablation-suite/counting-surface.ts
+++ b/examples/ablation-suite/counting-surface.ts
@@ -13,7 +13,7 @@ import type {
   AgenticSurface,
   AgenticTask,
   ArtifactHandle,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 
 export interface CountingSurface extends AgenticSurface {
   /** A snapshot of how many times each tool was called, keyed by tool name. Reading it
diff --git a/examples/ablation-suite/gepa-driver-prompt.ts b/examples/ablation-suite/gepa-driver-prompt.ts
index 201cdb65..fddc8b59 100644
--- a/examples/ablation-suite/gepa-driver-prompt.ts
+++ b/examples/ablation-suite/gepa-driver-prompt.ts
@@ -20,7 +20,7 @@ import {
   type AgenticTask,
   failuresAnalyst,
   superviseSurface,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import {
   assertCompleteCost,
   officialOptimizerModel,
diff --git a/examples/ablation-suite/hard-coding-env.ts b/examples/ablation-suite/hard-coding-env.ts
index 92daf97a..ac64bcbb 100644
--- a/examples/ablation-suite/hard-coding-env.ts
+++ b/examples/ablation-suite/hard-coding-env.ts
@@ -32,7 +32,7 @@ import type {
   AgenticTool,
   ArtifactHandle,
   SurfaceScore,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 
 // ── Seed-derived dialect (the contract no model can recall) ──────────────────────
 /** The per-seed dialect of the calculator language. Every knob is read ONLY from the tests, so the agent
diff --git a/examples/ablation-suite/long-coding-env-lite.ts b/examples/ablation-suite/long-coding-env-lite.ts
index 3e80ca34..334d3abf 100644
--- a/examples/ablation-suite/long-coding-env-lite.ts
+++ b/examples/ablation-suite/long-coding-env-lite.ts
@@ -57,7 +57,7 @@ import type {
   AgenticTool,
   ArtifactHandle,
   SurfaceScore,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 
 // ── Seed-derived constants (the contract no model can recall) ────────────────────
 /** A well-mixed per-(seed,salt) hash. Each convention and each function draws under its OWN salt so they
diff --git a/examples/ablation-suite/long-coding-env.ts b/examples/ablation-suite/long-coding-env.ts
index a2f80013..de4da035 100644
--- a/examples/ablation-suite/long-coding-env.ts
+++ b/examples/ablation-suite/long-coding-env.ts
@@ -49,7 +49,7 @@ import type {
   AgenticTool,
   ArtifactHandle,
   SurfaceScore,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 
 // ── Seed-derived constants (the contract no model can recall) ────────────────────
 /** A well-mixed per-(seed,salt) hash. Each convention and each function draws under its OWN salt so they
diff --git a/examples/ablation-suite/persistent-surface.ts b/examples/ablation-suite/persistent-surface.ts
index b475899a..3e109235 100644
--- a/examples/ablation-suite/persistent-surface.ts
+++ b/examples/ablation-suite/persistent-surface.ts
@@ -12,7 +12,7 @@ import type {
   AgenticSurface,
   AgenticTask,
   ArtifactHandle,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 
 export function persistentSurface(base: AgenticSurface): AgenticSurface {
   // One opened handle per task id, shared by every worker on that task. Reference-counted so the shared
diff --git a/examples/ablation-suite/ralph-strategy.ts b/examples/ablation-suite/ralph-strategy.ts
index ab96548e..dbe0aa46 100644
--- a/examples/ablation-suite/ralph-strategy.ts
+++ b/examples/ablation-suite/ralph-strategy.ts
@@ -12,7 +12,7 @@
  *                          plus a brain.
  * If respawn-fresh beats continuous on long tasks, Ralph > refine. If the brain earns its cost, supervisor > Ralph.
  */
-import { defineStrategy } from '@tangle-network/agent-runtime/loops'
+import { defineStrategy } from '@tangle-network/agent-runtime/kernel'
 
 const ralphContinue =
   'A previous attempt may have left partial work in the implementation file. FIRST read the current file and ' +
diff --git a/examples/ablation-suite/verkit-env.ts b/examples/ablation-suite/verkit-env.ts
index d698c749..fd23977d 100644
--- a/examples/ablation-suite/verkit-env.ts
+++ b/examples/ablation-suite/verkit-env.ts
@@ -48,7 +48,7 @@ import type {
   AgenticTool,
   ArtifactHandle,
   SurfaceScore,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 
 const fixtureDir = join(dirname(fileURLToPath(import.meta.url)), 'fixtures', 'verkit')
 
diff --git a/examples/agentic-data-creation/agentic-data-creation.ts b/examples/agentic-data-creation/agentic-data-creation.ts
index 85514a18..9db5b59b 100644
--- a/examples/agentic-data-creation/agentic-data-creation.ts
+++ b/examples/agentic-data-creation/agentic-data-creation.ts
@@ -47,7 +47,7 @@ import {
   runAgentRounds,
   type SandboxClient,
   type Validator,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import type { SandboxEvent } from '@tangle-network/sandbox'
 
 // ── The four-role data shapes ─────────────────────────────────────────────────────────────
diff --git a/examples/agentic-data-creation/offline-fixtures.ts b/examples/agentic-data-creation/offline-fixtures.ts
index 8a7fb691..423bb60a 100644
--- a/examples/agentic-data-creation/offline-fixtures.ts
+++ b/examples/agentic-data-creation/offline-fixtures.ts
@@ -20,7 +20,7 @@
 
 import { createChatClient, llmJudge } from '@tangle-network/agent-eval'
 import type { JudgeConfig } from '@tangle-network/agent-eval/campaign'
-import { inProcessSandboxClient, type SandboxClient } from '@tangle-network/agent-runtime/loops'
+import { inProcessSandboxClient, type SandboxClient } from '@tangle-network/agent-runtime/kernel'
 import type { SandboxEvent } from '@tangle-network/sandbox'
 import type { DataExample, SolverArtifact } from './agentic-data-creation'
 
diff --git a/examples/coding-benchmark/benchmark.ts b/examples/coding-benchmark/benchmark.ts
index 8723856f..1c019a09 100644
--- a/examples/coding-benchmark/benchmark.ts
+++ b/examples/coding-benchmark/benchmark.ts
@@ -38,7 +38,7 @@ import {
   renderLeaderboardMarkdown,
   renderPairwiseMarkdown,
   type SandboxClient,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { codingDispatch } from './dispatch'
 import { ensembleCodeJudge, type RubricDim, type RunArtifact, singleCodeJudge } from './eval'
 import { csvParserSource, lruCacheSource } from './fixtures'
diff --git a/examples/coding-benchmark/coding-benchmark.test.ts b/examples/coding-benchmark/coding-benchmark.test.ts
index c9bc5397..d4324155 100644
--- a/examples/coding-benchmark/coding-benchmark.test.ts
+++ b/examples/coding-benchmark/coding-benchmark.test.ts
@@ -20,7 +20,7 @@ import { tmpdir } from 'node:os'
 import { dirname, join } from 'node:path'
 import { promisify } from 'node:util'
 import { assertNoHiddenLeak, type RunRecord } from '@tangle-network/agent-eval'
-import { leaderboard } from '@tangle-network/agent-runtime/loops'
+import { leaderboard } from '@tangle-network/agent-runtime/kernel'
 import { describe, expect, it } from 'vitest'
 import { main, offlineAgentScripts } from './benchmark'
 import { type CheckBox, composeScore, runChecks, runHeldout } from './eval'
diff --git a/examples/coding-benchmark/dispatch.ts b/examples/coding-benchmark/dispatch.ts
index 02797b90..864265d7 100644
--- a/examples/coding-benchmark/dispatch.ts
+++ b/examples/coding-benchmark/dispatch.ts
@@ -38,7 +38,7 @@ import {
   openSandboxRun,
   type SandboxClient,
   sumSandboxUsage,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import type { SandboxEvent } from '@tangle-network/sandbox'
 import { gradeOnHiddenCriteria, layerOutput, type RunArtifact, runChecks } from './eval'
 import { harnessOf, type ToolPreset, withTools } from './profiles'
diff --git a/examples/coding-benchmark/offline-box.ts b/examples/coding-benchmark/offline-box.ts
index 109c6942..4be9be3c 100644
--- a/examples/coding-benchmark/offline-box.ts
+++ b/examples/coding-benchmark/offline-box.ts
@@ -33,7 +33,7 @@ import { mkdir, readFile, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import { dirname, join } from 'node:path'
 import { promisify } from 'node:util'
-import type { SandboxClient } from '@tangle-network/agent-runtime/loops'
+import type { SandboxClient } from '@tangle-network/agent-runtime/kernel'
 import type { CreateSandboxOptions, SandboxEvent, SandboxInstance } from '@tangle-network/sandbox'
 
 const execAsync = promisify(execCb)
diff --git a/examples/delegate/delegate.ts b/examples/delegate/delegate.ts
index a5bc32e4..0380de26 100644
--- a/examples/delegate/delegate.ts
+++ b/examples/delegate/delegate.ts
@@ -15,7 +15,7 @@
  * Run:  TANGLE_API_KEY=<router key>  pnpm tsx examples/delegate/delegate.ts
  */
 import { existsSync, readFileSync } from 'node:fs'
-import { delegate } from '@tangle-network/agent-runtime/loops'
+import { delegate } from '@tangle-network/agent-runtime/kernel'
 import { fileDeliverable, makeWriteFileBackend, scratchTarget } from './shared'
 
 async function main(): Promise<void> {
diff --git a/examples/delegate/shared.ts b/examples/delegate/shared.ts
index 4c5d9573..71f64808 100644
--- a/examples/delegate/shared.ts
+++ b/examples/delegate/shared.ts
@@ -6,7 +6,7 @@
 import { existsSync, mkdirSync, mkdtempSync, readFileSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { dirname, join, resolve } from 'node:path'
-import type { DeliverableSpec, ExecutorConfig } from '@tangle-network/agent-runtime/loops'
+import type { DeliverableSpec, ExecutorConfig } from '@tangle-network/agent-runtime/kernel'
 
 /** A fresh, isolated scratch dir + the relative/absolute target path the worker writes. */
 export function scratchTarget(): { workDir: string; target: string; targetAbs: string } {
diff --git a/examples/driver-loop/driver-loop.ts b/examples/driver-loop/driver-loop.ts
index 01097c33..ad3f555a 100644
--- a/examples/driver-loop/driver-loop.ts
+++ b/examples/driver-loop/driver-loop.ts
@@ -36,7 +36,7 @@
  */
 
 import type { AgentProfile } from '@tangle-network/agent-interface'
-import { type Driver, runAgentRounds } from '@tangle-network/agent-runtime/loops'
+import { type Driver, runAgentRounds } from '@tangle-network/agent-runtime/kernel'
 import {
   type NoteOutput,
   type NoteTask,
diff --git a/examples/driver-loop/scripted-worker.ts b/examples/driver-loop/scripted-worker.ts
index c928c7ac..4e692db6 100644
--- a/examples/driver-loop/scripted-worker.ts
+++ b/examples/driver-loop/scripted-worker.ts
@@ -19,7 +19,7 @@ import {
   type OutputAdapter,
   type SandboxClient,
   type Validator,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import type { SandboxEvent } from '@tangle-network/sandbox'
 
 // The task must draft a one-line release note that mentions the word "rollback". A real product
diff --git a/examples/fleet-delegation/fleet-delegation.ts b/examples/fleet-delegation/fleet-delegation.ts
index 6963a5b8..e3ad4f0a 100644
--- a/examples/fleet-delegation/fleet-delegation.ts
+++ b/examples/fleet-delegation/fleet-delegation.ts
@@ -1,6 +1,6 @@
 // TANGLE_FLEET_ID flips delegation from sibling-sandbox to fleet-workspace dispatch. See README.md.
 
-import { inProcessSandboxClient, type SandboxClient } from '@tangle-network/agent-runtime/loops'
+import { inProcessSandboxClient, type SandboxClient } from '@tangle-network/agent-runtime/kernel'
 import {
   createFleetWorkspaceExecutor,
   createSiblingSandboxExecutor,
diff --git a/examples/intelligence-recommend/intelligence-recommend.ts b/examples/intelligence-recommend/intelligence-recommend.ts
index 76b59e80..7e838d68 100644
--- a/examples/intelligence-recommend/intelligence-recommend.ts
+++ b/examples/intelligence-recommend/intelligence-recommend.ts
@@ -20,7 +20,7 @@ import { makeProposalFinding } from '@tangle-network/agent-eval'
 import { inMemoryCampaignStorage } from '@tangle-network/agent-eval/campaign'
 import { improve } from '@tangle-network/agent-runtime'
 import { createIntelligenceClient } from '@tangle-network/agent-runtime/intelligence'
-import type { LoopTraceEvent } from '@tangle-network/agent-runtime/loops'
+import type { LoopTraceEvent } from '@tangle-network/agent-runtime/kernel'
 import {
   agent,
   executionRef,
diff --git a/examples/intelligence-webcode/intelligence-webcode.ts b/examples/intelligence-webcode/intelligence-webcode.ts
index 386dc282..288a133e 100644
--- a/examples/intelligence-webcode/intelligence-webcode.ts
+++ b/examples/intelligence-webcode/intelligence-webcode.ts
@@ -37,7 +37,7 @@ import {
   openSandboxRun,
   type SandboxClient,
   sumSandboxUsage,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import type { BackendType } from '@tangle-network/sandbox'
 import {
   loadWebCodeTasks,
diff --git a/examples/quickstart/quickstart.ts b/examples/quickstart/quickstart.ts
index 41db4e3c..5d37f96d 100644
--- a/examples/quickstart/quickstart.ts
+++ b/examples/quickstart/quickstart.ts
@@ -11,7 +11,7 @@
  */
 
 import type { AgentProfile } from '@tangle-network/agent-interface'
-import { inProcessSandboxClient, runAgentRounds } from '@tangle-network/agent-runtime/loops'
+import { inProcessSandboxClient, runAgentRounds } from '@tangle-network/agent-runtime/kernel'
 import type { SandboxEvent } from '@tangle-network/sandbox'
 
 type Task = { prompt: string }
diff --git a/examples/recursive-supervisor/inline-executor.ts b/examples/recursive-supervisor/inline-executor.ts
index fde1b4fd..a2ee11db 100644
--- a/examples/recursive-supervisor/inline-executor.ts
+++ b/examples/recursive-supervisor/inline-executor.ts
@@ -18,8 +18,8 @@ import type {
   Executor,
   ExecutorResult,
   UsageEvent,
-} from '@tangle-network/agent-runtime/loops'
-import { createExecutorRegistry } from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
+import { createExecutorRegistry } from '@tangle-network/agent-runtime/kernel'
 
 export interface Script {
   out: string
diff --git a/examples/recursive-supervisor/recursive-supervisor.ts b/examples/recursive-supervisor/recursive-supervisor.ts
index f310d8f5..65cfddc9 100644
--- a/examples/recursive-supervisor/recursive-supervisor.ts
+++ b/examples/recursive-supervisor/recursive-supervisor.ts
@@ -28,7 +28,7 @@ import {
   runPersonified,
   type Scope,
   settledToIteration,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { leaf, scriptedPersonaRegistry } from './inline-executor'
 
 // ── 1. A driver Agent: spawn two children, drain, select the best valid ─────
diff --git a/examples/researcher-loop/researcher-loop.ts b/examples/researcher-loop/researcher-loop.ts
index be9658c3..73ce247c 100644
--- a/examples/researcher-loop/researcher-loop.ts
+++ b/examples/researcher-loop/researcher-loop.ts
@@ -17,7 +17,7 @@ import {
   type ResearchTask,
   researcherProfile,
 } from '@tangle-network/agent-knowledge/profiles'
-import { type Driver, runAgentRounds } from '@tangle-network/agent-runtime/loops'
+import { type Driver, runAgentRounds } from '@tangle-network/agent-runtime/kernel'
 import { sandboxClient, task } from './synthetic-researcher'
 
 async function main(): Promise<void> {
diff --git a/examples/researcher-loop/synthetic-researcher.ts b/examples/researcher-loop/synthetic-researcher.ts
index f29af060..1fb902e4 100644
--- a/examples/researcher-loop/synthetic-researcher.ts
+++ b/examples/researcher-loop/synthetic-researcher.ts
@@ -12,7 +12,7 @@
  */
 
 import type { ResearchOutput, ResearchTask } from '@tangle-network/agent-knowledge/profiles'
-import { inProcessSandboxClient, type SandboxClient } from '@tangle-network/agent-runtime/loops'
+import { inProcessSandboxClient, type SandboxClient } from '@tangle-network/agent-runtime/kernel'
 import type { SandboxEvent } from '@tangle-network/sandbox'
 
 export const namespace = 'example-tenant'
diff --git a/examples/self-improving-coder/self-improving-coder.ts b/examples/self-improving-coder/self-improving-coder.ts
index d799cffc..4ab7b552 100644
--- a/examples/self-improving-coder/self-improving-coder.ts
+++ b/examples/self-improving-coder/self-improving-coder.ts
@@ -38,7 +38,7 @@ import {
   runStrategyEvolution,
   type SurfaceScore,
   sample,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 
 // ── The contamination-proof task generator (deterministic per seed) ──────────────
 /** A small wire-protocol library, fully specified by its tests, with seed-derived constants. The
@@ -281,7 +281,7 @@ async function main(): Promise<void> {
   const authorModel = process.env.AUTHOR_MODEL ?? 'gemini-2.5-pro'
 
   // The author writes candidate-strategy .mts files into outDir, then dynamically imports them — they
-  // `import '@tangle-network/agent-runtime/loops'`, which only resolves UNDER the package (self-reference).
+  // `import '@tangle-network/agent-runtime/kernel'`, which only resolves UNDER the package (self-reference).
   // A /tmp outDir would fail to resolve it; keep it under the project root.
   const report = await (async () => {
     const outDir = mkdtempSync(join(process.cwd(), '.sic-run-'))
diff --git a/examples/strategy-evolution/README.md b/examples/strategy-evolution/README.md
index f51c9dbe..9103d615 100644
--- a/examples/strategy-evolution/README.md
+++ b/examples/strategy-evolution/README.md
@@ -66,7 +66,7 @@ evidence is worse than no gate.
 
 ## Going further
 
-`StrategyEvolutionConfig` in `@tangle-network/agent-runtime/loops` exposes more knobs this
+`StrategyEvolutionConfig` in `@tangle-network/agent-runtime/kernel` exposes more knobs this
 example leaves at defaults, including `objective: 'cost'` (promote a candidate that ties the
 score but is *cheaper*), a reference screen that drops already-solved tasks before the
 finalists run, an overfitting check that re-implements the champion from a summary and
diff --git a/examples/strategy-evolution/strategy-evolution.ts b/examples/strategy-evolution/strategy-evolution.ts
index 04341360..8d7f42fa 100644
--- a/examples/strategy-evolution/strategy-evolution.ts
+++ b/examples/strategy-evolution/strategy-evolution.ts
@@ -24,7 +24,7 @@ import {
   refine,
   runStrategyEvolution,
   sample,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { counterEnv, counterTask } from '../strategy-suite/counter-env'
 
 // ── The domain ──────────────────────────────────────────────────────────────
diff --git a/examples/strategy-suite/counter-env.ts b/examples/strategy-suite/counter-env.ts
index 1d360417..ff166f0f 100644
--- a/examples/strategy-suite/counter-env.ts
+++ b/examples/strategy-suite/counter-env.ts
@@ -6,7 +6,7 @@
  * A real domain opens a repo / browser / MCP server the same way.
  */
 
-import type { AgenticTask, ArtifactHandle, Environment } from '@tangle-network/agent-runtime/loops'
+import type { AgenticTask, ArtifactHandle, Environment } from '@tangle-network/agent-runtime/kernel'
 
 export const target = 5
 const counters = new Map<string, { count: number }>()
diff --git a/examples/strategy-suite/strategy-suite.ts b/examples/strategy-suite/strategy-suite.ts
index 242cd73a..2be8576f 100644
--- a/examples/strategy-suite/strategy-suite.ts
+++ b/examples/strategy-suite/strategy-suite.ts
@@ -22,7 +22,7 @@ import {
   refine,
   runBenchmark,
   sample,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { counterEnv, counterTask, target } from './counter-env'
 
 // ── 1. The domain — the only thing a new domain writes ──────────────────────
diff --git a/examples/supervise/supervise.ts b/examples/supervise/supervise.ts
index efb4faf2..b0e7ebeb 100644
--- a/examples/supervise/supervise.ts
+++ b/examples/supervise/supervise.ts
@@ -8,7 +8,7 @@
  *
  * Run:  TANGLE_API_KEY=<router key>  pnpm tsx examples/supervise/supervise.ts
  */
-import { type ExecutorConfig, supervise } from '@tangle-network/agent-runtime/loops'
+import { type ExecutorConfig, supervise } from '@tangle-network/agent-runtime/kernel'
 
 async function main(): Promise<void> {
   const routerBaseUrl = process.env.TANGLE_ROUTER_URL ?? 'https://router.tangle.tools/v1'
diff --git a/examples/supervisor-loop/README.md b/examples/supervisor-loop/README.md
index 7d7c4ccb..260af480 100644
--- a/examples/supervisor-loop/README.md
+++ b/examples/supervisor-loop/README.md
@@ -33,7 +33,7 @@ For a $0, no-network wiring check (no agents, no key), two unit tests cover the
 spawn → wait → checked-settle loop:
 
 ```bash
-pnpm test tests/loops/coordination-driver.test.ts tests/supervisor-loop-example.test.ts
+pnpm test tests/kernel/coordination-driver.test.ts tests/supervisor-loop-example.test.ts
 ```
 
 ## Three runners
diff --git a/examples/supervisor-loop/run-supervisor-mcp.ts b/examples/supervisor-loop/run-supervisor-mcp.ts
index 2b34463a..54d3c5a1 100644
--- a/examples/supervisor-loop/run-supervisor-mcp.ts
+++ b/examples/supervisor-loop/run-supervisor-mcp.ts
@@ -39,7 +39,7 @@ import {
   type Scope,
   serveCoordinationMcp,
   workerFromBackend,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import { buildWorkerBackend, demoCheck, expectedAnswer } from './shared'
 
 /** The supervisor's standing instructions — it delegates, it does not solve. */
diff --git a/examples/supervisor-loop/run.ts b/examples/supervisor-loop/run.ts
index d9c15fbc..6b91cabf 100644
--- a/examples/supervisor-loop/run.ts
+++ b/examples/supervisor-loop/run.ts
@@ -19,9 +19,9 @@
  *
  * For the coordination-MCP variant (a supervisor driving workers via `spawn_agent` over a served MCP),
  * see run-supervisor-mcp.ts. For a fully offline, no-creds wiring check:
- *   pnpm test tests/loops/coordination-driver.test.ts tests/supervisor-loop-example.test.ts
+ *   pnpm test tests/kernel/coordination-driver.test.ts tests/supervisor-loop-example.test.ts
  */
-import { supervise } from '@tangle-network/agent-runtime/loops'
+import { supervise } from '@tangle-network/agent-runtime/kernel'
 import { buildWorkerBackend, demoCheck, demoGoal, resolveSupervisorBrain } from './shared'
 
 async function main(): Promise<void> {
diff --git a/examples/supervisor-loop/shared.ts b/examples/supervisor-loop/shared.ts
index 49cd7ecc..bc10d36c 100644
--- a/examples/supervisor-loop/shared.ts
+++ b/examples/supervisor-loop/shared.ts
@@ -3,7 +3,7 @@
  * completion check, and a SCRIPTED driver brain so the box / cli-bridge runners
  * exercise their wiring with no inference.
  *
- * The supervisor itself is `supervise()` (`@tangle-network/agent-runtime/loops`);
+ * The supervisor itself is `supervise()` (`@tangle-network/agent-runtime/kernel`);
  * these are only the per-example task + the offline brain it can be driven with.
  */
 
@@ -12,7 +12,7 @@ import {
   type SandboxClient as RuntimeSandboxClient,
   routerBrain,
   type ToolLoopChat,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import type { BackendType } from '@tangle-network/sandbox'
 import { Sandbox } from '@tangle-network/sandbox'
 
diff --git a/examples/ui-audit/ui-audit.ts b/examples/ui-audit/ui-audit.ts
index 52afa49e..5e6f61cc 100644
--- a/examples/ui-audit/ui-audit.ts
+++ b/examples/ui-audit/ui-audit.ts
@@ -19,8 +19,8 @@
 import { mkdtemp } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import path from 'node:path'
-import type { Driver } from '@tangle-network/agent-runtime/loops'
-import { runAgentRounds } from '@tangle-network/agent-runtime/loops'
+import type { Driver } from '@tangle-network/agent-runtime/kernel'
+import { runAgentRounds } from '@tangle-network/agent-runtime/kernel'
 import {
   appendFindings,
   createInProcessUiAuditClient,
diff --git a/examples/webcode-matrix/README.md b/examples/webcode-matrix/README.md
index a86d3826..0b13c833 100644
--- a/examples/webcode-matrix/README.md
+++ b/examples/webcode-matrix/README.md
@@ -33,7 +33,7 @@ tsx examples/webcode-matrix/webcode-matrix.ts
 
 Search is **router-backed** — the agent's `web_search` goes through the Tangle router on `TANGLE_API_KEY` (provider picked by `TANGLE_SEARCH_DEFAULT_PROVIDER`, default `exa`); no separate Exa key. `you`/`perplexity`/`tavily`/`parallel`/`brave` work the same way.
 
-Writes **`report.md` + `report.svg` + `report.html`** to `RUN_DIR` — a ranked leaderboard, the full profile×task score matrix, and embeddable charts. That rendering is the general [`leaderboard`](../../docs/canonical-api.md) engine (`@tangle-network/agent-runtime/loops`), which turns any `runProfileMatrix` result into the same report for **any** benchmark in any domain.
+Writes **`report.md` + `report.svg` + `report.html`** to `RUN_DIR` — a ranked leaderboard, the full profile×task score matrix, and embeddable charts. That rendering is the general [`leaderboard`](../../docs/canonical-api.md) engine (`@tangle-network/agent-runtime/kernel`), which turns any `runProfileMatrix` result into the same report for **any** benchmark in any domain.
 
 ## The pieces
 
diff --git a/examples/webcode-matrix/webcode-matrix.ts b/examples/webcode-matrix/webcode-matrix.ts
index a3d60862..60d57c72 100644
--- a/examples/webcode-matrix/webcode-matrix.ts
+++ b/examples/webcode-matrix/webcode-matrix.ts
@@ -34,7 +34,7 @@ import {
   renderPairwiseMarkdown,
   type SandboxClient,
   sumSandboxUsage,
-} from '@tangle-network/agent-runtime/loops'
+} from '@tangle-network/agent-runtime/kernel'
 import type { BackendType } from '@tangle-network/sandbox'
 import { loadWebCodeTasks, type WebCodeTask } from './webcode-dataset'
 
diff --git a/package.json b/package.json
index 225774fc..291235a8 100644
--- a/package.json
+++ b/package.json
@@ -39,10 +39,10 @@
       "import": "./dist/intelligence.js",
       "default": "./dist/intelligence.js"
     },
-    "./loops": {
-      "types": "./dist/loops.d.ts",
-      "import": "./dist/loops.js",
-      "default": "./dist/loops.js"
+    "./kernel": {
+      "types": "./dist/kernel.d.ts",
+      "import": "./dist/kernel.js",
+      "default": "./dist/kernel.js"
     },
     "./environment-provider": {
       "types": "./dist/environment-provider.d.ts",
diff --git a/scripts/check-docs-freshness.mjs b/scripts/check-docs-freshness.mjs
index 38181415..4c278846 100644
--- a/scripts/check-docs-freshness.mjs
+++ b/scripts/check-docs-freshness.mjs
@@ -460,11 +460,22 @@ const typedocPath = join(repoRoot, 'typedoc.json')
 if (existsSync(typedocPath)) {
   const typedoc = JSON.parse(readFileSync(typedocPath, 'utf8'))
   const entryPoints = new Set(typedoc.entryPoints || [])
-  // The ./loops subpath is an intentional alias of ./runtime (same source file) — the
-  // doc and MAINTAINING.md both state this — so it correctly has no second entry point.
-  const aliasSubpaths = new Set(['./loops'])
+  // Subpaths whose public name differs from their source path resolve through this curated
+  // map instead of the name-derived candidates below.
+  const curatedEntryPoints = { './kernel': 'src/runtime/index.ts' }
   for (const [subpath, target] of Object.entries(pkg.exports || {})) {
-    if (subpath === '.' || aliasSubpaths.has(subpath)) continue
+    if (subpath === '.') continue
+    const curated = curatedEntryPoints[subpath]
+    if (curated) {
+      if (!entryPoints.has(curated)) {
+        report(
+          'SETUP',
+          0,
+          `package.json exports "${subpath}" maps to "${curated}", which is not a typedoc.json entryPoint — the subpath generates no api page and its symbols are unguarded; add it to typedoc.json entryPoints`,
+        )
+      }
+      continue
+    }
     // Resolve the subpath's source root from its dist "import"/"types" target. tsdown
     // flattens a directory barrel (`src/runtime/index.ts`) to a flat bundle
     // (`dist/runtime.js`), so a subpath's source is EITHER `src/<name>.ts` OR
diff --git a/scripts/eval-attribution-margin.mjs b/scripts/eval-attribution-margin.mjs
index c860046a..a673b1eb 100644
--- a/scripts/eval-attribution-margin.mjs
+++ b/scripts/eval-attribution-margin.mjs
@@ -16,7 +16,7 @@
  *
  * Deterministic per seed (seeded RNG); reps over master seeds give variance.
  */
-import { attributeSteer } from '../dist/loops.js'
+import { attributeSteer } from '../dist/kernel.js'
 
 const SIGMA = Number(process.env.SIGMA ?? 0.1) // validator score noise (std dev)
 const POP = Number(process.env.POP ?? 400) // scenarios per population
diff --git a/scripts/gen-primitive-catalog.mjs b/scripts/gen-primitive-catalog.mjs
index e9d1beb5..a12298c7 100644
--- a/scripts/gen-primitive-catalog.mjs
+++ b/scripts/gen-primitive-catalog.mjs
@@ -66,7 +66,7 @@ const ownSurfaceLabels = {
   './conversation': 'Multi-turn conversations',
   './durable': 'Product chat turns — edge-safe streaming, persistence, and stable execution IDs',
   './intelligence': 'Intelligence SDK — Observe + provable-OFF billing',
-  './loops': 'Recursive atom + loop kernel (alias of ./runtime)',
+  './kernel': 'Execution kernel — recursive atom, supervision, executors, round-synchronous loop',
   './environment-provider': 'Environment provider adapters — generic sandbox/compute bridge',
   './analyst-loop': 'Analyst loop — trace findings on a running loop',
   './knowledge': 'Knowledge orchestration — supervised KB updates',
@@ -77,10 +77,6 @@ const ownSurfaceLabels = {
   './testing': 'Testing fixtures — validated Runtime wire records',
   './mcp': 'MCP servers — delegate / coordination / detached-session',
 }
-// ./loops is an intentional alias of ./runtime (same source) — list it once as ./loops,
-// since that is the public name the canonical doc and the codebase use.
-const ownSubpathAliases = new Set(['./runtime'])
-
 // SUBSTRATE surface (agent-eval): the curated category -> exports-map subpath map. These
 // are the reuse surfaces the canonical doc points agents at; the SYMBOLS under each are
 // generated, the category↔subpath mapping is the judgment.
@@ -215,7 +211,6 @@ function firstDocLine(checker, sym) {
 
 const ownModules = []
 for (const subpath of Object.keys(pkg.exports || {})) {
-  if (ownSubpathAliases.has(subpath)) continue
   const specifier = subpath === '.' ? pkg.name : `${pkg.name}/${subpath.replace(/^\.\//, '')}`
   ownModules.push({ specifier, label: ownSurfaceLabels[subpath], subpath })
 }
diff --git a/scripts/verify-package-exports.mjs b/scripts/verify-package-exports.mjs
index 398d600e..f9d0c5cb 100644
--- a/scripts/verify-package-exports.mjs
+++ b/scripts/verify-package-exports.mjs
@@ -42,7 +42,7 @@ try {
   const packageJson = JSON.parse(readFileSync(join(packageDir, 'package.json'), 'utf8'))
   assertPublishableDependencySpecs(packageJson)
   if (packageJson.peerDependenciesMeta?.['@tangle-network/agent-eval']?.optional) {
-    throw new Error('@tangle-network/agent-eval must stay required: root and ./loops import it at runtime')
+    throw new Error('@tangle-network/agent-eval must stay required: root and ./kernel import it at runtime')
   }
   const packageExports = packageJson.exports
   if (!packageExports || typeof packageExports !== 'object') {
@@ -54,7 +54,7 @@ try {
     './conversation',
     './durable',
     './intelligence',
-    './loops',
+    './kernel',
     './environment-provider',
     './analyst-loop',
     './knowledge',
diff --git a/src/index.ts b/src/index.ts
index ec0b029c..8ec394c6 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -193,6 +193,29 @@ export type { AgentBackendKind, ResolveAgentBackendOptions } from './resolve-age
 export { resolveAgentBackend } from './resolve-agent-backend'
 // ── Run loop ─────────────────────────────────────────────────────────
 export { applyRunRecordDefaults, runAgentTask, runAgentTaskStream } from './run'
+// ── Execution kernel ─────────────────────────────────────────────────
+// The organism-level execution surface — supervision, the open `Executor` port and its
+// registry, conserved budgets, the finalizer seam, analyst wiring, and the
+// round-synchronous loop — ships on `@tangle-network/agent-runtime/kernel`.
+// These are its headline types; import the values (`supervise`, `createExecutor`,
+// `createSupervisor`, `runAgentRounds`, the combinators) from that subpath.
+export type {
+  AgentSpec,
+  AnalystRegistry,
+  Budget,
+  CoordinationEvent,
+  Driver,
+  Executor,
+  ExecutorRegistry,
+  FinalizeContext,
+  LoopResult,
+  Scope,
+  Settled,
+  Spend,
+  SupervisedResult,
+  Supervisor,
+  SupervisorFinalizer,
+} from './runtime'
 // ── Runtime hooks ────────────────────────────────────────────────────
 export type {
   RuntimeDecisionEvidenceRef,
diff --git a/src/runtime/personify/types.ts b/src/runtime/personify/types.ts
index 6b1eccfa..73782231 100644
--- a/src/runtime/personify/types.ts
+++ b/src/runtime/personify/types.ts
@@ -2,7 +2,7 @@
  *
  * The personify layer — the "act like X" knob on top of the recursive keystone.
  *
- * The keystone (`src/loops/supervise/`) is pure STRUCTURE: a recursive `Agent` atom inside
+ * The keystone (`src/runtime/supervise/`) is pure STRUCTURE: a recursive `Agent` atom inside
  * a budget-conserving `Scope`, an `ExecutorRegistry` mapping an `AgentSpec` to a runtime,
  * and a `Supervisor` that runs a root agent to a typed `SupervisedResult`. It carries no
  * CONTENT — no model, no prompt, no goal framing, no notion of "who this loop is".
diff --git a/src/runtime/run-loop.ts b/src/runtime/run-loop.ts
index 9de866c7..799cca37 100644
--- a/src/runtime/run-loop.ts
+++ b/src/runtime/run-loop.ts
@@ -401,7 +401,7 @@ export async function runAgentRounds<Task, Output, Decision>(
  *
  * @deprecated Use {@link runAgentRounds}. The clearer name says what it is: the
  * multi-agent fanout/vote/refine kernel over sandboxes, NOT the one-turn tool loop
- * (`runToolLoop` / `streamToolLoop`, package root entry). `runLoop` shipped on `/loops`
+ * (`runToolLoop` / `streamToolLoop`, package root entry). `runLoop` shipped on `/kernel`
  * next to `routerToolLoop`, which made the two read as variants of one thing. The alias
  * is removed in the next major.
  */
diff --git a/src/runtime/strategy-author.ts b/src/runtime/strategy-author.ts
index 6bc10e4a..875a3e05 100644
--- a/src/runtime/strategy-author.ts
+++ b/src/runtime/strategy-author.ts
@@ -69,7 +69,7 @@ Rules:
   you reached (keep-best, never final-state), progression = score after each shot.
 - The module must be EXACTLY this shape (no other imports, no commentary outside code):
 
-import { defineStrategy } from '@tangle-network/agent-runtime/loops'
+import { defineStrategy } from '@tangle-network/agent-runtime/kernel'
 export default defineStrategy('your-strategy-name', async ({ surface, task, budget, shot, critique, listTools }) => {
   // your composition (listTools comes from the destructured context — it is NOT a global)
 })
@@ -104,7 +104,7 @@ export interface AuthorStrategyOptions {
 
 /** Static CONTRACT lint over an authored strategy module — the module-boundary
  *  enforcement of the harness's two measurement invariants:
- *    - author blindness: the only import allowed is the loops surface. A body that could
+ *    - author blindness: the only import allowed is the kernel surface. A body that could
  *      reach the filesystem, network, or process could read or mutate verifier/artifact
  *      state outside the brokered shots, and the harness-verified score would stop
  *      meaning "what the shots achieved".
@@ -114,7 +114,7 @@ export interface AuthorStrategyOptions {
  *  A lint, not a sandbox: its job is keeping the benchmark numbers interpretable. */
 export function assertStrategyContract(code: string): void {
   const allowedImport =
-    /^\s*import\s+\{[^}]*\}\s+from\s+['"]@tangle-network\/agent-runtime\/loops['"]/
+    /^\s*import\s+\{[^}]*\}\s+from\s+['"]@tangle-network\/agent-runtime\/kernel['"]/
   for (const line of code.split('\n')) {
     if (/^\s*import\s/.test(line) && !allowedImport.test(line)) {
       throw new Error(`authored code rejected: foreign import — ${line.trim().slice(0, 120)}`)
diff --git a/src/runtime/supervise/dispatch.ts b/src/runtime/supervise/dispatch.ts
index 736238d3..3e98d1c4 100644
--- a/src/runtime/supervise/dispatch.ts
+++ b/src/runtime/supervise/dispatch.ts
@@ -26,7 +26,7 @@
  *   2. `SandboxLineage`'s `maxConcurrency` / `DEFAULT_FORK_CONCURRENCY = 4`
  *      (`src/runtime/sandbox-lineage.ts`) — kernel level. How many BOXES one `runAgentRounds` fork wave
  *      provisions at once. It bounds a single leaf's fanout, not the supervisor's worker count.
- *   3. A host's own live-box governor (e.g. loops' `ComputeGovernor`, `maxSandboxes = 4`) — fleet
+ *   3. A host's own live-box governor (e.g. the kernel's `ComputeGovernor`, `maxSandboxes = 4`) — fleet
  *      level. How many sandboxes may exist across the whole host process.
  *
  * The honest effective limit on simultaneous WORKERS is the minimum of the caps that apply to the
diff --git a/tests/loops/anytime.test.ts b/tests/kernel/anytime.test.ts
similarity index 100%
rename from tests/loops/anytime.test.ts
rename to tests/kernel/anytime.test.ts
diff --git a/tests/loops/brain-loop-finalize.test.ts b/tests/kernel/brain-loop-finalize.test.ts
similarity index 100%
rename from tests/loops/brain-loop-finalize.test.ts
rename to tests/kernel/brain-loop-finalize.test.ts
diff --git a/tests/loops/checks.test.ts b/tests/kernel/checks.test.ts
similarity index 100%
rename from tests/loops/checks.test.ts
rename to tests/kernel/checks.test.ts
diff --git a/tests/loops/completion-gate.test.ts b/tests/kernel/completion-gate.test.ts
similarity index 100%
rename from tests/loops/completion-gate.test.ts
rename to tests/kernel/completion-gate.test.ts
diff --git a/tests/loops/completion.test.ts b/tests/kernel/completion.test.ts
similarity index 100%
rename from tests/loops/completion.test.ts
rename to tests/kernel/completion.test.ts
diff --git a/tests/loops/composition.test.ts b/tests/kernel/composition.test.ts
similarity index 100%
rename from tests/loops/composition.test.ts
rename to tests/kernel/composition.test.ts
diff --git a/tests/loops/coordination-driver.test.ts b/tests/kernel/coordination-driver.test.ts
similarity index 100%
rename from tests/loops/coordination-driver.test.ts
rename to tests/kernel/coordination-driver.test.ts
diff --git a/tests/loops/coordination-mcp.test.ts b/tests/kernel/coordination-mcp.test.ts
similarity index 100%
rename from tests/loops/coordination-mcp.test.ts
rename to tests/kernel/coordination-mcp.test.ts
diff --git a/tests/loops/coordination.test.ts b/tests/kernel/coordination.test.ts
similarity index 100%
rename from tests/loops/coordination.test.ts
rename to tests/kernel/coordination.test.ts
diff --git a/tests/loops/delegate.test.ts b/tests/kernel/delegate.test.ts
similarity index 100%
rename from tests/loops/delegate.test.ts
rename to tests/kernel/delegate.test.ts
diff --git a/tests/loops/deliverable-domain-free.test.ts b/tests/kernel/deliverable-domain-free.test.ts
similarity index 100%
rename from tests/loops/deliverable-domain-free.test.ts
rename to tests/kernel/deliverable-domain-free.test.ts
diff --git a/tests/loops/detector-monitor.test.ts b/tests/kernel/detector-monitor.test.ts
similarity index 100%
rename from tests/loops/detector-monitor.test.ts
rename to tests/kernel/detector-monitor.test.ts
diff --git a/tests/loops/driver-inference-metering.test.ts b/tests/kernel/driver-inference-metering.test.ts
similarity index 100%
rename from tests/loops/driver-inference-metering.test.ts
rename to tests/kernel/driver-inference-metering.test.ts
diff --git a/tests/loops/driver-recursion.test.ts b/tests/kernel/driver-recursion.test.ts
similarity index 100%
rename from tests/loops/driver-recursion.test.ts
rename to tests/kernel/driver-recursion.test.ts
diff --git a/tests/loops/event-bus.test.ts b/tests/kernel/event-bus.test.ts
similarity index 100%
rename from tests/loops/event-bus.test.ts
rename to tests/kernel/event-bus.test.ts
diff --git a/tests/loops/inbox.test.ts b/tests/kernel/inbox.test.ts
similarity index 100%
rename from tests/loops/inbox.test.ts
rename to tests/kernel/inbox.test.ts
diff --git a/tests/loops/loop-dispatch.test.ts b/tests/kernel/loop-dispatch.test.ts
similarity index 100%
rename from tests/loops/loop-dispatch.test.ts
rename to tests/kernel/loop-dispatch.test.ts
diff --git a/tests/loops/patch-deliverable.test.ts b/tests/kernel/patch-deliverable.test.ts
similarity index 100%
rename from tests/loops/patch-deliverable.test.ts
rename to tests/kernel/patch-deliverable.test.ts
diff --git a/tests/loops/personify.test.ts b/tests/kernel/personify.test.ts
similarity index 100%
rename from tests/loops/personify.test.ts
rename to tests/kernel/personify.test.ts
diff --git a/tests/loops/profile-richness.test.ts b/tests/kernel/profile-richness.test.ts
similarity index 100%
rename from tests/loops/profile-richness.test.ts
rename to tests/kernel/profile-richness.test.ts
diff --git a/tests/loops/refine-driver.ts b/tests/kernel/refine-driver.ts
similarity index 100%
rename from tests/loops/refine-driver.ts
rename to tests/kernel/refine-driver.ts
diff --git a/tests/loops/router-brain.test.ts b/tests/kernel/router-brain.test.ts
similarity index 100%
rename from tests/loops/router-brain.test.ts
rename to tests/kernel/router-brain.test.ts
diff --git a/tests/loops/rsi-wave.test.ts b/tests/kernel/rsi-wave.test.ts
similarity index 100%
rename from tests/loops/rsi-wave.test.ts
rename to tests/kernel/rsi-wave.test.ts
diff --git a/tests/loops/run-loop-harden.test.ts b/tests/kernel/run-loop-harden.test.ts
similarity index 100%
rename from tests/loops/run-loop-harden.test.ts
rename to tests/kernel/run-loop-harden.test.ts
diff --git a/tests/loops/sandbox-acquire.test.ts b/tests/kernel/sandbox-acquire.test.ts
similarity index 100%
rename from tests/loops/sandbox-acquire.test.ts
rename to tests/kernel/sandbox-acquire.test.ts
diff --git a/tests/loops/sandbox-events.test.ts b/tests/kernel/sandbox-events.test.ts
similarity index 100%
rename from tests/loops/sandbox-events.test.ts
rename to tests/kernel/sandbox-events.test.ts
diff --git a/tests/loops/sandbox-lineage.test.ts b/tests/kernel/sandbox-lineage.test.ts
similarity index 100%
rename from tests/loops/sandbox-lineage.test.ts
rename to tests/kernel/sandbox-lineage.test.ts
diff --git a/tests/loops/scripted-brain.ts b/tests/kernel/scripted-brain.ts
similarity index 100%
rename from tests/loops/scripted-brain.ts
rename to tests/kernel/scripted-brain.ts
diff --git a/tests/loops/strategy-evolution.test.ts b/tests/kernel/strategy-evolution.test.ts
similarity index 99%
rename from tests/loops/strategy-evolution.test.ts
rename to tests/kernel/strategy-evolution.test.ts
index 8e9a0547..0e419511 100644
--- a/tests/loops/strategy-evolution.test.ts
+++ b/tests/kernel/strategy-evolution.test.ts
@@ -48,7 +48,7 @@ function shotCountingSurface(): AgenticSurface {
   }
 }
 
-const twoShotDepthModule = `import { defineStrategy } from '@tangle-network/agent-runtime/loops'
+const twoShotDepthModule = `import { defineStrategy } from '@tangle-network/agent-runtime/kernel'
 export default defineStrategy('two-shot-depth', async ({ surface, task, shot }) => {
   const handle = await surface.open(task)
   const progression: number[] = []
@@ -65,7 +65,7 @@ export default defineStrategy('two-shot-depth', async ({ surface, task, shot })
   return { score, resolved: score >= 1, completions, progression, shots: progression.length }
 })`
 
-const oneShotModule = `import { defineStrategy } from '@tangle-network/agent-runtime/loops'
+const oneShotModule = `import { defineStrategy } from '@tangle-network/agent-runtime/kernel'
 export default defineStrategy('one-shot', async ({ shot }) => {
   const out = await shot()
   return { score: out?.score ?? 0, resolved: false, completions: out?.completions ?? 0, progression: [out?.score ?? 0], shots: 1 }
diff --git a/tests/loops/strategy-suite.test.ts b/tests/kernel/strategy-suite.test.ts
similarity index 99%
rename from tests/loops/strategy-suite.test.ts
rename to tests/kernel/strategy-suite.test.ts
index b4e05ade..0288a7f3 100644
--- a/tests/loops/strategy-suite.test.ts
+++ b/tests/kernel/strategy-suite.test.ts
@@ -294,7 +294,7 @@ describe('strategy surface close', () => {
 // ── The authored-module contract lint ─────────────────────────────────────────────
 
 describe('assertStrategyContract', () => {
-  const clean = `import { defineStrategy } from '@tangle-network/agent-runtime/loops'
+  const clean = `import { defineStrategy } from '@tangle-network/agent-runtime/kernel'
 export default defineStrategy('ok', async ({ shot }) => {
   const out = await shot()
   return { score: out?.score ?? 0, resolved: false, completions: 1, progression: [], shots: 1 }
diff --git a/tests/loops/supervise-convenience.test.ts b/tests/kernel/supervise-convenience.test.ts
similarity index 100%
rename from tests/loops/supervise-convenience.test.ts
rename to tests/kernel/supervise-convenience.test.ts
diff --git a/tests/loops/supervise.test.ts b/tests/kernel/supervise.test.ts
similarity index 100%
rename from tests/loops/supervise.test.ts
rename to tests/kernel/supervise.test.ts
diff --git a/tests/loops/supervisor-agent.test.ts b/tests/kernel/supervisor-agent.test.ts
similarity index 100%
rename from tests/loops/supervisor-agent.test.ts
rename to tests/kernel/supervisor-agent.test.ts
diff --git a/tests/loops/supervisor-authoring.test.ts b/tests/kernel/supervisor-authoring.test.ts
similarity index 100%
rename from tests/loops/supervisor-authoring.test.ts
rename to tests/kernel/supervisor-authoring.test.ts
diff --git a/tests/loops/tool-loop-compaction.test.ts b/tests/kernel/tool-loop-compaction.test.ts
similarity index 100%
rename from tests/loops/tool-loop-compaction.test.ts
rename to tests/kernel/tool-loop-compaction.test.ts
diff --git a/tests/loops/trace-source.test.ts b/tests/kernel/trace-source.test.ts
similarity index 100%
rename from tests/loops/trace-source.test.ts
rename to tests/kernel/trace-source.test.ts
diff --git a/tests/loops/trajectory-recorder.test.ts b/tests/kernel/trajectory-recorder.test.ts
similarity index 100%
rename from tests/loops/trajectory-recorder.test.ts
rename to tests/kernel/trajectory-recorder.test.ts
diff --git a/tests/loops/validator-tracing.test.ts b/tests/kernel/validator-tracing.test.ts
similarity index 100%
rename from tests/loops/validator-tracing.test.ts
rename to tests/kernel/validator-tracing.test.ts
diff --git a/tests/loops/waterfall.test.ts b/tests/kernel/waterfall.test.ts
similarity index 100%
rename from tests/loops/waterfall.test.ts
rename to tests/kernel/waterfall.test.ts
diff --git a/tests/loops/workspace.test.ts b/tests/kernel/workspace.test.ts
similarity index 100%
rename from tests/loops/workspace.test.ts
rename to tests/kernel/workspace.test.ts
diff --git a/tests/loops/worktree-loop.test.ts b/tests/kernel/worktree-loop.test.ts
similarity index 100%
rename from tests/loops/worktree-loop.test.ts
rename to tests/kernel/worktree-loop.test.ts
diff --git a/tests/runtime/stop-rules.test.ts b/tests/runtime/stop-rules.test.ts
index fb49056a..0263fe50 100644
--- a/tests/runtime/stop-rules.test.ts
+++ b/tests/runtime/stop-rules.test.ts
@@ -41,7 +41,7 @@ import type {
   Scope,
   UsageEvent,
 } from '../../src/runtime/supervise/types'
-import { scriptedBrain } from '../loops/scripted-brain'
+import { scriptedBrain } from '../kernel/scripted-brain'
 
 // ── A scored offline leaf: fixed token cost, a verdict score the rules read ─────────────────────
 
diff --git a/tests/runtime/supervisor-finalizer.test.ts b/tests/runtime/supervisor-finalizer.test.ts
index ae00f126..4f4506e1 100644
--- a/tests/runtime/supervisor-finalizer.test.ts
+++ b/tests/runtime/supervisor-finalizer.test.ts
@@ -33,7 +33,7 @@ import type {
   TreeView,
   UsageEvent,
 } from '../../src/runtime/supervise/types'
-import { scriptedBrain } from '../loops/scripted-brain'
+import { scriptedBrain } from '../kernel/scripted-brain'
 
 const budget: Budget = { maxIterations: 100, maxTokens: 100_000 }
 
diff --git a/tsconfig.examples.json b/tsconfig.examples.json
index 5e7b1517..dfd3c252 100644
--- a/tsconfig.examples.json
+++ b/tsconfig.examples.json
@@ -7,7 +7,7 @@
       "@tangle-network/agent-runtime": ["./src/index.ts"],
       "@tangle-network/agent-runtime/agent": ["./src/agent/index.ts"],
       "@tangle-network/agent-runtime/intelligence": ["./src/intelligence/index.ts"],
-      "@tangle-network/agent-runtime/loops": ["./src/runtime/index.ts"],
+      "@tangle-network/agent-runtime/kernel": ["./src/runtime/index.ts"],
       "@tangle-network/agent-runtime/environment-provider": [
         "./src/runtime/environment-provider.ts"
       ],
diff --git a/tsdown.config.ts b/tsdown.config.ts
index 5442d809..adbbc2d8 100644
--- a/tsdown.config.ts
+++ b/tsdown.config.ts
@@ -7,7 +7,7 @@ export default defineConfig({
     conversation: 'src/conversation/index.ts',
     durable: 'src/durable/index.ts',
     intelligence: 'src/intelligence/index.ts',
-    loops: 'src/runtime/index.ts',
+    kernel: 'src/runtime/index.ts',
     'environment-provider': 'src/runtime/environment-provider.ts',
     'analyst-loop': 'src/analyst-loop/index.ts',
     knowledge: 'src/knowledge/index.ts',
diff --git a/vitest.config.ts b/vitest.config.ts
index 883c24d3..4602714a 100644
--- a/vitest.config.ts
+++ b/vitest.config.ts
@@ -9,7 +9,7 @@ export default defineConfig({
         replacement: resolve(__dirname, 'src/index.ts'),
       },
       {
-        find: /^@tangle-network\/agent-runtime\/loops$/,
+        find: /^@tangle-network\/agent-runtime\/kernel$/,
         replacement: resolve(__dirname, 'src/runtime/index.ts'),
       },
       {