Runtime Notes

agent-mgr owns session creation and trace emission.
agent-worker owns worker session execution and cleanup.
Each agent session gets its own workspace volume identity.
Evidence records must expose projectId, operationId, kind, uri, sha256, serviceId, environment, and createdAt.
Skills deployment artifacts require an explicit commitId.