One loop.
Explicit effects.

Shipped · runs today

• ShippedOpenAI ResponsesThe binary reads a real file through a real tool call over the Responses wire.
• ShippedAnthropic MessagesThe binary drives the Messages wire and calls a real tool through it.
• ShippedProvider presetsA short model name resolves to the exact identifier this build pins.
• ShippedCredentials the operator namesNaming your own credential turns the preset's token renewal off, so no file is rewritten that the operator did not offer.
• ShippedSecrets store only on requestA run or server without the secrets flag never dials the session bus.
• ShippedTurn ceilingA turn ceiling stops the loop, and the stop names the ceiling.
• ShippedSpend ceilingA spend ceiling on a run that cannot price its model is refused before the first request.
• ShippedUnpriced is not freeA model the rate card does not price has no cost rather than a zero one.
• ShippedUnreported usageUsage a provider did not report stays unknown rather than becoming zero.
• ShippedCompactionA declared context window compacts on the token count the provider reported.
• ShippedCancellationCancellation between tool calls stops the run before the next effect.
• ShippedStructured outputA run asked for a schema that answers in prose stops without an answer.
• ShippedDeny by defaultA run entry built from the process adapter is refused under the default approver.
• ShippedNo silent approvalA write is refused when the run has nobody it may ask.
• ShippedApproval ceilingRaising the unattended ceiling lets a write through, on either wire.
• ShippedWrite scopeA path the write scope denies is refused for both writers, and the refusal says the scope is what is wrong.
• ShippedWithheld tools are reportedA declared program with no confinement is reported as withheld rather than dropped.
• ShippedVerb surfaceThe verbs surface publishes three tools over the same catalogue.
• ShippedOutbound MCPAn MCP server named in a reviewed profile runs end to end over stdio.
• ShippedToolset descriptionThe tools command describes the toolset without an endpoint.
• ShippedProfilesEvery profile that contributed to a run is in its record with its own digest.
• ShippedDefault write scopeThe default write scope denies the repository's own Git directory.
• ShippedDeclared context filesA declared context file that is absent refuses the run before any session is filed.
• ShippedResumeA run files its conversation, and a later run resumes it.
• ShippedSessions stay outside the workspaceA session directory inside the workspace is refused before it is created.
• ShippedJSON eventsJSON mode emits one event per line.
• ShippedDelegationA delegate runs a whole second loop, and the parent reads only its report.
• ShippedConcurrent delegatesTwo delegates of one turn run at the same time.
• ShippedNamed agentsA named agent cannot widen what the parent run was admitted.
• ShippedSkillsSkill descriptions are in the instruction, and their bodies are not until the model asks.
• ShippedRead-only memoriesrecall answers a memory's body, and the record names every memory whatever its status.
• ShippedStop hooksA stop hook blocks one ending, and the run turns again before it finishes.
• ShippedHook pointsA hook file naming a point that does not exist is refused by name.
• ShippedTool calls round tripA tool call round trips back to the client that registered the tool.
• ShippedPinned method inventoryThe client methods served and refused match the pinned profile manifest.