The runtime, not the model, owns routing, tool policy, verification, and completion. Local-first CLI agent built in Rust.
Model answers are candidates, not completions. The runtime classifies intent, builds execution strategy, enforces tool policy, runs verification, and adjudicates completion through a 5-gate lattice.
PostgreSQL 18 + pgvector unifies control-plane, retrieval, and conversation memory in one operational backend.
| Strategy | Tool Classes | Completion Contract |
|---|---|---|
| Task | read+search+write+shell+delegate | citation≥1, no broad claim |
| Survey | read+search+delegate | citation≥3, no broad claim |
| Review | read+search only | citation≥2, no broad claim |
| Delegate | read+search+delegate | citation≥1 |
| Conversation | none | permissive |