Idempotency-key dedup store for the BATCH consumer (Section 23 BATCH)

Minimal runtime imported by generated harness bundles

Per-tenant hash-chained JSONL audit trail for the managed-daemon target

v0.3.0 memory-release eval layer (§7.3) — deterministic continuity graders computed from a sample's session artifacts: re-ask rate, REQ retention, proof honesty (claimed vs proven), pickup success, cost per proven outcome

DSPy-style automated prompt tuning. Search over candidate prompt mutations using eval-runner as the fitness function.

Built-in filesystem tools (Read, Write, Edit, Glob, Grep) sandboxed to process.cwd()

Plugin SDK v2 — public typed surface for third-party tools / channels / models / graders / target backends, with manifest validation and Ed25519 signature verification (Section 41)

Bun.serve daemon — spec CRUD, run inspection (SSE), eval-result inspection, plugin discovery (Section 26 Studio)

Retrieve(query, k?, filter?) tool — composes embedder + vector-store

Pluggable dedup + budget stores (audit follow-up R3) — in-memory defaults, bun:sqlite cross-process backend

Pillar-2 patch infrastructure — apply a SpecPatch to a YAML source preserving comments and key order via the yaml CST. Drives the active eval optimizer's spec-level mutation loop.

Role-based dispatcher for the CRW shape — runs runChatLoop per role, threads handoffs + A2A messages (Section 22)

Track G / §58 — two-pass contract compilation (completeness + scope/ambiguity). Source: Meta-Engineering Harnesses (arxiv 2605.25665, §4.2).

Plugin discovery + version pinning + signature verification + capability declaration (Section 42)

Backend-agnostic spec-template registry: git/huggingface/npm/local backends + TTL cache + sigstore-style signature verification (Section 40)

Diff-based pass/fail flip detection between two eval-runner outputs

IR version migrations: register up/down chains; migrate(spec, fromVersion, toVersion) walks the chain

Handoff(targetRole, reason, context?) tool — explicit baton-pass between roles in a crew (Section 22)

Track G / §58 — file-backed registry of domain specializations (payments, booking, auth) that inject invariants into contract compilation. Source: Meta-Engineering Harnesses (arxiv 2605.25665, §4.4).

Pattern matchers for permission rules (Bash(git *), Read, Write(**/src/**))