Isolate changes, isolate compute, then review trust

durable project command, actor, lifecycle, policy, and idempotency

one agent's branch and change ownership; useful isolation, not security

independent sanitized compute with bounded credentials, network, and resources

verify the result manifest before changes enter developer-owned state