Agent identity binding, fail-closed evaluation gates, durable failure evidence, skill role consistency, and bounded runtime handling. Qualified through package CI, protected exact-wheel lifecycle proof, and the agentmanagementdbt adopter with both native evaluation suites passing unchanged baselines. PyPI publication is gated by a fresh protected release-wheel proof.