Adds provider-neutral workload contracts, strict capability negotiation, portable receipts, ownership-bound recovery, compact agent summaries, and digest-pinned E2B, Vercel Sandbox, and Daytona adapters.
Docker and Podman remain the stable execution contract. Portable contracts and remote adapters remain alpha and require live certification before production promotion.