Cross-layer contract polish: durable sandbox leases, HITL fail-closed state,
reserved tools, structured correction tools-off, shared usage snapshots.