Return active worker, safety limits, registered repositories, and paths.

Run one complete implementation task with bounded files and commands.

The repository must be registered first. Scope contains the only paths the worker may read or edit. Commands are supervisor-authored argv arrays invoked by ID without a shell, but inherit host permissions and network. Set the risk acknowledgement explicitly whenever commands are present. Required command IDs must all exit zero before the worker can return success.

List compact receipts for recent tasks without loading raw logs or diffs.

Return one compact task receipt by ID.