runId. Enforces the Execution Contract, approve/pause/cancel, deadline and approval-window alarms, hashed run.json on R2. No model calls in this slice. No HTMX, no CLI sockets./templates/hostile-mirror. Four ledgers (Said / Said-then / Seen / Proven). Not listed on / until an approved first-party ledger exists. Fix packs stay drafts./templates/adversarial-twin. Not listed on / until an approved Birth ledger exists. No impersonation, no posting as the Twin./templates/promise-ledger. Not listed on / until an approved first-party checkpoint exists (census, fail-closed, no notify)./templates/surface-ledger. Read-only collection; Slack waits on a human gate. $2 cap./templates/glass-box. Publish stays gated. $2 sandbox cap././sample. Read-only; it never writes the operator vault. /demo points at the same run.