Capability-bounded code,
mid-conversation.

A hosted runner for q64 qubes. Agents author tools as wasm; the host grants only the capabilities the manifest declares.