Virtualized shell-environment abstraction: IO sinks, env, sandbox, network policy, process table — host-system passthrough by default, embedder-overridable per Task. The contract that lets in-process bash interpreters and CLI tool packages compose. - View it on GitHub