Model-visible Tool for one-shot commands in a bounded virtual overlay.
The operator supplies the imported read set and limits through Turn context. Model
arguments contain commands and an optional boolean deliverable. Commands within
one invocation share virtual edits; the next invocation reimports host files.
Canonical Logs/artifacts still persist on disk, but no Session scratch is retained.
No host binaries, network, parent workspace mutation, or automatic apply is available.
Delivery intent is canonical result metadata outside the unchanged v1 artifact.