Read-only reconciliation of run, lease, containment, journal, and progress facts.
Agent-controlled runs expose their authenticated nonterminal cursor under
agent_control.progress. Retained progress from an earlier iteration is
marked stale; records from another run or prompt are ignored.