Required, bounded in-memory owner for sensitive developer inspection records.

Capture is host-enabled, fail-closed, and V8-only. The closed vocabulary contains capability input/exception/output, subordinate evaluation source and static prelude-call analysis, effective prelude source, correlated exact MCP request/response bodies, workflow execution prints/errors, one dedicated explicit-failure-value record, plus at most one strictly JSON terminal result bound to its deterministic canonical hash. Mission-owned source, analysis, capability, prelude, and MCP records require mission_name; workflow-owned records forbid it. Other record types normalize atom keys and enum values to JSON strings; the terminal result must already be strict JSON. The sink assigns the run identity, sequence, and UTC timestamp, and rejects a record before retention when either its retained or encoded size exceeds the installed bounds.

This sink is independent of Logger, Telemetry, EventSink policy, manifests, and Lisp. Records remain private until the host explicitly persists them as a 0600 .inspection.jsonl artifact.