Frozen authority for confined subordinate programs.
A mission environment contains only its optional bundle, explicitly granted capabilities, and JSON-like mission data. Subordinate evaluation is built exclusively from this struct and committed evaluation memory/history; it never inherits or falls back to the workflow environment.
Workflow-only reserved routes such as subordinate evaluation and annotation are absent. Construction validates the bundle attestation, capability names, data, and recorded tool requirements before execution begins.
Summary
Types
@type t() :: %PtcRunner.Kernel.MissionEnvironment{ bundle: PtcRunner.Kernel.FrozenBundle.t() | nil, capabilities: %{required(binary()) => PtcRunner.Kernel.Capability.t()}, data: map() }