Small bounded navigation API over one immutable run-evidence capture.

The prompt-facing contract has three operations: runs discovers runs, open returns singular metadata and a collection catalog, and read delegates one bounded collection page to its trace or private-inspection snapshot owner. Collection names, filters, authority, and order come from one closed registry. No operation diagnoses evidence or aggregates primitive pages before returning to Lisp.

Public captures expose only canonical activity. Private captures add exact exchanges, reconstructed turns, generated source with static prelude-call facts, effective prelude source, and workflow execution diagnostics. The catalog identifies snapshot and sequence domains, identifier locations, and raw collections whose items carry an explicit completeness field. Private error and source items carry typed relationships that package exact follow-up reads without performing them or diagnosing their evidence.