# PtcRunner v0.14.0 - Table of Contents

> BEAM-native sandbox and minimal Kernel for bounded PTC-Lisp workflows.

## Pages

- [PtcRunner](readme.md)
- [LICENSE](license.md)
- [PTC-Lisp Function Reference](function-reference.md)

- Start
  - [Quickstart](quickstart.md)
  - [Understand a generated project](getting-started.md)
  - [PtcRunner concepts](concepts.md)
  - [Drive ptc as an agent](agent-cli-usage.md)

- Language
  - [Read and write PTC-Lisp](ptc-lisp-basics.md)

- Configure
  - [Keep a runnable project together](project-configuration.md)
  - [Configure an application](manifests-and-capabilities.md)
  - [Install models and tools](host-configuration.md)

- Build
  - [Use a model](using-models.md)
  - [Connect an MCP tool](connecting-tools-with-mcp.md)
  - [Customize an agent](building-agents.md)
  - [Customize agent components](components-and-preludes.md)

- Design
  - [Design an agent workflow](designing-agent-workflows.md)
  - [Choose a workflow shape](agent-workflow-patterns.md)

- Run and debug
  - [Run and inspect a project](running-and-debugging.md)
  - [Explore a project interactively](kernel-repl.md)
  - [Debug a failed run](debugging-a-failed-run.md)
  - [Evaluate changes with replay](evaluating-with-replay.md)

- Installation
  - [Standalone installation](standalone.md)
  - [Docker installation](docker.md)
  - [Source installation](source.md)

- Reference
  - [PTC-Lisp Language Specification](ptc-lisp-specification.md)
  - [Agent library reference](agent-library-reference.md)
  - [Clojure Conformance Gaps](clojure-conformance-gaps.md)
  - [Java Interop Reference for PTC-Lisp](java-interop.md)
  - [Kernel limits reference](kernel-limits-reference.md)
  - [Shipped prelude reference](prelude-reference.md)
  - [Signature reference](signature-syntax.md)
  - [Application-manifest reference](application-manifest.md)
  - [Host-configuration reference](host-installation.md)
  - [Project-configuration reference](project-files.md)
  - [Components-and-preludes reference](component-contracts.md)
  - [MCP reference](mcp.md)
  - [Command-line reference](cli.md)
  - [REPL reference](repl.md)
  - [Debug-navigation reference](debug-navigation.md)

- Conformance
  - [PTC-Lisp Namespace Coverage](index.md)
  - [Clojure Core Audit for PTC-Lisp](clojure-core-audit.md)
  - [Clojure Set Audit for PTC-Lisp](clojure-set-audit.md)
  - [Clojure String Audit for PTC-Lisp](clojure-string-audit.md)
  - [Clojure Walk Audit for PTC-Lisp](clojure-walk-audit.md)
  - [Java Boolean Audit for PTC-Lisp](java-lang-boolean-audit.md)
  - [Java Double Audit for PTC-Lisp](java-lang-double-audit.md)
  - [Java Float Audit for PTC-Lisp](java-lang-float-audit.md)
  - [Java Integer Audit for PTC-Lisp](java-lang-integer-audit.md)
  - [Java Long Audit for PTC-Lisp](java-lang-long-audit.md)
  - [Java String Audit for PTC-Lisp](java-lang-string-audit.md)
  - [Java System Audit for PTC-Lisp](java-lang-system-audit.md)
  - [Java Math Audit for PTC-Lisp](java-math-audit.md)
  - [Java Duration Audit for PTC-Lisp](java-time-duration-audit.md)
  - [Java Instant Audit for PTC-Lisp](java-time-instant-audit.md)
  - [Java LocalDate Audit for PTC-Lisp](java-time-local-date-audit.md)
  - [Java Period Audit for PTC-Lisp](java-time-period-audit.md)
  - [Java Date Audit for PTC-Lisp](java-util-date-audit.md)

- Maintainers
  - [Embedding PtcRunner in Elixir](embedding.md)
  - [Coding agent review workflow](coding-agent-review.md)
  - [Duplication gate](duplication-gate.md)
  - [Guide budget](guide-budget.md)
  - [Documentation guidelines](documentation.md)
  - [Signature Syntax](signature-integration.md)
  - [Kernel maintainer guide](kernel.md)
  - [TraceLog and run-analysis reference](trace-log-contract.md)

## Modules

- [PtcRunner](PtcRunner.md): BEAM-native runtime for bounded PTC-Lisp workflows.
- [PtcRunner.Dotenv](PtcRunner.Dotenv.md): Loads environment variables from an explicitly named dotenv file.
- [PtcRunner.Kernel.AnalysisProfile](PtcRunner.Kernel.AnalysisProfile.md): Shared assembler and attestation recipe for code-owned analysis profiles.
- [PtcRunner.Kernel.AnalysisProfileRegistry](PtcRunner.Kernel.AnalysisProfileRegistry.md): Closed registry of code-owned analysis-session authority recipes.
- [PtcRunner.Kernel.AnalysisSession](PtcRunner.Kernel.AnalysisSession.md): Owner of one bounded code-owned analysis mission continuation.
- [PtcRunner.Kernel.AnalysisSessionBuilder](PtcRunner.Kernel.AnalysisSessionBuilder.md): Host boundary for closed local analysis profiles.
- [PtcRunner.Kernel.BoundedPrints](PtcRunner.Kernel.BoundedPrints.md): Shared bound for projecting a raw `println` list into a caller-facing form.
- [PtcRunner.Kernel.CandidateArtifact](PtcRunner.Kernel.CandidateArtifact.md): Publishes one model-authored candidate as `{candidate.clj, descriptor.json}`.
- [PtcRunner.Kernel.CandidatePromotion](PtcRunner.Kernel.CandidatePromotion.md): Decides whether a verified candidate is fit to be promoted by a human.
- [PtcRunner.Kernel.CommandArguments](PtcRunner.Kernel.CommandArguments.md): Parsed standalone command arguments.
- [PtcRunner.Kernel.CommandContract](PtcRunner.Kernel.CommandContract.md): Generated-in-source JSON Schema for the V3 command envelope.
- [PtcRunner.Kernel.CommandContractAuthority](PtcRunner.Kernel.CommandContractAuthority.md): Sealed behavior and path scope for a classified contract failure.
- [PtcRunner.Kernel.CommandDeclaration](PtcRunner.Kernel.CommandDeclaration.md): Closed per-command grammar and help declarations.
- [PtcRunner.Kernel.CommandDiagnostic](PtcRunner.Kernel.CommandDiagnostic.md): Closed privacy-safe command diagnostic.
- [PtcRunner.Kernel.CommandEngine](PtcRunner.Kernel.CommandEngine.md): Shared command parser and dispatch router.
- [PtcRunner.Kernel.CommandEntry](PtcRunner.Kernel.CommandEntry.md): Closed result of the frontend-owned command entry step.
- [PtcRunner.Kernel.CommandInitializer](PtcRunner.Kernel.CommandInitializer.md): Bounded, no-replace publication of the stable application scaffold, or of one
embedded example tree.
- [PtcRunner.Kernel.CommandOutcome](PtcRunner.Kernel.CommandOutcome.md): Sealed command result returned to frontends.
- [PtcRunner.Kernel.CommandParser](PtcRunner.Kernel.CommandParser.md): Shared strict parser for the stable standalone argv contract.
- [PtcRunner.Kernel.CommandPath](PtcRunner.Kernel.CommandPath.md): Schema-authorized diagnostic path.
- [PtcRunner.Kernel.CommandPreparation](PtcRunner.Kernel.CommandPreparation.md): Sealed continuation state for a prepared `validate` or `run` command.
- [PtcRunner.Kernel.CommandRejection](PtcRunner.Kernel.CommandRejection.md): Closed phase-1 parser rejection.
- [PtcRunner.Kernel.CommandRenderer](PtcRunner.Kernel.CommandRenderer.md): Deterministic, privacy-preserving human projection of sealed command outcomes.
- [PtcRunner.Kernel.CommandRunRef](PtcRunner.Kernel.CommandRunRef.md): Generates the fixed V1 command reference from 128 bits of entropy.
- [PtcRunner.Kernel.CommandRuntime](PtcRunner.Kernel.CommandRuntime.md): Sealed frontend-owned choices for shared command dispatch.
- [PtcRunner.Kernel.CommandSource](PtcRunner.Kernel.CommandSource.md): Closed, path-free provenance for command diagnostics.
- [PtcRunner.Kernel.CommandSubject](PtcRunner.Kernel.CommandSubject.md): Closed provider locator used by command diagnostics.
- [PtcRunner.Kernel.CompileDiagnostic](PtcRunner.Kernel.CompileDiagnostic.md): Closed projection policy for structured bundle-derived diagnostic messages.
- [PtcRunner.Kernel.ComponentOverride](PtcRunner.Kernel.ComponentOverride.md): Replaces one already-selected component with trusted candidate source.
- [PtcRunner.Kernel.ComponentOverrideDiagnostic](PtcRunner.Kernel.ComponentOverrideDiagnostic.md): Closed messages for a refused component-override descriptor.
- [PtcRunner.Kernel.ConfinedFile](PtcRunner.Kernel.ConfinedFile.md): Reads one bounded UTF-8 file from a trusted root.
- [PtcRunner.Kernel.ContractSchemaDiagnostic](PtcRunner.Kernel.ContractSchemaDiagnostic.md): Closed projection policy for rejected value-contract schema documents.
- [PtcRunner.Kernel.Deadline](PtcRunner.Kernel.Deadline.md): Absolute monotonic deadline shared by bounded Kernel operations.
- [PtcRunner.Kernel.DiagnosticCatalog](PtcRunner.Kernel.DiagnosticCatalog.md): Authoritative closed V1 command diagnostic catalog.
- [PtcRunner.Kernel.DocumentationLibrary](PtcRunner.Kernel.DocumentationLibrary.md): Documentation pages embedded at compile time and served by `ptc docs`.
- [PtcRunner.Kernel.EffectiveApplication](PtcRunner.Kernel.EffectiveApplication.md): Exact behavior identity for one fully normalized application declaration.
- [PtcRunner.Kernel.EvaluationObservation](PtcRunner.Kernel.EvaluationObservation.md): Builds bounded, non-authoritative observations for an agent turn.
- [PtcRunner.Kernel.ExampleLibrary](PtcRunner.Kernel.ExampleLibrary.md): Runnable example projects embedded at compile time and materialized by
`ptc init DIRECTORY --example NAME`.
- [PtcRunner.Kernel.HostConfig](PtcRunner.Kernel.HostConfig.md): Strict loader for host-installed provider authority.
- [PtcRunner.Kernel.HostInstallation](PtcRunner.Kernel.HostInstallation.md): Turns one strict host document into an inert installation catalog.
- [PtcRunner.Kernel.HostRuntimePayload](PtcRunner.Kernel.HostRuntimePayload.md): Internal sealed transport for credential-bearing host runtime configuration.
- [PtcRunner.Kernel.InspectionQuery](PtcRunner.Kernel.InspectionQuery.md): Pure, source-bound queries over validated private inspection records.
- [PtcRunner.Kernel.InspectionRecordTypes](PtcRunner.Kernel.InspectionRecordTypes.md): The closed private inspection record vocabulary.
- [PtcRunner.Kernel.InspectionSnapshot](PtcRunner.Kernel.InspectionSnapshot.md): Owner-bound immutable capture of private inspection artifacts.
- [PtcRunner.Kernel.InstallationCatalog](PtcRunner.Kernel.InstallationCatalog.md): Inert provider declarations paired with trusted implementations.
- [PtcRunner.Kernel.InstallationConfigDigest](PtcRunner.Kernel.InstallationConfigDigest.md): Configuration identity for one decoded host installation.
- [PtcRunner.Kernel.LLMReplay](PtcRunner.Kernel.LLMReplay.md): Serves language-model responses from a frozen fixture file.
- [PtcRunner.Kernel.LimitCatalog](PtcRunner.Kernel.LimitCatalog.md): Closed metadata authority for Kernel limits.
- [PtcRunner.Kernel.MCPHTTPAdapter](PtcRunner.Kernel.MCPHTTPAdapter.md): Bounded, non-pooling HTTP transport for MCP and MCP OAuth traffic.
- [PtcRunner.Kernel.MCPOAuth.Authority](PtcRunner.Kernel.MCPOAuth.Authority.md): Validated host authority for one OAuth-protected Streamable HTTP MCP server.
- [PtcRunner.Kernel.MCPOAuth.Authorization](PtcRunner.Kernel.MCPOAuth.Authorization.md): Callback-agnostic explicit MCP OAuth authorization operations.
- [PtcRunner.Kernel.MCPOAuth.BearerChallenge](PtcRunner.Kernel.MCPOAuth.BearerChallenge.md): Bounded RFC 9110 challenge parser specialized for MCP Bearer challenges.
- [PtcRunner.Kernel.MCPOAuth.Context](PtcRunner.Kernel.MCPOAuth.Context.md): Principal-scoped host authorization context.
- [PtcRunner.Kernel.MCPOAuth.CredentialResolver](PtcRunner.Kernel.MCPOAuth.CredentialResolver.md): Just-in-time confidential-client secret resolution.
- [PtcRunner.Kernel.MCPOAuth.Discovery](PtcRunner.Kernel.MCPOAuth.Discovery.md): Bounded final-profile discovery for one installed MCP OAuth authority.
- [PtcRunner.Kernel.MCPOAuth.GrantKey](PtcRunner.Kernel.MCPOAuth.GrantKey.md): Opaque, epoch-fenced identity for one principal's OAuth grant.
- [PtcRunner.Kernel.MCPOAuth.LocalFences](PtcRunner.Kernel.MCPOAuth.LocalFences.md): Runtime-shared fail-closed fences for OAuth response transitions.
- [PtcRunner.Kernel.MCPOAuth.LoopbackListener](PtcRunner.Kernel.MCPOAuth.LoopbackListener.md): Single-shot, dependency-free OAuth loopback callback interaction.
- [PtcRunner.Kernel.MCPOAuth.ManagerCleanup](PtcRunner.Kernel.MCPOAuth.ManagerCleanup.md): Bounded cleanup owner for token managers left by failed provider acquisition.
- [PtcRunner.Kernel.MCPOAuth.Metadata](PtcRunner.Kernel.MCPOAuth.Metadata.md): Pure candidate construction and semantic validation for MCP OAuth metadata.
- [PtcRunner.Kernel.MCPOAuth.NetworkPolicy](PtcRunner.Kernel.MCPOAuth.NetworkPolicy.md): Resolve-and-pin egress policy for MCP OAuth HTTP requests.
- [PtcRunner.Kernel.MCPOAuth.PendingAuthorization](PtcRunner.Kernel.MCPOAuth.PendingAuthorization.md): Opaque handle for one explicit authorization interaction.
- [PtcRunner.Kernel.MCPOAuth.Primitives](PtcRunner.Kernel.MCPOAuth.Primitives.md): Small, auditable OAuth authorization-code primitives owned by PtcRunner.
- [PtcRunner.Kernel.MCPOAuth.Scope](PtcRunner.Kernel.MCPOAuth.Scope.md): Shared strict parser for every OAuth scope-bearing boundary.
- [PtcRunner.Kernel.MCPOAuth.Store](PtcRunner.Kernel.MCPOAuth.Store.md): Atomic authorization-store boundary for MCP OAuth state.
- [PtcRunner.Kernel.MCPOAuth.Store.Memory](PtcRunner.Kernel.MCPOAuth.Store.Memory.md): Owner-process, process-local implementation of the MCP OAuth store.
- [PtcRunner.Kernel.MCPOAuth.TokenClient](PtcRunner.Kernel.MCPOAuth.TokenClient.md): One-shot authorization-code and refresh token endpoint client.
- [PtcRunner.Kernel.MCPOAuth.TokenManager](PtcRunner.Kernel.MCPOAuth.TokenManager.md): Principal-scoped bearer-token owner for one installed MCP authority.
- [PtcRunner.Kernel.MCPOAuth.TokenResponse](PtcRunner.Kernel.MCPOAuth.TokenResponse.md): Strict, bounded projection of OAuth token endpoint responses.
- [PtcRunner.Kernel.ManifestRepl](PtcRunner.Kernel.ManifestRepl.md): Shared manifest-backed REPL acquisition and lifecycle boundary.
- [PtcRunner.Kernel.ModelContract](PtcRunner.Kernel.ModelContract.md): Projects compiled prelude contracts and normalized capability JSON Schema
into one deterministic, renderer-neutral model contract.
- [PtcRunner.Kernel.ModelSelectorDisclosure](PtcRunner.Kernel.ModelSelectorDisclosure.md): The single rule deciding which configured model selectors a command may print.
- [PtcRunner.Kernel.PreparedRun](PtcRunner.Kernel.PreparedRun.md): Sealed provider-inert output of phases 4 and 5.
- [PtcRunner.Kernel.PrivateDiagnostic](PtcRunner.Kernel.PrivateDiagnostic.md): Diagnostic projection policy for analysis sessions whose results are private.
- [PtcRunner.Kernel.PrivateRunAnalysisProfile](PtcRunner.Kernel.PrivateRunAnalysisProfile.md): Fixed private authority recipe for correlated run-evidence navigation.
- [PtcRunner.Kernel.ProviderAcquisition](PtcRunner.Kernel.ProviderAcquisition.md): Acquires one prepared run's selected providers through its active session.
- [PtcRunner.Kernel.ProviderActiveSession](PtcRunner.Kernel.ProviderActiveSession.md): Opens the active provider boundary through selection validation.
- [PtcRunner.Kernel.ProviderActivity](PtcRunner.Kernel.ProviderActivity.md): Owner-backed monotonic active-lifecycle marker.
- [PtcRunner.Kernel.ProviderApplicationGate](PtcRunner.Kernel.ProviderApplicationGate.md): Admits selected optional provider applications after the active lifecycle
begins.
- [PtcRunner.Kernel.ProviderDescriptor](PtcRunner.Kernel.ProviderDescriptor.md): Sealed, declarative metadata for one installed provider implementation.
- [PtcRunner.Kernel.ProviderRuntimeServices](PtcRunner.Kernel.ProviderRuntimeServices.md): Sealed services supplied only when active provider runtime is opened.
- [PtcRunner.Kernel.ProviderSession](PtcRunner.Kernel.ProviderSession.md): One owner-backed cleanup stack for a command's active provider work.
- [PtcRunner.Kernel.ProviderSnapshot](PtcRunner.Kernel.ProviderSnapshot.md): Builds the closed selector-safe public identity for an acquired provider.
- [PtcRunner.Kernel.PublicRunAnalysisProfile](PtcRunner.Kernel.PublicRunAnalysisProfile.md): Fixed public authority recipe for bounded run-evidence navigation.
- [PtcRunner.Kernel.ResourceRegistrar](PtcRunner.Kernel.ResourceRegistrar.md): Scoped acquisition handle for one provider session.
- [PtcRunner.Kernel.ResultArtifact](PtcRunner.Kernel.ResultArtifact.md): Persists one run result as a standalone JSON artifact.
- [PtcRunner.Kernel.RunAnalysisCapability](PtcRunner.Kernel.RunAnalysisCapability.md): The single capability builder for bounded run-evidence navigation.
- [PtcRunner.Kernel.RunCoordinator](PtcRunner.Kernel.RunCoordinator.md): Path-free preparation and one-shot execution.
- [PtcRunner.Kernel.SafeMetadata](PtcRunner.Kernel.SafeMetadata.md): Validates the closed, payload-free metadata vocabulary used by canonical events.
- [PtcRunner.Kernel.SchemaPath](PtcRunner.Kernel.SchemaPath.md): Schema-explained prefix of an untrusted document path.
- [PtcRunner.Kernel.SchemaViolation](PtcRunner.Kernel.SchemaViolation.md): Bounded, value-free projection of a JSON Schema validation failure.
- [PtcRunner.Kernel.SchemaViolationDiagnostic](PtcRunner.Kernel.SchemaViolationDiagnostic.md): Closed messages for hand-authored document schema violations.
- [PtcRunner.Kernel.SelectionRules](PtcRunner.Kernel.SelectionRules.md): Sealed, non-executable provider-selection normalization rules.
- [PtcRunner.Kernel.SelectionRulesDiagnostic](PtcRunner.Kernel.SelectionRulesDiagnostic.md): Closed messages for provider-selection rule failures.
- [PtcRunner.Kernel.SessionTrace](PtcRunner.Kernel.SessionTrace.md): Owner of one code-owned analysis session's canonical event batch and
publication.
- [PtcRunner.Kernel.ToolGrant](PtcRunner.Kernel.ToolGrant.md): Builds the capability callbacks handed to a sandboxed evaluation.
- [PtcRunner.Kernel.ValueContract](PtcRunner.Kernel.ValueContract.md): Compiled manifest-local contract for application input and `Result.value`.
- [PtcRunner.Kernel.ValueContractClassification](PtcRunner.Kernel.ValueContractClassification.md): Internal sealed evidence for one value-contract classification.
- [PtcRunner.Kernel.ViewerBinding](PtcRunner.Kernel.ViewerBinding.md): Closed `ptc viewer` listener vocabulary.
- [PtcRunner.Kernel.ViewerProjectAdapter](PtcRunner.Kernel.ViewerProjectAdapter.md): Project details for the Viewer's Live tab (#1444).
- [PtcRunner.Kernel.ViewerReplAdapter](PtcRunner.Kernel.ViewerReplAdapter.md): Local connected backend for the standalone Viewer's run-analysis REPL.
- [PtcRunner.LLM.PreparedModel](PtcRunner.LLM.PreparedModel.md): Immutable result of preparing a configured LLM selector.
- [PtcRunner.LLM.ReqLLMPreparedModel](PtcRunner.LLM.ReqLLMPreparedModel.md): Prepared request target owned by `PtcRunner.LLM.ReqLLMAdapter`.
- [PtcRunner.Lisp.AST](PtcRunner.Lisp.AST.md): AST node types for PTC-Lisp
- [PtcRunner.Lisp.Analyze](PtcRunner.Lisp.Analyze.md): Validates and desugars RawAST into CoreAST.
- [PtcRunner.Lisp.Analyze.Conditionals](PtcRunner.Lisp.Analyze.Conditionals.md): Conditional analysis for `if`, `if-not`, `when`, `when-not`, `if-let`,
`when-let`, `if-some`, `when-some`, `when-first`, `cond`, `case`, and `condp` forms.
- [PtcRunner.Lisp.Analyze.Definitions](PtcRunner.Lisp.Analyze.Definitions.md): Definition analysis for `def`, `defonce`, and `defn` forms.
- [PtcRunner.Lisp.Analyze.Iteration](PtcRunner.Lisp.Analyze.Iteration.md): Iteration analysis for `doseq` and `for` comprehensions.
- [PtcRunner.Lisp.Analyze.Patterns](PtcRunner.Lisp.Analyze.Patterns.md): Pattern analysis and destructuring for let bindings and function parameters.
- [PtcRunner.Lisp.Analyze.PreludeScope](PtcRunner.Lisp.Analyze.PreludeScope.md): Process-local scope for the compiled prelude consulted during a single
analysis pass.
- [PtcRunner.Lisp.Analyze.ShortFn](PtcRunner.Lisp.Analyze.ShortFn.md): Analyzer for short function syntax (#()).
- [PtcRunner.Lisp.BuiltinNames](PtcRunner.Lisp.BuiltinNames.md): Leaf source of env-dispatched builtin names and binding kinds, loaded from
`priv/functions.exs` at compile time. It also projects the bounded source
vocabulary from the validated Java surface manifest.
- [PtcRunner.Lisp.ClojureValidator](PtcRunner.Lisp.ClojureValidator.md): Validates PTC-Lisp programs against Babashka/Clojure.
- [PtcRunner.Lisp.ClosureCapture](PtcRunner.Lisp.ClosureCapture.md): Scope-aware helpers for determining which names a closure body references.

- [PtcRunner.Lisp.CoreAST](PtcRunner.Lisp.CoreAST.md): Core, validated AST for PTC-Lisp.
- [PtcRunner.Lisp.CoreToSource](PtcRunner.Lisp.CoreToSource.md): Convert Core AST (the analyzed/desugared representation) back to PTC-Lisp source strings.
- [PtcRunner.Lisp.DataKeys](PtcRunner.Lisp.DataKeys.md): Static analysis to extract data keys accessed by a PTC-Lisp program.
- [PtcRunner.Lisp.Env](PtcRunner.Lisp.Env.md): Builds the initial environment with builtins for PTC-Lisp.
- [PtcRunner.Lisp.Env.Builtin](PtcRunner.Lisp.Env.Builtin.md): Metadata wrapper for callable environment builtins.
- [PtcRunner.Lisp.Eval](PtcRunner.Lisp.Eval.md): Evaluates CoreAST into values.
- [PtcRunner.Lisp.Eval.Apply](PtcRunner.Lisp.Eval.Apply.md): Function application dispatch for Lisp evaluation.
- [PtcRunner.Lisp.Eval.Capture](PtcRunner.Lisp.Eval.Capture.md): The evaluator's single nestable effect-capture stack.
- [PtcRunner.Lisp.Eval.Context](PtcRunner.Lisp.Eval.Context.md): Evaluation context for the Lisp interpreter.
- [PtcRunner.Lisp.Eval.Effects](PtcRunner.Lisp.Eval.Effects.md): Canonical evaluator audit effects and their ordering algebra.
- [PtcRunner.Lisp.Eval.Helpers](PtcRunner.Lisp.Eval.Helpers.md): Shared helper functions for Lisp evaluation.
- [PtcRunner.Lisp.Eval.HostContext](PtcRunner.Lisp.Eval.HostContext.md): Adapts plain host callbacks to evaluator context and effect semantics.
- [PtcRunner.Lisp.Eval.Parallel](PtcRunner.Lisp.Eval.Parallel.md): Evaluator-owned semantics for `pmap` and `pcalls`.
- [PtcRunner.Lisp.Eval.ParallelBudget](PtcRunner.Lisp.Eval.ParallelBudget.md): A shared, lock-free slot semaphore bounding the number of parallel
`pmap`/`pcalls` worker processes alive at once across a whole
`PtcRunner.Lisp.run/2`.
- [PtcRunner.Lisp.Eval.ParallelCall](PtcRunner.Lisp.Eval.ParallelCall.md): Dispatches indirect `pmap` and `pcalls` calls to the parallel evaluator.
- [PtcRunner.Lisp.Eval.ParallelRunner](PtcRunner.Lisp.Eval.ParallelRunner.md): Heap-capped, slot-bounded parallel execution of untrusted PTC-Lisp
work (`pmap`/`pcalls`).
- [PtcRunner.Lisp.Eval.ParallelRunner.Envelope](PtcRunner.Lisp.Eval.ParallelRunner.Envelope.md): One indexed result returned by `PtcRunner.Lisp.Eval.ParallelRunner`.
- [PtcRunner.Lisp.Eval.Patterns](PtcRunner.Lisp.Eval.Patterns.md): Pattern matching for let bindings in Lisp evaluation.
- [PtcRunner.Lisp.EvaluatorError](PtcRunner.Lisp.EvaluatorError.md): Public-safe renderer for catalogued PTC-Lisp evaluator failures.
- [PtcRunner.Lisp.EvaluatorErrorCatalog](PtcRunner.Lisp.EvaluatorErrorCatalog.md): Closed public catalog of PTC-Lisp evaluator error kinds.
- [PtcRunner.Lisp.Format](PtcRunner.Lisp.Format.md): Format PTC-Lisp values for human/LLM display.
- [PtcRunner.Lisp.Formatter](PtcRunner.Lisp.Formatter.md): Serialize PTC-Lisp AST to source code string.
- [PtcRunner.Lisp.Introspection](PtcRunner.Lisp.Introspection.md): Read-only introspection over the callable PTC-Lisp surface.
- [PtcRunner.Lisp.Java.Callable](PtcRunner.Lisp.Java.Callable.md): Native, closed reference to one admitted Java member.
- [PtcRunner.Lisp.Java.Condition](PtcRunner.Lisp.Java.Condition.md): Bounded recoverable failure produced by closed Java dispatch.
- [PtcRunner.Lisp.Java.Dispatch](PtcRunner.Lisp.Java.Dispatch.md): Closed selector and postcondition boundary for admitted Java operations.
- [PtcRunner.Lisp.Java.Lang.Boolean](PtcRunner.Lisp.Java.Lang.Boolean.md): Closed implementation of the admitted `java.lang.Boolean` surface.

- [PtcRunner.Lisp.Java.Lang.Double](PtcRunner.Lisp.Java.Lang.Double.md): Closed implementation of the admitted `java.lang.Double` surface.

- [PtcRunner.Lisp.Java.Lang.Float](PtcRunner.Lisp.Java.Lang.Float.md): Closed implementation of the admitted `java.lang.Float` surface.

- [PtcRunner.Lisp.Java.Lang.Integer](PtcRunner.Lisp.Java.Lang.Integer.md): Closed implementation of the admitted `java.lang.Integer` surface.

- [PtcRunner.Lisp.Java.Lang.Long](PtcRunner.Lisp.Java.Lang.Long.md): Closed implementation of the admitted `java.lang.Long` surface.

- [PtcRunner.Lisp.Java.Lang.Math](PtcRunner.Lisp.Java.Lang.Math.md): Closed implementations for the admitted `java.lang.Math` overloads.
- [PtcRunner.Lisp.Java.Lang.String](PtcRunner.Lisp.Java.Lang.String.md): Bounded UTF-16 semantics for the admitted `java.lang.String` methods.
- [PtcRunner.Lisp.Java.Lang.System](PtcRunner.Lisp.Java.Lang.System.md): Closed implementation of the admitted `java.lang.System` surface.

- [PtcRunner.Lisp.Java.Oracle.Config](PtcRunner.Lisp.Java.Oracle.Config.md): Pinned executable-oracle versions and deterministic process settings.
- [PtcRunner.Lisp.Java.Oracle.Fixtures](PtcRunner.Lisp.Java.Oracle.Fixtures.md): Validates structured Java oracle cases and their checked-in typed baseline.
- [PtcRunner.Lisp.Java.Oracle.Runner](PtcRunner.Lisp.Java.Oracle.Runner.md): Executes bounded Java behavior cases through pinned JVM Clojure, Babashka,
or the PTC runtime for explicit compatibility-only operations.
- [PtcRunner.Lisp.Java.Primitive](PtcRunner.Lisp.Java.Primitive.md): Native Java numeric value whose primitive overload identity is observable.
- [PtcRunner.Lisp.Java.Project](PtcRunner.Lisp.Java.Project.md): Total, recursive projection for native Java values at bounded host edges.
- [PtcRunner.Lisp.Java.Surface](PtcRunner.Lisp.Java.Surface.md): Compile-time authority for the bounded PTC-Lisp Java compatibility surface.
- [PtcRunner.Lisp.Java.Time.Duration](PtcRunner.Lisp.Java.Time.Duration.md): Native, bounded representation of `java.time.Duration`.
- [PtcRunner.Lisp.Java.Time.Instant](PtcRunner.Lisp.Java.Time.Instant.md): Native, bounded representation of `java.time.Instant`.
- [PtcRunner.Lisp.Java.Time.LocalDate](PtcRunner.Lisp.Java.Time.LocalDate.md): Native, bounded representation of `java.time.LocalDate`.
- [PtcRunner.Lisp.Java.Util.Date](PtcRunner.Lisp.Java.Util.Date.md): Native, bounded representation of legacy `java.util.Date`.
- [PtcRunner.Lisp.KeyNormalizer](PtcRunner.Lisp.KeyNormalizer.md): Normalizes map keys at the tool boundary.
- [PtcRunner.Lisp.Keyword](PtcRunner.Lisp.Keyword.md): Runtime representation for PTC-Lisp keywords that are not in the bounded atom vocabulary.
- [PtcRunner.Lisp.Prelude](PtcRunner.Lisp.Prelude.md): Compiled, stateless deployment prelude artifact.
- [PtcRunner.Lisp.Prelude.Attach](PtcRunner.Lisp.Prelude.Attach.md): Resolves a compiled or source deployment prelude and validates every
`tool:<name>` requirement against the host-granted tools map before user
code is analyzed. Unknown requirement shapes fail closed.

- [PtcRunner.Lisp.Prelude.AttachContext](PtcRunner.Lisp.Prelude.AttachContext.md): Host tool grants used to validate a prelude's `requires` at attach time.
- [PtcRunner.Lisp.Prelude.Bundle](PtcRunner.Lisp.Prelude.Bundle.md): Deterministic source-level composition for selected capability preludes.
- [PtcRunner.Lisp.Prelude.Compiler](PtcRunner.Lisp.Prelude.Compiler.md): Compiles deployment prelude SOURCE into a `%PtcRunner.Lisp.Prelude{}`
artifact.
- [PtcRunner.Lisp.Prelude.ErrorSpan](PtcRunner.Lisp.Prelude.ErrorSpan.md): Resolves a `%PtcRunner.Lisp.Prelude.ValidationError{}` to the byte span of
the top-level form it blames.
- [PtcRunner.Lisp.Prelude.Export](PtcRunner.Lisp.Prelude.Export.md): Per-export public projection consulted by the analyzer, evaluator,
bundle validation and prompt rendering.
- [PtcRunner.Lisp.Prelude.FormScanner](PtcRunner.Lisp.Prelude.FormScanner.md): Byte-exact top-level form span scanner for raw PTC-Lisp prelude source TEXT.
- [PtcRunner.Lisp.Prelude.Spec](PtcRunner.Lisp.Prelude.Spec.md): Internal raw-definition spec gathered by
`PtcRunner.Lisp.Prelude.Compiler` during its AST walk, before
host-boundary `%PtcRunner.Lisp.Prelude.Export{}` records are built and
before the callable private env is captured.
- [PtcRunner.Lisp.Prelude.ValidationError](PtcRunner.Lisp.Prelude.ValidationError.md): Compile-time validation failure for a deployment prelude.
- [PtcRunner.Lisp.ProtectedNamespaces](PtcRunner.Lisp.ProtectedNamespaces.md): Single consult point for namespace protection for deployment preludes.
- [PtcRunner.Lisp.Runtime](PtcRunner.Lisp.Runtime.md): Built-in functions for PTC-Lisp.
- [PtcRunner.Lisp.Runtime.Args](PtcRunner.Lisp.Runtime.Args.md): Shared runtime argument validation for Env builtin calls.

- [PtcRunner.Lisp.Runtime.Builtins](PtcRunner.Lisp.Runtime.Builtins.md): The manifest of PTC-Lisp builtin bindings exposed by the Runtime subsystem.
- [PtcRunner.Lisp.Runtime.Callable](PtcRunner.Lisp.Runtime.Callable.md): Dispatch helper for calling Lisp functions from Collection operations.
- [PtcRunner.Lisp.Runtime.Collection](PtcRunner.Lisp.Runtime.Collection.md): Collection operations for PTC-Lisp runtime.
- [PtcRunner.Lisp.Runtime.Collection.Normalize](PtcRunner.Lisp.Runtime.Collection.Normalize.md): Predicate and collection normalization helpers for collection operations.
- [PtcRunner.Lisp.Runtime.Collection.Select](PtcRunner.Lisp.Runtime.Collection.Select.md): Selection operations for PTC-Lisp collections: filter, remove, find,
some, every?, not_any?, not_every?, take_while, drop_while.
- [PtcRunner.Lisp.Runtime.Collection.Transform](PtcRunner.Lisp.Runtime.Collection.Transform.md): Transformation operations for PTC-Lisp collections: map, mapv, mapcat,
keep, map_indexed, keep_indexed.
- [PtcRunner.Lisp.Runtime.Describe](PtcRunner.Lisp.Runtime.Describe.md): Bounded data-shape summaries for PTC-Lisp values.

- [PtcRunner.Lisp.Runtime.FlexAccess](PtcRunner.Lisp.Runtime.FlexAccess.md): Flexible key access helpers for PTC-Lisp runtime.
- [PtcRunner.Lisp.Runtime.JavaMathSemantics](PtcRunner.Lisp.Runtime.JavaMathSemantics.md): Pure numeric semantics shared by Java `Math` dispatch and the bare PTC
`pow`/`sqrt` helpers.
- [PtcRunner.Lisp.Runtime.Json](PtcRunner.Lisp.Runtime.Json.md): JSON parsing and generation for PTC-Lisp.
- [PtcRunner.Lisp.Runtime.MapOps](PtcRunner.Lisp.Runtime.MapOps.md): Map operations for PTC-Lisp runtime.
- [PtcRunner.Lisp.Runtime.Math](PtcRunner.Lisp.Runtime.Math.md): Arithmetic operations for PTC-Lisp runtime.
- [PtcRunner.Lisp.Runtime.Predicates](PtcRunner.Lisp.Runtime.Predicates.md): Type predicates, numeric predicates, and logic operations for PTC-Lisp runtime.
- [PtcRunner.Lisp.Runtime.Regex](PtcRunner.Lisp.Runtime.Regex.md): Minimal, safe Regex support for PTC-Lisp.
Uses Erlang's :re directly with match limits for ReDoS protection.

- [PtcRunner.Lisp.Runtime.SpecialValues](PtcRunner.Lisp.Runtime.SpecialValues.md): Unified handling for IEEE 754 special values (Infinity, NaN) in PTC-Lisp.

- [PtcRunner.Lisp.Runtime.String](PtcRunner.Lisp.Runtime.String.md): String manipulation and parsing operations for PTC-Lisp runtime.
- [PtcRunner.Lisp.RuntimeCallable](PtcRunner.Lisp.RuntimeCallable.md): Runtime callable for effectful qualified Lisp symbols.
- [PtcRunner.Lisp.Signature.Coercion](PtcRunner.Lisp.Signature.Coercion.md): Coerce values to expected types with warning generation.
- [PtcRunner.Lisp.Signature.Parser](PtcRunner.Lisp.Signature.Parser.md): NimbleParsec-based parser for signature strings.
- [PtcRunner.Lisp.Signature.ParserHelpers](PtcRunner.Lisp.Signature.ParserHelpers.md): Helper functions for signature parser AST building.

- [PtcRunner.Lisp.Signature.Renderer](PtcRunner.Lisp.Signature.Renderer.md): Renders signatures back to string representation.
- [PtcRunner.Lisp.Signature.TypeResolver](PtcRunner.Lisp.Signature.TypeResolver.md): Resolve paths against parsed signature types.
- [PtcRunner.Lisp.SourceAtoms](PtcRunner.Lisp.SourceAtoms.md): Bounded vocabulary — the set of names the parser is allowed to
intern as atoms.
- [PtcRunner.Lisp.SpecValidator](PtcRunner.Lisp.SpecValidator.md): Validates PTC-Lisp specification against implementation.
- [PtcRunner.Lisp.SpecValidator.Parser](PtcRunner.Lisp.SpecValidator.Parser.md): Markdown-extraction half of `PtcRunner.Lisp.SpecValidator`.
- [PtcRunner.Lisp.SpecialBuiltin](PtcRunner.Lisp.SpecialBuiltin.md): Metadata for context-dispatched builtin values.
- [PtcRunner.Lisp.SymbolCounter](PtcRunner.Lisp.SymbolCounter.md): Counts unique user-defined symbols and keywords in a parsed Lisp AST.
- [PtcRunner.Lisp.TypeVocabulary](PtcRunner.Lisp.TypeVocabulary.md): Converts Elixir values to human-readable type labels.
- [PtcRunner.Lisp.UntrustedRenderer](PtcRunner.Lisp.UntrustedRenderer.md): Wraps untrusted content in data-only envelopes for LLM feedback.
- [PtcRunner.Lisp.ValuePreview](PtcRunner.Lisp.ValuePreview.md): Heap-proportional structural previews for human and model observations.
- [PtcRunner.Lisp.ValuePreview.Result](PtcRunner.Lisp.ValuePreview.Result.md): Bounded, non-authoritative presentation of a PTC-Lisp value.
- [PtcRunner.LiveStatus](PtcRunner.LiveStatus.md): Opt-in live status reporting for one Kernel run.
- [PtcRunner.LiveStatus.Target](PtcRunner.LiveStatus.Target.md): An explicit destination for one run's live-status frames.
- [PtcRunner.ReplFrontend](PtcRunner.ReplFrontend.md): Starts a direct workflow PTC-Lisp REPL or a fixed code-owned analysis
profile.
- [PtcRunner.SiteGuides.MarkdownHTML](PtcRunner.SiteGuides.MarkdownHTML.md): Renders the bounded Markdown subset the guides use into HTML for the
static site.
- [PtcRunner.TranscriptFrontend](PtcRunner.TranscriptFrontend.md): One-shot private conversation retrieval for an immutable run capture.
- [PtcRunner.Utf8](PtcRunner.Utf8.md): Byte-bounded UTF-8 helpers shared by diagnostics and public metadata.
- [PtcRunner.ViewerFrontend](PtcRunner.ViewerFrontend.md): Serves one project's captured traces through the local PTC Viewer.

- Kernel
  - [PtcRunner.Kernel](PtcRunner.Kernel.md): Public execution boundary for bounded PTC-Lisp workflows.
  - [PtcRunner.Kernel.ApplicationPackage](PtcRunner.Kernel.ApplicationPackage.md): Immutable, path-free application semantics and captured source closure.
  - [PtcRunner.Kernel.Capability](PtcRunner.Kernel.Capability.md): A host-owned route from PTC-Lisp to trusted extension code.
  - [PtcRunner.Kernel.Component](PtcRunner.Kernel.Component.md): A source-bearing, component-ID-addressed bundle input.
  - [PtcRunner.Kernel.Error](PtcRunner.Kernel.Error.md): A bounded failed Kernel outcome.
  - [PtcRunner.Kernel.EventSink](PtcRunner.Kernel.EventSink.md): Bounded in-memory owner for canonical Kernel events.
  - [PtcRunner.Kernel.ExecutionInput](PtcRunner.Kernel.ExecutionInput.md): Sealed selected application input and its authority class.
  - [PtcRunner.Kernel.ExecutionPolicy](PtcRunner.Kernel.ExecutionPolicy.md): Destination-free event, inspection, and result policy for one execution.
  - [PtcRunner.Kernel.FrozenBundle](PtcRunner.Kernel.FrozenBundle.md): An immutable, deterministically ordered component compilation result.
  - [PtcRunner.Kernel.InspectionArtifact](PtcRunner.Kernel.InspectionArtifact.md): Persists and loads one immutable private inspection JSONL artifact.
  - [PtcRunner.Kernel.InspectionSink](PtcRunner.Kernel.InspectionSink.md): Required, bounded in-memory owner for sensitive developer inspection records.
  - [PtcRunner.Kernel.LLMCapability](PtcRunner.Kernel.LLMCapability.md): Constructs the provider-neutral `llm-request` workflow capability.
  - [PtcRunner.Kernel.Library](PtcRunner.Kernel.Library.md): Shipped PTC-Lisp libraries as explicit Kernel components.
  - [PtcRunner.Kernel.Limits](PtcRunner.Kernel.Limits.md): Normalized positive hard ceilings for one Kernel run.
  - [PtcRunner.Kernel.MCPSource](PtcRunner.Kernel.MCPSource.md): Builds one host-installed MCP capability source with operator-owned effects.
  - [PtcRunner.Kernel.Manifest](PtcRunner.Kernel.Manifest.md): Strict, path-confined version 1 JSON manifest loader.
  - [PtcRunner.Kernel.MissionEnvironment](PtcRunner.Kernel.MissionEnvironment.md): Frozen authority for confined subordinate programs.
  - [PtcRunner.Kernel.MissionInventory](PtcRunner.Kernel.MissionInventory.md): Builds the frozen prompt-facing inventory for one mission environment.
  - [PtcRunner.Kernel.ProjectConfig](PtcRunner.Kernel.ProjectConfig.md): Strict operator-owned launch configuration for a PTC project.
  - [PtcRunner.Kernel.ProviderError](PtcRunner.Kernel.ProviderError.md): A bounded host-constructed failure returned by a capability provider.
  - [PtcRunner.Kernel.ProviderRegistry](PtcRunner.Kernel.ProviderRegistry.md): Host-owned mapping from manifest provider names to trusted builders.
  - [PtcRunner.Kernel.ReplSession](PtcRunner.Kernel.ReplSession.md): Direct bounded PTC-Lisp continuation used by the Kernel REPL frontend.
  - [PtcRunner.Kernel.Result](PtcRunner.Kernel.Result.md): A bounded successful Kernel outcome.
  - [PtcRunner.Kernel.RunAnalysis](PtcRunner.Kernel.RunAnalysis.md): Small bounded navigation API over one immutable run-evidence capture.
  - [PtcRunner.Kernel.RunBuilder](PtcRunner.Kernel.RunBuilder.md): Shared path-free request construction and execution path.
  - [PtcRunner.Kernel.RunConfig](PtcRunner.Kernel.RunConfig.md): The complete host-constructed configuration for one Kernel run.
  - [PtcRunner.Kernel.RunRequest](PtcRunner.Kernel.RunRequest.md): Sealed, path-free application package, input, and execution-policy tuple.
  - [PtcRunner.Kernel.TraceLog](PtcRunner.Kernel.TraceLog.md): Bounded canonical trace loading, validation, filtering, and pagination.
  - [PtcRunner.Kernel.WorkflowEnvironment](PtcRunner.Kernel.WorkflowEnvironment.md): Frozen authority for the trusted outer workflow.

- Kernel internals
  - [PtcRunner.Kernel.ApplicationSource](PtcRunner.Kernel.ApplicationSource.md): Bounded, caching document source shared by application acquisition adapters.
  - [PtcRunner.Kernel.Attestation](PtcRunner.Kernel.Attestation.md): Internal in-VM construction attestation for sealed Kernel values.
  - [PtcRunner.Kernel.BoundedWorker](PtcRunner.Kernel.BoundedWorker.md): Internal one-shot worker for heap- and time-bounded host computation.
  - [PtcRunner.Kernel.BundleCompiler](PtcRunner.Kernel.BundleCompiler.md): Internal implementation of `PtcRunner.Kernel.compile_bundle/1`.
  - [PtcRunner.Kernel.DeterministicJSON](PtcRunner.Kernel.DeterministicJSON.md): Internal deterministic encoder for frozen Kernel metadata and hashes.
  - [PtcRunner.Kernel.Dispatcher](PtcRunner.Kernel.Dispatcher.md): Internal bounded capability invocation boundary.
  - [PtcRunner.Kernel.Environment](PtcRunner.Kernel.Environment.md): Internal shared validator for workflow and mission environment constructors.
  - [PtcRunner.Kernel.Evaluation](PtcRunner.Kernel.Evaluation.md): Internal subordinate PTC-Lisp evaluation boundary.
  - [PtcRunner.Kernel.Events](PtcRunner.Kernel.Events.md): Internal canonical event helpers.
  - [PtcRunner.Kernel.ExecutionOutcome](PtcRunner.Kernel.ExecutionOutcome.md): Sealed, filesystem-path-free evidence captured at the one-shot execution
boundary.
  - [PtcRunner.Kernel.JSONSchema](PtcRunner.Kernel.JSONSchema.md): Internal compiler for the bounded capability JSON Schema profile.
  - [PtcRunner.Kernel.JSONValue](PtcRunner.Kernel.JSONValue.md): Internal validator for values that may cross JSON-shaped Kernel boundaries.
  - [PtcRunner.Kernel.MCPProtocol](PtcRunner.Kernel.MCPProtocol.md): Pure validation and normalization for the pinned MCP protocol contract.
  - [PtcRunner.Kernel.Program](PtcRunner.Kernel.Program.md): Internal opaque representation of a static subordinate PTC-Lisp program.
  - [PtcRunner.Kernel.PublicationAuthority](PtcRunner.Kernel.PublicationAuthority.md): Sealed, anchored artifact destinations authorized before execution.
  - [PtcRunner.Kernel.RunState](PtcRunner.Kernel.RunState.md): Internal single owner of mutable per-run resource state.
  - [PtcRunner.Kernel.Runner](PtcRunner.Kernel.Runner.md): Internal implementation of `PtcRunner.Kernel.run/2`.
  - [PtcRunner.Kernel.RuntimeTools](PtcRunner.Kernel.RuntimeTools.md): Internal construction of reserved runtime capabilities.
  - [PtcRunner.Kernel.SemanticRevision](PtcRunner.Kernel.SemanticRevision.md): Conservative code-owned PTC execution-semantics revision.
  - [PtcRunner.Kernel.StrictJSON](PtcRunner.Kernel.StrictJSON.md): Bounded, duplicate-rejecting JSON admission for authority boundaries.
  - [PtcRunner.Kernel.TypedCanonicalJSON](PtcRunner.Kernel.TypedCanonicalJSON.md): Type-preserving canonical JSON bytes for stable application identity.
  - [PtcRunner.Kernel.ViewerAdapter](PtcRunner.Kernel.ViewerAdapter.md): Internal read-only viewer adapter over the shared TraceLog query layer.

- PTC-Lisp
  - [PtcRunner.Lisp](PtcRunner.Lisp.md): Execute PTC programs written in Lisp DSL (Clojure subset).
  - [PtcRunner.Lisp.Context](PtcRunner.Lisp.Context.md): Manages context, memory, and tools for program execution.
  - [PtcRunner.Lisp.Parser](PtcRunner.Lisp.Parser.md): Parser entry point for PTC-Lisp.
  - [PtcRunner.Lisp.Registry](PtcRunner.Lisp.Registry.md): Single source of truth for PTC-Lisp function metadata.
  - [PtcRunner.Lisp.Result](PtcRunner.Lisp.Result.md): Native continuation result returned by the neutral PTC-Lisp evaluator.
  - [PtcRunner.Lisp.Signature](PtcRunner.Lisp.Signature.md): Signature parsing and validation for PTC-Lisp component exports.
  - [PtcRunner.Lisp.Signature.Validator](PtcRunner.Lisp.Signature.Validator.md): Validates data against signature type specifications.
  - [PtcRunner.Lisp.TypeExtractor](PtcRunner.Lisp.TypeExtractor.md): Extract signature and description from Elixir function @spec and @doc.
  - [PtcRunner.Sandbox](PtcRunner.Sandbox.md): Executes programs in isolated BEAM processes with resource limits.

- LLM
  - [PtcRunner.LLM](PtcRunner.LLM.md): Provider-neutral LLM adapter boundary used by trusted Kernel provider builders.
  - [PtcRunner.LLM.ReqLLMAdapter](PtcRunner.LLM.ReqLLMAdapter.md): Built-in LLM adapter using `req_llm`.

## Mix Tasks

- [mix bench.check](Mix.Tasks.Bench.Check.md): Checks deterministic PTC-Lisp eval metrics against a committed baseline.
- [mix bench.heap](Mix.Tasks.Bench.Heap.md): Measures the heap cost of the PtcRunner embedding units and compares them
against `bench/baselines/heap.json`.
- [mix ptc](Mix.Tasks.Ptc.md): Runs any stable PTC command through the shared parser and frontend
- [mix ptc.audit_upstream](Mix.Tasks.Ptc.AuditUpstream.md): Checks that conformance audit rows point at symbols/members that exist in
local upstream runtimes.
- [mix ptc.clojure_audit](Mix.Tasks.Ptc.ClojureAudit.md): Generates markdown reports comparing PTC-Lisp builtins against Clojure and Java namespaces.
- [mix ptc.conformance_report](Mix.Tasks.Ptc.ConformanceReport.md): Prints a coverage report for explicit PTC-Lisp conformance cases.
- [mix ptc.gen_docs](Mix.Tasks.Ptc.GenDocs.md): Generates documentation from `priv/functions.exs` (ordinary implemented
functions), `priv/function_audit.exs` (Clojure parity triage notes), and
`priv/java_interop.exs` (bounded Java surface and presentation metadata)
- [mix ptc.gen_semantic_revision](Mix.Tasks.Ptc.GenSemanticRevision.md): Generates the checked-in build half of the Kernel semantic revision.
- [mix ptc.gen_site_guides](Mix.Tasks.Ptc.GenSiteGuides.md): Renders the published documentation groups into committed pages under
`site/guides/`, `site/installation/`, and `site/reference/`, plus the
directory page at `site/guides/index.html`, and rewrites the shared
sidebar between the generated markers in `site/index.html`.
- [mix ptc.install_babashka](Mix.Tasks.Ptc.InstallBabashka.md): Installs Babashka for Clojure validation.
- [mix ptc.install_clojure](Mix.Tasks.Ptc.InstallClojure.md): Installs the checksum-pinned Clojure jars used by Java interop fixtures.
- [mix ptc.java_conformance](Mix.Tasks.Ptc.JavaConformance.md): Runs structured typed Java interop cases against an executable oracle.
- [mix ptc.java_fixtures](Mix.Tasks.Ptc.JavaFixtures.md): Runs the authoritative pinned JVM Clojure oracle and verifies its typed
checked-in fixture baseline.
- [mix ptc.materialize](Mix.Tasks.Ptc.Materialize.md): Turns model-authored source into `{candidate.clj, descriptor.json}` and
reports whether it is fit to promote.
- [mix ptc.repair](Mix.Tasks.Ptc.Repair.md): Consumes one structured `propose-change` result and materializes its complete
replacement source through the normal G1-G4 candidate gate.
- [mix ptc.smoke](Mix.Tasks.Ptc.Smoke.md): Runs .clj files through both PTC-Lisp and Babashka/Clojure, comparing results.
- [mix ptc.update_spec_checksums](Mix.Tasks.Ptc.UpdateSpecChecksums.md): Regenerates the spec checksums file for drift detection.
- [mix ptc.validate_spec](Mix.Tasks.Ptc.ValidateSpec.md): Validates PTC-Lisp specification against implementation.
- [mix ptc.verify_docs](Mix.Tasks.Ptc.VerifyDocs.md): Rejects relative Markdown links that ExDoc would silently resolve to a
different extra with the same basename, then verifies that local links and
assets inside rendered page content remain under the documentation root,
exist, and name real anchors.

