Governed execution engine. Mutates files, services, and git only after arifOS judges. Live tool count: see /health. Never self-authorizes.