Guards

Keeps raw tool output out of the context: sandboxed execution, a local FTS5 index, routing hooks and session resume, with strands-decider making the close calls.