bento: bound request bodies, stream logs, protocol-version the agent wire (Run 2 S6 + wiring)
ops-exec: trusted executor (E1+E2), Sando refactor, thin macOS driver