Gate and bound Portal shadow observations while preserving Native execution. Add fail-closed service boundaries, terminal retention controls, Canary readiness telemetry, ops visibility, and isolated regression coverage.
# Conflicts: # agent-run-gateway.test.mjs # capabilities.mjs # package.json # server.mjs