Module handlers 

The open execution plane: an exact-name handler registry the governed candidate dispatches through.

A new tool family is a registration at the composition root — catalog entries via StaticCatalog::with_base, handlers via CandidateHandlerRegistry::register, and a capability grant — never an edit to the loop, the candidate, or the node assembly. The governance wrapper (catalog → validate → budget → certify → execute → re-certify) is uniform and lives outside the handlers.

Modules

external

The external (MCP) dispatcher — the handler registry’s fallback.

Structs

CandidateHandlerRegistry

Exact-name registry. Duplicate registration fails closed so a later family can never silently shadow a builtin.

Traits

CandidateToolHandler

One governed tool executor. Handlers never decide admission, budgets, or certification — the kernel already did; they only realize the effect against the reversible candidate.