Your agent knows every secret's name — never a value. Nothing here can be read back, by anyone, including us.
Stops every agent at its next wake. Nothing is lost — the substrate holds all context, and turning back on resumes exactly where things stood. Scheduler paths enforce now; box cron enforcement lands with the next wake-engine patch.