A task becomes a plan; each step runs through the proven P1–P6 governed loop — retrieve → quarantine untrusted → tool-call → deny-by-default policy gate → Λ kernel check (advisory) → emit — behind a durable HumanApprovalGate, emitting a signed, hash-chained DSSE receipt you can re-verify in the browser. This is the real engine (a11oy_code_engine), not a redirect.
Nothing is fabricated. If the engine can't be reached, every panel says so honestly — no fake orchestration.