- Contract layer — symbolic roots, workspace DAG, script runtime inference, archive operations.
- Language registration — RELC/analyzer/evaluator recognize
workspace,script,archiveand reject them in.field. - Managed runtime hydration — RPX/install-runtime resolves/downloads/verifies/promotes
rbe.sys.*, including PyPy. - Container executor — bind Script plans to the hardened one-shot Container worker path.
- Archive engine — host-side ZIP first, then TAR/TAR.GZ/TAR.XZ; atomic local mutation and bounded extraction.
- Workspace executor — allocate
??/, run dependency-ready batches in parallel, cleanup, and return bounded results. - Route-WASM warming — cache verified archive indexes/handles when RELC can identify archive operations ahead of request execution.
- Server helper bridge — connect Server REL helper calls to the same host-capability executor without expanding Server policy authority.
Every unfinished phase fails closed; no ambient host process/filesystem fallback is permitted.