Document explicit tool generation and recovery - #9

Sync documentation, source links and all 21 complete downloads to framework 7dee64e, paired with framework PR13.

The provider guide explains the explicit toolStrict choice, its strict default, runtime schema validation and recovery identity. The remediation tutorial corrects the stale role limits to analyzer 2,048 / implementer 4,096 output tokens.

Validation applies to tested documentation source 2f2e7b03870899c9cc6f425e9d9eb8c005b15d99 and the exact framework pin above. Subsequent head 86ac4876ecf14ced90b9128faf658a6674d6e731 changes only the execution ledger; all tested site source, imports and package bytes remain unchanged.

• Local paired components passed: cargo xtask docs-verify and pnpm verify with pnpm 11.9.0 and the exact framework checkout.
• Hosted run 34195633694 passed the unchanged pnpm verify:agentctl gate, including 140 browser checks and one unchanged generic mobile-search skip. All 94 pages, links, anchors, search, accessibility and package checks passed. Deployment was skipped.
• The actual uploaded artifact has SHA256 bba2fc3895a18e77ec92bdf1236499a403c19eeeb47c0d7008e2e21bd00b962a. Independent inspection verified source metadata, .nojekyll, absence of visible source boilerplate, and all 21 nested package manifests and payload hashes. The remediation ZIP is byte-identical to a separate clean export: SHA256 6ae2b1fa1a9d8737a075460bc30af21e2e9ec4eba49af1a09416b649c0f07827, with 34 payload files.

Actual candidate remediation at the same framework source created unmerged draft fix PR10. Durable runtime and independent outer-pipeline verification passed: three gpt-6-astra/high requests, 4,290 tokens and USD0.089960 estimated cost; two scoped writes; keyless, network-denied remediation and eligibility replay with zero fresh effects/provider requests. Both application test runs passed two tests. The same-database rescan removed the three targeted advisories, introduced no new findings and disclosed 270 unrelated unresolved findings.

Provider-free publication reconciliation passed with paid jobs skipped, reusing the same branch, fingerprint, validated tree and draft PR. This covers outer CI publication reconciliation, not an exactly-once remote mutation guarantee. Production image publication and published-image smoke remain separate gates.

The execution ledger retains exact source identities, report hashes and earlier failures. Writing, Markdown and diff checks passed for the evidence-only update. This remains a draft for review; no new deployment was performed.