Implement the Rust runtime port, Docker-compatible capability probe, OrbStack qualification, timeout, cancellation, descendant cleanup, and stale-generation guards. Add ccp doctor and dry-run execution. No receipt may PASS when cleanup or result collection is uncertain. No privileged mode or Docker socket inside job containers.
Implement the Rust runtime port, Docker-compatible capability probe, OrbStack qualification, timeout, cancellation, descendant cleanup, and stale-generation guards. Add ccp doctor and dry-run execution. No receipt may PASS when cleanup or result collection is uncertain. No privileged mode or Docker socket inside job containers.