Module service 

Trusted, root-scoped thread host. The host owns scheduling and persistence; model execution is supplied by the shared run kernel, never another LLM loop.

Structs

HostedThreadTurn

One committed child turn. Neither this input nor its authority is decoded from model arguments. The executor must preserve the exact policy bindings.

ThreadService

Cloneable host for exactly one root run. All adapters in that run must share this instance, so independent callers cannot reset the admission counters.

Traits

ThreadExecutionHost

Required bridge to the trusted shared-kernel host. There are no default methods: an adapter cannot silently skip binding, budget, or execution work.