Module resolved 

Structs

ResolvedStep

The advertised descriptors, executable registry, settings and request all belong to the same model-call snapshot. Later activations cannot mutate it.

ResolvedTurn

Frozen turn inputs. No serialization or derived Debug can expose credentials.

TurnEnvironment

Only the execution identity, never the process environment or secrets.