Local-first agent runtime for MCP workflows with explicit trust controls, replayable runs, and built-in evals.