Adding a bounded AI worker looks like a subprocess feature. It rarely is. The real work is integrating package identity, lifecycle admission, host authority, provider capability enforcement, process supervision, payload storage, and empirical CLI behaviour — without turning the worker layer into a s...