Minimal flow (draft)

Client submits an Intent with Constraints.
Runtime creates/uses a domain_id.
Runtime invokes a worker to draft output.
If tools are needed:
- runtime requests a capability from cognitive kernel
- tool runs in isolated domain with scoped authority
Runtime synthesizes final Result with provenance links.
Optional: memory commit is gated by policy and logged.