See `../CLAUDE.md` for crate-wide runtime and testing rules.
## Local Patterns
- Keep this crate Agent OS-agnostic: no `agent-os-protocol`, `agent-os-client`, `agent-os-sidecar`, ACP, agents, sessions, or toolkit semantics.
- The generic transport resolves `SECURE_EXEC_SIDECAR_BIN` / `secure-exec-sidecar`; product wrappers such as Agent OS must resolve their own wrapper binary and pass it explicitly.
- Expose raw secure-exec wire types and transport primitives only; ergonomic product facades belong in product-specific client crates.