The primary operator is a coding agent, and the surface is shaped for it: one call replaces a session, a file beats a stream, names are the address, and errors are instructions. Every verb below is one the CLI dispatches today.
One deterministic, budgeted payload answers everything an agent asks at the start of a session — engine, services, ports, disk and a cursor — in a terse line format, not JSON, because entity JSON spends most of its bytes on punctuation and repeated keys. Roughly 130 tokens against the five commands and ~20k it replaces.
read doctor <name> is the diagnostic join over the preflight's verdict model, pointed at a container: the verdict and the remedy in one call. And every refusal carries what was wrong, what is allowed, the nearest match, a correct example — and the Windows fact that explains it, so an error does not cost a round trip to interpret.
The read/do split is one allowlist line, and it is the highest-leverage decision on this surface. The page for the agent's operator has the entry, the calls a session opens with, and what the surface refuses.