tenant.openagents/omega

Drive Exo as a lane, and supply the authority gate Exo lacks (omega#87 Tier A)

Drive Exo as a lane, and supply the authority gate Exo lacks (omega#87 Tier A) Omega Agent gains a `harness:exo` executor lane that drives `exoharness/exo` — the recursive-self-improvement agent harness — through its CLI, pinned at `baa07f6785547080d99bd2a7d3eab6d76b984e35`. This is Tier A of omega#87: coarse by design, one shot per turn, no live text deltas, tool activity after the fact. It proves the lane, the identity binding, and the disclosure before any wire work. Tier B is not started; Tier C stays out of scope. The thing being integrated is an unauthenticated local harness whose agent has an unrestricted networked shell and can rebuild itself. Exo has no approval prompt anywhere by design. Omega supplies the gate, as four refusals the turn path runs before it sends, each from a live observation: where Exo is (`EXO_EXOHARNESS_URL` parsed through a loopback-only type), which Exo (remote, commit, and tree against the pin), which bytes (measured against the owner's harness pin ledger), and which agent (`exo agent show` read, and the turn refused when the agent carries runtime tool authoring, a tool module, or a read-write mount — the three shapes Exo's own self-improvement uses). Exo accepts its global options after the subcommand, so an unterminated prompt is Exo's command line rather than its input. Driven against the pinned binary, a prompt of `--help` exits 0, prints usage, and runs no turn — a lane without the terminator would have rendered that as the model's reply. Every command line the lane can produce is a variant of a closed enum whose exact argv is written down, and every value reachable from a person or a model is emitted after `--`. An Exo thread reports `ExecutorClass::ExternalAcp`. Not `NativeLoop`, which would present an unrestricted shell's output as Omega's own. Not `EngineLane`, which is Full Auto authority and would be a fourth model-reachable door into it. The argument against a fourth class is written down rather than assumed. Release Notes: - N/A