Hash the Envelope Before You Generate

You do not control generation until inputs are pinned. A chat box is not an interface. It is an unbounded failure domain. Most teams argue about models and prompts. That debate skips the real contract. The contract is everything the model may see. Think of a compiler, not a conversation. You do not feed it your home directory. You pass sources, flags, and a working directory. Generation needs that same envelope. Your apply host already holds secrets. It holds deploy keys and cloud tokens. Config