diff --git a/run.json b/run.json
index cf1b9e6e2..6e87c857c 100644
--- a/run.json
+++ b/run.json
@@ -505,7 +505,7 @@
     "kind": "running"
   },
   "status_updated_at": "2026-07-11T20:41:56.850021720Z",
-  "last_event_at": "2026-07-11T20:44:40.425522643Z",
+  "last_event_at": "2026-07-11T20:47:29.564596655Z",
   "pending_control": null,
   "checkpoints": [
     {
@@ -690,9 +690,9 @@
       }
     },
     {
-      "seq": 0,
+      "seq": 49,
       "checkpoint": {
-        "timestamp": "2026-07-11T20:47:26.022377565Z",
+        "timestamp": "2026-07-11T20:47:29.235023347Z",
         "current_node": "preflight_lint",
         "completed_nodes": [
           "start",
@@ -701,27 +701,129 @@
           "preflight_lint"
         ],
         "node_retries": {},
+        "context_values": {
+          "thread.toolchain.current_node": "preflight_compile",
+          "outcome": "succeeded",
+          "command.output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126",
+          "failure_signature": "",
+          "internal.retry_count.start": 0,
+          "internal.node_visit_count": 1,
+          "graph.goal": "# Remove the unused per-run secret registry (`SecretRedactor`) and stale references to it\n\n**Self-contained implementation plan.** Everything needed to implement this is\nin this file plus the repository. Independent — no preconditions; can land\nanytime.\n\n> **Token notation.** Interpolation tokens are written in this file without\n> their enclosing double curly braces, so the file is safe to pass directly as\n> a workflow goal (the goal templater would otherwise try to expand them).\n> Read `env.NAME`, `secrets.NAME` as the double-curly-brace token form used in\n> the codebase.\n\n## Context and goal\n\nFabro redacts secrets from run output using **content-based** detection:\nentropy analysis plus gitleaks-style credential patterns\n(`fabro_redact::redact_string` / `redact_json_value`), applied where events are\nserialized and where exec-output tails are captured.\n\nA second mechanism was staged but never adopted: `SecretRedactor`, a per-run\nregistry of exact secret values, intended to be populated when declared\nsecrets resolve at the run boundary and then substituted out of run output\n(catching low-entropy secret values that content-based detection cannot). The\ntype landed as infrastructure ahead of its wiring; the wiring PR was\nultimately **not merged** — the team decided the registration approach was too\nmuch plumbing for too little benefit over the existing content-based\nredaction, and content-based redaction is now the settled mechanism.\n\nThat leaves dead code and two stale forward references on main:\n\n- `SecretRedactor` has **zero consumers** outside its own crate — nothing\n  constructs, registers into, or applies it anywhere in the workspace.\n- A doc comment in `fabro-auth` says provider-header secret resolution sits\n  outside the registry \"until exact-match registration is threaded through\" —\n  a follow-up that will never happen.\n- The `InterpString` module doc in `fabro-types` says declared-secret values\n  \"are intended to be registered into a per-run exact-value redactor\" —\n  describing the abandoned design as if it were pending.\n\n**Goal:** delete the dead type and rewrite both stale comments so the code\ndescribes the real architecture (content-based redaction only). Pure\ndeletion/documentation PR — no behavior change.\n\n## Verified current state (as of main `9daca83b3`, 2026-07-09 — re-verify before starting; line numbers are anchors, not gospel)\n\n- `lib/crates/fabro-redact/src/secret_registry.rs` — the whole module\n  (~217 lines: `SecretRedactor` with `register`, `is_empty`, redaction\n  methods, and its unit tests). Uses `crate::Region`, which is **shared** with\n  `entropy.rs` and `gitleaks.rs` and must stay.\n- `lib/crates/fabro-redact/src/lib.rs:11` — `mod secret_registry;` and `:15`\n  `pub use secret_registry::SecretRedactor;`.\n- Workspace-wide grep for `SecretRedactor` outside `fabro-redact` returns\n  nothing (no consumers in `lib/`, `apps/`, or `docs/`). If this grep finds a\n  consumer when you run it, **stop** — the premise of this plan no longer\n  holds; state that instead of deleting.\n- `lib/crates/fabro-auth/src/resolve.rs:479-482` — doc comment on\n  `resolve_extra_headers`:\n  \"Provider header secrets resolve outside the run-boundary redactor\n  registration path. Keep this path free of value logging until exact-match\n  registration is threaded through.\"\n- `lib/crates/fabro-types/src/settings/interp.rs:17-19` — module doc sentence:\n  \"Declared-secret values are intended to be registered into a per-run\n  exact-value redactor where secrets resolve; sensitivity is not tracked on\n  resolved strings.\"\n\n## Implementation\n\n1. **Delete the module**: remove\n   `lib/crates/fabro-redact/src/secret_registry.rs`, the `mod secret_registry;`\n   declaration, and the `pub use secret_registry::SecretRedactor;` re-export\n   from `lib.rs`. Leave `Region`, `redact_string`, `redact_json_value`,\n   `DisplaySafeUrl`, and everything else in the crate untouched.\n2. **Rewrite the `fabro-auth` comment** on `resolve_extra_headers`: keep the\n   operative guidance (never log resolved header values — they may contain\n   secrets), drop the promise of future exact-match registration. Suggested\n   shape: \"Resolved header values may contain secrets; keep this path free of\n   value logging. Content-based redaction covers credential-shaped values on\n   output surfaces, but nothing substitutes these exact values.\"\n3. **Rewrite the `interp.rs` module-doc sentence**: state the real\n   architecture — resolved secret values are plain strings; sensitivity is not\n   tracked on resolved strings; redaction of run output is content-based\n   (entropy + credential patterns), applied where output is serialized. Do not\n   reference a registry or any pending mechanism.\n4. **Sweep for stragglers**: `rg -n \"SecretRedactor|secret_registry|exact-match|exact-value\" lib/ docs/internal/`\n   — any remaining hit that describes per-run exact-value redaction as\n   existing or planned must be removed or rewritten in this PR. (Expected\n   after steps 1–3: no hits.)\n\n## Scope boundaries — deliberately NOT in this PR\n\n- **Content-based redaction** (`redact_string`, `redact_json_value`, the\n  entropy/gitleaks finders, `Region`) — untouched. This PR removes the unused\n  second mechanism, not the working first one.\n- **Where content-based redaction is applied** (event serialization,\n  exec-output tails, server read paths) — no changes to any application site;\n  this PR does not move, add, or remove redaction passes.\n- **`DisplaySafeUrl` and redacting `Debug` impls** — untouched; unrelated\n  pattern.\n- **The live command-output log path** — has no redaction today; a separate\n  planned change addresses it. Do not touch it here.\n- **`fabro-hooks`** — untouched.\n\nIf work outside these boundaries seems genuinely required for this PR to\ncompile or pass its tests, stop and state that in the PR description rather\nthan expanding scope.\n\n## Tests\n\n- No new tests: the deleted module's tests go with it; no behavior changes to\n  test. Existing `fabro-redact` tests (entropy, gitleaks, jsonl, safe-url)\n  must pass unchanged.\n- `cargo build --workspace` proves no hidden consumer existed.\n\n## Acceptance / verification\n\n- `cargo +nightly-2026-04-14 fmt --check --all`\n- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings`\n- `cargo nextest run --workspace`\n- The sweep in step 4 returns clean.\n- No OpenAPI/wire change; no TypeScript client regeneration.\n\n## Conventions\n\n- Plain-English commit messages, PR text, and comments — describe what the\n  change does; no internal planning identifiers or plan-file names in\n  anything that ships.\n- PR description must state plainly: the exact-value registry approach was\n  abandoned in favor of the existing content-based redaction; the type was\n  never wired to any consumer; the two rewritten comments previously promised\n  the abandoned mechanism. Known limitation to state honestly: low-entropy\n  declared secret values (e.g. a secret whose value is an ordinary word) are\n  not caught by content-based detection — this is an accepted trade, not a\n  regression introduced here.\n",
+          "internal.retry_count.preflight_lint": 0,
+          "thread.preflight_compile.current_node": "preflight_lint",
+          "graph.model_stylesheet": "\n            * { model: claude-opus-4-8; }\n        ",
+          "internal.run_id": "01KX9EKZGANW47ANJQSDMMFBBP",
+          "internal.fidelity": "compact",
+          "thread.start.current_node": "toolchain",
+          "failure_class": "",
+          "internal.retry_count.preflight_compile": 0,
+          "internal.thread_id": "preflight_compile",
+          "graph.rankdir": "LR",
+          "internal.retry_count.toolchain": 0,
+          "current_node": "preflight_lint",
+          "internal.work_dir": "/home/daytona/workspace/fabro"
+        },
+        "node_outcomes": {
+          "preflight_compile": {
+            "status": "succeeded",
+            "context_updates": {
+              "command.output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126"
+            },
+            "notes": "Script completed: cargo check -q --workspace 2>&1",
+            "usage": null,
+            "timing": {
+              "wall_time_ms": 0,
+              "inference_time_ms": 0,
+              "tool_time_ms": 154356,
+              "active_time_ms": 154356
+            }
+          },
+          "preflight_lint": {
+            "status": "succeeded",
+            "context_updates": {
+              "command.output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126"
+            },
+            "notes": "Script completed: cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1",
+            "usage": null,
+            "timing": {
+              "wall_time_ms": 0,
+              "inference_time_ms": 0,
+              "tool_time_ms": 165593,
+              "active_time_ms": 165593
+            }
+          },
+          "toolchain": {
+            "status": "succeeded",
+            "context_updates": {
+              "command.output": "blob://sha256/fc14b2ba2d770e5cd3169df7a29525c962adfc4cfa3097b9098c63ebd61a748c"
+            },
+            "notes": "Script completed: command -v cargo >/dev/null || { curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y && sudo ln -sf $HOME/.cargo/bin/* /usr/local/bin/; }; cargo --version 2>&1",
+            "usage": null,
+            "timing": {
+              "wall_time_ms": 0,
+              "inference_time_ms": 0,
+              "tool_time_ms": 1257,
+              "active_time_ms": 1257
+            }
+          },
+          "start": {
+            "status": "succeeded",
+            "usage": null
+          }
+        },
+        "next_node_id": "implement",
+        "git_commit_sha": "2e7c90ecfb830f2c2ee6914f0c8e998644752de4",
+        "node_visits": {
+          "preflight_lint": 1,
+          "toolchain": 1,
+          "start": 1,
+          "preflight_compile": 1
+        }
+      },
+      "diff": {
+        "summary": {
+          "files_changed": 0,
+          "additions": 0,
+          "deletions": 0
+        }
+      }
+    },
+    {
+      "seq": 0,
+      "checkpoint": {
+        "timestamp": "2026-07-11T20:47:29.658129882Z",
+        "current_node": "implement",
+        "completed_nodes": [
+          "start",
+          "toolchain",
+          "preflight_compile",
+          "preflight_lint",
+          "implement"
+        ],
+        "node_retries": {},
         "context_values": {
           "internal.node_visit_count": 1,
           "graph.goal": "# Remove the unused per-run secret registry (`SecretRedactor`) and stale references to it\n\n**Self-contained implementation plan.** Everything needed to implement this is\nin this file plus the repository. Independent — no preconditions; can land\nanytime.\n\n> **Token notation.** Interpolation tokens are written in this file without\n> their enclosing double curly braces, so the file is safe to pass directly as\n> a workflow goal (the goal templater would otherwise try to expand them).\n> Read `env.NAME`, `secrets.NAME` as the double-curly-brace token form used in\n> the codebase.\n\n## Context and goal\n\nFabro redacts secrets from run output using **content-based** detection:\nentropy analysis plus gitleaks-style credential patterns\n(`fabro_redact::redact_string` / `redact_json_value`), applied where events are\nserialized and where exec-output tails are captured.\n\nA second mechanism was staged but never adopted: `SecretRedactor`, a per-run\nregistry of exact secret values, intended to be populated when declared\nsecrets resolve at the run boundary and then substituted out of run output\n(catching low-entropy secret values that content-based detection cannot). The\ntype landed as infrastructure ahead of its wiring; the wiring PR was\nultimately **not merged** — the team decided the registration approach was too\nmuch plumbing for too little benefit over the existing content-based\nredaction, and content-based redaction is now the settled mechanism.\n\nThat leaves dead code and two stale forward references on main:\n\n- `SecretRedactor` has **zero consumers** outside its own crate — nothing\n  constructs, registers into, or applies it anywhere in the workspace.\n- A doc comment in `fabro-auth` says provider-header secret resolution sits\n  outside the registry \"until exact-match registration is threaded through\" —\n  a follow-up that will never happen.\n- The `InterpString` module doc in `fabro-types` says declared-secret values\n  \"are intended to be registered into a per-run exact-value redactor\" —\n  describing the abandoned design as if it were pending.\n\n**Goal:** delete the dead type and rewrite both stale comments so the code\ndescribes the real architecture (content-based redaction only). Pure\ndeletion/documentation PR — no behavior change.\n\n## Verified current state (as of main `9daca83b3`, 2026-07-09 — re-verify before starting; line numbers are anchors, not gospel)\n\n- `lib/crates/fabro-redact/src/secret_registry.rs` — the whole module\n  (~217 lines: `SecretRedactor` with `register`, `is_empty`, redaction\n  methods, and its unit tests). Uses `crate::Region`, which is **shared** with\n  `entropy.rs` and `gitleaks.rs` and must stay.\n- `lib/crates/fabro-redact/src/lib.rs:11` — `mod secret_registry;` and `:15`\n  `pub use secret_registry::SecretRedactor;`.\n- Workspace-wide grep for `SecretRedactor` outside `fabro-redact` returns\n  nothing (no consumers in `lib/`, `apps/`, or `docs/`). If this grep finds a\n  consumer when you run it, **stop** — the premise of this plan no longer\n  holds; state that instead of deleting.\n- `lib/crates/fabro-auth/src/resolve.rs:479-482` — doc comment on\n  `resolve_extra_headers`:\n  \"Provider header secrets resolve outside the run-boundary redactor\n  registration path. Keep this path free of value logging until exact-match\n  registration is threaded through.\"\n- `lib/crates/fabro-types/src/settings/interp.rs:17-19` — module doc sentence:\n  \"Declared-secret values are intended to be registered into a per-run\n  exact-value redactor where secrets resolve; sensitivity is not tracked on\n  resolved strings.\"\n\n## Implementation\n\n1. **Delete the module**: remove\n   `lib/crates/fabro-redact/src/secret_registry.rs`, the `mod secret_registry;`\n   declaration, and the `pub use secret_registry::SecretRedactor;` re-export\n   from `lib.rs`. Leave `Region`, `redact_string`, `redact_json_value`,\n   `DisplaySafeUrl`, and everything else in the crate untouched.\n2. **Rewrite the `fabro-auth` comment** on `resolve_extra_headers`: keep the\n   operative guidance (never log resolved header values — they may contain\n   secrets), drop the promise of future exact-match registration. Suggested\n   shape: \"Resolved header values may contain secrets; keep this path free of\n   value logging. Content-based redaction covers credential-shaped values on\n   output surfaces, but nothing substitutes these exact values.\"\n3. **Rewrite the `interp.rs` module-doc sentence**: state the real\n   architecture — resolved secret values are plain strings; sensitivity is not\n   tracked on resolved strings; redaction of run output is content-based\n   (entropy + credential patterns), applied where output is serialized. Do not\n   reference a registry or any pending mechanism.\n4. **Sweep for stragglers**: `rg -n \"SecretRedactor|secret_registry|exact-match|exact-value\" lib/ docs/internal/`\n   — any remaining hit that describes per-run exact-value redaction as\n   existing or planned must be removed or rewritten in this PR. (Expected\n   after steps 1–3: no hits.)\n\n## Scope boundaries — deliberately NOT in this PR\n\n- **Content-based redaction** (`redact_string`, `redact_json_value`, the\n  entropy/gitleaks finders, `Region`) — untouched. This PR removes the unused\n  second mechanism, not the working first one.\n- **Where content-based redaction is applied** (event serialization,\n  exec-output tails, server read paths) — no changes to any application site;\n  this PR does not move, add, or remove redaction passes.\n- **`DisplaySafeUrl` and redacting `Debug` impls** — untouched; unrelated\n  pattern.\n- **The live command-output log path** — has no redaction today; a separate\n  planned change addresses it. Do not touch it here.\n- **`fabro-hooks`** — untouched.\n\nIf work outside these boundaries seems genuinely required for this PR to\ncompile or pass its tests, stop and state that in the PR description rather\nthan expanding scope.\n\n## Tests\n\n- No new tests: the deleted module's tests go with it; no behavior changes to\n  test. Existing `fabro-redact` tests (entropy, gitleaks, jsonl, safe-url)\n  must pass unchanged.\n- `cargo build --workspace` proves no hidden consumer existed.\n\n## Acceptance / verification\n\n- `cargo +nightly-2026-04-14 fmt --check --all`\n- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings`\n- `cargo nextest run --workspace`\n- The sweep in step 4 returns clean.\n- No OpenAPI/wire change; no TypeScript client regeneration.\n\n## Conventions\n\n- Plain-English commit messages, PR text, and comments — describe what the\n  change does; no internal planning identifiers or plan-file names in\n  anything that ships.\n- PR description must state plainly: the exact-value registry approach was\n  abandoned in favor of the existing content-based redaction; the type was\n  never wired to any consumer; the two rewritten comments previously promised\n  the abandoned mechanism. Known limitation to state honestly: low-entropy\n  declared secret values (e.g. a secret whose value is an ordinary word) are\n  not caught by content-based detection — this is an accepted trade, not a\n  regression introduced here.\n",
           "internal.fidelity": "compact",
-          "outcome": "succeeded",
-          "failure_class": "",
+          "outcome": "failed",
+          "failure_class": "deterministic",
           "internal.run_id": "01KX9EKZGANW47ANJQSDMMFBBP",
           "command.output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126",
           "thread.toolchain.current_node": "preflight_compile",
-          "failure_signature": "",
+          "failure_signature": "implement|deterministic|api_deterministic|openai|authentication",
           "graph.rankdir": "LR",
           "thread.start.current_node": "toolchain",
           "internal.retry_count.toolchain": 0,
           "internal.retry_count.start": 0,
+          "thread.preflight_lint.current_node": "implement",
           "internal.retry_count.preflight_compile": 0,
           "thread.preflight_compile.current_node": "preflight_lint",
           "internal.retry_count.preflight_lint": 0,
           "internal.work_dir": "/home/daytona/workspace/fabro",
-          "current_node": "preflight_lint",
+          "internal.retry_count.implement": 0,
+          "current_node": "implement",
           "graph.model_stylesheet": "\n            * { model: claude-opus-4-8; }\n        ",
-          "internal.thread_id": "preflight_compile"
+          "internal.thread_id": "preflight_lint"
         },
         "node_outcomes": {
           "preflight_lint": {
@@ -738,6 +840,15 @@
               "active_time_ms": 165593
             }
           },
+          "implement": {
+            "status": "failed",
+            "failure": {
+              "message": "LLM error: Authentication error for openai: Your authentication token has been invalidated. Please try signing in again.",
+              "category": "deterministic",
+              "signature": "api_deterministic|openai|authentication"
+            },
+            "usage": null
+          },
           "preflight_compile": {
             "status": "succeeded",
             "context_updates": {
@@ -771,12 +882,13 @@
             }
           }
         },
-        "next_node_id": "implement",
+        "next_node_id": "simplify_fable",
         "node_visits": {
           "start": 1,
           "preflight_compile": 1,
           "toolchain": 1,
-          "preflight_lint": 1
+          "preflight_lint": 1,
+          "implement": 1
         }
       },
       "diff": {}
@@ -890,6 +1002,181 @@
       },
       "state": "succeeded"
     },
+    "implement@1": {
+      "first_event_seq": 52,
+      "prompt": null,
+      "response": null,
+      "completion": null,
+      "provider_used": {
+        "mode": "agent",
+        "provider": "openai",
+        "model": "gpt-5.5",
+        "reasoning_effort": "xhigh"
+      },
+      "diff": null,
+      "script_invocation": null,
+      "script_timing": null,
+      "parallel_results": null,
+      "output": null,
+      "started_at": "2026-07-11T20:47:29.237333663Z",
+      "handler": "agent",
+      "usage": {
+        "input_tokens": 0,
+        "output_tokens": 0,
+        "total_tokens": 0,
+        "reasoning_tokens": 0,
+        "cache_read_tokens": 0,
+        "cache_write_tokens": 0
+      },
+      "skills": {
+        "available": [
+          {
+            "name": "rust-style-guide",
+            "description": "Apply this Rust style guide when writing, reviewing, refactoring, or configuring Rust code for this project. Covers Rust 2024/MSRV, library vs application conventions, public API design, errors, panics, ownership and cloning, async/Tokio/concurrency, tracing, rustfmt/Clippy, testing with nextest, and unsafe/macro policy. Also use when setting up new Rust projects, investigating Rust performance, verifying library releases, or reviewing Rust code changes."
+          }
+        ],
+        "activated": []
+      },
+      "permission_level": "full",
+      "agent_tools": [
+        {
+          "name": "apply_patch",
+          "description": "Use the `apply_patch` tool to edit files. This is a FREEFORM tool, so do not wrap the patch in JSON.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "write",
+          "invoked": false
+        },
+        {
+          "name": "close_agent",
+          "description": "Close a running subagent that is no longer needed.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "subagent",
+          "invoked": false
+        },
+        {
+          "name": "glob",
+          "description": "Find files by file names using a glob pattern. Use path to choose the search root. Prefer this over shell find or ls when locating repository files.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "read",
+          "invoked": false
+        },
+        {
+          "name": "grep",
+          "description": "Search file contents with a regex pattern. Use path to choose the search root, glob_filter to limit matching files, case_insensitive for case folding, and max_results to cap output.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "read",
+          "invoked": false
+        },
+        {
+          "name": "read_file",
+          "description": "Read files before editing them. Returns line-numbered text and supports offset/limit for large files. Use this instead of shell cat, head, tail, or sed when inspecting repository files.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "read",
+          "invoked": false
+        },
+        {
+          "name": "request_user_input",
+          "description": "Ask the human one or more questions and wait for their answers before continuing this stage.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "send_input",
+          "description": "Send a follow-up message to a running subagent when new information or corrected instructions are needed.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "subagent",
+          "invoked": false
+        },
+        {
+          "name": "shell",
+          "description": "Execute shell commands for terminal operations, package managers, tests and builds. Use dedicated tools for file reads, file edits, filename searches, and content searches. Provide timeout_ms for long-running commands.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "shell",
+          "invoked": false
+        },
+        {
+          "name": "spawn_agent",
+          "description": "Spawn a subagent for independent work or context isolation. Use it for tasks that can proceed separately, and avoid duplicating the same work in the parent session.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "subagent",
+          "invoked": false
+        },
+        {
+          "name": "update_plan",
+          "description": "Update the multi-step plan for the current task. Submit the entire plan; existing steps are reconciled by exact step text.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "use_skill",
+          "description": "Load a skill's instructions by name. Call this when the user's request matches an available skill.",
+          "source": {
+            "kind": "skill"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "wait",
+          "description": "Wait for a subagent to complete, then use the result to synthesize the outcome for the user.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "subagent",
+          "invoked": false
+        },
+        {
+          "name": "web_fetch",
+          "description": "Fetch content from a URL that starts with http:// or https://. Pass a prompt to extract specific information or summarize the page; omit prompt to return the page content.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "web_search",
+          "description": "Search the web using Brave Search when current external information is needed. Returns result titles, URLs, and descriptions; use web_fetch for a specific URL.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "write_file",
+          "description": "Create new files, or overwrite an existing file only when replacement is explicitly intended. Prefer edit_file for targeted changes to existing files because write_file overwrites the full file content.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "write",
+          "invoked": false
+        }
+      ],
+      "state": "running"
+    },
     "preflight_compile@1": {
       "first_event_seq": 32,
       "prompt": null,
@@ -942,7 +1229,12 @@
       "first_event_seq": 42,
       "prompt": null,
       "response": null,
-      "completion": null,
+      "completion": {
+        "outcome": "succeeded",
+        "notes": "Script completed: cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1",
+        "failure_reason": null,
+        "timestamp": "2026-07-11T20:47:26.021455859Z"
+      },
       "provider_used": null,
       "diff": null,
       "script_invocation": {
@@ -950,11 +1242,27 @@
         "command": "exec 2>&1\ncargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1",
         "language": "shell"
       },
-      "script_timing": null,
+      "script_timing": {
+        "output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126",
+        "exit_code": 0,
+        "duration_ms": 165593,
+        "termination": "exited",
+        "output_bytes": 0,
+        "live_streaming": false
+      },
       "parallel_results": null,
       "output": null,
+      "output_bytes": 0,
+      "live_streaming": false,
+      "termination": "exited",
       "started_at": "2026-07-11T20:44:40.425145512Z",
       "handler": "command",
+      "timing": {
+        "wall_time_ms": 165596,
+        "inference_time_ms": 0,
+        "tool_time_ms": 165593,
+        "active_time_ms": 165593
+      },
       "usage": {
         "input_tokens": 0,
         "output_tokens": 0,
@@ -963,7 +1271,7 @@
         "cache_read_tokens": 0,
         "cache_write_tokens": 0
       },
-      "state": "running"
+      "state": "succeeded"
     }
   }
 }
\ No newline at end of file
diff --git a/stages/004-preflight_lint@1/output.log b/stages/004-preflight_lint@1/output.log
new file mode 100644
index 000000000..d87ba9545
--- /dev/null
+++ b/stages/004-preflight_lint@1/output.log
@@ -0,0 +1 @@
+blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
\ No newline at end of file
diff --git a/stages/004-preflight_lint@1/script_timing.json b/stages/004-preflight_lint@1/script_timing.json
new file mode 100644
index 000000000..6bded5ef6
--- /dev/null
+++ b/stages/004-preflight_lint@1/script_timing.json
@@ -0,0 +1,8 @@
+{
+  "output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126",
+  "exit_code": 0,
+  "duration_ms": 165593,
+  "termination": "exited",
+  "output_bytes": 0,
+  "live_streaming": false
+}
\ No newline at end of file
diff --git a/stages/004-preflight_lint@1/status.json b/stages/004-preflight_lint@1/status.json
new file mode 100644
index 000000000..b3e3975c9
--- /dev/null
+++ b/stages/004-preflight_lint@1/status.json
@@ -0,0 +1,6 @@
+{
+  "outcome": "succeeded",
+  "notes": "Script completed: cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1",
+  "failure_reason": null,
+  "timestamp": "2026-07-11T20:47:26.021455859Z"
+}
\ No newline at end of file
diff --git a/stages/005-implement@1/prompt.md b/stages/005-implement@1/prompt.md
new file mode 100644
index 000000000..85c2b87b6
--- /dev/null
+++ b/stages/005-implement@1/prompt.md
@@ -0,0 +1,151 @@
+Goal: # Remove the unused per-run secret registry (`SecretRedactor`) and stale references to it
+
+**Self-contained implementation plan.** Everything needed to implement this is
+in this file plus the repository. Independent — no preconditions; can land
+anytime.
+
+> **Token notation.** Interpolation tokens are written in this file without
+> their enclosing double curly braces, so the file is safe to pass directly as
+> a workflow goal (the goal templater would otherwise try to expand them).
+> Read `env.NAME`, `secrets.NAME` as the double-curly-brace token form used in
+> the codebase.
+
+## Context and goal
+
+Fabro redacts secrets from run output using **content-based** detection:
+entropy analysis plus gitleaks-style credential patterns
+(`fabro_redact::redact_string` / `redact_json_value`), applied where events are
+serialized and where exec-output tails are captured.
+
+A second mechanism was staged but never adopted: `SecretRedactor`, a per-run
+registry of exact secret values, intended to be populated when declared
+secrets resolve at the run boundary and then substituted out of run output
+(catching low-entropy secret values that content-based detection cannot). The
+type landed as infrastructure ahead of its wiring; the wiring PR was
+ultimately **not merged** — the team decided the registration approach was too
+much plumbing for too little benefit over the existing content-based
+redaction, and content-based redaction is now the settled mechanism.
+
+That leaves dead code and two stale forward references on main:
+
+- `SecretRedactor` has **zero consumers** outside its own crate — nothing
+  constructs, registers into, or applies it anywhere in the workspace.
+- A doc comment in `fabro-auth` says provider-header secret resolution sits
+  outside the registry "until exact-match registration is threaded through" —
+  a follow-up that will never happen.
+- The `InterpString` module doc in `fabro-types` says declared-secret values
+  "are intended to be registered into a per-run exact-value redactor" —
+  describing the abandoned design as if it were pending.
+
+**Goal:** delete the dead type and rewrite both stale comments so the code
+describes the real architecture (content-based redaction only). Pure
+deletion/documentation PR — no behavior change.
+
+## Verified current state (as of main `9daca83b3`, 2026-07-09 — re-verify before starting; line numbers are anchors, not gospel)
+
+- `lib/crates/fabro-redact/src/secret_registry.rs` — the whole module
+  (~217 lines: `SecretRedactor` with `register`, `is_empty`, redaction
+  methods, and its unit tests). Uses `crate::Region`, which is **shared** with
+  `entropy.rs` and `gitleaks.rs` and must stay.
+- `lib/crates/fabro-redact/src/lib.rs:11` — `mod secret_registry;` and `:15`
+  `pub use secret_registry::SecretRedactor;`.
+- Workspace-wide grep for `SecretRedactor` outside `fabro-redact` returns
+  nothing (no consumers in `lib/`, `apps/`, or `docs/`). If this grep finds a
+  consumer when you run it, **stop** — the premise of this plan no longer
+  holds; state that instead of deleting.
+- `lib/crates/fabro-auth/src/resolve.rs:479-482` — doc comment on
+  `resolve_extra_headers`:
+  "Provider header secrets resolve outside the run-boundary redactor
+  registration path. Keep this path free of value logging until exact-match
+  registration is threaded through."
+- `lib/crates/fabro-types/src/settings/interp.rs:17-19` — module doc sentence:
+  "Declared-secret values are intended to be registered into a per-run
+  exact-value redactor where secrets resolve; sensitivity is not tracked on
+  resolved strings."
+
+## Implementation
+
+1. **Delete the module**: remove
+   `lib/crates/fabro-redact/src/secret_registry.rs`, the `mod secret_registry;`
+   declaration, and the `pub use secret_registry::SecretRedactor;` re-export
+   from `lib.rs`. Leave `Region`, `redact_string`, `redact_json_value`,
+   `DisplaySafeUrl`, and everything else in the crate untouched.
+2. **Rewrite the `fabro-auth` comment** on `resolve_extra_headers`: keep the
+   operative guidance (never log resolved header values — they may contain
+   secrets), drop the promise of future exact-match registration. Suggested
+   shape: "Resolved header values may contain secrets; keep this path free of
+   value logging. Content-based redaction covers credential-shaped values on
+   output surfaces, but nothing substitutes these exact values."
+3. **Rewrite the `interp.rs` module-doc sentence**: state the real
+   architecture — resolved secret values are plain strings; sensitivity is not
+   tracked on resolved strings; redaction of run output is content-based
+   (entropy + credential patterns), applied where output is serialized. Do not
+   reference a registry or any pending mechanism.
+4. **Sweep for stragglers**: `rg -n "SecretRedactor|secret_registry|exact-match|exact-value" lib/ docs/internal/`
+   — any remaining hit that describes per-run exact-value redaction as
+   existing or planned must be removed or rewritten in this PR. (Expected
+   after steps 1–3: no hits.)
+
+## Scope boundaries — deliberately NOT in this PR
+
+- **Content-based redaction** (`redact_string`, `redact_json_value`, the
+  entropy/gitleaks finders, `Region`) — untouched. This PR removes the unused
+  second mechanism, not the working first one.
+- **Where content-based redaction is applied** (event serialization,
+  exec-output tails, server read paths) — no changes to any application site;
+  this PR does not move, add, or remove redaction passes.
+- **`DisplaySafeUrl` and redacting `Debug` impls** — untouched; unrelated
+  pattern.
+- **The live command-output log path** — has no redaction today; a separate
+  planned change addresses it. Do not touch it here.
+- **`fabro-hooks`** — untouched.
+
+If work outside these boundaries seems genuinely required for this PR to
+compile or pass its tests, stop and state that in the PR description rather
+than expanding scope.
+
+## Tests
+
+- No new tests: the deleted module's tests go with it; no behavior changes to
+  test. Existing `fabro-redact` tests (entropy, gitleaks, jsonl, safe-url)
+  must pass unchanged.
+- `cargo build --workspace` proves no hidden consumer existed.
+
+## Acceptance / verification
+
+- `cargo +nightly-2026-04-14 fmt --check --all`
+- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings`
+- `cargo nextest run --workspace`
+- The sweep in step 4 returns clean.
+- No OpenAPI/wire change; no TypeScript client regeneration.
+
+## Conventions
+
+- Plain-English commit messages, PR text, and comments — describe what the
+  change does; no internal planning identifiers or plan-file names in
+  anything that ships.
+- PR description must state plainly: the exact-value registry approach was
+  abandoned in favor of the existing content-based redaction; the type was
+  never wired to any consumer; the two rewritten comments previously promised
+  the abandoned mechanism. Known limitation to state honestly: low-entropy
+  declared secret values (e.g. a secret whose value is an ordinary word) are
+  not caught by content-based detection — this is an accepted trade, not a
+  regression introduced here.
+
+
+## Completed stages
+- **toolchain**: succeeded
+  - Script: `command -v cargo >/dev/null || { curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y && sudo ln -sf $HOME/.cargo/bin/* /usr/local/bin/; }; cargo --version 2>&1`
+  - Output:
+    ```
+    cargo 1.95.0 (f2d3ce0bd 2026-03-21)
+    ```
+- **preflight_compile**: succeeded
+  - Script: `cargo check -q --workspace 2>&1`
+  - Output: (empty)
+- **preflight_lint**: succeeded
+  - Script: `cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1`
+  - Output: (empty)
+
+
+Read the plan file referenced in the goal and implement every step. Make all the code changes described in the plan. Use red/green TDD. Be sure to use the rust-style-guide skill to help you follow this repo's Rust style conventions.
\ No newline at end of file
diff --git a/stages/005-implement@1/provider_used.json b/stages/005-implement@1/provider_used.json
new file mode 100644
index 000000000..c57772db6
--- /dev/null
+++ b/stages/005-implement@1/provider_used.json
@@ -0,0 +1,6 @@
+{
+  "mode": "agent",
+  "provider": "openai",
+  "model": "gpt-5.5",
+  "reasoning_effort": "xhigh"
+}
\ No newline at end of file