Added

Deep Capture can now calibrate an unknown stored target in separate reachability and TLS phases, displaying and confirming every bounded effect before it starts and preserving observed facts, local bundle evidence, and cleanup outcomes.

Deep Capture now has a public library-first session API with side-effect-free preparation, exact-plan authorization, typed lifecycle events and reports, injectable effect adapters, bounded cleanup, and direct controlled verification; the command delegates lifecycle policy to that coordinator.

Capture and Deep Capture can now start an eligible stored direct executable from one prevalidated path, working directory, and argument vector. Deep Capture applies proxy variables only to that child, while warm direct targets and unsafe or stale paths remain side-effect-free refusals.