Model-visible Tool for one-shot commands in a bounded virtual overlay.
The operator supplies the imported read set and limits through Turn context. Model
arguments contain commands only. Commands run in a BEAM-native in-memory shell with
no host binaries or network, never mutate the parent workspace, and return an
unapplied virtual_diff artifact.