system

71  execute:72    with:73      steps: ${{ tasks.plan.output.steps }}74    ✦agent:75      # Say what the JOB is. Do NOT describe the output shape.76      #77      # The engine binds `schema:` to the FINAL answer: a free-text answer78      # that does not conform is RE-ASKED with the schema wired, bounded by a79      # retry budget. Measured on ollama/qwen3.5:4b — this task, with zero80      # shape instruction, returns a clean typed object.81      #82      # Hand-instructing "reply with the object, then call nika:done" is83      # actively harmful: a `nika:done` carrying `result:` is validated84      # DIRECTLY and is NEVER re-asked (nika-verb-agent/src/lib.rs · "a miss85      # is a verdict, never a re-ask"), so a model that hands its JSON back86      # as a *string* dies NIKA-INFER-002 with the budget already spent.87      # Measured twice on that exact instruction. Let the engine own shape.88      system: "You are a careful analyst. Work the plan step by step and report what you actually found."   # SLOT89      prompt: "Plan · ${{ with.steps }}"90      tools:                        # SLOT: the MINIMUM grant for the job91        # Pure compute — this pair needs no filesystem, so the skeleton runs92        # anywhere. Granting the agent a tool here is only HALF a grant: every93        # call still crosses the workflow boundary above. Adding `nika:read`94        # to this list WITHOUT adding `permits.fs.read` fails at run with95        # `NIKA-SEC-004 · agent tool "nika:read" refused by the security96        # boundary` — measured, mid-loop, after the turns are paid for.97        - "nika:jq"98        - "nika:done"               # the early-exit sentinel · loop-owned99      max_turns: 15                 # SLOT: the loop bound100      max_tokens_total: 80000       # SLOT: the spend bound101      schema:                       # SLOT: the typed final-message contract102        type: object103        additionalProperties: false104        required: [findings]105        properties:106          findings: { type: array, items: { type: string } }