The layer that turns an instruction into a guarantee. Where each event fires in a turn, which ones can block, the exit-code contract, and the asymmetry that lets a hook tighten your permissions but never loosen them.