Incorporates findings from deep-dive audits of all 5 subsystems: - Swarm auction timing bug (sleep(0) instead of 15s) - Docker agent HTTP API partially wired - L402 macaroons are HMAC-only (no caveats/delegation) - Agent sats are bid-only, no settlement occurs - CLI test coverage gap (2 tests for 3 commands) - agent_core persist_memory/communicate are stubs https://claude.ai/code/session_01SZTwAkTg6v4ybv8g9NLxqN