Remote MCP tools, evals as a deploy gate, per-turn budgets, cancellation semantics, and sandboxed code execution.