ADR-0009: Agents run code-mode over the generated SDK

Status: accepted (carried; validated by the-seam — “the SDK is the ABI”, author-blind Actors)

The primary agent substrate is code written against the generated typed SDK; MCP tools are thin single-shot wrappers over the same SDK. Agents are ordinary Actors: capability checks run per call at the seam, never in the prompt. High-risk Actions deny-with-request; human approval becomes control flow. Every run is logged through the Truth plane like any other Actor’s writes — the kernel is author-blind.