diff --git a/Cargo.lock b/Cargo.lock
index f87f82b..2de8bc8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -270,7 +270,7 @@ dependencies = [
  "ardur-session-journals",
  "axum 0.8.9",
  "axum-test",
- "base64 0.22.1",
+ "base64 0.23.0",
  "chrono",
  "clap",
  "maud",
@@ -357,7 +357,7 @@ dependencies = [
  "ardur-runtime",
  "ardur-tool-registry",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.0",
  "serde",
  "serde_json",
  "thiserror 2.0.18",
@@ -455,6 +455,7 @@ dependencies = [
  "ardur-cost-gate",
  "ardur-cron",
  "ardur-cron-ui",
+ "ardur-durability",
  "ardur-embeddings",
  "ardur-fused-runtime",
  "ardur-memory",
@@ -466,13 +467,14 @@ dependencies = [
  "ardur-webhook",
  "assert_cmd",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.0",
  "biscuit-auth",
  "cargo-lock",
  "chrono",
  "clap",
  "comrak",
  "crossterm",
+ "flate2",
  "futures",
  "hex",
  "ignore",
@@ -488,6 +490,7 @@ dependencies = [
  "serde_json",
  "sha2 0.11.0",
  "syntect",
+ "tar",
  "tempfile",
  "thiserror 2.0.18",
  "tokio",
@@ -567,6 +570,36 @@ dependencies = [
  "uuid",
 ]
 
+[[package]]
+name = "ardur-delegate-tool"
+version = "0.0.1"
+dependencies = [
+ "anyhow",
+ "ardur-cap-token",
+ "ardur-cost-gate",
+ "ardur-multi-agent",
+ "ardur-receipt",
+ "ardur-runtime",
+ "ardur-tool-registry",
+ "async-trait",
+ "serde",
+ "serde_json",
+ "thiserror 2.0.18",
+ "tokio",
+ "uuid",
+]
+
+[[package]]
+name = "ardur-durability"
+version = "0.0.1"
+dependencies = [
+ "rustix",
+ "tempfile",
+ "thiserror 2.0.18",
+ "tracing",
+ "uuid",
+]
+
 [[package]]
 name = "ardur-e2e-tests"
 version = "0.0.0"
@@ -675,7 +708,7 @@ dependencies = [
  "assert_matches",
  "async-stream",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.0",
  "biscuit-auth",
  "futures",
  "libc",
@@ -697,23 +730,6 @@ dependencies = [
  "serde",
 ]
 
-[[package]]
-name = "ardur-governance"
-version = "0.0.1"
-dependencies = [
- "ardur-cap-token",
- "ardur-receipt",
- "base64 0.22.1",
- "chrono",
- "p256 0.13.2",
- "rand_core 0.6.4",
- "serde",
- "serde_json",
- "sha2 0.11.0",
- "thiserror 2.0.18",
- "uuid",
-]
-
 [[package]]
 name = "ardur-health"
 version = "0.0.1"
@@ -793,19 +809,6 @@ dependencies = [
  "uuid",
 ]
 
-[[package]]
-name = "ardur-loop-detector"
-version = "0.0.1"
-dependencies = [
- "ardur-receipt",
- "proptest",
- "serde",
- "serde_json",
- "sha2 0.11.0",
- "thiserror 2.0.18",
- "uuid",
-]
-
 [[package]]
 name = "ardur-media-audio"
 version = "0.0.1"
@@ -816,7 +819,7 @@ dependencies = [
  "ardur-runtime",
  "ardur-tool-registry",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.0",
  "hex",
  "reqwest 0.12.28",
  "serde",
@@ -848,7 +851,7 @@ dependencies = [
  "ardur-runtime",
  "ardur-tool-registry",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.0",
  "hex",
  "reqwest 0.12.28",
  "serde",
@@ -1072,7 +1075,7 @@ name = "ardur-receipt"
 version = "0.0.1"
 dependencies = [
  "ardur-core-types",
- "base64 0.22.1",
+ "base64 0.23.0",
  "once_cell",
  "p256 0.13.2",
  "rand_core 0.6.4",
@@ -1123,6 +1126,8 @@ dependencies = [
  "ardur-channel-matrix",
  "ardur-channel-telegram",
  "ardur-cost-gate",
+ "ardur-delegate-tool",
+ "ardur-durability",
  "ardur-fused-runtime",
  "ardur-hooks-openclaw-compat",
  "ardur-media-audio",
@@ -1274,7 +1279,7 @@ dependencies = [
  "ardur-runtime",
  "ardur-tool-registry",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.0",
  "regex",
  "reqwest 0.12.28",
  "serde",
@@ -1294,7 +1299,7 @@ dependencies = [
  "ardur-receipt",
  "async-trait",
  "axum 0.8.9",
- "base64 0.22.1",
+ "base64 0.23.0",
  "chrono",
  "hex",
  "hmac 0.13.0",
@@ -1722,6 +1727,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b25655df2c3cdd83c5e5b293b88acd880332b2ddadd7c30ac43144fdc0033da9"
+
 [[package]]
 name = "base64ct"
 version = "1.8.3"
@@ -3809,6 +3820,16 @@ version = "0.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "64cd1e32ddd350061ae6edb1b082d7c54915b5c672c389143b9a63403a109f24"
 
+[[package]]
+name = "filetime"
+version = "0.2.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c287a33c7f0a620c38e641e7f60827713987b3c0f26e8ddc9462cc69cf75759"
+dependencies = [
+ "cfg-if",
+ "libc",
+]
+
 [[package]]
 name = "find-msvc-tools"
 version = "0.1.9"
@@ -9222,6 +9243,17 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "tar"
+version = "0.4.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f6221d9a6003c78398e3b239969f352578258df48c8eb051caadae0015bc840"
+dependencies = [
+ "filetime",
+ "libc",
+ "xattr",
+]
+
 [[package]]
 name = "teloxide"
 version = "0.17.0"
@@ -10820,6 +10852,16 @@ dependencies = [
  "zeroize",
 ]
 
+[[package]]
+name = "xattr"
+version = "1.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156"
+dependencies = [
+ "libc",
+ "rustix",
+]
+
 [[package]]
 name = "xxhash-rust"
 version = "0.8.15"
diff --git a/Cargo.toml b/Cargo.toml
index c7a6f2e..e5ce750 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -111,7 +111,7 @@ hex = "0.4"
 # Secret custody for the Slack bot token + signing secret (crates/slack-adapter,
 # §4.1) — keeps them out of Debug/log output behind `SecretString`.
 secrecy = "0.10"
-base64 = "0.22"
+base64 = "0.23"
 # Race-resistant Unix opens for private state and exported session bundles.
 libc = "0.2"
 # Descriptor-relative directory traversal for journal paths; prevents parent