[Integration]: AURA-native coat ops — Skillware bundles for membrane-level cross-cutting skills

[rosspeili]

Area

coat ops

Kind

enhancement

Description

Skillware bundles the membrane invokes for coat-level ops regardless of inner runtime:

Coat op (examples)	Purpose
Token limiter / budget	Limit before body burns compute
Mail / notify	Escalation playbooks (38)
Prompt compressor	Middleware op — not full context engine
Injection firewall	Pre-ingress or pre-egress scan
Export formatter	Post-session transform

Architecture:

• Body skills: user's loop via SkillwareHost / ToolHost (ToolHost protocol) inside cavity
• Coat skills: bound at session open via type plugin arpa.skills.bundle on membrane context; emit spine events; never bypass egress

Default profile may recommend coat skill ids; wrapping LangGraph without Skillware body still enables coat ops when [skillware] installed.

Repro or pipeline spec (optional)

Session open binds coat bundle aura/ops/limit + aura/ops/notify; integration test verifies coat execute() routes through guarded_tool_call even when body is plain Python.

[rosspeili]

Status update (Sep 2026): spectrum.level bind shipped (#76). spectrum.services[] runtime activation (auto-attach from service list) is not shipped — new follow-up issue being filed. Coat ops can use level bind + explicit observers[] today.