Coding Agent Profile (Stage 17): workspace with path boundaries, patch staging, whitelisted command execution, test-as-judge, bounded fix loop. Third domain profile on the shared Runtime - aiming for the third consecutive zero-change landing (blueprint D9).