The architecture, live.

Generation is not permission: the agent can propose a release, but only the CivicShieldPool can certify and execute it.