Readonly codeThe forged source, already validated; it defines execute(input) or run(input).
Readonly inputThe call's argument. The forge passes it on as JSON.
Readonly globalsThe functions the grant allows, under the global names forged code calls
them by (fetch, fs, crypto). Under a ceiling they are the broker's.
Readonly timeoutThe call's wall-clock limit, in milliseconds.
Readonly memoryMBThe call's memory budget, in megabytes. An executor that cannot enforce it reports usage only.
Optional Readonly signalUnder a ceiling, aborted when the call's handle ends (its deadline or its end). An executor may stop the guest on it; the broker refuses capability calls after it either way.
One call of a forged tool, as the forge hands it to an executor.