Independent JSON-defined observation. The daemon delivers evidence, not Agent execution or user-channel verdicts.
Observation
File polling, one-off at, monotonic intervals and five-field cron with explicit IANA timezone.
Sources/detectors/handlers/routes belong to the saved versioned JSON definition.
Lifecycle
User-local durable registry, cursors and delivery recovery; --directory isolates the same implementation.
Caller-chosen stable management identity; not authentication and not a destination restriction.
Unknown/interrupted effects stay fenced; source cancellation does not undo accepted receiver work.
Integration
The application capability ensures daemon availability and calls the public CLI; no embedded host service.
Enqueue acknowledges durable intake; prompt has its explicit live-turn boundary. Neither implies user chat delivery.