The gated task/monitoring surface (monitoring tools, then task LAST — the canonical pre-conversion order). Child-UNSAFE: kept out of tools so child tool pools never draw it.
task
final List<AgentTool> taskSurface;