horn_shell

Shell bootstrap only: console plus read-only observation, never control.