[SaladDay]

Summary

Pure deletion of Core Go code, fields, queries and doc text that nothing uses. Two commits: the Core workspace protocol change (workspacefs.Control.Observe) stands alone.

Removed:

• responseHeadersWithErrors, microsandbox Labels.
• Domain Reader interfaces used only in var _ assertions (adminaudit, agents, environmenttemplates, files, modelconfiguration, projects, writeaudit); the unused sessions reader families (Admin, Artifact, ExecutorCredential, Item, Subagent) and ListSessions, SessionStreamSnapshot, SessionEventCursor, ListSessionEvents, GetTurnDiagnosticsSnapshot, GetManagedSessionArchive, ListTurns and ArchivedCancellationReceipt from the interface sessions.Reader composes; deployment SampleHostHistory/NodeAllocations, vaults GetVault and skills Version interface methods.
• Device WorkspaceID chain and the bootstrap workspace_id/protocol_version fields; the unread heartbeat ts, active_requests, daemon_version (Runtime protocol 0.22.0) and HeartbeatStatus.Liveness.
• Write-only fields: NewAllocation.EnvironmentID, SweepResult times (and Sampler.now), EnrolledRuntimeBinding.SessionID, EnvironmentFileWrite.EnvironmentID/SessionID; TurnEvent moved into its integration test.
• request_timeout provider observation category and diagnostic code, and the system provisioning step.
• Migration 000004: drops view public_execution_turns and the request_timeout value of deployment_provider_error_code.
• workspacefs.Control.Observe (own commit); the NFS Filesystem.Observe stays because Resolve calls it.
• Doc fixes: Core errors anchor, IMPLEMENTATION.md limits/throttling links and the false web_search sentence.

Kept (production uses or tests are the only observation of persisted state): coreErrorResponse (type-assertion marker), Policy.Declarations (10+ execution and integration tests inject custom Harness declarations), Allocation.ObservationError/ComputeWakeRequested and EnvironmentRun.Turn (asserted by concurrency and diagnostic tests), StoredNode.ReadyGeneration (read in nodes.go), EnrollmentResponse.Connected/ProviderReady (read by deploy/node/node_install.py), provisioning step file (produced by runtime initialization), vaults.Reader.ListVaults/GetCredential/ListCredentials (called through the interface by pg tests / service).

Checks

• go build ./..., go vet ./...: pass
• go test: api, sessions, execution, deployment/..., vaults, skills, runtimegateway, runtimeobs, runtimedevice, runtimeenrollment, modelconfiguration, workspaces, workspacefs/..., sandbox/microsandbox, cmd/..., internal/agentdaemon/..., apps/daemon transport and cli: pass
• DB: sessionpg (devices, file writes), modelconfigurationpg, and the 24 integration test files touched: pass
• make check-sqlc, make check-openapi: pass
• agents-client pnpm test, web typecheck, pnpm test:web: pass
• website translations test: pass
• deadcode on Core entry points: only coreErrorResponse remains, nothing newly exposed

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}