Run Claude Code as a capability-governed agent on the Astrid OS runtime — WASM capsules (tool broker, native-tool policy gate, installer) plus a Claude Code plugin.