Web tools, configuration changes, and memory retrieval expose the layer beneath the model: context must be connected, bounded, versioned, retrieved, and injected deliberately.
New Runtime reading: These are not three breaking releases. As an evergreen architecture note, they map the control points that determine what an agent can know at each step.
Evidence boundary: this item uses the listed public sources and keeps vendor, author, or reporter claims attributed. The queued page is an editorial synthesis, not an independent validation of every reported metric.