delegate_job writes the prompt to a temp file under the control root's .mam/ and hands the wrapper --prompt-file; the file is removed once the wrapper returns. An OSError from starting the wrapper becomes a failed submit (rc 126) that the existing error branch logs, so the session-busy retry no longer dereferences a missing result. A retry that yields no job id, and a compliance job that cannot be registered, are now logged instead of silent. The collector caps are documented as the size of the evidence a reviewer is shown; delivery has no cap of its own any more. The loop skill notes that a pipeline hides the loop's exit code. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>