A low-level safe template runner. Product flows should start from templates and Agent.
No arbitrary code execution. External URL checks are limited to public HTTP(S) addresses.