Runs app on the modal shell

- review/render (visit 1): pass, then render-pr: exit 0
- render-pr (visit 1): pass, then open-pr: exit 0
- open-pr (visit 1): pass, then wait-pr: exit 0
- wait-pr (visit 1): pass, then pr-green: held after 32 checks
- pr-green (visit 1): pass, then signoff: exit 0
- signoff (visit 1): pass, then rebase: approved by rule autonomous
- rebase (visit 1): pass, then wait-rebased: exit 0
- wait-rebased (visit 1): pass, then rebased-green: held after 23 checks
- rebased-green (visit 1): pass, then land: exit 0
- land (visit 1): pass, then wait-landed: exit 0
- wait-landed (visit 1): pass, then landed-green: held after 55 checks
- landed-green (visit 1): pass, then rebase-merge: exit 0
- rebase-merge (visit 1): pass, then wait-rebased-merge: exit 0
- wait-rebased-merge (visit 1): pass, then rebased-merge-green: held after 1 checks
- rebased-merge-green (visit 1): pass, then merge: exit 0
- merge (visit 1): pass, then wait-main: exit 0
- wait-main (visit 1): pass, then main-green: held after 1 checks
- main-green (visit 1): pass, then close-out: exit 0
- close-out (visit 1): pass, then ship: exit 0
- ship (visit 1): pass, then end: exit 0

## Leaves

- runs-app-glance (step build/build): passed: attempt 1: verifier passed
  - attempt 1 builder, session 7200a9ff-16f2-489d-ada5-01a1aaa0676d: pass (said done)
  - attempt 1 verifier, session a5dbd61d-c557-4135-a8c8-01a1aaa48fcc: pass (Evidence written by the verifier)
- runs-app-glance (step review/review): open
  - attempt 2 fixer in cycle 2, session 0cd3dd43-9304-4e7a-907e-01a1aab80950: pass (said done)
  - attempt 2 verifier in cycle 2, session 8cb3cee5-863c-48c5-83dc-01a1aaba9b74: pass (Evidence written by the verifier)

## Checks

- compliance (step review/review): passed after 1 cycle
  - cycle 1: passed, check session a7872661-f4b9-4fec-a5bc-01a1aaa99816 pass (said done)
  - round 1 (cycle 1): no findings
- quality (step review/review): passed after 1 cycle
  - cycle 1: passed, check session 385c3abf-159c-4cf7-b005-01a1aaaa6349 pass (said done)
  - round 1 (cycle 1): 3 findings, 0 confirmed
    - f1 minor at internal/tui/runsapp/runsapp_test.go:1: No unit test covers a run.ls error (the 'rhiza: …' line in body) or the hours branch of elapsed (elapsed %dh%02dm%02ds); both paths are untested.
    - f2 nit at internal/tui/runsapp/runsapp.go:80: On a failed reload (run error or bad JSON) load returns before resetting rows, so the panel shows the error above the previous load's runs; intended or not, it is undocumented.
    - f3 nit at internal/tui/runsapp/runsapp.go:125: Model.Component() is never called: cmd/rhiza wraps the model with modalshell.New directly, and *Model already satisfies modalshell.Component.
- qa (step review/review): passed after 2 cycles
  - cycle 1: failed, check session 840da7aa-fd11-4e53-a3c9-01a1aaaad3e2 pass (said done), critic session aae2e522-ce04-4e0c-adbe-01a1aab5ac38 pass (said done)
  - cycle 2: passed, check session d7b0bf18-5457-4434-aa42-01a1aabdc142 pass (said done)
  - round 1 (cycle 1): 2 findings, 1 confirmed
    - f1 major at .rhiza/rendered/capability/rhiza/live-app-runs.md:1: The change set's intent says it retires the capabilities of the old live app it replaces, but live-app-runs and live-app-focus are still active and unretired. They still describe internal/tui/liveapp, `rhiza tui app live` and enter-to-focus, which this change removes: the built binary now answers `rhiza tui app live --once` with exit 4, unknown app "live". The change set should retire both. — confirmed: The intent says the change set retires the old live app's capabilities, but its log entries only create runs-app-glance and its evidence; there is no retire op. rhiza show reports live-app-runs and live-app-focus with retired false, and both still describe internal/tui/liveapp (deleted in this diff) and rhiza tui app live, which a build at HEAD rejects: 'unknown app "live"', exit 4.
    - f2 minor at internal/tui/healthapp/healthapp.go:168 on runs-app-glance: Hands-on: in `rhiza tui app health`, enter on the daemon row opens the Runs panel, but the health report's first three lines (header, daemon row, built-from line) stay drawn above it. The modal shell isn't sized when healthapp hosts it as a child. The base binary's live app replaced the whole screen.
  - round 2 (cycle 2): no findings
- scope (step review/review): passed after 2 cycles
  - cycle 1: failed, check session b76b68d7-8fb0-4749-a8a0-01a1aaab4777 pass (said done), critic session c39a02e1-783b-439e-a13f-01a1aab5eeac pass (said done)
  - cycle 2: passed, check session d6ea880b-4c08-4a5c-b550-01a1aabdea96 pass (said done)
  - round 1 (cycle 1): 1 finding, 1 confirmed
    - f1 major at .rhiza/rendered/capability/rhiza/live-app-runs.md:1 on runs-app-glance: The intent includes 'retiring the capabilities of the old live app it replaces', but the change set neither retires live-app-runs (01M686V969) nor live-app-focus (01M686VAPN). internal/tui/liveapp, which both describe, is deleted, along with enter-to-focus, so the model now states behaviour that no longer exists. Every code change (runsapp, tui.go wiring, healthapp's live->runs, renamed testscript, rex-install key) is inside the intent. Nothing found outside it. — confirmed: The intent explicitly includes retiring the old live app's capabilities. The change set's log holds only the runs-app-glance leaf add, its evidence and propose/accept, with no retire op. rhiza show still has live-app-runs (01M686V969) and live-app-focus (01M686VAPN) in the to-be view, both describing internal/tui/liveapp and `rhiza tui app live`, which this diff deletes (liveapp.go and liveapp_test.go removed, and the testscript renamed to tui-runs-app). So the model now states behaviour that is gone.
  - round 2 (cycle 2): no findings
- model (step review/review): passed after 2 cycles
  - cycle 1: failed, check session 7af62208-3015-4af2-9fb4-01a1aaabcbf1 pass (said done), critic session 69fc9eb8-676f-40a6-87c4-01a1aab64c9f pass (said done)
  - cycle 2: passed, check session 7faca2f8-82d7-4359-92f4-01a1aabe1ff3 pass (said done)
  - round 1 (cycle 1): 5 findings, 3 confirmed
    - f1 major at .rhiza/rendered/capability/rhiza/live-app-runs.md:1: The intent says this change set retires the capabilities of the old live app it replaces, but live-app-runs (01M686V969) is still live and unretired. Its code, internal/tui/liveapp, is deleted in ff652bac, and `rhiza tui app live` no longer exists, so the model still claims a live app with a daemon state, leaves count and checks that nothing implements. Retire it in this change set, superseded by runs-app-glance. — confirmed: internal/tui/liveapp is deleted in ff652bac and the change set's log writes contain no retire of live-app-runs (01M686V969); rhiza show reports it unretired. The intent explicitly says the change set retires the old live app's capabilities, so the model now states a daemon/leaves/checks live app nothing implements.
    - f2 major at .rhiza/rendered/capability/rhiza/live-app-focus.md:1: live-app-focus (01M686VAPN), where enter on a live run focuses its Rex tab through run.open, is not retired. The runs app is read-only and calls only run.ls (internal/tui/runsapp/runsapp.go:34), so this capability is now false. The intent requires retiring the old live app's capabilities. — confirmed: The old liveapp called run.open on enter (liveapp.go:247 at ff652bac^); runsapp.go:34 uses only run.ls with no enter action. live-app-focus (01M686VAPN) is unretired and no write in the change set touches it, contrary to the intent.
    - f3 major at .rhiza/rendered/capability/rhiza/orchestration/daemon/run-log.md:1: run-log (01M6FESK5T) still says 'a key in the live app opens the selected run's log in a Rex layer', and its acceptance asks for a live-app unit test. The live app and that key are deleted, and runsapp has no such key, so the capability's live-app half no longer holds. Revise it to drop the live-app clause (rhiza run log itself stays). — confirmed: The deleted liveapp had the 'l' key opening rhiza run log in a layer (liveapp.go:228,268 at ff652bac^); runsapp has no such key. run-log's statement and acceptance still require that live-app key and its unit test, and the change set does not revise it, so the model no longer matches the code.
    - f4 minor at .rhiza/rendered/capability/rhiza/workflows/workflow-runs/run-status/run-status-open-cycle.md:1: run-status-open-cycle's statement and acceptance still say 'the live app counts it running' and ask for a Go test of the live app's checks summary. That code was removed with internal/tui/liveapp, and runsapp shows no checks. Revise it to drop the live-app clause.
    - f5 minor at .rhiza/rendered/decision/live-app-name-and-op.md:1: Decision live-app-name-and-op ('The runs view is the live app') is overtaken by tui-five-apps, under which the app is now named runs. Once its capabilities are retired, it should be retired or superseded by tui-five-apps so the model does not keep stating the old name.
  - round 2 (cycle 2): 3 findings, 0 confirmed
    - f1 minor at .rhiza/rendered/capability/rhiza/orchestration/daemon/daemon-status/health-command/health-app.md:11: health-app still says enter opens 'the inbox, live or autonomy app'; this change set makes the daemon part open the runs app (internal/tui/healthapp/healthapp.go:40, TestEnterOnDaemonOpensRunsApp). The statement should name the runs app.
    - f2 minor at .rhiza/rendered/capability/rhiza/workflows/workflow-runs/run-status/run-status-open-cycle.md:11: run-status-open-cycle's statement and acceptance still say 'the live app counts it running' and ask for a Go test of the live app's checks summary; that code went with internal/tui/liveapp and runsapp shows no checks. Drop the live-app clause (reported in cycle 1 as f4, still open).
    - f3 minor at .rhiza/rendered/decision/live-app-name-and-op.md:1: Decision live-app-name-and-op ('The runs view is the live app') is still active though the app is now named runs under tui-five-apps; retire it or mark it superseded (cycle 1 f5, still open).

## Change-set fixes

- cycle 2 (step review/review): fixer session b3cf9709-0797-4ed2-985c-01a1aabadc05: pass, commit a7f310d01268 (said done)

## Code checks

- step review/code: pass

## Sign-offs

- signoff (visit 1): approved by rule autonomous

## Sessions

- build/build, session 7200a9ff-16f2-489d-ada5-01a1aaa0676d: tokens input 28, output 9715, cache creation 68513, cache read 977625; helper tokens input 0, output 0, cache creation 0, cache read 0
- build/build, session a5dbd61d-c557-4135-a8c8-01a1aaa48fcc: tokens input 14, output 2441, cache creation 30984, cache read 358545; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session a7872661-f4b9-4fec-a5bc-01a1aaa99816: tokens input 14, output 1542, cache creation 33718, cache read 372476; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 385c3abf-159c-4cf7-b005-01a1aaaa6349: tokens input 20, output 3475, cache creation 38923, cache read 575512; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 840da7aa-fd11-4e53-a3c9-01a1aaaad3e2: tokens input 52, output 10875, cache creation 53008, cache read 1744868; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session b76b68d7-8fb0-4749-a8a0-01a1aaab4777: tokens input 14, output 2157, cache creation 37342, cache read 372374; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 7af62208-3015-4af2-9fb4-01a1aaabcbf1: tokens input 24, output 4152, cache creation 49361, cache read 752375; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session aae2e522-ce04-4e0c-adbe-01a1aab5ac38: tokens input 18, output 2503, cache creation 31265, cache read 465697; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session c39a02e1-783b-439e-a13f-01a1aab5eeac: tokens input 14, output 2156, cache creation 29534, cache read 347413; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 69fc9eb8-676f-40a6-87c4-01a1aab64c9f: tokens input 18, output 2364, cache creation 29135, cache read 456693; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 0cd3dd43-9304-4e7a-907e-01a1aab80950: tokens input 16, output 2251, cache creation 27685, cache read 399513; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 8cb3cee5-863c-48c5-83dc-01a1aaba9b74: tokens input 26, output 3849, cache creation 32459, cache read 691548; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session b3cf9709-0797-4ed2-985c-01a1aabadc05: tokens input 16, output 2392, cache creation 28056, cache read 401584; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session d7b0bf18-5457-4434-aa42-01a1aabdc142: tokens input 40, output 7333, cache creation 36064, cache read 1144148; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session d6ea880b-4c08-4a5c-b550-01a1aabdea96: tokens input 14, output 2175, cache creation 37808, cache read 371985; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 7faca2f8-82d7-4359-92f4-01a1aabe1ff3: tokens input 20, output 3760, cache creation 55990, cache read 658897; helper tokens input 0, output 0, cache creation 0, cache read 0

Totals: tokens input 348, output 63140, cache creation 619845, cache read 10091253; helper tokens input 0, output 0, cache creation 0, cache read 0