Workbench Capy VM Lane

Use this skill only when an issue declares EXECUTION_TARGET: capy-vm or asks for isolated GUI/browser/sandbox execution.

Required Checks

Before execution:

1. Confirm the issue has VM_LEASE.
2. Confirm secrets_policy.
3. Confirm network_policy.
4. Confirm ARTIFACTS_REQUIRED.
5. Confirm TEARDOWN.

If any field is missing, return BLOCKED with the smallest missing field list.

Default Policy