Every turn passes --model: agy keeps the model last selected in its interface
in internal state, so its own choice is unknown before the turn and could be top-tier
(AUD-P1-7). The deadline and cancellation are runCommand's: it validates timeoutMs,
stops the process and reports timed_out or cancelled, which this result keeps.
Runs one agy turn in its read-only sandbox.