schedule_task, list_tasks, and cancel_task load their specs from embedded manifests, one folder per tool under crates/rhema-claw/tools; the Rust side keeps only the invoke half. list_tasks declares replay_safety: safe, so a resumed run may re-execute it. Drift tests pin the shipped set: every manifest loads against its builtin, every builtin is named by a manifest, and the registry serves the manifest specs verbatim.