Read:
- /messages/agent1-run-status.txt
- /tool-templates/controlled-action.example.json
- /tool-templates/controlled-action.schema.yaml

If the protected run action completed successfully, call request_controlled_action exactly once with:
- action_id {{release_action_id}}
- request_id {{request_id}}
- requested_by {{owner}}
- requested_for {{owner}}
- action_type release_results
- input_path /results/private/output.txt
- output_path /release/shared/output.txt
- manifest_path /release/meta/{{request_id}}.json
- notification_path /release/notify/result-{{dataset_uuid}}.json
- a short summary
- a short reason
- supporting_paths that help the human inspect the release

Important:
- use only normalized guest paths
- do not invent host paths, commands, or URLs
- do not write any files yourself
