Kontrollpflicht der Leitung: Stichproben gegen das Audit (#693)

A lead looks at the runs of the agents it leads - held against the task and
against what the engine stamped, never by asking the agent.

- RunInspector (Core/Inspection): the mechanical check and first profile of
  the inspector foundation (#204). Flags failed runs, tool errors, refusals,
  unfinished calls, tasks answered with bookkeeping alone, and operations the
  agent names but never called in the run (the 2026-09-14 pattern).
- SpotChecks: picks runs per unit (rate, denser for new agents, new models and
  after a failure, daily cap), deterministic by run id; one task per lead.
- Escalation tool: spot_checks, inspect_run, check_done, propose_measure.
  Measures go to a human; nothing is carried out automatically. A security
  suspicion is its own case, not a personnel matter.
- Organisation view: settings per unit, recent checks, measures to decide.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/ClawdDotNet.Core/Engine/AgentEngine.cs

@@ -60,6 +60,9 @@ public sealed class AgentEngine : IAgentMessageRouter, Staging.IFrozenCallExecut
     /// <summary>#687: Approvals by leads within their unit's limits; set by the host.</summary>
     public Staging.ILeadApprovals? LeadApprovals { get; set; }
 
+    /// <summary>#693: The leads' spot checks; set by the host.</summary>
+    public Inspection.ISpotChecks? SpotChecks { get; set; }
+
     /// <summary>
     /// #717: Special budgets. A run on a task in a funded tree draws on the pot instead of the
     /// daily limits; without this, every run counts against the day.
@@ -1874,6 +1877,7 @@ public sealed class AgentEngine : IAgentMessageRouter, Staging.IFrozenCallExecut
             Cases = CaseDesk,
             Approvals = LeadApprovals,
             Doctrines = Doctrines,
+            SpotChecks = SpotChecks,
             SpecialBudgets = SpecialBudgets,
             Sandbox = Sandbox,
             Files = Files,