Two medium findings in the audit writer (a startup panic on a record-less log file, and a log-name filter that disagrees with bxctl's), one in the missing runbook pointers for startup failures, and twelve low ones. Lessons I14 and T21, T22; two new AGENTS rules; m3a's T18 renumbered to T20 so master's T18 and T19 survive the merge. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>