AGENTS.md: a refused tool call is not a reason to end the turn; v2 plan (props, ctx guard, wake, identity, wiring) as acceptance tests; v1.1 run note

v2 given tests compiled against a panic-only skeleton (go vet clean); no reference
implementation.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

AGENTS.md

@@ -54,6 +54,11 @@ These come from defects found in review; the evidence is in `docs/implementer-lo
 - When a rule says "every" or "everywhere", finish by listing each place it applies and checking
   them one by one. The task shows one place; the rule covers all of them.
 - Never end a turn by describing what you are about to do. Do it, then report.
+- Work only inside this repository. Scratch programs under `/tmp` or anywhere else are refused
+  by the sandbox, and **a refused tool call is not a reason to end the turn**: write the
+  experiment as a `_test.go` file inside the repository (delete it before committing), or reason
+  it out. Two sessions have ended with a plan and no tool call right after a refusal; that
+  leaves the owner with no commit and no `stopped` row, the worst outcome.
 
 ## The gate