Summary

• Tightened agent permission boundaries across all agent types (orchestration, artifact owners, implementation, escalation, low-tier)
• Updated invariant tests to enforce boundary rules
• All agent frontmatter files now consistently declare their permission scope

Verification

Not run in this environment. Recommended checks:

npm test