Project folder convention, how a task is judged finished, content-bound approvals, untrusted
text as data, secret handling, ocr review and serialised merge, one project per machine,
cost limits, and the four commands that already work. Referenced from AGENTS.md.
