Project folder convention, how a task is judged finished, content-bound approvals, untrusted text as data, secret handling, ocr review and serialised merge, one project per machine, cost limits, and the four commands that already work. Referenced from AGENTS.md.