Defensive invariants — when a check may be deleted — Deleting a defensive check because a proof says it cannot fire is the most expensive class of mistake made in this codebase. Canonical file is .agents/rules/defensive-invariants.md.
Module-state ownership & caches built from hot-reloading settings — How mutable module-scope state is owned here, and what caching anything derived from settings() obliges. Canonical file is .agents/rules/module-state-ownership.md.
Author an idempotent, state-detecting migration under scripts/migrations/ for a breaking llm-wiki-memory change. Use when shipping a breaking change to the engine, or when asked to write a migration / upgrade path. Replaces the retired release-runbook flow.