Runbooks

What the agent is allowed to do

Each runbook is a scope contract: the evidence it may read, the steps it follows, and the action it would propose — locked until a human approves it.