Remove coordinator/bizdev/storage data/dev fallbacks and register agent→workspace so default agent targets use workspace.DeliverableKey. Remaining U5 path and G3 task_runs clearance stay open.
Hash deliverables through Capability.ReadArtifact, resolve backends on the server, and refuse workspace removal until frozen members match FAV receipts. Co-authored-by: Cursor <cursoragent@cursor.com>