- AGENTS.md/PROJECT.md rewritten to three-layer model (hard/default/advice); remote authority = Gitea native protection, coding flow zero-agentctl - delete .cursor/rules/agentctl-mandatory.mdc; cursor hooks downgraded to advisory - CURRENT/FEATURE-MATRIX become read-only snapshots; task state = Issue/PR - CI: add tracked secrets scan to required go-vet job - closeout record with V19/V20/V23/V26 evidence - local pre-commit/reference-transaction hook files removed from main worktree