What an AI coding agent must never delete, the three levels of enforcement behind that list, and the policy column that shipped and nothing ever read.