Agent write scope and permissions

Repo-wide write access invited the 200-file cleanup that collapsed three bounded contexts

One agent session with the whole tree in scope produced a diff that compiled and passed review. The invariant it removed surfaced two weeks later as a nightly job charging people who had never bought anything.