Engineering risk triage

Make agent-written pull requests carry a receipt

A dev.to guide proposes attaching intent, a risk rating, evidence and rollback steps to every AI-assisted pull request. The template holds up as far as it goes, but it never asks the agent which files it actually read.