Open method: Blast/Mid/Inner write at system/subsystem/local altitude, then fixed T1 structural → T2 bug/ops → T3 adversarial gates with handoff packets—agents get AGENTS.md + prompt files, not a vague “please be careful.”
Empirical study: 34% of popular active repos ship agent instruction files (AGENTS.md dominant); half exceed ~100 lines; ~3/5 rules could be script-checked but <1/20 name the check—actionable lint: short map, name enforcers, one rulebook.