[alosec]

Summary

• define the scoped runtime agent’s sole product job as organization interviewing and CONTEXT.md drafting
• explicitly forbid grant search, ranking, recommendations, and eligibility or funding-likelihood assessment
• require material unknowns to remain explicit and drafts to remain unsaved until human review
• preserve read-only organization context and authorization/revocation boundaries

Verification

• 55/55 scoped app, webchat, and runtime tests serially
• 4/4 runtime authorization tests
• native embed cookie-auth/cancellation tests pass
• clean tree

Canonical Linux full-suite execution remains with deployment custody; unrelated macOS-only fixture failures were reported in the handoff.