Agent Loop & Safeguards

A gather-act-verify loop over built-in tools, fenced by allow, ask and deny rules, permission modes and file checkpoints. Asked because autonomy and safety are set here, not in the prompt.