protect-context

Agent guardrails: contract, evidence ledger, loop brake, diff-scope warnings, durable journal.