- PM can ONLY write to ~/.kugetsu/queue.json and ~/.kugetsu/logs/* (was entire ~/.kugetsu/) - Update delegation format to git.fbrns.co/shoko/kugetsu#<issue> - PM must not write new kugetsu scripts - delegate via issue/PR workflow - Update examples and violation cases to reflect stricter boundaries