paveman

The workflow is narrowly aligned with editing rule and memory files and includes approval before writes. However, it depends on an unverified external CLI, so supply-chain risk is high; the supplied content does not establish credential theft or malicious intent.