[gustavonline]

Factory setup mixed current instructions with old migration records, and it did not explain how AgentOps can coordinate more work without receiving blanket administrator access. This change makes the three responsibilities, native access controls and update limits explicit.

Before	After
Current guides alongside historical migration/rehearsal files	One setup path, two current architecture/qualification records; history linked at v0.1.3
Permissions described mainly as boundaries	Concrete native controls, allowed/denied probes, and a scoped process for adding access
No visible document/skill revision	Small revision/date metadata validated in CI; operational verification keeps its own date

Review setup and least privilege and the revision convention. Actual human/AI coauthor credit is preserved through delivery. No custom updater, runtime or product work is added.

Checks: 8 skills validate; all 10 tests pass. Four fresh-context Codex decision exercises cover access, verification dates, attribution and maintenance. Independent GPT-6.1-Sol High review accepts final commit 2491bcb with no blocking findings; CI is green. Opus review stopped at its subscription limit without a verdict, so it is not counted as approval.

Live evidence is separate from this method change: T3 2873 and updated native CLIs are installed; Codex's T3 probe allowed the workspace write and refused the outside write. Claude's terminal probe passed; its T3 probe awaits the native five-hour quota reset. OS auto-install, phone decisions and remaining physical recovery cases are not claimed complete.

Related: #2, #3, #7, #8. Release candidate: 0.1.4.