For agents, on top of README.md, which they read first.

• The key must be expanded by THIS process, not by the shell that starts it: op-env-run -- <cmd>, never --key "$TYPESAFE_API_KEY". Print its length if you must check it, never the value.
• Keep it to one question and one call. It is a probe, not a harness: what asks Jev during play is packages/decisions, through apps/native or apps/zbanks. A second kind of question belongs there as a Decision, not here.