For agents, on top of README.md, which they read first.

• Re-record rather than edit. These are live answers from the pinned model; a hand-edited response is a forged one. When a change alters what the extension sends, run tools/record-gates --send --rerecord (it spends live quota, capped by --max-cost), never patch a request to match.
• Recording is approved; do not ask again (owner, planning interview, 2026-09-26; root CLAUDE.md, Testing). Re-recording after a change that needs it takes no further owner step.
• Never strip headers or reorder keys. The replay matches requests byte for byte, and the client reads response headers such as x-typesafe-request-id. The recorder already keeps only the headers the client reads, and never the key.