For agents, on top of README.md, which they read first.

  • The tool's invariants are one folder up, in tools/record-gates/CLAUDE.md, which loads with this one.
  • --send must refuse before reading a key when any fixture exists and --rerecord is absent. Re-recording spends live quota; it is a deliberate act, never a side effect of a rerun.