Development record

The scribe's guard test can be satisfied by a definition that names shipped-tree material: the allow-list root constant is .abcd/work/ (broader than the .abcd/work/issues/ the definition, brief and changelog state); only the first Inputs-prefixed heading is scanned; only single-backtick tokens containing an ASCII slash are read as paths (a bare path, a fenced block, or a fullwidth solidus is invisible); and the prefix check performs no cleaning, so a dot-dot traversal under the prefix passes. The canary also omits two refusals the definition claims (transcript-store or .work.local material handed as ledger context; an embedded ask for a summary) and its must_not_contain token appears nowhere in the input.