Development record

The guard refuses to run any helper script that calls scripts/abcd.sh, as execute-string-uninspectable ('Execute-a-string wrappers are nested past the depth the guard can follow'), because abcd.sh itself nests a shell layer; bash -c around the same loop is refused the same way. On 2026-10-31 a three-line retry script under .abcd/.work.local/scratch/ was refused, though the SCRATCH rules domain tells an agent to put such helpers exactly there, so in this repository an agent can drive abcd only from an inline loop typed into each tool call.