| 1. Path test | Rules that together leave the agent no legal way to do its core job | Four charter rules blocked task assignment for eight days |
| 2. Receipt separation | Agents logging onto their own instructions until the rules drown | A coordinator page grew to 2.4 million characters, 0.2% of them rules |
| 3. Silence detection | An agent that stops writing and nobody notices | 20 hours of silence, found by a person |
| 4. Prohibition scope | Bans that block internal work along with the risk they target | A “no messages” rule held two internal handoffs for 60 hours |
| 5. Gate evidence | Gates that demand proof from a source that does not exist | A missing webhook stopped every start for four wakes |
| 6. First-receipt proof | Changes reported as done that were only saved, recommended or proposed | Three “done” changes, none working yet |
| 7. Independent review | Agent-written code that ships unchecked | Two high-severity defects caught before merge |
| 8. Claim verification | Status reports that no one checks against evidence | “No bots idle” while two sat quiet for 2 hours 41 minutes |
| 9. Zero-output alarm | A fleet that reports on time every hour and starts no work | 19 clean hourly reports in a row, zero starts, no alarm |
| 10. Authority delivery | Approvals that live in one person’s chat windows and get lost in the relay | Two approvals not found by the agent they were sent to; a placeholder delivered instead of four rules |
| 11. Identity and release | Agent changes that look like a person’s, and merges that reach production, or fail to, without anyone deciding | A merged fix that never deployed; bot work indistinguishable from the owner’s |