Agent Edit Scope and Safety Boundaries

After author confirmation, an Agent may change the current prose or selection, chapter title, Author Outline or AI Reference, non-sensitive story fields, full character records, foreshadowing state, workflow definitions and default bindings, Skill content and routing, and non-sensitive preferences such as font size.

It must not directly change API keys, model service URLs, local manuscript locations, licensing data, database files, or unconfirmed official prose and canon.

Every mutation should show its target, diff, affected scope, and readable result. A bare claim that something was changed is not sufficient.