Read constraints and the run checkpoint before assessing a change. Treat deny paths, allowlists, file-count caps, and external-write approvals as hard gates.
