Protect the workflows the agent shouldn't be allowed to touch

The prompt

List the files and workflows in this repository that an agent should never be allowed to rewrite just to make a build pass: security workflows, deployment definitions, shared modules, generated artifacts, sensitive configuration. Propose branch-protection or CODEOWNERS rules that enforce it.

Why it's built that way

The handbook is explicit: do not allow the agent to rewrite enterprise guardrails simply to make a build pass. The point of naming these files is that the control becomes a named, testable rule instead of a hope.

What to do with the answer

Add the protected paths to CODEOWNERS or a branch-protection rule today, not after the first incident.