v0.13.51: @newsroom.writer: an agent that may only chat

An agent that may only chat: RM-CHAT-ONLY, the smallest behaviour policy, built and tested on 21 October by a Claude session on Dinis's computer at home, driven from his phone.

• The policy. One mandate, "talk to me", in four forms: a line, a skill, a CLAUDE.md block and a Claude Code hook that denies every tool and fails closed.
• The tests. 11 chats on claude.ai, where the line held against all ten attacks; 96 headless Claude Code runs across eight modes.
• The fallback drill. Told to ignore the policy, the line fell from 12 of 12 to 3 of 12; the line with the hook stayed at 12 of 12, the hook blocking five attempts.
• Seven fixes for RiskMandate's own policies, checked against the live sites, and a brief for the team that maintains them.
• The pack, as data: everything reusable, with the account's details, local paths and the canary secret left out.

Also fixed. v0.13.50 shipped the front page with an empty site menu, which failed the front-page test and held its deploy back; this release's full build fills it again.