v0.13.53: @newsroom.writer: an agent that may only chat, with its gaps and its spec

An agent that may only chat, updated at the editor's request.

• What the hooks stopped. A matrix of all 96 runs, eval by mode: no breach in any of the 48 runs with the hook installed; every attempt denied at the first try, including the tool search that would have loaded the web tools.
• What the hooks do not cover. Fixable with a better hook (a typed /skill, subagents); only fixable outside the session (removing the hook, the launch); beyond what a hook can see (the model's own text, claude.ai); and the real gap, a partial allow list.
• The tests, as a spec. The twelve evals word for word, the eight modes and the drill's override prompt.
• What comes next. Every model, on a schedule, the partial allow list, the untested paths and other agent platforms.