9da8df8d26
Slim salvage of #104688: place project context before workspace state and keep cwd outside the stable prefix. Put runtime hints behind a final renderer-owned boundary so quoted operator, memory, plugin and embedder examples cannot override the persisted runtime cwd or identity fields. Retain legacy unmarked prompt validation, add two invariant tests and a credential-free real-AIAgent/git-worktree replay harness. No provider cache-hit or billing measurements are claimed. Co-authored-by: joaomarcos <joaomarcosdias444@gmail.com> Co-authored-by: HexLab98 <liruixinch@outlook.com>