[grove]

Managed Codex and Claude Code instructions now distinguish bootstrap source excerpts, assessed schema-5 decisions, retained references, deterministic fallbacks and schema-2 retrieval. They name readiness and missing-evidence flags, require existing access/model-spending grants, avoid repeated calls, and fall back to original documents/current code without automatic initialization or updates.

Exact version-1 blocks can be previewed, upgraded or removed while preserving surrounding bytes. Modified blocks still fail closed; the existing digest binding, locks and atomic replacement remain intact. A mocked consumer harness covers both agents and the requested failure/evidence-change cases. These tests validate instructions and contracts, not real Codex/Claude compliance; live evaluation remains deferred to #2.

Validation:

• Full Rust suite: 443 passed, 2 ignored.
• Final affected tests: 57 passed.
• cargo fmt --all -- --check and strict all-target Clippy passed.
• Installer tests retain original bytes and record zero model/provider requests, no registry initialization, and unchanged source/configuration inputs.

Closes #85.