passepartout: v0.4.1 Design Cleanup

- Remove system-prompt-augment mechanism, introduce *standing-mandates*
- Fix false token-overhead claims in DESIGN_DECISIONS + ROADMAP
- Update security vector count 9-10 across all docs and dispatcher docstring
- Rewrite README with agent section, soften aspirational claims
- Register 10 cognitive tools in programming-tools.org with test suite
- Enforce NO-HARDCODED-CONSTANTS in .env.example
- ROADMAP: mark v0.3.x patches DONE, add LOGBOOKs, mark releases
- AGENTS.md: rewrite compact (180 to 50 lines), move refs to CONTRIBUTING
- Normalize org tangle directives to file-level PROPERTY inheritance

org/core-defpackage.org

@@ -22,7 +22,7 @@ The implementation section includes:
 
 ** Package Definition and Export List
 The package definition. All public symbols are exported here.
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (defpackage :passepartout
   (:use :cl)
   (:export
@@ -195,7 +195,7 @@ The package implementation section defines the low-level utilities and global st
 
 *** Robust plist access (plist-get)
 Retrieves a value from a plist, checking both upper and lowercase keyword variants. This is needed because different components use different keyword conventions.
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (in-package :passepartout)
 
 (defun plist-get (plist key)
@@ -208,7 +208,7 @@ Retrieves a value from a plist, checking both upper and lowercase keyword varian
 
 *** Logging state
 The harness maintains a bounded ring buffer of log messages for inclusion in LLM context. Access is thread-safe via a lock.
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (defvar *log-buffer* nil)
 (defvar *log-lock* (bordeaux-threads:make-lock "log-messages-lock"))
 (defvar *log-limit* 100)
@@ -216,14 +216,14 @@ The harness maintains a bounded ring buffer of log messages for inclusion in LLM
 
 *** Skill registry
 The global registry of all loaded skills. This is the authoritative list that the deterministic engine iterates.
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (defvar *skill-registry* (make-hash-table :test 'equal)
   "Global registry of all loaded skills.")
 #+end_src
 
 *** Skill telemetry
 Tracks execution metrics per skill (count, duration, failures) for diagnostics and performance analysis.
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (defvar *telemetry-table* (make-hash-table :test 'equal))
 (defvar *telemetry-lock* (bordeaux-threads:make-lock "harness-telemetry-lock"))
 
@@ -240,11 +240,11 @@ Tracks execution metrics per skill (count, duration, failures) for diagnostics a
 
 *** Cognitive tool registry
 Tools that the LLM can invoke are registered here. Each tool has a name, description, parameters, optional guard, and implementation body. The ~def-cognitive-tool~ macro handles registration. ~cognitive-tool-prompt~ serialises the registry into the LLM's system prompt.
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (defvar *cognitive-tool-registry* (make-hash-table :test 'equal))
 #+end_src
 
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (defstruct cognitive-tool
   name
   description
@@ -253,7 +253,7 @@ Tools that the LLM can invoke are registered here. Each tool has a name, descrip
   body)
 #+end_src
 
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (defmacro def-cognitive-tool (name description parameters &key guard body)
   "Registers a cognitive tool. PARAMETERS is a list of plists, one per parameter."
   `(setf (gethash (string-downcase (string ',name)) *cognitive-tool-registry*)
@@ -264,7 +264,7 @@ Tools that the LLM can invoke are registered here. Each tool has a name, descrip
                               :body ,body)))
 #+end_src
 
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (defun cognitive-tool-prompt ()
   "Serialises all registered tools into a prompt string for the LLM."
   (let ((descriptions nil))
@@ -287,7 +287,7 @@ Tools that the LLM can invoke are registered here. Each tool has a name, descrip
 
 *** Centralized logging (log-message)
 Thread-safe logging function that writes to both the ring buffer (for LLM context) and stdout (for the user). Bounded by ~*log-limit*~.
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (defun log-message (msg &rest args)
   "Centralized, thread-safe logging for the harness."
   (let ((formatted-msg (apply #'format nil msg args)))
@@ -301,7 +301,7 @@ Thread-safe logging function that writes to both the ring buffer (for LLM contex
 
 *** Debugger hook
 Friendly error handler that replaces the raw SBCL debugger with a diagnostic message. This prevents the agent from entering the debugger on unhandled conditions.
-#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+#+begin_src lisp
 (setf *debugger-hook* (lambda (condition hook)
   "Friendly error handler - shows diagnostic message instead of raw debugger."
   (declare (ignore hook))