passepartout: v0.4.1 Design Cleanup

- Remove system-prompt-augment mechanism, introduce *standing-mandates*
- Fix false token-overhead claims in DESIGN_DECISIONS + ROADMAP
- Update security vector count 9-10 across all docs and dispatcher docstring
- Rewrite README with agent section, soften aspirational claims
- Register 10 cognitive tools in programming-tools.org with test suite
- Enforce NO-HARDCODED-CONSTANTS in .env.example
- ROADMAP: mark v0.3.x patches DONE, add LOGBOOKs, mark releases
- AGENTS.md: rewrite compact (180 to 50 lines), move refs to CONTRIBUTING
- Normalize org tangle directives to file-level PROPERTY inheritance

org/programming-repl.org

@@ -242,7 +242,10 @@ writes the result back through the reply-stream."
 * Phase E: Lifecycle
 The REPL skill loads at priority 200 (after diagnostics at 100, before utils-lisp at 400).
 
-** System Prompt Augment (repl-mandate)
+** Standing Mandate (repl-mandate)
+
+The REPL-first mandate is registered as a standing mandate — it runs on every ~think()~ cycle, inspecting the user input for code-related keywords. When it matches, the mandate text is injected into the IDENTITY section of the system prompt.
+
 ;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
 (defun repl-mandate (context)
@@ -265,8 +268,12 @@ The REPL skill loads at priority 200 (after diagnostics at 100, before utils-lis
 (defskill :passepartout-programming-repl
   :priority 200
   :trigger (lambda (ctx) (declare (ignore ctx)) nil)
-  :deterministic (lambda (action ctx) (declare (ignore action ctx)) nil)
-  :system-prompt-augment #'repl-mandate)
+  :deterministic (lambda (action ctx) (declare (ignore action ctx)) nil))
+#+end_src
+
+#+begin_src lisp
+(eval-when (:load-toplevel :execute)
+  (push #'repl-mandate *standing-mandates*))
 #+end_src
 
 * Test Suite