fix: clarify demos seam validation contract

Author: justin808

.agents/agent-workflow.yml

@@ -1,7 +1,7 @@
 ---
 base_branch: main
 follow_up_prefix: 'Follow-up:'
-review_gate: "all current-head `gh pr checks` entries green, all review threads resolved, mergeable clean; AGENTS.md permits `gh pr ready` only after its documented local and review-app conditions pass"
+review_gate: "all current-head `gh pr checks` entries green, all review threads resolved, mergeable clean; local seam evidence is `.agents/bin/validate` (`bundle exec rake spec`) only, not a replacement for Lefthook pre-push or monorepo lint/format; AGENTS.md permits `gh pr ready` only after its documented local and review-app conditions pass"
 approval_exempt: "this config grants no permanent merge authority; defer merge authority to AGENTS.md or direct user/maintainer instruction. When separately authorized at batch closeout, auto-merge ready low-risk PRs that pass the merge gate; keep high-risk CI/workflow, build-config, dependency or runtime bumps, broad refactors, and release changes maintainer-gated"
 coordination_backend: n/a
 changelog: n/a

.agents/bin/README.md

@@ -15,11 +15,19 @@ installs tools nor runs `mise trust` automatically.
 | Script | Purpose | This repo runs |
 | --- | --- | --- |
 | `setup` | Install Ruby and Node dependencies, then attempt git hooks | `bin/conductor-exec bundle install "$@"`; `bin/conductor-exec npm install`; best-effort `bin/conductor-exec bundle exec lefthook install` |
-| `validate` | Pre-push gate | `bin/conductor-exec bundle exec rake spec` |
-| `test` | Run tests | `bin/conductor-exec bundle exec rspec "$@"` |
-| `lint` | Lint / format | n/a |
+| `validate` | Run the root RSpec task | `bin/conductor-exec bundle exec rake spec` (no arguments) |
+| `test` | Run the root RSpec task | `bin/conductor-exec bundle exec rake spec` (no arguments) |
+| `lint` | Lint / format | n/a — this seam deliberately does not wrap the monorepo-wide RuboCop command |
 | `build` | Build / type-check | n/a |
 | `docs` | Docs checks | n/a |
 | `ci-detect` | CI change detector | n/a |
 
 Non-command policy lives in [`../agent-workflow.yml`](../agent-workflow.yml).
+
+## Validation scope
+
+`validate` and `test` intentionally run only the repository root RSpec task.
+They are useful local seam checks, but are not a replacement for the
+repository's Lefthook pre-push checks or monorepo-wide lint and format commands.
+Use the repository documentation for those broader checks. Both scripts reject
+arguments so their documented contract stays deterministic.

.agents/bin/test

@@ -2,4 +2,10 @@
 # Generated by shakacode/agent-workflows agent-workflow-seam-doctor --init.
 set -euo pipefail
 cd "$(CDPATH= cd -- "$(dirname -- "$0")/../.." && pwd)"
-exec bin/conductor-exec bundle exec rspec "$@"
+
+if (( $# > 0 )); then
+  printf '%s\n' 'error: .agents/bin/test runs the repository root `rake spec` task and accepts no arguments' >&2
+  exit 64
+fi
+
+exec bin/conductor-exec bundle exec rake spec

.agents/bin/validate

@@ -2,4 +2,10 @@
 # Generated by shakacode/agent-workflows agent-workflow-seam-doctor --init.
 set -euo pipefail
 cd "$(CDPATH= cd -- "$(dirname -- "$0")/../.." && pwd)"
+
+if (( $# > 0 )); then
+  printf '%s\n' 'error: .agents/bin/validate runs the repository root `rake spec` task and accepts no arguments' >&2
+  exit 64
+fi
+
 exec bin/conductor-exec bundle exec rake spec