Enforce provenance on every agent change

Authored-By: Codex (GPT-5) <noreply@openai.com>

README.md

@@ -18,6 +18,7 @@ Title:    [bug-x7k2m9] Fix terminal resize loss   (chore PRs: no [bug-id] prefix
 - `<bug-id>` is `bug-` followed by lowercase alphanumeric characters
 - `<kebab-description>` is lowercase alphanumeric with hyphens, starting with a letter or digit
 - When both the branch and the title carry a bug-id they **must match**
+- Titles are plain-language imperatives without Conventional Commit syntax
 - Break-glass: PRs authored by `dfritz` are exempt from all checks
 
 ## Usage
@@ -57,7 +58,7 @@ job — the step still fails, but the job cannot block the PR.
 
 ## Behavior
 
-The check validates four things for a Bug-backed Agent PR:
+The check validates four things for every non-break-glass Agent PR:
 
 1. **Branch form** — must be `<role>/bug-<id>/<kebab>` or `chore/<kebab>`.
    Unknown roles, missing `bug-` segment, uppercase bug-ids, and empty
@@ -65,14 +66,17 @@ The check validates four things for a Bug-backed Agent PR:
 
 2. **Title form** — for a `role/bug` branch the title must start with
    `[bug-<id>] `. For a `chore` branch the title must have no `[bug-id]`
-   prefix. If both carry a bug-id they must match.
+   prefix. If both carry a bug-id they must match. Neither form accepts
+   Conventional Commit syntax.
 
-3. **Tracking and attribution** — `## Tracking` contains both the literal
+3. **Tracking and attribution** — on Bug-backed work, `## Tracking` contains both the literal
    `Fixes bug-<id>` automation token and the matching navigable
-   `https://agenthub.fritzlab.net/bug-<id>` URL. A separate `## Attribution`
-   section contains the canonical `Authored-By` product/model watermark.
+   `https://agenthub.fritzlab.net/bug-<id>` URL. Every PR has a separate
+   `## Attribution` section containing the canonical `Authored-By`
+   product/model watermark.
 
-4. **Commit attribution** — every commit in `base-sha..head-sha` ends with
+4. **Commit attribution** — every commit in `base-sha..head-sha`, including
+   commits on `chore/` branches, ends with
    the canonical `Authored-By` trailer, separated from the message body by a
    blank line. The naming job must check out full history before this action.