Add independent audit logging and reviewer fallback

.github/workflows/contract-tests.yml

@@ -42,12 +42,17 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: "3.13"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24"
       - name: Check Rust formatting
         run: cargo fmt --all --check
       - name: Run Rust unit tests
         run: cargo test --locked
       - name: Run control-server session contracts
         run: npm test --prefix control-server
+      - name: Run independent logger contracts
+        run: cargo test --locked -p multiagent-logger
       - name: Install terminal-client dependencies
         run: npm ci --prefix client
       - name: Run terminal-client contracts

AGENTS.md

@@ -31,3 +31,17 @@ In particular:
 
 Pull requests that change an architecture boundary must update
 `docs/architecture/system-architecture.md` in the same pull request.
+
+## Deferred Work Tracking
+
+`docs/TODO.md` is the canonical repository backlog. When a change identifies
+accepted but unfinished work, add a concrete unchecked item there in the same
+pull request. Do not leave the only record of deferred work in review comments,
+commit messages, or scattered documentation.
+
+A TODO must state the missing outcome and enough completion evidence to remove
+it. Do not add TODOs for work completed by the current change, and do not remove
+or mark an item complete until its implementation, applicable deployment
+integration, and relevant tests or operational evidence exist. A TODO never
+substitutes for an architecture decision: changes to ownership or trust
+boundaries must still update `docs/architecture/system-architecture.md`.