All 13 agents now use a uniform writable permission model
(edit: allow, bash: allow) so every agent can persist its deliverables
and artifacts instead of being sandbox-denied on project writes.
Orchestrator retains task: allow for dispatching.
Reconciled the three agents (explorer, detective, reviewer) that still
carried a 'Hard Read-Only Boundary' and read-only role-fence wording
which contradicted the new permissions and caused self-censoring:
rewritten as role fences (investigate/diagnose/review != implement/fix),
keeping the report IS the deliverable boundary and UNVERIFIED handoff.
Builder/tester/maintainer were already writable and unchanged.