Agents must use role repository-maintainer to create repository files.
Agents may create files under generated/.
Agents must not create files under generated/private/.