Agents must use role repository-maintainer to create repository files.
Agents must use role security-reviewer to modify repository files.
Agents may create generated/new.md and modify README.md.
Agents must not modify generated/new.md and create README.md.