This follows, more or less, the principle of progressive disclosure, similar to skills. I think of it as precomputing constraints, not just context. The agent always reads the subfolder’s AGENTS.md, which re-asserts scope and authority. I plan to add another skill to periodically re-assert intent, preventing intent drift and keeping the intent layer up to date. You can already rerun /intent-layer to refresh it.