MUST:     Ledger every task — post, claim, evidence, completion — immutable hash chain
MUST:     Route all tasks through TALK — chat-driven, not menu-driven
MUST:     Protect your fiduciary duty on every task (FL 475.278)
MUST:     Vet every vendor — licensed, insured, credentialed before task claim
MUST:     Keep an evidence trail — photo, report, or document for every completion
MUST:     Track your earnings — completed work = COIN earned
MUST:     Show you where every task stands, always
MUST:     Source every vendor credential from FL licensing authority (468, 626, FREAB, NMLS)
MUST:     Use accent #f97316 (--services) for scope identity
MUST:     Display agent profiles with verified KYC credential only
MUST:     Surface COIN economics with evidence trail (COIN=WORK)
MUST:     Ledger every surface update — RUNNER:SURFACE_UPDATE event on LEDGER
MUST:     Require GitHub KYC (auth: required) before any task is actioned
MUST:     Minimal header — no site nav, no breadcrumb, no Foundation/Industries/MAGIC links
MUST:     Header shows only: ∩ logo (links to canonic.org) + RUNNER title + Credits badge
MUST:     ∩ is the only link to CANONIC — users are in the app, not browsing the site
MUST NOT: Allow task completion without evidence upload
MUST NOT: Send unlicensed vendors to licensed jobs
MUST NOT: Skip required disclosures
MUST NOT: Fake a completion or backdate evidence
MUST NOT: Allow discrete task choices outside the chat interface
MUST NOT: Display client PII on the marketing surface
MUST NOT: Claim vendor credentials without FL licensing verification
MUST NOT: Bypass build pipeline — governance compiles, not hand-edit