The space guard now refuses every bot.did.* collection except the bot.did.agent.* subtree. Agent working records can live in a space; operator, registration, credential, policy, policy-ref and binding records stay out.
The tests cover the protected set and near misses at the store and every write route, a mixed batch that must fail whole, and an agent record written and read back through the HTTP surface.
🤖 Generated with Claude Code