Decisions 149-150 recorded; instruction files kept true; R-890, R-891, R-644 closed, R-469 narrowed (142 -> 139)

Decision 150 (operator 13:25): sessions correct stale facts in instruction files themselves,
naming each edit; never loosen a rule. Added to unprompted-work.md §5 (all copies) and
PROMPT-TEMPLATE.md §9. CLAUDE.md gates paragraph (R-891), architecture pointer, docs/website
rules, the doubled R-286 sentence in the workspace CLAUDE.md.
Decision 149: vaultwarden's step proven on bench 9401 and box 9202 (evidence here).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

.claude/rules/docs.md

@@ -11,7 +11,7 @@ repo. Sibling repos point here; this is where the pointed-at thing must actually
 
 | Fact | Home |
 |---|---|
-| the locked design | `architecture/01..05-*.md` |
+| the locked design | `architecture/01..11-*.md` |
 | capability status + its evidence | `architecture/00-capability-map.md` |
 | host addresses, routes, node names, break-glass, what is provisioned | `operations/nodes.md` |
 | Tailscale topology, accept-dns/accept-routes | `operations/tailscale.md` |