Decisions 149-150 recorded; instruction files kept true; R-890, R-891, R-644 closed, R-469 narrowed (142 -> 139)

Decision 150 (operator 13:25): sessions correct stale facts in instruction files themselves,
naming each edit; never loosen a rule. Added to unprompted-work.md §5 (all copies) and
PROMPT-TEMPLATE.md §9. CLAUDE.md gates paragraph (R-891), architecture pointer, docs/website
rules, the doubled R-286 sentence in the workspace CLAUDE.md.
Decision 149: vaultwarden's step proven on bench 9401 and box 9202 (evidence here).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/architecture/09-update-architecture.md

@@ -905,6 +905,20 @@ its length, and both fixes cost something the household would notice — operato
 127. **The agent's three by-design abilities (`03` §3.1) stay for now**; revisited before the first paying customer.
      *Operator ruling 2026-10-05.* (R-861)
 
+### 2026-10-06 (13:25) — two operator rulings (recorded before the work)
+
+149. **R-890 — the admin seed is allowed on the test boxes** (scratch 9202 and the disposable Tester 1 box) as well as
+     on the test bench; it widens decision 146. It is never used on a household box or on a demo box's household apps.
+     The admin secret is minted per run, never leaves that box, and is never written to a repo, log or report.
+     *Operator ruling 2026-10-06 13:25* (option A of the row).
+150. **Instruction files are kept true by the session that finds them wrong** (R-891). A session may, without asking,
+     correct a stale fact in a `CLAUDE.md` or `.claude/rules/*` file, add a fact it proved, and remove a reference to
+     something that no longer exists, naming each edit in its report. It may not, without the operator, loosen a safety
+     rule, a fence, a „never", a protected machine, a secret rule or a review step, or remove a rule. *Operator ruling
+     2026-10-06 13:25.* **The reviewer's error, recorded:** the briefs from the night of 2026-10-05 on carried „Do not
+     edit instruction files", which turned one-line factual corrections into operator rows (R-891, R-469's block). Its
+     intent was to stop a session loosening its own fences, not to stop it keeping facts true.
+
 ### 2026-10-06 (10:41) — ten operator rulings: „A" for all ten (STATUS's ten questions; recorded before the work)
 
 The operator chose option A for all ten. **That differs from CC's own pick on three: 2 (R-99, CC picked B — leave the