Function check_agent_rules 

pub fn check_agent_rules(
    directory: &str,
    root: &str,
    clients: &[String],
) -> AgentRulesResult

check_agent_rules(directory, root, clients) — never writes; compares each present target’s embedded digest to the live projection.