ralon 0.1.1

Filesystem policy for AI coding agents: kernel-enforced write protection driven by an agent.lock file