Function validate_claude_binary 

pub fn validate_claude_binary(
    cfg: &MissionConfig,
    repo_root: &Path,
) -> Result<()>

Refuse a claudeBinary whose resolution depends on where kranz was invoked, or which the repository itself supplies.

A relative path resolves against the process working directory, so kranz ready run one directory over executes a different program. A path inside the repository is repo-authored content executed as the operator with the operator’s full environment — the H1 primary path, closed here as well as at the layer rule so a global-layer typo or an operator-set in-repo path is caught too.