Append a handoff record (approved or rejected) to the audit log.

Return a list of violation strings (empty if clean).

Remove C0/C1 control characters except \\n and \\t.

Parse and validate a handoff_request blob from agent output. Returns a dict with target_agent, intent, params, and pre-rendered steering_inpu

Wrap agent-produced text in an explicit data block.

agent_ids maps slug -> deployed CMA agent_id.

Best-effort scrub of instruction-like content from free-text context. DEFENCE-IN-DEPTH ONLY. A motivated attacker can evade this with casing,