Faultkit

Declare what must never happen in your AI workflow, find the silent failures that would let it happen, harden the action boundary, and prove each fix under injected faults with faultkit, a local fault-injection proxy (needs faultkit installed: Homebrew, AUR, or go install; no telemetry).