No touching things after the spec is submitted

Remember when we started doing devops, and the rule was "no clickops in the environments"? The line at which humans could touch things was drawn at the point of commit to main.

The new rule for agents is going to be "no touching things after the spec is submitted". It's the same concept, we're just drawing the line a little bit further back.