0.77.0

A step map's llm step may declare commands:, the argv prefixes its shell admits, and drivers/development/checks.yaml declares the per-phase surface: aep plan artifact for the planning states, the gate, generators and working-tree cargo verbs for implement. ESS pin 0.68.0.

Added

• An llm step may declare commands:, the argv prefixes its shell admits; driven_surface, which a harness consults per shell call, holds the step to one simple invocation of a declared prefix, and the refusal names the declared surface.
• The loader refuses a commands: prefix with no words, a blank word, a program written as a path, or a program that runs another program: the shells, eval, exec, source, the wrappers (env, xargs, sudo, timeout, nohup, find, …), the script interpreters and npx (CommandPrefix::PROGRAM_RUNNERS).
• driven_surface refuses cargo --config and rg --pre under every surface, because each runs a program the call does not name.
• StepContext carries the running step's declared commands, empty for a step that declares none.

Changed

• drivers/development/checks.yaml declares [aep, plan, artifact] for receive, specify, decompose, establish_verifiers and adversarial_verify, and the gate, the generators (task check|fmt|schema|ess|status) and the working-tree cargo verbs (build, check, clippy, doc, fmt, test) for implement; its scope: now denies writes under drivers/**, Taskfile.yml, .cargo/** and rust-toolchain*.
• A step that declares no commands: keeps the surface it had (aep plan artifact …, aep observe trace … and the read-only programs) and the map digest it had, so a run under such a map resumes after the upgrade.

CHANGELOG: https://github.com/beyond10x/aep/blob/0.77.0/CHANGELOG.md