The source-of-truth layer is where this harness can quietly drift. I’d add a conflict fixture: put an old field name in a memory note and the current schema in the repo, then ask for a change that touches it. The test should assert the agent chooses the versioned schema and surfaces the contradiction instead of silently following stale memory.