Developer publishes limits list before features for agent change-verification tool

A developer building an agent change-verification layer has deliberately placed its limitations page ahead of its feature list in the README, arguing that knowing the constraints upfront saves users wasted time. The tool is designed to judge, log, and cryptographically sign changes before they take effect, but the author openly states it cannot intercept writes made as root, effects routed outside its adapters, or calls that only read data. As of late August 2026, five substrate families are supported — filesystem, Git, tool-protocol proxy, PostgreSQL, and MySQL — though the MySQL adapter has never been tested against a live instance. The project also has no refinement theorem formally connecting its Lean model to its Rust implementation, and Windows, OneDrive, and SMB environments have seen zero test runs, a fact the author says was declared rather than discovered. The author frames these disclosures not as humility but as a credibility measure, noting that a documentation page that quietly revises its own history cannot be trusted about the present.