Plugin store

After a run ends, reads what was attempted, what landed and what a person changed, and proposes an edit to the agent's own instructions — applied only when a person approves it.

Talk to the agent it is granted to. A conversation on the agent's own page: you write, the agent answers, and it remembers the thread. Every message is a run like any other — admitted, budgeted, on the record.

When an agent reaches a boundary it should not cross on its own — authority, capability, confidence, intent — it parks that one path of work, asks a person, and restores the path when the answer arrives. Nothing irreversible and public happens on the agent's say-so.