Receipt Gate: No Second Write Without a Receipt

Most agent failures are not one bad tool call. They are three "successful" writes in a row that...