Build a safe agentic coding workflow for a real repository

Give the agent durable instructions, least privilege, parallel read-only investigation, isolated worktrees and a final code review.