A composite scenario drawn from the pattern behind the Amazon Q VS Code wiper, the Nx s1ngularity credential harvest, and the Replit database wipe: a manager overrides a change freeze, the agent gets a wider write scope than its last attested run, and nobody signs the exception. Two coding-ethos policies, stacked on the same tool call, close both halves. Companion post to Ep. 01 of The Strip.