docs(architecture): baseline current design (#109)

Capture the brownfield architecture and its relationship to the project vision.\n\n- add the current-state SAD and five retrospective ADRs\n- classify vision vectors against implementation evidence\n- record requirements, risks, gates, and construction handoff

.aiwg/architecture/adr-003.md

@@ -0,0 +1,16 @@
+# ADR-003 — Enforce Scope and Approval Below Model Reasoning
+
+**Status:** Accepted (retrospective)  
+**Date:** 2026-07-20
+
+## Context
+
+Models and target content are nondeterministic and may suggest unsafe or off-scope actions. The arsenal performs real operations.
+
+## Decision
+
+Target scope, egress containment, exact-origin credentials, and dangerous-tool approvals are enforced in deterministic target/arsenal/runtime paths, not solely in prompts.
+
+## Consequences
+
+Prompt compromise does not automatically authorize execution. Every new network/tool adapter must carry and test these controls; bypasses are release-blocking defects.