Gate autonomous work on user intent before executing tools

A coding agent should not treat a greeting or conversational probe as authorization to execute a task. Separate session initialization from work authorization: load only context required to understand the interaction, classify the user's intent, and wait for an explicit work request before searches, commands, file changes, checkpoints, or submission.

Developer instructions to fetch context first still need this intent gate; context discovery must not silently cascade into a complete workflow. This rule applies to interactive agents. An explicitly dispatched background job is different when its initial prompt already authorizes the defined work.