The Compiler May Read It, the Agent May Not: Keeping Part of a Research Code Away from a Coding Agent

The compiler must read modules a physics-based solver cannot build without; the coding agent must not read that intellectual property. The harness does not ship that rule. We classified fifteen read routes against a container, permission rules and a sandbox. None of the three can tell which program is reading.