notes-author
A deny rule: it refuses an agent authoring a human's note, whose only provenance is who wrote it, and names what to run instead.
What it catches
An agent authoring a human's note, whose only provenance is who wrote it.
Why
A note is the one thing in the knowledge graph nothing here corroborates later, so its only provenance is the person who wrote it and signed the commit. That is why it is refused however the write is spelled: capture files a review transcript as a note and promote writes a memory record into the SHARED store, where the commit puts a person's name on prose they never read. magus memory put <name> is the agent-writable store, where every entry cites a ref a later reader can re-run.
Seeing it
A verdict names its rule in brackets, which is how you got here:
deny [notes-author]: ...
magus describe rule notes-author prints the same entry at a terminal, and
magus describe rules lists every rule this workspace enforces.