10/10 pass: pure-model write gate holds the no-write invariants (question/injection/destructive), session-native cross-turn back-references resolve, and agentic source extraction recovers the author:title thin-body case.
Recording for the new cross_turn_bare_backreference case: ask "is it worth collecting?", then a lone "收" must resolve to that film (collect / movie / 巴尼的人生) and propose collect with the tmdb id -- not ask which work.
Kai