- Added `isReadOnlyAgent` and `READ_ONLY_TOOL_NAMES` to classify agents. - Marked read-only agents and forbade edits, commands, and reasoning offload. - Added tests for capability classification and description rendering.