V1: One host, one hook, a real AGT decision

**Master doc:** `docs/shaping/acs-reference-impl-slices.md` §V1 — authoritative for this slice's scope.

**Demo:** Ask Claude Code for a destructive shell command. AGT's stock policy denies it, and the reason lands in the transcript.

**Plan:** *(added when planned)*

## Amendments