ax, an agent asset registry

Agents produce scripts and queries nobody can vouch for a month later. Each asset declares what it came from; when a source moves, everything downstream is marked suspect by graph traversal, with no model call anywhere in it, and gets back to active only by passing verification. The design doc argues mostly for deleting things, and ends with the condition that would prove the whole premise wrong.