diff --git a/AGENTS.md b/AGENTS.md
index 4fe7587..63c71f6 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -8,6 +8,20 @@ Authority boundary: child-local vision gateway and package-candidate workspace o
 Validator: `python3 tools/validate_svrnty_vision_child.py`.
 Legacy-work relation: older BTE-embedded vision, cloud-provider SDK, VLM, FLUX, palette, rembg, Visual Evidence, and package-candidate work is distilled into this standalone gateway only when current docs and validators admit the intention. Do not import provider credentials, backend state, runtime behavior, or implementation mass because it exists.
 
+## Universal Cortex OS Agent Contract
+
+- Treat this file as route-local instruction after parent `AGENTS.md` files and before chat memory.
+- Start broad or ambiguous work with `cortex graph context`; use it only as Derived State, then read this repo's local files.
+- Before edits, read `AGENTS.md`, `README.md`, and `WORKBOARD.yaml`; keep writes route-local unless a governed Core route explicitly authorizes promotion.
+- Run this repo's named validator before handoff or done claims; use stronger proof only for runtime, provider, secret, memory, profile exposure, branch, release, or readiness effects.
+- Record proof and handoffs as refs-only artifacts. Do not write Hindsight memory, Core SOT, sibling repos, live runtime state, provider state, external systems, or organization payloads unless explicitly authorized by the owning route.
+
+## Repo-Custom Agent Contract
+
+Svrnty Vision is a child-local sovereign vision HTTP gateway and Visual Perception Package Candidate workspace. It owns VLM/FLUX/palette/cutout gateway source, BTE-shaped HTTP route adapters, package-candidate docs, visual-evidence contracts, host-adapter candidates, tool-grant manifests, Docker package context, validators, fixtures, and proof packets. It is not Cortex OS Core authority, Seed installation authority, Runtime startup authority, Host Runtime authority, Docker lifecycle authority, Profile Exposure authority, provider admission authority, wildcard tool authority, product-readiness authority, release authority, or production authority.
+
+Do not start Runtime, start Docker, build or run containers, install packages, start the FastAPI/Uvicorn server, call VLM/FLUX/palette/rembg endpoints, call Spark/ComfyUI/vLLM services, call cloud vision/image providers, read credentials or env values, mutate BTE/Core/Seed/sibling/OpenDesign repos, grant wildcard tools, grant Profile Exposure, write durable Hindsight memory, or claim readiness from this workspace without explicit governed approval.
+
 # Svrnty Vision Child Workspace Rules
 
 This workspace is child-local under the Cortex OS umbrella.
diff --git a/README.md b/README.md
index 7dc6f1d..f5e5a16 100644
--- a/README.md
+++ b/README.md
@@ -47,6 +47,20 @@ adapter candidates, and Visual Evidence contract live in `docs/` and
 This does not grant Core promotion, Seed installation, Runtime startup, Profile
 Exposure, provider admission, or wildcard tool access.
 
+## Cortex OS Boundary
+
+This repo owns child-local sovereign vision gateway source, BTE-shaped HTTP route
+adapters, package-candidate docs, visual-evidence contracts, host-adapter
+candidates, tool-grant manifests, Docker package context, validators, fixtures,
+and proof packets only. Cleanup agents must not start Runtime, start Docker,
+build or run containers, install packages, start FastAPI/Uvicorn, call VLM,
+FLUX, palette, or rembg endpoints, call Spark/ComfyUI/vLLM services, call cloud
+vision/image providers, read credentials or env values, mutate
+BTE/Core/Seed/sibling/OpenDesign repos, grant wildcard tools, grant Profile
+Exposure, write durable Hindsight memory, or claim readiness without explicit
+governed approval. Run, test, Docker, endpoint, provider, and configuration
+examples below are operator/developer docs, not cleanup-route authorization.
+
 ## Run
 
 ```sh
diff --git a/WORKBOARD.yaml b/WORKBOARD.yaml
index 666ce29..3a47c16 100644
--- a/WORKBOARD.yaml
+++ b/WORKBOARD.yaml
@@ -19,3 +19,8 @@ items:
     status: complete
     source: Dockerfile
     owner: ""
+  - id: SVRNTY-VISION-WORK-005
+    title: Svrnty Vision Agent Contract Blocks
+    status: complete
+    source: AGENTS.md
+    owner: ""
diff --git a/tools/validate_svrnty_vision_child.py b/tools/validate_svrnty_vision_child.py
index 97bc319..a4a96ae 100755
--- a/tools/validate_svrnty_vision_child.py
+++ b/tools/validate_svrnty_vision_child.py
@@ -41,8 +41,25 @@ def main() -> int:
         if not (ROOT / rel).exists():
             errors.append(f"missing:{rel}")
     checks = {
-        "AGENTS.md": ["child-local", "not Cortex OS Core authority", "python3 tools/validate_svrnty_vision_child.py"],
-        "WORKBOARD.yaml": ["SVRNTY-VISION-WORK-001", "SVRNTY-VISION-WORK-003", "status: complete", 'owner: ""'],
+        "AGENTS.md": [
+            "## Universal Cortex OS Agent Contract",
+            "## Repo-Custom Agent Contract",
+            "Svrnty Vision is a child-local sovereign vision HTTP gateway",
+            "Do not start Runtime, start Docker, build or run containers",
+            "child-local",
+            "not Cortex OS Core authority",
+            "python3 tools/validate_svrnty_vision_child.py",
+        ],
+        "README.md": [
+            "## Cortex OS Boundary",
+            "child-local sovereign vision gateway source",
+            "not start Runtime, start Docker",
+            "call VLM",
+            "call Spark/ComfyUI/vLLM services",
+            "write durable Hindsight memory",
+            "operator/developer docs, not cleanup-route authorization",
+        ],
+        "WORKBOARD.yaml": ["SVRNTY-VISION-WORK-001", "SVRNTY-VISION-WORK-003", "SVRNTY-VISION-WORK-005", "status: complete", 'owner: ""'],
         "CONTEXT.md": ["Visual Perception Package Candidate", "Research Handoff"],
         "docs/VISION-PACKAGE-CANDIDATE.md": ["Research reads sources; Vision sees media", "wildcard grant"],
         "outputs/2026-06-12-svrnty-vision-workboard-readiness-reconciliation.md": [