v4 was renamed Aegis Guardrails, cutting MCP tools from 17 to 5, and stipulated that nothing at runtime may modify rule files and that repository configuration may never specify executable commands.