List every file containing raw CP437 bytes and stress that the
Read/Edit/Write tools must never be used on them — UTF-8 interpretation silently replaces each CP437 byte with U+FFFD.
Add git push authorization rule alongside existing commit rule, note
that permission does not carry over between tasks. Clarify that doc
files must not contain UTF-8 and should use -- instead of em-dash.