rig/changelog.d/110.md

### Changed

- Agent-tenant definitions live in heavy-duty/rig-templates, pinned in-tree and overridable per mint (`RIG_TEMPLATES_DIR`/`_REF`/`_REPO`); the in-tree case arms are gone, `staging-box` stays (#110)

### Added

- `rig template-lint` validates role definitions; rig-templates CI runs it on every PR (#110)
- Drill records cite the rig-templates SHA the converge read (#110)
docs: README points the tenant table at the registry; the drill-record doctrine and the changelog fragment (#110) The security-trade paragraph lands verbatim in the README (its twin is in rig-templates' README, per the issue's docs task), with the 2026-07-24 ruling recorded in place. 2026-07-24 23:14:40 +00:00			`### Changed`

			- Agent-tenant definitions live in heavy-duty/rig-templates, pinned in-tree and overridable per mint (`RIG_TEMPLATES_DIR`/`_REF`/`_REPO`); the in-tree case arms are gone, `staging-box` stays (#110)

			`### Added`

			- `rig template-lint` validates role definitions; rig-templates CI runs it on every PR (#110)
			`- Drill records cite the rig-templates SHA the converge read (#110)`