Agent context should expose what is safe to reuse.
An agent should know the difference between a public note and a private source.
It should know what is current enough to cite.
It should know what is only provisional.
It should know where not to stretch.
That is not defensive writing.
It is useful writing.
The better the reuse boundary, the better the introduction.