What belongs in the binary vs. what can only live in the prompt

I shipped a CLI plus an Agent Skills pack for the same task, and the split turned out to be the interesting part. The CLI can guarantee it never posts twice in one invocation. It cannot stop a caller from invoking it twice. So the enforceable rules went into