A source-level look at AW-1’s AST checks, SQL and shell rules, rolling velocity monitor, and decision token.