fix(refinery): scope discipline — claim only MR queue, not generic bd backlog (gt-a15)

Refinery is an autonomous agent driven by its role template. Nothing in Go
auto-claimed beads for it, but the template (1) never forbade claiming generic
backlog beads and (2) told it to 'bd list --assignee=refinery' at startup, which
surfaced any assigned bead. On 2026-05-03 this pulled the refinery off the merge
queue to investigate a misrouted P2 bead; the queue stalled 25+ minutes while
polecat work failed to land.

Add an explicit SCOPE DISCIPLINE rule: the merge queue (gt mq list) plus the
refinery's own patrol wisp are its ONLY work sources. Misrouted generic beads are
escalated to the witness, never worked. Remove the misleading startup bd-list line.
Add TestRenderRole_Refinery_ScopeDiscipline as a regression guard.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: AJBcoding

internal/templates/roles/refinery.md.tmpl

@@ -55,6 +55,19 @@ queue for your rig, merging polecat work to its target branch one at a time with
   goes through the **witness**, who manages polecat lifecycles and can re-sling work.
   Integration branches may ONLY be landed via `{{ cmd }} mq integration land <epic-id>`.
 
+**SCOPE DISCIPLINE: The merge queue is your ONLY work source.**
+- Your work queue is `{{ cmd }} mq list {{ .RigName }}` — MR wisps submitted by polecats. Nothing else.
+- You do NOT claim generic `bd` issues from the rig backlog, even ones assigned to you.
+  `bd ready`, `bd list`, and a generic bead with `assignee={{ .RigName }}/refinery` are NOT your work queue.
+- The ONLY beads you legitimately work are: (a) MR wisps in the merge queue, and (b) your own
+  patrol wisp (`mol-refinery-patrol`). A generic task bead is neither.
+- If a generic (non-MR) bead is assigned to you, do NOT investigate, audit, or implement it.
+  Escalate to the witness/mayor instead and keep processing the queue:
+  `{{ cmd }} mail send {{ .RigName }}/witness -s "SCOPE: misrouted bead <id>" -m "Bead <id> assigned to refinery is not an MR. Reassign to a polecat. I am staying on the merge queue."`
+- **Why this rule exists**: a misrouted backlog bead once pulled the Refinery off the queue to
+  investigate work it should never have claimed; the merge queue stalled for 25+ minutes while
+  polecats' completed work failed to land. The queue always comes first.
+
 **The Scotty Test**: Before proceeding past any failure, ask yourself:
 "Would Scotty walk past a warp core leak because it existed before his shift?"
 
@@ -140,13 +153,16 @@ Print the startup banner:
 ```
 
 ```bash
-gt hook                          # Check for hooked patrol
-bd list --status=in_progress --assignee=refinery
-# If no patrol:
+gt hook                          # Check for hooked patrol wisp
+# If no patrol wisp:
 {{ cmd }} patrol new                  # Creates root-only wisp with config vars and hooks it
 ```
 
-**No thinking. No "should I?" questions. Hook → Execute.**
+⚠️ **The only bead you act on at startup is your patrol wisp.** If `gt hook` shows a
+generic (non-MR, non-patrol) task bead, do NOT work it — apply SCOPE DISCIPLINE above:
+escalate to the witness and create/run your patrol wisp instead.
+
+**No thinking. No "should I?" questions. Hook → Execute (the queue, not the backlog).**
 
 ## Hookable Mail
 

internal/templates/templates_test.go

@@ -188,6 +188,45 @@ func TestRenderRole_Refinery_DefaultBranch(t *testing.T) {
 	}
 }
 
+// TestRenderRole_Refinery_ScopeDiscipline verifies the refinery role makes the
+// merge queue its only work source and explicitly forbids claiming generic bd
+// backlog issues. Regression guard for gt-a15: the Refinery once claimed a
+// generic assigned bead and stalled the merge queue for 25+ minutes.
+func TestRenderRole_Refinery_ScopeDiscipline(t *testing.T) {
+	tmpl, err := New()
+	if err != nil {
+		t.Fatalf("New() error = %v", err)
+	}
+
+	data := RoleData{
+		Role:          "refinery",
+		RigName:       "myrig",
+		TownRoot:      "/test/town",
+		TownName:      "town",
+		WorkDir:       "/test/town/myrig/refinery/rig",
+		DefaultBranch: "main",
+		MayorSession:  "gt-town-mayor",
+		DeaconSession: "gt-town-deacon",
+	}
+
+	output, err := tmpl.RenderRole("refinery", data)
+	if err != nil {
+		t.Fatalf("RenderRole() error = %v", err)
+	}
+
+	if !strings.Contains(output, "SCOPE DISCIPLINE: The merge queue is your ONLY work source.") {
+		t.Error("output missing SCOPE DISCIPLINE heading - refinery must be scoped to the merge queue")
+	}
+	if !strings.Contains(output, "do NOT claim generic `bd` issues") {
+		t.Error("output missing prohibition on claiming generic bd backlog issues")
+	}
+	// The old startup line actively told refinery to list assigned beads, which
+	// surfaced generic backlog beads. It must no longer be present.
+	if strings.Contains(output, "bd list --status=in_progress --assignee=refinery") {
+		t.Error("output still contains the startup 'bd list --assignee=refinery' line that surfaced generic backlog beads")
+	}
+}
+
 func TestRenderMessage_Spawn(t *testing.T) {
 	tmpl, err := New()
 	if err != nil {