fix: enable memory writes for non-implementation agents

.config/opencode/agents/critic.md

@@ -4,7 +4,7 @@ mode: subagent
 model: github-copilot/claude-opus-4.6
 temperature: 0.2
 permission:
-  edit: deny
+  edit: allow
   bash: deny
   webfetch: deny
   websearch: deny
@@ -22,7 +22,7 @@ Purpose:
 Tool restrictions:
 
 - Allowed: `read`, `glob`, and `grep`.
-- Disallowed: file edits, shell commands, and web tools.
+- Disallowed: non-memory file edits, shell commands, and web tools.
 
 Roles:
 
@@ -81,4 +81,5 @@ Memory file duty:
 - After issuing a CRITIC-GATE verdict, record it in `.memory/decisions.md` as a markdown section.
 - Summary must include the verdict and concise rationale.
 - Add file references when specific files were evaluated, and cross-reference the active plan file when applicable.
+- `.memory/*` writes required for this duty are explicitly allowed; code/source edits remain read-only.
 - Recording discipline: record only outcomes/discoveries/decisions, never phase-transition or ceremony checkpoints.