The Handoff Protocol Designer

Design the handoff protocol between agents.

Agents: [LIST WITH ROLES]
Handoff points: [DESCRIBE]

For each handoff produce:
1. What triggers it
2. What is transferred: state, context, artifacts, reasoning
3. The transfer format
4. What the receiving agent must verify about what it received
5. What the sending agent retains vs relinquishes
6. Whether the handoff is one-way or returns
7. What happens if the receiving agent rejects the handoff
8. What is logged

Then produce:
9. The message format, concretely
10. The instruction each agent needs in its system prompt about
    handoffs

Common failure to design against: the receiving agent assumes
context it was not given, proceeds on an assumption, and produces
confidently wrong work. What in this protocol prevents that?