fix: make command reconciliation binary safe

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a03397-4d51-7fd1-8ff2-946eb22ea2bc

workplans/ADHOC-2026-08-25.md

@@ -1,7 +1,7 @@
 ---
 id: TAMQ-WP-ADHOC-2026-08-25
 type: workplan
-title: "Recognize enhanced terminal submission keys"
+title: "Terminal and local operator fixes"
 domain: communication
 repo: tmux-amq
 status: finished
@@ -42,3 +42,27 @@ fix, and update the operator documentation.
   the target's queued follow-up inputs.
 - Full checks and installed-package verification passed. No user session or
   durable user message was changed during diagnosis.
+
+## Make target help and binary-safe shim reconciliation
+
+```task
+id: TAMQ-WP-ADHOC-2026-08-25-T02
+status: done
+priority: high
+```
+
+Make plain `make` list the documented targets. Restrict legacy command-shim
+reconciliation to `@` candidates, skip unrelated binary executables, and turn
+an undecodable collision with a current protocol command into a safe refusal
+rather than a traceback.
+
+### Evidence
+
+- Reproduced the installed startup traceback as an unconditional UTF-8 read of
+  unrelated executables in the command directory.
+- Regression coverage preserves an unrelated ELF-like binary, removes only a
+  marker-owned v1 shim, and refuses an undecodable `To:repo:` collision without
+  replacing it.
+- Plain `make` lists `help`, `install`, `uninstall`, `test`, and `check` with
+  descriptions. `make check` passes 136 tests and `make install` refreshes the
+  installed `tmux-amq==0.1.0` tool.