You’re right that the agent can’t be responsible for what nobody told it. Where I’d push is the next step: where would Robb have said it? The screen that handed over listing management had no field for standing rules. Say it in conversation and it becomes memory, and memory holds sometimes and not others. A rule that holds sometimes is one more inference.
I’d also expect your first and third columns to collapse at execution time. Forgotten and never-declared look the same from the gate’s side: nothing confirmed this slot. The distinction matters for fixing it, not for deciding whether to run.
I wrote more on this in a separate post, including the model-versus-agent line you’re drawing here.