Policy-enforced

Key features

• GitHub Issue Authority — an opt-in provider can read a machine-readable authority block from a public GitHub Issue
• Advantagesclearer scope, less long-session drift and accidental mutation, explicit stop conditions, and a better fit for projects that need real review, rollback, or release discipline.
• the Builder should not infer authority from stale chat, branch existence, or its own plan.
• Lifecycle state machine — tasks progress through AUTHORITY_OBSERVED → TASK_ADMITTED → RUNNING → BLOCKED/COMPLETED → REVIEW_PENDING
• RUNNING-only Mutation Guard — protected DSH mutation tools are currently bash, write, and edit