feat(FN-4343): complete Step 3 — enforce workflow step scope invariants

Fusion-Task-Id: FN-4343 Fusion-Task-Lineage: b880b71a-9250-4d9e-bdac-8298a73058f7
2026-05-13 19:24:33 -07:00
parent 540c5e16d8
commit a3b505e2cb
4 changed files with 156 additions and 16 deletions
--- a/packages/core/src/settings-schema.ts
+++ b/packages/core/src/settings-schema.ts
@@ -222,6 +222,7 @@ export const DEFAULT_PROJECT_SETTINGS = {
  postMergeAuditMode: "warn",
  mergeAuditAutoRecovery: "ai-assisted",
  workflowStepTimeoutMs: 360_000,
+  workflowStepScopeEnforcement: "block",
  workflowRevisionForkOnScopeMismatch: true,
  strictScopeEnforcement: false,
  buildRetryCount: 0,