feat(FN-4482): complete Step 2 — add plan-only scope leak guard

Fusion-Task-Id: FN-4482 Fusion-Task-Lineage: 5850cda2-ded5-42ac-a206-396839580748
2026-05-14 14:10:16 -07:00
parent 23bb578ae4
commit ffd274d646
4 changed files with 242 additions and 4 deletions
--- a/packages/core/src/settings-schema.ts
+++ b/packages/core/src/settings-schema.ts
@@ -229,6 +229,7 @@ export const DEFAULT_PROJECT_SETTINGS = {
  mergeAuditAutoRecovery: "ai-assisted",
  workflowStepTimeoutMs: 360_000,
  workflowStepScopeEnforcement: "block",
+  planOnlyScopeLeakEnforcement: "warn",
  workflowRevisionForkOnScopeMismatch: true,
  strictScopeEnforcement: false,
  buildRetryCount: 0,