Re-pin the execSync allowlist after self-healing/executor line shifts, capture implementation-session tools under the graph-owned pause harness, treat worktree alone as not past planning for replan targets, and age starved- refinement fixtures past the post-escalation cooldown window.