Scope lock
A task may only change the files in the plan you approved.
The approved plan lists every file the task may change. The desktop app refuses any other file, even if the AI asks for it, and the task page shows Scope lock: ignored N changes.
- Paths that try to leave the folder (
../, absolute paths, drive letters, network paths, links pointing outside) are refused. - Emptying a file counts as deleting it and is blocked by the danger wall.
- New files can only be created where the plan says.