Development record

2026-10-31 — spc-2609202134338445 step 11, fix round 1: the shared-main-checkout refusal for an auto-plan plan is passed into the loop as Options.PlanGuard and called under the run's lock immediately before intent plan, replacing the front door's unlocked pre-read of the state (PlanStageNext, removed). Grounds: judged outside the lock, two concurrent steps could let the plan run unguarded; the core stays transport-agnostic, since the guard is a function the CLI supplies.