Development record

The scribe guard's spaced-separator fold is a join, not only a fold: horizontal whitespace after an allowed root's trailing slash glues the next token onto it, so a shipped-tree path written in plain prose after .abcd/work/issues/ (space or TAB, bare or in one code span) becomes a segment under the allowed root and passes the prefix check; demonstrated against the real test. Scan both the folded and the decoded-but-uncollapsed views and union the findings.