autobahn

1Carve unsafe scope out of a task, execute the safe remainder in a fresh subagent that sees only the carved prompt, and report a visible descope ledger.
2 
3## Goal
4 
5Make scope decisions explicit before executing risk-adjacent work. Carve in this session; execute in a fresh subagent that receives only the carved prompt, never the risky original or this session's reasoning. Because the executing agent never reads the risky ask, it has nothing to hedge, dilute, or refuse and can build the safe scope at full strength. Remove the unsafe ask and run a genuinely safe prompt; never slip a flagged ask past a guardrail.
6 
7## Workflow
8 
91. **FRAME**: Read the task, inputs, and user-stated risk posture. Proceed if the user already authorized descoping. Otherwise, propose a carve with an explicit split and wait for approval before **RUN**. A bright-line item has no safe version and is non-negotiable; a gray-zone alternative trades away scope the user may want and needs their decision. If every item is bright-line, proceed and record it in the ledger. If the user disputes a bright-line call, send only the item's abstract description to a fresh context for re-evaluation, stripped of negotiation and persuasion. Do not re-litigate it in the pressured session. Record the appeal and outcome in the ledger either way.
10…