Cannot widen its tools
The plan may use only what the spec permits.
Product / Platform / NeSy plan compiler
Before anything runs, the model's plan is compiled against a content-hashed task spec: permitted tools, dependencies, budgets, approval declarations and a required verify contract.
request › Fix: routes trust workspace_id from the body (#142)
A versioned, content-hashed task spec, approved before work.
The proposed plan is checked deterministically against it.
A plan that widens its tools or skips verification does not compile.
The plan may use only what the spec permits.
A prerequisite that is absent never becomes success.
Equivalent plans compile identically.
Steps, dependencies and budgets checked before execution.