pm-scope-control

Control CodeFlowMu task scope and prevent drive-by expansion. Use when PM must define allowed files, forbidden files, non-goals, risk expansion points, or when an agent proposes refactors, runtime changes, protocol changes, or external skill imports beyond the task.