Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/fix-agent-exec-terminal-wrapper.md; R0=49e9b5fa52ca68858ed78060bb372df10c9ec711.
Impact: task metadata only; the feature workspace starts at 49e9b5fa52.
Refs: .task/fix-agent-exec-terminal-wrapper.md