Persist ComboNeedsConfirm plans at confirm tier without executing writes, then run task.run via OwnerMux and a stable idempotency key. Co-authored-by: Cursor <cursoragent@cursor.com>
Default legacy stays a no-op; QueryGuard refuses generate keys until U8. Co-authored-by: Cursor <cursoragent@cursor.com>