Complete autonomous recovery controls

internal/registry/registry.go

@@ -29,6 +29,11 @@ type Project struct {
 	Repo         string `json:"repo,omitempty"`
 	WorktreeRoot string `json:"worktree_root,omitempty"`
 	QualityGate  string `json:"quality_gate,omitempty"`
+	// SafeOperations is an audited, deliberately small allow-list for work
+	// inside this project's task worktree. It documents what workers may
+	// perform without an operator grant; network, secrets, destructive Git,
+	// and paths outside the worktree are never represented here.
+	SafeOperations []string `json:"safe_operations,omitempty"`
 }
 type Machine struct {
 	ID      string `json:"id"`
@@ -131,6 +136,13 @@ func New(c Config) (Registry, error) {
 		if len(p.MachineAffinity) == 0 {
 			return Registry{}, fmt.Errorf("project %q: %w", p.ID, ErrNoAffinity)
 		}
+		for _, op := range p.SafeOperations {
+			switch op {
+			case "read", "edit", "test", "git":
+			default:
+				return Registry{}, fmt.Errorf("project %q: unsafe operation %q is not policy-configurable", p.ID, op)
+			}
+		}
 		r.projects[p.ID] = p
 	}
 	for _, m := range c.Machines {