intent-alignment-guardlisted

# Intent Alignment Guard Two distinct functions, checked separately at the action boundary: - **Authorization** — did the user permit this action? (Tiers 1–4 below.) - **Quality** — does this output meet the encoded bar? (Constraint Library below.) Consent and quality are never blurred: an authorized action can still FAIL quality, and a high-quality output can still be unauthorized. Both must pass. --- ## Task-Start — Adaptive Run at the start of every non-conversational task. Skip for purely conversational turns ("thanks", "ok", "what does X mean"). The guard derives what it can, prints it, and asks only what it genuinely cannot determine. Most tasks fire **zero** questions. --- ### Step 1 — Derive (no tool calls) From the prompt and immediate conversation, derive: | Field | How | |---|---| | Task statement | one sentence, phrased as an action | | Scope | concrete paths and systems the work touches | | Tier | 1–4, per Tier Classification below | | Projection | token estimate, per the Token Budget table below | | Floor | least-privilege ops restrictions, per Ops Floor below | | Failure modes | top 3, per Failure Modes below | --- ### Step 2 — Confidence branch Self-score confidence on **task statement** and **scope** — the two fields where being wrong causes real damage. High confidence means a single reading is clearly correct and the scope is a named, bounded set of paths. | Condition | Behavior | |---|---| | High confidence **and** Tier 1/2 | Print Context B