init

.specify/templates/tasks-template.md

@@ -73,6 +73,24 @@ Examples of foundational tasks (adjust based on your project):
 
 ---
 
+## Phase 2.5: Safety & Compliance (Mandatory for destructive operations)
+
+**Purpose**: Enforce constitution safety guarantees before any deletion work
+
+- [ ] T009A Implement global read-only mode that blocks all mutations
+- [ ] T009B Enforce root-path boundaries for all filesystem operations
+- [ ] T009C Implement single-writer guard for destructive operations
+- [ ] T009D Implement dry-run preview + explicit confirmation flow for deletion
+- [ ] T009E Implement two-stage deletion (trash/staging) as default behavior
+- [ ] T009F Enforce symlink-safe deletion (do not follow symlinks)
+- [ ] T009G Append-only audit log with required fields for every mutation
+- [ ] T009H Enforce whitelist protection for directory-level actions
+- [ ] T009I Implement list-file edit preview + atomic write (exact-match default)
+
+**Checkpoint**: Safety guarantees verified - destructive workflows can now begin
+
+---
+
 ## Phase 3: User Story 1 - [Title] (Priority: P1) 🎯 MVP
 
 **Goal**: [Brief description of what this story delivers]