Enforce bounded operation guardrails

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028de-e2c8-7732-8521-46a7fc5db82f

activity-definitions/daily-cnpg-option-a-backup.md

@@ -13,6 +13,7 @@ trigger:
 context_sources:
   - type: shell
     query: cnpg_option_a_backup
+    operation: cnpg_option_a_backup
     required: true
     params:
       backup_script: /opt/railiance-platform/tools/cmd/cnpg-option-a-backup

activity-definitions/daily-sbom-catchup.md

@@ -13,6 +13,7 @@ trigger:
 context_sources:
   - type: sbom-nexus
     query: catch_up
+    operation: sbom_nexus_ingest
     required: true
     params:
       limit: 3          # catch_up_limit — operator knob, not a nexus constant
@@ -67,7 +68,7 @@ max_tokens: 1
 prompt: |
   Deterministic SBOM catch-up report from context.catchup (no LLM).
 output_schema: ""
-review_required: false
+review_advisory: false
 report_sinks:
   - type: state-hub-progress
     event_type: sbom_catchup

activity-definitions/weekly-forgejo-package-prune.md

@@ -13,6 +13,7 @@ trigger:
 context_sources:
   - type: shell
     query: forgejo_package_prune
+    operation: forgejo_package_prune
     required: true
     params:
       prune_script: /opt/railiance-platform/tools/cmd/forgejo-package-prune

activity-definitions/weekly-sbom-staleness.md

@@ -49,7 +49,7 @@ max_tokens: 1
 prompt: |
   Deterministic SBOM staleness report from context.repos (no LLM).
 output_schema: ""
-review_required: false
+review_advisory: false
 report_sinks:
   - type: state-hub-progress
     event_type: sbom_staleness