Enforce bounded operation guardrails

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028de-e2c8-7732-8521-46a7fc5db82f

activity-definitions/daily-sbom-catchup.md

@@ -13,6 +13,7 @@ trigger:
 context_sources:
   - type: sbom-nexus
     query: catch_up
+    operation: sbom_nexus_ingest
     required: true
     params:
       limit: 3          # catch_up_limit — operator knob, not a nexus constant
@@ -67,7 +68,7 @@ max_tokens: 1
 prompt: |
   Deterministic SBOM catch-up report from context.catchup (no LLM).
 output_schema: ""
-review_required: false
+review_advisory: false
 report_sinks:
   - type: state-hub-progress
     event_type: sbom_catchup