Enforce bounded operation guardrails

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028de-e2c8-7732-8521-46a7fc5db82f

src/activity_core/context_resolvers/reuse_surface.py

@@ -21,8 +21,6 @@ import httpx
 import yaml
 
 from activity_core.context_resolvers.base import CONTEXT_RESOLVER_REGISTRY, ContextResolver
-from activity_core.context_resolvers.forgejo_prune import forgejo_package_prune
-from activity_core.context_resolvers.cnpg_backup import cnpg_option_a_backup
 from activity_core.context_resolvers.kaizen import KaizenContextResolver
 from activity_core.context_resolvers.state_hub import StateHubContextResolver
 
@@ -506,15 +504,15 @@ class ReuseSurfaceContextResolver(ContextResolver):
 
 
 class ShellContextResolver(ContextResolver):
-    """Dispatch shell-backed context queries without breaking kaizen aliases."""
+    """Dispatch code-registered read-only shell compatibility queries."""
 
     def resolve(self, query: str, event: Any, params: dict[str, Any]) -> dict[str, Any]:
         if query == "reuse_surface_report_gaps":
             return reuse_surface_report_gaps(params)
-        if query == "forgejo_package_prune":
-            return forgejo_package_prune(params)
-        if query == "cnpg_option_a_backup":
-            return cnpg_option_a_backup(params)
+        if query in {"forgejo_package_prune", "cnpg_option_a_backup"}:
+            raise RuntimeError(
+                f"mutating query {query!r} must run through the bounded-operation stage"
+            )
         return KaizenContextResolver().resolve(query, event, params)