cawplan-coding-commit

The workflow is scoped to collecting and reporting coding sessions, with explicit approval gates for uploads and ticket updates. No exfiltration or deceptive behavior is evident in the supplied instructions, but the required cawplan CLI's provenance is unverified, creating a material supply-chain risk.