cawplan-ticket-create

The ticket workflow is scoped to CawPlan and includes safeguards against acting on untrusted content or creating tickets without confirmation. However, the required CLI's provenance is unverifiable from the supplied evidence, so supply-chain uncertainty drives a high security-risk score; there is no evidence of confirmed malicious behavior.