phase-contract-workflow

No explicit stealth malware/backdoor logic is visible (no hardcoded secrets, no direct HTTP exfiltration, no persistence routines). The dominant security concern is a supply-chain/sabotage execution design: phase check commands defined in plan/manifest.yaml are executed verbatim via `sh -lc` (Open3), meaning manifest tampering (or a compromised dependency that supplies/modifies the manifest) can yield arbitrary code execution in the environment running planctl. Additionally, the tool writes state/handoff ledgers and can commit and push them, amplifying impact. Overall risk is high due to configuration-to-shell execution.