DL-507

Push authorization has two layers: a client push guard compiled into the agent binary as an inline OMP extension is load-bearing and reaches task subagents (SDK floor 18.3.5, task isolation forced off); server-side branch protection and the scoped forge token are a recommended backstop, not a guarantee

Status: Active (Matt, 2026-08-07)