script-vault 1

Codex-style scratch execution for DeepSeek Harness: operation scripts run from a session scratch root and are collected into a plugin-owned vault, so the workspace only ever holds real deliverables. Diverts new scratch writes, and retrofits residue that w