DL-443

Agent forge writes are gated by a per-account repository allowlist (account_forge_scopes, owner-inherited, * wildcard) checked at ExecuteForgeCallAsAccount after dedup or target resolution, with out-of-scope writes returning the in-band not_found; git access uses a GitHub App installation token narrowed to the granted repositories and delivered as SecretGH on the existing Runner secret path. Refines the deferred A8 posture without superseding the ForgeCaller seam

Status: Active (Matt, 2026-10-04)

Record: ../../server/compass-forge-scope-enforcement/design.md#approach