Enforce server-side task permissions, canonical project workspace confinement, ownership checks, and filtered task notification fan-out across JSON-RPC and H3.
Preserve explicit chat-to-task promotion while rejecting one-off and legacy inferred chat workspaces, canonicalize configured-home and catalog paths, support additive authorized task subscriptions, and deliver direct mutation and createTask takeover notifications without generic subscription planting.
Add deterministic production regressions for permission, path, persistence, subscription, notification, and takeover boundaries.
