fix: protect security contract files from autofix deletion

.github/workflows/pr-review-autofix.yml

@@ -463,6 +463,32 @@ jobs:
             --snapshot "$ordinary_scope_snapshot" \
             --allowed-paths "$allowed_paths_zlist"
 
+      - name: Reject protected security-contract deletions and renames
+        run: |
+          set -euo pipefail
+          cd "$TARGET_WORKSPACE"
+          # Security-contract files may be edited only when a review explicitly
+          # names them, but an autofix must never delete or rename them. This
+          # keeps an unrelated optimization from removing origin validation,
+          # its regression evidence, or the standards record.
+          protected_security_paths=(
+            "backend/core/local_http.py"
+            "backend/core/url_validation.py"
+            "backend/tests/test_local_http.py"
+            "backend/tests/test_url_validation.py"
+            "docs/doctoring/local-http-origin-port-validation.md"
+          )
+          for protected_path in "${protected_security_paths[@]}"; do
+            while IFS=$'\t' read -r status _; do
+              case "$status" in
+                D|R*)
+                  echo "::error::Autofix cannot delete or rename protected security-contract path: $protected_path"
+                  exit 1
+                  ;;
+              esac
+            done < <(git diff HEAD --name-status -- "$protected_path")
+          done
+
       - name: Validate changed files
         if: env.RESOLVE_CONFLICT != 'true'
         run: |
@@ -494,6 +520,7 @@ jobs:
               exit 1
             fi
           done
+
           changed_python_files=()
           changed_workflows=()
           for changed_file in "${changed_files[@]}"; do

tests/test_opencode_agent_contract.py

@@ -1319,6 +1319,24 @@ def test_autofix_worker_resolves_merge_conflicts_fail_closed():
     )
     assert 'git push origin "HEAD:${PR_HEAD_REF}"' not in worker
 
+    for protected_path in (
+        "backend/core/local_http.py",
+        "backend/core/url_validation.py",
+        "backend/tests/test_local_http.py",
+        "backend/tests/test_url_validation.py",
+        "docs/doctoring/local-http-origin-port-validation.md",
+    ):
+        assert protected_path in worker
+    assert "Autofix cannot delete or rename protected security-contract path" in worker
+    assert "- name: Reject protected security-contract deletions and renames" in worker
+    protected_step = worker.split(
+        "- name: Reject protected security-contract deletions and renames", 1
+    )[1].split("- name: Validate changed files", 1)[0]
+    assert "if: env.RESOLVE_CONFLICT" not in protected_step
+    assert "git diff HEAD --name-status -- \"$protected_path\"" in protected_step
+    assert "git diff --name-status -- \"$protected_path\"" not in protected_step
+
+
     # The fix scheduler dispatches the mode only for approved conflicting PRs.
     scheduler = Path("scripts/ci/pr_review_fix_scheduler.py").read_text(
         encoding="utf-8"