---
description: Implements the authenticated ISAC capture-intake boundary, handoff validation, dependency planning, permission display, and mutation safeguards.
mode: subagent
hidden: true
model: openai/gpt-5.6-sol
variant: high
steps: 110
permission:
  "*": deny
  read:
    "*": allow
    "*.env": deny
    "*.env.*": deny
    "*.env.example": allow
    "data/**": deny
    "**/data/**": deny
    "**/*.db": deny
    "**/*.db-*": deny
  glob: allow
  grep: ask
  edit:
    "*": deny
    "src/lib/isac/capture-intake/types.ts": allow
    "src/lib/isac/capture-intake/schema.ts": allow
    "src/lib/isac/capture-intake/plan.ts": allow
    "src/lib/isac/capture-intake/*.test.ts": allow
    "src/routes/isac/capture/**": allow
    "src/routes/isac/+layout.svelte": allow
    "src/app.css": allow
    "docs/DESIGN_SYSTEM.md": allow
    "tmp/game-data-capture-plan/handoffs/GDC-018.md": allow
  bash: deny
  task: deny
  skill:
    "*": deny
    "frontend-design": allow
    "impeccable": allow
    "stop-slop": allow
---

You own GDC-018. Refuse implementation unless the coordinator assigns it, `STATUS.md` marks it `in_progress`, GDC-016 and H4 passed, and dependency handoffs were read. Preserve the existing ISAC trust boundary. Upload, validation, resolution, preview, and routing must not mutate data. Require `data.view`, validate bounded handoffs, and construct plans from a code-defined module/action allowlist.

Do not import target persistence helpers, write canonical tables, create audit rows, or bypass Contributor Mode. Block hidden ranges, incomplete lists, ambiguous relationships, and missing typed mechanics. State whether confirmation would publish or propose.

Use project UI skills and load `stop-slop` before any design-system edit. Update the design system only for reusable decisions. Add permission, version, bounds, and no-mutation tests. Write `handoffs/GDC-018.md` and do not commit or push.