From c584af55436cc6852850617ce2dc1d9b105c053d Mon Sep 17 00:00:00 2001
From: huangruiteng <huangrt01@163.com>
Date: Wed, 14 Oct 2026 10:13:05 +0800
Subject: [PATCH] fix(quota): keep replan workspace guards todo-bound

Signed-off-by: huangruiteng <huangrt01@163.com>
---
 loopx/control_plane/quota/should_run.py       |  8 +-
 ...est_quota_boundary_projection_selection.py | 89 +++++++++++++++++++
 2 files changed, 96 insertions(+), 1 deletion(-)

diff --git a/loopx/control_plane/quota/should_run.py b/loopx/control_plane/quota/should_run.py
index 545df51744..606f2c2128 100644
--- a/loopx/control_plane/quota/should_run.py
+++ b/loopx/control_plane/quota/should_run.py
@@ -127,7 +127,13 @@ def _apply_selected_todo_guards(
     local_workspace = observe_goal_local_workspace(
         prepared.item, selected_todo, goal_boundary.get("write_scope", [])
     )
-    if not prepared.inbox_priority_due:
+    if not prepared.inbox_priority_due and not (
+        selected_todo is None and route.replan_decision_allowed
+    ):
+        # Autonomous replan owns this Turn before any delivery Todo is selected.
+        # Falling back to the first executable Todo here can attach that Todo's
+        # workspace guard to a later route (for example, a due read-only monitor)
+        # even though the guarded Todo was never selected for execution.
         workspace_guard = build_agent_workspace_guard(
             prepared.item,
             prepared.agent_identity,
diff --git a/tests/control_plane/test_quota_boundary_projection_selection.py b/tests/control_plane/test_quota_boundary_projection_selection.py
index 63191aff4b..e7043c216e 100644
--- a/tests/control_plane/test_quota_boundary_projection_selection.py
+++ b/tests/control_plane/test_quota_boundary_projection_selection.py
@@ -86,6 +86,95 @@ def _record_workspace_guard_selection(
     assert "boundary_projection_gap" not in packet
 
 
+def test_replan_route_does_not_leak_an_unselected_workspace_guard_to_monitor(
+    tmp_path: Any,
+) -> None:
+    product_delivery = quota_todo_item(
+        todo_id="todo_product_delivery001",
+        priority="P1",
+        title="Implement the product change.",
+        claimed_by=AGENT_ID,
+        task_repository="git:github.com/example/product",
+        required_write_scopes=["src/**"],
+    )
+    due_monitor = quota_todo_item(
+        todo_id="todo_due_monitor001",
+        index=2,
+        priority="P0",
+        title="Observe the benchmark run.",
+        task_class="continuous_monitor",
+        action_kind="monitor",
+        claimed_by=AGENT_ID,
+        task_repository="git:github.com/example/benchmark",
+        target_key="benchmark-run",
+        cadence="1h",
+        next_due_at="2020-01-01T00:00:00Z",
+    )
+    replan_obligation = {
+        "schema_version": "autonomous_replan_obligation_v0",
+        "required": True,
+        "stall_threshold": 2,
+        "trigger_count": 1,
+        "triggers": [{
+            "kind": "periodic_review_due",
+            "section": "run_history",
+            "text": "periodic route review is due",
+            "run_count": 6,
+            "threshold": 6,
+            "agent_id": AGENT_ID,
+        }],
+        "guidance_actions": ["keep", "split", "add", "retire", "ask_decision"],
+        "todo_actions": [{
+            "action": "add",
+            "role": "agent",
+            "priority": "P1",
+            "text": "write a compact replan record",
+        }],
+        "stop_condition": "stop at an authority boundary",
+        "recommended_action": "run the periodic route review",
+        "agent_id": AGENT_ID,
+        "replan_novelty_policy": {
+            "schema_version": "replan_evidence_delivery_policy_v0",
+            "evidence_source": "compact_run_history",
+            "delivery": "host_projected",
+            "writeback": "typed_semantic_delta",
+        },
+        "obligation_id": "replan-0123456789abcdef",
+    }
+    status = quota_status_payload(
+        goal_id=GOAL_ID,
+        status="active",
+        agent_todo_items=[product_delivery, due_monitor],
+        recommended_action=product_delivery["text"],
+        coordination={
+            "agent_model": "peer_v1",
+            "registered_agents": [AGENT_ID, "codex-peer"],
+            "write_scope": ["src/**"],
+        },
+        claim_scope_agent_id=AGENT_ID,
+        item_extra={"autonomous_replan_obligation": replan_obligation},
+        project_asset_extra={
+            "autonomous_replan_obligation": replan_obligation,
+            "autonomous_replan_obligations_by_agent": {
+                AGENT_ID: replan_obligation,
+            },
+        },
+    )
+
+    packet = build_quota_should_run(
+        status,
+        goal_id=GOAL_ID,
+        agent_id=AGENT_ID,
+        workspace_path=tmp_path,
+    )
+
+    assert packet["decision"] == "autonomous_replan_required"
+    assert packet["effective_action"] == "autonomous_replan_required"
+    assert packet["work_lane_contract"]["selected_todo_id"] == due_monitor["todo_id"]
+    assert packet["selected_todo"] is None
+    assert "workspace_guard" not in packet
+
+
 @pytest.mark.parametrize("other_agent_gate", [False, True])
 def test_workspace_guard_keeps_alternative_todo_selection_available(
     monkeypatch: pytest.MonkeyPatch,