planner

SUSPICIOUS: mostly coherent planning behavior, but the optional Oracle path adds unpinned third-party code execution and external transmission of repo context. This is not clearly malicious, yet it exceeds a purely local planning footprint and carries moderate supply-chain and data exposure risk.