L09-04 — Quarantine watch-folder imports #71

Outcome

Implement capability-limited file intake with stable identity, deduplication, traversal limits, and explicit release from quarantine.

Parent and boundary

Parent: #10. Owner: proposed Intake module. This issue owns one bounded slice of Intake; consume accepted upstream contracts and keep PDF/verdict/publication authority with Core.

Acceptance

• Reimport is idempotent and rejected files remain inspectable without job mutation.
• Failure case: Path traversal, symlink escape, partial-write, or hostile PDF cannot trigger downstream execution.

Required proof

Watch-folder adversarial and restart suite. Record the exact source SHA, test command or hosted run, fixture/artifact identity, and any skipped or unavailable lane. Run the repository's mapped proof and check-change gate for a PR.

Handoff

Record changed files, observed result, remaining risk, and a 1–3 sentence anti-slop review. Completion means acceptance evidence, not merely a merged implementation.

Sources

Approved master roadmap · Legacy/research input (legacy #594).