note: This Ticket changes Profile concrete scope / launch policy surfaces and is likely to overlap with `00001KTZY8HK2` profile API/resource migration. Start `00001KTZY8HK2` first; re-evaluate after it merges or if explicit override is requested.

author: orchestrator


note: Queued batch routing started independent Tickets `00001KTR81P9X`, `00001KTZY8HK2`, and `00001KV12W2RT`. This Ticket remains queued due to profile-surface conflict/migration ordering with `00001KTZY8HK2`, not because of missing requirements. Re-evaluate after profile extend removal branch is integrated.


summary: Implement launch-policy-owned concrete scope/delegation authority: remove builtin Profile concrete scope dependency, construct fresh Orchestrator/Companion effective scopes in launch paths, preserve metadata snapshot restore, and ensure child delegation validation supports root read + worktree write only.

role_plan: Coder works on Profile schema/resource cleanup and launch policy scope construction in dedicated worktree; Reviewer focuses on authority boundaries, restore snapshot preservation, child delegation validation, and no regression of normal Companion launch scope.