Bind protected autonomy recommendations to the declared request #466

🤖 Generated by the Agentic Engineer

Problem

The protected-classification return precedes request scope/current-revision checks. A foreign scope and revision can be named as the retained default.

Reproduced offline against freshly fetched main with a valid control. Inspected guidance and repositories were not executed, and no inference or provider test was launched.

Acceptance criteria

Validate request scope and supported current revision before any recommendation; unknown or foreign protected state HOLDs without naming a revision; preserve valid incumbent retention. Add positive and negative cases. Size: S.

Part of #223.