Add AI lab action guardrails

docs/CODEX_EXECUTION_LOG.md

@@ -3760,3 +3760,30 @@ Limitations:
 
 Next recommended pass:
 - Continue with V1 usability work that reduces operator confusion without expanding frozen product scope.
+
+## Sprint 104 AI Lab action guardrails (2026-06-24)
+
+Changed:
+- Added explicit action guardrails below the Detection Lab and Segmentation Lab run-readiness panels.
+- Detection now distinguishes `configured` model registry state from UI-runnable action state, blocking the explicit test/demo-only `manual-fixture-detector` in the normal workbench run form.
+- Segmentation now distinguishes `configured` model registry state from UI-runnable action state, blocking the explicit test/demo-only `fixture-segmenter` in the normal workbench run form.
+- Updated run button disabled conditions to use the new readiness/action state.
+- Added compact guardrail styling and regression coverage in `backend/tests/test_sprint104_ai_lab_action_guardrails.py`.
+- Updated `CHANGELOG.md` and `docs/TODO.md`.
+
+Tested:
+- Red step: `python -m pytest backend\tests\test_sprint104_ai_lab_action_guardrails.py -q` failed while the action guardrails and CSS contracts were absent.
+- `python -m pytest backend\tests\test_sprint104_ai_lab_action_guardrails.py -q` (`3 passed`)
+- `python -m pytest backend\tests\test_sprint103_ai_lab_run_readiness.py backend\tests\test_sprint104_ai_lab_action_guardrails.py -q` (`6 passed`)
+- `python -m compileall backend/app`
+- `cd frontend && npm run typecheck`
+- `cd frontend && npm run build`
+
+Open:
+- Full repository validation, commit, deploy and live browser verification are still pending for this pass.
+
+Limitations:
+- Frontend action-guardrail guidance only; no backend API, persistence, migration, provider fetching, AI dependency or model execution behavior changed.
+
+Next recommended pass:
+- After deploy validation, continue with V1 usability work that reduces operator confusion without expanding frozen product scope.

docs/TODO.md

@@ -370,3 +370,4 @@ This file now starts with the current implementation status. Older preparation/b
 - [x] Add useful default dataset context so Data, Map and Exports are immediately usable after project/demo load.
 - [x] Make raster tile handoff to Detection Lab auto-select the configured YOLO run form.
 - [x] Add AI Lab run-readiness checks for Detection and Segmentation before job submission.
+- [x] Add AI Lab action guardrails so explicit fixture models are not exposed as normal operator runs.