fix(ai): bind model scope to immutable geometry

docs/TODO.md

@@ -1115,8 +1115,10 @@ This file now starts with the current implementation status. Older preparation/b
   112 Ruff findings and add real frontend lint.
 - [ ] P2-02: fix CRS ingest, metre buffering and Area geometry/CRS updates;
   auditably quarantine or repair the four legacy Geel detections.
-- [ ] P2-03: isolate coverage by source/theme/layer/zone, make official source
-  identity server-attested and replace mutable-name legal/model scope checks.
+- [ ] P2-03: isolate coverage by source/theme/layer/zone and make official
+  source identity server-attested. The mutable-name YOLO scope bypass is fixed
+  with a model/checksum-bound geometry manifest; equivalent legal-scope checks
+  still require the same review.
 - [ ] P2-04: make derived persistence transactional, require complete
   RunManifest hashes and expose every fallback/persistence failure.
 - [ ] P2-05: remove every protected-test feedback path, introduce a test vault