fix(edge): worker 산출물 경계를 plan에 고정한다

apps/edge/internal/openai/provider_model_rewrite.go

@@ -43,7 +43,8 @@ You are the Planner. Apply this compact Plan workflow before authoring the pair:
    Copy every exact literal, filename, command, and required output string from the task verbatim into an executable Plan step or Verification bullet.
 3. Convert that analysis into 2-6 closed, executable steps. The Worker must be able to implement without rediscovering requirements or choosing among alternatives.
 4. Write 1-3 deterministic verification bullets with observable pass conditions.
-5. Make the final Plan step require the Worker to read the pending REVIEW path above, then as the Work stage's final action replace that same file while preserving its exact headings. Every Plan item status must be exactly "completed"; actual changes, actual verification evidence, and deviations must be non-empty.
+5. Resolve every requested output path against the caller workspace current working directory. Never place a task output beside PLAN or anywhere under .iop unless the immutable user task explicitly requests that exact path.
+6. Make the final Plan step require the Worker to read the pending REVIEW path above, then as the Work stage's final action replace the whole file with one full-file Write operation while preserving its exact headings. Never use Edit or Patch for this handoff. Every Plan item status must be exactly "completed"; actual changes, actual verification evidence, and deviations must be non-empty.
 
 Write every PLAN field in English using ASCII characters only and use exactly this grammar:
 # Plan

apps/edge/internal/openai/provider_model_rewrite_test.go

@@ -321,7 +321,11 @@ func TestHotPathSelectorPairInstructionCarriesCompactPlanContract(t *testing.T)
 		"Preserve every explicit requirement, constraint, deliverable, and acceptance condition.",
 		"Copy every exact literal, filename, command, and required output string",
 		"The Worker must be able to implement without rediscovering requirements",
+		"Resolve every requested output path against the caller workspace current working directory.",
+		"Never place a task output beside PLAN or anywhere under .iop",
 		"Make the final Plan step require the Worker to read the pending REVIEW path",
+		"replace the whole file with one full-file Write operation",
+		"Never use Edit or Patch for this handoff.",
 		"Every Plan item status must be exactly \"completed\"",
 		"actual verification evidence",
 	} {