Function plan 

pub fn plan(
    root: &Path,
    request: EngineContextPlanRequestV1,
) -> Result<EngineContextPlanResponseV1, &'static str>

Local operator authority only: no tenant authorization is inferred from task labels.