intake-wtr-guardrail-all-paths

Notes

• 2026-09-09: The Prince George’s County waterproofing-only guardrail now runs on every /intake/confirm path. Previously only the non-triage approval-queue branch called check_wtr_companion_policy, so post-production desk reviews (staged Desk Review Prep conversions, triage-role queue submissions, legacy triage direct confirm) created projects with no prompt. New shared evaluator routes/intake.evaluate_wtr_scope_policy: waterproofing-only scope in a policy jurisdiction 409s with the same submit-anyway prompt; the 409 and the override flags carry effect = queued_for_approval | created_flagged so the wizard says what submit-anyway does. On direct-confirm paths record_wtr_override_on_project writes an internal comm_log row on the project, notifies up_owner/up_admin with a /projects/{id} link, and sends the email + SMS alert pointed at the project (send_wtr_override_alerts gained review_url + outcome). entirely-api 8bb2de6, entirely-portal 1cb77ce; 14 new tests, suite 1251 passed; deployed, health 200. Not yet exercised with a real PG desk review.