The discuss step already guarded against artifacts, but proposal, design, specs and tasks lacked an equivalent guard, so the model could generate implementation code during spec authoring. Add an explicit prohibition to each pre-apply step; apply stays the only step that implements.