escape_html() does not exist. This is required by the documented output escaping rule ("Every echo in a view must use escape_html()"). However, the task prompt's Expected Files list does not include a helper file for it.

Scope check: escape_html() is required by the view system itself, not a separate feature. The closest match is app/helpers/ which is where all global helper functions live (INIT-005 pattern). The Sprint 0 plan states the escaping rule under INIT-011, which implies escape_html() is part of the INIT-011 scope — it just wasn't listed as a standalone file because it logically belongs in app/helpers/.

Per the Conflict Rules — I must STOP and explain before creating a file not listed in the MIB.

⚠️ Pre-Implementation Clarification Required
escape_html() is Required but Not Listed
The Sprint 0 Execution Plan states (line 419):

"Output escaping rule: Every echo in a view must use escape_html(). No raw echo $_var ever."

The function escape_html() does not exist anywhere in the codebase. Every layout and view file I create must call it. Without it:

Views cannot escape variables
The output escaping rule cannot be followed
Runtime errors will occur when any view tries to call escape_html()
This function is NOT listed as a separate file in INIT-011 "Files Expected".

My Assessment
escape_html() is a single-line helper identical to htmlspecialchars($value, ENT_QUOTES, 'UTF-8'). It belongs naturally in app/helpers/ alongside env.php, config.php, and csrf_field.php. Adding it to Bootstrap::loadHelpers() would require a 1-line change.

Options for Your Decision
Option A — Add app/helpers/escape_html.php as an undocumented helper (implicit in INIT-011)

Reasoning: the rule mandating escape_html() is defined under INIT-011, so the helper is implicitly part of this task's scope
Impact: 1 new file + 1 line in Bootstrap
Option B — Implement views without escape_html() and use htmlspecialchars() inline instead

This technically violates the documented escaping rule but requires no extra file
Layouts would call htmlspecialchars($var, ENT_QUOTES, 'UTF-8') directly
Option C — Stop INIT-011 and add escape_html() to the MIB before proceeding

No code written; documentation updated first
Which option do you approve? Awaiting your instruction before writing any view files.