# TASK IMPLEMENTATION — S3-004A

## Sprint 3 Recommendation Cleanup

Sprint 3 has been approved by Architecture Review.

This task implements ONLY the approved cleanup recommendations.

Do not start Sprint 4.

Do not implement new features.

---

# Reference

Review the Sprint 3 Architecture Review.

Apply ONLY these recommendations:

1. Remove 'unsafe-eval' from the Content Security Policy if runtime verification confirms it is not required.

2. Replace SELECT * inside WorkspaceModel::getPrinterConfig() with an explicit column list.

3. Add a developer docblock/comment to WorkspaceModel::insertWorkspace() documenting that the database UNIQUE constraint on workspaces.slug is the definitive collision guard.

---

# Files Allowed

Modified only:

* public/.htaccess
* app/modules/Workspace/WorkspaceModel.php

No other files may be modified.

---

# Constraints

Do NOT:

* implement new features
* modify WorkspaceService
* modify WorkspaceMiddleware
* modify Controllers
* modify Validators
* modify routes
* modify database schema
* modify app/core/*
* perform git operations

---

# Verification

Before finishing:

* Verify the application works without 'unsafe-eval'. If it is required by an existing runtime dependency, keep it and explain why.
* Verify getPrinterConfig() returns exactly the same functional result using explicit columns.
* Verify php -l passes on modified PHP files.
* Verify only approved files were changed.

---

# Output

Provide:

1. Files modified.
2. Cleanup summary.
3. Verification results.
4. Any remaining recommendations intentionally deferred.
5. Ready for Commit?

Stop after the report.

Wait for Human Approval.