Setup and fix now write or merge a shared .vscode/settings.json with repository-scan ignores for Guardex .omx and .omc worktree roots. The managed gitignore block also re-includes that one tracked settings file while keeping the rest of .vscode local-only, so plain repo checkouts stop filling Source Control with raw sandbox repositories.

Constraint: Default repo views should hide nested Guardex worktrees while the optional parent-workspace view still exposes them intentionally
Rejected: Add the .vscode/settings.json fix only to this repo | would not improve gx-managed repos created by setup
Confidence: high
Scope-risk: moderate
Reversibility: clean
Directive: Keep .vscode/settings.json as the only shared VS Code file unless setup and tests are updated together
Tested: node --test test/setup.test.js --test-name-pattern "setup provisions workflow files and repo config|setup appends managed gitignore block without clobbering existing entries|setup merges Guardex repo-scan ignores into tracked VS Code workspace settings"; node --check bin/multiagent-safety.js; git check-ignore -v .vscode/tmp-local.json .vscode/settings.json
Not-tested: Manual VS Code UI verification against a live repo window