desktop: a Fix button on scan and validate findings storebound can fix itself. Findings carry action { method, args } (cli/lib/fix-actions.ts); privacy-labels runs scan.write (scan --write-only, the dialog shows the config diff), Play listing gaps play.listing, a missing App Store localization or copyright apple.listing (editable version only), the App Review contact apple.review_details; each a dry run, the native dialog, then the confirmed run. --write-only is forbidden for MCP tools; tests pin the mapping, the round trip on a fixture and that no fix reaches a submit, release or publish

cli/data/flags.json

@@ -730,7 +730,8 @@
    "store",
    "threshold",
    "unity",
-   "write"
+   "write",
+   "write-only"
   ],
   "serve": [
    "stdio"
@@ -1087,6 +1088,7 @@
    "with-version",
    "workspace",
    "write",
+   "write-only",
    "xdg-mime"
   ]
  },
@@ -1400,6 +1402,7 @@
   "scan": [
    "storebound scan [--dir <project>] [--config <file>] [--store apple|play] [--json] [--no-declarations]",
    "storebound scan --write            also write the detected dataSafety / appPrivacy answers into the config",
+   "storebound scan --write-only [--dry]  only that write (with --dry: the config diff), no report (desktop Fix button)",
    "storebound scan --originality [--against <folders>] [--threshold 0.7]   also the 4.3 / Play repetitive content"
   ],
   "shots capture": [