Scope Lock: When the LLM Restrains Itself | Synapse