Trust and safety

Trust lanes, verification, permissions, and report handling.

Author verification and component verification are independent. Neither is proof that content is safe.

Experimental third-party content requires explicit consent and is excluded from automatic installation. Every external write uses a plan, digest, precondition re-check, confirmation, verification, and rollback path.