safety-model.md

description	What api-verity-lab will and will not do to a live service: dry-run defaults, explicit opt-in for anything that writes, and hosts refused unless allow-listed.

--8<-- "SAFETY_MODEL.md"