# Tasks

- [x] Add `safe_execute` to the operation-class vocabulary.
- [x] Reclassify `atc_run` and prove ordinary reads cannot dispatch it.
- [x] Keep signed `safe_execute` claims fail-closed until exact scope
      enforcement exists.
- [ ] Run package build, typecheck, tests, lint, and full-tree formatting.
