# Risk Guardrails

- Do not edit `src/generated/` unless the task is specifically about code generation
- Do not update lockfiles unless dependency changes are required
- Do not disable tests to achieve a passing run
- Treat deployment and CI files as high-risk areas
- Prefer package- or module-scoped validation before full-suite validation