Risk Guardrails

Do not edit src/generated/ unless the task is specifically about code generation
Do not update lockfiles unless dependency changes are required
Do not disable tests to achieve a passing run
Treat deployment and CI files as high-risk areas
Prefer package- or module-scoped validation before full-suite validation