Runbook: Safe Deletion Guardrails
Focus: Schutz vor rm-Fehlern und Scope-Prüfung

1. Run ./run.sh.
2. Inspect work/evidence/.
3. Review failed validation with an unsafe name.
4. Remove work/ after collecting evidence.
