-- safety.lua — destructive op heuristic + Chuck Norris autonomous gate.
-- Phase 0: stub. Lands in Phase 2.
-- See docs/PHASE0.md §11 (Phase 2), §12 (security posture is workflow-not-OS).

local M = {}

-- Returns true if cmd matches the destructive-op heuristic and should HALT
-- in Norris mode pending user confirmation.
function M.is_destructive(cmd)
    error("safety.is_destructive: not implemented (Phase 2)")
end

-- Norris mode planning loop entry point.
function M.norris_step(plan, broker, executor)
    error("safety.norris_step: not implemented (Phase 2)")
end

return M