Safety modelThe deletion chokepoint, the protected lists, the tiers, the idle gate and the dry-run guarantee.