# ApiVault Safety Model

ApiVault is metadata-first.

Hard rules:

```text
- No runtime source file reads.
- No full Blizzard source display in-game.
- No protected/secure API auto-execution.
- No automatic SetAttribute calls.
- No automated secure button testing.
- Secure-sensitive entries are inspect-only unless explicitly safe-readonly.
```
