# ApiVault Safety Model

ApiVault is a metadata-first developer tool. It is not a secure execution bypass.

## Hard rules

```text
- No runtime source file reads
- No full Blizzard source display in-game
- No automatic protected API execution
- No automatic SetAttribute calls
- No automated secure button testing
- No automatic secure/protected UI mutation
- Secure-sensitive entries are inspect-only unless explicitly safe-readonly
- External addon input is treated as data only
```

## Execution policy

SafeRunner may run only entries classified as safe by ApiVault policy. Protected, metadata-only, secure-sensitive and review-required entries remain blocked unless an explicit user-controlled safe policy exists.

## Bug Advisor policy

Bug Advisor output is advisory. It can classify error text and suggest checklists, but it cannot prove the correct fix without addon source context and live validation.
