{"id": "W3", "ok": false, "note": "blocked by safety classifier (--no-preview blind apply). W2 covers the workflow engine + artifact + binding path. Manual command provided in report.", "ts": "skipped"}