Regulatory risk separated from the rest of the build.

A confidential regulated workflow was scoped into safe modules, review paths, and launch boundaries.