| ## What Changed | |
| - | |
| ## Why | |
| - | |
| ## Safety Gates | |
| - [ ] No secrets, tokens, generated auth folders, or provider credentials are committed. | |
| - [ ] Adult catalog behavior remains opt-in and does not disable ST3GG, consent, provenance, export, or dataset gates. | |
| - [ ] Pinned lanes remain pinned: FLUX.2 image generation, LocateAnything grounding, ST3GG security. | |
| - [ ] Generated outputs, moodboards, logs, caches, and local previews stay untracked. | |
| ## Verification | |
| - [ ] `python -m compileall app.py src tests` | |
| - [ ] `python -m pytest -q tests -p no:cacheprovider --basetemp=C:\tmp\pytest-nvw-full` | |
| ## Screenshots / Notes | |
| - | |