The optional System One classifier (Jev / TypeSafe), on a separate axis from
the generative LLM. Off by default: opt-in strict, since Jev is a proprietary
SaaS and slopguard’s deterministic AST mode stays the offline socle.
scan --fix policy. Builtin rules marked autofix_safe are always
rewritten; a rule from rules.custom_dirs or [[rules.sources]] is
rewritten only when its id is listed in allow_external, so a third-party
ruleset cannot rewrite source files on its own say-so. User-only: an
untrusted repo slopguard.toml cannot set it.