Human safety verdicts are now final everywhere.
A human verdict can no longer be overwritten. A verdict set by hand was already final for screening, but the deep investigator never checked the stored verdict, so an investigation queued for a host could run the model, enforce, and replace the human call when it saved its own. The investigator now skips any host with a human verdict before calling the model, and the verdict store refuses every system write over a human one.
Housekeeping. ufw-cloudflare.sh moved from app/infrastructure/ to deploy/, since it is a host firewall script. The README's ecosystem cards now link their names to each repo.