Trust Graduation gate: Claude can do real work once Mission decides what it is allowed to do.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.
Trust Graduation gate: Claude can do real work once Mission decides what it is allowed to do.