Safety analysis before refactoring -- dependency graph, test coverage, public API exposure, blast radius verdict.