forge-deployment-safety

Safeguard Atlassian Forge app changes that become irreversible, immutable, migration-sensitive, permission-sensitive, or disruptive after deployment. Classify changes, require prominent human review of the final diff, and forbid any deployment or equivalent remote mutation until the user explicitly confirms review and authorizes that exact deployment.