Platform
- AddedGuardrails can be configured per action class, so exploitation and state-changing steps are bounded separately.
- AddedMission action log exposed in full, so an engagement can be reconstructed after the fact.
- ImprovedSeverity rationale now records the reachability evidence that informed the rating.

