AI Execution Governance, Part 2: Classify AI Writes First, the R0–R5 Tool Risk Model

The previous piece, "Runtime over Prompt", argued that the security boundary belongs on the execution path — immediately before a tool call can produce a side effect. This one goes a level deeper. Onc