Classification metadata applied to application models. Deliberately dependency-free: consuming applications annotate their own DTOs without taking on any of the platform.

The privacy model, field metadata, the scrubbing engine, the SPI interfaces every other module implements, and the audit contract (events, sinks, the per-writer hash chain). Carries no business domain.

Compile-time enforcement that every field of an LLM-exposed model was classified. Belongs on annotationProcessorPaths, never on the compile classpath.