Binds Phase 5+ to per-route trust classification, runtime surface contract obligations, audit fidelity guarantees, pack-mutation proposal-only discipline, backend contract documentation, and the CLAUDE.md PR Checklist questions. Phases 1-4 remain safe to start; Phase 5+ gated on this addendum.