Use when a horror or survival game needs a trustworthy refuge that converts immediate danger into a bounded planning interval, with validated entry, explicit threat disengagement, declared recovery and persistence, stable save/load behavior, fair re-entry, and complete restart. Produces an implementation when a runtime exists plus a refuge contract, tunables, and verification. Do not use for a pause menu, unconditional global invulnerability, a loading-only checkpoint, or a fake safe room whose unavoidable betrayal is hidden from the player.