Protect approved artifacts before running anything that overwrites its outputs. Use when about to run a generator, exporter, or build step that overwrites existing artifacts, or the moment a human marks an artifact as approved, final, or "locked in."
