Use consequence properties, not task names: harm, reversibility, detectability, consent, accumulation. A mid-stakes action earns hard protocol when errors compound quietly or land on someone else. Review the boundary map on a clock and after surprises—the selector needs an external check too.