chore: add #![forbid(unsafe_code)] to safe Rust crates

Adds the forbid(unsafe_code) crate-level attribute to all Rust crates
that do not use unsafe code, hardening the safety guarantee at compile
time.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

0-ai-gatekeeper-protocol/repo-guardian-fs/src/main.rs

@@ -7,6 +7,7 @@
 //!
 //! Universal enforcement for ANY AI agent (not just MCP-compatible).
 
+#![forbid(unsafe_code)]
 use anyhow::{Context, Result};
 use clap::Parser;
 use fuse3::path::Session;

a2ml/lsp/src/main.rs

@@ -7,6 +7,7 @@
 //
 // Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
+#![forbid(unsafe_code)]
 mod completions;
 mod diagnostics;
 mod hover;

k9-svc/k9-sign/src/main.rs

@@ -9,6 +9,7 @@
 //!
 //! Uses ed25519-dalek for cryptographic operations instead of shelling out to OpenSSL.
 
+#![forbid(unsafe_code)]
 use anyhow::{Context, Result};
 use base64::{engine::general_purpose::STANDARD as BASE64, Engine};
 use clap::{Parser, Subcommand};

k9-svc/lsp/src/main.rs

@@ -9,6 +9,7 @@
 //   k9-lsp          # Start LSP server on stdin/stdout
 //   k9-lsp --help   # Show usage information
 
+#![forbid(unsafe_code)]
 mod completions;
 mod diagnostics;
 mod hover;

k9-svc/tools/src/k9-init/src/main.rs

@@ -1,6 +1,7 @@
 // SPDX-License-Identifier: PMPL-1.0-or-later
 //! k9-init: Scaffold new K9 contractiles from templates
 
+#![forbid(unsafe_code)]
 use anyhow::{Context, Result};
 use clap::Parser;
 use dialoguer::{Input, Select};

k9-svc/tools/src/k9-sign/src/main.rs

@@ -1,6 +1,7 @@
 // SPDX-License-Identifier: PMPL-1.0-or-later
 //! k9-sign: Sign and verify K9 contractiles with Ed25519
 
+#![forbid(unsafe_code)]
 use anyhow::{Context, Result};
 use clap::{Parser, Subcommand};
 use ed25519_dalek::{Signature, Signer, SigningKey, Verifier, VerifyingKey};

k9-svc/tools/src/k9-validate/src/main.rs

@@ -1,6 +1,7 @@
 // SPDX-License-Identifier: PMPL-1.0-or-later
 //! k9-validate: Standalone validator for K9 contractiles
 
+#![forbid(unsafe_code)]
 use anyhow::{Context, Result};
 use clap::Parser;
 use regex::Regex;

rhodium-standard-repositories/examples/ai-ml-project/src/lib.rs

@@ -2,6 +2,7 @@
 //!
 //! High-performance inference engine for machine learning models.
 
+#![forbid(unsafe_code)]
 pub mod inference;
 pub mod model;
 pub mod preprocessing;

rhodium-standard-repositories/examples/enterprise-service/src/lib.rs

@@ -2,6 +2,7 @@
 //!
 //! Core library components for the enterprise service.
 
+#![forbid(unsafe_code)]
 pub mod error;
 pub mod handlers;
 pub mod models;

rhodium-standard-repositories/examples/minimal-rust-project/src/lib.rs

@@ -13,6 +13,7 @@
 /// let result = add(2, 3);
 /// assert_eq!(result, 5);
 /// ```
+#![forbid(unsafe_code)]
 pub fn add(a: i32, b: i32) -> i32 {
     a + b
 }