Safety filter runs client-side in this demo; production must enforce the same rules server-side.