The implementation plan lives outside the repo, so it neither travels with the
project nor appears in history. Record the milestones here instead, with M0
checked off and the safety-critical M1 items called out separately from the
module work.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>