Verified pipes are pinned, tested, and signed. Community pipes remain open with explicit risk messaging.
