Nine therapy protocols, one shared safety layer the model doesn't control