## Lesson — Validate untrusted packs during first execution

**Tags:** security, governance, ux
**Scope:** docs/wiki/pack-ecosystem.md

A `pending-verification` lifecycle state ensures that newly installed packs are validated locally during the first run. This zero-trust approach prevents the silent execution of unverified rules while maintaining a smooth developer experience.
