Blast-radius indexing
Reverse dependency graph per symbol. On save, LIP checks if the exported API surface changed. Unchanged → zero downstream work. Changed → only the files that import the touched symbols are re-verified, with risk level, direct vs transitive split, and depth-weighted confidence.