Execution, integrity, and provenance determine PDF safety.