any directive present in only one, which is what re-broke the auth.neuralpositive.ai backend connection earlier. Keep the union of safe directives in one tag; do NOT add a second. -->