diff --git a/crates/didbot-policy-source/src/lib.rs b/crates/didbot-policy-source/src/lib.rs
index c1fc4180..7f2e5c71 100644
--- a/crates/didbot-policy-source/src/lib.rs
+++ b/crates/didbot-policy-source/src/lib.rs
@@ -57,6 +57,8 @@
 //! something concrete to load. See [`record`]'s doc comment for exactly
 //! what a real lexicon would need to settle.
 
+#![forbid(unsafe_code)]
+
 pub mod blob;
 pub mod builtin;
 pub mod compile;
diff --git a/crates/didbot-policy/src/lib.rs b/crates/didbot-policy/src/lib.rs
index 71c1ebea..877c27c8 100644
--- a/crates/didbot-policy/src/lib.rs
+++ b/crates/didbot-policy/src/lib.rs
@@ -63,6 +63,8 @@
 //! deletes) without being load-bearing for a value-shaped rule's
 //! correctness.
 
+#![forbid(unsafe_code)]
+
 mod evaluate;
 mod index;
 mod language;