Doorstep's core design principle is that the model decides which location to select but never decides how far—distance is filtered at the code level based on accessible range, and the model only chooses from a list that has already been deemed safe.