Query-level safety classification