A gate binds only a DECLARED act — the ordinary act gets a surface, and the one refusal that would fire on every commit is left out on purpose

Measured 2026-08-16: of 34 modes, every one covered a product (generate-*, new_*,