{
  "id": "gate-security",
  "type": "manual_review",
  "invariant": "No unmitigated high-severity security or policy risks",
  "command": "",
  "evidence_requirement": "SECURITY_REPORT.md with explicit mitigations or accepted residual risk"
}