Safety gates

Approvals

High-risk work stops here. Approving records audit; never auto-merges to main.

No tasks need review. Seed demo scenarios for a high-risk bugfix gate.