Fail-closed adversarial review of the guardrails themselves: verifiers, gates, baseline parsers, and any code that decides ALLOWED/BLOCKED. Not a general code review — a contract audit of the controlling mechanisms.
