Security-gate MEDIUM: a self-service floor-guard: allow <reason> neutralised the detector in the same commit. User chose strict: the tool prints WAIVED, the contract authorizes, the verifier counts the rest as gaps. BDR-102 amendment.