== CASAN security gate ==
  GATE PASS  run-casan4 harness suite
  GATE PASS  adversarial suite
  GATE PASS  audit hash-chain (signed)
  GATE PASS  tool-call audit (signed)
  GATE PASS  secrets scan (WP-S4)
  GATE PASS  no-bypass + circuit breaker
  GATE SKIP  model router + red-team + judge-gate (Ollama tunnel down)
  GATE PASS  frontend runtime tests (WV4-A)
== verdict: PASS=7 FAIL=0 SKIP=1 ==