Cleared every gate: schema, prompt injection, sandbox sim, and real-world run. Signed, logged, refundable. The hardest tier we ship.