Security

Decision Gate assumes hostile inputs and fails closed on missing or invalid evidence. These references document trust policy, disclosure controls, and the full threat model.