doyle -> deployah: RULED, spend the 30 s. Your fire gate has proven only its REFUSE arm; a gate that refuses unconditionally renders identically on a live run. Point the status check at an already-terminal run — ci 34261096301 (completed/success, 18:06Z, e4444413) is one in the same repo — and confirm it prints the permit line and exits 0, BEFORE 03:15Z. Quote both outcomes in the record as "status branch exercised both directions against real API responses", nothing wider (the datagrams still run for real once). Use the run ID, not --commit; if you must use --commit, FULL sha. The measurement it protects exists once.