pub fn gate(project: &Value, vault_names: &[String]) -> Vec<Finding>
The push gate: the error-severity findings that must stop a node from writing this project’s config to a live host. Empty means go. A warning never gates.