Addendum §3 (controlling): the gate is server-computed API-NEW and means "no unresolved unsafe state remains in the included output" — not "the user clicked past the warnings". The UI may render the gate but is not the source of truth. Export (CSV/XLSX/HTML with citations + audit) is new API-NEW.
5 included cells block export. The gate blocks if any included cell/claim has:
review_status ∈ {draft, needs_source, needs_lawyer_review, escalated, stale}support_status ∈ {unsupported, not_registered, stale}rejected cells are excluded from output by default,
but their decision record remains available in the audit export if requested.
An client_ready audit event is emitted. A careless export
is a confidentiality incident — the redaction option intersects the privilege/PII and retention ADRs
(blueprint §7.8).
Honesty. Any later internal/working export must be visually and semantically distinct from a client-ready export, so an unfinished review is never mistaken for a defensible deliverable.