Gates run in deterministic Python after every proposal. The model cannot reach or override them.
The agent's own market read sets its risk budget and forbids directions. A regime can only reduce risk, never raise it above the base budget.