Scoring
Confidence gate
The rule that withholds an overall rating below High confidence, and stops a pack built on partial evidence being issued at all.
What it is
Below High evidence confidence, the overall rating is withheld and reported as insufficient evidence.
What High requires
Three scored governance domains, security among them.
Why it is a hard gate
Because the alternative is a rating that looks identical to a well-evidenced one. A board cannot tell, from a number, how much of an environment it was derived from.
The engine will not emit a deliverable pack below High, so a partial-evidence pack cannot be shipped by accident.
Why security is required specifically
It carries half the weight and the widest evidence base. An overall rating without it would be a rating of resilience and cost presented as a governance position.
What it does not mean
The gate is not a failure. A run that reaches insufficient evidence has worked correctly and reported an honest limit, which is a different fact from a broken pipeline, and the two are kept apart at every layer.