mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 12:32:43 +00:00
One suite per gate: the rich reads omit with an honest module_disabled reason, the correlations reader omits and touches no channel, the doctor-visit resource and prompt refuse without assembling the record, and the clinician share collapses to its documents-only state. Each asserts the operator availability path alongside the user toggle, and that the gate short-circuits before the engine runs rather than building the answer and withholding it. The structural test pins that every metric the rich reads can resolve has either an owning module or a written review decision, and is explicit in its own comment about what it cannot prove — it does not show that any read calls the gate. Writing it surfaced an unowned HRV_RMSSD, the fallback type an RMSSD-only account resolves to, which would have served recovery data the primary type refuses.