Function scrutiny_gate 

pub fn scrutiny_gate(
    skip_scrutiny: bool,
    allow_unvalidated: bool,
) -> Result<(), String>

The unattended scrutiny floor: exec runs with no human present, so a mission whose config disables the scrutiny validator (skipScrutiny) has no adversarial reader at all and can satisfy its own acceptance tautologically (docs/gascity.md lesson 3 records exactly this incident). Interactive run/plan are not gated — a human is present there. Passing --allow-unvalidated (or setting KRANZ_ALLOW_UNVALIDATED=1) is an explicit, auditable acknowledgment that overrides the floor.