Migrate legacy auth middleware to new policy engine
intake → survey → draft → build → inspect → inspect → inspect → review_required_human Inspector flagged subtle integration-test regressions across three sequential builds. Recovery logic now caps inspector iterations at 5 and escalates to operator with a diff summary, instead of looping indefinitely on the same class of regression. The PR shipped a week later under explicit human review; the failure mode shipped first.