Research questionHow should runtime gates preserve branch-level safety information when admitting recovery progress after violations?After a tool proposal violates constraints, rejecting it only causes another proposal from the same state, so the gate shapes the recovery search. An aggregate improvement can conceal worsening or persistent violations on individual branches, making the structure of the violation state important for admission.