What broke
Two read-only missions were refused because the harness has no read-only mode. Both then ran by hand under a planning mode — where they had no read-only enforcement either, and none of the conditions, no one-writer check, no governance pin and no session entry.
The rule it paid for
A refusal does not prevent the mission; it moves it outside the gate.* The launcher warns, starts, and obliges the seat to repeat the warning in its report.