Honest fail-closed module-gating — four states, no fake "live"

This lesson is part of the Cohort tier.

Cohort-tier lessons (7-9) are the operational artifacts: production migrations, policy-engine constants, audit-trail design, synthetic-probe patterns. Included in Cohort #1 ($497 one-time).