Protection policy: Codex final re-check (2026-09-25)

Recorded by the orchestrator from Codex's final message. Verdict: FAIL, on two items. F-01 (the blocker) through F-09 are all RESOLVED. Reference integrity, the variables (22, all declared and required_nonblank) and the forbidden-pattern regexes with positive controls all pass.

id	sev	location	problem	fix
F-10	major	clause-library.yaml:579, 664, 737, 812, 900, 958; rules.yaml:1652-1665	All six child-duty templates use {{emergency_number}}; none contains the literal "If a child is in immediate danger, call 911." The variable is justified only for Nunavut.	Hard-code the literal 911 sentence in ON, BC, AB, NS and US. Split or condition CA-OTHER so only Nunavut uses the emergency-number variable.
F-11	major (test)	test-cases.yaml:280-284	GATE-11 uses the nonexistent jurisdiction CA-ZZ, so it can't be reached.	Use a real jurisdiction with its derived mapping withheld in the fixture, or move it to a schema-error suite.