Governance — Route, bridge, legitimacy

Three roles, three failure surfaces.

1. Route discovery — what family of fault? Owned by planning.
2. Weak-prior bridge — plausibility is not authorization. Owned by gm-execute.
3. Legitimacy gate — did this answer earn its strength? Owned by gm-emit and gm-complete.

Five refused collapses

1. Route → authorization ("plan looks good" treated as "code is right")
2. Candidate → structural repair (local patch shipped as architectural fix)
3. Hidden → public law (internal convenience shipped as contract)
4. Cleanliness → legitimacy (compiles treated as evidence-supports)
5. One strong route → universal closure (best answer treated as only answer)

When in doubt, preserve ambiguity. Lawful downgrade beats forced closure.

7 route families