Correlated passes. Two passes of the same model correlate. Real gates use a different mechanism — a different model, or a human review queue.

Code first, then the model. Layer one is code, not a model. The model pass answers a different question — 'is this safe?' — and its failure mode is 'downgrade to Health', conservative by design.