sec(door): closed by default, governor fails closed; self-authoring off by default

Three fail-open paths on the §15 door: no env at all meant allow-all; a
governor that could not be reached approved with a WARNING; and a reply
that never said DENY — empty, truncated, a refusal — approved, because the
rule was !contains("DENY"). On the two days the judge plan emptied every
outbound action was approved by nobody.

Now: governor_allows() needs an explicit ALLOW and no DENY; both judge()
implementations return false when unreachable; with no governor the door
opens only on CLAWMATES_DOOR_POLICY=allow. Open Agent Passport (arXiv
2603.20953): 74.6% social-engineering success under a permissive policy,
0 of 879 under a restrictive one. Local override gains the governor prod
already runs.

skill_self_authoring: default flipped to OFF. No agent-authored skill has
ever been delivered to a mission or scored; prod held zero proposals.
Enable with CLAWMATES_SKILL_SELF_AUTHORING=1 once promoted skills go
through the files arm and get a Skill-Use score.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01WZb5A2kfVfjpdwSochkuHz

deploy/compose/docker-compose.override.yml

@@ -124,6 +124,10 @@ services:
       # max_tokens was raised alongside this.
       CLAWMATES_VALIDATOR_MODEL: glm:glm-5.3
       CLAWMATES_JUDGE_MODEL: glm:glm-5.3
+      # The §15 door is closed by default since 2026-09-20: with no governor
+      # and no CLAWMATES_DOOR_POLICY=allow every outbound action is denied.
+      # Same governor as prod, judged by the model above.
+      CLAWMATES_DOOR_GOVERNOR: "1"
       # Read by the `glm` provider's api_key_env in clawmates.toml.
       ZAI_API_KEY: ${ZAI_API_KEY:?set in .env}
       # ElevenLabs GenFM, for rendering the Continuous Research episode.