sec(door): closed by default, governor fails closed; self-authoring off by default

Three fail-open paths on the §15 door: no env at all meant allow-all; a
governor that could not be reached approved with a WARNING; and a reply
that never said DENY — empty, truncated, a refusal — approved, because the
rule was !contains("DENY"). On the two days the judge plan emptied every
outbound action was approved by nobody.

Now: governor_allows() needs an explicit ALLOW and no DENY; both judge()
implementations return false when unreachable; with no governor the door
opens only on CLAWMATES_DOOR_POLICY=allow. Open Agent Passport (arXiv
2603.20953): 74.6% social-engineering success under a permissive policy,
0 of 879 under a restrictive one. Local override gains the governor prod
already runs.

skill_self_authoring: default flipped to OFF. No agent-authored skill has
ever been delivered to a mission or scored; prod held zero proposals.
Enable with CLAWMATES_SKILL_SELF_AUTHORING=1 once promoted skills go
through the files arm and get a Skill-Use score.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01WZb5A2kfVfjpdwSochkuHz

docs/CAPABILITY-REVIEW.md

@@ -53,8 +53,10 @@ document before now.
 
   `identity_refinement` and `brain_consolidation` still wait for a human: they
   change what an agent *is* rather than adding a procedure it can consult.
-  Disable with `CLAWMATES_SKILL_SELF_AUTHORING=0`; the state is announced at
-  boot either way.
+  **Off by default since 2026-09-20** — no agent-authored skill had ever been
+  delivered to a mission or scored, and prod held zero proposals. Enable with
+  `CLAWMATES_SKILL_SELF_AUTHORING=1`; the state is announced at boot either
+  way.
 - **No external registry feeds the catalogue.** ClawBrainHub trades `.brain`
   files and never touches the `skills` table. `cm_db::repo::skills::create` —
   the only path that would produce `source_kind='hand_authored'` — has no