Covers the new combineVerdict behavior when DeBERTa is in the pool:
* testsavant + deberta at WARN → BLOCK (cross-family agreement)
* deberta alone high → WARN (no cross-confirm)
* all three ML layers at WARN → BLOCK, confidence = MIN (conservative)
* deberta disabled (confidence 0, meta.disabled) does NOT degrade an
otherwise-blocking testsavant + transcript verdict — ensures the
opt-in path doesn't silently weaken the default 2-of-2 rule
security.test.ts: 29 tests / 71 expectations.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Garry Tan
4e0516031b