SUPERTRACK F. Goal: the hardcode guard derives PASS/FAIL from structural control state and behavioral invocation, never from manual inventory or source text.

v_qt001_hardcode_guard_v4 computes pass from: governance_pass (rule governance enforcement guard), structural_pass (behavioral disguised detector), fingerprint_pass (all fingerprint v3 sensitivity tests), signoff_pass (all signoff v3 negative tests), plus public_pass / directus_pass / scale_not_safe for disposition. core_enforcement_sound = governance AND structural AND fingerprint AND signoff. Status: FAIL if any core enforcement is unsound; PASS_WITH_ROUTED_2_6B if core sound but public or directus DML is still open; PASS only when everything including revocation is clean. Live: governance/structural/fingerprint/signoff all true; public/directus false; scale_not_safe true; status PASS_WITH_ROUTED_2_6B; pass true (core sound). A dangerous unresolved authority route would force FAIL, never PASS.

The manual inventory is demoted to diagnostic only: v_qt001_hardcode_diagnostic_inventory_v4 carries the 21 inventory findings labelled DIAGNOSTIC_ONLY and is not an authority source for the guard.

v_qt001_disguised_hardcode_structural_detector — eleven checks, ALL behavioral function invocations or live data state (no source-text authority): not_in_set with NULL text fails; absent signal fails; expected_result mismatch yields FAIL_PREDICATE; superseded rule excluded; authority_lock=false yields governance FAIL; checksum mismatch yields governance FAIL; eval_rule_v3 never PASSes for a nonexistent collection; zero GRANT rules consume parity/divergence; the authoritative machine_tier equals machine_tier_v3 for a live collection; every fingerprint component is sensitive; exact signoff rejects OTHER/spoof/stale/expired. All eleven pass. The one source-text diagnostic (readiness uses no proname/pg_proc) was deliberately moved OUT of this detector into the readiness negative tests, so the hardcode authority path is fully behavioral.