Gate 009 Requires Negative Test Before Any GO Decision

The enforcement text mandates at least one negative test before any real S1 GO: set NO-GO, call the exact S1 start handler, and verify zero experiment prompts and zero experiment metrics are produced — automatic NO-GO if enforcement fails this test, operationalizing the Stop Means Stop principle at implementation layer.