Auto NO-GO first session by design -- each of five criteria independently assessed -- conservative gating prevents any single oversight from enabling premature sensitive deployment