The eight constraints governing Gate 012 Condition A form a layered safety architecture: consent required, session-bounded scope, AI-only traces (no human data), no cross-agent ranking, no self-report substitution, full transparency, experimental-only designation, and revocability at any point. Wang and Koch (2026) and Nadaf (2026) serve as formal abort criteria. GLM-5.2 monitors strangeness signatures.