Run a real check now — same engine as /seatbelt in Cursor. Pick a fixture to see clear vs blocked. Folder scans still need the local API (staging can't see your laptop).
Fixture scans hit the live API and return a shareable report link.
Hard gates stay open until you fix them in your agent — or accept the risk (human only).