N
No October Surprise — Human Gate
The single, manual, non-bypassable path by which a verified finding becomes PUBLISHABLE. Sign in with your reviewer email to enter the queue.
Single-factor magic-link sign-in (Option A). The server-side chokepoint (requireReviewerSession) + RLS enforce per-reviewer campaign scope; an MFA/AAL2 step-up is a later hardening.