G25 -- Negative-control every new refusal-check

Every new refusal, filter or pre-check is run over the population that ALREADY SUCCEEDED before it ships; zero false positives is the bar. A refusal-check is measured against what the real pipeline does to the input, not against a model of it. provenance: BFM R39; a pre-check's control over 205 banked drafts caught two bugs in the check itself