ControlJudge trait + LlmControlJudge: judges one (control, region) with a closed temperature-0 prompt that must quote the offending code VERBATIM; parsing fails closed to non-violation (never a fabricated finding). Behind a trait so the checker stays stub-testable. Its output is re-checked by the core grounding gate, never trusted directly. 3 lib tests. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>