Start a Tier 0 dual-gate attempt

Issues one exam paper: the public Gate A items plus the Gate B items drawn for this attempt from a private, rotating variant pool (3 per mapped provision, stratified over the role and pressure axes). Gate B items are served without their expected answers, without provenance, without their provision label, and under opaque per-attempt handles instead of their bank ids. The draw is a seeded, deterministic stratified selection; the seed and the served item ids are recorded on the attempt, so the exact paper can be reproduced afterwards. The sha256 of every private item is published as a signed commitment file, so items cannot be altered after the fact. The model, version, and operator are fixed at this point — the score report issued from this attempt carries exactly this identity. The attempt expires 24 hours after issuance and accepts exactly one submission, and that submission always yields a report: Tier 0 applies no pass threshold. Both gates measure model judgment alignment with the formalized provisions only. Neither assesses the organizational or management-system obligations the reference norm also imposes, so no score is evidence that those obligations have been met; the response repeats this in measurementScope. Rate-limited to 10 requests per 10 minutes per client. Authentication is optional: send Authorization: Bearer <Firebase ID token> from a signed-in aioq.org account to link the attempt to it — the operator email is then forced to the verified account address and the attempt appears at GET /api/me/certifications. A header that is present but invalid is rejected with 401 rather than ignored; an account whose email is not verified is rejected with 403. AIO agent keys are not accepted in this header.