test: strengthen launch security and capacity gates

scripts/production-launch-gate-test.js

@@ -153,6 +153,29 @@ assert.ok(
   'slow API benchmark should be reported as a blocker',
 );
 
+const missingMixedBenchmark = runGate(tempDir => {
+  const evidence = createEvidence(tempDir);
+  evidence.checks = evidence.checks.filter(item => item.id !== 'performance.api-real-data-mixed');
+  return evidence;
+});
+assert.notEqual(missingMixedBenchmark.status, 0, 'missing mixed read/write benchmark should fail launch gate');
+assert.ok(
+  missingMixedBenchmark.payload.checks?.some(item => item.id === 'check.performance.api-real-data-mixed' && item.status === 'blocker'),
+  'missing mixed benchmark should be reported as a blocker',
+);
+
+const slowMixedBenchmark = runGate(tempDir => {
+  const evidence = createEvidence(tempDir);
+  const item = evidence.checks.find(check => check.id === 'performance.api-real-data-mixed');
+  item.summary.p95Ms = 501;
+  return evidence;
+});
+assert.notEqual(slowMixedBenchmark.status, 0, 'slow mixed API benchmark should fail launch gate');
+assert.ok(
+  slowMixedBenchmark.payload.checks?.some(item => item.id === 'check.performance.api-real-data-mixed.summary' && item.status === 'blocker'),
+  'slow mixed benchmark should be reported as a blocker',
+);
+
 const missingBusinessSampling = runGate(tempDir => {
   const evidence = createEvidence(tempDir);
   evidence.checks = evidence.checks.filter(item => item.id !== 'migration.pb-import-sample');
@@ -186,6 +209,17 @@ assert.ok(
   'missing H5 interaction smoke should be reported as a blocker',
 );
 
+const missingRepoSecurityScan = runGate(tempDir => {
+  const evidence = createEvidence(tempDir);
+  evidence.checks = evidence.checks.filter(item => item.id !== 'security.repo-scan');
+  return evidence;
+});
+assert.notEqual(missingRepoSecurityScan.status, 0, 'missing repository security scan should fail launch gate');
+assert.ok(
+  missingRepoSecurityScan.payload.checks?.some(item => item.id === 'check.security.repo-scan' && item.status === 'blocker'),
+  'missing repository security scan should be reported as a blocker',
+);
+
 const missingAttestation = runGate(tempDir => {
   const evidence = createEvidence(tempDir);
   evidence.attestations = evidence.attestations.filter(item => item.id !== 'backup.snapshot');