device=demo-r1 command="reload"
trust_tier=RED (0x03)  seq=2  obs_type=0x0f (ERROR — signed rejection, nothing executed)
signature=VALID
gate_decision=blocked
payload:
ERROR: tier gate blocked 'reload' on 'demo-r1' (tier=RED max=YELLOW) proposal_id=cd3358cde7b0c967419884c6f9d8ec83
proposal_id=cd3358cde7b0c967419884c6f9d8ec83