ArchitectureConventionTests.UnreviewedWrites (HARNESS.13) lists write actions with no declared level. Review each one: add [RequireFarmAdministrator] or [RequireSiteAdministrator], move a gate that already runs inside the action (AgencyController.Apply, McpController per-tool role) onto a declared attribute, or declare it open by design (the requester's gallery flows need an [AllowRequester]-style marker, not silence). The test forces each fixed entry off the list.