Governance logic is secure until someone finds a voting bypass via a state desync. That doesn't show up in code coverage. It shows up in logic mutants.