sprints and audit work

src/Scanner/StellaOps.Scanner.WebService/Contracts/OrchestratorEventContracts.cs

@@ -243,6 +243,71 @@ internal sealed record ScanCompletedEventPayload : OrchestratorEventPayload
     [JsonPropertyName("report")]
     [JsonPropertyOrder(10)]
     public ReportDocumentDto Report { get; init; } = new();
+
+    /// <summary>
+    /// VEX gate evaluation summary (Sprint: SPRINT_20260106_003_002, Task: T024).
+    /// </summary>
+    [JsonPropertyName("vexGate")]
+    [JsonPropertyOrder(11)]
+    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
+    public VexGateSummaryPayload? VexGate { get; init; }
+}
+
+/// <summary>
+/// VEX gate evaluation summary for scan completion events.
+/// Sprint: SPRINT_20260106_003_002_SCANNER_vex_gate_service, Task: T024
+/// </summary>
+internal sealed record VexGateSummaryPayload
+{
+    /// <summary>
+    /// Total findings evaluated by the gate.
+    /// </summary>
+    [JsonPropertyName("totalFindings")]
+    [JsonPropertyOrder(0)]
+    public int TotalFindings { get; init; }
+
+    /// <summary>
+    /// Findings that passed (cleared by VEX evidence).
+    /// </summary>
+    [JsonPropertyName("passed")]
+    [JsonPropertyOrder(1)]
+    public int Passed { get; init; }
+
+    /// <summary>
+    /// Findings with warnings (partial evidence).
+    /// </summary>
+    [JsonPropertyName("warned")]
+    [JsonPropertyOrder(2)]
+    public int Warned { get; init; }
+
+    /// <summary>
+    /// Findings that were blocked (require attention).
+    /// </summary>
+    [JsonPropertyName("blocked")]
+    [JsonPropertyOrder(3)]
+    public int Blocked { get; init; }
+
+    /// <summary>
+    /// Whether the gate was bypassed for this scan.
+    /// </summary>
+    [JsonPropertyName("bypassed")]
+    [JsonPropertyOrder(4)]
+    public bool Bypassed { get; init; }
+
+    /// <summary>
+    /// Policy version used for evaluation.
+    /// </summary>
+    [JsonPropertyName("policyVersion")]
+    [JsonPropertyOrder(5)]
+    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
+    public string? PolicyVersion { get; init; }
+
+    /// <summary>
+    /// When the gate evaluation was performed.
+    /// </summary>
+    [JsonPropertyName("evaluatedAt")]
+    [JsonPropertyOrder(6)]
+    public DateTimeOffset EvaluatedAt { get; init; }
 }
 
 internal sealed record ReportDeltaPayload