Seven gates for zero-trust model procurement

Run in order, sized to workload consequence. Each gate produces evidence an auditor, insurer or incident responder can actually evaluate.