Risk tests: allow tests_outside_test_module, fix str_to_string → to_owned, unwrap → indexing, non-ASCII ± → +/-. Web-gateway tests: expand allow attributes for test-only lint suppressions (str_to_string, indexing_slicing, assertions_on_result_states). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>