MigrationGuardrails: the three post-migration build gates — every static field provably immutable or explicitly allowlisted, no UI component in a static field, no JVM exit — as one class a migrated application calls from its own test suite, reporting every violation in a single failure.