Function seal 

pub fn seal(unresolved: u64, allow: bool)

2026-09-26: Seal the audit for this run. unresolved is the gate’s count of failed lookups not declared expected-absent; allow is --dangerously-allow-unresolved-kernel-lookups.