WHCA dinner attempted attack — what's the actual security failure here?

Federal prosecutors released video of the May 2026 White House Correspondents' Association dinner attack attempt. Putting partisan response aside — what's the operational failure that let an armed person get that close to a heavily-protected event? Soft perimeter, vetting, optics-over-security?