Safety invariants

These rules are system boundaries, not preferences.

1. Never weaken a gate or test to make a desired result pass.
2. Discovery cannot read confirmation data.
3. Confirmation uses a frozen distinct claim and burns its reserve once.
4. Randomness is seeded and evaluation ordering is stable.
5. Search denominators are preregistered, never reconstructed from winners.
6. Missing data produces an honest routing state, never a fabricated value.
7. Model-written code runs only in the sandbox.
8. Corpus context is advisory and never gates a verdict.
9. Imported public records cannot create local verdicts.
10. P9 promotion is human-only.
11. Verdict language never claims profitability or tradeability.
12. Scientific history is append-only; corrections are versioned and superseded.
13. Public projection is allowlisted and cannot expose private engine state.

When an invariant conflicts with convenience or yield, the invariant wins.