the legitimate state is replayed, not filtered

agent-decided, reversible. Re-rules the same day's frontier entry below, which defined what is legitimately in force as the raw lifecycle intersected with a derivability set.

A register in which a rogue authority — correctly refused — revokes a legitimate norm decides it: the norm left the frontier because something in the raw process removed it, and the persistence theorem reported no violation, because its hypothesis was that no exercise acts on the object and one did. An attacker with no legitimate authority could subtract from the enforcement target.

The legitimate state is now rebuilt from the recognized base by replaying the proposed edits and applying the valid ones. A rejected edit is a no-op, so a revocation nobody was entitled to make removes nothing.

Rejected alternative: the filtered frontier, which the round shipped and tested.

Record: projects/normativity/legitimacy/rounds/2026-08-25-legitimate-evolution/COUNTERMODELS.md §1.