semantic validity is defined, not constrained

agent-decided, reversible. The previous formulation kept validity primitive and assumed three implications about it, leaving it free to reject an edit that was grounded, permitted and provenance-adequate for no stated reason. Nothing needed that freedom.

Validity is now the conjunction of prior grounding, a non-empty ground set for a state-changing edit, provenance completeness, and permission. The first two are the kernel's premises; the last two are the semantic layer's parameters.

This also splits descriptive provenance from normative permission. Provenance answers whether Bob argued, whether a signature was forged, whether the actor was coerced; permission answers what those facts mean. The previous provenance predicate could only refuse an influence, which is why permitted persuasion had to be handled as an exception.

Rejected alternative: a primitive validity relation with hypotheses on it.

Record: projects/normativity/legitimacy/rounds/2026-08-25-legitimate-evolution/LEGITIMATE_EVOLUTION.md §2.