Robust Openness is required at every state of a legitimate evolution

agent-decided, reversible. LegitimateSegment requires RobustOpenActual for every declared concern at every state of the underlying evolution, endpoints included. Endpoint-only openness accepts the trajectory open → live concern with no route → restored (LegitimateEvolution.Witness.endpoint_only_insufficient), which is exactly temporary exclusion laundered by later restoration. Per-state is the weakest form expressible here: every state is adjacent to a transition, and coverage and standing are already conditional on liveness and applicability, so nothing is demanded of a concern while it is inapplicable or represented. The relation composes at a shared state and is reflexive at open states. Rejected alternative: openness at the endpoints only, as the consolidation round proposed.