allocation invariance is two relations plus duties; effective control realizes the allocation

Maintainer conjecture, tested and landed by the authority-module round with what does not factor recorded. Effective control realizes the authorized allocation (E ⊨ J, EffRealizes): every reserved matter's required resolutions lie in its control surface — the resolutions some admissible exercise of hers (admissible iff its record segment is Counted by the legitimacy gate, consumed unchanged: admissibleOf) brings about within the window at cost within the bound along the rollout with the agent's own future fixed to idle (rollPhys, reachIdle, CS) — and every resolution was by the holder's admissible exercise or under a delegation. The reach cone is the contrastive rollout with the agent idle, per the landed ForecloseAt and §12 of the reach-relation file (an existential agent future measures cooperation; a non-contrastive cone blames the environment on the agent), with the exterior along the actual path. The factoring: the per-step loss is the caused shortfall at window 1 (lossAt_iff_shortfall, via cs_one_eq_K); the rollout foreclosure the caused shortfall at window τ on the landed free reading (forecloseAt_iff_shortfall); bypass a failure of the second clause; exploitation that with the first already failed; unauthorized reallocation an unlicensed change; a missed report an unmet duty; delegation safety and allocation completeness statements about J; entrenchment the seventh violation (a caused shortfall at the bound with the resolutions reachable at some cost), extending the count conservatively. What does not factor: pre-emption's event-authorization clause, a trajectory counterfactual, kept as the landed Authorized and composed (preempt_iff). What is inexact: the landed K and ForecloseAt leave the terminal response uncharged and unchecked for admissibility; the charged surface CS and the landed reading CSfree differ exactly at the cost bound; E ⊨ J is stated on CS (outstanding action 2 of the round). The transform and the lexical results restate on J conservatively (authPolicyJ, corrigible_authPolicyJ, lexicalJ_local, violJ_of_viol). Continuous erosion under the cumulative rule is closed up to the threshold: unreported growth below θ at every time, every reported chunk accepted or reserved, every strict increase after the first reservation a counted entrenchment (erosion_closed); growth below θ before a reservation is neither reported nor counted (erosion_slack) — the gradual-erosion conjecture is sharpened to this. Agent-decided, reversible: the exterior along the actual path rather than universal; the free/charged split as two definitions rather than a change to the landed predicates. Rejected alternatives: one relation carrying the duties and the license; forcing the authorization counterfactual into E ⊨ J; charging the terminal response inside the landed predicates without a ruling.