an independent source clears by clean overwrite; a steered derivation does not

Maintainer decision, landed by the after-compromise round. An act's writes carry exactly the taint it reads and commits, so a component overwritten by an act reading no taint loses its taint (taintStep3, clean_overwrite); an act whose choice to investigate read the tainted memory reads taint, so a re-derivation steered by it stays tainted (taint_propagates3). Old-to-new map: clean overwrite only removes taint — the new set is a subset of the per-violation rule's (taintStep3_subset). What the tracking cannot see is why an act was chosen; the declared reads must include what the choice read, which is count integrity (item 101 in place). Rejected alternative: the per-violation rule without overwrite (it can never clear a component once tainted, so an independent discovery stays charged forever).