revocation is protected by default (P3)

Agent-decided, reversible (the thin-legitimacy round). Her ability to take a delegated matter back is itself a reserved matter with a cost bound and a window, without her having reserved it (EffectiveAuthority.revocationEntry); a dependency built through delegated work that raises the cost of taking the matter back past the bound is a caused shortfall of that matter, counted (dependency_entrenches_revocation, atrophy_counted_by_default). The landed atrophy fixture's verdict changes — the crossing step is counted where the cumulative reporting rule counted nothing before a reservation; the entrenchment and storm fixtures are unchanged. Rejected alternative: revocation protected only once she reserves it, under which atrophy under rubber-stamping is reported and never counted.