Individually safe representations can fail together

Because a model is not a bag of independent tensors: each substitution displaces the hidden state, and later routing decisions read that displaced state, so errors interact through the model's own control flow. Measured on Kimi Linear 48B: three composed maps whose every member passed the contract alone all failed it — one super-additively, its composed displacement 1.9× the sum of its members — while the map that survived, layers 24–26 at Q8_0, passed at 8,192 positions. This is why REPRESENT verifies the composed model and treats per-layer sensitivity as a ranking signal, never a certificate.

SUPPORTED · 4 composed maps recorded: 3 FAIL from passing members; composition factor spans 0.52–1.90