FAIL-CLOSED ADMISSION

Admission is fail-closed at every layer: an unjudged config key blocks, an undeclared layer family blocks, an operand that does not close blocks — and since schema 6, a failing closure at encode removes the container rather than writing it.

The pure-SSM witness is the working example: before its operator was judged, mamba2-780m was refused with nineteen itemised findings — eighteen unrepresented SSM semantics and one incomplete surface — rather than approximated as a softmax tower. The census half is scoped honestly: a declared attention-head geometry counts as a program declaration; what fails closed is generic-plus-silence, where resolving layers to softmax would be a fabrication, not a resolution.

IN THE GRAPH