Status: OUT
The codebase has a bifurcated correctness guarantee: structural properties (immutability, synchronized structures, state ratchets) are enforced by construction and verified deterministically, while temporal properties (atomicity, TOCTOU) are documented as known gaps and left unenforced — creating a predictable divide between what the code guarantees and what it merely aspires to.
Structural correctness is enforced and testable (depth-4); temporal correctness is known-gapped and accepted (depth-4) — combining reveals the codebase has two tiers of correctness assurance
Depends on (SL): structural-correctness-and-testability-are-co-designed, temporal-correctness-gaps-are-known-and-accepted