Status: IN
The codebase's perimeter defense model — normalize inputs once at system boundaries, then trust all internal callers — ensures internal operations work on clean, canonical data throughout the processing pipeline.
perimeter defense holds only if ALL boundaries validate; proximity services accept garbage coordinates, breaking the invariant
Depends on (SL): normalize-once-at-system-boundary, callers-trusted-at-internal-boundaries