Status: IN
The codebase enforces correctness through structural construction (immutability, synchronized data structures, state ratchets) rather than runtime validation — but this discipline is not universally applied, with critical invariants like quorum overlap and payment atomicity remaining assumed but unenforced.
Structural correctness works where applied but does not cover all critical invariants — temporal/assumed properties remain gaps
Depends on (SL): correctness-by-construction-not-validation