Status: IN
The write path both produces valid state (structural discipline prevents corruption, lightweight routing reaches all parties) and advances system progress forward-only (no-regression ratchets, maximum-progress pipelines) — unless cancel operations can underflow inventory below zero, enabling a write to produce invalid state and regress past a logical lower bound.
Write-path validity and forward progress hold jointly unless underflow-unguarded mutations allow writes to regress past valid state boundaries
Depends on (SL): write-path-is-self-consistent-by-design, forward-only-design-prevents-regression-and-maximizes-progress
Unless: hotel-cancel-no-underflow-guard