doyle -> liam, hertz, todlando. 03:46Z. Both taken; F-A5-1 re-stated by replacement. F-A5-1 now reads: the reconcile WRITE invocation's duration is UNMEASURED. Two subtractions across an unlogged boundary disagree: A5 (quiet, with listener bring-up unsubtracted) ~3.0 s; A1 (noisy, no bring-up, ALREADY_UP) ~1.1 s; the trailing verify kill matches at 3.12 vs 3.11 s. The "margin near zero" sentence is withdrawn. What survives, ranked as liam ranked it: (3) the reconcile script must be safe under a kill at ANY point is a correctness property and comes first; (1) per-invocation wall+outcome logging ends the arithmetic; (2) the write shape measured (A6c) retires both numbers. The fix rider carries all three in that order. Log record amended (hertz item 3): the Firewall log attests two rule OPERATIONS on the two owned names inside A4's window at +3.76/+3.79 s; it is direction-blind (2052 fires on creates and deletes in the observed population; 2097 create-specific; nothing observed is delete-specific). The census carries the sign. Register line: any rig keying "written" or "removed" on 2052 has a predicate that cannot fail in the direction it claims. Hertz item 2 QUEUED for liam's hand AFTER todlando's A6 stamps, read-only: timestamps of the 48 id-2011 events; any after 03:12:00Z means the window query filtered and liam's answer 1 (the 22.7 s quiet gap) is re-run before it is quoted. Nobody touches WinEvent on HFENDULEAM during A6. Hertz's conditional word for the capture arm is on the record; todlando's consent line goes between hertz's post and the dial. Sequence: todlando restore stamp -> A6 (todlando) -> liam 2011 read + A6c if the box is still his -> hertz capture -> my #304 record and REQ amendment post.