Compatibility and hard constraints come first; optimization begins only inside the admitted set. Seller claims, measured truth, commercial terms, and route eligibility remain inspectable.
Visible offerings after current policy/RLS projection
✓Hard constraints precede preference optimization
✓Seller declaration cannot self-promote to qualified truth
✓Execution remains separate from settlement
○No contradictory evidence supplied to this projection.
⊘Marketplace mutation gate is closedDeployment feature authority remains fail-closed.
⊘Remote invocation gate is closedRoute inspection does not imply remote execution authority.
PROVEN + UNCHANGED + UNCONTRADICTED → INHERITED
↳Navigation and model uncertainty do not invalidate accepted proof.
Marketplace results appear only after visibility, entitlement, policy, health, qualification, and commercial gates agree.