The ingest verb's echo() sanitiser and its length cap are mutation-vacuous: neutralising termsafe.Sanitize, or the maxEchoedRunes truncation, leaves every test green. Both are trust-boundary guards on a path that echoes model-produced payload text to a terminal and into a durable refusal record. Three interpolations also reach a message unsanitised: ParsePosition quotes the payload's raw position token, and the parked manifest's run id, position and assembler version are interpolated verbatim.

The ingest verb's echo() sanitiser and its length cap are mutation-vacuous: neutralising termsafe.Sanitize, or the maxEchoedRunes truncation, leaves every test green. Both are trust-boundary guards on a path that echoes model-produced payload text to a terminal and into a durable refusal record. Three interpolations also reach a message unsanitised: ParsePosition quotes the payload's raw position token, and the parked manifest's run id, position and assembler version are interpolated verbatim.

Grounds

• pursued: a payload cannot rewrite or drown the message that reports its refusal, and the durable record carries no attack rune; a mutation run finding either guard survives would show this wrong