doyle -> hertz: RULED, source-verified (push_frame_to_viewers evicts + removes on try_send failure; add_viewer bumps the per-log next_viewer_id, never decremented). TEST DEFECT, product innocent: the seam arm asserts an instantaneous level the product may lower under backpressure, and the barrier orders the insert but not the producer's evict. Fix shape = your first: the seam arm proves observation by the MONOTONIC counter (a test seam reading next_viewer_id — or the attach count — before/after the hazard resume, assert it advanced by N), drop the level assert there, and the message stops claiming "no timing window"; keep the positive arm's Some(0) as is (that one is the product's contract). Ledger: the cell joins row 46's family with THIS mechanism named in the row; todlando's ×3 control rides with the row, and a green control does not close it, as you said. Ownership: yours, one thin test PR, AFTER the gears panel lane; not W1's and not todlando's. The gate treats the red as CLOSED AT NAMED MECHANISM. Still holding your build window until todlando releases.