Design Log
Envelope boundaries must be conservative
FSM must remain simple
LLM must never become a controller
Survivability > performance
This file is non-normative.