Build-Authorized Evidence for Opaque Calls: A Fail-Closed Rewrite-Authority Boundary
Detached semantic facts about opaque native providers do not by themselves justify compiler rewrites: rewrite authority must be confined to the accepted fact, selected provider and build, caller, callback environment, observation, and runtime target. We present a build-authorized path-effect interface that enforces thi...