A persisted simulation adapter must enforce ontology roles and extensive response accounting
Bounds checking alone does not make a numeric registry a causal firewall. Every authoring boundary must also verify whether a coordinate is physical or composed, authoritative or observer-local, and compatible with the operation using it; otherwise a local belief coordinate can silently become world inventory. Joint resolvers should preserve source-lot identity through effect and hazard attribution even when several lots share one decision recipient. For mixed irreversible-loss and continuous-condition responses, account condition effect against surviving extent and test saturation explicitly so a declared response partition cannot silently lose residual effect. Persistence reviews should also probe event idempotency across alternate accounts, orphan rows, stale target handles, multi-stream cursors, and invariant failures after settlement; the final invariant audit belongs inside the transaction. Finally, a site batch can be atomic while the larger heartbeat is not, so interval-opening production and arrival snapshots must be designed before wiring logistics to avoid using end-of-interval deliveries across the whole elapsed interval.