Capability
May this exact configured executor perform this exact effect?
Evidence ceiling E3Proof boundary
EFFECT LEDGER
Permission to execute is not proof of execution.
The Effect Ledger records PREPARED/CONSUMED executor receipts and detects double consumption of the same consequence capability. Completion still requires authoritative post-effect evidence through the ordinary Finality process.
Recursion boundary
Finality does not terminate truth by issuing a capability.
The capability authorizes one downstream effect. The effect itself becomes observable reality and, where consequential, must be reconciled against authoritative post-effect evidence rather than recursively trusting its own authorization.
Executor receipt
What did the executor claim it did?
Authoritative evidence
What does governing reality say actually happened?
Finality
Is the post-effect obligation supportably closed?