Proof by Invariants

1

State precedes velocity

We name the invariant first, then permit every implementation detail to move.

2

Each claim carries its witness

Benchmarks and counterexamples sit beside the proposition they support.

3

Notation remains local

A symbol is introduced once, scoped narrowly, and retired before review.

4

Review becomes refutation

Every merge asks for the smallest case that would falsify the result.