Subagent Review

1. Ledger

1. Before review, guardian freezes target, criteria, scope, and the design/public boundary. Broadening is recorded, never inferred.
2. Guardian owns a never-reused ledger (F-001); use the contract for required fields and reports.
3. Guardian alone decides materiality and convergence; packets supply observations, evidence, and risk signals. Nits never gate rework. Invalid packets, missing evidence, authority gaps, cap exhaustion, and criterion changes are guardian-recorded states.

2. Review to Convergence