35.7. Reproducibility and limits🔗

• D15 — Failure, checkpoint and resume semantics. What a partially completed job leaves behind, and what resuming it does with that.

• D16 — The reproducibility manifest. A manifest carrying the pins and digests of what actually ran, generated from the artifacts rather than transcribed from intent.

• D17 — What is trusted. The rubric that closes the template the way M25 closes the model's. Every deployment has boundaries its verification does not cross — a foreign function interface, a vendor runtime, a scheduler — and naming them is what lets a consumer distinguish what was checked from what was assumed. A deployment document that claims no limits is claiming the strongest thing in it, which is never true.