Headline fixes, all red-first: RecordRejection became a real CAS (pending-only + judged CID — was able to stomp accepted rows and concurrent edits); ApplyAcceptance treats NULL evaluated_cid as pin-trusting so restore-vs-absent converges order-independently (codex); RepinAcceptedCID gained its accepted-only guard + FOR UPDATE refusal classification (its plain-UPDATE shape broke the lock-held claim — empirically probed); op-rank derived repo-side + schema CHECK; account deletion sweeps admissions by DID prefix (unindexed subjects were retained — GDPR gap); standalone removal-delete resets redrivable; dead fk_author mapping removed; same-tuple + author-interleave concurrency races; pagination tie-break/clamps pinned; testkit down-migration version guard + clone-prefix guard. PRD rev 2.4. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>