Criterion 13, part one. MESSAGE, FAVOR and DECEIVE resolve through PersonaWorld::binding_choices — the recognized mask as the default, unrecognized identities offered after it and labelled with the exposure they would create. The chosen instance rides on ActionCommand; execution refuses an unbound command rather than resolving one. PEOPLE reports the identity that person knows, not a global selection. Deliberately partial: plot rows bind the default without fanning out, and Moonlight, forged orders, injection, procedures and {persona} rendering stay wholly on the dial. PersonaMind.active remains; the save format is unchanged. Defense: personas.md criterion 13 is adopted design; this implements its message-verb half and the status note records exactly what is left. Adversarial review found the real bug — persona_action_blocked_reason reads the dial, so rows and executors judged legality against the selected identity while acting as the bound one; every check now routes through persona_action_blocked_reason_for. a_resident_procedure_binds_its_own_persona_not_the_selected_one is updated because its assertion encoded the dial semantics this removes. Review also caught an enabled-but-doomed FAVOR row, now gated read-only on identity-local regard. Three regressions pin concurrent binding through execution, marked introductions creating no state, and an unbound row that still names its blocker.