Replace free-form Design labels with checked anchored references, guard the root doorway through one shared gate, teach lossless corpus migrations, and expose page authority in the public renderer. Defense: wiki/process/meta.md defines the typed corpus as the authority system, and wiki/interface/site.md requires public corpus roles to be legible. This makes those contracts mechanically enforceable and visible without changing game behavior.