Part seven, closing today's design session. Cameron affirmed the core-death proposal: on core loss you wake on the machine holding your freshest sync (where you sync is where you resurrect), and the hub severance applies — every owned machine whose only network path ran through the dead core goes dark (ledger ownership persists, contribution stops) until physically re-linked; the rollback report counts the severed; no sync anywhere remains hard game over. rollback.md amended (Behavior steps 1 and 3, new criterion 6); machine-work.md and people-tokens.md pointers flipped to decided; constitution decisions entry. Defense: documentation-only commit (DESIGN.md + wiki/). The amendment lands in rollback.md itself rather than a side note so the B2 implementer builds the spatial model from one document; the hub-and-spoke severance test is pinned as an acceptance criterion.