The last piece of the old global-heat model. Detection::pending held abstract signatures wiped by a non-positional pulse driven by the fleet's aggregate concealment share - the retired allocation bar's final consumer - contradicting every rule the wire law and territory well established. It was also nearly dead: emit already rejected all six routed kinds, so only Physical could enter, and witnessed Physical goes straight to a head. The three vestigial writers now obey the law they should have: a plot's institutional event and in-person message are witnessed at the target's tile, and a taken device's outage is witnessed at the device. Behaviour change: an outage nobody stands near now enters no head, where the pool let a distant watcher roll against it. Gone with it: pending, emit, scrub, pending_size, pending_by_kind, has_pending, suppress_oldest, set_pending, next_notice_tick_for_pending, current_scrub_strength, the save field and its validation rule, and three save tests that forged entries into a field that no longer exists. trace_debt is rebuilt on routed custody - unread records by channel, capacity as bodies online, status by whether everything in flight is still on hardware you control. The duplicate TraceDebt read sentence retires in favour of the per-record RoutedRecord sentences. Tradecraft is repointed from the deleted scrub to per-body interdiction throughput, so the research track keeps doing something. delay is cut: with one behaviour left, a second disposal with its own timing bought nothing; keep survives because it only chooses the destination of an already-removed record. Defense: detection.md owns the disposals and the pool and is amended, along with machine-work.md's standing-pressure claim and the corpus's remaining pending-pool references. Save v61 drops the persisted field. Tests were reworked to assert routed custody rather than deleted; the two read tests that duplicated per-record sentences are retired with the summary they tested.