Expand actual-binary evidence with seven negative-input/load cases, stronger prelethal save and Classic provenance/descendant/replay assertions, startup/allocation collisions, deterministic archive-conflict failure and restart, and ordinary-input Inn autosave attributed to its command rather than quit. Independent scoped reviews accepted all tests after correcting the Inn save-origin assertion. Parent final workspace formatting, locked strict all-target clippy, and locked workspace all-target tests passed after the last test edit. Production runtime unchanged. Evidence remains bounded: filesystem conflicts are not exact crash instants; missing acquisition verbs, all-debt/equipment coverage, platform certification, live Phase 12 integration, and 1.0 ship gates remain open.