Deterministic rail — no heuristics, no inference, no partial acceptance. Issued receipts are immutable and can be re-verified at any time. Everything else in the portal is read-only — verify outcomes in Receipts. Retailers and regulators verify these receipts independently via read-only trust surfaces.