The caller puts the inputs in the IN ports and the rule writes one byte to
VERDICT: 0 pass, 1 flag, 2 stop. Nothing else is reachable —
the machine has no instruction that touches a file, a network or a page.
The same rule, the same machine, every time: no model, no inference, no drift between what the rule says and what it does.
—