Rule 1: Model has no authority
Rule 2: Model creates no path
Rule 3: Every request = transition
Rule 4: Admissibility before execution
Rule 5: Fail → path does not exist
execution_path: false
≠ "model refused"
≠ "filter triggered"
= path never constructible