What fails first
Modern systems are usually designed to monitor, validate, audit, and explain. All of those matter. None of them decides whether an unsafe state should have been reachable in the first place.
Doctrine
Architecture precedes policy.
Governance that begins after execution is already downstream of possibility. Structural governance begins earlier: at the level where certain states never become reachable.
What changes
Governance is no longer defined by how well a system explains outcomes. It is defined by whether inadmissible outcomes can become real at all.
If a transition is unsafe, the path does not exist.
Structural reading
The doctrine is not a model behavior proposal. It is a system condition proposal.
Before: validity is evaluated after a state appears.
After: inadmissible states are structurally absent.
Before: governance depends on interpretation.
After: governance depends on admissibility.