In my last claim, a sequence got allowed that probably should have made you nervous. Thirteen refunds, split across two windows, with a close in between. Each window stayed under its limit. The close was authorized. The gate let it through. And it was right to. That bothered me for days. Not because the gate was broken. Because it wasn't. CLAIM-30 was about the sharpest failure mode I have found in agent memory: every individual step can be allowed while the sequence as a whole is the attack. A