cctally 1.114.0 → 1.115.0

package/bin/_lib_detector_access_registry.py

@@ -0,0 +1,3817 @@
+"""The access-contract registry of the strict detector path (#825/#832,
+spec 5.6 item 6).
+
+Every transitive stats.db access reachable from the Claude usage pipeline's
+roots has exactly one contract here: its function, its SQL fingerprint
+(whitespace-collapsed literal SQL, or `dynamic:<function>#<n>` for SQL built at
+run time), the table, key columns, predicate, ordering and selected values, its
+write effect, and its class — period-keyed, range-keyed, cross-period or
+singleton. A cross-period read must carry an `inert_rule`: the reason a
+differing historical result cannot change a certified decision. While every
+cross-period read has one, a deletion outcome leaves a recovery certificate in
+place; an entry without one makes `non_inert_cross_period()` non-empty, and
+then every deletion outcome revokes its account (`_cctally_quarantine`).
+
+`tests/test_detector_access_registry.py` regenerates the reachable set from
+the actual call graph (`tests/_detector_access_callgraph.py`) and fails on a
+new, changed, removed or unclassified access. The entries below were generated
+by that collector and classified by rule; the inert rules are the sentences a
+reviewer checks against spec 5.6 items 4 and 5.
+
+Cost-only families use the operator's Q7 residual; a field that feeds a strict
+decision may not.
+
+Reviewed re-pins (#825/#832 fix round R8, Codex fix-round-4 R8 option A). A
+dynamic site's `sql_shape` covers its complete transitive closure, and that
+closure deliberately includes the pricing tables: `_rebuild_stats_index_locked#1`
+reaches `_lib_pricing.CLAUDE_MODEL_PRICING`, `CODEX_MODEL_PRICING`,
+`PRICING_SNAPSHOT_DATE`, `_LIVE_PRICING_SNAPSHOT`, the pricing functions and
+`_cctally_cache.CONVERSATION_ROLLUP_PRICING_FP_KEY` through `FOLD_APPLIERS`.
+None of them is inert (the fingerprint key is a SQL lookup key, and the
+snapshot date takes part in write authorization), so every pricing sync fails
+the registry test until the affected pins are re-pinned. A re-pin is accepted
+only through this review:
+
+1. Print the before/after shape-line delta of every affected site with
+   `bin/cctally-test-remote python3 tests/_detector_access_callgraph.py
+   --base <rev>`, where `<rev>` is the tree the current pins were reviewed on
+   (`HEAD` for an uncommitted sync; the merge base for a committed branch).
+   Read it beside the source diff (`git diff <rev> -- bin/`).
+2. Explain every added (`+`), removed (`-`) and changed (`~`) dependency.
+   "Only additions" is not an explanation.
+3. Confirm that the site's table selection, keys, predicates, ordering,
+   selected columns, parameter construction, execution conditions and write
+   effects did not change, and say why each changed dependency leaves its
+   contract and inert rule valid. A changed access needs a contract review
+   (its `table`/`keys`/`predicate`/`ordering`/`selected`/`effects`/`classes`/
+   `inert_rule`), not a new hash.
+4. Update `sql_shape` only on the explained sites, to the `now` digest the
+   command prints. The command must then end `guard: clean`: no missing, stale
+   or unresolved access, and no pin mismatch.
+
+Regenerating every pin in bulk is not acceptance: it would also accept an
+access change hidden in the same closure, which the R8 tests in
+`tests/test_detector_access_registry.py` prove the guard otherwise rejects.
+"""
+from __future__ import annotations
+
+import dataclasses
+
+
+@dataclasses.dataclass(frozen=True)
+class AccessContract:
+    function: str          # "module:qualified_name"
+    sql_fingerprint: str   # normalized literal SQL, or "dynamic:<function>#<n>"
+    table: str
+    keys: "tuple[str, ...]"
+    predicate: str
+    ordering: str
+    selected: "tuple[str, ...]"
+    effects: str           # "read" | "write" | "delete" | "upsert"
+    classes: "tuple[str, ...]"  # subset of CLASSES
+    inert_rule: "str | None"
+    # #825/#832 fix round C (CD2-003): a dynamic site's fingerprint names
+    # only its function and ordinal, so its contract also carries the digest
+    # of what it executes (`_detector_access_callgraph.CallGraph.
+    # dynamic_shape`; since fix round E its producer's complete body, the
+    # helpers its SQL is built from and their constants; since revision 2
+    # the canonical AST of every binding they read, of any value type,
+    # followed through imports, aliases and transitive dependencies; since
+    # fix round R the definition of every function or class producing such
+    # a value, transitively, however it is imported). A changed query under
+    # an unchanged ordinal fails the guard, and a site depending on a name
+    # nothing resolves fails it closed.
+    sql_shape: "str | None" = None
+
+
+CLASSES = frozenset({"period-keyed", "range-keyed", "cross-period", "singleton"})
+EFFECTS = frozenset({"read", "write", "delete", "upsert"})
+
+#: Milestone writers are reached through `_pipeline_claude_usage`.
+ROOTS = (
+    "_cctally_record:_pipeline_claude_usage",
+    "_cctally_record:detect_reset_and_credit",
+    "_cctally_record:_pipeline_record_credit",
+    "_cctally_journal:_harvest",
+    "_cctally_journal:emit_model_a",
+)
+
+# -- inert rules --------------------------------------------------------------
+
+ACCOUNTS = (
+    'Account registry metadata (labels, emails, last-seen): display and '
+    'attribution of names, never a detector input.'
+)
+
+ANCHOR = (
+    'Five-hour anchor selection: every prefix raw reset lies beyond both '
+    "tolerances of the witness's (clause 2) and continuing validity keeps "
+    'later raw resets at or after it, so no prefix anchor or block is ever '
+    'selected.'
+)
+
+BASIS = (
+    'Accepted weekly basis: with a date key it reads only the current, '
+    'post-witness week (clause 1); without one it is reached only from a '
+    'scratch reviewed hold, which is never a witness and whose reviewed op '
+    'revokes every certificate.'
+)
+
+BLOCKS = (
+    'Five-hour block rollup, ownership and cross-week flag: a Q7 '
+    'cost/display family; the block existence that gates the rollover heal '
+    'is read by exact key (period-keyed).'
+)
+
+CODEX = (
+    'Codex quota family: provider-codex rows only; nothing it reads feeds a '
+    'Claude automatic credit, moved-end transition or drop-consensus '
+    'decision.'
+)
+
+DEBOUNCE = (
+    'Debounce singleton: one row per account whose stored date key and end '
+    'are compared in Python with the incoming reading; a prefix state '
+    "carries a date key below the witness's (clauses 1 and 6), so it never "
+    'matches a forward reading.'
+)
+
+JOURNAL = (
+    'Journal identity machinery: rows are matched by exact logical or '
+    'physical identity (event id, journal id, cursor, selector generation); '
+    'a fresh witness and its forward events share no identity with the '
+    'prefix (clause 7), so a prefix row is never returned for a forward '
+    'decision.'
+)
+
+MAINT = (
+    'Maintenance only: runs at open, rebuild, publication or validation, '
+    'never inside a live automatic decision.'
+)
+
+MANUAL = (
+    "Manual record-credit path: the quarantine fold revokes the account's "
+    'certificates before these effects run (spec 5.6 item 8), so no '
+    'certified decision depends on what it reads.'
+)
+
+PRED_FIVE = (
+    'Five-hour predecessor (latest five-hour row, any window): a prefix '
+    "row's window key is below the witness's (clause 1) and continuing "
+    'validity keeps keys forward, so same_window is false in every '
+    'reference and the identical cancel/baseline branch is taken.'
+)
+
+PRED_WEEKLY = (
+    'Weekly predecessor (latest non-held row of the account, any week): a '
+    "prefix row's weekly end precedes the witness's detection clock (clause "
+    '5) and continuing validity keeps the clock forward, so a prefix row '
+    'takes neither the moved-end nor the in-place branch (both require '
+    'prior_end > now) in any reference.'
+)
+
+Q7 = (
+    'Q7 cost/alert family: its result sets milestone costs, budget or '
+    'projected alerts and block rollups, never an automatic credit, '
+    'moved-end transition or drop-consensus decision (operator Q7).'
+)
+
+QUARANTINE = (
+    'Outcome-quarantine fold state (triggers, envelope, certificates): read '
+    "whole to answer an account's quarantine status, a control input that "
+    'gates or reports a decision; the rows carry no observation, window or '
+    'week, so no prefix row is ever returned as a detector input.'
+)
+
+READ_IDX = (
+    'Index-wide sample for a projection or diagnostic value, not a detector '
+    'decision.'
+)
+
+WAIT = (
+    'Statusline waiting-head dependency tokens (fix round K13): counted, '
+    'hashed and compared only for equality with a wait descriptor to decide '
+    'whether an activating event dispatches the reducer, which re-reads and '
+    'reclassifies everything it publishes; never a detector input.'
+)
+
+REGISTRY: "tuple[AccessContract, ...]" = (
+    AccessContract(
+        function='_cctally_account:account_label',
+        sql_fingerprint='SELECT label, email FROM accounts WHERE account_key = ?',
+        table='accounts',
+        keys=('account_key',),
+        predicate='account_key = ?',
+        ordering='',
+        selected=('label', 'email'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=ACCOUNTS,
+    ),
+    AccessContract(
+        function='_cctally_account:display_account_label',
+        sql_fingerprint='SELECT provider FROM accounts WHERE account_key = ?',
+        table='accounts',
+        keys=('account_key',),
+        predicate='account_key = ?',
+        ordering='',
+        selected=('provider',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=ACCOUNTS,
+    ),
+    AccessContract(
+        function='_cctally_account:load_accounts',
+        sql_fingerprint='dynamic:_cctally_account:load_accounts#1',
+        sql_shape='sha256:fb36e398466d6f61',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=ACCOUNTS,
+    ),
+    AccessContract(
+        function='_cctally_account:real_account_count',
+        sql_fingerprint='SELECT COUNT(*) FROM accounts WHERE provider = ? AND account_key != ?',
+        table='accounts',
+        keys=('provider',),
+        predicate='provider = ? AND account_key != ?',
+        ordering='',
+        selected=('COUNT(*)',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=ACCOUNTS,
+    ),
+    AccessContract(
+        function='_cctally_cache:sync_cache',
+        sql_fingerprint="SELECT 1 FROM schema_migrations WHERE name='001_dedup_highest_wins'",
+        table='schema_migrations',
+        keys=(),
+        predicate="name='001_dedup_highest_wins'",
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=READ_IDX,
+    ),
+    AccessContract(
+        function='_cctally_core:_apply_quota_projection_schema',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS quota_window_blocks ( id INTEGER PRIMARY KEY AUTOINCREMENT, source TEXT NOT NULL, source_root_key TEXT NOT NULL, logical_limit_key TEXT NOT NULL, observed_slot TEXT NOT NULL, window_minutes INTEGER NOT NULL CHECK(window_minutes > 0), limit_id TEXT, limit_name TEXT, resets_at_utc TEXT NOT NULL, nominal_start_at_utc TEXT NOT NULL, first_observed_at_utc TEXT NOT NULL, last_observed_at_utc TEXT NOT NULL, first_percent REAL NOT NULL, current_percent REAL NOT NULL, last_source_path TEXT NOT NULL, last_line_offset INTEGER NOT NULL, generation TEXT NOT NULL, orphaned_at TEXT, account_key TEXT NOT NULL DEFAULT \'unattributed\', -- public #5: the REVERSE MAP. `physical_group_key` records the -- physical window this block was materialized from, so the -- generation sweep can be scoped to the groups a bounded pass -- actually re-materialized instead of to whole roots. -- `physical_group_digest` is that group\'s contribution to its -- root\'s physical signature: the root value is a digest over the -- root\'s sorted (group key, group digest) pairs, which makes it -- ASSOCIATIVE. A bounded pass recomputes only the dirty groups\' -- digests and re-derives the root value from the stored set — -- O(groups), 608 on the real store, against O(observations) at -- 211K. Hanging it off the blocks is what makes it self-maintaining: -- a group swept to nothing loses its blocks and drops out of the -- composition with them. physical_group_key TEXT, physical_group_digest TEXT, UNIQUE(source, source_root_key, account_key, logical_limit_key, observed_slot, window_minutes, resets_at_utc) ); CREATE INDEX IF NOT EXISTS idx_quota_blocks_active ON quota_window_blocks(source, source_root_key, account_key, orphaned_at, logical_limit_key, observed_slot, window_minutes, resets_at_utc); CREATE TABLE IF NOT EXISTS quota_percent_milestones ( id INTEGER PRIMARY KEY AUTOINCREMENT, source TEXT NOT NULL, source_root_key TEXT NOT NULL, logical_limit_key TEXT NOT NULL, observed_slot TEXT NOT NULL, window_minutes INTEGER NOT NULL CHECK(window_minutes > 0), resets_at_utc TEXT NOT NULL, percent_threshold INTEGER NOT NULL CHECK(percent_threshold BETWEEN 1 AND 100), captured_at_utc TEXT NOT NULL, source_path TEXT NOT NULL, line_offset INTEGER NOT NULL, high_water_percent INTEGER NOT NULL CHECK(high_water_percent BETWEEN 1 AND 100), generation TEXT NOT NULL, orphaned_at TEXT, account_key TEXT NOT NULL DEFAULT \'unattributed\', UNIQUE(source, source_root_key, account_key, logical_limit_key, observed_slot, window_minutes, resets_at_utc, percent_threshold) ); CREATE INDEX IF NOT EXISTS idx_quota_milestones_active ON quota_percent_milestones(source, source_root_key, account_key, orphaned_at, logical_limit_key, observed_slot, window_minutes, resets_at_utc, percent_threshold); CREATE TABLE IF NOT EXISTS quota_threshold_events ( id INTEGER PRIMARY KEY AUTOINCREMENT, source TEXT NOT NULL, source_root_key TEXT NOT NULL, logical_limit_key TEXT NOT NULL, observed_slot TEXT NOT NULL, window_minutes INTEGER NOT NULL CHECK(window_minutes > 0), resets_at_utc TEXT NOT NULL, threshold INTEGER NOT NULL CHECK(threshold BETWEEN 1 AND 100), qualifying_kind TEXT NOT NULL CHECK(qualifying_kind IN (\'actual\',\'projected\')), qualifying_percent REAL, projected_percent REAL, severity TEXT NOT NULL, created_at_utc TEXT NOT NULL, disposition TEXT NOT NULL CHECK(disposition IN (\'alerted\',\'suppressed_backfill\')), alerted_at TEXT, suppressed_at TEXT, orphaned_at TEXT, account_key TEXT NOT NULL DEFAULT \'unattributed\', CHECK((disposition = \'alerted\' AND alerted_at IS NOT NULL AND suppressed_at IS NULL) OR (disposition = \'suppressed_backfill\' AND suppressed_at IS NOT NULL AND alerted_at IS NULL)), UNIQUE(source, source_root_key, account_key, logical_limit_key, observed_slot, window_minutes, resets_at_utc, threshold) ); CREATE INDEX IF NOT EXISTS idx_quota_threshold_events_active ON quota_threshold_events(source, source_root_key, account_key, orphaned_at, logical_limit_key, observed_slot, window_minutes, resets_at_utc, threshold); CREATE TABLE IF NOT EXISTS quota_projection_state ( source_root_key TEXT NOT NULL, account_key TEXT NOT NULL DEFAULT \'unattributed\', generation TEXT NOT NULL, physical_signature TEXT NOT NULL, completed_at_utc TEXT NOT NULL, PRIMARY KEY(source_root_key, account_key) ); -- public #5: everything the incremental projector needs to know about -- its own last pass, keyed by provider source. One row, read once per -- reconcile. -- -- `watermark_seq` is the highest `quota_window_change_log.seq` this -- index has consumed. It is written INSIDE the same stats transaction -- as the projection it describes, so the two commit or roll back -- together; a crash therefore replays a ledger range rather than -- skipping one, which is safe because re-materializing a group is -- idempotent. (Writing it after the commit would need a second stats -- transaction, and `run_stats_ingest` is the sole stats writer.) -- -- `interpretation_version` invalidates the mechanism itself: a -- classification change alters interpreted keys with no row mutation -- for the ledger to observe, so a bump queues one complete pass. -- -- `alerts_enabled` / `next_evaluation_at_utc` are the two alert axes -- that are not functions of window dirtiness — a delivery-gate -- transition, and a future-clocked observation that becomes eligible -- when wall time passes it with no row mutation at all. -- `next_evaluation_by_root_json` owns that scalar minimum: one earliest -- future capture per root, so a due hook tick can reconcile only the -- roots whose instants matured. -- -- `last_full_pass_at` is the periodic verification\'s deadline. Two -- cases a scoped sweep structurally cannot see — a block whose physical -- group is absent from the cache entirely, and a milestone on a historic -- root no longer active — are otherwise repairable only by an -- interpretation bump, a rebuild or a burst overflow, none of which -- happen on a normal install. Every full pass stamps it, whatever -- triggered it, so the deadline is satisfied by whichever caller reaches -- it first and the bound on staleness is one interval rather than -- forever. NULL means "never verified", which reads as due. CREATE TABLE IF NOT EXISTS quota_projection_ledger_state ( source TEXT NOT NULL, watermark_seq INTEGER NOT NULL DEFAULT 0, interpretation_version INTEGER NOT NULL DEFAULT 0, alerts_enabled INTEGER, next_evaluation_at_utc TEXT, last_full_pass_at TEXT, next_evaluation_by_root_json TEXT NOT NULL DEFAULT \'{}\', PRIMARY KEY(source) ); -- #661 S2 §6: a provider metering-rate transition, recorded from the -- first upgrade whether or not notification is enabled (§6.2). The -- row is the durable forward-only latch: its presence is what stops -- the same transition alerting twice, and it survives a stats.db -- rebuild because the journal event that created it carries a -- self-sufficient payload (§6.5). -- -- The identity is `(provider, account_key, effective_from)` and the -- promise is stated at exactly that precision — once per exact key, -- not "once per provider regime". `reduce_state` closes and -- re-creates regimes on a fingerprint change and a revised detector -- can select a different `effective_from` for the same underlying -- transition; separately, R8 can turn a formerly merged identity into -- a real account key. Both produce a new key for a transition a human -- would call the same one. The FINGERPRINT stays out of the key -- deliberately: including it would re-alert on our own algorithm -- revisions. -- #690 / #692 (epoch 1012) adds the last four columns: the disclosure -- evidence captured at DETECTION time, stored as four independent -- facts rather than one merged status taxonomy. Folding the baseline -- count into `withholding_status` would make an otherwise healthy -- successor read as currently withheld. -- -- NULL, an empty array and 0 are THREE distinct states and every -- consumer must preserve the distinction: NULL means legacy or -- unrecoverable evidence, an empty typed set means assessed with no -- such origin, 0 means a clean baseline, and a positive count means -- thin baseline evidence. The #689 regime-recovery route sees stored -- calibration regimes and no `QuotaAnalysis` at all, and all four -- values are analysis-derived, so on that route all four are NULL by -- construction — which is why every one of them is nullable. -- -- `detector_input_causes` and `composition_provenance` hold canonical -- JSON arrays of enum VALUES, never their `repr`, so a sixth -- `CompositionProvenance` origin added later cannot silently alias -- onto an existing one. `baseline_withheld_days` carries -- `baseline_fit.population["withheld"]` — the count of fenced -- observations carrying a cause that fall strictly BEFORE -- `window_start` — as a count rather than a boolean, so zero, one and -- many stay distinguishable and honest copy stays possible. -- -- These comments sit OUTSIDE the statement deliberately: SQLite -- stores the CREATE TABLE text verbatim, so a comment written inside -- it lands in `sqlite_schema.sql`, in every `iterdump()` golden and -- in `_REBUILD_SCHEMA_FINGERPRINT`. CREATE TABLE IF NOT EXISTS meter_rate_change_events ( id INTEGER PRIMARY KEY AUTOINCREMENT, provider TEXT NOT NULL, account_key TEXT NOT NULL DEFAULT \'unattributed\', effective_from TEXT NOT NULL, previous_units_per_point REAL NOT NULL, new_units_per_point REAL NOT NULL, severity TEXT NOT NULL, detected_at_utc TEXT NOT NULL, created_at_utc TEXT NOT NULL, notified_at TEXT, withholding_status TEXT, detector_input_causes TEXT, composition_provenance TEXT, baseline_withheld_days INTEGER, UNIQUE(provider, account_key, effective_from) ); CREATE INDEX IF NOT EXISTS idx_meter_rate_change_events_key ON meter_rate_change_events(provider, account_key, effective_from); CREATE TABLE IF NOT EXISTS quota_alert_arming ( id INTEGER PRIMARY KEY AUTOINCREMENT, source TEXT NOT NULL, source_root_key TEXT NOT NULL, logical_limit_key TEXT NOT NULL, observed_slot TEXT NOT NULL, window_minutes INTEGER NOT NULL CHECK(window_minutes > 0), rule_fingerprint TEXT NOT NULL, activated_at_utc TEXT NOT NULL, account_key TEXT NOT NULL DEFAULT \'unattributed\', UNIQUE(source, source_root_key, account_key, logical_limit_key, observed_slot, window_minutes) );',
+        table='quota_window_blocks',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_apply_quota_projection_schema',
+        sql_fingerprint="CREATE TABLE quota_projection_state ( source_root_key TEXT NOT NULL, account_key TEXT NOT NULL DEFAULT 'unattributed', generation TEXT NOT NULL, physical_signature TEXT NOT NULL, completed_at_utc TEXT NOT NULL, PRIMARY KEY(source_root_key, account_key) )",
+        table='quota_projection_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_apply_quota_projection_schema',
+        sql_fingerprint='DROP TABLE quota_projection_state',
+        table='quota_projection_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_apply_quota_projection_schema',
+        sql_fingerprint='PRAGMA table_info(quota_projection_state)',
+        table='quota_projection_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_apply_stats_read_indexes',
+        sql_fingerprint='dynamic:_cctally_core:_apply_stats_read_indexes#1',
+        sql_shape='sha256:b2b8c8f0aa057c00',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_get_latest_row_for_week',
+        sql_fingerprint='dynamic:_cctally_core:_get_latest_row_for_week#1',
+        sql_shape='sha256:8ab553bf203922bf',
+        table='dynamic',
+        keys=(),
+        predicate='latest snapshot of ONE week date key (and account)',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_core:_latest_reset_event_for_end',
+        sql_fingerprint='dynamic:_cctally_core:_latest_reset_event_for_end#1',
+        sql_shape='sha256:7e0f76eaaca68934',
+        table='dynamic',
+        keys=(),
+        predicate='week_reset_events row for one new_week_end_at',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_core:_rebuild_retired_week_reset_uniqueness',
+        sql_fingerprint='ALTER TABLE week_reset_events__rebuild_1013 RENAME TO week_reset_events',
+        table='week_reset_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_rebuild_retired_week_reset_uniqueness',
+        sql_fingerprint='DROP TABLE week_reset_events',
+        table='week_reset_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_rebuild_retired_week_reset_uniqueness',
+        sql_fingerprint='PRAGMA index_list(week_reset_events)',
+        table='week_reset_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_rebuild_retired_week_reset_uniqueness',
+        sql_fingerprint='PRAGMA table_info(week_reset_events)',
+        table='week_reset_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_rebuild_retired_week_reset_uniqueness',
+        sql_fingerprint='dynamic:_cctally_core:_rebuild_retired_week_reset_uniqueness#1',
+        sql_shape='sha256:a7e7c1e51534c5ea',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:_reset_aware_floor',
+        sql_fingerprint='dynamic:_cctally_core:_reset_aware_floor#1',
+        sql_shape='sha256:87c79958f961edbc',
+        table='dynamic',
+        keys=(),
+        predicate='reset effective instant in [week_start_at, week_end_at); manual floor by account and date key',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('range-keyed', 'period-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_cost_week_start_at_time ON weekly_cost_snapshots(week_start_at, captured_at_utc DESC, id DESC)',
+        table='weekly_cost_snapshots',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_cost_week_time ON weekly_cost_snapshots(week_start_date, captured_at_utc DESC, id DESC)',
+        table='weekly_cost_snapshots',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_five_hour_block_models_block ON five_hour_block_models(block_id)',
+        table='five_hour_block_models',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_five_hour_block_models_window ON five_hour_block_models(five_hour_window_key)',
+        table='five_hour_block_models',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_five_hour_block_projects_block ON five_hour_block_projects(block_id)',
+        table='five_hour_block_projects',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_five_hour_block_projects_window ON five_hour_block_projects(five_hour_window_key)',
+        table='five_hour_block_projects',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_five_hour_blocks_block_start ON five_hour_blocks(block_start_at DESC)',
+        table='five_hour_blocks',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_five_hour_milestones_block ON five_hour_milestones(block_id)',
+        table='five_hour_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_journal_protocol_violations_batch ON journal_protocol_violations(batch_id)',
+        table='journal_protocol_violations',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_usage_week_start_at_time ON weekly_usage_snapshots(week_start_at, captured_at_utc DESC, id DESC)',
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_usage_week_time ON weekly_usage_snapshots(week_start_date, captured_at_utc DESC, id DESC)',
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE INDEX IF NOT EXISTS idx_weekly_usage_snapshots_5h_window_key ON weekly_usage_snapshots(five_hour_window_key)',
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS accounts ( account_key TEXT PRIMARY KEY, provider TEXT NOT NULL, natural_id TEXT, email TEXT, label TEXT, plan_type TEXT, label_source TEXT NOT NULL DEFAULT 'auto', first_seen_utc TEXT, last_seen_utc TEXT )",
+        table='accounts',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS budget_milestones ( id INTEGER PRIMARY KEY AUTOINCREMENT, vendor TEXT NOT NULL, period_start_at TEXT NOT NULL, period TEXT, threshold INTEGER NOT NULL, budget_usd REAL NOT NULL, spent_usd REAL NOT NULL, consumption_pct REAL NOT NULL, crossed_at_utc TEXT NOT NULL, alerted_at TEXT, account_key TEXT NOT NULL DEFAULT '*', UNIQUE(vendor, account_key, period_start_at, period, threshold) )",
+        table='budget_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS five_hour_block_models ( id INTEGER PRIMARY KEY AUTOINCREMENT, block_id INTEGER NOT NULL, five_hour_window_key INTEGER NOT NULL, model TEXT NOT NULL, input_tokens INTEGER NOT NULL DEFAULT 0, output_tokens INTEGER NOT NULL DEFAULT 0, cache_create_tokens INTEGER NOT NULL DEFAULT 0, cache_read_tokens INTEGER NOT NULL DEFAULT 0, cost_usd REAL NOT NULL DEFAULT 0, entry_count INTEGER NOT NULL DEFAULT 0, account_key TEXT NOT NULL DEFAULT 'unattributed', UNIQUE(account_key, five_hour_window_key, model), FOREIGN KEY (block_id) REFERENCES five_hour_blocks(id) )",
+        table='five_hour_block_models',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS five_hour_block_projects ( id INTEGER PRIMARY KEY AUTOINCREMENT, block_id INTEGER NOT NULL, five_hour_window_key INTEGER NOT NULL, project_path TEXT NOT NULL, input_tokens INTEGER NOT NULL DEFAULT 0, output_tokens INTEGER NOT NULL DEFAULT 0, cache_create_tokens INTEGER NOT NULL DEFAULT 0, cache_read_tokens INTEGER NOT NULL DEFAULT 0, cost_usd REAL NOT NULL DEFAULT 0, entry_count INTEGER NOT NULL DEFAULT 0, account_key TEXT NOT NULL DEFAULT 'unattributed', UNIQUE(account_key, five_hour_window_key, project_path), FOREIGN KEY (block_id) REFERENCES five_hour_blocks(id) )",
+        table='five_hour_block_projects',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS five_hour_blocks ( id INTEGER PRIMARY KEY AUTOINCREMENT, five_hour_window_key INTEGER NOT NULL, five_hour_resets_at TEXT NOT NULL, block_start_at TEXT NOT NULL, first_observed_at_utc TEXT NOT NULL, last_observed_at_utc TEXT NOT NULL, final_five_hour_percent REAL NOT NULL, seven_day_pct_at_block_start REAL, seven_day_pct_at_block_end REAL, crossed_seven_day_reset INTEGER NOT NULL DEFAULT 0, total_input_tokens INTEGER NOT NULL DEFAULT 0, total_output_tokens INTEGER NOT NULL DEFAULT 0, total_cache_create_tokens INTEGER NOT NULL DEFAULT 0, total_cache_read_tokens INTEGER NOT NULL DEFAULT 0, total_cost_usd REAL NOT NULL DEFAULT 0, pricing_provenance_json TEXT, is_closed INTEGER NOT NULL DEFAULT 0, created_at_utc TEXT NOT NULL, last_updated_at_utc TEXT NOT NULL, account_key TEXT NOT NULL DEFAULT 'unattributed', UNIQUE(account_key, five_hour_window_key) )",
+        table='five_hour_blocks',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS five_hour_credit_confirmation_state ( account_key TEXT NOT NULL, five_hour_window_key INTEGER NOT NULL, source TEXT NOT NULL, baseline_pct REAL NOT NULL, pending_low_pct REAL, pending_at_utc TEXT, pending_observation_id TEXT, PRIMARY KEY (account_key, five_hour_window_key, source) )',
+        table='five_hour_credit_confirmation_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS five_hour_milestones ( id INTEGER PRIMARY KEY AUTOINCREMENT, block_id INTEGER NOT NULL, five_hour_window_key INTEGER NOT NULL, percent_threshold INTEGER NOT NULL, captured_at_utc TEXT NOT NULL, usage_snapshot_id INTEGER NOT NULL, block_input_tokens INTEGER NOT NULL DEFAULT 0, block_output_tokens INTEGER NOT NULL DEFAULT 0, block_cache_create_tokens INTEGER NOT NULL DEFAULT 0, block_cache_read_tokens INTEGER NOT NULL DEFAULT 0, block_cost_usd REAL NOT NULL DEFAULT 0, marginal_cost_usd REAL, seven_day_pct_at_crossing REAL, reset_event_id INTEGER NOT NULL DEFAULT 0, account_key TEXT NOT NULL DEFAULT 'unattributed', UNIQUE(account_key, five_hour_window_key, percent_threshold, reset_event_id), FOREIGN KEY (block_id) REFERENCES five_hour_blocks(id) )",
+        table='five_hour_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS five_hour_reset_events ( id INTEGER PRIMARY KEY AUTOINCREMENT, detected_at_utc TEXT NOT NULL, five_hour_window_key INTEGER NOT NULL, prior_percent REAL NOT NULL, post_percent REAL NOT NULL, effective_reset_at_utc TEXT NOT NULL, account_key TEXT NOT NULL DEFAULT 'unattributed', UNIQUE(account_key, five_hour_window_key, effective_reset_at_utc) )",
+        table='five_hour_reset_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS journal_admission_summary (id INTEGER PRIMARY KEY CHECK (id = 1), cutover_id TEXT, scanned_high_water TEXT, excluded_total INTEGER NOT NULL DEFAULT 0, family_counts_json TEXT NOT NULL DEFAULT '{}', first_excluded_coordinate TEXT, latest_excluded_coordinate TEXT, coordinate_digest TEXT, complete_through TEXT, boundary_json TEXT)",
+        table='journal_admission_summary',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS journal_cursor (id INTEGER PRIMARY KEY CHECK (id = 1), segment TEXT NOT NULL, offset INTEGER NOT NULL, applied_segment TEXT, applied_offset INTEGER)',
+        table='journal_cursor',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS journal_effective_events (event_id TEXT PRIMARY KEY, rev INTEGER NOT NULL CHECK (rev >= 0), status TEXT NOT NULL CHECK (status IN ('active','tombstone')), content_hash TEXT NOT NULL, batch_id TEXT, event_json TEXT, winning_sequence INTEGER, conflict_hashes_json TEXT)",
+        table='journal_effective_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS journal_protocol_violations (fingerprint TEXT PRIMARY KEY, batch_id TEXT NOT NULL, kind TEXT NOT NULL, violation_json TEXT NOT NULL, available_after INTEGER)',
+        table='journal_protocol_violations',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS journal_selector_batch_records (batch_id TEXT NOT NULL, kind TEXT NOT NULL CHECK (kind IN ('marker','action')), key TEXT NOT NULL, record_digest TEXT NOT NULL, identity_digest TEXT, sequence INTEGER NOT NULL, action_core_json TEXT, PRIMARY KEY (batch_id, kind, key))",
+        table='journal_selector_batch_records',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS journal_selector_batches (batch_id TEXT PRIMARY KEY, status TEXT NOT NULL CHECK (status IN ('begin_only','completed','tainted')), action_count INTEGER, action_set_hash TEXT, begin_segment TEXT, begin_offset INTEGER, earliest_commit_segment TEXT, earliest_commit_offset INTEGER)",
+        table='journal_selector_batches',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS journal_selector_state (id INTEGER PRIMARY KEY CHECK (id = 1), generation_record_path TEXT, generation_stamped_at_utc TEXT, covered_segment TEXT, covered_offset INTEGER, next_sequence INTEGER NOT NULL DEFAULT 0, selector_version INTEGER NOT NULL, cutover_seen INTEGER NOT NULL DEFAULT 0, cutover_account_key TEXT)',
+        table='journal_selector_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS outcome_quarantine_certificates (account_key TEXT PRIMARY KEY, accounting_certificate_json TEXT, accounting_trigger_seq INTEGER, control_certificate_json TEXT, control_trigger_seq INTEGER)',
+        table='outcome_quarantine_certificates',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS outcome_quarantine_envelope (scope TEXT PRIMARY KEY, envelope_json TEXT NOT NULL)',
+        table='outcome_quarantine_envelope',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS outcome_quarantine_triggers (seq INTEGER PRIMARY KEY, segment TEXT, byte_offset INTEGER, kind TEXT NOT NULL, reason TEXT NOT NULL, at TEXT)',
+        table='outcome_quarantine_triggers',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS percent_milestones ( id INTEGER PRIMARY KEY AUTOINCREMENT, captured_at_utc TEXT NOT NULL, week_start_date TEXT NOT NULL, week_end_date TEXT NOT NULL, week_start_at TEXT, week_end_at TEXT, percent_threshold INTEGER NOT NULL, cumulative_cost_usd REAL NOT NULL, marginal_cost_usd REAL, usage_snapshot_id INTEGER NOT NULL, cost_snapshot_id INTEGER NOT NULL, reset_event_id INTEGER NOT NULL DEFAULT 0, account_key TEXT NOT NULL DEFAULT 'unattributed', UNIQUE(account_key, week_start_date, percent_threshold, reset_event_id) )",
+        table='percent_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS project_budget_milestones ( id INTEGER PRIMARY KEY AUTOINCREMENT, week_start_at TEXT NOT NULL, project_key TEXT NOT NULL, -- canonical git-root (bucket_path) threshold INTEGER NOT NULL, budget_usd REAL NOT NULL, -- project's target snapshotted AT crossing spent_usd REAL NOT NULL, consumption_pct REAL NOT NULL, crossed_at_utc TEXT NOT NULL, alerted_at TEXT, account_key TEXT NOT NULL DEFAULT '*', -- account-blind this epic (spec §6): always '*' UNIQUE(account_key, week_start_at, project_key, threshold) )",
+        table='project_budget_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS projected_milestones ( id INTEGER PRIMARY KEY AUTOINCREMENT, week_start_at TEXT NOT NULL, -- period-start instant (subscription-week OR calendar period-start; back-compat name) period TEXT, -- configured period at crossing; NULL = pre-011 unknown (migration 011) metric TEXT NOT NULL, -- 'weekly_pct' | 'budget_usd' | 'codex_budget_usd' threshold INTEGER NOT NULL, -- 90 | 100 projected_value REAL NOT NULL, denominator REAL NOT NULL, -- target_usd (budget / codex_budget) | 100.0 (weekly) crossed_at_utc TEXT NOT NULL, alerted_at TEXT, account_key TEXT NOT NULL DEFAULT '*', -- '*' for vendor-budget metrics; real account for weekly_pct (Task 3) UNIQUE(account_key, week_start_at, period, metric, threshold) )",
+        table='projected_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS stats_publication_stamp (record_path TEXT NOT NULL, started_at_utc TEXT NOT NULL, stamped_at_utc TEXT NOT NULL)',
+        table='stats_publication_stamp',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS stats_quota_projection_state (id INTEGER PRIMARY KEY CHECK (id = 1), incomplete INTEGER NOT NULL DEFAULT 0, target_version INTEGER NOT NULL DEFAULT 0, recovery_target_json TEXT)',
+        table='stats_quota_projection_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS usage_snapshot_suppressions (journal_id TEXT PRIMARY KEY)',
+        table='usage_snapshot_suppressions',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS week_reset_events ( id INTEGER PRIMARY KEY AUTOINCREMENT, detected_at_utc TEXT NOT NULL, old_week_end_at TEXT NOT NULL, new_week_end_at TEXT NOT NULL, effective_reset_at_utc TEXT NOT NULL, observed_pre_credit_pct REAL, account_key TEXT NOT NULL DEFAULT 'unattributed', origin_observation_id TEXT )",
+        table='week_reset_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS weekly_cost_snapshots ( id INTEGER PRIMARY KEY AUTOINCREMENT, captured_at_utc TEXT NOT NULL, week_start_date TEXT NOT NULL, week_end_date TEXT NOT NULL, week_start_at TEXT, week_end_at TEXT, range_start_iso TEXT, range_end_iso TEXT, cost_usd REAL NOT NULL, source TEXT NOT NULL DEFAULT 'cctally-range-cost', mode TEXT NOT NULL DEFAULT 'auto', project TEXT, account_key TEXT NOT NULL DEFAULT 'unattributed' )",
+        table='weekly_cost_snapshots',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS weekly_credit_floors ( id INTEGER PRIMARY KEY AUTOINCREMENT, week_start_date TEXT NOT NULL, effective_at_utc TEXT NOT NULL, observed_pre_credit_pct REAL NOT NULL, applied_at_utc TEXT NOT NULL, account_key TEXT NOT NULL DEFAULT 'unattributed', UNIQUE(account_key, week_start_date, effective_at_utc) )",
+        table='weekly_credit_floors',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS weekly_reset_debounce_state ( account_key TEXT PRIMARY KEY, week_start_date TEXT NOT NULL, week_end_at TEXT NOT NULL, baseline_pct REAL NOT NULL, first_zero_at_utc TEXT NOT NULL, first_zero_observation_id TEXT )',
+        table='weekly_reset_debounce_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint="CREATE TABLE IF NOT EXISTS weekly_usage_snapshots ( id INTEGER PRIMARY KEY AUTOINCREMENT, captured_at_utc TEXT NOT NULL, week_start_date TEXT NOT NULL, week_end_date TEXT NOT NULL, week_start_at TEXT, week_end_at TEXT, weekly_percent REAL NOT NULL, page_url TEXT, source TEXT NOT NULL DEFAULT 'userscript', payload_json TEXT NOT NULL, account_key TEXT NOT NULL DEFAULT 'unattributed', weekly_observation_held INTEGER NOT NULL DEFAULT 0 CHECK (weekly_observation_held IN (0, 1)) )",
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TRIGGER IF NOT EXISTS trg_usage_snapshot_suppression AFTER DELETE ON weekly_usage_snapshots BEGIN INSERT OR IGNORE INTO usage_snapshot_suppressions (journal_id) SELECT OLD.journal_id WHERE OLD.journal_id IS NOT NULL; UPDATE percent_milestones SET usage_snapshot_id = 0 WHERE usage_snapshot_id = OLD.id; UPDATE five_hour_milestones SET usage_snapshot_id = 0 WHERE usage_snapshot_id = OLD.id; END',
+        table='usage_snapshot_suppressions',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE UNIQUE INDEX IF NOT EXISTS idx_week_reset_events_legacy_tuple ON week_reset_events(account_key, old_week_end_at, new_week_end_at) WHERE origin_observation_id IS NULL',
+        table='week_reset_events',
+        keys=(),
+        predicate='origin_observation_id IS NULL',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE UNIQUE INDEX IF NOT EXISTS idx_week_reset_events_origin ON week_reset_events(account_key, origin_observation_id) WHERE origin_observation_id IS NOT NULL',
+        table='week_reset_events',
+        keys=(),
+        predicate='origin_observation_id IS NOT NULL',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='SELECT 1 FROM five_hour_blocks LIMIT 1',
+        table='five_hour_blocks',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='SELECT 1 FROM weekly_usage_snapshots WHERE five_hour_resets_at IS NOT NULL AND five_hour_window_key IS NULL LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='five_hour_resets_at IS NOT NULL AND five_hour_window_key IS NULL',
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='SELECT 1 FROM weekly_usage_snapshots WHERE five_hour_window_key IS NOT NULL AND five_hour_percent IS NOT NULL LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='five_hour_window_key IS NOT NULL AND five_hour_percent IS NOT NULL',
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='SELECT id, five_hour_resets_at FROM weekly_usage_snapshots WHERE five_hour_resets_at IS NOT NULL AND five_hour_window_key IS NULL',
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='five_hour_resets_at IS NOT NULL AND five_hour_window_key IS NULL',
+        ordering='',
+        selected=('id', 'five_hour_resets_at'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='SELECT name FROM schema_migrations_skipped',
+        table='schema_migrations_skipped',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=('name',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='UPDATE journal_cursor SET applied_segment = segment, applied_offset = offset WHERE applied_segment IS NULL AND applied_offset IS NULL',
+        table='journal_cursor',
+        keys=(),
+        predicate='applied_segment IS NULL AND applied_offset IS NULL',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='UPDATE weekly_usage_snapshots SET five_hour_window_key = ? WHERE id = ?',
+        table='weekly_usage_snapshots',
+        keys=('id',),
+        predicate='id = ?',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='dynamic:_cctally_core:open_db#1',
+        sql_shape='sha256:fccb556342da9ffa',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='dynamic:_cctally_core:open_db#2',
+        sql_shape='sha256:4422797e3a6480ba',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='dynamic:_cctally_core:open_db#3',
+        sql_shape='sha256:63e58c7c98c1aa20',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:weekly_held_exclusion',
+        sql_fingerprint='PRAGMA table_info(weekly_usage_snapshots)',
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_forecast:_apply_midweek_reset_override',
+        sql_fingerprint='SELECT effective_reset_at_utc FROM week_reset_events WHERE new_week_end_at = ? AND datetime(detected_at_utc) <= datetime(?) ORDER BY datetime(detected_at_utc) DESC LIMIT 1',
+        table='week_reset_events',
+        keys=('new_week_end_at',),
+        predicate='new_week_end_at = ? AND datetime(detected_at_utc) <= datetime(?)',
+        ordering='datetime(detected_at_utc) DESC',
+        selected=('effective_reset_at_utc',),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_forecast:_fetch_current_week_snapshots',
+        sql_fingerprint='dynamic:_cctally_forecast:_fetch_current_week_snapshots#1',
+        sql_shape='sha256:bc82aa15fa1aa9ed',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_forecast:_fetch_current_week_snapshots',
+        sql_fingerprint='dynamic:_cctally_forecast:_fetch_current_week_snapshots#2',
+        sql_shape='sha256:372400419fad0c9e',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_forecast:_fetch_current_week_snapshots',
+        sql_fingerprint='dynamic:_cctally_forecast:_fetch_current_week_snapshots#3',
+        sql_shape='sha256:4f8ce3420819f7e2',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_forecast:_fetch_current_week_snapshots',
+        sql_fingerprint='dynamic:_cctally_forecast:_fetch_current_week_snapshots#4',
+        sql_shape='sha256:61d729e93a7eeffe',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_journal:_apply_account_last_seen',
+        sql_fingerprint='UPDATE accounts SET last_seen_utc = ? WHERE account_key = ? AND (last_seen_utc IS NULL OR ? > last_seen_utc)',
+        table='accounts',
+        keys=('account_key',),
+        predicate='account_key = ? AND (last_seen_utc IS NULL OR ? > last_seen_utc)',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton', 'range-keyed'),
+        inert_rule=ACCOUNTS,
+    ),
+    AccessContract(
+        function='_cctally_journal:_apply_quota_records',
+        sql_fingerprint='dynamic:_cctally_journal:_apply_quota_records#1',
+        sql_shape='sha256:8e0e66814fdb3614',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_journal:_apply_quota_records',
+        sql_fingerprint='dynamic:_cctally_journal:_apply_quota_records#2',
+        sql_shape='sha256:e6027d234f49f83b',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_journal:_backfill_meter_rate_change_evidence',
+        sql_fingerprint='UPDATE meter_rate_change_events SET withholding_status = COALESCE(withholding_status, ?), detector_input_causes = COALESCE(detector_input_causes, ?), composition_provenance = COALESCE(composition_provenance, ?), baseline_withheld_days = COALESCE(baseline_withheld_days, ?) WHERE provider = ? AND account_key = ? AND effective_from = ?',
+        table='meter_rate_change_events',
+        keys=('provider', 'account_key', 'effective_from'),
+        predicate='provider = ? AND account_key = ? AND effective_from = ?',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_build_harvest_evt',
+        sql_fingerprint='dynamic:_cctally_journal:_build_harvest_evt#1',
+        sql_shape='sha256:be6d8235005bc42f',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_keep_five_hour_retirement',
+        sql_fingerprint='SELECT 1 FROM five_hour_reset_events WHERE account_key = ? AND five_hour_window_key = ? AND unixepoch(effective_reset_at_utc) <= unixepoch(?) LIMIT 1',
+        table='five_hour_reset_events',
+        keys=('account_key', 'five_hour_window_key'),
+        predicate='account_key = ? AND five_hour_window_key = ? AND unixepoch(effective_reset_at_utc) <= unixepoch(?)',
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_journal:_keep_five_hour_retirement',
+        sql_fingerprint='SELECT five_hour_percent, five_hour_resets_at, five_hour_window_key, weekly_observation_held FROM weekly_usage_snapshots WHERE id = ?',
+        table='weekly_usage_snapshots',
+        keys=('id',),
+        predicate='id = ?',
+        ordering='',
+        selected=('five_hour_percent', 'five_hour_resets_at', 'five_hour_window_key', 'weekly_observation_held'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_keep_weekly_retirement',
+        sql_fingerprint='SELECT weekly_observation_held, five_hour_percent, five_hour_resets_at FROM weekly_usage_snapshots WHERE id = ?',
+        table='weekly_usage_snapshots',
+        keys=('id',),
+        predicate='id = ?',
+        ordering='',
+        selected=('weekly_observation_held', 'five_hour_percent', 'five_hour_resets_at'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_keep_weekly_retirement',
+        sql_fingerprint='SELECT effective_reset_at_utc, observed_pre_credit_pct FROM week_reset_events WHERE account_key = ? AND new_week_end_at = ? AND observed_pre_credit_pct IS NOT NULL',
+        table='week_reset_events',
+        keys=('account_key', 'new_week_end_at'),
+        predicate='account_key = ? AND new_week_end_at = ? AND observed_pre_credit_pct IS NOT NULL',
+        ordering='',
+        selected=('effective_reset_at_utc', 'observed_pre_credit_pct'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_journal:_keep_weekly_retirement',
+        sql_fingerprint='SELECT effective_at_utc, observed_pre_credit_pct FROM weekly_credit_floors WHERE week_start_date = ? AND account_key = ? AND observed_pre_credit_pct IS NOT NULL',
+        table='weekly_credit_floors',
+        keys=('week_start_date', 'account_key'),
+        predicate='week_start_date = ? AND account_key = ? AND observed_pre_credit_pct IS NOT NULL',
+        ordering='',
+        selected=('effective_at_utc', 'observed_pre_credit_pct'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_journal:_converge_row_from_effective',
+        sql_fingerprint='SELECT account_key, five_hour_window_key FROM five_hour_blocks WHERE id = ?',
+        table='five_hour_blocks',
+        keys=('id',),
+        predicate='id = ?',
+        ordering='',
+        selected=('account_key', 'five_hour_window_key'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_converge_row_from_effective',
+        sql_fingerprint='dynamic:_cctally_journal:_converge_row_from_effective#1',
+        sql_shape='sha256:87a7fa0212f80043',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_converge_row_from_effective',
+        sql_fingerprint='dynamic:_cctally_journal:_converge_row_from_effective#2',
+        sql_shape='sha256:b723310f1bacf1af',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_correction_index_converged',
+        sql_fingerprint='SELECT rev, status, content_hash, batch_id FROM journal_effective_events WHERE event_id = ?',
+        table='journal_effective_events',
+        keys=('event_id',),
+        predicate='event_id = ?',
+        ordering='',
+        selected=('rev', 'status', 'content_hash', 'batch_id'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_derived_fk_value',
+        sql_fingerprint='dynamic:_cctally_journal:_derived_fk_value#1',
+        sql_shape='sha256:5ddb375652a6e6e8',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_derived_fk_value',
+        sql_fingerprint='dynamic:_cctally_journal:_derived_fk_value#2',
+        sql_shape='sha256:876b10f37733a663',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_effective_event_for_convergence',
+        sql_fingerprint='SELECT rev, status, content_hash, event_json FROM journal_effective_events WHERE event_id = ?',
+        table='journal_effective_events',
+        keys=('event_id',),
+        predicate='event_id = ?',
+        ordering='',
+        selected=('rev', 'status', 'content_hash', 'event_json'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_emit_harvest_row',
+        sql_fingerprint='dynamic:_cctally_journal:_emit_harvest_row#1',
+        sql_shape='sha256:36b3715496826795',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_emit_harvest_row',
+        sql_fingerprint='dynamic:_cctally_journal:_emit_harvest_row#2',
+        sql_shape='sha256:36b3715496826795',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        # #825/#832 fix round E: a derivation-completion scratch replay
+        # removes the one row a retained tombstone says does not exist, on
+        # the replay's PRIVATE projection, by its physical id; the table is
+        # a journal family's own (`_HARVEST_SPECS`/`_EVT_SPECS`).
+        function='_cctally_journal:_delete_scratch_row',
+        sql_fingerprint='dynamic:_cctally_journal:_delete_scratch_row#1',
+        sql_shape='sha256:25eb83cb79df6e1e',
+        table='dynamic',
+        keys=('id',),
+        predicate='id = ? on a scratch projection (a journal family table)',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_full_taint_transition',
+        sql_fingerprint='SELECT DISTINCT batch_id FROM journal_effective_events WHERE batch_id IS NOT NULL',
+        table='journal_effective_events',
+        keys=(),
+        predicate='batch_id IS NOT NULL',
+        ordering='',
+        selected=('DISTINCT batch_id',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_harvest',
+        sql_fingerprint='dynamic:_cctally_journal:_harvest#1',
+        sql_shape='sha256:3e35b6ce53d6446a',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_insert_effective_metadata',
+        sql_fingerprint='INSERT INTO journal_effective_events (event_id, rev, status, content_hash, batch_id, event_json) VALUES (?, ?, ?, ?, ?, ?)',
+        table='journal_effective_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_insert_meter_rate_change',
+        sql_fingerprint='dynamic:_cctally_journal:_insert_meter_rate_change#1',
+        sql_shape='sha256:f0289da5c72e9295',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_insert_or_ignore',
+        sql_fingerprint='dynamic:_cctally_journal:_insert_or_ignore#1',
+        sql_shape='sha256:ddf39d7c6c26c825',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_latest_weekly_basis',
+        sql_fingerprint='dynamic:_cctally_journal:_latest_weekly_basis#1',
+        sql_shape='sha256:de026ae7c7c1f17e',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=BASIS,
+    ),
+    AccessContract(
+        function='_cctally_journal:_metadata_event_record',
+        sql_fingerprint='SELECT event_json FROM journal_effective_events WHERE event_id = ?',
+        table='journal_effective_events',
+        keys=('event_id',),
+        predicate='event_id = ?',
+        ordering='',
+        selected=('event_json',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_metadata_row',
+        sql_fingerprint='SELECT rev, status, content_hash, batch_id FROM journal_effective_events WHERE event_id = ?',
+        table='journal_effective_events',
+        keys=('event_id',),
+        predicate='event_id = ?',
+        ordering='',
+        selected=('rev', 'status', 'content_hash', 'batch_id'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_prior_meter_rate_change_event',
+        sql_fingerprint='SELECT status FROM journal_effective_events WHERE event_id = ?',
+        table='journal_effective_events',
+        keys=('event_id',),
+        predicate='event_id = ?',
+        ordering='',
+        selected=('status',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_publish_generation_in_place',
+        sql_fingerprint='DELETE FROM main.stats_publication_stamp',
+        table='stats_publication_stamp',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_publish_generation_in_place',
+        sql_fingerprint='INSERT INTO main.stats_publication_stamp (record_path, started_at_utc, stamped_at_utc) VALUES (?, ?, ?)',
+        table='stats_publication_stamp',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_publish_generation_in_place',
+        sql_fingerprint="SELECT 1 FROM main.sqlite_schema WHERE type='table' AND name='journal_selector_state'",
+        table='journal_selector_state',
+        keys=(),
+        predicate="type='table' AND name='journal_selector_state'",
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_publish_generation_in_place',
+        sql_fingerprint='UPDATE main.journal_selector_state SET generation_record_path = ?, generation_stamped_at_utc = ?',
+        table='journal_selector_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_publish_generation_in_place',
+        sql_fingerprint='dynamic:_cctally_journal:_publish_generation_in_place#1',
+        sql_shape='sha256:c03310d569d06566',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_publish_generation_in_place',
+        sql_fingerprint='dynamic:_cctally_journal:_publish_generation_in_place#2',
+        sql_shape='sha256:4c08ed64ebe47aa4',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_publish_generation_in_place',
+        sql_fingerprint='dynamic:_cctally_journal:_publish_generation_in_place#3',
+        sql_shape='sha256:4c08ed64ebe47aa4',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_publish_generation_in_place',
+        sql_fingerprint='dynamic:_cctally_journal:_publish_generation_in_place#4',
+        sql_shape='sha256:9fa2bbec8283329c',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_publish_generation_in_place',
+        sql_fingerprint='dynamic:_cctally_journal:_publish_generation_in_place#5',
+        sql_shape='sha256:4c08ed64ebe47aa4',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_read_admission_summary',
+        sql_fingerprint='SELECT cutover_id, scanned_high_water, excluded_total, family_counts_json, first_excluded_coordinate, latest_excluded_coordinate, coordinate_digest, complete_through, boundary_json FROM journal_admission_summary WHERE id = 1',
+        table='journal_admission_summary',
+        keys=(),
+        predicate='id = 1',
+        ordering='',
+        selected=('cutover_id', 'scanned_high_water', 'excluded_total', 'family_counts_json', 'first_excluded_coordinate', 'latest_excluded_coordinate', 'coordinate_digest', 'complete_through', 'boundary_json'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_read_cursor',
+        sql_fingerprint='SELECT segment, offset, applied_segment, applied_offset FROM journal_cursor WHERE id = 1',
+        table='journal_cursor',
+        keys=(),
+        predicate='id = 1',
+        ordering='',
+        selected=('segment', 'offset', 'applied_segment', 'applied_offset'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_read_selector_state',
+        sql_fingerprint='SELECT generation_record_path, generation_stamped_at_utc, covered_segment, covered_offset, next_sequence, selector_version, cutover_seen, cutover_account_key FROM journal_selector_state',
+        table='journal_selector_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=('generation_record_path', 'generation_stamped_at_utc', 'covered_segment', 'covered_offset', 'next_sequence', 'selector_version', 'cutover_seen', 'cutover_account_key'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    # Reviewed re-pin (#825/#832 fix round J4, #954): the closure's imported
+    # producer `_backfill_five_hour_blocks` now takes the open block's boundary
+    # row from a shared helper (the same MIN-captured SELECT, now also used by
+    # the ownership pre-pass, which selects two more columns of the same row)
+    # overridden by the producer's journaled first observation (pure Python,
+    # `journaled_block_first_observations`), and its INSERT also writes
+    # `pricing_provenance_json` through the new pure dependency
+    # `_block_pricing_provenance_json` (the pricing snapshot date the closure
+    # already reaches). The producer only passes that mapping. Table, keys,
+    # predicates, ordering and effects of this maintenance rebuild site are
+    # unchanged, so the contract and its MAINT inert rule stand.
+    # Reviewed re-pin (#825/#832 fix round J5, 825-832-CD4-V01): the boundary
+    # row helper now returns the producer's first-writer mapping whenever it
+    # holds the window, and runs the same MIN-captured SELECT (text, table,
+    # predicate and ordering unchanged) only as the fallback; the producer now
+    # passes the decoded prefix and its effective `by_id` to the pure helper,
+    # which orders decisions by first appearance. No SQL was added or changed,
+    # so the contract and its MAINT inert rule stand.
+    AccessContract(
+        function='_cctally_journal:_rebuild_stats_index_locked',
+        sql_fingerprint='dynamic:_cctally_journal:_rebuild_stats_index_locked#1',
+        sql_shape='sha256:043784567bb14b97',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS journal_derivation_frontier (id INTEGER PRIMARY KEY CHECK (id = 1), segment TEXT NOT NULL, offset INTEGER NOT NULL, output_segment TEXT, output_offset INTEGER)',
+        table='journal_derivation_frontier',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_core:open_db',
+        sql_fingerprint='CREATE TABLE IF NOT EXISTS journal_excluded_event_revisions (event_id TEXT PRIMARY KEY, max_rev INTEGER NOT NULL)',
+        table='journal_excluded_event_revisions',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_read_derivation_state',
+        sql_fingerprint='SELECT segment, offset, output_segment, output_offset, proof_generation FROM journal_derivation_frontier WHERE id = 1',
+        table='journal_derivation_frontier',
+        keys=('id',),
+        predicate='id = 1',
+        ordering='',
+        selected=('segment', 'offset', 'output_segment', 'output_offset', 'proof_generation'),
+        effects='read',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_record_excluded_revisions',
+        sql_fingerprint='INSERT INTO journal_excluded_event_revisions (event_id, max_rev) VALUES (?, ?) ON CONFLICT(event_id) DO UPDATE SET max_rev = MAX(max_rev, excluded.max_rev)',
+        table='journal_excluded_event_revisions',
+        keys=('event_id',),
+        predicate='event_id = ?',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_derivation_frontier',
+        sql_fingerprint='DELETE FROM journal_derivation_frontier',
+        table='journal_derivation_frontier',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_derivation_frontier',
+        sql_fingerprint='INSERT INTO journal_derivation_frontier (id, segment, offset, output_segment, output_offset, proof_generation) VALUES (1, ?, ?, ?, ?, ?)',
+        table='journal_derivation_frontier',
+        keys=('id',),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:physical_excluded_revision',
+        sql_fingerprint='SELECT max_rev FROM journal_excluded_event_revisions WHERE event_id = ?',
+        table='journal_excluded_event_revisions',
+        keys=('event_id',),
+        predicate='event_id = ?',
+        ordering='',
+        selected=('max_rev',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_rederive:_joined_entries',
+        sql_fingerprint='dynamic:_cctally_rederive:_joined_entries#1',
+        sql_shape='sha256:2956a402028d910d',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL over cache.db session entries only (the scratch derivation cost read); never stats.db',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('range-keyed',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_record_new_effective_event',
+        sql_fingerprint='DELETE FROM journal_effective_events WHERE event_id = ?',
+        table='journal_effective_events',
+        keys=('event_id',),
+        predicate='event_id = ?',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_rematerialize_five_hour_high_water',
+        sql_fingerprint="SELECT MAX(five_hour_percent) FROM weekly_usage_snapshots WHERE five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(COALESCE( (SELECT effective_reset_at_utc FROM five_hour_reset_events WHERE five_hour_window_key = ? AND account_key = ? ORDER BY id DESC LIMIT 1), '1970-01-01T00:00:00Z'))",
+        table='weekly_usage_snapshots',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(COALESCE( (SELECT effective_reset_at_utc FROM five_hour_reset_events WHERE five_hour_window_key = ? AND account_key = ?',
+        ordering='id DESC',
+        selected=('MAX(five_hour_percent)',),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_rematerialize_five_hour_high_water',
+        sql_fingerprint='SELECT five_hour_window_key, account_key FROM weekly_usage_snapshots WHERE five_hour_window_key IS NOT NULL ORDER BY captured_at_utc DESC, id DESC LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='five_hour_window_key IS NOT NULL',
+        ordering='captured_at_utc DESC, id DESC',
+        selected=('five_hour_window_key', 'account_key'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_replace_block_children',
+        sql_fingerprint='dynamic:_cctally_journal:_replace_block_children#1',
+        sql_shape='sha256:98c56d859553c085',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_replace_protocol_violations',
+        sql_fingerprint='DELETE FROM journal_protocol_violations',
+        table='journal_protocol_violations',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_replace_protocol_violations',
+        sql_fingerprint='INSERT INTO journal_protocol_violations (fingerprint, batch_id, kind, violation_json, available_after) VALUES (?, ?, ?, ?, ?)',
+        table='journal_protocol_violations',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_resolve_fold_ref',
+        sql_fingerprint='SELECT 1 FROM usage_snapshot_suppressions WHERE journal_id = ?',
+        table='usage_snapshot_suppressions',
+        keys=('journal_id',),
+        predicate='journal_id = ?',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_resolve_ref',
+        sql_fingerprint='dynamic:_cctally_journal:_resolve_ref#1',
+        sql_shape='sha256:985085c93cb87555',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_reverse_ref',
+        sql_fingerprint='dynamic:_cctally_journal:_reverse_ref#1',
+        sql_shape='sha256:4f71c4c1dd51392d',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_scoped_query',
+        sql_fingerprint='dynamic:_cctally_journal:_scoped_query#1',
+        sql_shape='sha256:65fb6ece865bf93b',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_scoped_query',
+        sql_fingerprint='dynamic:_cctally_journal:_scoped_query#2',
+        sql_shape='sha256:fea23067d238cbe7',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_selector_generation_matches',
+        sql_fingerprint='SELECT record_path, stamped_at_utc FROM stats_publication_stamp',
+        table='stats_publication_stamp',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=('record_path', 'stamped_at_utc'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_first_post_floor_unchanged',
+        sql_fingerprint='SELECT five_hour_percent, five_hour_window_key, five_hour_resets_at, captured_at_utc FROM weekly_usage_snapshots WHERE week_start_date = ? AND account_key = ? ORDER BY captured_at_utc DESC, id DESC LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=('week_start_date', 'account_key'),
+        predicate='week_start_date = ? AND account_key = ?',
+        ordering='captured_at_utc DESC, id DESC',
+        selected=('five_hour_percent', 'five_hour_window_key', 'five_hour_resets_at', 'captured_at_utc'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:latest_post_floor_weekly_row',
+        sql_fingerprint='SELECT weekly_percent, captured_at_utc FROM weekly_usage_snapshots WHERE week_start_date = ? AND account_key = ? AND weekly_observation_held = 0 AND weekly_percent IS NOT NULL AND unixepoch(week_end_at) = unixepoch(?) AND unixepoch(captured_at_utc) >= unixepoch(?) ORDER BY captured_at_utc DESC, id DESC LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=('week_start_date', 'account_key'),
+        predicate='week_start_date = ? AND account_key = ? AND weekly_observation_held = 0 AND weekly_percent IS NOT NULL AND unixepoch(week_end_at) = unixepoch(?) AND unixepoch(captured_at_utc) >= unixepoch(?)',
+        ordering='captured_at_utc DESC, id DESC',
+        selected=('weekly_percent', 'captured_at_utc'),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_usage_snapshot_fold_decision',
+        sql_fingerprint='SELECT MAX(five_hour_percent) FROM weekly_usage_snapshots WHERE five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?)',
+        table='weekly_usage_snapshots',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?)',
+        ordering='',
+        selected=('MAX(five_hour_percent)',),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_usage_snapshot_fold_decision',
+        sql_fingerprint='SELECT 1 FROM five_hour_blocks WHERE five_hour_window_key = ? AND account_key = ? LIMIT 1',
+        table='five_hour_blocks',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ?',
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_usage_snapshot_fold_decision',
+        sql_fingerprint="SELECT MAX(five_hour_percent) FROM weekly_usage_snapshots WHERE five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(COALESCE( (SELECT effective_reset_at_utc FROM five_hour_reset_events WHERE five_hour_window_key = ? AND account_key = ? ORDER BY id DESC LIMIT 1), '1970-01-01T00:00:00Z'))",
+        table='weekly_usage_snapshots',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(COALESCE( (SELECT effective_reset_at_utc FROM five_hour_reset_events WHERE five_hour_window_key = ? AND account_key = ?',
+        ordering='id DESC',
+        selected=('MAX(five_hour_percent)',),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_usage_snapshot_fold_decision',
+        sql_fingerprint='SELECT MAX(weekly_percent) FROM weekly_usage_snapshots WHERE week_start_date = ? AND account_key = ? AND weekly_observation_held = 0 AND unixepoch(captured_at_utc) >= unixepoch(?)',
+        table='weekly_usage_snapshots',
+        keys=('week_start_date', 'account_key'),
+        predicate='week_start_date = ? AND account_key = ? AND weekly_observation_held = 0 AND unixepoch(captured_at_utc) >= unixepoch(?)',
+        ordering='',
+        selected=('MAX(weekly_percent)',),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_usage_snapshot_fold_decision',
+        sql_fingerprint='SELECT weekly_percent, five_hour_percent, five_hour_window_key FROM weekly_usage_snapshots WHERE week_start_date = ? AND account_key = ? ORDER BY captured_at_utc DESC, id DESC LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=('week_start_date', 'account_key'),
+        predicate='week_start_date = ? AND account_key = ?',
+        ordering='captured_at_utc DESC, id DESC',
+        selected=('weekly_percent', 'five_hour_percent', 'five_hour_window_key'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_v1_rate_change_identity_exists',
+        sql_fingerprint='SELECT 1 FROM journal_effective_events WHERE event_id = ?',
+        table='journal_effective_events',
+        keys=('event_id',),
+        predicate='event_id = ?',
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_validate_rebuilt_stats_index',
+        sql_fingerprint='SELECT id, journal_id FROM weekly_usage_snapshots ORDER BY id DESC LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=(),
+        predicate='',
+        ordering='id DESC',
+        selected=('id', 'journal_id'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_validate_rebuilt_stats_index',
+        sql_fingerprint='SELECT segment, offset, applied_segment, applied_offset FROM journal_cursor WHERE id = 1',
+        table='journal_cursor',
+        keys=(),
+        predicate='id = 1',
+        ordering='',
+        selected=('segment', 'offset', 'applied_segment', 'applied_offset'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_admission_summary',
+        sql_fingerprint='INSERT OR REPLACE INTO journal_admission_summary (id, cutover_id, scanned_high_water, excluded_total, family_counts_json, first_excluded_coordinate, latest_excluded_coordinate, coordinate_digest, complete_through, boundary_json) VALUES (1, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
+        table='journal_admission_summary',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_cursor',
+        sql_fingerprint='INSERT INTO journal_cursor (id, segment, offset, applied_segment, applied_offset) VALUES (1, ?, ?, ?, ?) ON CONFLICT(id) DO UPDATE SET segment = excluded.segment, offset = excluded.offset, applied_segment = excluded.applied_segment, applied_offset = excluded.applied_offset',
+        table='journal_cursor',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_quota_projection_state',
+        sql_fingerprint='INSERT INTO stats_quota_projection_state(id, incomplete, target_version, recovery_target_json) VALUES (1, ?, ?, ?) ON CONFLICT(id) DO UPDATE SET incomplete = excluded.incomplete, target_version = excluded.target_version, recovery_target_json = excluded.recovery_target_json',
+        table='stats_quota_projection_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_delta',
+        sql_fingerprint='DELETE FROM journal_protocol_violations WHERE fingerprint = ?',
+        table='journal_protocol_violations',
+        keys=('fingerprint',),
+        predicate='fingerprint = ?',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_delta',
+        sql_fingerprint='INSERT INTO journal_selector_state (id, generation_record_path, generation_stamped_at_utc, covered_segment, covered_offset, next_sequence, selector_version, cutover_seen, cutover_account_key) VALUES (1, ?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT(id) DO UPDATE SET generation_record_path = excluded.generation_record_path, generation_stamped_at_utc = excluded.generation_stamped_at_utc, covered_segment = excluded.covered_segment, covered_offset = excluded.covered_offset, next_sequence = excluded.next_sequence, selector_version = excluded.selector_version, cutover_seen = excluded.cutover_seen, cutover_account_key = excluded.cutover_account_key',
+        table='journal_selector_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_delta',
+        sql_fingerprint='INSERT OR REPLACE INTO journal_effective_events (event_id, rev, status, content_hash, batch_id, event_json, winning_sequence, conflict_hashes_json) VALUES (?, ?, ?, ?, ?, ?, ?, ?)',
+        table='journal_effective_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_delta',
+        sql_fingerprint='INSERT OR REPLACE INTO journal_protocol_violations (fingerprint, batch_id, kind, violation_json, available_after) VALUES (?, ?, ?, ?, ?)',
+        table='journal_protocol_violations',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_delta',
+        sql_fingerprint='INSERT OR REPLACE INTO journal_selector_batch_records (batch_id, kind, key, record_digest, identity_digest, sequence, action_core_json) VALUES (?, ?, ?, ?, ?, ?, ?)',
+        table='journal_selector_batch_records',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_delta',
+        sql_fingerprint='INSERT OR REPLACE INTO journal_selector_batches (batch_id, status, action_count, action_set_hash, begin_segment, begin_offset, earliest_commit_segment, earliest_commit_offset) VALUES (?, ?, ?, ?, ?, ?, ?, ?)',
+        table='journal_selector_batches',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_state',
+        sql_fingerprint='DELETE FROM journal_effective_events',
+        table='journal_effective_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_state',
+        sql_fingerprint='DELETE FROM journal_selector_batch_records',
+        table='journal_selector_batch_records',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_state',
+        sql_fingerprint='DELETE FROM journal_selector_batches',
+        table='journal_selector_batches',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_state',
+        sql_fingerprint='DELETE FROM journal_selector_state',
+        table='journal_selector_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_state',
+        sql_fingerprint='INSERT INTO journal_effective_events (event_id, rev, status, content_hash, batch_id, event_json, winning_sequence, conflict_hashes_json) VALUES (?, ?, ?, ?, ?, ?, ?, ?)',
+        table='journal_effective_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_state',
+        sql_fingerprint='INSERT INTO journal_selector_batch_records (batch_id, kind, key, record_digest, identity_digest, sequence, action_core_json) VALUES (?, ?, ?, ?, ?, ?, ?)',
+        table='journal_selector_batch_records',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_state',
+        sql_fingerprint='INSERT INTO journal_selector_batches (batch_id, status, action_count, action_set_hash, begin_segment, begin_offset, earliest_commit_segment, earliest_commit_offset) VALUES (?, ?, ?, ?, ?, ?, ?, ?)',
+        table='journal_selector_batches',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:_write_selector_state',
+        sql_fingerprint='INSERT INTO journal_selector_state (id, generation_record_path, generation_stamped_at_utc, covered_segment, covered_offset, next_sequence, selector_version, cutover_seen, cutover_account_key) VALUES (1, ?, ?, ?, ?, ?, ?, ?, ?)',
+        table='journal_selector_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:emit_model_a',
+        sql_fingerprint='dynamic:_cctally_journal:emit_model_a#1',
+        sql_shape='sha256:e7dad38dc273784f',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:freeze_five_hour_block_close',
+        sql_fingerprint='SELECT * FROM five_hour_blocks WHERE id = ?',
+        table='five_hour_blocks',
+        keys=('id',),
+        predicate='id = ?',
+        ordering='',
+        selected=('*',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:latch_crossing_was_retired',
+        sql_fingerprint='dynamic:_cctally_journal:latch_crossing_was_retired#1',
+        sql_shape='sha256:dc25754c94998705',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:read_publication_stamp',
+        sql_fingerprint='SELECT record_path FROM stats_publication_stamp',
+        table='stats_publication_stamp',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=('record_path',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:record_meter_rate_change',
+        sql_fingerprint='SELECT provider, account_key, effective_from, previous_units_per_point, new_units_per_point, severity, withholding_status, detector_input_causes, composition_provenance, baseline_withheld_days FROM meter_rate_change_events WHERE provider = ? AND account_key = ? AND effective_from = ? LIMIT 1',
+        table='meter_rate_change_events',
+        keys=('provider', 'account_key', 'effective_from'),
+        predicate='provider = ? AND account_key = ? AND effective_from = ?',
+        ordering='',
+        selected=('provider', 'account_key', 'effective_from', 'previous_units_per_point', 'new_units_per_point', 'severity', 'withholding_status', 'detector_input_causes', 'composition_provenance', 'baseline_withheld_days'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=JOURNAL,
+    ),
+    AccessContract(
+        function='_cctally_journal:stats_index_matches_journal_prefix',
+        sql_fingerprint='SELECT event_id, rev, status, content_hash, batch_id, event_json FROM journal_effective_events ORDER BY event_id',
+        table='journal_effective_events',
+        keys=(),
+        predicate='',
+        ordering='event_id',
+        selected=('event_id', 'rev', 'status', 'content_hash', 'batch_id', 'event_json'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:stats_index_matches_journal_prefix',
+        sql_fingerprint='SELECT violation_json FROM journal_protocol_violations ORDER BY batch_id, kind, fingerprint',
+        table='journal_protocol_violations',
+        keys=(),
+        predicate='',
+        ordering='batch_id, kind, fingerprint',
+        selected=('violation_json',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:stats_index_matches_journal_prefix',
+        sql_fingerprint='dynamic:_cctally_journal:stats_index_matches_journal_prefix#1',
+        sql_shape='sha256:5c869b43c418d251',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_journal:stats_index_matches_journal_prefix',
+        sql_fingerprint='dynamic:_cctally_journal:stats_index_matches_journal_prefix#2',
+        sql_shape='sha256:46cf0672d1ac6f95',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_milestones:_budget_crossings',
+        sql_fingerprint='UPDATE budget_milestones SET alerted_at = ? WHERE vendor = ? AND account_key = ? AND period_start_at = ? AND period = ? AND threshold = ? AND alerted_at IS NULL',
+        table='budget_milestones',
+        keys=('vendor', 'account_key', 'period_start_at', 'period', 'threshold'),
+        predicate='vendor = ? AND account_key = ? AND period_start_at = ? AND period = ? AND threshold = ? AND alerted_at IS NULL',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_milestones:_projected_levels_already_latched',
+        sql_fingerprint='SELECT threshold FROM projected_milestones WHERE week_start_at = ? AND (period = ? OR period IS NULL) AND metric = ?',
+        table='projected_milestones',
+        keys=('week_start_at', 'period', 'metric'),
+        predicate='week_start_at = ? AND (period = ? OR period IS NULL) AND metric = ?',
+        ordering='',
+        selected=('threshold',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_milestones:get_max_milestone_for_week',
+        sql_fingerprint='SELECT MAX(percent_threshold) AS max_pct FROM percent_milestones WHERE week_start_date = ? AND reset_event_id = ? AND account_key = ?',
+        table='percent_milestones',
+        keys=('week_start_date', 'reset_event_id', 'account_key'),
+        predicate='week_start_date = ? AND reset_event_id = ? AND account_key = ?',
+        ordering='',
+        selected=('MAX(percent_threshold) AS max_pct',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_milestones:get_milestone_cost_for_week',
+        sql_fingerprint='SELECT cumulative_cost_usd FROM percent_milestones WHERE week_start_date = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ?',
+        table='percent_milestones',
+        keys=('week_start_date', 'percent_threshold', 'reset_event_id', 'account_key'),
+        predicate='week_start_date = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ?',
+        ordering='',
+        selected=('cumulative_cost_usd',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_milestones:insert_budget_milestone',
+        sql_fingerprint='INSERT OR IGNORE INTO budget_milestones (vendor, account_key, period_start_at, period, threshold, budget_usd, spent_usd, consumption_pct, crossed_at_utc) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)',
+        table='budget_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_milestones:insert_cost_snapshot',
+        sql_fingerprint='INSERT INTO weekly_cost_snapshots ( captured_at_utc, week_start_date, week_end_date, week_start_at, week_end_at, range_start_iso, range_end_iso, cost_usd, mode, project, account_key ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
+        table='weekly_cost_snapshots',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_milestones:insert_percent_milestone',
+        sql_fingerprint='INSERT OR IGNORE INTO percent_milestones ( captured_at_utc, week_start_date, week_end_date, week_start_at, week_end_at, percent_threshold, cumulative_cost_usd, marginal_cost_usd, usage_snapshot_id, cost_snapshot_id, five_hour_percent_at_crossing, reset_event_id, account_key ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
+        table='percent_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_milestones:insert_project_budget_milestone',
+        sql_fingerprint='INSERT OR IGNORE INTO project_budget_milestones (week_start_at, project_key, threshold, budget_usd, spent_usd, consumption_pct, crossed_at_utc) VALUES (?, ?, ?, ?, ?, ?, ?)',
+        table='project_budget_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_milestones:insert_projected_milestone',
+        sql_fingerprint='INSERT OR IGNORE INTO projected_milestones (week_start_at, period, metric, threshold, projected_value, denominator, crossed_at_utc) VALUES (?, ?, ?, ?, ?, ?, ?)',
+        table='projected_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_quarantine:load_state',
+        sql_fingerprint='SELECT MAX(seq) FROM outcome_quarantine_triggers',
+        table='outcome_quarantine_triggers',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=('MAX(seq)',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=QUARANTINE,
+    ),
+    AccessContract(
+        function='_cctally_quarantine:load_state',
+        sql_fingerprint='SELECT account_key, accounting_certificate_json, accounting_trigger_seq, control_certificate_json, control_trigger_seq FROM outcome_quarantine_certificates',
+        table='outcome_quarantine_certificates',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=('account_key', 'accounting_certificate_json', 'accounting_trigger_seq', 'control_certificate_json', 'control_trigger_seq'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=QUARANTINE,
+    ),
+    AccessContract(
+        function='_cctally_quarantine:load_state',
+        sql_fingerprint='SELECT scope, envelope_json FROM outcome_quarantine_envelope',
+        table='outcome_quarantine_envelope',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=('scope', 'envelope_json'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=QUARANTINE,
+    ),
+    AccessContract(
+        function='_cctally_quarantine:load_state',
+        sql_fingerprint='SELECT seq, segment, byte_offset, reason, at FROM outcome_quarantine_triggers WHERE kind = ? ORDER BY seq',
+        table='outcome_quarantine_triggers',
+        keys=('kind',),
+        predicate='kind = ?',
+        ordering='seq',
+        selected=('seq', 'segment', 'byte_offset', 'reason', 'at'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=QUARANTINE,
+    ),
+    AccessContract(
+        function='_cctally_quota:_activate_quota_rule',
+        sql_fingerprint='INSERT INTO quota_alert_arming (source, source_root_key, logical_limit_key, observed_slot, window_minutes, rule_fingerprint, activated_at_utc, account_key) VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(source, source_root_key, account_key, logical_limit_key, observed_slot, window_minutes) DO UPDATE SET rule_fingerprint=excluded.rule_fingerprint, activated_at_utc=excluded.activated_at_utc',
+        table='quota_alert_arming',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_apply_quota_projection_rows',
+        sql_fingerprint='INSERT INTO quota_percent_milestones (source, source_root_key, logical_limit_key, observed_slot, window_minutes, resets_at_utc, percent_threshold, captured_at_utc, source_path, line_offset, high_water_percent, generation, orphaned_at, account_key) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,NULL,?) ON CONFLICT(source, source_root_key, account_key, logical_limit_key, observed_slot, window_minutes, resets_at_utc, percent_threshold) DO UPDATE SET captured_at_utc=excluded.captured_at_utc, source_path=excluded.source_path, line_offset=excluded.line_offset, high_water_percent=excluded.high_water_percent, generation=excluded.generation, orphaned_at=NULL',
+        table='quota_percent_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_apply_quota_projection_rows',
+        sql_fingerprint='INSERT INTO quota_projection_state (source_root_key, account_key, generation, physical_signature, completed_at_utc) VALUES (?,?,?,?,?) ON CONFLICT(source_root_key, account_key) DO UPDATE SET generation=excluded.generation, physical_signature=excluded.physical_signature, completed_at_utc=excluded.completed_at_utc',
+        table='quota_projection_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_apply_quota_projection_rows',
+        sql_fingerprint='INSERT INTO quota_window_blocks (source, source_root_key, logical_limit_key, observed_slot, window_minutes, limit_id, limit_name, resets_at_utc, nominal_start_at_utc, first_observed_at_utc, last_observed_at_utc, first_percent, current_percent, last_source_path, last_line_offset, generation, orphaned_at, account_key, physical_group_key, physical_group_digest) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,NULL,?,?,?) ON CONFLICT(source, source_root_key, account_key, logical_limit_key, observed_slot, window_minutes, resets_at_utc) DO UPDATE SET limit_id=excluded.limit_id, limit_name=excluded.limit_name, nominal_start_at_utc=excluded.nominal_start_at_utc, first_observed_at_utc=excluded.first_observed_at_utc, last_observed_at_utc=excluded.last_observed_at_utc, first_percent=excluded.first_percent, current_percent=excluded.current_percent, last_source_path=excluded.last_source_path, last_line_offset=excluded.last_line_offset, generation=excluded.generation, orphaned_at=NULL, physical_group_key=excluded.physical_group_key, physical_group_digest=excluded.physical_group_digest',
+        table='quota_window_blocks',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_apply_quota_projection_rows',
+        sql_fingerprint='dynamic:_cctally_quota:_apply_quota_projection_rows#1',
+        sql_shape='sha256:0c02fccf21f059a5',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_armed_identities',
+        sql_fingerprint="SELECT source, source_root_key, account_key, logical_limit_key, observed_slot, window_minutes, rule_fingerprint FROM quota_alert_arming WHERE source='codex'",
+        table='quota_alert_arming',
+        keys=(),
+        predicate="source='codex'",
+        ordering='',
+        selected=('source', 'source_root_key', 'account_key', 'logical_limit_key', 'observed_slot', 'window_minutes', 'rule_fingerprint'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_arming_row',
+        sql_fingerprint='SELECT rule_fingerprint, activated_at_utc FROM quota_alert_arming WHERE source=? AND source_root_key=? AND account_key=? AND logical_limit_key=? AND observed_slot=? AND window_minutes=?',
+        table='quota_alert_arming',
+        keys=('source', 'source_root_key', 'account_key', 'logical_limit_key', 'observed_slot', 'window_minutes'),
+        predicate='source=? AND source_root_key=? AND account_key=? AND logical_limit_key=? AND observed_slot=? AND window_minutes=?',
+        ordering='',
+        selected=('rule_fingerprint', 'activated_at_utc'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_blocks_missing_reverse_map',
+        sql_fingerprint="SELECT 1 FROM quota_window_blocks WHERE source='codex' AND physical_group_key IS NULL LIMIT 1",
+        table='quota_window_blocks',
+        keys=(),
+        predicate="source='codex' AND physical_group_key IS NULL",
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_codex_quota_latest_rows',
+        sql_fingerprint='dynamic:_cctally_quota:_codex_quota_latest_rows#1',
+        sql_shape='sha256:303314c1c826d8b3',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_codex_quota_read_objects',
+        sql_fingerprint='dynamic:_cctally_quota:_codex_quota_read_objects#1',
+        sql_shape='sha256:6124cce1a9689748',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_codex_witness_anchors',
+        sql_fingerprint='dynamic:_cctally_quota:_codex_witness_anchors#1',
+        sql_shape='sha256:174522237238d2e7',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_evaluate_quota_alerts',
+        sql_fingerprint="DELETE FROM quota_alert_arming WHERE source='codex'",
+        table='quota_alert_arming',
+        keys=(),
+        predicate="source='codex'",
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_evaluate_quota_alerts',
+        sql_fingerprint="SELECT source, source_root_key, account_key, logical_limit_key, observed_slot, window_minutes FROM quota_alert_arming WHERE source='codex'",
+        table='quota_alert_arming',
+        keys=(),
+        predicate="source='codex'",
+        ordering='',
+        selected=('source', 'source_root_key', 'account_key', 'logical_limit_key', 'observed_slot', 'window_minutes'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_historic_root_keys',
+        sql_fingerprint='dynamic:_cctally_quota:_historic_root_keys#1',
+        sql_shape='sha256:7034d91472e41a27',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_insert_quota_terminal_event',
+        sql_fingerprint='INSERT OR IGNORE INTO quota_threshold_events (source, source_root_key, logical_limit_key, observed_slot, window_minutes, resets_at_utc, threshold, qualifying_kind, qualifying_percent, projected_percent, severity, created_at_utc, disposition, alerted_at, suppressed_at, account_key) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)',
+        table='quota_threshold_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_iter_shard_rows',
+        sql_fingerprint='dynamic:_cctally_quota:_iter_shard_rows#1',
+        sql_shape='sha256:165fc1ccc9cadbab',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_ledger_rows_after',
+        sql_fingerprint='dynamic:_cctally_quota:_ledger_rows_after#1',
+        sql_shape='sha256:0bc7183f2e3057ba',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_ledger_state',
+        sql_fingerprint="SELECT watermark_seq, interpretation_version, alerts_enabled, next_evaluation_at_utc, last_full_pass_at, next_evaluation_by_root_json FROM quota_projection_ledger_state WHERE source='codex'",
+        table='quota_projection_ledger_state',
+        keys=(),
+        predicate="source='codex'",
+        ordering='',
+        selected=('watermark_seq', 'interpretation_version', 'alerts_enabled', 'next_evaluation_at_utc', 'last_full_pass_at', 'next_evaluation_by_root_json'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_load_codex_window_group_evidence',
+        sql_fingerprint='dynamic:_cctally_quota:_load_codex_window_group_evidence#1',
+        sql_shape='sha256:db969904c3774419',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_orphan_unseen',
+        sql_fingerprint='dynamic:_cctally_quota:_orphan_unseen#1',
+        sql_shape='sha256:c7af562f46f3fbaa',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_orphan_unseen',
+        sql_fingerprint='dynamic:_cctally_quota:_orphan_unseen#2',
+        sql_shape='sha256:9603ce362ea0ea86',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_orphan_unseen',
+        sql_fingerprint='dynamic:_cctally_quota:_orphan_unseen#3',
+        sql_shape='sha256:43538e803b819a39',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_orphan_unseen_scoped',
+        sql_fingerprint='dynamic:_cctally_quota:_orphan_unseen_scoped#1',
+        sql_shape='sha256:ccbdb93e0a0638bd',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_orphan_unseen_scoped',
+        sql_fingerprint='dynamic:_cctally_quota:_orphan_unseen_scoped#2',
+        sql_shape='sha256:b6c101d59a0df239',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_orphan_unseen_scoped',
+        sql_fingerprint='dynamic:_cctally_quota:_orphan_unseen_scoped#3',
+        sql_shape='sha256:7fdd1662b4fc9bab',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_reanchor_terminal_events',
+        sql_fingerprint='dynamic:_cctally_quota:_reanchor_terminal_events#1',
+        sql_shape='sha256:c25bb9f7f3b70ee0',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_root_accounts',
+        sql_fingerprint="SELECT DISTINCT account_key FROM quota_window_blocks WHERE source='codex' AND source_root_key=? AND orphaned_at IS NULL",
+        table='quota_window_blocks',
+        keys=('source_root_key',),
+        predicate="source='codex' AND source_root_key=? AND orphaned_at IS NULL",
+        ordering='',
+        selected=('DISTINCT account_key',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_root_group_pairs',
+        sql_fingerprint="SELECT DISTINCT physical_group_key, physical_group_digest FROM quota_window_blocks WHERE source='codex' AND source_root_key=? AND orphaned_at IS NULL AND physical_group_key IS NOT NULL AND physical_group_digest IS NOT NULL",
+        table='quota_window_blocks',
+        keys=('source_root_key',),
+        predicate="source='codex' AND source_root_key=? AND orphaned_at IS NULL AND physical_group_key IS NOT NULL AND physical_group_digest IS NOT NULL",
+        ordering='',
+        selected=('DISTINCT physical_group_key', 'physical_group_digest'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_stats_projection_signatures_match',
+        sql_fingerprint='SELECT source_root_key, account_key, physical_signature FROM quota_projection_state',
+        table='quota_projection_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=('source_root_key', 'account_key', 'physical_signature'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:_store_ledger_state',
+        sql_fingerprint="INSERT INTO quota_projection_ledger_state (source, watermark_seq, interpretation_version, alerts_enabled, next_evaluation_at_utc, last_full_pass_at, next_evaluation_by_root_json) VALUES ('codex',?,?,?,?,?,?) ON CONFLICT(source) DO UPDATE SET watermark_seq=excluded.watermark_seq, interpretation_version=excluded.interpretation_version, alerts_enabled=excluded.alerts_enabled, next_evaluation_at_utc=excluded.next_evaluation_at_utc, last_full_pass_at=excluded.last_full_pass_at, next_evaluation_by_root_json=excluded.next_evaluation_by_root_json",
+        table='quota_projection_ledger_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:load_codex_quota_observations',
+        sql_fingerprint='dynamic:_cctally_quota:load_codex_quota_observations#1',
+        sql_shape='sha256:6a6e082ae339b9cf',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_quota:reconcile_codex_quota_projection',
+        sql_fingerprint="SELECT 1 FROM quota_alert_arming WHERE source='codex' LIMIT 1",
+        table='quota_alert_arming',
+        keys=(),
+        predicate="source='codex'",
+        ordering='',
+        selected=('1',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=CODEX,
+    ),
+    AccessContract(
+        function='_cctally_record:_apply_credit',
+        sql_fingerprint='INSERT OR IGNORE INTO weekly_credit_floors (week_start_date, effective_at_utc, observed_pre_credit_pct, applied_at_utc, account_key) VALUES (?, ?, ?, ?, ?)',
+        table='weekly_credit_floors',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=MANUAL,
+    ),
+    AccessContract(
+        function='_cctally_record:_apply_credit',
+        sql_fingerprint='SELECT journal_id FROM weekly_credit_floors WHERE week_start_date = ? AND account_key = ? AND journal_id IS NOT NULL AND journal_id != ?',
+        table='weekly_credit_floors',
+        keys=('week_start_date', 'account_key'),
+        predicate='week_start_date = ? AND account_key = ? AND journal_id IS NOT NULL AND journal_id != ?',
+        ordering='',
+        selected=('journal_id',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=MANUAL,
+    ),
+    AccessContract(
+        function='_cctally_record:_apply_credit',
+        sql_fingerprint="SELECT journal_id FROM weekly_usage_snapshots WHERE week_start_date = ? AND account_key = ? AND source = 'record-credit' AND journal_id IS NOT NULL AND journal_id NOT LIKE 'sa:' || ? || ':syn:%'",
+        table='weekly_usage_snapshots',
+        keys=('week_start_date', 'account_key'),
+        predicate="week_start_date = ? AND account_key = ? AND source = 'record-credit' AND journal_id IS NOT NULL AND journal_id NOT LIKE 'sa:' || ? || ':syn:%'",
+        ordering='',
+        selected=('journal_id',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=MANUAL,
+    ),
+    AccessContract(
+        function='_cctally_record:_arm_reset_debounce_state',
+        sql_fingerprint='INSERT INTO weekly_reset_debounce_state (account_key, week_start_date, week_end_at, baseline_pct, first_zero_at_utc, first_zero_observation_id) VALUES (?, ?, ?, ?, ?, ?) ON CONFLICT(account_key) DO UPDATE SET week_start_date = excluded.week_start_date, week_end_at = excluded.week_end_at, baseline_pct = excluded.baseline_pct, first_zero_at_utc = excluded.first_zero_at_utc, first_zero_observation_id = excluded.first_zero_observation_id',
+        table='weekly_reset_debounce_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_clear_reset_debounce_state',
+        sql_fingerprint='DELETE FROM weekly_reset_debounce_state WHERE account_key = ?',
+        table='weekly_reset_debounce_state',
+        keys=('account_key',),
+        predicate='account_key = ?',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_delete_doomed_snapshot_rows',
+        sql_fingerprint='dynamic:_cctally_record:_delete_doomed_snapshot_rows#1',
+        sql_shape='sha256:029afc7add377117',
+        table='dynamic',
+        keys=(),
+        predicate='stale-replica band: account, date key, capture >= effective, weekly band, carrying its own five-hour reading (spec 4.7 revision 7: kept weekly-held)',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_delete_doomed_snapshot_rows',
+        sql_fingerprint='dynamic:_cctally_record:_delete_doomed_snapshot_rows#2',
+        sql_shape='sha256:332a2909ac5f8963',
+        table='dynamic',
+        keys=(),
+        predicate='stale-replica band: account, date key, capture >= effective, weekly band',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_derive_5h_window_key',
+        sql_fingerprint='SELECT five_hour_resets_at, five_hour_window_key FROM weekly_usage_snapshots WHERE five_hour_resets_at IS NOT NULL AND five_hour_window_key IS NOT NULL AND account_key = ? ORDER BY captured_at_utc DESC, id DESC LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=('account_key',),
+        predicate='five_hour_resets_at IS NOT NULL AND five_hour_window_key IS NOT NULL AND account_key = ?',
+        ordering='captured_at_utc DESC, id DESC',
+        selected=('five_hour_resets_at', 'five_hour_window_key'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=ANCHOR,
+    ),
+    AccessContract(
+        function='_cctally_record:_derive_5h_window_key',
+        sql_fingerprint="SELECT five_hour_window_key, five_hour_resets_at FROM five_hour_blocks WHERE account_key = ? AND abs(? - CAST(strftime('%s', five_hour_resets_at) AS INTEGER)) <= ? ORDER BY abs(? - CAST(strftime('%s', five_hour_resets_at) AS INTEGER)) ASC LIMIT 1",
+        table='five_hour_blocks',
+        keys=('account_key',),
+        predicate="account_key = ? AND abs(? - CAST(strftime('%s', five_hour_resets_at) AS INTEGER)) <= ?",
+        ordering="abs(? - CAST(strftime('%s', five_hour_resets_at) AS INTEGER)) ASC",
+        selected=('five_hour_window_key', 'five_hour_resets_at'),
+        effects='read',
+        classes=('range-keyed', 'cross-period'),
+        inert_rule=ANCHOR,
+    ),
+    AccessContract(
+        function='_cctally_record:_doomed_snapshot_rows',
+        sql_fingerprint='dynamic:_cctally_record:_doomed_snapshot_rows#1',
+        sql_shape='sha256:b5941392ff09fd6b',
+        table='dynamic',
+        keys=(),
+        predicate='stale-replica band: account, date key, capture >= effective, weekly band',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_fire_in_place_credit',
+        sql_fingerprint='INSERT OR IGNORE INTO week_reset_events (detected_at_utc, old_week_end_at, new_week_end_at, effective_reset_at_utc, observed_pre_credit_pct, account_key, origin_observation_id) VALUES (?, ?, ?, ?, ?, ?, ?)',
+        table='week_reset_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_five_hour_ownership_windows',
+        sql_fingerprint='SELECT five_hour_window_key, block_start_at, five_hour_resets_at FROM five_hour_blocks WHERE account_key = ? AND five_hour_window_key != ? AND unixepoch(five_hour_resets_at) > unixepoch(?) AND unixepoch(block_start_at) <= unixepoch(?)',
+        table='five_hour_blocks',
+        keys=('account_key',),
+        predicate='account_key = ? AND five_hour_window_key != ? AND unixepoch(five_hour_resets_at) > unixepoch(?) AND unixepoch(block_start_at) <= unixepoch(?)',
+        ordering='',
+        selected=('five_hour_window_key', 'block_start_at', 'five_hour_resets_at'),
+        effects='read',
+        classes=('range-keyed', 'cross-period'),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:_insert_credit_snapshot',
+        sql_fingerprint='dynamic:_cctally_record:_insert_credit_snapshot#1',
+        sql_shape='sha256:93b68f833e86ea12',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MANUAL,
+    ),
+    AccessContract(
+        function='_cctally_record:_pipeline_claude_usage',
+        sql_fingerprint='SELECT * FROM weekly_usage_snapshots WHERE week_start_date = ? AND account_key = ? ORDER BY captured_at_utc DESC, id DESC LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=('week_start_date', 'account_key'),
+        predicate='week_start_date = ? AND account_key = ?',
+        ordering='captured_at_utc DESC, id DESC',
+        selected=('*',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_pipeline_claude_usage',
+        sql_fingerprint='SELECT * FROM weekly_usage_snapshots WHERE id = ?',
+        table='weekly_usage_snapshots',
+        keys=('id',),
+        predicate='id = ?',
+        ordering='',
+        selected=('*',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_read_five_hour_source_state',
+        sql_fingerprint='SELECT baseline_pct, pending_low_pct, pending_at_utc, pending_observation_id FROM five_hour_credit_confirmation_state WHERE account_key = ? AND five_hour_window_key = ? AND source = ?',
+        table='five_hour_credit_confirmation_state',
+        keys=('account_key', 'five_hour_window_key', 'source'),
+        predicate='account_key = ? AND five_hour_window_key = ? AND source = ?',
+        ordering='',
+        selected=('baseline_pct', 'pending_low_pct', 'pending_at_utc', 'pending_observation_id'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_read_reset_debounce_state',
+        sql_fingerprint='SELECT week_start_date, week_end_at, baseline_pct, first_zero_at_utc, first_zero_observation_id FROM weekly_reset_debounce_state WHERE account_key = ?',
+        table='weekly_reset_debounce_state',
+        keys=('account_key',),
+        predicate='account_key = ?',
+        ordering='',
+        selected=('week_start_date', 'week_end_at', 'baseline_pct', 'first_zero_at_utc', 'first_zero_observation_id'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=DEBOUNCE,
+    ),
+    AccessContract(
+        function='_cctally_record:_record_budget_milestone_for_vendor',
+        sql_fingerprint='SELECT id FROM budget_milestones WHERE vendor=? AND account_key=? AND period_start_at=? AND period=? AND threshold=?',
+        table='budget_milestones',
+        keys=('vendor', 'account_key', 'period_start_at', 'period', 'threshold'),
+        predicate='vendor=? AND account_key=? AND period_start_at=? AND period=? AND threshold=?',
+        ordering='',
+        selected=('id',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_record:_record_budget_milestone_for_vendor',
+        sql_fingerprint='SELECT threshold FROM budget_milestones WHERE vendor = ? AND account_key = ? AND period_start_at = ? AND (period = ? OR period IS NULL)',
+        table='budget_milestones',
+        keys=('vendor', 'account_key', 'period_start_at', 'period'),
+        predicate='vendor = ? AND account_key = ? AND period_start_at = ? AND (period = ? OR period IS NULL)',
+        ordering='',
+        selected=('threshold',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_record:_write_five_hour_source_state',
+        sql_fingerprint='DELETE FROM five_hour_credit_confirmation_state WHERE account_key = ? AND source = ? AND five_hour_window_key < ?',
+        table='five_hour_credit_confirmation_state',
+        keys=('account_key', 'source'),
+        predicate='account_key = ? AND source = ? AND five_hour_window_key < ?',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('singleton', 'range-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:_write_five_hour_source_state',
+        sql_fingerprint='INSERT INTO five_hour_credit_confirmation_state (account_key, five_hour_window_key, source, baseline_pct, pending_low_pct, pending_at_utc, pending_observation_id) VALUES (?, ?, ?, ?, ?, ?, ?) ON CONFLICT(account_key, five_hour_window_key, source) DO UPDATE SET baseline_pct = excluded.baseline_pct, pending_low_pct = excluded.pending_low_pct, pending_at_utc = excluded.pending_at_utc, pending_observation_id = excluded.pending_observation_id',
+        table='five_hour_credit_confirmation_state',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:detect_reset_and_credit',
+        sql_fingerprint='DELETE FROM weekly_usage_snapshots WHERE five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?) AND ABS(five_hour_percent - ?) < 1.0',
+        table='weekly_usage_snapshots',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?) AND ABS(five_hour_percent - ?) < 1.0',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:detect_reset_and_credit',
+        sql_fingerprint='INSERT OR IGNORE INTO five_hour_reset_events (detected_at_utc, five_hour_window_key, prior_percent, post_percent, effective_reset_at_utc, account_key) VALUES (?, ?, ?, ?, ?, ?)',
+        table='five_hour_reset_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:detect_reset_and_credit',
+        sql_fingerprint='INSERT OR IGNORE INTO week_reset_events (detected_at_utc, old_week_end_at, new_week_end_at, effective_reset_at_utc, account_key, origin_observation_id) VALUES (?, ?, ?, ?, ?, ?)',
+        table='week_reset_events',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:detect_reset_and_credit',
+        sql_fingerprint='SELECT five_hour_window_key, five_hour_percent, five_hour_resets_at FROM weekly_usage_snapshots WHERE five_hour_window_key IS NOT NULL AND five_hour_percent IS NOT NULL AND account_key = ? ORDER BY captured_at_utc DESC, id DESC LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=('account_key',),
+        predicate='five_hour_window_key IS NOT NULL AND five_hour_percent IS NOT NULL AND account_key = ?',
+        ordering='captured_at_utc DESC, id DESC',
+        selected=('five_hour_window_key', 'five_hour_percent', 'five_hour_resets_at'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=PRED_FIVE,
+    ),
+    AccessContract(
+        function='_cctally_record:detect_reset_and_credit',
+        sql_fingerprint='UPDATE weekly_usage_snapshots SET five_hour_percent = NULL, five_hour_resets_at = NULL, five_hour_window_key = NULL WHERE five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?) AND ABS(five_hour_percent - ?) < 1.0',
+        table='weekly_usage_snapshots',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?) AND ABS(five_hour_percent - ?) < 1.0',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:detect_reset_and_credit',
+        sql_fingerprint='UPDATE weekly_usage_snapshots SET five_hour_percent = NULL, five_hour_resets_at = NULL, five_hour_window_key = NULL WHERE five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?) AND ABS(five_hour_percent - ?) < 1.0 AND weekly_observation_held = 0',
+        table='weekly_usage_snapshots',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?) AND ABS(five_hour_percent - ?) < 1.0 AND weekly_observation_held = 0',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:detect_reset_and_credit',
+        sql_fingerprint='SELECT journal_id FROM weekly_usage_snapshots WHERE five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?) AND ABS(five_hour_percent - ?) < 1.0',
+        table='weekly_usage_snapshots',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ? AND unixepoch(captured_at_utc) >= unixepoch(?) AND ABS(five_hour_percent - ?) < 1.0',
+        ordering='',
+        selected=('journal_id',),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:detect_reset_and_credit',
+        sql_fingerprint='SELECT prior_percent, post_percent FROM five_hour_reset_events WHERE five_hour_window_key = ? AND account_key = ? ORDER BY id DESC LIMIT 1',
+        table='five_hour_reset_events',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ?',
+        ordering='id DESC',
+        selected=('prior_percent', 'post_percent'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_record:detect_reset_and_credit',
+        sql_fingerprint='SELECT week_end_at, weekly_percent FROM weekly_usage_snapshots WHERE week_end_at IS NOT NULL AND account_key = ? AND weekly_observation_held = 0 ORDER BY captured_at_utc DESC, id DESC LIMIT 1',
+        table='weekly_usage_snapshots',
+        keys=('account_key',),
+        predicate='week_end_at IS NOT NULL AND account_key = ? AND weekly_observation_held = 0',
+        ordering='captured_at_utc DESC, id DESC',
+        selected=('week_end_at', 'weekly_percent'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=PRED_WEEKLY,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_record_milestone',
+        sql_fingerprint='SELECT MIN(weekly_percent) FROM weekly_usage_snapshots WHERE week_start_date = ? AND account_key = ? AND weekly_observation_held = 0 AND unixepoch(captured_at_utc) >= unixepoch(?) AND unixepoch(captured_at_utc) <= unixepoch(?)',
+        table='weekly_usage_snapshots',
+        keys=('week_start_date', 'account_key'),
+        predicate='week_start_date = ? AND account_key = ? AND weekly_observation_held = 0 AND unixepoch(captured_at_utc) >= unixepoch(?) AND unixepoch(captured_at_utc) <= unixepoch(?)',
+        ordering='',
+        selected=('MIN(weekly_percent)',),
+        effects='read',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_record_milestone',
+        sql_fingerprint='SELECT cumulative_cost_usd, week_start_at FROM percent_milestones WHERE week_start_date = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ?',
+        table='percent_milestones',
+        keys=('week_start_date', 'percent_threshold', 'reset_event_id', 'account_key'),
+        predicate='week_start_date = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ?',
+        ordering='',
+        selected=('cumulative_cost_usd', 'week_start_at'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_record_milestone',
+        sql_fingerprint='UPDATE percent_milestones SET alerted_at = ? WHERE week_start_date = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ? AND alerted_at IS NULL',
+        table='percent_milestones',
+        keys=('week_start_date', 'percent_threshold', 'reset_event_id', 'account_key'),
+        predicate='week_start_date = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ? AND alerted_at IS NULL',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_record_project_budget_milestone',
+        sql_fingerprint='SELECT project_key, threshold FROM project_budget_milestones WHERE week_start_at = ?',
+        table='project_budget_milestones',
+        keys=('week_start_at',),
+        predicate='week_start_at = ?',
+        ordering='',
+        selected=('project_key', 'threshold'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_record_project_budget_milestone',
+        sql_fingerprint='UPDATE project_budget_milestones SET alerted_at = ? WHERE week_start_at = ? AND project_key = ? AND threshold = ? AND alerted_at IS NULL',
+        table='project_budget_milestones',
+        keys=('week_start_at', 'project_key', 'threshold'),
+        predicate='week_start_at = ? AND project_key = ? AND threshold = ? AND alerted_at IS NULL',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_record_projected_alert',
+        sql_fingerprint='UPDATE projected_milestones SET alerted_at = ? WHERE week_start_at = ? AND period = ? AND metric = ? AND threshold = ? AND alerted_at IS NULL',
+        table='projected_milestones',
+        keys=('week_start_at', 'period', 'metric', 'threshold'),
+        predicate='week_start_at = ? AND period = ? AND metric = ? AND threshold = ? AND alerted_at IS NULL',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('period-keyed',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='DELETE FROM five_hour_block_models WHERE five_hour_window_key = ? AND account_key = ?',
+        table='five_hour_block_models',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ?',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('period-keyed',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='DELETE FROM five_hour_block_projects WHERE five_hour_window_key = ? AND account_key = ?',
+        table='five_hour_block_projects',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ?',
+        ordering='',
+        selected=(),
+        effects='delete',
+        classes=('period-keyed',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='INSERT INTO five_hour_block_models ( block_id, five_hour_window_key, model, input_tokens, output_tokens, cache_create_tokens, cache_read_tokens, cost_usd, entry_count, account_key ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
+        table='five_hour_block_models',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='INSERT INTO five_hour_block_projects ( block_id, five_hour_window_key, project_path, input_tokens, output_tokens, cache_create_tokens, cache_read_tokens, cost_usd, entry_count, account_key ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
+        table='five_hour_block_projects',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='INSERT INTO five_hour_blocks ( five_hour_window_key, five_hour_resets_at, block_start_at, first_observed_at_utc, last_observed_at_utc, final_five_hour_percent, seven_day_pct_at_block_start, seven_day_pct_at_block_end, crossed_seven_day_reset, total_input_tokens, total_output_tokens, total_cache_create_tokens, total_cache_read_tokens, total_cost_usd, pricing_provenance_json, is_closed, created_at_utc, last_updated_at_utc, account_key ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?, 0, ?, ?, ?) ON CONFLICT(account_key, five_hour_window_key) DO UPDATE SET last_observed_at_utc = excluded.last_observed_at_utc, final_five_hour_percent = excluded.final_five_hour_percent, seven_day_pct_at_block_end = excluded.seven_day_pct_at_block_end, total_input_tokens = excluded.total_input_tokens, total_output_tokens = excluded.total_output_tokens, total_cache_create_tokens = excluded.total_cache_create_tokens, total_cache_read_tokens = excluded.total_cache_read_tokens, total_cost_usd = excluded.total_cost_usd, pricing_provenance_json = excluded.pricing_provenance_json, last_updated_at_utc = excluded.last_updated_at_utc WHERE five_hour_blocks.is_closed = 0 OR five_hour_blocks.journal_id IS NULL',
+        table='five_hour_blocks',
+        keys=(),
+        predicate='five_hour_blocks.is_closed = 0 OR five_hour_blocks.journal_id IS NULL',
+        ordering='',
+        selected=(),
+        effects='upsert',
+        classes=('singleton',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='INSERT OR IGNORE INTO five_hour_milestones ( block_id, five_hour_window_key, percent_threshold, captured_at_utc, usage_snapshot_id, block_input_tokens, block_output_tokens, block_cache_create_tokens, block_cache_read_tokens, block_cost_usd, marginal_cost_usd, seven_day_pct_at_crossing, reset_event_id, account_key ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
+        table='five_hour_milestones',
+        keys=(),
+        predicate='',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='SELECT COUNT(*) FROM five_hour_blocks WHERE account_key = ?',
+        table='five_hour_blocks',
+        keys=('account_key',),
+        predicate='account_key = ?',
+        ordering='',
+        selected=('COUNT(*)',),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='SELECT MAX(percent_threshold) AS m FROM five_hour_milestones WHERE five_hour_window_key = ? AND reset_event_id = ? AND account_key = ?',
+        table='five_hour_milestones',
+        keys=('five_hour_window_key', 'reset_event_id', 'account_key'),
+        predicate='five_hour_window_key = ? AND reset_event_id = ? AND account_key = ?',
+        ordering='',
+        selected=('MAX(percent_threshold) AS m',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='SELECT block_cost_usd FROM five_hour_milestones WHERE five_hour_window_key = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ?',
+        table='five_hour_milestones',
+        keys=('five_hour_window_key', 'percent_threshold', 'reset_event_id', 'account_key'),
+        predicate='five_hour_window_key = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ?',
+        ordering='',
+        selected=('block_cost_usd',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='SELECT block_start_at FROM five_hour_blocks WHERE five_hour_window_key = ? AND account_key = ?',
+        table='five_hour_blocks',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ?',
+        ordering='',
+        selected=('block_start_at',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='SELECT id AS prior_block_id, block_start_at AS block_start_at, five_hour_resets_at AS prior_resets_at, is_closed AS is_closed, journal_id AS journal_id, last_updated_at_utc AS last_updated_at_utc FROM five_hour_blocks WHERE five_hour_window_key = ? AND account_key = ?',
+        table='five_hour_blocks',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ?',
+        ordering='',
+        selected=('id AS prior_block_id', 'block_start_at AS block_start_at', 'five_hour_resets_at AS prior_resets_at', 'is_closed AS is_closed', 'journal_id AS journal_id', 'last_updated_at_utc AS last_updated_at_utc'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='SELECT id FROM five_hour_blocks WHERE five_hour_window_key = ? AND account_key = ?',
+        table='five_hour_blocks',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ?',
+        ordering='',
+        selected=('id',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='SELECT id FROM five_hour_blocks WHERE id = ? AND is_closed = 1 AND journal_id IS NULL',
+        table='five_hour_blocks',
+        keys=('id',),
+        predicate='id = ? AND is_closed = 1 AND journal_id IS NULL',
+        ordering='',
+        selected=('id',),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='SELECT id FROM five_hour_blocks WHERE is_closed = 0 AND account_key = ? AND (five_hour_window_key < ? OR unixepoch(five_hour_resets_at) < unixepoch(?))',
+        table='five_hour_blocks',
+        keys=('account_key',),
+        predicate='is_closed = 0 AND account_key = ? AND (five_hour_window_key < ? OR unixepoch(five_hour_resets_at) < unixepoch(?))',
+        ordering='',
+        selected=('id',),
+        effects='read',
+        classes=('range-keyed', 'cross-period'),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='SELECT id FROM five_hour_blocks WHERE is_closed = 1 AND journal_id IS NOT NULL AND account_key = ? AND last_updated_at_utc = ? AND (five_hour_window_key < ? OR unixepoch(five_hour_resets_at) < unixepoch(?))',
+        table='five_hour_blocks',
+        keys=('account_key', 'last_updated_at_utc'),
+        predicate='is_closed = 1 AND journal_id IS NOT NULL AND account_key = ? AND last_updated_at_utc = ? AND (five_hour_window_key < ? OR unixepoch(five_hour_resets_at) < unixepoch(?))',
+        ordering='',
+        selected=('id',),
+        effects='read',
+        classes=('range-keyed', 'cross-period'),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:_flag_blocks_spanning_week_resets',
+        sql_fingerprint='UPDATE five_hour_blocks SET crossed_seven_day_reset = 1 WHERE crossed_seven_day_reset = 0 AND account_key = ? AND (is_closed = 0 OR journal_id IS NULL) AND ( EXISTS ( SELECT 1 FROM week_reset_events e WHERE e.account_key = five_hour_blocks.account_key AND unixepoch(e.effective_reset_at_utc) BETWEEN unixepoch(five_hour_blocks.block_start_at) AND unixepoch(five_hour_blocks.last_observed_at_utc) ) OR EXISTS ( SELECT 1 FROM weekly_usage_snapshots ws WHERE ws.week_start_at IS NOT NULL AND ws.account_key = five_hour_blocks.account_key AND unixepoch(ws.week_start_at) > unixepoch(five_hour_blocks.block_start_at) AND unixepoch(ws.week_start_at) <= unixepoch(five_hour_blocks.last_observed_at_utc) ) )',
+        table='five_hour_blocks',
+        keys=('account_key',),
+        predicate='crossed_seven_day_reset = 0 AND account_key = ? AND (is_closed = 0 OR journal_id IS NULL) AND ( EXISTS ( SELECT 1 FROM week_reset_events e WHERE e.account_key = five_hour_blocks.account_key AND unixepoch(e.effective_reset_at_utc) BETWEEN unixepoch(five_hour_blocks.block_start_at) AND unixepoch(five_hour_blocks.last_observed_at_utc) ) OR EXISTS ( SELECT 1 FROM weekly_usage_snapshots ws WHERE ws.week_start_at IS NOT NULL AND ws.account_key = five_hour_blocks.account_key AND unixepoch(ws.week_start_at) > unixepoch(five_hour_blocks.block_start_at) AND unixepoch(ws.week_start_at) <= unixepoch(five_hour_blocks.last_observed_at_utc) ) )',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton', 'range-keyed'),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='UPDATE five_hour_blocks SET is_closed = 1, last_updated_at_utc = ? WHERE five_hour_window_key = ? AND account_key = ? AND is_closed = 0 AND unixepoch(five_hour_resets_at) < unixepoch(?)',
+        table='five_hour_blocks',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ? AND is_closed = 0 AND unixepoch(five_hour_resets_at) < unixepoch(?)',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('period-keyed', 'range-keyed'),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='UPDATE five_hour_blocks SET is_closed = 1, last_updated_at_utc = ? WHERE is_closed = 0 AND account_key = ? AND five_hour_window_key < ?',
+        table='five_hour_blocks',
+        keys=('account_key',),
+        predicate='is_closed = 0 AND account_key = ? AND five_hour_window_key < ?',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton', 'range-keyed'),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='UPDATE five_hour_blocks SET is_closed = 1, last_updated_at_utc = ? WHERE is_closed = 0 AND account_key = ? AND unixepoch(five_hour_resets_at) < unixepoch(?)',
+        table='five_hour_blocks',
+        keys=('account_key',),
+        predicate='is_closed = 0 AND account_key = ? AND unixepoch(five_hour_resets_at) < unixepoch(?)',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('singleton', 'range-keyed'),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:maybe_update_five_hour_block',
+        sql_fingerprint='UPDATE five_hour_milestones SET alerted_at = ? WHERE five_hour_window_key = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ? AND alerted_at IS NULL',
+        table='five_hour_milestones',
+        keys=('five_hour_window_key', 'percent_threshold', 'reset_event_id', 'account_key'),
+        predicate='five_hour_window_key = ? AND percent_threshold = ? AND reset_event_id = ? AND account_key = ? AND alerted_at IS NULL',
+        ordering='',
+        selected=(),
+        effects='write',
+        classes=('period-keyed',),
+        inert_rule=BLOCKS,
+    ),
+    AccessContract(
+        function='_cctally_record:resolve_five_hour_reset_event',
+        sql_fingerprint='SELECT detected_at_utc, effective_reset_at_utc, id FROM five_hour_reset_events WHERE five_hour_window_key = ? AND account_key = ?',
+        table='five_hour_reset_events',
+        keys=('five_hour_window_key', 'account_key'),
+        predicate='five_hour_window_key = ? AND account_key = ?',
+        ordering='',
+        selected=('detected_at_utc', 'effective_reset_at_utc', 'id'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_statusline:_tokens_from',
+        sql_fingerprint='SELECT record_path, started_at_utc, stamped_at_utc FROM stats_publication_stamp ORDER BY rowid',
+        table='stats_publication_stamp',
+        keys=(),
+        predicate='',
+        ordering='rowid',
+        selected=('record_path', 'started_at_utc', 'stamped_at_utc'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=WAIT,
+    ),
+    AccessContract(
+        function='_cctally_statusline:_tokens_from',
+        sql_fingerprint='SELECT segment, offset, applied_segment, applied_offset FROM journal_cursor WHERE id = 1',
+        table='journal_cursor',
+        keys=(),
+        predicate='id = 1',
+        ordering='',
+        selected=('segment', 'offset', 'applied_segment', 'applied_offset'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=WAIT,
+    ),
+    AccessContract(
+        function='_cctally_statusline:_tokens_from',
+        sql_fingerprint='dynamic:_cctally_statusline:_tokens_from#1',
+        sql_shape='sha256:ba847e069d2ffffc',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=WAIT,
+    ),
+    AccessContract(
+        function='_cctally_store:apply_connection_policy',
+        sql_fingerprint='dynamic:_cctally_store:apply_connection_policy#1',
+        sql_shape='sha256:1c25e1344c04db44',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_store:apply_connection_policy',
+        sql_fingerprint='dynamic:_cctally_store:apply_connection_policy#2',
+        sql_shape='sha256:32c028acaaf363ab',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_store:apply_connection_policy',
+        sql_fingerprint='dynamic:_cctally_store:apply_connection_policy#3',
+        sql_shape='sha256:2f23eec2c9c63bb2',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_store:apply_policy',
+        sql_fingerprint='dynamic:_cctally_store:apply_policy#1',
+        sql_shape='sha256:f14edcbecbaa2e1d',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_store:apply_policy',
+        sql_fingerprint='dynamic:_cctally_store:apply_policy#2',
+        sql_shape='sha256:492dde2a4628ee0f',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_store:apply_writer_temp_store',
+        sql_fingerprint='dynamic:_cctally_store:apply_writer_temp_store#1',
+        sql_shape='sha256:37cd251c8e8e9040',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=MAINT,
+    ),
+    AccessContract(
+        function='_cctally_sync_week:_cmd_sync_week_via_ingest',
+        sql_fingerprint='SELECT id, week_start_date, week_end_date, week_start_at, week_end_at, range_start_iso, range_end_iso, cost_usd, mode FROM weekly_cost_snapshots WHERE journal_id LIKE ? ORDER BY id DESC LIMIT 1',
+        table='weekly_cost_snapshots',
+        keys=(),
+        predicate='journal_id LIKE ?',
+        ordering='id DESC',
+        selected=('id', 'week_start_date', 'week_end_date', 'week_start_at', 'week_end_at', 'range_start_iso', 'range_end_iso', 'cost_usd', 'mode'),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_cctally_weekrefs:_apply_reset_events_to_weekrefs',
+        sql_fingerprint='dynamic:_cctally_weekrefs:_apply_reset_events_to_weekrefs#1',
+        sql_shape='sha256:ef62f4486cc766b0',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        # #825/#832 fix round C (CD2-003): the canonical weekly boundary is
+        # NOT a cost-only read: `_usage_snapshot_columns` stamps the returned
+        # `week_start_at`/`week_end_at` into the accepted usage snapshot a
+        # strict decision reads. The account predicate is spliced in (an
+        # `account_key` is always supplied on this path), so the site is
+        # dynamic; its contract is the real one, held by `sql_shape`.
+        function='_cctally_weekrefs:_get_canonical_boundary_for_date',
+        sql_fingerprint='dynamic:_cctally_weekrefs:_get_canonical_boundary_for_date#1',
+        sql_shape='sha256:8e47b9024179d8d0',
+        table='weekly_usage_snapshots',
+        keys=('week_start_date', 'account_key'),
+        predicate="week_start_date = ? AND week_start_at IS NOT NULL AND week_start_at != '' AND week_end_at IS NOT NULL AND week_end_at != '' AND account_key = ?",
+        ordering='captured_at_utc ASC, id ASC',
+        selected=('week_start_at', 'week_end_at'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+    AccessContract(
+        function='_cctally_weekrefs:_week_ref_has_reset_event',
+        sql_fingerprint='dynamic:_cctally_weekrefs:_week_ref_has_reset_event#1',
+        sql_shape='sha256:5087166fa6bd0e2e',
+        table='dynamic',
+        keys=(),
+        predicate='dynamic SQL',
+        ordering='',
+        selected=(),
+        effects='read',
+        classes=('cross-period',),
+        inert_rule=Q7,
+    ),
+    AccessContract(
+        function='_lib_five_hour:latest_five_hour_reading',
+        sql_fingerprint='dynamic:_lib_five_hour:latest_five_hour_reading#1',
+        sql_shape='sha256:c61db33f7457ea09',
+        table='weekly_usage_snapshots',
+        keys=('week_start_date', 'account_key'),
+        predicate=('latest five-hour reading of ONE week date key and account '
+                   '(the no-change ingest derivation, #825/#832 spec 4.7 '
+                   'revision 7)'),
+        ordering='captured_at_utc DESC, id DESC',
+        selected=('id', 'account_key', 'captured_at_utc', 'five_hour_percent',
+                  'five_hour_resets_at', 'five_hour_window_key',
+                  'weekly_observation_held'),
+        effects='read',
+        classes=('period-keyed',),
+        inert_rule=None,
+    ),
+)
+
+
+def non_inert_cross_period(registry=None) -> "tuple[AccessContract, ...]":
+    """Every registered cross-period READ without an inert rule."""
+    entries = REGISTRY if registry is None else registry
+    return tuple(c for c in entries
+                 if "cross-period" in c.classes and c.effects == "read"
+                 and c.inert_rule is None)