A machine is permitted to confirm only what is literally true; anything that needs judgment belongs to the model. So a guess is never dressed up as a verified fact — the two layers can’t do each other’s jobs.
Closed facts — exists, location, order, membership, hash — are the only things code may assert. They are true or false, with no opinion.
Meaning is the model’s domain — intent, correctness, implication, doubt. The architecture will not let one layer cross into the other.
The full split of fact versus judgmentInvariant Code may assert only closed facts. Judgment of meaning belongs to the model alone — and never the reverse.
Go deeper — the Layer Law
What may be checked mechanically versus what must be judged, and why crossing the line is treated as the bug.