ConservationViolation

The global supply backstop: total service charged has exceeded total supply ever minted — Σ_e effLeafSpent(e) > Σ mintedTotal (design §10.1 conservation, §10.12).

Every other check here is per-edge or per-(group, replica). This one is the whole ledger's books in a single line, and it exists precisely so a regression in the derivation of EntitlementLedger.holdings cannot hide: the H1b divergent-child re-spend (a forked child edge dropping out of the parent's delegated-out subtraction, inflating spendable authority) manufactures authority that the per-lineage checks would then read as legitimate — but the units it charges were never minted, and that shows up here regardless.

Which states this is valid on

Exact on a converged (causally-complete) state. There, conservation is an identity — mintedTotal = Σ holdings + Σ leafSpent — so this fires only when Σ holdings has gone negative for a real reason, or when the identity itself has been broken by a bug.

Under partial delivery it inherits the accepted transient the other checks have. Charged service travels with the witness the mutator attached (see EntitlementLedger), and that witness carries the actor's own minted supply — so a directly-funded charge always arrives alongside the supply justifying it. What can transiently trip it is a state observing a charge whose root mint has not been delivered, which is reachable when the charge was funded by a transfer at a non-root path: the witness backs the donor with its issued at that edge, not with the mint behind it.

Where such a state also carries the topology, the conservation identity means the same gap already strands a negative PersistentNegativeHoldings at the delegator — this is a second voice on one fault, not a new one. On a bare delta carrying no records at all it can be the only report, because allGroups() is empty there and no per-group check runs. Either way it self-heals on anti-entropy, and — as for every report here — consumers must not gate on validate().isEmpty() while rebalancing is in flight.