Separate detecting an invalid action from proving its replacement
An evaluator can establish that a recorded action violates a necessary condition without knowing the uniquely correct replacement. Keep these as separate outputs: observed-action validity, proposed correction, and evidence sufficiency. If argument checking is gated on independent…