A controlled-invalidation suite spanning browser, tool/API, and multi-agent workflows is built, which preserves the user goal and payload shape while invalidating the authority relation before durability, and is a reporting and runtime-design lesson: endpoint success is a utility metric; authorized commit is a security property.
Such failures are called Representation-Confusion Attacks in Reverse Engineering (RARE): the pipeline promotes a correctly extracted observation to instruction authority, claim-validating evidence, or trusted analysis state without the authority or support that role requires.
Across the evaluated sinks, CXI admits execution only when field, effect, and invocation authority bind to the same action manifest, and across the evaluated sinks, CXI admits execution only when field, effect, and invocation authority bind to the same action manifest.