Architectural limits we know about
What’s broken inside the implementation: where the spec can be wrong without anyone noticing, why the verifier sometimes flags legitimate citations as fabricated, what gets overwritten when the gap-resolver applies a fix, and which limits are operational versus structural. Catalogued from a session of reading the actual code against the architectural doc.