PASS: 33 zero-output invariants plus replay, deadline, budget, mode, sensor, rollover and config checks.
PASS: lamp program timer policy (44 checks)
PASS: independent IR absence/removal blocks AI and manual light; late ticket rejected; reentry needs fresh vision; timers preserved incl rollover; omitted input dark.
