stale NAV? stop. ambiguous instruction? stop. unclear transaction state? reconcile first. _gamma is designed to fail closed. guessing with capital is expensive.