A dozen states in production. Partial-success handling is the majority of the job's code. One failure state in the spec is a dozen in production.

All or nothing per run. All-or-nothing per run: commit the projection only when every candidate has passed the gate; otherwise retry. One transaction, one rule.