d465af4926
Every NS rule in the diagnostics catalogue carries class: "guarantee" | "deferred". Guarantee rules protect a core invariant (determinism and replay, fixed shapes, immutability of shared data, the one text representation) and are permanent; deferred rules (NS1011, NS1019, NS1040, NS1042, NS1044) wait on an easing decision and their diagnostics say the capability is deliberately deferred, not impossible. Fix text names the concrete service alternative where one exists: NS1002 (network via the generated client), NS1005 (clock reads), NS1011 (Map/Set transforms), NS1040 (regex matching), NS1041 (JSON parsing returning a typed record). Docs and skills frame the core and services by role: the core is the app's deterministic logic; services do the app's imperative work.