configured-membership-capacity-review

Availability: opt-in with --detectors configured-membership-capacity-review. Severity: info. Confidence: high for the represented state/constraint contradiction.

The independent observer invokes the constructor then a membership-bearing entry with fresh inputs and exact carried storage. It records assertion prefixes, including prefixes rejected by ordinary execution. Current collection capacity upper bounds and enforced pairwise key inequalities can prove that required memberships are inconsistent immediately after that represented construction.

This does not establish permanent unusability, concrete invocation feasibility, or native cryptographic validity. Later enrollment or other configuration can change storage. No constructor or unknown entry storage supplies an empty-set assumption. The rule never promotes sequence failures to universal impossible-assertion findings.

Only exact immutable receiver/key identities and required Boolean constraints participate. Wildcard address equality, stale saved membership results and unknown collection replacements provide no capacity proof. Missing evidence, unsupported relations/effects or exhausted budgets diagnose. Conservative upper-bound tracking is enabled only for this observation; ordinary collection snapshots and defaults remain unchanged. Unrelated entries receive resolved structural absence coverage; independent baseline gaps remain explicit.

Ordinary registry dispatch stays inert without the optional constructor-boundary facts. Selected scans request the independent observer and retain its missing evidence and budget diagnostics.

A policy that intentionally requires more distinct members than the configured capacity may produce this informational finding by design. Later configuration can change the result; the observation is not a permanent-usability proof or a claim that the constructor can be deployed or invoked successfully.