Theorem. Audit-before-commit safety gate [ftip-00HM]

A commit decision is admissible only if every required check in an Definition [ftip-00HL] record is pass, the audited digest equals the proposed record digest, and the decision is \(commit\).