Each module takes one question to its current evidence boundary and stops there, visibly: what is observed, which worlds remain feasible, what is identified, what would falsify it, and what is not claimed. Status and bindings come from the same registry the ledger renders. A planned module says so on its face — an honest empty slot outranks a confident guess.