Why: card must record the block-placement fix (live run proved the CLI
structure write must sit in the stop_serve window) and the transient TLS
failure between successful transports.
Evidence: r3 receipt (97-byte TLS log, no work started); r4 receipt
(success, transport de88901c..., applied as b1ba22d2); placement checks.
Impact: card bookkeeping only.