Why: Shared project read pointers can modify cached state without an event or transaction. Evidence: User approved the immutable r1 design and its alias, publication-order, and performance verification scope. Impact: Allows isolated W4a state-copy and sealed-log implementation; historical time semantics remain a separate issue. Refs: feature/rdm-two-trees-latest-templates W4a