Error handling branches are invisible to valid inputs. Fault injection makes them visible.

Two permission derivations can look completely different and compute the same access. E-graphs find out.

Every branch condition in every connector compiles to a deterministic finite automaton. Here's how that enables static branch prediction.