Record the four founder answers that unblock economy-transition-v6

[kaikisegfault]

Closes #167. Follows #166, which recorded the gate result that produced the questions.

The founder-decision gate stopped M3.10a with four reserved decisions. The owner answered all four on 2026-08-15. ADR 0043 records them as given; the constitution states them; its "Explicitly unresolved founder details" list loses the two entries that had been open since the mandatory-verification pivot.

The answers

1. Verification is the entry point, and it reaches the recipient. An unregistered person cannot interact with the ecosystem in any way — no wallet, no transaction — so there is no account for a payment to reach. A transfer naming a recipient that is not a registered holding address is refused rather than creating one, which withdraws ledger-transition-v1's recipient-creating transfer for version six. No account exists that is not an escrow beneath a registered identity, and that becomes a structural invariant rather than a policy.
2. The security asymmetry generalises to every participant. Relaxing a posture — off, a higher minimum, a wider window — requires a biometric approval; tightening requires only a signer signature. Version three's per-seat mint_requires_biometric flag disappears into the per-identity posture and its protection survives as the general rule.
3. A verified user's uncollected incentive is never issued. It stays outstanding; total supply ends below the maximum by exactly what was not collected. The two alternatives are ruled out on cost: ranking up to 1,000,000 identities inside a block is the one place this economy has no bounded winner set, and routing to the unreferred pool would issue value against one channel's cap under another channel's accounting.
4. A signer key belongs to exactly one holding address. The chain resolves the paying escrow from the signer, so the version-one 80-byte header needs no escrow field.

The one thing that must be stated twice

Answers 1 and 4 have to be read together or the compatibility section will be wrong. Answer 4 keeps kind 1's body at 40 octets, so the accepted 136-byte unsigned and 200-byte signed transfer are still reproduced byte-for-byte. Answer 1 gives that unchanged byte sequence a rejection condition it did not have. The byte identity is preserved for a fifth version and the execution identity is not: a version-one transfer to a fresh recipient succeeds under version one and is refused under version six. Both the ADR and the handoff say so in those terms.

Also repaired

Two statements the constitution still carried from before ADR 0036 and ADR 0041: that Founder Seat addresses are the "stated exception" to HUB address management, and that two consequences answered on 2026-08-14 were "not yet decided". Both contradicted the resolved list in the same document.

Verification

Documentation-only. tools/verification_scope.py classifies the change set as lightweight, so the focused metadata path applies.

• python3 tools/verify_metadata.py — 5 repository skills and 185 internal Markdown links validated (up from 176; the new ADR is linked from the constitution, the index, and the handoff).
• python3 -m unittest discover -s tests/tools — 8 tests, OK.

What this unblocks

M3.10a — specify economy-transition-v6 — with no founder question in front of it. The handoff's "Exact next action" now carries the four answers and what each one requires of the contract.