Inference never overwrites a human value. A classifier that disagrees with a steward raises a suggestion, not a change.
When two sources disagree at the same rank, both values are retained as evidence and a stewardship task is raised. Silent last-writer-wins is how a catalog quietly becomes wrong.
Ingestion modes
Scheduled full harvest weekly, incremental hourly, event-driven within 5 minutes for sources that can push.
Batch and incremental share one code path; the watermark is the only difference, so incremental cannot drift from full.
Failure handling
A payload that fails aspect-schema validation is quarantined with the raw evidence retained, never silently dropped.
Dead-letter volume is an alert, not a dashboard: it means a source changed shape (view 18).
