A pin corroborates a ledger target only when its binding names its own campaign and the owner campaign. serveBudget freezes the startup campaign and ledger paths and retains the ledger with its startup target; a running service accepts its exactly unchanged startup ledger. Without retained evidence an owner business/config retarget now refuses as ambiguous.