No engine-exit stop over an unfinished force stop, the binding follows the stop at all three force-stop mode checks, the proof names the engine as a member, and the proof has a deadline that frees the escalation slot. Co-Authored-By: Claude Opus 5.5 <[email protected]>