A represented FILE's handle, physical pending count and private storage. No logical output queue is stored in this record. Owned heaps exclude static FILE objects and caller setvbuf storage.

Stdout's open flag remains stdout_usable, and its protocol remains shutdown_stdout. Stderr has its own protocol and open flag. These fields supply the physical information absent from stdio_world.

Definitionally the payload * shutdown_state used by Linked.

Parser state is an independent component of the same libc world; optarg and optind may evolve without changing locale or stdout.

The full representation owns coherent libc/TLS state and exclusive private release rights. Structural facts alone do not establish it. In a callback, uniqueness is not evidence that its token was popped. Readiness does not require stdout open: errno lookup, locale and conversion remain valid after fclose. Output admits an open handle separately. Retired stdio roots must be removed, not kept writable.

Native initialization/continuation is an independent premise, not a consequence of the exposed option cells. Errno uses the existing TLS cell, not a second cell. Native representation and call admission must also justify separation from locale/stdout storage: a pure world frame is not a native-memory or cross-pool ownership frame.

A separate native predicate permits unfinished parser state at a logical prefix. Completed public-cell coherence is required only by getopt_pre/post. Ordinary endpoints must satisfy BOTH running and initialized predicates; no implication between them is assumed.

Preserve the one locale/stdout/shutdown inventory and TLS identity. Diagnostic stderr retains its handle/open flag but may change private storage and protocol. This relation deliberately does not relate its FIFO to the trace, even when the trace is empty.

Conservative safety binding over this same world, with no machine application. Native/consumer obligations still include diagnostic trace/protocol correspondence, stream readiness and cross-call parser continuity (including refreshed errno). Other libc contracts do not freeze this entire parser record. Input and registry are fixed for one launch after startup witnesses are chosen, not per permutation.

Borrowed-name facts survive projection through the composite world. No separate ghost copy of the locale names is introduced here.

These two labels identify the independently audited profiles, not strings from which converter behavior can be inferred. The supplied audit maps opaque codec identities to actual selected converters.

The valid-state predicate is an explicit contract parameter keyed by codec and all eight current bytes. Initialization is a separate law, not a deduction from count bits or mere writable storage.

A required law for the chosen state representation, not an axiom. Validity must also admit completed states with residual value bytes.

Valid represented states contain bytes, not arbitrary mathematical integers. This independent representation law closes state reuse; a zero load alone cannot establish it.

Byte-disjoint spans, even if their capabilities share an object.