Named-at-open is the mechanism (shipped); supply is the question. Plan recommendation: auths-operated arbiter for the RULE TRACK only (zero judgment, publicly re-derivable — shipped as the escrow server's signed rule-track statements), and a third-party arbiter required for the subjective track from day one — we should never be the trusted human judge.
Shipped invariant to preserve (S2, tested): in reserved mode the arbiter moves nothing — an arbiter-signed Release event is structurally rejected; only the buyer's signature settles.
Named-at-open is the mechanism (shipped); supply is the question. Plan recommendation: auths-operated arbiter for the RULE TRACK only (zero judgment, publicly re-derivable — shipped as the escrow server's signed rule-track statements), and a third-party arbiter required for the subjective track from day one — we should never be the trusted human judge.
Shipped invariant to preserve (S2, tested): in reserved mode the arbiter moves nothing — an arbiter-signed Release event is structurally rejected; only the buyer's signature settles.