Record Every Side Effect Before You Extract: A Ledger Diff Gate

Conclusion first: in a messy repo, the safest refactor gate is not the output diff. It is the...