R-302 docs: register rows, the two rules earned twice, STATUS

Closes R-296 (verified: shipped in v0.212.0) and R-301 (premise confirmed, fixed
in v0.213.0). Files R-302 with WHY the obvious condition was rejected, and R-303
for the missing markOrphaned guard - the co-render is now harmless, not
impossible. Bake evidence for golden 0.213.0.

CONTEXT.md

@@ -15,6 +15,23 @@
 > would make one of the two audiences stop reading. `STATUS.md` is also a **view of `OPEN-ITEMS.md`**
 > and holds nothing of its own; this file does hold its own content, namely the standing rulings below.
 
+## Two rules earned twice each (2026-08-12)
+
+**A fact must be recorded at the moment it is a fact, not inferred later from something adjacent.**
+R-300 recorded dnsmasq ownership at preflight because the package is installed later, by a different
+component, and "did we install it?" is unanswerable afterwards. R-302 pins the hub's escrow fingerprint
+at the customer's decision because the key that wrote the set-aside copies is gone by definition, and
+every later comparison answers a *different* question. In both cases the tempting alternative — infer
+it from a package mtime, or compare against the current key — is a heuristic wearing a fact's clothes.
+
+**A guard written against a sentence is not a guard against a claim, and in an inflected language the
+stem is not the claim either.** The same promise has now surfaced FIVE times, one at a time: a guard
+matching the singular missed the plural (R-299); broadening to that verb's stem missed a different verb
+saying the same thing (R-302). And the stem cannot simply be banned — the honest replacement copy
+*contains* it, inside a question about whether the thing is knowable. `retrieval_promise_gate.py`
+therefore REGISTERS each claim with a reason and fails on unregistered ones: it pins where the claim is
+made, without forcing the product to avoid a normal Hungarian verb.
+
 ## A record that lives inside a row about something else has not been recorded
 
 **Earned 2026-08-10, at a measured cost of two sessions.** Thirty-three package deletions — an