Starting from the concession
Inspectability and defensibility pull in opposite directions, and inspectability won.
A system that insists every formula be traceable by the person it governs has already given up on the formulas as a defensible asset. That trade was made deliberately and the reasoning is set out elsewhere: an operator honours a constraint they can trace and quietly overrides one they cannot. The consequence is that a competent builder could reconstruct the calculation layer from the published descriptions in a fairly short time. What they would then possess is an empty instrument, and the gap between an empty instrument and a useful one is where the actual durability sits. That gap is measured in periods rather than in engineering effort, which is why it cannot be closed by building faster.
Each turn of the loop adds a period of evidence under unchanged definitions, which recalibrates the standards, which makes the next period's verdicts sharper. The asset is the number of turns, and turns cannot be bought.

