> **Hard constraints:**
>
> * `ir_core` and `ir_vm` remain **fully decoupled**.
> * The only contact point is lowering (`core_to_vm`).
> * **No placeholders**, no guessed offsets, no runtime inference of language semantics.
> * Every PR must include tests.