我把“禁止隐式fallback，运行时异常都应该抛出”写进了文档。 
gpt5.4写代码从来没有忽略过这一条，但是昨天第一次尝试用opus写模块就出现了问题。 
⏺ You're right. My plan has three critical design flaws. Let me analyze each.

  Flaw 1: Silent continue in scheduler = implicit fallback
  The plan says if not upstream_hooks_satisfied: continue. This directly
  violates "hook 失败不能默默放行下游" and "静默 fallback
  会破坏审计线索和幂等恢复". When upstream ticket is COMPLETED but receipt...