Core point: The JSON ruleset is a normative specification, not deterministic executable code.
Consequence: In chat-only usage, behavior remains probabilistic and dependent on model/system/context.
Main factors: model architecture, effective context window, prompt length, provider routing, and runtime load.
Practice: Anchor, Audit, QC deltas, and context-pressure guard reduce drift, but do not replace external enforcement.