DC-LEDGER-PHASE2-01

The PRIMARY proof is a differential against the REAL preprod block 130,350,133 (fixture crates/ade_ledger/tests/fixtures/block_130350133.cbor, 15,252 bytes, hash 46905dcf...), whose single tx is phase-2 invalid with 2 zero-valued withdrawals, 1 collateral input and NO collateral return: spent == {0326ab20...#1}, produced == empty, and the ordinary inputs b9fede11...#1/#3 are asserted BY NAME to survive because 'these got spent' is the exact failure being pinned. The collateral-return case is constructed (the real block declares none) with TWO ordinary outputs specifically so a positional enumerate() would place the return at 0 while the rule places it at 2. NEGATIVE-TESTED: treating an invalid tx as valid fails both differential tests; indexing the collateral return positionally fails the constructed test AND the gate's structural check. The gate additionally forbids a consumer implementing the rule itself (regex for if invalid / collateral_inputs / collateral_return inside track_utxo and process_one_tx), forbids reading total_collateral in the derivation, requires STORE_SEMANTICS_VERSION >= 4, and asserts >=4 passing tests so it cannot pass vacuously. SCOPE: this rule fixes the SILENT authority. It does NOT unpin the epoch accumulator, which continues to fail closed on the same block (InvalidTxCarriesAuthorityEffect) -- deliberately, so the halting surface stays honest while the silent one becomes correct. The accumulator's collAdaBalance scalar is BND-2b and the guard retirement is BND-2c. ID CORRECTION (BND-2d): this rule was first recorded as DC-LEDGER-01, an id already held by a long-standing rule, which broke registry uniqueness (ci_check_registry_unique_ids.sh was red from that commit until BND-2d). The older holder keeps the id; this entry -- three commits old and referenced only by its own slice doc -- takes the fresh DC-LEDGER-PHASE2-01.