6 Invariants
The pure core performs no provider I/O; the only network boundary is the injected embedder parameter.
An unconfigured embedder raises. There is no implicit provider.
Every embedding entering a store is normalized exactly once, at add time.
Chunking and store operations make progress on any input; no input can loop the scanner.