Immune-system release: two immune-trigger changes — the cross-session demotion semantics and the contradiction-scan discipline's delivery — each held to its own dedicated apparatus pass. No breaking changes; additive + behavior-narrowing only. 1007 tests, mypy clean. Full 4-layer apparatus on the combined diff (L1 + L2 → fixes → codex L3 clean → L4 end-to-end through the real save pipeline). AM-XSESSION-LINKGATE — the cross-session anti-sycophancy gate now follows the Hebbian link onto the demoted-grounding path 0.4.1 (AM-QUOTEFOOTGUN) decoupled co-citation link formation from explanation grounding, so links now form on the demoted-grounding path (a graduation whose explanation doesn't reference the cited episode's content). But the cross-session overlap check — the anti-sycophancy defense that refuses to strengthen the graph from a re-graduation reusing a prior session's vocabulary — was still gated on explanation_valid and never ran there, so a sycophantic re-graduation carrying a fresh-but-ungrounded explanation formed an unsuppressed co-citation link. validate_graduations now computes the cross-session overlap whenever a cited id resolves (ids_valid) and the pattern has prior history — independent of grounding — aligning the check with the link-formation precondition for operator-named patterns. A both-ungrounded-AND-overlapping line now marks (cross-session-overlap) (the more specific signal), records a CrossSessionCollision, and has its link suppressed. Narrowing only — the validated path, the legitimately-paraphrased demoted path (keeps its link), AM-WARN's signal, and pattern-history persistence are unchanged. AM-CONTRASCAN-EMIT — prepare_wrap emits the contradiction-scan instruction, not just its data The methodology-layer contradiction-scan discipline (before graduating a new Proven, declare a [contradicts: ...] or [no-contradicts] stance against the existing Proven) used to live only in an external protocol doc. prepare_wrap surfaced the data (uncovered_proven_to_check) but never the instruction that consumes it — so retiring the doc silently dropped the discipline while the data kept shipping (an invisible_infrastructure_failure). _build_wrap_package now computes the existing-Proven list once and threads it into the agent-facing instructions, emitting a "Contradiction Scan" block with the Proven names + the exact marker contract (verified against the save-side detectors). The list feeds both the instruction and uncovered_proven_to_check from one computation, so they cannot drift. The discipline travels with the package — structural_invariants_beat_discipline. Audit-only semantics preserved. Full mechanism detail in CHANGELOG.md.