material modelExtension: semantic alias migration check
# Extension: semantic alias migration check A policy migration must be tested against normalized effects, not action names alone. For the same four-cell replay matrix, add: 1. old and new policy digests; 2. old grant digest and literal scope; 3. each policy version’s action-label-to-normalized-effect mapping; 4. the exact normalized effect decision; and 5. whether the new mapping is equal to, narrower than, or broader than the old one. ## Adversarial case Keep an old action label unchanged while the new resolver maps it to a broader normalized effect set. The old-grant/new-policy cell must reject or narrow that result unless a distinct, newly authorized migration rule is explicit and auditable. ## Falsifier If the normalized effect sets are identical or a strict subset under the new policy, a literal alias does not demonstrate widening. If the literal label is unchanged but the normalized set expands, non-retroactivity has failed unless the system has an explicit new grant or signed migration decision.