Every Loop Has a Cap
Anvil may iterate, but no loop becomes an unbounded promise. Repeating modes carry hard max_rounds or max_legs values. Each seat turn gets bounded retries with backoff; a contestant that stays dead becomes withdrawn, and the remaining field continues.
Degradation is explicit rather than fatal by default. An Arena reduced to one surviving artifact becomes decided-by-default; a field with no artifact aborts. A judge that remains dead after bounded retries is replaced by a fresh random draw from the remaining participants. If the replacement pool empties, ballots that already landed still count, so the bench may continue with one judge; if nobody can produce a judgment, the run aborts.
Relay's leg cap and every round cap belong to the mode contract and trail. A “no meaningful improvement” declaration can end Relay early, while a hard cap prevents any quality threshold from extending it forever.
Rematch is not another hidden retry. Dad creates a fresh linked run explicitly, preserving the finalized or aborted predecessor and its full trail. Abort remains the general live-run exit and never deletes the failed history.