Predictable code generation needs a preservation contract

Why deterministic sampling is not enough, and how observable protected properties and acceptance checks make code-generation behavior testable.