Adjudication memory contamination

Trap: consulting memory for fragment-format guidance looks harmless because it is not opening a repository artifact, but recalled summaries can expose unrelated frozen records and violate one-record isolation. Fix: derive format only from the authorized protocol and schema definitions; if memory, search, or tooling reveals another record, stop immediately, report contamination, and write no fragment.