Complete-law robustness

Reference stability is a correctness property. It does not grant the decoder an uncounted reference.

Parameter allowances from Proposition prop:parameterstability may be included in $e_Q$, or handled by a separate worst-case parameter range. The same uncertainty should not be charged twice.