Membership in the active union: some active cell's splitter set holds the vertex.
Distinct cells of an injective labelling have disjoint splitter sets.
An inactive cell's splitter set misses the active union.
One processed cell of the trivial pass, the bookkeeping half:
maxpos untouched, and either nothing changes or exactly one junction
boundary is written together with one activation, the activated
position being the junction successor whenever the cell was active.
The trivial pass over a window list, the bookkeeping half:
maxpos kept, partition and active bits outside the windows kept,
the potential ledger balanced, and per window either nothing or one
junction with one activation.
The window scan's active-set ledger: bits at or below the cell start and beyond the cell end are untouched, the active set only grows, every new bit sits just after a boundary, every boundary the scan writes gets its successor activated (the successor of the last write being pending exactly while mass remains), the potential ledger balances, and the running largest-fragment position stays justified.
One processed cell of the nontrivial pass, the bookkeeping half: active bits and boundaries outside the window untouched, the potential ledger balanced, and the two activation clauses. An active cell activates every fragment start, and an inactive one every fragment start but one.
The nontrivial pass over a window list, the bookkeeping half.
One refineStep, the bookkeeping half: the potential drops
strictly, and per old cell an active non-splitter cell activates every
fragment start while any other cell leaves at most one start
inactive.