The composition root's memory-plan derivation, shared by the two entry points that must agree on it: the boot (runProxy) and the dry-run checker (runCheckConfig). check-config's contract is to resolve exactly as a boot would, so this owns the publishConfigured predicate and the settings projection in one place rather than as parallel plumbing across the two files, the memory-plan analogue of the structural guarantee validateComposition already gives the pure half of the composition.