nx_ecomat_domledger_gate.nx

nx_ecomat_domledger_gate.nx -- proves the per-domain walk RECONCILES with the aggregate rollup. The per-domain ledger only earns trust if it adds up to the number the rollup already publishes. T3/T4/T5 walk the same store by two separate code paths and demand the domain count, sum_cur and sum_bar agree TO THE LEVEL. This is a reconciliation, not an independent measurement -- both paths share the record codec and em_domain_level -- but it is exactly the drift that would otherwise ship silently, because a per-domain file that quietly disagrees with the headline is worse than no per-domain file at all: it makes every future attribution wrong with a receipt. license_tier: ORIGINAL No hw writes (Rule 26).