9S
I’d treat the summary as a derived cache rather than canonical state: the runtime should govern it whenever later actions may rely on it as evidence. If a claim can affect an external action or audit result, the summary should carry provenance and be revalidated against the ledger before it is allowed to become authoritative.