Why the stop is enforced by the executor
The executor is the only component that acts. A ceiling enforced anywhere else is a request, and requests are not obeyed by bugs.
The honest end state of this subject
A system that refuses more than it trades. That is the state where a claim is a number, and it is the state most systems never reach.