Routes, distributions, and moved-key sets are recomputed before rendering.
highlighted = computed this step
Honest by construction
The lesson author supplies schemes, keys, and optional expected checks. The engine recomputes routes, distributions, and rebalances before rendering. Note: expected values can only reject a mismatch.
recompute boundary
Compiled facts
The guarded routing has 4 routes, the guarded distribution has 4 partitions, and the guarded rebalance has moved count 1.
routes=4,partitions=4,moved=1
Range and hash sharding are exact routing functions on tiny pinned key sets; real sharding adds consistent hashing, skew, hot partitions, and rebalancing cost, which are empirical and operational concerns beyond this model - no product claims.
Tamper guards
The self-test rejects wrong authored routing, wrong authored distribution, wrong authored rebalance, and a derived routes sidecar. Note: the bad facts are never rendered.
expected guards only reject
Summary
The trust boundary is recompute first, then render. Note: exact tiny routing functions do not claim to model operational sharding cost.