Constable is deployed as a component of the deploying institution's Governed System. Its ratifying principals are that institution's officers, bound by ZTG-0d on Zero Trust Governance identity structure with key custody held outside the system. Policy adoption is an authorized action: a governance bundle is signed by a principal and emitted through the same gate as any other governed effect, so that the adoption of policy is itself a governed act with a record, not a configuration change.
Constable refuses to operate on a bundle with no adoption lineage. This is the enforcement point for precondition 2: the failure is not detected at audit but at load, and the response is refusal rather than a warning. A deployment that cannot produce a signed adoption for its active policy does not run.