The host inputs reconcile needs: host policy bounds, negotiation support, trusted public keys, the protected-clamp posture, and the bind-time observations (host clock, max attestation age, observed descriptor digests — the binding-surface delta kept for parity). Observed BUILD IDENTITIES are deliberately NOT an input: the pinned eight-stage order has no compatibility stage, so carrying the field would manufacture false assurance — hosts call verify_compatibility/2 for that surface (a recorded contract delta: its descriptive Inputs list names observed identities). Reconcile inputs are caller-supplied facts that carry no authority.