Arity verification

37 provisional argument counts across the six subsystem crates, currently unverified. Wrong arity degrades trace fidelity rather than breaking a call, so this is not urgent - but phase 4 is what makes wrong ones visible, and it is worth a pass then.