Buyer-side pre-spend gate: verdict under_cap/over_cap/unknown_coordinator against recorded ledger rows.