Close the collapse's two dropped guarantees: latch applyMode against re-entrancy, pin its project once; correct three overclaiming doc lines

src/app/CMakeLists.txt

@@ -62,13 +62,13 @@ target_link_libraries(reaper_reasampler PRIVATE json wire file_bytes bank_model
 # link graph free of the voice engine — a link edge to it here means the design drifted.
 target_include_directories(reaper_reasampler PRIVATE ${SDK_INC} ${WDL_INC})
 
-# The deferred FX-park queue's re-entrancy rule is pure (header-inline, no REAPER
-# types), so it is CTest-covered like a core/ module. Declared here rather than in a
-# src/shell/view/CMakeLists.txt because that directory deliberately has none — its
-# TUs are compiled into this target directly. view_mode_model is linked for the plan
-# builders the pure half is a contract WITH — makeRestorePlan's round trip through
-# the cancel path, and makeParkPlan's flag set behind the trust test; pinning either
-# against hand-built ops would not catch a change to the other half.
+# The park surface's decisions are pure (header-inline, no REAPER types), so they are
+# CTest-covered like a core/ module: the snapshot trust test, the refusal message and
+# its once-per-changed-set gate, and the apply's undo-point fold. Declared here rather
+# than in a src/shell/view/CMakeLists.txt because that directory deliberately has none
+# — its TUs are compiled into this target directly. view_mode_model is linked for
+# makeParkPlan, the flag set the trust test folds over; pinning that against hand-built
+# ops would not catch a change to the planner.
 reasampler_test(view_fx_park LINK fx_offline view_mode_model)
 
 # Bank-package import: the promptless verb plus its action skin. Kept as its own