Settlement windows

A window is a single atomic transaction. In it: NAV is read and must be reliable → fees accrue → queued deposit cash is released into the basket's working balance → one combined residual trade list (depositor flow netted against redemptions, plus the strategist's rebalance, all computed on post-flow NAV) executes through the adapter → NAV is re-read and the settlement reverts entirely if it came in below the oracle-implied floor → shares mint and burn at the window's share price → claims open. Netting the flows against each other before trading is what keeps execution cost, and leakage, down.

Any held asset that fails the oracle gauntlet makes NAV unreliable and the window simply cannot settle — no rebalancing, cash settlements queue, and in-kind redemption stays open throughout. A failing feed on an asset the basket doesn't currently hold does not degrade it.