Relational — 6 operator calls, 3 control branches: All capacity bounds and consumption bounds are enforced structurally via the operator. Remaining branches govern flow sequencing, not state clamping.