- block expired instruments
- require active instrument state
- enforce slice exhaustion for divisible vouchers
- preserve nullable maxSlices semantics in test fakes
- align withdrawable test scenarios with real eligibility rules

This promotes critical financial validation into the cash domain,
ensuring invalid withdrawals cannot pass regardless of caller.