The ceiling tests asserted validate()'s verdict but nothing proved the claim the design rests on: that a forced promotion actually queues the filings it released and says that it did. Drive it through run_import with a filing that stays inside the per-filing window, so only the aggregate ceiling can release it, and assert the SecFilingGap row and the promotion_ceiling_forced event. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>