Function mandatoryStateDisagreements

Mandatory keys the shared classifier does not call authoritative; exported for the gate, not called at runtime. A derived key would be regenerated per replica (the token-rejection bug).