>After enough runs, Vigil promises that all remaining code meets its oaths.

Good thing that's only a promise and not an oath. In the scenario where we have `f` and `g`, `f` calling `g` incorrectly and `g` violating its own oaths. Vigil will delete `f` and `g` will go without punishment forever!