Function freeze_replacement_decision 

pub fn freeze_replacement_decision(
    facts: FreezeReplacementFacts,
) -> FreezeReplacementDecision

Admit only a new freeze or a strictly newer exact-key replacement, with no uncommitted metadata tail; see freeze_replacement_model. The controller retries only InFlight, so every variant is pinned.