Partial coverage: the full tower of value is uninsured above the capacity ceiling, so every guarantee layer routes residual risk onto Meta.