Property tests for per-job concurrency limits: a deterministic exact-model sweep over a job lifecycle (insert, claim, ack, retry, override, prune, reconcile), a concurrent never-over-admit check, and a grouped drain-to-empty check. Each model key is a seeded pool driven through a single suffix. Claims are attributed.