Function cipher_halt 

fn cipher_halt(err: &RotationCipherError, stage: Stage) -> Halt

Maps a cipher error to the stage’s halt, with a fixed, content-free reason. A write-invalid error only gets its own reason at pre-flight; at pre-write it is CipherEncryptFailed.