{"schemaVersion":"developer.reits.tech/auth-s08-r02-c02-contribution-custody-handoff/v1","subknifeId":"D05-A03-P03c-S08-R02-C02-H01-P04","parentSubknife":"D05-A03-P03c-S08-R02-C02-H01-P03","status":"CUSTODY_HANDOFF_KIT_READY_EXTERNAL_DISPATCH_ABSENT","progress":{"formal":{"currentKnife":5,"acceptedKnives":4,"totalKnives":36,"remainingIncludingCurrent":32},"auth":{"completed":7,"total":8},"s08":{"completedSteps":1,"currentStep":2,"totalSteps":4,"remainingIncludingCurrent":3},"r02Engineering":{"completedSlices":1,"currentSlice":2,"totalSlices":4,"remainingIncludingCurrent":3},"engineeringTools":{"completed":3,"total":3,"ownerPreflight":1,"quarantineAssembler":1,"custodyHandoff":1},"externalContributions":{"required":4,"dispatched":0,"received":0,"valid":0,"quarantined":0,"bound":0,"waiting":4},"ownerBallots":{"required":4,"received":0,"valid":0,"accepted":0}},"boundary":{"executionDomain":"OWNER_AND_OPERATOR_CONTROLLED_OFFLINE_DOMAINS","portalDistributesStaticToolOnly":true,"networkRequestsAllowed":false,"onlineUploadAllowed":false,"browserPersistenceAllowed":false,"privateMaterialAllowed":false,"rawPublicKeyAllowedInManifest":false,"transportManifestIsSignature":false,"custodyAcknowledgementIsExternalReceipt":false,"authorityBindingEffect":false,"ballotEffect":false,"productionEffect":false,"formalAdvanceEffect":false},"tool":{"name":"受控带外交接与保全链生成器","version":"P04-v1","offlineHtmlHref":"/handoff/auth-s08-r02-c02/contribution-custody-handoff.offline.html","manifestSchemaHref":"/schemas/auth-s08-r02-c02-contribution-custody-handoff.v1.schema.json","contributionSchemaHref":"/schemas/auth-s08-r02-c02-owner-authority-contribution.v1.schema.json","cli":"node scripts/build-auth-s08-r02-c02-contribution-custody-handoff.mjs --expected-owner <席位> --contribution <公开包> --channel <受控通道> --sender-ref <发送方引用> --receiver-ref <接收方引用> --expires-at <ISO 时间> --manifest-out <交接清单> --ack-template-out <净化确认候选>","inputMode":"ONE_LOCAL_PUBLIC_CONTRIBUTION_PER_OWNER","outputMode":"DIGEST_ONLY_UNSIGNED_TRANSFER_MANIFEST_PLUS_SANITIZED_ACK_TEMPLATE","networkBehavior":"CSP CONNECT-SRC NONE","persistenceBehavior":"NO STORAGE / NO COOKIE / NO INDEXEDDB","nextOnPass":"OUT_OF_BAND_TRANSFER_THEN_OPERATOR_REHASH_AND_QUARANTINE","nextOnFailure":"DO_NOT_DISPATCH_AND_REBUILD_FROM_OWNER_CONTROLLED_SOURCE"},"channels":[{"id":"CONTROLLED_REMOVABLE_MEDIA","label":"受控可移动介质","rule":"全盘加密、介质编号登记、发送与接收双人核对；清单不携带解密秘密","default":true},{"id":"CONTROLLED_FILE_EXCHANGE","label":"受控文件交换区","rule":"由组织批准的隔离交换区承载；Portal 不提供上传端点或凭据","default":false},{"id":"IN_PERSON_OFFLINE_TRANSFER","label":"当面离线移交","rule":"双方在同一受控现场核对摘要、介质编号和有效窗口","default":false}],"lanes":[{"sequence":1,"ownerId":"AUTH","role":"Auth Owner","state":"NOT_DISPATCHED","senderControl":"AUTH_OWNER_DOMAIN","receiverControl":"OPERATOR_QUARANTINE_INTAKE","dualControlRequired":true},{"sequence":2,"ownerId":"SECURITY","role":"Security Owner","state":"NOT_DISPATCHED","senderControl":"SECURITY_OWNER_DOMAIN","receiverControl":"OPERATOR_QUARANTINE_INTAKE","dualControlRequired":true},{"sequence":3,"ownerId":"SRE_DBA","role":"SRE / DBA Owner","state":"NOT_DISPATCHED","senderControl":"SRE_DBA_OWNER_DOMAIN","receiverControl":"OPERATOR_QUARANTINE_INTAKE","dualControlRequired":true},{"sequence":4,"ownerId":"QA_WITNESS","role":"QA / Independent Witness","state":"NOT_DISPATCHED","senderControl":"QA_WITNESS_DOMAIN","receiverControl":"OPERATOR_QUARANTINE_INTAKE","dualControlRequired":true}],"stateMachine":[{"id":"LOCAL_PREFLIGHT_PASSED","label":"Owner 本地预检通过","realCount":0},{"id":"SEALED_FOR_TRANSFER","label":"摘要绑定并封装待移交","realCount":0},{"id":"ARRIVED_UNVERIFIED","label":"接收方登记、尚未重算","realCount":0},{"id":"HASH_MATCHED_QUARANTINED","label":"重算一致并进入 P03 隔离区","realCount":0},{"id":"REJECTED_OR_EXPIRED","label":"摘要漂移、过期或保全链断裂","realCount":0}],"checkpoints":[{"id":"H01","name":"复用 P02 十二步单席预检","failureCode":"E_PREFLIGHT"},{"id":"H02","name":"席位与 expectedOwner 精确一致","failureCode":"E_OWNER"},{"id":"H03","name":"冻结 Dossier 摘要一致","failureCode":"E_DOSSIER"},{"id":"H04","name":"贡献包按稳定 JSON 规范化","failureCode":"E_CANONICAL"},{"id":"H05","name":"生成 SHA-256 贡献摘要","failureCode":"E_DIGEST"},{"id":"H06","name":"通道属于三类批准受控通道","failureCode":"E_CHANNEL"},{"id":"H07","name":"发送方与接收方引用均为绝对 URI","failureCode":"E_PARTY_REF"},{"id":"H08","name":"发送方与接收方职责分离","failureCode":"E_ROLE_SEPARATION"},{"id":"H09","name":"有效窗口为未来且不超过二十四小时","failureCode":"E_WINDOW"},{"id":"H10","name":"交接清单只保留摘要与公开引用","failureCode":"E_MANIFEST_SANITIZATION"},{"id":"H11","name":"清单明确无签名、无绑定、无生产效果","failureCode":"E_EFFECT_FIREWALL"},{"id":"H12","name":"接收确认候选要求接收方重新计算摘要","failureCode":"E_REHASH_REQUIRED"},{"id":"H13","name":"摘要不一致时强制拒绝并隔离介质","failureCode":"E_HASH_MISMATCH"},{"id":"H14","name":"只有重算一致才允许进入 P03 隔离组装","failureCode":"E_QUARANTINE_BYPASS"}],"rejectionCatalog":[{"code":"E_PREFLIGHT","action":"返回 Owner 自有控制域重新运行 P02，不得移交"},{"code":"E_OWNER","action":"拒绝跨席代交、错席或未声明席位"},{"code":"E_DOSSIER","action":"冻结该副本并重新核对唯一 Dossier 摘要"},{"code":"E_CANONICAL","action":"使用官方工具重新规范化公开贡献包"},{"code":"E_DIGEST","action":"停止移交并从 Owner 控制源重新生成摘要"},{"code":"E_CHANNEL","action":"改用三类批准通道之一，Portal 不接收文件"},{"code":"E_PARTY_REF","action":"补齐可审计的发送方与接收方公开引用"},{"code":"E_ROLE_SEPARATION","action":"更换接收人，禁止同一主体自发自收"},{"code":"E_WINDOW","action":"销毁过期清单并生成新的二十四小时内窗口"},{"code":"E_MANIFEST_SANITIZATION","action":"删除原始公钥、秘密、凭据和签名字段后重建"},{"code":"E_EFFECT_FIREWALL","action":"拒绝将交接清单解释为签名、Authority Binding 或生产授权"},{"code":"E_REHASH_REQUIRED","action":"接收方必须对收到的原始公开包独立重新计算摘要"},{"code":"E_HASH_MISMATCH","action":"立即拒绝、隔离介质并通知原 Owner 重新提交"},{"code":"E_QUARANTINE_BYPASS","action":"禁止绕过 P03 四槽隔离与十六步集合检查"}],"outputs":[{"id":"UNSIGNED_TRANSFER_MANIFEST","state":"LOCAL_DRAFT_NOT_DISPATCHED","containsRawPublicKey":false,"containsSignature":false,"externalReceipt":false,"authorityBindingEffect":false},{"id":"SANITIZED_CUSTODY_ACK_TEMPLATE","state":"LOCAL_TEMPLATE_AWAITING_REAL_RECEIVER","containsRawPublicKey":false,"containsSignature":false,"externalReceipt":false,"authorityBindingEffect":false}],"qaGates":[{"id":"G01","name":"离线页面与 CLI 都可生成摘要绑定清单","state":"PASS"},{"id":"G02","name":"真实 P02 预检逻辑被复用","state":"PASS"},{"id":"G03","name":"固定四席与三类通道合同","state":"PASS"},{"id":"G04","name":"十四步失败关闭校验","state":"PASS"},{"id":"G05","name":"原始公钥不进入清单或回执候选","state":"PASS"},{"id":"G06","name":"无网络、无持久化、无在线上传","state":"PASS"},{"id":"G07","name":"发送与接收角色分离","state":"PASS"},{"id":"G08","name":"摘要漂移与过期场景失败关闭","state":"PASS"},{"id":"G09","name":"签名、绑定、Ballot 与生产效果防火墙","state":"PASS"},{"id":"G10","name":"四位 Owner 真实带外派送","state":"WAITING"},{"id":"G11","name":"操作员真实到达登记与独立重算","state":"WAITING"},{"id":"G12","name":"四份真实材料进入 P03 隔离区","state":"WAITING"},{"id":"G13","name":"独立复核后显式 Authority Binding","state":"BLOCKED"},{"id":"G14","name":"C03 Ballot 收件准入","state":"HELD"}],"decision":{"custodyHandoffToolReady":true,"realDispatches":0,"realArrivals":0,"realHashMatches":0,"realQuarantined":0,"externalReceiptAccepted":false,"authoritySetBound":false,"c02Complete":false,"c03Admitted":false,"productionHeld":true,"nextRequiredEvent":"四位 Owner 各自在自有控制域运行 P02，并使用 P04 将公开包摘要绑定到批准通道、发送方、接收方和二十四小时内窗口；操作员到达后独立重算，匹配才进入 P03 隔离区。"}}