{"schemaVersion":"developer.reits.tech/auth-s08-r02-c02-external-ceremony-coordination/v1","manifestVersion":"D05-A03-P03c-S08-R02-C02-EXTERNAL-CEREMONY-COORDINATION-v1","verifiedAt":"2026-08-09","status":"F05_06_AUTHORITY_HANDOFF_PLAN_1_OF_1_STEPS_8_OF_8_READY_CANDIDATE_0_OF_1_REHASHES_0_OF_4_BINDINGS_0_OF_4_BALLOTS_0_OF_4_PACKAGE_0_OF_1_G03_STALE_FORMAL_4_OF_36","progress":{"formalAccepted":4,"formalCurrent":5,"formalTotal":36,"remainingIncludingCurrent":32,"terminalSealToolsReady":3,"terminalSealToolsTotal":3,"terminalSealLineageEntriesSealed":42,"terminalSealLineageEntriesRequired":42,"terminalSealDownloadReferences":133,"terminalSealDownloadReferencesRequired":133,"terminalSealEnvironmentReadbacks":2,"terminalSealEnvironmentReadbacksRequired":2,"terminalSealProductionMutations":0,"plansReady":4,"plansTotal":4,"roleSlotsTotal":24,"roleBindings":0,"rolePreflightToolsReady":3,"rolePreflightToolsTotal":3,"rolePreflightRunsCompleted":0,"rolePreflightRunsTotal":4,"roleDispatchToolsReady":6,"roleDispatchToolsTotal":6,"roleDispatchPacketsReady":4,"roleDispatchPacketsTotal":4,"roleDispatchRequestsAssembled":0,"roleDispatchReceiptsObserved":0,"receiptCustodyToolsReady":3,"receiptCustodyToolsTotal":3,"receiptCustodyLanesTotal":4,"receiptCustodyBundlesAssembled":0,"receiptCustodyCandidateReceipts":0,"receiptCustodyIndependentReadbacks":0,"receiptCustodyCryptographicVerifications":0,"independentVerificationToolsReady":3,"independentVerificationToolsTotal":3,"independentVerificationLanesTotal":4,"independentVerificationLocalRunsObserved":0,"independentVerificationCandidatesObserved":0,"independentVerificationProductionVerificationsObserved":0,"independentVerificationTrustRootAdmissionsObserved":0,"independentVerificationRevocationChecksObserved":0,"trustRevocationQualificationToolsReady":3,"trustRevocationQualificationToolsTotal":3,"trustRevocationQualificationLanesTotal":4,"trustRevocationQualificationRunsObserved":0,"trustRevocationQualificationCandidatesObserved":0,"trustRevocationQualificationProductionObserved":0,"signedTrustSnapshotsObserved":0,"signedRevocationSnapshotsObserved":0,"externalTrustAnchorAdmissionsObserved":0,"authorityAdmissionHandoffToolsReady":3,"authorityAdmissionHandoffToolsTotal":3,"authorityAdmissionHandoffLanesTotal":4,"authorityAdmissionHandoffLanesObserved":0,"authorityAdmissionHandoffCandidatesObserved":0,"authorityAdmissionDecisionsObserved":0,"authorityDecisionReadbackToolsReady":3,"authorityDecisionReadbackToolsTotal":3,"authorityDecisionReceiptsObserved":0,"authorityDecisionReceiptsRequired":1,"authorityDecisionSignaturesObserved":0,"authorityDecisionSignaturesRequired":2,"authorityDecisionPrincipalAdmissionsObserved":0,"authorityDecisionPrincipalAdmissionsRequired":2,"principalAdmissionRoleReceiptReadbackToolsReady":3,"principalAdmissionRoleReceiptReadbackToolsTotal":3,"principalAdmissionRoleReceiptDecisionReceiptsObserved":0,"principalAdmissionRoleReceiptDecisionReceiptsRequired":1,"principalAdmissionRoleReceiptAdmissionsObserved":0,"principalAdmissionRoleReceiptAdmissionsRequired":2,"principalAdmissionRoleReceiptsObserved":0,"principalAdmissionRoleReceiptsRequired":24,"principalAdmissionRoleReceiptLedgersObserved":0,"principalAdmissionRoleReceiptLedgersRequired":1,"externalLedgerInclusionReadbackToolsReady":3,"externalLedgerInclusionReadbackToolsTotal":3,"externalLedgerRoleReceiptSetsObserved":0,"externalLedgerRoleReceiptSetsRequired":1,"externalLedgerInclusionsObserved":0,"externalLedgerInclusionsRequired":1,"externalLedgerCheckpointsObserved":0,"externalLedgerCheckpointsRequired":1,"externalLedgerIndependentReadbacksObserved":0,"externalLedgerIndependentReadbacksRequired":1,"externalLedgerGateAdjudicationsObserved":0,"externalLedgerGateAdjudicationsRequired":1,"gateAuthorityAdjudicationReadbackToolsReady":3,"gateAuthorityAdjudicationReadbackToolsTotal":3,"gateAuthorityAdjudicationsObserved":0,"gateAuthorityAdjudicationsRequired":1,"gateAuthoritySignaturesObserved":0,"gateAuthoritySignaturesRequired":2,"gateAuthorityIndependentReadbacksObserved":0,"gateAuthorityIndependentReadbacksRequired":1,"gateAuthorityFormalCommitsObserved":0,"gateAuthorityFormalCommitsRequired":1,"formalCommitFinalityReadbackToolsReady":3,"formalCommitFinalityReadbackToolsTotal":3,"formalGateCommitsObserved":0,"formalGateCommitsRequired":1,"formalGateFinalityCheckpointsObserved":0,"formalGateFinalityCheckpointsRequired":1,"formalGateCommitSignaturesObserved":0,"formalGateCommitSignaturesRequired":2,"formalGateIndependentReadbacksObserved":0,"formalGateIndependentReadbacksRequired":1,"formalGateStateTransitionsObserved":0,"formalGateStateTransitionsRequired":1,"threeHeadConsistencyRecoveryReadbackToolsReady":3,"threeHeadConsistencyRecoveryReadbackToolsTotal":3,"threeHeadReconciliationsObserved":0,"threeHeadReconciliationsRequired":1,"threeHeadRecoveryReadbacksObserved":0,"threeHeadRecoveryReadbacksRequired":1,"threeHeadDriftRecoveriesObserved":0,"threeHeadDriftRecoveriesRequired":1,"closureCertificateDependencyReleaseToolsReady":3,"closureCertificateDependencyReleaseToolsTotal":3,"closureCertificatesObserved":0,"closureCertificatesRequired":1,"dependencyReleaseReadbacksObserved":0,"dependencyReleaseReadbacksRequired":1,"readOnlyScopesReleasedObserved":0,"readOnlyScopesReleasedRequired":3,"readModelConsumerCompatibilityToolsReady":3,"readModelConsumerCompatibilityToolsTotal":3,"readModelConsumerContractsObserved":0,"readModelConsumerContractsRequired":3,"readModelCacheInvalidationsObserved":0,"readModelCacheInvalidationsRequired":1,"readModelConsumerHealthReadbacksObserved":0,"readModelConsumerHealthReadbacksRequired":3,"readModelConsumersActivatedObserved":0,"readModelConsumersActivatedRequired":3,"readModelAtomicPublicationToolsReady":3,"readModelAtomicPublicationToolsTotal":3,"readModelPublicationBundlesObserved":0,"readModelPublicationBundlesRequired":1,"readModelAtomicCommitsObserved":0,"readModelAtomicCommitsRequired":1,"readModelConsistencyReadbacksObserved":0,"readModelConsistencyReadbacksRequired":1,"readModelRollbacksObserved":0,"readModelRollbacksRequired":1,"readModelPublicationLeaseFencingToolsReady":3,"readModelPublicationLeaseFencingToolsTotal":3,"readModelLeaseClaimsObserved":0,"readModelLeaseClaimsRequired":1,"readModelConcurrentFencesObserved":0,"readModelConcurrentFencesRequired":1,"readModelOrphanSweepsObserved":0,"readModelOrphanSweepsRequired":1,"readModelCleanupSettlementsObserved":0,"readModelCleanupSettlementsRequired":1,"readModelProtectedObjectMutationsObserved":0,"readModelLeaseContinuityToolsReady":3,"readModelLeaseContinuityToolsTotal":3,"readModelRenewalsObserved":0,"readModelRenewalsRequired":1,"readModelGracefulHandoffsObserved":0,"readModelGracefulHandoffsRequired":1,"readModelCrashTakeoversObserved":0,"readModelCrashTakeoversRequired":1,"readModelTakeoverReadbacksObserved":0,"readModelTakeoverReadbacksRequired":1,"readModelSplitBrainMutationsObserved":0,"readModelLeaseJournalToolsReady":3,"readModelLeaseJournalToolsTotal":3,"readModelJournalSegmentsObserved":0,"readModelJournalSegmentsRequired":1,"readModelJournalCheckpointsObserved":0,"readModelJournalCheckpointsRequired":1,"readModelJournalReplaysObserved":0,"readModelJournalReplaysRequired":1,"readModelJournalReplayReadbacksObserved":0,"readModelJournalReplayReadbacksRequired":1,"readModelJournalDroppedEventsObserved":0,"readModelJournalDuplicateMutationsObserved":0,"readModelJournalRecoveryToolsReady":3,"readModelJournalRecoveryToolsTotal":3,"readModelJournalIntegrityScansObserved":0,"readModelJournalIntegrityScansRequired":1,"readModelJournalCorruptionQuarantinesObserved":0,"readModelJournalCorruptionQuarantinesRequired":1,"readModelJournalRecoveryPlansObserved":0,"readModelJournalRecoveryPlansRequired":1,"readModelJournalPointInTimeRestoresObserved":0,"readModelJournalPointInTimeRestoresRequired":1,"readModelJournalRecoveryReadbacksObserved":0,"readModelJournalRecoveryReadbacksRequired":1,"readModelJournalCorruptEventsAppliedObserved":0,"readModelJournalRecoveryProductionMutationsObserved":0,"recoveryCandidatePromotionToolsReady":3,"recoveryCandidatePromotionToolsTotal":3,"recoveryCandidateQualificationsObserved":0,"recoveryCandidateQualificationsRequired":1,"recoveryCandidateApprovalReceiptsObserved":0,"recoveryCandidateApprovalReceiptsRequired":2,"recoveryCandidatePromotionsObserved":0,"recoveryCandidatePromotionsRequired":1,"recoveryCandidateTrafficShiftsObserved":0,"recoveryCandidateTrafficShiftsRequired":1,"recoveryCandidateRollbackDrillsObserved":0,"recoveryCandidateRollbackDrillsRequired":1,"recoveryCandidatePromotionReadbacksObserved":0,"recoveryCandidatePromotionReadbacksRequired":1,"recoveryCandidateTrafficShiftPercent":0,"recoveryCandidateProductionMutationsObserved":0,"canaryObservationToolsReady":3,"canaryObservationToolsTotal":3,"canaryObservationPoliciesReady":1,"canaryObservationPoliciesRequired":1,"canaryObservationWindowsObserved":0,"canaryObservationWindowsRequired":4,"canaryTelemetryBatchesObserved":0,"canaryWindowSettlementsObserved":0,"canaryWindowSettlementsRequired":4,"canaryAdvanceAuthorizationsObserved":0,"canaryAdvanceAuthorizationsRequired":1,"canaryRollbackExecutionsObserved":0,"canaryRollbackExecutionsRequired":1,"canaryIndependentReadbacksObserved":0,"canaryIndependentReadbacksRequired":1,"canaryProductionTrafficPercent":0,"canaryProductionMutationsObserved":0,"promotionPermitToolsReady":3,"promotionPermitToolsTotal":3,"promotionPermitsObserved":0,"promotionPermitsRequired":1,"promotionStageLocksObserved":0,"promotionStageLocksRequired":1,"promotionTrafficShiftsObserved":0,"promotionTrafficShiftsRequired":4,"promotionSettlementsObserved":0,"promotionSettlementsRequired":4,"promotionRollbackExecutionsObserved":0,"promotionRollbackExecutionsRequired":1,"promotionIndependentReadbacksObserved":0,"promotionIndependentReadbacksRequired":1,"promotionProductionTrafficPercent":0,"promotionProductionMutationsObserved":0,"promotionClaimJournalToolsReady":3,"promotionClaimJournalToolsTotal":3,"promotionDurableClaimsObserved":0,"promotionDurableClaimsRequired":1,"promotionJournalTransactionsObserved":0,"promotionJournalTransactionsRequired":1,"promotionProviderCallsObserved":0,"promotionProviderCallsRequired":1,"promotionCommitsObserved":0,"promotionCommitsRequired":1,"promotionAmbiguousRecoveriesObserved":0,"promotionAmbiguousRecoveriesRequired":1,"promotionClaimRollbacksObserved":0,"promotionClaimRollbacksRequired":1,"promotionClaimReadbacksObserved":0,"promotionClaimReadbacksRequired":1,"promotionClaimProductionMutationsObserved":0,"providerResponseReconciliationToolsReady":3,"providerResponseReconciliationToolsTotal":3,"providerResponseSealsObserved":0,"providerResponseSealsRequired":1,"providerPostConditionReadbacksObserved":0,"providerPostConditionReadbacksRequired":1,"providerSideEffectReconciliationsObserved":0,"providerSideEffectReconciliationsRequired":1,"providerCompensationPlansObserved":0,"providerCompensationPlansRequired":1,"providerCompensationExecutionsObserved":0,"providerCompensationExecutionsRequired":1,"providerCompensationFinalitiesObserved":0,"providerCompensationFinalitiesRequired":1,"providerTerminalSettlementsObserved":0,"providerTerminalSettlementsRequired":1,"providerIndependentReadbacksObserved":0,"providerIndependentReadbacksRequired":1,"providerResponseProductionMutationsObserved":0,"terminalSettlementPublicationToolsReady":3,"terminalSettlementPublicationToolsTotal":3,"terminalSettlementCertificatesObserved":0,"terminalSettlementCertificatesRequired":1,"terminalSettlementLedgerCasCommitsObserved":0,"terminalSettlementLedgerCasCommitsRequired":1,"terminalSettlementPermitRetirementsObserved":0,"terminalSettlementPermitRetirementsRequired":1,"terminalSettlementClaimRetirementsObserved":0,"terminalSettlementClaimRetirementsRequired":1,"terminalSettlementRetryTombstonesObserved":0,"terminalSettlementRetryTombstonesRequired":1,"terminalSettlementConsumerAcknowledgementsObserved":0,"terminalSettlementConsumerAcknowledgementsRequired":4,"terminalSettlementQuarantineDispositionsObserved":0,"terminalSettlementQuarantineDispositionsRequired":1,"terminalSettlementIndependentReadbacksObserved":0,"terminalSettlementIndependentReadbacksRequired":1,"terminalSettlementProductionMutationsObserved":0,"terminalEventDeliveryToolsReady":3,"terminalEventDeliveryToolsTotal":3,"terminalEventOutboxAppendsObserved":0,"terminalEventOutboxAppendsRequired":1,"terminalEventPublicationsObserved":0,"terminalEventPublicationsRequired":1,"terminalEventConsumerCursorAdvancesObserved":0,"terminalEventConsumerCursorAdvancesRequired":4,"terminalEventLagBudgetReceiptsObserved":0,"terminalEventLagBudgetReceiptsRequired":4,"terminalEventPoisonQuarantinesObserved":0,"terminalEventPoisonQuarantinesRequired":1,"terminalEventSlaEscalationsObserved":0,"terminalEventSlaEscalationsRequired":1,"terminalEventIndependentReadbacksObserved":0,"terminalEventIndependentReadbacksRequired":1,"terminalEventProductionMutationsObserved":0,"terminalEventRecoveryToolsReady":3,"terminalEventRecoveryToolsTotal":3,"terminalEventRetentionPoliciesObserved":0,"terminalEventRetentionPoliciesRequired":4,"terminalEventReplayWindowsObserved":0,"terminalEventReplayWindowsRequired":4,"terminalEventRebuildSessionsObserved":0,"terminalEventRebuildSessionsRequired":4,"terminalEventCatchupReceiptsObserved":0,"terminalEventCatchupReceiptsRequired":4,"terminalEventCrossRegionCheckpointsObserved":0,"terminalEventCrossRegionCheckpointsRequired":2,"terminalEventDisasterRecoveryReadbacksObserved":0,"terminalEventDisasterRecoveryReadbacksRequired":1,"terminalEventRecoveryProductionMutationsObserved":0,"disasterRecoveryFailoverToolsReady":3,"disasterRecoveryFailoverToolsTotal":3,"disasterRecoveryFailoverQualificationsObserved":0,"disasterRecoveryFailoverQualificationsRequired":1,"disasterRecoveryRpoProofsObserved":0,"disasterRecoveryRpoProofsRequired":2,"disasterRecoveryRtoRunsObserved":0,"disasterRecoveryRtoRunsRequired":2,"disasterRecoveryAuthorityLeasesObserved":0,"disasterRecoveryAuthorityLeasesRequired":1,"disasterRecoverySplitBrainFencesObserved":0,"disasterRecoverySplitBrainFencesRequired":2,"disasterRecoveryFailbackWindowsObserved":0,"disasterRecoveryFailbackWindowsRequired":1,"disasterRecoveryDrillSettlementsObserved":0,"disasterRecoveryDrillSettlementsRequired":1,"disasterRecoveryIndependentReadbacksObserved":0,"disasterRecoveryIndependentReadbacksRequired":1,"disasterRecoveryFailoverProductionMutationsObserved":0,"disasterRecoveryCutoverToolsReady":3,"disasterRecoveryCutoverToolsTotal":3,"disasterRecoveryCutoverPlansObserved":0,"disasterRecoveryCutoverPlansRequired":1,"disasterRecoveryTrafficStagesObserved":0,"disasterRecoveryTrafficStagesRequired":5,"disasterRecoveryConnectionDrainReceiptsObserved":0,"disasterRecoveryConnectionDrainReceiptsRequired":2,"disasterRecoveryRoutingPropagationReceiptsObserved":0,"disasterRecoveryRoutingPropagationReceiptsRequired":3,"disasterRecoveryWriteProbeSettlementsObserved":0,"disasterRecoveryWriteProbeSettlementsRequired":4,"disasterRecoveryRollbackSettlementsObserved":0,"disasterRecoveryRollbackSettlementsRequired":1,"disasterRecoveryCutoverIndependentReadbacksObserved":0,"disasterRecoveryCutoverIndependentReadbacksRequired":1,"disasterRecoveryCutoverProductionMutationsObserved":0,"postCutoverStabilizationToolsReady":3,"postCutoverStabilizationToolsTotal":3,"postCutoverStabilizationPlansObserved":0,"postCutoverStabilizationPlansRequired":1,"postCutoverSessionRebindingsObserved":0,"postCutoverSessionRebindingsRequired":3,"postCutoverCacheWarmupsObserved":0,"postCutoverCacheWarmupsRequired":4,"postCutoverBackgroundJobResumesObserved":0,"postCutoverBackgroundJobResumesRequired":4,"postCutoverOldPrimaryQuarantineSealsObserved":0,"postCutoverOldPrimaryQuarantineSealsRequired":1,"postCutoverRollbackWindowClosuresObserved":0,"postCutoverRollbackWindowClosuresRequired":1,"postCutoverIndependentReadbacksObserved":0,"postCutoverIndependentReadbacksRequired":1,"postCutoverProductionMutationsObserved":0,"postFailoverResilienceRebaselineToolsReady":3,"postFailoverResilienceRebaselineToolsTotal":3,"postFailoverPrimaryBaselinesObserved":0,"postFailoverPrimaryBaselinesRequired":1,"postFailoverStandbySeedsObserved":0,"postFailoverStandbySeedsRequired":1,"postFailoverReplicationCatchupsObserved":0,"postFailoverReplicationCatchupsRequired":4,"postFailoverCredentialEndpointRotationsObserved":0,"postFailoverCredentialEndpointRotationsRequired":4,"postFailoverOldPrimaryDispositionsObserved":0,"postFailoverOldPrimaryDispositionsRequired":1,"postFailoverResilienceCertificatesObserved":0,"postFailoverResilienceCertificatesRequired":1,"postFailoverIndependentReadbacksObserved":0,"postFailoverIndependentReadbacksRequired":1,"postFailoverProductionMutationsObserved":0,"continuousResilienceAssuranceToolsReady":3,"continuousResilienceAssuranceToolsTotal":3,"continuousResilienceAssurancePoliciesObserved":0,"continuousResilienceAssurancePoliciesRequired":1,"continuousResilienceReplicationSloWindowsObserved":0,"continuousResilienceReplicationSloWindowsRequired":4,"continuousResilienceDriftScansObserved":0,"continuousResilienceDriftScansRequired":5,"continuousResilienceCapacityParityChecksObserved":0,"continuousResilienceCapacityParityChecksRequired":4,"continuousResilienceRestoreSamplesObserved":0,"continuousResilienceRestoreSamplesRequired":4,"continuousResilienceGameDayDrillsObserved":0,"continuousResilienceGameDayDrillsRequired":1,"continuousResilienceReadinessCertificatesObserved":0,"continuousResilienceReadinessCertificatesRequired":1,"continuousResilienceIndependentReadbacksObserved":0,"continuousResilienceIndependentReadbacksRequired":1,"continuousResilienceProductionMutationsObserved":0,"continuousResilienceCadenceToolsReady":3,"continuousResilienceCadenceToolsTotal":3,"continuousResilienceCadencePoliciesObserved":0,"continuousResilienceCadencePoliciesRequired":1,"continuousResilienceWindowLeasesObserved":0,"continuousResilienceWindowLeasesRequired":5,"continuousResilienceFreshnessAssessmentsObserved":0,"continuousResilienceFreshnessAssessmentsRequired":5,"continuousResilienceMissedWindowRecoveriesObserved":0,"continuousResilienceMissedWindowRecoveriesRequired":5,"continuousResilienceWaiverDecisionsObserved":0,"continuousResilienceWaiverDecisionsRequired":1,"continuousResilienceAutomaticHoldsObserved":0,"continuousResilienceAutomaticHoldsRequired":1,"continuousResilienceEscalationsObserved":0,"continuousResilienceEscalationsRequired":1,"continuousResilienceCadenceIndependentReadbacksObserved":0,"continuousResilienceCadenceIndependentReadbacksRequired":1,"continuousResilienceCadenceProductionMutationsObserved":0,"continuousResilienceLineageToolsReady":3,"continuousResilienceLineageToolsTotal":3,"continuousResilienceLineageManifestsObserved":0,"continuousResilienceLineageManifestsRequired":5,"continuousResilienceTrendWindowsObserved":0,"continuousResilienceTrendWindowsRequired":5,"continuousResilienceBreachBudgetsObserved":0,"continuousResilienceBreachBudgetsRequired":5,"continuousResilienceRepeatBreachReviewsObserved":0,"continuousResilienceRepeatBreachReviewsRequired":1,"continuousResilienceRemediationDossiersObserved":0,"continuousResilienceRemediationDossiersRequired":1,"continuousResilienceRecertificationVotesObserved":0,"continuousResilienceRecertificationVotesRequired":3,"continuousResiliencePolicyRecertificationsObserved":0,"continuousResiliencePolicyRecertificationsRequired":1,"continuousResilienceLineageIndependentReadbacksObserved":0,"continuousResilienceLineageIndependentReadbacksRequired":1,"continuousResilienceLineageProductionMutationsObserved":0,"continuousResiliencePolicyReleaseToolsReady":3,"continuousResiliencePolicyReleaseToolsTotal":3,"continuousResiliencePolicyChangeCandidatesObserved":0,"continuousResiliencePolicyChangeCandidatesRequired":1,"continuousResiliencePolicyImpactAssessmentsObserved":0,"continuousResiliencePolicyImpactAssessmentsRequired":5,"continuousResiliencePolicyReplaySimulationsObserved":0,"continuousResiliencePolicyReplaySimulationsRequired":5,"continuousResiliencePolicyShadowEvaluationsObserved":0,"continuousResiliencePolicyShadowEvaluationsRequired":5,"continuousResiliencePolicyReleaseApprovalsObserved":0,"continuousResiliencePolicyReleaseApprovalsRequired":3,"continuousResiliencePolicyRolloutAuthorizationsObserved":0,"continuousResiliencePolicyRolloutAuthorizationsRequired":1,"continuousResiliencePolicyRollbackRehearsalsObserved":0,"continuousResiliencePolicyRollbackRehearsalsRequired":1,"continuousResiliencePolicyReleaseIndependentReadbacksObserved":0,"continuousResiliencePolicyReleaseIndependentReadbacksRequired":1,"continuousResiliencePolicyReleaseProductionMutationsObserved":0,"continuousResiliencePolicyDistributionToolsReady":3,"continuousResiliencePolicyDistributionToolsTotal":3,"continuousResiliencePolicyDistributionManifestsObserved":0,"continuousResiliencePolicyDistributionManifestsRequired":1,"continuousResiliencePolicyConsumerRegistrationsObserved":0,"continuousResiliencePolicyConsumerRegistrationsRequired":6,"continuousResiliencePolicyPropagationAttemptsObserved":0,"continuousResiliencePolicyPropagationAttemptsRequired":6,"continuousResiliencePolicyVersionAcknowledgementsObserved":0,"continuousResiliencePolicyVersionAcknowledgementsRequired":6,"continuousResiliencePolicyPropagationSloSettlementsObserved":0,"continuousResiliencePolicyPropagationSloSettlementsRequired":6,"continuousResiliencePolicyVersionSkewIsolationsObserved":0,"continuousResiliencePolicyVersionSkewIsolationsRequired":1,"continuousResiliencePolicyPartialFailureDispositionsObserved":0,"continuousResiliencePolicyPartialFailureDispositionsRequired":1,"continuousResiliencePolicyRollbackConfirmationsObserved":0,"continuousResiliencePolicyRollbackConfirmationsRequired":6,"continuousResiliencePolicyDistributionIndependentReadbacksObserved":0,"continuousResiliencePolicyDistributionIndependentReadbacksRequired":1,"continuousResiliencePolicyDistributionProductionMutationsObserved":0,"continuousResiliencePolicyEffectObservationToolsReady":3,"continuousResiliencePolicyEffectObservationToolsTotal":3,"continuousResiliencePolicyEffectObservationPlansObserved":0,"continuousResiliencePolicyEffectObservationPlansRequired":1,"continuousResiliencePolicyEffectCohortBaselinesObserved":0,"continuousResiliencePolicyEffectCohortBaselinesRequired":6,"continuousResiliencePolicyEffectDecisionWindowsObserved":0,"continuousResiliencePolicyEffectDecisionWindowsRequired":6,"continuousResiliencePolicyEffectDriftEvaluationsObserved":0,"continuousResiliencePolicyEffectDriftEvaluationsRequired":6,"continuousResiliencePolicyEffectFalseDenyGuardrailsObserved":0,"continuousResiliencePolicyEffectFalseDenyGuardrailsRequired":6,"continuousResiliencePolicyEffectFalseAllowGuardrailsObserved":0,"continuousResiliencePolicyEffectFalseAllowGuardrailsRequired":6,"continuousResiliencePolicyEffectErrorBudgetsObserved":0,"continuousResiliencePolicyEffectErrorBudgetsRequired":6,"continuousResiliencePolicyEffectAutomaticHoldsObserved":0,"continuousResiliencePolicyEffectAutomaticHoldsRequired":1,"continuousResiliencePolicyEffectRollbackTriggersObserved":0,"continuousResiliencePolicyEffectRollbackTriggersRequired":1,"continuousResiliencePolicyEffectIndependentReadbacksObserved":0,"continuousResiliencePolicyEffectIndependentReadbacksRequired":1,"continuousResiliencePolicyEffectProductionMutationsObserved":0,"continuousResiliencePolicyAnomalyGovernanceToolsReady":3,"continuousResiliencePolicyAnomalyGovernanceToolsTotal":3,"continuousResiliencePolicyAnomalyGovernancePoliciesObserved":0,"continuousResiliencePolicyAnomalyGovernancePoliciesRequired":1,"continuousResiliencePolicyAnomalyEventsObserved":0,"continuousResiliencePolicyAnomalyEventsRequired":6,"continuousResiliencePolicyAnomalyClustersObserved":0,"continuousResiliencePolicyAnomalyClustersRequired":6,"continuousResiliencePolicyCausalGraphsObserved":0,"continuousResiliencePolicyCausalGraphsRequired":6,"continuousResiliencePolicyAnomalyOwnerRoutesObserved":0,"continuousResiliencePolicyAnomalyOwnerRoutesRequired":6,"continuousResiliencePolicyAnomalySlaClocksObserved":0,"continuousResiliencePolicyAnomalySlaClocksRequired":4,"continuousResiliencePolicyDuplicateMergesObserved":0,"continuousResiliencePolicyDuplicateMergesRequired":1,"continuousResiliencePolicyExceptionDecisionsObserved":0,"continuousResiliencePolicyExceptionDecisionsRequired":1,"continuousResiliencePolicyRemediationVerificationsObserved":0,"continuousResiliencePolicyRemediationVerificationsRequired":6,"continuousResiliencePolicyAnomalyIndependentReadbacksObserved":0,"continuousResiliencePolicyAnomalyIndependentReadbacksRequired":1,"continuousResiliencePolicyAnomalyProductionMutationsObserved":0,"inLaneSeparationPairsPerLane":15,"inLaneSeparationAssertionsTotal":60,"controlPreflightToolsReady":3,"controlPreflightToolsTotal":3,"controlPreflightRunsCompleted":0,"controlPreflightRunsTotal":4,"controlApprovalReceiptSlotsTotal":12,"controlApprovalReceiptRefsObserved":0,"controlWindowsTotal":4,"controlWindowsScheduled":0,"controlSlotsTotal":8,"controlsBound":0,"checkpointsTotal":28,"checkpointsCompleted":0,"gateRowsTotal":8,"gateCellsTotal":32,"gateCellsReady":8,"gateCellsHeld":20,"gateCellsDenied":4,"expectedInboundReferences":12,"realDispatches":0,"realArrivals":0,"realRehashPassed":0,"realQuarantined":0,"realAuthorityBound":0,"realBallotsAccepted":0},"actionConvergence":{"revision":50,"state":"CONVERGED","currentEntryId":"D05-C02-AUTHORITY-FINAL-ACCEPTANCE-HANDOFF","currentEntryLabel":"Auth 外部 Authority 接管与 D05 正式验收包最终交接工作台","currentEntryHref":"/development-plan/archive#d05-c02-authority-final-acceptance-handoff","currentActionId":"F05_06_PREPARE_EXTERNAL_AUTHORITY_TAKEOVER_AND_D05_ACCEPTANCE_HANDOFF","currentActionLabel":"将本地候选、四席复算、Authority Binding、正式摘要、Ballot 与 D05 验收包拆成八步外部接管链","firstUnmetGate":"G03_PRODUCTION_BASELINE_REQUALIFICATION","legacyEntryId":"D05-C02-EXTERNAL-EXECUTION-LAUNCHPAD","legacyEntryHref":"/development-plan/archive#external-execution-launchpad","legacyEntryRole":"REFERENCE_ONLY_AFTER_COORDINATION","blockedUntilG04AndG05":["P02","P04","TRANSFER","P05","P03","BIND","C03"],"currentEngineeringSubslice":"D05-C02-B42","currentEngineeringSubsliceLabel":"Portal 工程终局证书、版本冻结、回滚根与 EC2 / Owner-only Sites 双环境交接","currentEngineeringSubsliceStatus":"ENGINEERING_32_OF_32_DAY3_11_OF_11_TERMINAL_SEAL_TOOLS_3_OF_3_LINEAGE_42_OF_42_DOWNLOADS_133_OF_133_DUAL_ENVIRONMENTS_2_OF_2_PRODUCTION_MUTATIONS_0_FORMAL_4_OF_36_G04_HELD","currentFormalSubslice":"D05-C02-F05-06","currentFormalSubsliceLabel":"Auth 外部 Authority 接管与 D05 正式验收包最终交接","currentFormalSubsliceStatus":"PLAN_1_OF_1_STEPS_8_OF_8_CANDIDATE_0_OF_1_REHASHES_0_OF_4_BINDINGS_0_OF_4_DOSSIER_0_OF_1_BALLOTS_0_OF_4_PACKAGE_0_OF_1_G03_STALE","authorityFinalAcceptanceHandoffHref":"/development-plan/archive#d05-c02-authority-final-acceptance-handoff","isolationRehearsalDossierCandidateHref":"/development-plan/archive#d05-c02-isolation-rehearsal-dossier-candidate","fourLaneReadbackIntakeHref":"/development-plan/archive#d05-c02-four-lane-readback-intake-comparison","fourLaneReadbackDispatchHref":"/development-plan/archive#d05-c02-four-lane-readback-dispatch","currentBaselineEvidenceRebuildHref":"/development-plan/archive#d05-c02-current-baseline-evidence-rebuild","productionDriftAdjudicationHref":"/development-plan/archive#d05-c02-production-drift-adjudication","portalEngineeringTerminalSealVersionFreezeDualEnvironmentReadbackHandoffHref":"/development-plan/archive#portal-engineering-terminal-seal","portalB01B40GlobalInformationArchitectureMobileAccessibilityLinkDownloadFinalConsistencyReadbackHref":"/development-plan/archive#portal-b01-b40-final-consistency-readback","continuousResilienceAnomalyClosureRecurrenceBudgetRegressionCorpusRunbookChangeControlGapBackfillKnowledgeReleasePolicyRecertificationIndependentReadbackHref":"/development-plan/archive#g04-continuous-resilience-anomaly-closure-certificate-recurrence-budget-regression-corpus-runbook-change-control-gap-backfill-knowledge-release-policy-recertification-independent-readback","continuousResiliencePolicyEffectAnomalyEventGovernanceClusterCausalEvidenceGraphOwnerRoutingResponseSlaDuplicateMergeExceptionClockRemediationVerificationIndependentReadbackHref":"/development-plan/archive#g04-continuous-resilience-policy-effect-anomaly-event-governance-cluster-causal-evidence-graph-owner-routing-response-sla-duplicate-merge-exception-clock-remediation-verification-independent-readback","continuousResiliencePolicyEffectObservationCohortBaselineDecisionDriftFalseDenyFalseAllowGuardrailErrorBudgetAutomaticHoldRollbackTriggerIndependentReadbackHref":"/development-plan/archive#g04-continuous-resilience-policy-effect-observation-cohort-baseline-decision-drift-false-deny-false-allow-guardrail-error-budget-automatic-hold-rollback-trigger-independent-readback","continuousResiliencePolicyDistributionTopologyConsumerVersionAcknowledgementPropagationSloVersionSkewIsolationPartialFailureRollbackConfirmationIndependentReadbackHref":"/development-plan/archive#g04-continuous-resilience-policy-distribution-topology-consumer-version-acknowledgement-propagation-slo-version-skew-isolation-partial-failure-rollback-confirmation-independent-readback","continuousResiliencePolicyChangeDiffImpactGraphHistoricalReplayShadowEvaluationReleaseApprovalStagedRolloutRollbackRehearsalIndependentReadbackHref":"/development-plan/archive#g04-continuous-resilience-policy-change-diff-impact-graph-historical-replay-shadow-evaluation-release-approval-staged-rollout-rollback-rehearsal-independent-readback","continuousResilienceEvidenceLineageTrendBudgetRepeatBreachRemediationPolicyRecertificationIndependentReadbackHref":"/development-plan/archive#g04-continuous-resilience-evidence-lineage-trend-budget-repeat-breach-remediation-policy-recertification-independent-readback","continuousResilienceAssuranceCadenceWindowLeaseEvidenceFreshnessMissedWindowRecoveryExceptionWaiverAutomaticHoldEscalationIndependentReadbackHref":"/development-plan/archive#g04-continuous-resilience-assurance-cadence-window-lease-evidence-freshness-missed-window-recovery-exception-waiver-automatic-hold-escalation-independent-readback","continuousResilienceAssuranceReplicationDriftCapacityParityBackupRestoreGameDayFailoverReadinessIndependentReadbackHref":"/development-plan/archive#g04-continuous-resilience-assurance-replication-drift-capacity-parity-backup-restore-game-day-failover-readiness-independent-readback","postFailoverResilienceRebaselinePrimaryBaselineStandbyRebuildReplicationCatchupCredentialEndpointRotationOldPrimaryDispositionIndependentReadbackHref":"/development-plan/archive#g04-post-failover-resilience-rebaseline-primary-baseline-standby-rebuild-replication-catchup-credential-endpoint-rotation-old-primary-disposition-independent-readback","postCutoverStabilizationSessionRebindingCacheWarmupBackgroundJobResumeOldPrimaryQuarantineRollbackWindowClosureIndependentReadbackHref":"/development-plan/archive#g04-post-cutover-stabilization-session-rebinding-cache-warmup-background-job-resume-old-primary-quarantine-rollback-window-closure-independent-readback","disasterRecoveryCutoverConnectionDrainRoutingPropagationProgressiveTrafficWriteProbeAutomaticRollbackSettlementReadbackHref":"/development-plan/archive#g04-disaster-recovery-cutover-connection-drain-routing-propagation-progressive-traffic-write-probe-automatic-rollback-settlement-readback","crossRegionFailoverQualificationRpoRtoAuthorityLeaseSplitBrainProtectionFailbackWindowDrillSettlementReadbackHref":"/development-plan/archive#g04-cross-region-failover-qualification-rpo-rto-authority-lease-split-brain-protection-failback-window-drill-settlement-readback","terminalEventRetentionReplayConsumerRebuildCheckpointCatchupCrossRegionDisasterRecoveryReadbackHref":"/development-plan/archive#g04-terminal-event-retention-replay-consumer-rebuild-checkpoint-catchup-cross-region-disaster-recovery-readback","terminalEventOutboxConsumerCursorLagBudgetRedriveQuarantineSlaEscalationReadbackHref":"/development-plan/archive#g04-terminal-event-outbox-consumer-cursor-lag-budget-redrive-quarantine-sla-escalation-readback","terminalSettlementCertificateLedgerCasCapabilityRetirementQuarantineDispositionReadbackHref":"/development-plan/archive#g04-terminal-settlement-certificate-ledger-cas-capability-retirement-quarantine-disposition-readback","providerResponseSideEffectReconciliationCompensationFinalityReadbackHref":"/development-plan/archive#g04-provider-response-side-effect-reconciliation-compensation-finality-readback","promotionPermitClaimTransactionJournalAmbiguousOutcomeRecoveryReadbackHref":"/development-plan/archive#g04-promotion-permit-claim-transaction-journal-ambiguous-outcome-recovery-readback","oneTimePromotionPermitTrafficShiftExposureBudgetRollbackSettlementReadbackHref":"/development-plan/archive#g04-one-time-promotion-permit-traffic-shift-exposure-budget-rollback-settlement-readback","canaryObservationWindowSloBurnRateAutomaticHoldRollbackReadbackHref":"/development-plan/archive#g04-canary-observation-window-slo-burn-rate-automatic-hold-rollback-readback","recoveryCandidateQualificationControlledPromotionRollbackReadbackHref":"/development-plan/archive#g04-recovery-candidate-qualification-controlled-promotion-rollback-readback","readModelPublicationJournalIntegrityQuarantinePointInTimeRecoveryReadbackHref":"/development-plan/archive#g04-read-model-publication-journal-integrity-quarantine-point-in-time-recovery-readback","readModelPublicationLeaseEventJournalCheckpointCompactionReplayReadbackHref":"/development-plan/archive#g04-read-model-publication-lease-event-journal-checkpoint-compaction-replay-readback","readModelPublicationLeaseRenewalHandoffCrashTakeoverReadbackHref":"/development-plan/archive#g04-read-model-publication-lease-renewal-handoff-crash-takeover-readback","readModelPublicationLeaseFencingOrphanCleanupReadbackHref":"/development-plan/archive#g04-read-model-publication-lease-fencing-orphan-cleanup-readback","readModelAtomicPublicationConsistencyReadbackHref":"/development-plan/archive#g04-read-model-atomic-publication-consistency-readback","readModelConsumerCompatibilityHealthReadbackHref":"/development-plan/archive#g04-read-model-consumer-compatibility-health-readback","closureCertificateDependencyReleaseReadbackHref":"/development-plan/archive#g04-closure-certificate-dependency-release-readback","threeHeadConsistencyRecoveryReadbackHref":"/development-plan/archive#g04-three-head-consistency-recovery-readback","formalCommitFinalityReadbackHref":"/development-plan/archive#g04-formal-commit-finality-readback","gateAuthorityAdjudicationReadbackHref":"/development-plan/archive#g04-gate-authority-adjudication-readback","externalLedgerInclusionReadbackHref":"/development-plan/archive#g04-external-ledger-inclusion-readback","principalAdmissionRoleReceiptReadbackHref":"/development-plan/archive#g04-principal-admission-role-receipt-readback","authorityDecisionReadbackHref":"/development-plan/archive#g04-authority-decision-readback","authorityAdmissionHandoffHref":"/development-plan/archive#g04-authority-admission-handoff","trustRevocationQualificationHref":"/development-plan/archive#g04-trust-revocation-qualification","independentVerificationHref":"/development-plan/archive#g04-independent-cryptographic-readback","receiptCustodyHref":"/development-plan/archive#g04-receipt-custody-preflight","roleDispatchHref":"/development-plan/archive#g04-role-binding-dispatch","rolePreflightHref":"/development-plan/archive#g04-role-binding-preflight","controlPreflightHref":"/development-plan/archive#g05-channel-window-preflight","externalTruthChanged":false,"formalProgressChanged":false,"engineeringDenominatorChanged":false,"newR61Created":false},"gateMatrix":[{"order":1,"id":"G01_PLAN_PUBLISHED","label":"协调计划已发布","phase":"工程准备","authority":"Developer Portal","state":"READY","realCount":"4/4","entry":"四席 Owner 执行包与接收泳道已经存在","exit":"四份确定性空白协调计划可由人和机器读取","stop":"计划、席位顺序或机器合同发生漂移时停止","nextHref":"/development-plan/archive#external-ceremony-coordination-workbench","laneStates":[{"ownerId":"AUTH","owner":"Auth Owner","state":"READY","realCount":"1/1"},{"ownerId":"SECURITY","owner":"Security Owner","state":"READY","realCount":"1/1"},{"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"READY","realCount":"1/1"},{"ownerId":"QA_WITNESS","owner":"QA Witness","state":"READY","realCount":"1/1"}]},{"order":2,"id":"G02_OWNER_INPUTS_PINNED","label":"Owner 公开输入已锁定","phase":"工程准备","authority":"Developer Experience + QA","state":"READY","realCount":"4/4","entry":"四份 Owner 任务包已经生成","exit":"每席五份公开输入均有路径、字节数与 SHA-256","stop":"任一公开输入缺失、跨席或摘要漂移时停止","nextHref":"/development-plan/archive#owner-input-integrity-workbench","laneStates":[{"ownerId":"AUTH","owner":"Auth Owner","state":"READY","realCount":"1/1"},{"ownerId":"SECURITY","owner":"Security Owner","state":"READY","realCount":"1/1"},{"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"READY","realCount":"1/1"},{"ownerId":"QA_WITNESS","owner":"QA Witness","state":"READY","realCount":"1/1"}]},{"order":3,"id":"G03_PRODUCTION_BASELINE_REQUALIFICATION","label":"生产基线重新取证","phase":"生产漂移裁定","authority":"Auth Owner + Security + SRE/DBA + QA 独立见证","state":"STALE","realCount":"0/4","entry":"旧 R01 卷宗与当前 Auth 生产版本出现可证明漂移","exit":"当前主干、生产 Release、OIDC/JWKS、迁移与隔离演练形成新摘要并独立读回","stop":"任何版本、算法、JWKS、路由、迁移或摘要未重新绑定时停止","nextHref":"/development-plan/archive#d05-c02-production-drift-adjudication","laneStates":[{"ownerId":"AUTH","owner":"Auth Owner","state":"STALE","realCount":"0/1"},{"ownerId":"SECURITY","owner":"Security Owner","state":"STALE","realCount":"0/1"},{"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"STALE","realCount":"0/1"},{"ownerId":"QA_WITNESS","owner":"QA Witness","state":"STALE","realCount":"0/1"}]},{"order":4,"id":"G04_EXTERNAL_ROLE_BINDING","label":"六角色真实绑定","phase":"外部组织控制","authority":"组织负责人","state":"HELD","realCount":"0/24","entry":"四席协调计划已下载到组织批准的外部控制域","exit":"每席六角色齐全且职责分离规则全部通过","stop":"任一角色缺失、冲突或由 Portal/AI 代理时停止","nextHref":"/development-plan/archive#g04-role-binding-preflight","laneStates":[{"ownerId":"AUTH","owner":"Auth Owner","state":"HELD","realCount":"0/6"},{"ownerId":"SECURITY","owner":"Security Owner","state":"HELD","realCount":"0/6"},{"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"HELD","realCount":"0/6"},{"ownerId":"QA_WITNESS","owner":"QA Witness","state":"HELD","realCount":"0/6"}]},{"order":5,"id":"G05_CHANNEL_WINDOW_APPROVAL","label":"通道与窗口批准","phase":"外部组织控制","authority":"发送方 + 接收方 + 独立见证","state":"HELD","realCount":"0/8","entry":"本席六角色真实绑定并通过职责分离","exit":"每席批准一个带外通道和一个不超过二十四小时的窗口","stop":"通道未批准、窗口无见证、过期或超过二十四小时时停止","nextHref":"/development-plan/archive#g05-channel-window-preflight","laneStates":[{"ownerId":"AUTH","owner":"Auth Owner","state":"HELD","realCount":"0/2"},{"ownerId":"SECURITY","owner":"Security Owner","state":"HELD","realCount":"0/2"},{"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"HELD","realCount":"0/2"},{"ownerId":"QA_WITNESS","owner":"QA Witness","state":"HELD","realCount":"0/2"}]},{"order":6,"id":"G06_OWNER_EXECUTION_DISPATCH","label":"Owner 执行与派送","phase":"外部执行","authority":"四位 Owner 发送方","state":"HELD","realCount":"0/4","entry":"G04 与 G05 均形成独立可回读记录","exit":"每席完成 P02、P04 并通过批准通道派送三件套","stop":"不得跳过角色与控制绑定直接运行或派送","nextHref":"/d05-auth-owner-local-preflight","laneStates":[{"ownerId":"AUTH","owner":"Auth Owner","state":"HELD","realCount":"0/1"},{"ownerId":"SECURITY","owner":"Security Owner","state":"HELD","realCount":"0/1"},{"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"HELD","realCount":"0/1"},{"ownerId":"QA_WITNESS","owner":"QA Witness","state":"HELD","realCount":"0/1"}]},{"order":7,"id":"G07_RECEIVE_REHASH_QUARANTINE","label":"到达、重算与隔离","phase":"外部接收","authority":"真实接收方 + 隔离管理员 + 独立见证","state":"HELD","realCount":"0/4","entry":"本席三件套在批准窗口内真实到达","exit":"P05 摘要匹配，四席齐备后 P03 隔离组装通过","stop":"任一到达引用、摘要、席位或隔离条件不满足时停止","nextHref":"/d05-auth-receiver-intake-rehash","laneStates":[{"ownerId":"AUTH","owner":"Auth Owner","state":"HELD","realCount":"0/1"},{"ownerId":"SECURITY","owner":"Security Owner","state":"HELD","realCount":"0/1"},{"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"HELD","realCount":"0/1"},{"ownerId":"QA_WITNESS","owner":"QA Witness","state":"HELD","realCount":"0/1"}]},{"order":8,"id":"G08_AUTHORITY_BALLOT","label":"Authority 与 Ballot","phase":"正式验收","authority":"绑定裁决方 + Ballot 接纳方","state":"DENIED","realCount":"0/4","entry":"四席 P05/P03 证据均可独立回读","exit":"Authority Binding 与 Ballot 接纳分别形成真实外部证据","stop":"不得由 Portal、AI、Fixture 或未授权角色代签、代绑、代投","nextHref":"/d05-auth-mainline-convergence-admission","laneStates":[{"ownerId":"AUTH","owner":"Auth Owner","state":"DENIED","realCount":"0/1"},{"ownerId":"SECURITY","owner":"Security Owner","state":"DENIED","realCount":"0/1"},{"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"DENIED","realCount":"0/1"},{"ownerId":"QA_WITNESS","owner":"QA Witness","state":"DENIED","realCount":"0/1"}]}],"engineeringDeliverySchedule":{"id":"DEVELOPER-THREE-DAY-DELIVERY-v1","state":"DAY_3_COMPLETE_ENGINEERING_TERMINAL_SEALED_FORMAL_4_OF_36_UNCHANGED","totalDeliveries":32,"acceptedDeliveries":32,"remainingDeliveries":0,"currentDay":3,"currentDeliveryOrdinal":32,"currentSubslice":"D05-C02-B42","formalAccepted":4,"formalTotal":36,"formalProgressChanged":false,"dailyPlan":[{"day":1,"planned":11,"accepted":11,"remaining":0},{"day":2,"planned":10,"accepted":10,"remaining":0},{"day":3,"planned":11,"accepted":11,"remaining":0}],"acceptanceSequence":["TARGETED_TESTS","GLOBAL_TRUTH","BUILD","DEPLOY","ONLINE_READBACK"]},"authorityFinalAcceptanceHandoff":{"id":"D05-C02-F05-06-AUTHORITY-FINAL-ACCEPTANCE-HANDOFF-v1","schemaVersion":"developer.reits.tech/auth-authority-final-acceptance-handoff/v1","state":"PLAN_1_OF_1_STEPS_8_OF_8_READY_CANDIDATE_0_OF_1_REHASHES_0_OF_4_BINDINGS_0_OF_4_DOSSIER_0_OF_1_BALLOTS_0_OF_4_PACKAGE_0_OF_1_G03_STALE","handoffId":"D05-C02-F05-06-AUTHORITY-FINAL-ACCEPTANCE-HANDOFF","rehearsalId":"D05-C02-F05-05-ISOLATION-REHEARSAL-DOSSIER-CANDIDATE","baselineId":"D05-C02-F05-02-CURRENT-BASELINE-EVIDENCE-PACK","revision":"3967686c7e7fc0e4ccf738ca63139a41b5057a82","serviceIdentity":"reits-auth / 127.0.0.1:8095","handoffPlanReady":1,"handoffPlanRequired":1,"takeoverStepsSpecified":8,"takeoverStepsRequired":8,"localCandidatesObserved":0,"localCandidatesRequired":1,"authorityRehashesObserved":0,"authorityRehashesRequired":4,"authorityBindingsObserved":0,"authorityBindingsRequired":4,"officialDossiersObserved":0,"officialDossiersRequired":1,"ballotsAccepted":0,"ballotsRequired":4,"acceptancePackagesObserved":0,"acceptancePackagesRequired":1,"productionMutationsObserved":0,"validatorRulesRequired":58,"browserValidatorRules":58,"nodeValidatorRules":58,"validatorParity":true,"soloTeamProvisionalApproval":{"approvalId":"D05-C02-SOLO-TEAM-PROVISIONAL-APPROVAL-20260810","state":"SOLO_TEAM_PROVISIONALLY_APPROVED_FOR_DEVELOPMENT","scope":"DEVELOPMENT_ONLY_NO_FORMAL_ACCEPTANCE_NO_PRODUCTION_AUTHORITY","aiReviewLanesApproved":4,"aiReviewLanesRequired":4,"developmentAccepted":5,"developmentCurrent":6,"developmentTotal":36,"developmentRemainingIncludingCurrent":31,"formalAccepted":4,"formalCurrent":5,"formalTotal":36,"externalRosterAssigned":0,"externalRosterRequired":4,"ratificationRequired":true,"productionAuthorityGranted":false,"artifactHref":"/handoff/auth-s08-r02-c02/solo-team-provisional-approval.json","reviewLanes":[{"id":"ROOT_ARCHITECT","label":"全局架构 / Auth AI 审查席","verdict":"CONDITIONAL_APPROVE","independence":"AI_REVIEW_ONLY"},{"id":"SECURITY_AI","label":"安全 AI 审查席","verdict":"CONDITIONAL_APPROVE","independence":"AI_REVIEW_ONLY"},{"id":"SRE_DBA_AI","label":"SRE / DBA AI 审查席","verdict":"CONDITIONAL_APPROVE","independence":"AI_REVIEW_ONLY"},{"id":"QA_AI","label":"QA AI 审查席","verdict":"CONDITIONAL_APPROVE","independence":"AI_REVIEW_ONLY"}],"conditions":["AI 审查只允许继续文档、UI、测试与 Portal 部署，不构成组织 Authority","不得生成 Authority Binding、Ballot、正式验收包或任何 Auth 生产写入","Auth 运行时合同恢复 200、provenance 完成签名后方可申请正式复核","出现真人协作者、源码基线漂移或任何生产授权动作前必须重新审查","EC2 根盘达到 80% 前必须先完成受控 dry-run 清理审核"]},"closeoutLaunch":{"state":"READY_FOR_EXTERNAL_ROSTER","firstGate":"ASSIGN_FOUR_INDEPENDENT_AUTHORITIES","rosterAssigned":0,"rosterRequired":4,"activeMinutesTarget":90,"externalWaitingExcluded":true,"templateHref":"/handoff/auth-s08-r02-c02/authority-closeout-launch.template.json","ownerPacketRegistryHref":"/api/d05-auth-owner-execution-packets","authorityRoster":[{"sequence":1,"id":"AUTH_OWNER","role":"Auth Owner Authority","subjectRealm":"realm:auth-owner","controlDomain":"control:auth-owner","state":"UNASSIGNED"},{"sequence":2,"id":"SECURITY","role":"Security Authority","subjectRealm":"realm:security","controlDomain":"control:security","state":"UNASSIGNED"},{"sequence":3,"id":"SRE_DBA","role":"SRE / DBA Authority","subjectRealm":"realm:sre-dba","controlDomain":"control:sre-dba","state":"UNASSIGNED"},{"sequence":4,"id":"QA_WITNESS","role":"QA Independent Witness","subjectRealm":"realm:qa-witness","controlDomain":"control:qa-witness","state":"UNASSIGNED"}],"phases":[{"sequence":1,"id":"ROSTER_AND_WINDOW","minutes":15,"owner":"组织负责人","exit":"四席、主体域、控制域、批准通道与执行窗口全部确认"},{"sequence":2,"id":"READBACK_AND_CANDIDATE","minutes":30,"owner":"四席执行人 + 隔离操作员 + 独立见证","exit":"真实读回 4/4、接收重算 4/4、六场景 6/6、本地候选 1/1"},{"sequence":3,"id":"AUTHORITY_REHASH_AND_BIND","minutes":20,"owner":"四席 Authority","exit":"独立重算 4/4、Authority Binding 4/4、无跨席碰撞"},{"sequence":4,"id":"DOSSIER_AND_BALLOTS","minutes":15,"owner":"外部卷宗铸造方 + 四名独立 Ballot 投票人","exit":"正式卷宗 1/1、Ballot 4/4、裁定引用 1/1"},{"sequence":5,"id":"PACKAGE_AND_VERIFY","minutes":10,"owner":"验收组装员 + QA Witness","exit":"验收包 1/1、浏览器与 Node 均为 PASS 58/58"}],"stopConditions":["四席任一缺失、同一人代填多席或同一账号复用时立即停止","主体域、控制域、KeyRef、IdentityRef 或 Ballot 投票人发生跨席碰撞时立即停止","候选摘要、接收方重算摘要、四席独立摘要任一不一致时立即停止","批准通道或执行窗口无法由组织负责人证明时立即停止","任何文件包含私钥、seed、token、password、原始秘密或未经批准的签名材料时立即停止","任何工具试图上传外部证据、调用生产接口或提前推进正式刀数时立即停止"]},"authoritySeats":[{"sequence":1,"id":"AUTH_OWNER","label":"Auth Owner Authority","subjectRealm":"realm:auth-owner","controlDomain":"control:auth-owner","state":"WAITING_CANDIDATE"},{"sequence":2,"id":"SECURITY","label":"Security Authority","subjectRealm":"realm:security","controlDomain":"control:security","state":"WAITING_CANDIDATE"},{"sequence":3,"id":"SRE_DBA","label":"SRE / DBA Authority","subjectRealm":"realm:sre-dba","controlDomain":"control:sre-dba","state":"WAITING_CANDIDATE"},{"sequence":4,"id":"QA_WITNESS","label":"QA Independent Witness","subjectRealm":"realm:qa-witness","controlDomain":"control:qa-witness","state":"WAITING_CANDIDATE"}],"takeoverFlow":[{"sequence":1,"id":"IMPORT_LOCAL_CANDIDATE","label":"导入 F05-05 本地候选与六场景回执","state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"FREEZE_CANDIDATE_CUSTODY","label":"冻结候选正文、摘要与保全引用","state":"BLOCKED"},{"sequence":3,"id":"RUN_FOUR_AUTHORITY_REHASHES","label":"四席分别独立重算候选摘要","state":"BLOCKED"},{"sequence":4,"id":"BIND_FOUR_AUTHORITIES","label":"四席分别产生 Authority Binding 回执","state":"BLOCKED"},{"sequence":5,"id":"MINT_OFFICIAL_DOSSIER_EXTERNAL","label":"外部 Authority 铸造正式卷宗摘要","state":"BLOCKED"},{"sequence":6,"id":"RUN_BALLOT_PREFLIGHT","label":"校验四个 Ballot 席位与职责分离","state":"BLOCKED"},{"sequence":7,"id":"COLLECT_FOUR_BALLOTS","label":"独立收件并裁定四份 Ballot","state":"BLOCKED"},{"sequence":8,"id":"ASSEMBLE_D05_ACCEPTANCE_PACKAGE","label":"组装 D05 正式验收提交包","state":"BLOCKED"}],"evidenceHeads":[{"id":"G03_READBACK","label":"G03 当前基线独立读回","observed":0,"required":1,"state":"STALE"},{"id":"REHEARSAL_RECEIPT","label":"F05-05 六场景隔离演练回执","observed":0,"required":1,"state":"WAITING"},{"id":"OFFICIAL_DOSSIER","label":"外部 Authority 正式卷宗摘要","observed":0,"required":1,"state":"HELD"},{"id":"BALLOT_ADJUDICATION","label":"四票独立裁定引用","observed":0,"required":1,"state":"HELD"},{"id":"D05_ACCEPTANCE_RECEIPT","label":"D05 正式验收回执","observed":0,"required":1,"state":"NOT_ISSUED"}],"tools":[{"id":"TP0","label":"单人团队开发临时批准回执","format":"JSON","href":"/handoff/auth-s08-r02-c02/solo-team-provisional-approval.json"},{"id":"T00","label":"四席收尾启动合同","format":"JSON","href":"/handoff/auth-s08-r02-c02/authority-closeout-launch.template.json"},{"id":"T01","label":"Authority 最终交接空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/authority-final-acceptance-handoff.template.json"},{"id":"T02","label":"F05-06 工具与真值清单","format":"JSON","href":"/handoff/auth-s08-r02-c02/authority-final-acceptance-handoff.manifest.json"},{"id":"T03","label":"浏览器 58 类同构验真台","format":"HTML","href":"/handoff/auth-s08-r02-c02/authority-final-acceptance-handoff.offline.html"},{"id":"T04","label":"Node.js 58 类权威验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/authority-final-acceptance-handoff.mjs"}],"denialCodes":["AH01_ROOT_SHAPE","AH02_SCHEMA_VERSION","AH03_HANDOFF_ID","AH04_CANDIDATE_SHAPE","AH05_CANDIDATE_STATE","AH06_REHEARSAL_REFERENCE","AH07_CANDIDATE_DIGEST","AH08_CANDIDATE_PAYLOAD_REFERENCE","AH09_RECEIVER_REHASH","AH10_PARTIAL_CANDIDATE","AH11_BASELINE_SHAPE","AH12_BASELINE_ID","AH13_AUTH_REVISION","AH14_SERVICE_IDENTITY","AH15_LOOPBACK_ADDRESS","AH16_LOOPBACK_PORT","AH17_AUTHORITY_SEAT_COUNT","AH18_AUTHORITY_SEAT_SHAPE","AH19_AUTHORITY_SEQUENCE","AH20_AUTHORITY_ID","AH21_AUTHORITY_LABEL","AH22_SUBJECT_REALM","AH23_SUBJECT_REALM_SEPARATION","AH24_CONTROL_DOMAIN","AH25_CONTROL_DOMAIN_SEPARATION","AH26_AUTHORITY_STATE","AH27_PRINCIPAL_REFERENCE","AH28_AUTHORITY_REHASH","AH29_BINDING_RECEIPT","AH30_PARTIAL_AUTHORITY_SET","AH31_FLOW_COUNT","AH32_FLOW_SHAPE","AH33_FLOW_SEQUENCE","AH34_FLOW_ID","AH35_FLOW_LABEL","AH36_FLOW_STATE","AH37_OFFICIAL_DOSSIER_SHAPE","AH38_OFFICIAL_DOSSIER_STATE","AH39_CANONICAL_PAYLOAD","AH40_OFFICIAL_DIGEST","AH41_OFFICIAL_DIGEST_MISMATCH","AH42_INDEPENDENT_REHASH_COUNT","AH43_INDEPENDENT_REHASH_MISMATCH","AH44_AUTHORITY_QUORUM","AH45_AUTHORITY_BINDING_REFS","AH46_MINTED_AT","AH47_BALLOT_SHAPE","AH48_BALLOT_STATE","AH49_VOTER_COUNT","AH50_VOTER_SEPARATION","AH51_BALLOT_RECEIPT_COUNT","AH52_BALLOT_ADJUDICATION","AH53_ACCEPTANCE_PACKAGE_SHAPE","AH54_ACCEPTANCE_PACKAGE_STATE","AH55_CAPABILITY_BOUNDARY","AH56_FORMAL_PROGRESS_CHANGED","AH57_PRINCIPAL_SEPARATION","AH58_DOSSIER_BASELINE_BINDING"],"boundaries":{"localFilesOnly":true,"portalAcceptsUploads":false,"portalStoresExternalEvidence":false,"portalRunsProductionCommands":false,"portalMintsOfficialDossierDigest":false,"portalBindsAuthority":false,"portalAcceptsBallots":false,"portalSubmitsFormalAcceptance":false,"g03Requalified":false,"formalProgressChanged":false},"resultBoundary":"HANDOFF_PLAN_READY_EXTERNAL_AUTHORITY_REQUIRED_G03_STALE_FORMAL_4_OF_36"},"isolationRehearsalDossierCandidate":{"id":"D05-C02-F05-05-ISOLATION-REHEARSAL-DOSSIER-CANDIDATE-v1","schemaVersion":"developer.reits.tech/auth-isolation-rehearsal-dossier-candidate/v1","state":"PLAN_1_OF_1_SCENARIOS_6_OF_6_READY_MATCHED_INPUTS_0_OF_4_EXECUTED_0_OF_6_REHEARSAL_0_OF_1_CANDIDATE_0_OF_1_G03_STALE","rehearsalId":"D05-C02-F05-05-ISOLATION-REHEARSAL-DOSSIER-CANDIDATE","intakeId":"D05-C02-F05-04-FOUR-LANE-READBACK-INTAKE","baselineId":"D05-C02-F05-02-CURRENT-BASELINE-EVIDENCE-PACK","revision":"3967686c7e7fc0e4ccf738ca63139a41b5057a82","serviceIdentity":"reits-auth / 127.0.0.1:8095","rehearsalPlanReady":1,"rehearsalPlanRequired":1,"scenariosSpecified":6,"scenariosRequired":6,"matchedLaneInputsObserved":0,"matchedLaneInputsRequired":4,"scenariosExecuted":0,"scenariosExecutionRequired":6,"isolatedRehearsalsObserved":0,"isolatedRehearsalsRequired":1,"newDossierCandidatesObserved":0,"newDossierCandidatesRequired":1,"authorityBindingsObserved":0,"authorityBindingsRequired":4,"productionMutationsObserved":0,"scenarios":[{"sequence":1,"id":"Q01_MISSING_LANE","injection":"移除一个席位到达引用","expectedDisposition":"QUARANTINE","state":"NOT_EXECUTED"},{"sequence":2,"id":"Q02_DIGEST_MISMATCH","injection":"替换一个接收方重算摘要","expectedDisposition":"QUARANTINE","state":"NOT_EXECUTED"},{"sequence":3,"id":"Q03_SUBJECT_COLLISION","injection":"复用两个席位的主体域","expectedDisposition":"QUARANTINE","state":"NOT_EXECUTED"},{"sequence":4,"id":"Q04_CONTROL_DOMAIN_COLLISION","injection":"复用两个席位的控制域","expectedDisposition":"QUARANTINE","state":"NOT_EXECUTED"},{"sequence":5,"id":"Q05_STALE_BASELINE","injection":"把输入绑定到旧 Auth revision","expectedDisposition":"QUARANTINE","state":"NOT_EXECUTED"},{"sequence":6,"id":"Q06_CLEAN_MATCHED_SET","injection":"使用四席完整且三方摘要一致的输入","expectedDisposition":"CANDIDATE_ELIGIBLE","state":"NOT_EXECUTED"}],"executionFlow":[{"sequence":1,"id":"IMPORT_MATCHED_SET","label":"导入 F05-04 四席匹配集合","state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"FREEZE_INPUT_HEAD","label":"冻结四席引用、结果摘要与比对头","state":"BLOCKED"},{"sequence":3,"id":"RUN_FIVE_DENIALS","label":"逐项注入五类异常并确认全部隔离","state":"BLOCKED"},{"sequence":4,"id":"RUN_CLEAN_PATH","label":"执行完整匹配集合的干净路径","state":"BLOCKED"},{"sequence":5,"id":"COMPUTE_LOCAL_CANDIDATE","label":"本地计算候选正文及双重 SHA-256","state":"BLOCKED"},{"sequence":6,"id":"HANDOFF_TO_AUTHORITY","label":"将候选交给 Portal 外独立 Authority","state":"BLOCKED"}],"separationRules":[{"id":"SR01","left":"隔离操作员","right":"独立见证人","rule":"主体引用必须不同"},{"id":"SR02","left":"本地候选计算","right":"Authority Binding","rule":"计算不构成批准"},{"id":"SR03","left":"Authority Binding","right":"Ballot 验收","rule":"必须由不同外部权威完成"},{"id":"SR04","left":"Developer Portal","right":"Auth 生产系统","rule":"零写入、零命令、零证据保存"}],"candidateLedger":[{"id":"INPUT_HEAD","label":"F05-04 四席匹配头","observed":0,"required":1,"state":"WAITING"},{"id":"DENIAL_MATRIX","label":"五类异常隔离回执","observed":0,"required":5,"state":"WAITING"},{"id":"CLEAN_PATH","label":"干净路径回执","observed":0,"required":1,"state":"WAITING"},{"id":"CANDIDATE_DIGEST","label":"本地候选摘要及独立重算","observed":0,"required":1,"state":"WAITING"},{"id":"AUTHORITY_BINDING","label":"外部 Authority 四席绑定","observed":0,"required":4,"state":"HELD"}],"tools":[{"id":"T01","label":"隔离演练与候选摘要空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/isolation-rehearsal-dossier-candidate.template.json"},{"id":"T02","label":"F05-05 工具与真值清单","format":"JSON","href":"/handoff/auth-s08-r02-c02/isolation-rehearsal-dossier-candidate.manifest.json"},{"id":"T03","label":"浏览器本地演练工作台","format":"HTML","href":"/handoff/auth-s08-r02-c02/isolation-rehearsal-dossier-candidate.offline.html"},{"id":"T04","label":"Node.js 失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/isolation-rehearsal-dossier-candidate.mjs"}],"denialCodes":["QR01_ROOT_SHAPE","QR02_SCHEMA_VERSION","QR03_REHEARSAL_ID","QR04_INTAKE_ID","QR05_BASELINE_ID","QR06_AUTH_REVISION","QR07_SERVICE_IDENTITY","QR08_LOOPBACK_ADDRESS","QR09_LOOPBACK_PORT","QR10_INPUT_SET_SHAPE","QR11_INPUT_SET_STATE","QR12_LANE_REFERENCE_COUNT","QR13_RESULT_DIGEST_COUNT","QR14_PARTIAL_INPUT_SET","QR15_LANE_REFERENCE_FORMAT","QR16_RESULT_DIGEST_FORMAT","QR17_COMPARISON_REFERENCE","QR18_MATCHED_FLAG","QR19_SCENARIO_COUNT","QR20_SCENARIO_SEQUENCE","QR21_SCENARIO_ID","QR22_INJECTION_DESCRIPTION","QR23_EXPECTED_DISPOSITION","QR24_OBSERVED_DISPOSITION","QR25_SCENARIO_RECEIPT","QR26_EXECUTION_SHAPE","QR27_EXECUTION_STATE","QR28_EMPTY_EXECUTION_CONSISTENCY","QR29_EXECUTION_WINDOW","QR30_OPERATOR_REFERENCE","QR31_OPERATOR_WITNESS_SEPARATION","QR32_EXECUTED_COUNT","QR33_QUARANTINE_COUNT","QR34_CANDIDATE_ELIGIBLE_COUNT","QR35_PRODUCTION_MUTATION","QR36_CANDIDATE_SHAPE","QR37_CANDIDATE_STATE","QR38_CANONICAL_PAYLOAD","QR39_CANDIDATE_DIGEST","QR40_CANDIDATE_DIGEST_MISMATCH","QR41_RECEIVER_DIGEST_MISMATCH","QR42_OFFICIAL_DIGEST_FORBIDDEN","QR43_AUTHORITY_PREBOUND","QR44_BALLOT_PREBOUND","QR45_BOUNDARY_SHAPE","QR46_CAPABILITY_BOUNDARY","QR47_GATE_ADVANCED","QR48_FORMAL_PROGRESS_CHANGED"],"boundaries":{"localFilesOnly":true,"portalAcceptsUploads":false,"portalStoresExternalEvidence":false,"portalRunsProductionCommands":false,"portalMintsOfficialDossierDigest":false,"portalBindsAuthority":false,"portalAcceptsBallots":false,"g03Requalified":false,"g04Unblocked":false,"g05Unblocked":false,"formalProgressChanged":false},"resultBoundary":"REHEARSAL_PLAN_READY_EXTERNAL_MATCHED_INPUTS_REQUIRED_G03_STALE_FORMAL_4_OF_36"},"fourLaneReadbackIntake":{"id":"D05-C02-F05-04-FOUR-LANE-READBACK-INTAKE-v1","schemaVersion":"developer.reits.tech/auth-four-lane-readback-intake/v1","state":"SLOTS_4_OF_4_READY_ARRIVALS_0_OF_4_TASK_RESULTS_0_OF_8_REHASHES_0_OF_4_COMPARISON_0_OF_1_G03_STALE","intakeId":"D05-C02-F05-04-FOUR-LANE-READBACK-INTAKE","dispatchId":"D05-C02-F05-03-FOUR-LANE-READBACK-DISPATCH","baselineId":"D05-C02-F05-02-CURRENT-BASELINE-EVIDENCE-PACK","revision":"3967686c7e7fc0e4ccf738ca63139a41b5057a82","serviceIdentity":"reits-auth / 127.0.0.1:8095","slotsReady":4,"slotsRequired":4,"arrivalsObserved":0,"arrivalsRequired":4,"taskResultsObserved":0,"taskResultsRequired":8,"receiverRehashesObserved":0,"receiverRehashesRequired":4,"crossLaneComparisonsObserved":0,"crossLaneComparisonsRequired":1,"authorityVerified":0,"authorityRequired":4,"externalRunsObserved":0,"externalRunsRequired":4,"isolatedRehearsalsObserved":0,"isolatedRehearsalsRequired":1,"newDossierDigestsObserved":0,"newDossierDigestsRequired":1,"lanes":[{"id":"AUTH","sequence":1,"owner":"Auth Owner","subjectRealm":"auth-owner-realm","controlDomain":"auth-source-control","taskIds":["AUTH_SOURCE_TEST","AUTH_RELEASE_TRIHEAD"],"arrivalState":"NOT_RECEIVED","readbackState":"NOT_EXECUTED","digestState":"EMPTY"},{"id":"SECURITY","sequence":2,"owner":"Security Owner","subjectRealm":"security-owner-realm","controlDomain":"security-verification-control","taskIds":["SECURITY_TOKEN_ALGORITHM_SEPARATION","SECURITY_JWKS_ENDPOINT_NEGATIVE"],"arrivalState":"NOT_RECEIVED","readbackState":"NOT_EXECUTED","digestState":"EMPTY"},{"id":"SRE_DBA","sequence":3,"owner":"SRE / DBA Owner","subjectRealm":"sre-dba-owner-realm","controlDomain":"runtime-operations-control","taskIds":["SRE_RUNTIME_IDENTITY","SRE_COMPATIBILITY_REHEARSAL_SLOT"],"arrivalState":"NOT_RECEIVED","readbackState":"NOT_EXECUTED","digestState":"EMPTY"},{"id":"QA_WITNESS","sequence":4,"owner":"QA Witness","subjectRealm":"qa-witness-realm","controlDomain":"independent-qa-control","taskIds":["QA_SIX_LAYER_RECAPTURE","QA_CROSS_LANE_DIGEST_COMPARISON"],"arrivalState":"NOT_RECEIVED","readbackState":"NOT_EXECUTED","digestState":"EMPTY"}],"intakeFlow":[{"sequence":1,"id":"REGISTER","label":"登记到达时间、传输引用与不透明主体引用","state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"NORMALIZE","label":"按席位合同规范化两个任务结果","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"REHASH","label":"由接收方独立重算结果内容地址","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"COMPARE","label":"比较分发、声明与重算三类摘要","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"QUARANTINE_OR_ADMIT","label":"任一不符隔离；全组匹配后等待 Authority","state":"BLOCKED"}],"comparisonColumns":[{"id":"DISPATCHED_PACKET","label":"分发任务包摘要","owner":"发送侧保全"},{"id":"DECLARED_RESULT","label":"外部席位声明摘要","owner":"席位执行者"},{"id":"RECEIVER_RECOMPUTED","label":"接收方独立重算摘要","owner":"独立接收方"}],"prohibitedActions":["PORTAL_UPLOAD_INTAKE","PORTAL_EVIDENCE_STORAGE","PORTAL_OWNER_SIGNATURE","PORTAL_AUTHORITY_BINDING","PORTAL_PRODUCTION_WRITE","PORTAL_EXTERNAL_EXECUTION","PORTAL_DOSSIER_DIGEST_MINT","PORTAL_G03_ADVANCE","CROSS_LANE_SUBJECT_REUSE","CROSS_LANE_CONTROL_REUSE"],"tools":[{"id":"T01","label":"Auth 到达登记模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/readback-arrival-auth.template.json"},{"id":"T02","label":"Security 到达登记模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/readback-arrival-security.template.json"},{"id":"T03","label":"SRE / DBA 到达登记模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/readback-arrival-sre-dba.template.json"},{"id":"T04","label":"QA Witness 到达登记模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/readback-arrival-qa-witness.template.json"},{"id":"T05","label":"四席到达登记清单","format":"JSON","href":"/handoff/auth-s08-r02-c02/four-lane-readback-intake.manifest.json"},{"id":"T06","label":"浏览器本地到达比对台","format":"HTML","href":"/handoff/auth-s08-r02-c02/four-lane-readback-intake.offline.html"},{"id":"T07","label":"Node.js 失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/four-lane-readback-intake.mjs"}],"denialCodes":["IN01_ENVELOPE_SHAPE","IN02_SCHEMA_VERSION","IN03_INTAKE_ID","IN04_DISPATCH_ID","IN05_BASELINE_ID","IN06_AUTH_REVISION","IN07_SERVICE_IDENTITY","IN08_LANE_ID","IN09_LANE_SEQUENCE","IN10_OWNER_ROLE","IN11_SUBJECT_REALM","IN12_CONTROL_DOMAIN","IN13_TASK_SET","IN14_ARRIVAL_STATE","IN15_EMPTY_SLOT_INCONSISTENT","IN16_RECEIVED_AT","IN17_TRANSPORT_REF","IN18_SENDER_SUBJECT_REF","IN19_RECEIVER_SUBJECT_REF","IN20_READBACK_STATE","IN21_TASK_RESULT_STATE","IN22_TASK_EVIDENCE_DIGEST","IN23_DECLARED_RESULT_DIGEST","IN24_RECOMPUTED_DIGEST","IN25_DIGEST_MISMATCH","IN26_AUTHORITY_PREVERIFIED","IN27_SECRET_MATERIAL","IN28_PRIVATE_IDENTITY","IN29_PORTAL_UPLOAD_CAPABILITY","IN30_PORTAL_STORAGE_CAPABILITY","IN31_PRODUCTION_MUTATION","IN32_G03_ADVANCED","IN33_FORMAL_PROGRESS_CHANGED","IN34_ENVELOPE_COUNT","IN35_LANE_ORDER","IN36_DUPLICATE_LANE","IN37_SUBJECT_COLLISION","IN38_CONTROL_COLLISION","IN39_TRANSPORT_COLLISION_OR_PARTIAL_SET","IN40_SET_NOT_FAIL_CLOSED"],"boundaries":{"portalAcceptsUploads":false,"portalStoresExternalEvidence":false,"portalAcceptsOwnerSignatures":false,"portalVerifiesAuthority":false,"portalRunsProductionCommands":false,"portalMintsNewDossierDigest":false,"g03Requalified":false,"g04Unblocked":false,"g05Unblocked":false,"formalProgressChanged":false},"resultBoundary":"INTAKE_SLOTS_READY_EXTERNAL_ARRIVALS_REQUIRED_G03_STALE_FORMAL_4_OF_36"},"fourLaneReadbackDispatch":{"id":"D05-C02-F05-03-FOUR-LANE-READBACK-DISPATCH-v1","schemaVersion":"developer.reits.tech/auth-four-lane-readback-dispatch/v1","state":"PACKETS_4_OF_4_READY_EXTERNAL_RUNS_0_OF_4_REHEARSAL_0_OF_1_DIGEST_0_OF_1_G03_STALE","dispatchId":"D05-C02-F05-03-FOUR-LANE-READBACK-DISPATCH","baselineId":"D05-C02-F05-02-CURRENT-BASELINE-EVIDENCE-PACK","revision":"3967686c7e7fc0e4ccf738ca63139a41b5057a82","serviceIdentity":"reits-auth / 127.0.0.1:8095","packetsReady":4,"packetsRequired":4,"externalRunsObserved":0,"externalRunsRequired":4,"isolatedRehearsalsObserved":0,"isolatedRehearsalsRequired":1,"newDossierDigestsObserved":0,"newDossierDigestsRequired":1,"ownerSignaturesObserved":0,"ownerSignaturesRequired":4,"lanes":[{"id":"AUTH","sequence":1,"owner":"Auth Owner","subjectRealm":"auth-owner-realm","controlDomain":"auth-source-control","taskIds":["AUTH_SOURCE_TEST","AUTH_RELEASE_TRIHEAD"],"focus":"源码测试与主干 / Release / 进程三头一致","state":"READY_NOT_DISPATCHED"},{"id":"SECURITY","sequence":2,"owner":"Security Owner","subjectRealm":"security-owner-realm","controlDomain":"security-verification-control","taskIds":["SECURITY_TOKEN_ALGORITHM_SEPARATION","SECURITY_JWKS_ENDPOINT_NEGATIVE"],"focus":"Token 算法分轨、JWKS、公开端点与负向响应","state":"READY_NOT_DISPATCHED"},{"id":"SRE_DBA","sequence":3,"owner":"SRE / DBA Owner","subjectRealm":"sre-dba-owner-realm","controlDomain":"runtime-operations-control","taskIds":["SRE_RUNTIME_IDENTITY","SRE_COMPATIBILITY_REHEARSAL_SLOT"],"focus":"systemd、8095、依赖、兼容运行时与隔离演练槽","state":"READY_NOT_DISPATCHED"},{"id":"QA_WITNESS","sequence":4,"owner":"QA Witness","subjectRealm":"qa-witness-realm","controlDomain":"independent-qa-control","taskIds":["QA_SIX_LAYER_RECAPTURE","QA_CROSS_LANE_DIGEST_COMPARISON"],"focus":"六层独立重采、8081 防混淆与跨席摘要比较","state":"READY_NOT_DISPATCHED"}],"dispatchFlow":[{"sequence":1,"id":"VERIFY_SET","label":"离线验真四包完整性、顺序和职责隔离","state":"READY"},{"sequence":2,"id":"TRANSFER_OUT_OF_BAND","label":"由组织负责人经批准带外通道逐席分发","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"RUN_IN_ISOLATED_DOMAINS","label":"四席在互不共享的主体域与控制域执行","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"COMPARE_CONTENT_ADDRESSES","label":"QA 比较四席内容地址并拒绝碰撞","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"REHEARSE_AND_MINT","label":"隔离演练后由外部权威生成新卷宗摘要","state":"BLOCKED"}],"prohibitedActions":["PORTAL_EXTERNAL_DISPATCH","PORTAL_UPLOAD_INTAKE","PORTAL_OWNER_SIGNATURE","PORTAL_PRODUCTION_WRITE","PORTAL_REHEARSAL_EXECUTION","PORTAL_DOSSIER_DIGEST_MINT","PORTAL_G03_ADVANCE","CROSS_LANE_SUBJECT_REUSE","CROSS_LANE_CONTROL_REUSE","AUTH_EVIDENCE_FROM_PORT_8081"],"tools":[{"id":"T01","label":"Auth 独立读回任务包","format":"JSON","href":"/handoff/auth-s08-r02-c02/four-lane-readback-auth.template.json"},{"id":"T02","label":"Security 独立读回任务包","format":"JSON","href":"/handoff/auth-s08-r02-c02/four-lane-readback-security.template.json"},{"id":"T03","label":"SRE / DBA 独立读回任务包","format":"JSON","href":"/handoff/auth-s08-r02-c02/four-lane-readback-sre-dba.template.json"},{"id":"T04","label":"QA Witness 独立读回任务包","format":"JSON","href":"/handoff/auth-s08-r02-c02/four-lane-readback-qa-witness.template.json"},{"id":"T05","label":"四席受控分发清单","format":"JSON","href":"/handoff/auth-s08-r02-c02/four-lane-readback-dispatch.manifest.json"},{"id":"T06","label":"浏览器本地四包验真台","format":"HTML","href":"/handoff/auth-s08-r02-c02/four-lane-readback-dispatch.offline.html"},{"id":"T07","label":"Node.js 四席隔离验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/four-lane-readback-dispatch.mjs"}],"denialCodes":["RD01_PACKET_SHAPE","RD02_SCHEMA_VERSION","RD03_DISPATCH_ID","RD04_BASELINE_ID","RD05_AUTH_REVISION","RD06_SERVICE_IDENTITY","RD07_LANE_ID","RD08_LANE_SEQUENCE","RD09_OWNER_ROLE","RD10_SUBJECT_REALM","RD11_CONTROL_DOMAIN","RD12_TASK_SET","RD13_TASK_STATE","RD14_READBACK_PREPOPULATED","RD15_SIGNATURE_PREPOPULATED","RD16_COMPLETION_PREPOPULATED","RD17_DISPATCH_FACT_FORGED","RD18_EXTERNAL_RUN_FORGED","RD19_PRODUCTION_MUTATION","RD20_SECRET_MATERIAL","RD21_PRIVATE_IDENTITY","RD22_UPLOAD_CAPABILITY","RD23_PORTAL_SIGNATURE","RD24_G03_ADVANCED","RD25_FORMAL_PROGRESS_CHANGED","RD26_PACKET_COUNT","RD27_LANE_ORDER","RD28_DUPLICATE_LANE","RD29_SUBJECT_COLLISION","RD30_CONTROL_COLLISION","RD31_CROSS_LANE_TASK_LEAKAGE","RD32_SET_NOT_FAIL_CLOSED"],"boundaries":{"portalDispatchesExternally":false,"portalAcceptsUploads":false,"portalStoresExternalEvidence":false,"portalAcceptsOwnerSignatures":false,"portalRunsProductionCommands":false,"portalMintsNewDossierDigest":false,"g03Requalified":false,"g04Unblocked":false,"g05Unblocked":false,"formalProgressChanged":false},"resultBoundary":"PACKETS_READY_EXTERNAL_EXECUTION_REQUIRED_G03_STALE_FORMAL_4_OF_36"},"productionDriftAdjudication":{"id":"D05-C02-F05-01-PRODUCTION-DRIFT-ADJUDICATION-v1","schemaVersion":"developer.reits.tech/auth-production-drift-adjudication/v1","state":"PRODUCTION_DRIFT_DETECTED_G03_STALE_R01_DOSSIER_FROZEN_REBASE_REQUIRED","observedAt":"2026-08-09T06:37:04Z","dossier":{"state":"STALE_SIGNATURES_FROZEN","assembledAt":"2026-07-30T14:18:23+08:00","observedAt":"2026-07-30T06:12:44Z","digest":"sha256:684783317dc35c1c7a1303e57b7143278d1f5fb2e3ba743671c6555f4a883f6b","mainRevision":"a3ebd7a947570498a602438e20f11a9b847753fa","stagingRevision":"e85ec44fabd1382f53b06d5569cce1d8d0895eb6","productionRevision":"18c553c2cac155f33d9626f72ae25c5f2a8d5634","accessTokenAlgorithm":"HS256","jwksChangesDeclared":0,"routeChangesDeclared":0,"authDeploymentsDeclared":0},"production":{"serviceState":"ACTIVE_ENABLED","sourceRevision":"3967686c7e7fc0e4ccf738ca63139a41b5057a82","sourceMatchesMain":true,"healthState":"HEALTHY_READY","environment":"production","productionSafe":true,"accessTokenAlgorithm":"HS256","accessTokenKid":"k21-20260717-a","oidcReady":true,"oidcIdTokenAlgorithm":"RS256","oidcKid":"reits-auth-oidc-20260806-1","jwksKeysObserved":1,"compatibleRuntimeMode":"disabled","compatibleRuntimeActivated":false,"compatibleRuntimeSchemaState":"not-installed","confidentialClientsConfigured":3,"machineClientsConfigured":5,"publicEndpoints":["/.well-known/openid-configuration","/oauth/jwks.json","/oauth/userinfo"]},"drift":{"commitsAfterDossierMain":48,"changedPathsAfterDossierMain":85,"releaseRevisionChanged":true,"oidcSurfaceChanged":true,"jwksSurfaceChanged":true,"migrationSurfaceChanged":true,"accessTokenAlgorithmChanged":false,"conclusion":"DOSSIER_STALE_REBASE_REQUIRED_NOT_AN_UNAUTHORIZED_DEPLOYMENT_VERDICT"},"gateDecision":{"previousG03State":"READY","currentG03State":"STALE","g04State":"HELD","g05State":"HELD","ownerBallotsObserved":0,"ownerBallotsRequired":4,"formalAccepted":4,"formalCurrent":5,"formalTotal":36,"formalProgressChanged":false},"recoverySequence":[{"sequence":1,"id":"FREEZE","label":"冻结旧卷宗摘要和所有签名入口","state":"ENFORCED"},{"sequence":2,"id":"CAPTURE","label":"捕获当前主干、生产 Release 与运行时能力","state":"OBSERVED"},{"sequence":3,"id":"CLASSIFY","label":"分离 Access Token HS256 与 OIDC ID Token RS256","state":"OBSERVED"},{"sequence":4,"id":"REBUILD","label":"针对当前版本重建 R01 证据包","state":"REQUIRED"},{"sequence":5,"id":"REHEARSE","label":"对变化代码与迁移执行隔离演练","state":"REQUIRED"},{"sequence":6,"id":"READBACK","label":"QA 对源码、运行态和证据执行独立读回","state":"REQUIRED"},{"sequence":7,"id":"MINT","label":"生成新的内容寻址卷宗摘要","state":"REQUIRED"},{"sequence":8,"id":"REOPEN","label":"四席确认新摘要后恢复 G04 入口","state":"BLOCKED"}],"tools":[{"id":"T01","label":"生产漂移裁定与重新基线模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/production-drift-adjudication.template.json"},{"id":"T02","label":"浏览器本地漂移裁定器","format":"HTML","href":"/handoff/auth-s08-r02-c02/production-drift-adjudication.offline.html"},{"id":"T03","label":"Node.js 失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/production-drift-adjudication.mjs"}],"denialCodes":["PD01_SCHEMA_VERSION","PD02_DOSSIER_DIGEST","PD03_DOSSIER_REVISION","PD04_LIVE_REVISION","PD05_RELEASE_DRIFT","PD06_OIDC_DRIFT","PD07_JWKS_DRIFT","PD08_MIGRATION_DRIFT","PD09_ALGORITHM_CONFLATION","PD10_G03_NOT_STALE","PD11_SIGNATURES_NOT_FROZEN","PD12_G04_NOT_HELD","PD13_G05_NOT_HELD","PD14_BALLOT_NONZERO","PD15_FORMAL_PROGRESS_CHANGED","PD16_RECOVERY_SEQUENCE","PD17_INDEPENDENT_READBACK_MISSING","PD18_NEW_DIGEST_MISSING","PD19_UNEXPECTED_PRIVATE_FIELD","PD20_PRODUCTION_MUTATION_REQUESTED"],"boundaries":{"portalReadsProductionSecrets":false,"portalWritesAuthProduction":false,"portalRegeneratesDossier":false,"portalAcceptsOwnerSignatures":false,"oldDossierMayReceiveSignatures":false,"g04Unblocked":false,"g05Unblocked":false,"formalProgressChanged":false},"resultBoundary":"DRIFT_DETECTED_OLD_DOSSIER_FROZEN_G03_STALE_REBASE_REQUIRED_G04_G05_HELD_FORMAL_4_OF_36"},"currentBaselineEvidenceRebuild":{"id":"D05-C02-F05-02-CURRENT-BASELINE-EVIDENCE-REBUILD-v1","schemaVersion":"developer.reits.tech/auth-current-baseline-evidence-rebuild/v1","state":"PUBLIC_BASELINE_CAPTURED_6_OF_6_EXTERNAL_READBACKS_0_OF_4_REHEARSAL_0_OF_1_DIGEST_0_OF_1_G03_STALE","observedAt":"2026-08-09T08:05:15Z","baseline":{"mainRevision":"3967686c7e7fc0e4ccf738ca63139a41b5057a82","productionReleaseRevision":"3967686c7e7fc0e4ccf738ca63139a41b5057a82","revisionsMatch":true,"sourceTestCommand":"go test ./...","sourceTestResult":"PASS","productionReleasePath":"/opt/reits-auth/releases/3967686c7e7fc0e4ccf738ca63139a41b5057a82","binarySizeBytes":11749396,"serviceStartedAt":"2026-08-09T06:37:04Z"},"runtime":{"service":"reits-auth","environment":"production","systemdState":"active","systemdEnabled":true,"loopbackAddress":"127.0.0.1","loopbackPort":8095,"healthState":"ok","readinessState":"ready","dependencies":["im-core","session-store"],"wrongServicePortGuard":[8080,8081,8090,8100,8110]},"protocol":{"publicBaseUrl":"https://auth.reits.tech","accessTokenAlgorithm":"HS256","accessTokenKid":"k21-20260717-a","oidcIdTokenAlgorithm":"RS256","oidcKid":"reits-auth-oidc-20260806-1","jwksKeysObserved":1,"jwksKeyType":"RSA","jwksUse":"sig","publicEndpoints":["/.well-known/openid-configuration","/oauth/jwks.json","/oauth/userinfo"]},"configuration":{"publicClientsObserved":13,"authenticationKindsObserved":7,"confidentialClientsConfigured":3,"machineClientsConfigured":5,"maxActiveSessions":20,"previewEnabled":false,"productionSafe":true,"compatibleRuntimeMode":"disabled","compatibleRuntimeActivated":false,"compatibleRuntimeSchemaState":"not-installed"},"evidenceLayers":[{"id":"E01_SOURCE","label":"源码与测试","state":"PUBLIC_CAPTURED","owner":"AUTH"},{"id":"E02_RELEASE","label":"生产 Release","state":"PUBLIC_CAPTURED","owner":"SRE_DBA"},{"id":"E03_RUNTIME","label":"systemd、端口与依赖","state":"PUBLIC_CAPTURED","owner":"SRE_DBA"},{"id":"E04_PROTOCOL","label":"Token、OIDC 与 JWKS","state":"PUBLIC_CAPTURED","owner":"SECURITY"},{"id":"E05_CONFIGURATION","label":"公开配置与休眠能力","state":"PUBLIC_CAPTURED","owner":"SECURITY"},{"id":"E06_QA_READBACK","label":"跨面一致性候选","state":"PUBLIC_CAPTURED","owner":"QA_WITNESS"}],"reviewLanes":[{"id":"AUTH","owner":"Auth Owner","scope":"源码、测试、Release 三头一致","state":"WAITING_EXTERNAL_READBACK","independentReadbackRef":null,"signedReceiptRef":null},{"id":"SECURITY","owner":"Security Owner","scope":"算法用途、JWKS、端点与安全边界","state":"WAITING_EXTERNAL_READBACK","independentReadbackRef":null,"signedReceiptRef":null},{"id":"SRE_DBA","owner":"SRE / DBA Owner","scope":"服务、端口、依赖、配置、迁移与回滚","state":"WAITING_EXTERNAL_READBACK","independentReadbackRef":null,"signedReceiptRef":null},{"id":"QA_WITNESS","owner":"QA Witness","scope":"独立重采、服务身份防混淆与内容地址","state":"WAITING_EXTERNAL_READBACK","independentReadbackRef":null,"signedReceiptRef":null}],"closure":{"publicObservationLayersCaptured":6,"publicObservationLayersRequired":6,"isolatedRehearsalReceiptsObserved":0,"isolatedRehearsalReceiptsRequired":1,"externalIndependentReadbacksObserved":0,"externalIndependentReadbacksRequired":4,"newDossierDigestsObserved":0,"newDossierDigestsRequired":1,"ownerSignaturesObserved":0,"ownerSignaturesRequired":4,"readyForG03Requalification":false},"tools":[{"id":"T01","label":"当前版本基线证据包模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/current-baseline-evidence-pack.template.json"},{"id":"T02","label":"浏览器离线基线验真台","format":"HTML","href":"/handoff/auth-s08-r02-c02/current-baseline-evidence-pack.offline.html"},{"id":"T03","label":"Node.js 失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/current-baseline-evidence-pack.mjs"}],"denialCodes":["CB01_SCHEMA_VERSION","CB02_BASELINE_ID","CB03_MAIN_REVISION","CB04_PRODUCTION_REVISION","CB05_REVISION_MISMATCH","CB06_SOURCE_TEST","CB07_SERVICE_IDENTITY","CB08_RUNTIME_STATE","CB09_RUNTIME_DEPENDENCY","CB10_ACCESS_ALGORITHM","CB11_ACCESS_KID","CB12_OIDC_ALGORITHM","CB13_OIDC_KID","CB14_JWKS_SHAPE","CB15_COMPATIBLE_RUNTIME","CB16_CONFIGURATION_COUNTS","CB17_PRIVATE_FIELD","CB18_REVIEW_LANES","CB19_EXTERNAL_RECEIPT_IN_TEMPLATE","CB20_REHEARSAL_RECEIPT_IN_TEMPLATE","CB21_NEW_DIGEST_IN_TEMPLATE","CB22_G03_NOT_STALE","CB23_FORMAL_PROGRESS_CHANGED","CB24_PRODUCTION_MUTATION_REQUESTED"],"boundaries":{"portalReadsProductionSecrets":false,"portalWritesAuthProduction":false,"portalRunsProductionRehearsal":false,"portalAcceptsOwnerSignatures":false,"portalMintsNewDossierDigest":false,"g03Requalified":false,"g04Unblocked":false,"g05Unblocked":false,"formalProgressChanged":false},"resultBoundary":"PUBLIC_BASELINE_CAPTURED_EXTERNAL_READBACKS_AND_REHEARSAL_REQUIRED_G03_STALE_FORMAL_4_OF_36"},"portalEngineeringTerminalSealVersionFreezeDualEnvironmentReadbackHandoff":{"id":"D05-C02-B42-PORTAL-ENGINEERING-TERMINAL-SEAL-v1","schemaVersion":"developer.reits.tech/portal-engineering-terminal-seal/v1","state":"ENGINEERING_32_OF_32_DAY3_11_OF_11_LINEAGE_42_OF_42_DOWNLOADS_133_OF_133_DUAL_ENVIRONMENTS_2_OF_2_FORMAL_4_OF_36_G04_HELD","algorithm":"B01-B41 QUALIFIED INPUTS + B42 TERMINAL CERTIFICATE + RUNTIME RELEASE IDENTITY + SOURCE TREE FREEZE + EXPLICIT ROLLBACK ROOT + EC2 PUBLIC READBACK + SITES OWNER-ONLY READBACK + RESPONSIVE QA + FAIL-CLOSED FORMAL BOUNDARY","toolsReady":3,"toolsTotal":3,"engineeringDeliveriesAccepted":32,"engineeringDeliveriesRequired":32,"engineeringDeliveriesRemaining":0,"formalAccepted":4,"formalCurrent":5,"formalTotal":36,"lineageEntriesSealed":42,"lineageEntriesRequired":42,"historicalInputsQualified":41,"historicalInputsRequired":41,"downloadReferencesSealed":133,"downloadReferencesRequired":133,"environmentReadbacksObserved":2,"environmentReadbacksRequired":2,"productionMutationsObserved":0,"schedule":[{"id":"DAY_1","planned":11,"accepted":11,"state":"SEALED"},{"id":"DAY_2","planned":10,"accepted":10,"state":"SEALED"},{"id":"DAY_3","planned":11,"accepted":11,"state":"SEALED"}],"lineageBands":[{"id":"B01_B10","range":"B01–B10","entries":10,"label":"身份、通道、回执与 Authority 基础","state":"SEALED"},{"id":"B11_B20","range":"B11–B20","entries":10,"label":"裁定、终局、读模型与恢复","state":"SEALED"},{"id":"B21_B30","range":"B21–B30","entries":10,"label":"晋级、事务、事件与跨区切流","state":"SEALED"},{"id":"B31_B40","range":"B31–B40","entries":10,"label":"稳定化、持续韧性与组织学习","state":"SEALED"},{"id":"B41_B42","range":"B41–B42","entries":2,"label":"Portal 一致性与工程终局封印","state":"SEALED"}],"releaseIdentityFields":[{"id":"SOURCE","label":"源码版本","source":"/api/release-unit · source.revision","state":"RUNTIME_BOUND"},{"id":"RELEASE","label":"发布单元","source":"/api/release-unit · releaseId","state":"RUNTIME_BOUND"},{"id":"ARTIFACT","label":"制品摘要","source":"/api/release-unit · artifact.digest","state":"RUNTIME_BOUND"},{"id":"SBOM","label":"SBOM 摘要","source":"/api/release-unit · sbom.digest","state":"RUNTIME_BOUND"},{"id":"CONFIG","label":"配置摘要","source":"/api/release-unit · configuration.digest","state":"RUNTIME_BOUND"},{"id":"MIGRATION","label":"迁移摘要","source":"/api/release-unit · migration.digest","state":"RUNTIME_BOUND"}],"environmentReadbacks":[{"id":"EC2_PUBLIC","sequence":1,"label":"EC2 正式主站","host":"developer.reits.tech","visibility":"PUBLIC","sourceBinding":"/api/release-unit","access":"PUBLIC_PRODUCTION","purpose":"唯一公开正式入口","state":"READBACK_PASS"},{"id":"SITES_OWNER_ONLY","sequence":2,"label":"Sites 隔离备份","host":"reits-developer.goodluckyem888.chatgpt.site","visibility":"OWNER_ONLY","sourceBinding":"SITES_VERSION_SOURCE_TREE","access":"1 OWNER · 0 GROUP · 0 EXTERNAL","purpose":"隔离备份与独立读回","state":"READBACK_PASS"}],"handoffLanes":[{"id":"ARCH","sequence":1,"label":"全局架构","receives":"42 条工程谱系、系统边界、正式阻断","owner":"Architecture","state":"READY"},{"id":"UI","sequence":2,"label":"UI / CI","receives":"当前 UI、目标蓝图、Token、三视口基线","owner":"Design System","state":"READY"},{"id":"QA","sequence":3,"label":"QA 架构","receives":"全量 CI、133 下载、72 拒绝码、三视口读回","owner":"Quality","state":"READY"},{"id":"RELEASE","sequence":4,"label":"发布工程","receives":"Release ID、制品、SBOM、配置、迁移、回滚根","owner":"Release Engineering","state":"READY"},{"id":"OPS","sequence":5,"label":"运行保障","receives":"EC2 主站、Owner-only 备份、健康与回滚 Runbook","owner":"SRE","state":"READY"}],"acceptanceGates":["ENGINEERING_32_OF_32","DAY1_11_OF_11","DAY2_10_OF_10","DAY3_11_OF_11","B01_B42_LINEAGE_42_OF_42","DOWNLOADS_133_OF_133","RUNTIME_RELEASE_BOUND","ARTIFACT_DIGEST_BOUND","SBOM_DIGEST_BOUND","ROLLBACK_ROOT_PINNED","EC2_PUBLIC_READBACK_PASS","SITES_OWNER_ONLY_READBACK_PASS","RESPONSIVE_QA_PASS","FORMAL_4_OF_36_UNCHANGED"],"blockedCapabilities":["PRODUCTION_AUTH_READ","PRODUCTION_AUTH_WRITE","RESOURCE_SERVER_WRITE","LOG_AUDIT_WRITE","RELEASE_CONTROL_WRITE","DISASTER_RECOVERY_WRITE","G04_RELEASE","G05_RELEASE","D05_FORMAL_ADVANCE","D06_GATE_ZERO_RELEASE","NEW_B43_CREATION","ENGINEERING_DENOMINATOR_CHANGE"],"tools":[{"id":"T01","label":"Portal 工程终局证书空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/portal-engineering-terminal-seal.template.json"},{"id":"T02","label":"浏览器本地终局证书验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/portal-engineering-terminal-seal.offline.html"},{"id":"T03","label":"Node.js 七十二类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/portal-engineering-terminal-seal.mjs"}],"denialCodes":["TS001","TS002","TS003","TS004","TS005","TS006","TS007","TS008","TS009","TS010","TS011","TS012","TS013","TS014","TS015","TS016","TS017","TS018","TS019","TS020","TS021","TS022","TS023","TS024","TS025","TS026","TS027","TS028","TS029","TS030","TS031","TS032","TS033","TS034","TS035","TS036","TS037","TS038","TS039","TS040","TS041","TS042","TS043","TS044","TS045","TS046","TS047","TS048","TS049","TS050","TS051","TS052","TS053","TS054","TS055","TS056","TS057","TS058","TS059","TS060","TS061","TS062","TS063","TS064","TS065","TS066","TS067","TS068","TS069","TS070","TS071","TS072"],"resultBoundary":"ENGINEERING_32_OF_32_TERMINAL_SEALED_FORMAL_4_OF_36_G04_HELD","formalProgressChanged":false,"externalTruthChanged":false,"g04Unblocked":false,"g05Unblocked":false,"newB43Created":false,"engineeringDenominatorChanged":false},"portalB01B40GlobalInformationArchitectureMobileAccessibilityLinkDownloadFinalConsistencyReadback":{"id":"D05-C02-B41-PORTAL-B01-B40-FINAL-CONSISTENCY-READBACK-v1","schemaVersion":"developer.reits.tech/portal-b01-b40-final-consistency-readback/v1","state":"TOOLS_READY_SLICES_40_OF_40_ANCHORS_40_OF_40_DOWNLOADS_127_OF_127_DUPLICATE_IDS_OPEN_0_CRITICAL_GAPS_OPEN_0_B42_TERMINAL_SEAL_REQUIRED","algorithm":"SOURCE INVENTORY + DOM ID UNIQUENESS + RESPONSIVE VIEWPORT READBACK + ACCESSIBILITY CONTRACT + INTERNAL LINK RESOLUTION + DOWNLOAD EXISTENCE + GLOBAL TRUTH PROJECTION","toolsReady":3,"toolsTotal":3,"sliceLabelsAudited":40,"sliceLabelsRequired":40,"anchorTargetsAudited":40,"anchorTargetsRequired":40,"directorySurfacesAudited":172,"machineInterfacesAudited":369,"sitemapRoutesAudited":426,"downloadReferencesAudited":127,"downloadReferencesRequired":127,"missingDownloads":0,"duplicateIdsDetected":4,"duplicateIdsRepaired":4,"duplicateIdsOpen":0,"criticalGapsOpen":0,"productionMutationsObserved":0,"informationArchitectureBands":[{"id":"FOUNDATION","range":"B01–B10","label":"外部角色、通道、回执与 Authority 形成","count":10,"entryHref":"/development-plan/archive#g04-role-binding-preflight","exitHref":"/development-plan/archive#g04-external-ledger-inclusion-readback","state":"QUALIFIED"},{"id":"FINALITY","range":"B11–B20","label":"裁定、终局、读模型发布与隔离恢复","count":10,"entryHref":"/development-plan/archive#g04-gate-authority-adjudication-readback","exitHref":"/development-plan/archive#g04-read-model-publication-journal-integrity-quarantine-point-in-time-recovery-readback","state":"QUALIFIED"},{"id":"PROMOTION_DR","range":"B21–B30","label":"候选晋级、单次事务、事件恢复与跨区切流","count":10,"entryHref":"/development-plan/archive#g04-recovery-candidate-qualification-controlled-promotion-rollback-readback","exitHref":"/development-plan/archive#g04-disaster-recovery-cutover-connection-drain-routing-propagation-progressive-traffic-write-probe-automatic-rollback-settlement-readback","state":"QUALIFIED"},{"id":"RESILIENCE_POLICY","range":"B31–B40","label":"稳定化、持续韧性、策略发布、效果与组织学习","count":10,"entryHref":"/development-plan/archive#g04-post-cutover-stabilization-session-rebinding-cache-warmup-background-job-resume-old-primary-quarantine-rollback-window-closure-independent-readback","exitHref":"/development-plan/archive#g04-continuous-resilience-anomaly-closure-certificate-recurrence-budget-regression-corpus-runbook-change-control-gap-backfill-knowledge-release-policy-recertification-independent-readback","state":"QUALIFIED"}],"auditLanes":[{"id":"IA","sequence":1,"label":"信息架构","result":"40 切片 / 4 阶段 / 单一当前入口","state":"PASS"},{"id":"RESPONSIVE","sequence":2,"label":"移动与响应式","result":"390 / 768 / 1440 三视口","state":"PASS"},{"id":"A11Y","sequence":3,"label":"可访问性","result":"重复标题目标 4/4 已修复","state":"PASS"},{"id":"LINKS","sequence":4,"label":"页面与锚点","result":"40/40 切片入口唯一","state":"PASS"},{"id":"DOWNLOADS","sequence":5,"label":"下载面","result":"127/127 文件存在","state":"PASS"}],"viewportReadbacks":[{"id":"MOBILE","width":390,"height":844,"horizontalOverflow":0,"state":"PASS"},{"id":"TABLET","width":768,"height":1024,"horizontalOverflow":0,"state":"PASS"},{"id":"DESKTOP","width":1440,"height":1000,"horizontalOverflow":0,"state":"PASS"}],"accessibilityRepairs":[{"id":"A11Y-01","label":"B20 恢复参与者标题目标唯一化","before":"recovery-actors-title duplicated","after":"integrity-recovery-actors-title","state":"FIXED"},{"id":"A11Y-02","label":"B20 恢复不变量标题目标唯一化","before":"recovery-invariants-title duplicated","after":"integrity-recovery-invariants-title","state":"FIXED"},{"id":"A11Y-03","label":"B20 能力防火墙标题目标唯一化","before":"recovery-firewall-title duplicated","after":"integrity-recovery-firewall-title","state":"FIXED"},{"id":"A11Y-04","label":"B20 拒绝码标题目标唯一化","before":"recovery-denials-title duplicated","after":"integrity-recovery-denials-title","state":"FIXED"}],"acceptanceGates":["B01_B40_LABELS_COMPLETE","B01_B40_ANCHORS_UNIQUE","FOUR_IA_BANDS_CLOSED","DIRECTORY_BASELINE_PINNED","MACHINE_INTERFACE_BASELINE_PINNED","SITEMAP_BASELINE_PINNED","MOBILE_NO_OVERFLOW","TABLET_NO_OVERFLOW","DESKTOP_NO_OVERFLOW","A11Y_CRITICAL_ZERO","DOWNLOADS_127_PRESENT","FORMAL_TRUTH_UNCHANGED"],"blockedCapabilities":["PRODUCTION_SYSTEM_READ","PRODUCTION_SYSTEM_WRITE","PRODUCTION_ROUTE_MUTATION","PRODUCTION_DOWNLOAD_UPLOAD","AUTH_POLICY_WRITE","RESOURCE_SERVER_WRITE","LOG_AUDIT_WRITE","RELEASE_CONTROL_WRITE","G04_RELEASE","G05_RELEASE","D05_EXECUTION","FORMAL_PROGRESS_ADVANCE"],"tools":[{"id":"T01","label":"B01–B40 全局一致性审计空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/portal-b01-b40-final-consistency-audit.template.json"},{"id":"T02","label":"浏览器本地一致性预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/portal-b01-b40-final-consistency-audit.offline.html"},{"id":"T03","label":"Node.js 六十四类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/portal-b01-b40-final-consistency-audit.mjs"}],"denialCodes":["PC001","PC002","PC003","PC004","PC005","PC006","PC007","PC008","PC009","PC010","PC011","PC012","PC013","PC014","PC015","PC016","PC017","PC018","PC019","PC020","PC021","PC022","PC023","PC024","PC025","PC026","PC027","PC028","PC029","PC030","PC031","PC032","PC033","PC034","PC035","PC036","PC037","PC038","PC039","PC040","PC041","PC042","PC043","PC044","PC045","PC046","PC047","PC048","PC049","PC050","PC051","PC052","PC053","PC054","PC055","PC056","PC057","PC058","PC059","PC060","PC061","PC062","PC063","PC064"],"resultBoundary":"B01_B40_PORTAL_FINAL_CONSISTENCY_QUALIFIED_B42_TERMINAL_SEAL_REQUIRED","formalProgressChanged":false,"externalTruthChanged":false,"g04Unblocked":false,"g05Unblocked":false},"continuousResilienceAnomalyClosureRecurrenceBudgetRegressionCorpusRunbookChangeControlGapBackfillKnowledgeReleasePolicyRecertificationIndependentReadback":{"id":"D05-C02-G04-CONTINUOUS-RESILIENCE-ANOMALY-CLOSURE-LEARNING-POLICY-RECERTIFICATION-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-continuous-resilience-anomaly-closure-learning-policy-recertification-independent-readback/v1","state":"TOOLS_READY_CLOSURE_CERTIFICATES_0_OF_1_RECURRENCE_BUDGETS_0_OF_6_REGRESSION_CORPUS_ENTRIES_0_OF_18_RUNBOOK_CHANGES_0_OF_6_CONTROL_GAP_BACKFILLS_0_OF_6_KNOWLEDGE_RELEASES_0_OF_1_RECERTIFICATION_BALLOTS_0_OF_5_RECERTIFICATION_CERTIFICATES_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B39 READBACK + CLOSURE CERTIFICATE + SIX ZERO-RECURRENCE BUDGETS + EIGHTEEN REGRESSION CASES + SIX RUNBOOK CHANGES + SIX CONTROL-GAP BACKFILLS + KNOWLEDGE RELEASE + FIVE-AUTHORITY RECERTIFICATION + INDEPENDENT READBACK","toolsReady":3,"toolsTotal":3,"closureCertificatesObserved":0,"closureCertificatesRequired":1,"recurrenceBudgetsObserved":0,"recurrenceBudgetsRequired":6,"regressionCorpusEntriesObserved":0,"regressionCorpusEntriesRequired":18,"runbookChangesObserved":0,"runbookChangesRequired":6,"controlGapBackfillsObserved":0,"controlGapBackfillsRequired":6,"knowledgeReleasesObserved":0,"knowledgeReleasesRequired":1,"recertificationBallotsObserved":0,"recertificationBallotsRequired":5,"recertificationCertificatesObserved":0,"recertificationCertificatesRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"anomalyFamilies":[{"sequence":1,"id":"FALSE_ALLOW","label":"漏放异常","budget":0,"caseIds":["FA-DETECT","FA-ISOLATE","FA-RECOVER"],"state":"WAITING"},{"sequence":2,"id":"FALSE_DENY","label":"误拒异常","budget":0,"caseIds":["FD-DETECT","FD-ISOLATE","FD-RECOVER"],"state":"WAITING"},{"sequence":3,"id":"UNEXPLAINED_DRIFT","label":"不可解释漂移","budget":0,"caseIds":["UD-DETECT","UD-ISOLATE","UD-RECOVER"],"state":"WAITING"},{"sequence":4,"id":"VERSION_SKEW","label":"版本偏斜","budget":0,"caseIds":["VS-DETECT","VS-ISOLATE","VS-RECOVER"],"state":"WAITING"},{"sequence":5,"id":"BUDGET_BURN","label":"错误预算燃烧","budget":0,"caseIds":["BB-DETECT","BB-ISOLATE","BB-RECOVER"],"state":"WAITING"},{"sequence":6,"id":"STALE_EVIDENCE","label":"证据失鲜","budget":0,"caseIds":["SE-DETECT","SE-ISOLATE","SE-RECOVER"],"state":"WAITING"}],"systemLearningLanes":[{"id":"AUTH_POLICY","label":"Auth 策略","owner":"Auth Policy Owner","runbookChange":0,"controlGapBackfill":0},{"id":"RESOURCE_SERVER","label":"资源服务器","owner":"API Security / Resource Owner","runbookChange":0,"controlGapBackfill":0},{"id":"BFF_SESSION","label":"BFF 会话","owner":"Web Platform Owner","runbookChange":0,"controlGapBackfill":0},{"id":"OBSERVABILITY_AUDIT","label":"日志审计","owner":"Observability / Audit Owner","runbookChange":0,"controlGapBackfill":0},{"id":"RELEASE_CONTROL","label":"发布控制","owner":"Release Engineering Owner","runbookChange":0,"controlGapBackfill":0},{"id":"DR_RECOVERY","label":"灾备恢复","owner":"SRE / DR Owner","runbookChange":0,"controlGapBackfill":0}],"recertificationAuthorities":[{"sequence":1,"id":"AUTH_POLICY_OWNER","label":"Auth Policy Owner","authority":"POLICY_SEMANTICS_ONLY","state":"NO_BALLOT"},{"sequence":2,"id":"API_SECURITY_RESOURCE_OWNER","label":"API Security / Resource Owner","authority":"RESOURCE_AUTHORIZATION_ONLY","state":"NO_BALLOT"},{"sequence":3,"id":"OBSERVABILITY_AUDIT_OWNER","label":"Observability / Audit Owner","authority":"EVIDENCE_LINEAGE_ONLY","state":"NO_BALLOT"},{"sequence":4,"id":"RELEASE_ENGINEERING_OWNER","label":"Release Engineering Owner","authority":"RELEASE_BOUNDARY_ONLY","state":"NO_BALLOT"},{"sequence":5,"id":"INDEPENDENT_QA_WITNESS","label":"Independent QA Witness","authority":"REGRESSION_READBACK_ONLY","state":"NO_BALLOT"}],"transactionSteps":[{"sequence":1,"id":"B39_READBACK_PINNED","label":"冻结 B39 异常治理独立读回","state":"BLOCKED"},{"sequence":2,"id":"CLOSURE_CERTIFICATE_SEALED","label":"签署六异常关闭证书","state":"BLOCKED"},{"sequence":3,"id":"RECURRENCE_BUDGETS_SEALED","label":"封印六类零复发预算","state":"BLOCKED"},{"sequence":4,"id":"REGRESSION_CORPUS_NOTARIZED","label":"公证十八条回归案例","state":"BLOCKED"},{"sequence":5,"id":"RUNBOOK_AND_GAPS_SETTLED","label":"结算六系统 Runbook 与控制缺口","state":"BLOCKED"},{"sequence":6,"id":"KNOWLEDGE_RELEASE_SEALED","label":"签署脱敏知识发布清单","state":"BLOCKED"},{"sequence":7,"id":"POLICY_RECERTIFIED","label":"五席独立投票并签署再认证证书","state":"BLOCKED"},{"sequence":8,"id":"LEARNING_INDEPENDENT_READBACK","label":"独立复取完整学习链并保持 G04 关闭","state":"BLOCKED"}],"actors":[{"sequence":1,"id":"CLOSURE_NOTARY","duty":"公证异常关闭证书","authority":"CLOSURE_ONLY"},{"sequence":2,"id":"RECURRENCE_BUDGET_SETTLER","duty":"结算六类复发预算","authority":"BUDGET_ONLY"},{"sequence":3,"id":"REGRESSION_CORPUS_NOTARY","duty":"验真十八条回归案例","authority":"CORPUS_ONLY"},{"sequence":4,"id":"RUNBOOK_CHANGE_REGISTRAR","duty":"登记六系统 Runbook 变更","authority":"RUNBOOK_ONLY"},{"sequence":5,"id":"CONTROL_GAP_ADJUDICATOR","duty":"裁定控制缺口回填","authority":"CONTROL_GAP_ONLY"},{"sequence":6,"id":"KNOWLEDGE_RELEASE_NOTARY","duty":"验真脱敏知识发布","authority":"KNOWLEDGE_ONLY"},{"sequence":7,"id":"POLICY_RECERTIFICATION_QUORUM","duty":"验真五席再认证法定人数","authority":"RECERTIFICATION_ONLY"},{"sequence":8,"id":"INDEPENDENT_LEARNING_READER","duty":"独立读回完整学习链","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B39 独立读回是 B40 唯一上游"},{"id":"I02","label":"异常已复验不等于已经关闭"},{"id":"I03","label":"关闭证书必须覆盖六类异常"},{"id":"I04","label":"关闭证书不得关闭生产事故"},{"id":"I05","label":"六类复发预算必须分别结算"},{"id":"I06","label":"漏放复发预算严格为零"},{"id":"I07","label":"误拒复发预算不得抵消漏放"},{"id":"I08","label":"每类异常必须有检测案例"},{"id":"I09","label":"每类异常必须有隔离案例"},{"id":"I10","label":"每类异常必须有恢复案例"},{"id":"I11","label":"十八条案例不得使用原始用户记录"},{"id":"I12","label":"回归案例不得回放生产流量"},{"id":"I13","label":"六系统 Runbook 必须分别变更"},{"id":"I14","label":"Runbook 变更不得直接写生产"},{"id":"I15","label":"控制缺口必须绑定验收证据"},{"id":"I16","label":"控制缺口不得自动部署"},{"id":"I17","label":"知识发布前必须完成脱敏检查"},{"id":"I18","label":"知识发布不得携带生产写句柄"},{"id":"I19","label":"五席再认证必须全部独立投票"},{"id":"I20","label":"再认证投票不得复用公钥"},{"id":"I21","label":"再认证证书不等于策略已激活"},{"id":"I22","label":"八份正文必须顺序内容寻址"},{"id":"I23","label":"工具 READY 不得推进正式 5/36"},{"id":"I24","label":"独立读回不得解除 G04 或 G05"}],"blockedCapabilities":["PRODUCTION_INCIDENT_READ","PRODUCTION_INCIDENT_CLOSE","PRODUCTION_TELEMETRY_READ","PRODUCTION_TRAFFIC_REPLAY","PRODUCTION_USER_DATA_READ","PRODUCTION_RUNBOOK_WRITE","PRODUCTION_CONTROL_WRITE","AUTOMATIC_CONTROL_DEPLOY","PRODUCTION_KNOWLEDGE_WRITE","PRODUCTION_POLICY_ACTIVATE","PRODUCTION_POLICY_PAUSE","PRODUCTION_POLICY_ROLLBACK","EFFECTIVE_POINTER_WRITE","PAGER_DISPATCH","TICKET_CREATE","OWNER_ASSIGN","G04_RELEASE","G05_RELEASE","D05_EXECUTION","D06_GATE_ZERO","FORMAL_PROGRESS_ADVANCE","PORTAL_FILLED_PACKAGE_UPLOAD"],"tools":[{"id":"T01","label":"终局学习与再认证空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-anomaly-closure-certificate-recurrence-budget-regression-corpus-runbook-change-control-gap-backfill-knowledge-release-policy-recertification-independent-readback.template.json"},{"id":"T02","label":"浏览器本地学习链预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-anomaly-closure-certificate-recurrence-budget-regression-corpus-runbook-change-control-gap-backfill-knowledge-release-policy-recertification-independent-readback.offline.html"},{"id":"T03","label":"Node.js 八方签名与一百三十六类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-anomaly-closure-certificate-recurrence-budget-regression-corpus-runbook-change-control-gap-backfill-knowledge-release-policy-recertification-independent-readback.mjs"}],"denialCodes":["LR001","LR002","LR003","LR004","LR005","LR006","LR007","LR008","LR009","LR010","LR011","LR012","LR013","LR014","LR015","LR016","LR017","LR018","LR019","LR020","LR021","LR022","LR023","LR024","LR025","LR026","LR027","LR028","LR029","LR030","LR031","LR032","LR033","LR034","LR035","LR036","LR037","LR038","LR039","LR040","LR041","LR042","LR043","LR044","LR045","LR046","LR047","LR048","LR049","LR050","LR051","LR052","LR053","LR054","LR055","LR056","LR057","LR058","LR059","LR060","LR061","LR062","LR063","LR064","LR065","LR066","LR067","LR068","LR069","LR070","LR071","LR072","LR073","LR074","LR075","LR076","LR077","LR078","LR079","LR080","LR081","LR082","LR083","LR084","LR085","LR086","LR087","LR088","LR089","LR090","LR091","LR092","LR093","LR094","LR095","LR096","LR097","LR098","LR099","LR100","LR101","LR102","LR103","LR104","LR105","LR106","LR107","LR108","LR109","LR110","LR111","LR112","LR113","LR114","LR115","LR116","LR117","LR118","LR119","LR120","LR121","LR122","LR123","LR124","LR125","LR126","LR127","LR128","LR129","LR130","LR131","LR132","LR133","LR134","LR135","LR136"],"resultBoundary":"LOCAL_ANOMALY_LEARNING_RECERTIFICATION_SETTLED_B39_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalReadsProductionIncidents":false,"portalClosesProductionIncidents":false,"portalReadsProductionTelemetry":false,"portalReplaysProductionTraffic":false,"portalReadsProductionUserData":false,"portalWritesProductionRunbooks":false,"portalWritesProductionControls":false,"portalDeploysControls":false,"portalWritesProductionKnowledge":false,"portalActivatesProductionPolicy":false,"portalPausesProductionPolicy":false,"portalExecutesRollback":false,"portalWritesEffectivePointer":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"continuousResiliencePolicyEffectAnomalyEventGovernanceClusterCausalEvidenceGraphOwnerRoutingResponseSlaDuplicateMergeExceptionClockRemediationVerificationIndependentReadback":{"id":"D05-C02-G04-CONTINUOUS-RESILIENCE-POLICY-EFFECT-ANOMALY-EVENT-GOVERNANCE-CLUSTER-CAUSAL-EVIDENCE-GRAPH-OWNER-ROUTING-RESPONSE-SLA-DUPLICATE-MERGE-EXCEPTION-CLOCK-REMEDIATION-VERIFICATION-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-continuous-resilience-policy-effect-anomaly-event-governance-cluster-causal-evidence-graph-owner-routing-response-sla-duplicate-merge-exception-clock-remediation-verification-independent-readback/v1","state":"TOOLS_READY_GOVERNANCE_POLICIES_0_OF_1_ANOMALY_EVENTS_0_OF_6_CLUSTERS_0_OF_6_CAUSAL_GRAPHS_0_OF_6_OWNER_ROUTES_0_OF_6_SLA_CLOCKS_0_OF_4_DUPLICATE_MERGES_0_OF_1_EXCEPTION_DECISIONS_0_OF_1_REMEDIATION_VERIFICATIONS_0_OF_6_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B38 READBACK + SIX ANOMALY FAMILIES + CONTENT-ADDRESSED CLUSTER FINGERPRINT + CAUSAL EVIDENCE DAG + SIX OWNER ROUTES + FOUR RESPONSE SLA CLOCKS + DUPLICATE MERGE + BOUNDED EXCEPTION + REMEDIATION REPLAY","toolsReady":3,"toolsTotal":3,"governancePoliciesObserved":0,"governancePoliciesRequired":1,"anomalyEventsObserved":0,"anomalyEventsRequired":6,"anomalyClustersObserved":0,"anomalyClustersRequired":6,"causalEvidenceGraphsObserved":0,"causalEvidenceGraphsRequired":6,"ownerRoutesObserved":0,"ownerRoutesRequired":6,"slaClocksObserved":0,"slaClocksRequired":4,"duplicateMergesObserved":0,"duplicateMergesRequired":1,"exceptionDecisionsObserved":0,"exceptionDecisionsRequired":1,"remediationVerificationsObserved":0,"remediationVerificationsRequired":6,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"maximumEvidenceAgeMinutes":5,"maximumExceptionMinutes":60,"requiredExceptionApprovals":3,"anomalyFamilies":[{"sequence":1,"id":"FALSE_ALLOW","label":"漏放异常","severityFloor":"SEV0","mergeBoundary":"never-with-false-deny","state":"NO_EVENT"},{"sequence":2,"id":"FALSE_DENY","label":"误拒异常","severityFloor":"SEV2","mergeBoundary":"same-cohort-and-policy-root","state":"NO_EVENT"},{"sequence":3,"id":"UNEXPLAINED_DRIFT","label":"不可解释漂移","severityFloor":"SEV1","mergeBoundary":"same-rule-and-decision-shape","state":"NO_EVENT"},{"sequence":4,"id":"VERSION_SKEW","label":"版本偏斜","severityFloor":"SEV0","mergeBoundary":"same-divergent-root-only","state":"NO_EVENT"},{"sequence":5,"id":"BUDGET_BURN","label":"错误预算燃烧","severityFloor":"SEV2","mergeBoundary":"same-cohort-and-window","state":"NO_EVENT"},{"sequence":6,"id":"STALE_EVIDENCE","label":"陈旧证据","severityFloor":"SEV1","mergeBoundary":"same-source-and-checkpoint","state":"NO_EVENT"}],"causalGraphNodes":[{"id":"B38_READBACK","label":"B38 独立读回","proof":"content address + signature"},{"id":"POLICY_DIFF","label":"策略差异","proof":"rule path + old/new digest"},{"id":"REQUEST_COHORT","label":"请求分群","proof":"cohort id + pseudonymous sample root"},{"id":"DECISION_TRACE","label":"裁决轨迹","proof":"decision trace digest only"},{"id":"EXPECTED_DECISION","label":"预期裁决","proof":"frozen baseline root"},{"id":"ACTUAL_DECISION","label":"实际裁决","proof":"observed decision digest"},{"id":"SYSTEM_OUTCOME","label":"系统结果","proof":"resource-side independent readback"},{"id":"REMEDIATION_PROOF","label":"补救证明","proof":"change + replay + window settlement"}],"ownerRoutes":[{"id":"AUTH_POLICY","label":"Auth 策略","owner":"Auth Platform Owner","scope":"登录、提权、机器身份与策略裁决","state":"UNROUTED"},{"id":"RESOURCE_SERVER","label":"资源服务器","owner":"API Security Owner","scope":"资源读取、变更与三元组授权","state":"UNROUTED"},{"id":"BFF_SESSION","label":"BFF 会话","owner":"Web Platform Owner","scope":"浏览器会话、撤销传播与边缘策略","state":"UNROUTED"},{"id":"OBSERVABILITY_AUDIT","label":"日志审计","owner":"Observability Owner","scope":"证据新鲜度、审计投影与追踪根","state":"UNROUTED"},{"id":"RELEASE_CONTROL","label":"发布控制器","owner":"Release Engineering Owner","scope":"策略版本、暂停、回滚与有效指针","state":"UNROUTED"},{"id":"DR_RECOVERY","label":"灾备运行时","owner":"SRE / DR Owner","scope":"恢复路径、备区策略与切换后复验","state":"UNROUTED"}],"responseSlaTiers":[{"id":"SEV0","label":"漏放 / 版本分叉","acknowledgeMinutes":5,"containMinutes":15,"exceptionAllowed":false},{"id":"SEV1","label":"不可解释漂移 / 证据失鲜","acknowledgeMinutes":15,"containMinutes":60,"exceptionAllowed":false},{"id":"SEV2","label":"误拒 / 快速预算燃烧","acknowledgeMinutes":60,"containMinutes":240,"exceptionAllowed":true},{"id":"SEV3","label":"非关键慢窗退化","acknowledgeMinutes":240,"containMinutes":1440,"exceptionAllowed":true}],"transactionSteps":[{"sequence":1,"id":"B38_READBACK_PINNED","label":"冻结 B38 策略效果独立读回","state":"BLOCKED"},{"sequence":2,"id":"GOVERNANCE_POLICY_SEALED","label":"签署异常治理、去重和例外策略","state":"BLOCKED"},{"sequence":3,"id":"ANOMALIES_CLUSTERED","label":"按六类指纹聚类且禁止跨边界合并","state":"BLOCKED"},{"sequence":4,"id":"CAUSAL_GRAPHS_NOTARIZED","label":"逐事件封印因果证据 DAG","state":"BLOCKED"},{"sequence":5,"id":"OWNER_ROUTES_AND_SLA_OPENED","label":"路由六席 Owner 并开启四级时钟","state":"BLOCKED"},{"sequence":6,"id":"DUPLICATE_AND_EXCEPTION_SETTLED","label":"裁定重复合并和三席例外时钟","state":"BLOCKED"},{"sequence":7,"id":"REMEDIATION_VERIFIED","label":"逐分群回放并结算补救复验窗口","state":"BLOCKED"},{"sequence":8,"id":"GOVERNANCE_INDEPENDENT_READBACK","label":"独立复取治理链并保持 G04 关闭","state":"BLOCKED"}],"actors":[{"sequence":1,"id":"GOVERNANCE_POLICY_REGISTRAR","duty":"登记异常治理策略","authority":"POLICY_ONLY"},{"sequence":2,"id":"CLUSTER_NOTARY","duty":"公证聚类指纹与合并边界","authority":"CLUSTER_ONLY"},{"sequence":3,"id":"CAUSAL_GRAPH_NOTARY","duty":"验真因果证据 DAG","authority":"GRAPH_ONLY"},{"sequence":4,"id":"OWNER_ROUTER","duty":"路由六系统 Owner","authority":"ROUTE_ONLY"},{"sequence":5,"id":"SLA_SETTLER","duty":"结算四级处置时钟","authority":"SLA_ONLY"},{"sequence":6,"id":"EXCEPTION_QUORUM_NOTARY","duty":"验真三席有界例外","authority":"EXCEPTION_ONLY"},{"sequence":7,"id":"REMEDIATION_VERIFIER","duty":"复验补救与窗口恢复","authority":"VERIFY_ONLY"},{"sequence":8,"id":"INDEPENDENT_GOVERNANCE_READER","duty":"独立读回完整治理链","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B38 独立读回是 B39 唯一上游"},{"id":"I02","label":"异常信号不等于已确认事件"},{"id":"I03","label":"事件成立不等于因果已证明"},{"id":"I04","label":"聚类相同不等于允许合并"},{"id":"I05","label":"漏放与误拒永远不得合并"},{"id":"I06","label":"跨有效策略根不得合并"},{"id":"I07","label":"每个聚类必须绑定不可变指纹"},{"id":"I08","label":"因果证据图必须是无环图"},{"id":"I09","label":"裁决轨迹只保留摘要不得含原始用户数据"},{"id":"I10","label":"六类 Owner 路由不得由一个总队列替代"},{"id":"I11","label":"SLA 时钟只由已封印事件启动"},{"id":"I12","label":"SEV0 与 SEV1 不允许例外"},{"id":"I13","label":"可例外事件最长六十分钟"},{"id":"I14","label":"例外至少需要三席独立批准"},{"id":"I15","label":"例外到期必须重新进入暂停裁定"},{"id":"I16","label":"重复合并不得重置最早 SLA 时钟"},{"id":"I17","label":"补救部署不等于补救已验证"},{"id":"I18","label":"六分群补救必须分别复验"},{"id":"I19","label":"复验必须覆盖五分钟、一小时和二十四小时"},{"id":"I20","label":"补救复验不得自动恢复策略"},{"id":"I21","label":"八类签署主体和公钥必须完全分离"},{"id":"I22","label":"工具 READY 不等于生产异常已经处置"}],"blockedCapabilities":["PRODUCTION_DECISION_LOG_READ","PRODUCTION_INCIDENT_READ","PRODUCTION_INCIDENT_CREATE","PRODUCTION_CLUSTER_WRITE","PRODUCTION_TRACE_READ","PRODUCTION_USER_DATA_READ","PRODUCTION_OWNER_ASSIGN","PRODUCTION_SLA_CLOCK_START","PRODUCTION_DUPLICATE_MERGE","PRODUCTION_EXCEPTION_GRANT","PAGER_DISPATCH","TICKET_CREATE","AUTOMATIC_HOLD_EXECUTE","ROLLBACK_EXECUTE","REMEDIATION_DEPLOY","PRODUCTION_REPLAY","EFFECTIVE_POINTER_WRITE","G04_RELEASE","G05_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"策略异常事件治理空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-effect-anomaly-event-governance-cluster-causal-evidence-graph-owner-routing-response-sla-duplicate-merge-exception-clock-remediation-verification-independent-readback.template.json"},{"id":"T02","label":"浏览器本地异常治理预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-effect-anomaly-event-governance-cluster-causal-evidence-graph-owner-routing-response-sla-duplicate-merge-exception-clock-remediation-verification-independent-readback.offline.html"},{"id":"T03","label":"Node.js 八方签名与一百三十二类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-effect-anomaly-event-governance-cluster-causal-evidence-graph-owner-routing-response-sla-duplicate-merge-exception-clock-remediation-verification-independent-readback.mjs"}],"denialCodes":["AG001","AG002","AG003","AG004","AG005","AG006","AG007","AG008","AG009","AG010","AG011","AG012","AG013","AG014","AG015","AG016","AG017","AG018","AG019","AG020","AG021","AG022","AG023","AG024","AG025","AG026","AG027","AG028","AG029","AG030","AG031","AG032","AG033","AG034","AG035","AG036","AG037","AG038","AG039","AG040","AG041","AG042","AG043","AG044","AG045","AG046","AG047","AG048","AG049","AG050","AG051","AG052","AG053","AG054","AG055","AG056","AG057","AG058","AG059","AG060","AG061","AG062","AG063","AG064","AG065","AG066","AG067","AG068","AG069","AG070","AG071","AG072","AG073","AG074","AG075","AG076","AG077","AG078","AG079","AG080","AG081","AG082","AG083","AG084","AG085","AG086","AG087","AG088","AG089","AG090","AG091","AG092","AG093","AG094","AG095","AG096","AG097","AG098","AG099","AG100","AG101","AG102","AG103","AG104","AG105","AG106","AG107","AG108","AG109","AG110","AG111","AG112","AG113","AG114","AG115","AG116","AG117","AG118","AG119","AG120","AG121","AG122","AG123","AG124","AG125","AG126","AG127","AG128","AG129","AG130","AG131","AG132"],"resultBoundary":"LOCAL_POLICY_ANOMALY_GOVERNANCE_SETTLED_B38_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalReadsProductionDecisionLogs":false,"portalReadsProductionIncidents":false,"portalCreatesProductionIncidents":false,"portalWritesProductionClusters":false,"portalReadsProductionTraces":false,"portalReadsProductionUserData":false,"portalAssignsProductionOwners":false,"portalStartsProductionSlaClocks":false,"portalMergesProductionIncidents":false,"portalGrantsProductionExceptions":false,"portalDispatchesPager":false,"portalCreatesTickets":false,"portalExecutesAutomaticHold":false,"portalExecutesRollback":false,"portalDeploysRemediation":false,"portalReplaysProductionTraffic":false,"portalWritesEffectivePointer":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"continuousResiliencePolicyEffectObservationCohortBaselineDecisionDriftFalseDenyFalseAllowGuardrailErrorBudgetAutomaticHoldRollbackTriggerIndependentReadback":{"id":"D05-C02-G04-CONTINUOUS-RESILIENCE-POLICY-EFFECT-OBSERVATION-COHORT-BASELINE-DECISION-DRIFT-FALSE-DENY-FALSE-ALLOW-GUARDRAIL-ERROR-BUDGET-AUTOMATIC-HOLD-ROLLBACK-TRIGGER-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-continuous-resilience-policy-effect-observation-cohort-baseline-decision-drift-false-deny-false-allow-guardrail-error-budget-automatic-hold-rollback-trigger-independent-readback/v1","state":"TOOLS_READY_OBSERVATION_PLANS_0_OF_1_COHORT_BASELINES_0_OF_6_DECISION_WINDOWS_0_OF_6_DRIFT_EVALUATIONS_0_OF_6_FALSE_DENY_GUARDRAILS_0_OF_6_FALSE_ALLOW_GUARDRAILS_0_OF_6_ERROR_BUDGETS_0_OF_6_AUTOMATIC_HOLDS_0_OF_1_ROLLBACK_TRIGGERS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B37 READBACK + SIX COHORT BASELINES + 24-HOUR DECISION DRIFT + FALSE-DENY/FALSE-ALLOW GUARDRAILS + MULTI-WINDOW ERROR BUDGET + AUTOMATIC HOLD + ROLLBACK TRIGGER","toolsReady":3,"toolsTotal":3,"observationPlansObserved":0,"observationPlansRequired":1,"cohortBaselinesObserved":0,"cohortBaselinesRequired":6,"decisionWindowsObserved":0,"decisionWindowsRequired":6,"driftEvaluationsObserved":0,"driftEvaluationsRequired":6,"falseDenyGuardrailsObserved":0,"falseDenyGuardrailsRequired":6,"falseAllowGuardrailsObserved":0,"falseAllowGuardrailsRequired":6,"errorBudgetsObserved":0,"errorBudgetsRequired":6,"automaticHoldsObserved":0,"automaticHoldsRequired":1,"rollbackTriggersObserved":0,"rollbackTriggersRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"observationWindowHours":24,"evidenceFreshnessMinutes":5,"cohortCount":6,"effectiveVersionSkewAllowed":0,"cohorts":[{"sequence":1,"id":"ADMIN_INTERACTIVE","label":"高权限交互","surface":"Auth 决策运行时","baselineQuestion":"管理员登录、提权与敏感操作是否出现误拒或漏放","targetFalseDenyBps":25,"targetFalseAllowBps":0,"state":"BASELINE_REQUIRED"},{"sequence":2,"id":"MEMBER_INTERACTIVE","label":"成员交互","surface":"浏览器会话 BFF","baselineQuestion":"成员会话与常规授权是否偏离冻结基线","targetFalseDenyBps":50,"targetFalseAllowBps":0,"state":"BASELINE_REQUIRED"},{"sequence":3,"id":"PUBLIC_READ","label":"公开只读","surface":"资源服务器集群","baselineQuestion":"公开读取是否被新策略意外收紧或放宽","targetFalseDenyBps":10,"targetFalseAllowBps":0,"state":"BASELINE_REQUIRED"},{"sequence":4,"id":"RESOURCE_MUTATION","label":"资源变更","surface":"资源服务器集群","baselineQuestion":"写操作授权是否保持主体、资源与动作三元组一致","targetFalseDenyBps":25,"targetFalseAllowBps":0,"state":"BASELINE_REQUIRED"},{"sequence":5,"id":"SERVICE_TO_SERVICE","label":"服务间调用","surface":"机器身份控制面","baselineQuestion":"服务账号与作用域判定是否出现不可解释漂移","targetFalseDenyBps":10,"targetFalseAllowBps":0,"state":"BASELINE_REQUIRED"},{"sequence":6,"id":"RECOVERY_PATH","label":"恢复路径","surface":"灾备待机运行时","baselineQuestion":"恢复与回滚流量是否仍满足最小授权边界","targetFalseDenyBps":50,"targetFalseAllowBps":0,"state":"BASELINE_REQUIRED"}],"decisionWindows":[{"sequence":1,"id":"W05M","label":"5 分钟快窗","minutes":5,"purpose":"捕获漏放突刺","state":"NO_EVIDENCE"},{"sequence":2,"id":"W15M","label":"15 分钟确认窗","minutes":15,"purpose":"排除单点噪声","state":"NO_EVIDENCE"},{"sequence":3,"id":"W01H","label":"1 小时快预算","minutes":60,"purpose":"结算快速燃烧","state":"NO_EVIDENCE"},{"sequence":4,"id":"W04H","label":"4 小时漂移窗","minutes":240,"purpose":"识别持续判定漂移","state":"NO_EVIDENCE"},{"sequence":5,"id":"W12H","label":"12 小时慢预算","minutes":720,"purpose":"识别周期性偏差","state":"NO_EVIDENCE"},{"sequence":6,"id":"W24H","label":"24 小时终局窗","minutes":1440,"purpose":"形成独立读回输入","state":"NO_EVIDENCE"}],"guardrails":[{"id":"FALSE_ALLOW_ZERO","label":"漏放零容忍","trigger":"任一已确认漏放 > 0 bps","disposition":"AUTO_HOLD_AND_ROLLBACK_REVIEW"},{"id":"FALSE_DENY_BUDGET","label":"误拒预算","trigger":"分群误拒超过自身目标","disposition":"BURN_BUDGET"},{"id":"UNEXPLAINED_DRIFT","label":"不可解释漂移","trigger":"现行/候选决策差异无规则说明","disposition":"HOLD_COHORT"},{"id":"STALE_EVIDENCE","label":"证据新鲜度","trigger":"证据年龄 > 5 分钟","disposition":"DENY_HEALTHY"},{"id":"VERSION_DIVERGENCE","label":"有效版本一致性","trigger":"任一分群版本根不一致","disposition":"ROLLBACK_TRIGGER"},{"id":"INSUFFICIENT_SAMPLE","label":"样本下限","trigger":"样本不足以形成置信区间","disposition":"EXTEND_WINDOW_NO_PASS"}],"budgetWindows":[{"id":"FAST_5M_1H","label":"5 分钟 + 1 小时快燃烧","burnRate":14.4,"state":"UNSETTLED"},{"id":"MID_30M_6H","label":"30 分钟 + 6 小时中燃烧","burnRate":6,"state":"UNSETTLED"},{"id":"SLOW_2H_24H","label":"2 小时 + 24 小时慢燃烧","burnRate":3,"state":"UNSETTLED"}],"transactionSteps":[{"sequence":1,"id":"B37_READBACK_PINNED","label":"冻结 B37 六消费者分发独立读回","state":"BLOCKED"},{"sequence":2,"id":"OBSERVATION_PLAN_SEALED","label":"签署无生产句柄观测计划","state":"BLOCKED"},{"sequence":3,"id":"SIX_COHORT_BASELINES_SEALED","label":"冻结六分群判定基线与版本根","state":"BLOCKED"},{"sequence":4,"id":"DECISION_WINDOWS_SETTLED","label":"结算六级决策窗口与证据年龄","state":"BLOCKED"},{"sequence":5,"id":"GUARDRAILS_ADJUDICATED","label":"逐群裁定误拒、漏放与不可解释漂移","state":"BLOCKED"},{"sequence":6,"id":"ERROR_BUDGETS_SETTLED","label":"结算快中慢多窗口错误预算","state":"BLOCKED"},{"sequence":7,"id":"HOLD_AND_ROLLBACK_TRIGGER_SETTLED","label":"裁定自动暂停和回滚触发","state":"BLOCKED"},{"sequence":8,"id":"EFFECT_INDEPENDENT_READBACK","label":"独立复取全链并保持 G04 关闭","state":"BLOCKED"}],"actors":[{"sequence":1,"id":"OBSERVATION_PLAN_REGISTRAR","duty":"登记观测计划","authority":"PLAN_ONLY"},{"sequence":2,"id":"COHORT_BASELINE_NOTARY","duty":"公证六分群基线","authority":"BASELINE_ONLY"},{"sequence":3,"id":"DECISION_WINDOW_SETTLER","duty":"结算决策窗口","authority":"WINDOW_ONLY"},{"sequence":4,"id":"DRIFT_ADJUDICATOR","duty":"裁定不可解释漂移","authority":"DRIFT_ONLY"},{"sequence":5,"id":"GUARDRAIL_NOTARY","duty":"验真误拒漏放护栏","authority":"GUARDRAIL_ONLY"},{"sequence":6,"id":"ERROR_BUDGET_SETTLER","duty":"结算多窗口错误预算","authority":"BUDGET_ONLY"},{"sequence":7,"id":"HOLD_ROLLBACK_AUTHORITY","duty":"裁定暂停与回滚触发","authority":"TRIGGER_ONLY"},{"sequence":8,"id":"INDEPENDENT_EFFECT_READER","duty":"独立读回效果证据链","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B37 独立读回是 B38 唯一上游"},{"id":"I02","label":"策略已确认不等于效果已观测"},{"id":"I03","label":"效果已观测不等于策略健康"},{"id":"I04","label":"策略健康不等于可持续安全"},{"id":"I05","label":"六分群必须分别冻结基线"},{"id":"I06","label":"基线必须绑定同一有效版本根"},{"id":"I07","label":"漏放目标严格为零"},{"id":"I08","label":"误拒必须按分群分别结算"},{"id":"I09","label":"不可解释漂移不得归入正常波动"},{"id":"I10","label":"证据年龄不得超过五分钟"},{"id":"I11","label":"样本不足只能延长窗口不得判绿"},{"id":"I12","label":"六级窗口不得以单一平均值替代"},{"id":"I13","label":"错误预算必须使用多窗口燃烧"},{"id":"I14","label":"漏放触发自动暂停而非仅告警"},{"id":"I15","label":"版本根分叉必须触发回滚裁定"},{"id":"I16","label":"暂停不得自动恢复"},{"id":"I17","label":"回滚触发不等于回滚已执行"},{"id":"I18","label":"八类签署主体和公钥必须分离"},{"id":"I19","label":"独立读回不得复用观测执行身份"},{"id":"I20","label":"工具 READY 不等于生产策略健康"}],"blockedCapabilities":["PRODUCTION_DECISION_LOG_READ","PRODUCTION_POLICY_READ","PRODUCTION_POLICY_WRITE","PRODUCTION_COHORT_DISCOVERY","PRODUCTION_BASELINE_WRITE","PRODUCTION_DRIFT_QUERY","PRODUCTION_FALSE_DENY_QUERY","PRODUCTION_FALSE_ALLOW_QUERY","PRODUCTION_ERROR_BUDGET_WRITE","AUTOMATIC_HOLD_EXECUTE","ROLLBACK_EXECUTE","EFFECTIVE_POINTER_WRITE","PAGER_DISPATCH","G04_RELEASE","G05_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"策略效果观测空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-effect-observation-cohort-baseline-decision-drift-false-deny-false-allow-guardrail-error-budget-automatic-hold-rollback-trigger-independent-readback.template.json"},{"id":"T02","label":"浏览器本地效果护栏预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-effect-observation-cohort-baseline-decision-drift-false-deny-false-allow-guardrail-error-budget-automatic-hold-rollback-trigger-independent-readback.offline.html"},{"id":"T03","label":"Node.js 八方签名与一百二十八类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-effect-observation-cohort-baseline-decision-drift-false-deny-false-allow-guardrail-error-budget-automatic-hold-rollback-trigger-independent-readback.mjs"}],"denialCodes":["EO001","EO002","EO003","EO004","EO005","EO006","EO007","EO008","EO009","EO010","EO011","EO012","EO013","EO014","EO015","EO016","EO017","EO018","EO019","EO020","EO021","EO022","EO023","EO024","EO025","EO026","EO027","EO028","EO029","EO030","EO031","EO032","EO033","EO034","EO035","EO036","EO037","EO038","EO039","EO040","EO041","EO042","EO043","EO044","EO045","EO046","EO047","EO048","EO049","EO050","EO051","EO052","EO053","EO054","EO055","EO056","EO057","EO058","EO059","EO060","EO061","EO062","EO063","EO064","EO065","EO066","EO067","EO068","EO069","EO070","EO071","EO072","EO073","EO074","EO075","EO076","EO077","EO078","EO079","EO080","EO081","EO082","EO083","EO084","EO085","EO086","EO087","EO088","EO089","EO090","EO091","EO092","EO093","EO094","EO095","EO096","EO097","EO098","EO099","EO100","EO101","EO102","EO103","EO104","EO105","EO106","EO107","EO108","EO109","EO110","EO111","EO112","EO113","EO114","EO115","EO116","EO117","EO118","EO119","EO120","EO121","EO122","EO123","EO124","EO125","EO126","EO127","EO128"],"resultBoundary":"LOCAL_POLICY_EFFECT_OBSERVATION_SETTLED_B37_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalReadsProductionDecisionLogs":false,"portalReadsProductionPolicy":false,"portalWritesProductionPolicy":false,"portalDiscoversProductionCohorts":false,"portalWritesProductionBaselines":false,"portalQueriesProductionDrift":false,"portalQueriesProductionFalseDeny":false,"portalQueriesProductionFalseAllow":false,"portalWritesProductionErrorBudgets":false,"portalExecutesAutomaticHold":false,"portalExecutesRollback":false,"portalWritesEffectivePointer":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"continuousResiliencePolicyDistributionTopologyConsumerVersionAcknowledgementPropagationSloVersionSkewIsolationPartialFailureRollbackConfirmationIndependentReadback":{"id":"D05-C02-G04-CONTINUOUS-RESILIENCE-POLICY-DISTRIBUTION-TOPOLOGY-CONSUMER-VERSION-ACKNOWLEDGEMENT-PROPAGATION-SLO-VERSION-SKEW-ISOLATION-PARTIAL-FAILURE-ROLLBACK-CONFIRMATION-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-continuous-resilience-policy-distribution-topology-consumer-version-acknowledgement-propagation-slo-version-skew-isolation-partial-failure-rollback-confirmation-independent-readback/v1","state":"TOOLS_READY_DISTRIBUTION_MANIFESTS_0_OF_1_CONSUMER_REGISTRATIONS_0_OF_6_PROPAGATION_ATTEMPTS_0_OF_6_VERSION_ACKNOWLEDGEMENTS_0_OF_6_SLO_SETTLEMENTS_0_OF_6_SKEW_ISOLATIONS_0_OF_1_PARTIAL_FAILURE_DISPOSITIONS_0_OF_1_ROLLBACK_CONFIRMATIONS_0_OF_6_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B36 READBACK + IMMUTABLE DISTRIBUTION MANIFEST + THREE-LAYER TOPOLOGY + SIX-CONSUMER ACK BARRIER + 120-SECOND PROPAGATION SLO + VERSION-SKEW ISOLATION + ROLLBACK CONFIRMATION","toolsReady":3,"toolsTotal":3,"distributionManifestsObserved":0,"distributionManifestsRequired":1,"consumerRegistrationsObserved":0,"consumerRegistrationsRequired":6,"propagationAttemptsObserved":0,"propagationAttemptsRequired":6,"versionAcknowledgementsObserved":0,"versionAcknowledgementsRequired":6,"propagationSloSettlementsObserved":0,"propagationSloSettlementsRequired":6,"versionSkewIsolationsObserved":0,"versionSkewIsolationsRequired":1,"partialFailureDispositionsObserved":0,"partialFailureDispositionsRequired":1,"rollbackConfirmationsObserved":0,"rollbackConfirmationsRequired":6,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"topologyLayers":3,"consumerCount":6,"maximumPropagationSeconds":120,"maximumEffectiveVersionSkew":0,"rollbackConfirmationSeconds":120,"topology":[{"id":"L1_AUTHORITY","label":"签名策略权威层","responsibility":"冻结 B36 发布描述符、候选根和回滚根","state":"B36_READBACK_REQUIRED"},{"id":"L2_DISTRIBUTION","label":"内容寻址分发层","responsibility":"按 generation 和 digest 扇出，不携带可调用句柄","state":"NOT_BOUND"},{"id":"L3_CONSUMERS","label":"消费者执行与读回层","responsibility":"六消费者独立验签、暂存、确认和回滚确认","state":"0_OF_6_ACKNOWLEDGED"}],"consumers":[{"sequence":1,"id":"AUTH_DECISION_RUNTIME","label":"Auth 决策运行时","domain":"CONTROL_PRIMARY","sloSeconds":30,"state":"UNREGISTERED","versionRef":null,"acknowledgementRef":null},{"sequence":2,"id":"RESOURCE_SERVER_FLEET","label":"资源服务器集群","domain":"ENFORCEMENT_PRIMARY","sloSeconds":60,"state":"UNREGISTERED","versionRef":null,"acknowledgementRef":null},{"sequence":3,"id":"BROWSER_SESSION_BFF","label":"浏览器会话 BFF","domain":"EDGE_PRIMARY","sloSeconds":60,"state":"UNREGISTERED","versionRef":null,"acknowledgementRef":null},{"sequence":4,"id":"AUDIT_EVIDENCE_PROJECTOR","label":"日志审计证据投影","domain":"EVIDENCE_PRIMARY","sloSeconds":90,"state":"UNREGISTERED","versionRef":null,"acknowledgementRef":null},{"sequence":5,"id":"RELEASE_CONTROLLER","label":"发布控制器","domain":"CONTROL_STANDBY","sloSeconds":90,"state":"UNREGISTERED","versionRef":null,"acknowledgementRef":null},{"sequence":6,"id":"DR_STANDBY_RUNTIME","label":"灾备待机运行时","domain":"RECOVERY_STANDBY","sloSeconds":120,"state":"UNREGISTERED","versionRef":null,"acknowledgementRef":null}],"versionRoots":[{"id":"CURRENT_ROOT","label":"现行策略根","value":null,"state":"B36_READBACK_REQUIRED"},{"id":"CANDIDATE_ROOT","label":"候选策略根","value":null,"state":"NOT_DISTRIBUTED"},{"id":"ROLLBACK_ROOT","label":"回滚策略根","value":null,"state":"NOT_PINNED"}],"acknowledgementStages":[{"sequence":1,"id":"REGISTERED","label":"登记消费者身份与能力","state":"BLOCKED"},{"sequence":2,"id":"FETCHED","label":"按内容地址取得候选","state":"BLOCKED"},{"sequence":3,"id":"VERIFIED","label":"独立验签和 Schema 兼容","state":"BLOCKED"},{"sequence":4,"id":"STAGED","label":"暂存但不生效","state":"BLOCKED"},{"sequence":5,"id":"ACKNOWLEDGED","label":"签署版本确认","state":"BLOCKED"},{"sequence":6,"id":"EFFECTIVE","label":"六席屏障后才可派生生效","state":"DENIED"}],"failureClasses":[{"id":"ACK_TIMEOUT","label":"确认超时","disposition":"HOLD_AND_ISOLATE"},{"id":"DIGEST_MISMATCH","label":"内容摘要不一致","disposition":"QUARANTINE_CONSUMER"},{"id":"UNSUPPORTED_SCHEMA","label":"Schema 不兼容","disposition":"PIN_CURRENT_VERSION"},{"id":"APPLY_REJECTED","label":"消费者拒绝暂存","disposition":"STOP_PROPAGATION"},{"id":"READBACK_DIVERGENCE","label":"独立读回分叉","disposition":"ROLLBACK_ALL_ACKNOWLEDGED"}],"transactionSteps":[{"sequence":1,"id":"B36_READBACK_PINNED","label":"冻结 B36 策略安全发布独立读回","state":"BLOCKED"},{"sequence":2,"id":"DISTRIBUTION_MANIFEST_SEALED","label":"签署不可变分发清单和三根","state":"BLOCKED"},{"sequence":3,"id":"TOPOLOGY_AND_CONSUMERS_ADMITTED","label":"确认三层拓扑和六消费者能力","state":"BLOCKED"},{"sequence":4,"id":"PROPAGATION_LEASE_OPENED","label":"签发一百二十秒无执行权传播租约","state":"BLOCKED"},{"sequence":5,"id":"SIX_CONSUMER_ACK_BARRIER_SETTLED","label":"结算六消费者版本确认屏障","state":"BLOCKED"},{"sequence":6,"id":"SKEW_AND_PARTIAL_FAILURE_SETTLED","label":"隔离版本偏斜并处置部分失败","state":"BLOCKED"},{"sequence":7,"id":"ROLLBACK_CONFIRMATION_SETTLED","label":"六消费者确认回滚根","state":"BLOCKED"},{"sequence":8,"id":"DISTRIBUTION_INDEPENDENT_READBACK","label":"独立复取全部内容地址并保持 G04 关闭","state":"BLOCKED"}],"actors":[{"sequence":1,"id":"DISTRIBUTION_REGISTRAR","duty":"登记分发清单与三根","authority":"MANIFEST_ONLY"},{"sequence":2,"id":"TOPOLOGY_NOTARY","duty":"公证三层拓扑和六消费者能力","authority":"TOPOLOGY_ONLY"},{"sequence":3,"id":"PROPAGATION_LEASE_CONTROLLER","duty":"签发有界传播租约","authority":"LEASE_ONLY"},{"sequence":4,"id":"CONSUMER_ACK_VERIFIER","duty":"验真六份消费者版本确认","authority":"ACK_VERIFY_ONLY"},{"sequence":5,"id":"SLO_SETTLER","duty":"结算六条传播 SLO","authority":"SLO_ONLY"},{"sequence":6,"id":"SKEW_ISOLATION_AUTHORITY","duty":"裁定版本偏斜和部分失败隔离","authority":"ISOLATION_ONLY"},{"sequence":7,"id":"ROLLBACK_CONFIRMATION_NOTARY","duty":"结算六份回滚确认","authority":"ROLLBACK_CONFIRM_ONLY"},{"sequence":8,"id":"INDEPENDENT_DISTRIBUTION_READER","duty":"独立复取分发、确认和回滚链","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B36 独立读回是 B37 唯一输入"},{"id":"I02","label":"可发布不等于已分发"},{"id":"I03","label":"已分发不等于已确认"},{"id":"I04","label":"已确认不等于已生效"},{"id":"I05","label":"分发清单必须同时绑定现行、候选和回滚根"},{"id":"I06","label":"三层拓扑不得合并故障域"},{"id":"I07","label":"六消费者身份和能力必须逐席固定"},{"id":"I08","label":"传播租约不得携带执行句柄"},{"id":"I09","label":"传播总上限不得超过一百二十秒"},{"id":"I10","label":"消费者必须先验签再暂存"},{"id":"I11","label":"六席未全量确认不得派生生效"},{"id":"I12","label":"有效版本偏斜必须严格为零"},{"id":"I13","label":"摘要不一致必须隔离单席"},{"id":"I14","label":"部分失败必须阻断后续传播"},{"id":"I15","label":"回滚必须由六消费者分别确认"},{"id":"I16","label":"回滚确认不得复用发布确认"},{"id":"I17","label":"八类签署主体和公钥必须完全分离"},{"id":"I18","label":"工具 READY 不等于策略已在生产生效"}],"blockedCapabilities":["PRODUCTION_POLICY_READ","PRODUCTION_POLICY_WRITE","PRODUCTION_CONSUMER_DISCOVERY","PRODUCTION_CONSUMER_REGISTRATION","PRODUCTION_POLICY_DISTRIBUTION","PRODUCTION_ACK_COLLECTION","PRODUCTION_SLO_TELEMETRY_READ","VERSION_SKEW_QUARANTINE_EXECUTE","PARTIAL_FAILURE_HOLD_EXECUTE","ROLLBACK_EXECUTE","PRODUCTION_EFFECTIVE_POINTER_WRITE","PAGER_DISPATCH","G04_RELEASE","G05_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"策略分发收敛空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-distribution-topology-consumer-version-acknowledgement-propagation-slo-version-skew-isolation-partial-failure-rollback-confirmation-independent-readback.template.json"},{"id":"T02","label":"浏览器本地分发拓扑预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-distribution-topology-consumer-version-acknowledgement-propagation-slo-version-skew-isolation-partial-failure-rollback-confirmation-independent-readback.offline.html"},{"id":"T03","label":"Node.js 八方签名与一百二十类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-distribution-topology-consumer-version-acknowledgement-propagation-slo-version-skew-isolation-partial-failure-rollback-confirmation-independent-readback.mjs"}],"denialCodes":["PD001","PD002","PD003","PD004","PD005","PD006","PD007","PD008","PD009","PD010","PD011","PD012","PD013","PD014","PD015","PD016","PD017","PD018","PD019","PD020","PD021","PD022","PD023","PD024","PD025","PD026","PD027","PD028","PD029","PD030","PD031","PD032","PD033","PD034","PD035","PD036","PD037","PD038","PD039","PD040","PD041","PD042","PD043","PD044","PD045","PD046","PD047","PD048","PD049","PD050","PD051","PD052","PD053","PD054","PD055","PD056","PD057","PD058","PD059","PD060","PD061","PD062","PD063","PD064","PD065","PD066","PD067","PD068","PD069","PD070","PD071","PD072","PD073","PD074","PD075","PD076","PD077","PD078","PD079","PD080","PD081","PD082","PD083","PD084","PD085","PD086","PD087","PD088","PD089","PD090","PD091","PD092","PD093","PD094","PD095","PD096","PD097","PD098","PD099","PD100","PD101","PD102","PD103","PD104","PD105","PD106","PD107","PD108","PD109","PD110","PD111","PD112","PD113","PD114","PD115","PD116","PD117","PD118","PD119","PD120"],"resultBoundary":"LOCAL_POLICY_DISTRIBUTION_CONVERGENCE_SETTLED_B36_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalReadsProductionPolicy":false,"portalWritesProductionPolicy":false,"portalDiscoversProductionConsumers":false,"portalRegistersProductionConsumers":false,"portalDistributesProductionPolicy":false,"portalCollectsProductionAcknowledgements":false,"portalReadsProductionSloTelemetry":false,"portalExecutesVersionSkewIsolation":false,"portalExecutesPartialFailureHolds":false,"portalExecutesRollback":false,"portalWritesEffectivePointer":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"continuousResiliencePolicyChangeDiffImpactGraphHistoricalReplayShadowEvaluationReleaseApprovalStagedRolloutRollbackRehearsalIndependentReadback":{"id":"D05-C02-G04-CONTINUOUS-RESILIENCE-POLICY-CHANGE-DIFF-IMPACT-GRAPH-HISTORICAL-REPLAY-SHADOW-EVALUATION-RELEASE-APPROVAL-STAGED-ROLLOUT-ROLLBACK-REHEARSAL-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-continuous-resilience-policy-change-diff-impact-graph-historical-replay-shadow-evaluation-release-approval-staged-rollout-rollback-rehearsal-independent-readback/v1","state":"TOOLS_READY_CHANGE_CANDIDATES_0_OF_1_IMPACT_ASSESSMENTS_0_OF_5_REPLAY_SIMULATIONS_0_OF_5_SHADOW_EVALUATIONS_0_OF_5_RELEASE_APPROVALS_0_OF_3_ROLLOUT_AUTHORIZATIONS_0_OF_1_ROLLBACK_REHEARSALS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B35 READBACK + IMMUTABLE POLICY DIFF + FIVE-DOMAIN IMPACT GRAPH + 90-DAY REPLAY + SHADOW EVALUATION + THREE-SEAT RELEASE APPROVAL + ROLLBACK REHEARSAL","toolsReady":3,"toolsTotal":3,"changeCandidatesObserved":0,"changeCandidatesRequired":1,"impactAssessmentsObserved":0,"impactAssessmentsRequired":5,"replaySimulationsObserved":0,"replaySimulationsRequired":5,"shadowEvaluationsObserved":0,"shadowEvaluationsRequired":5,"releaseApprovalsObserved":0,"releaseApprovalsRequired":3,"rolloutAuthorizationsObserved":0,"rolloutAuthorizationsRequired":1,"rollbackRehearsalsObserved":0,"rollbackRehearsalsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"historicalReplayDays":90,"shadowWindowMinutes":60,"releaseQuorum":3,"rollbackObjectiveSeconds":120,"impactDomains":[{"id":"CONTROL_THRESHOLDS","label":"控制阈值","question":"阈值变化是否扩大暂停或误放行边界","state":"NOT_ASSESSED"},{"id":"CADENCE_LEASES","label":"节拍租约","question":"窗口、年龄预算与租约是否仍可满足","state":"NOT_ASSESSED"},{"id":"HOLD_ESCALATION","label":"暂停升级","question":"自动暂停、升级与豁免顺序是否漂移","state":"NOT_ASSESSED"},{"id":"OWNER_WORKFLOW","label":"Owner 工作流","question":"责任、法定人数和职责分离是否变化","state":"NOT_ASSESSED"},{"id":"CONSUMER_COMPATIBILITY","label":"消费者兼容","question":"现有消费者是否会收到不同裁决或字段","state":"NOT_ASSESSED"}],"replayHorizons":[{"id":"LAST_24H","label":"最近 24 小时","purpose":"发现突发判定偏移","state":"NO_REPLAY"},{"id":"LAST_7D","label":"最近 7 天","purpose":"比较周期性漏窗","state":"NO_REPLAY"},{"id":"LAST_30D","label":"最近 30 天","purpose":"复算违约预算与整改触发","state":"NO_REPLAY"},{"id":"LAST_90D","label":"最近 90 天","purpose":"覆盖完整策略有效期","state":"NO_REPLAY"}],"rolloutStages":[{"sequence":1,"percent":1,"minimumMinutes":15,"state":"LOCKED"},{"sequence":2,"percent":5,"minimumMinutes":15,"state":"LOCKED"},{"sequence":3,"percent":25,"minimumMinutes":30,"state":"LOCKED"},{"sequence":4,"percent":50,"minimumMinutes":30,"state":"LOCKED"},{"sequence":5,"percent":100,"minimumMinutes":60,"state":"LOCKED"}],"approvalSeats":[{"sequence":1,"id":"SERVICE_OWNER","label":"服务 Owner","authority":"BUSINESS_IMPACT_APPROVAL","state":"UNBOUND"},{"sequence":2,"id":"RESILIENCE_AUTHORITY","label":"韧性权威","authority":"POLICY_CHANGE_APPROVAL","state":"UNBOUND"},{"sequence":3,"id":"INDEPENDENT_CHANGE_READER","label":"独立变更 Reader","authority":"DIFF_REPLAY_READ_ONLY","state":"UNBOUND"}],"transactionSteps":[{"sequence":1,"id":"B35_READBACK_PINNED","label":"冻结 B35 策略再认证独立读回","state":"BLOCKED"},{"sequence":2,"id":"POLICY_DIFF_SEALED","label":"签署不可变策略差异与回滚根","state":"BLOCKED"},{"sequence":3,"id":"FIVE_DOMAIN_IMPACT_SETTLED","label":"结算五域影响图","state":"BLOCKED"},{"sequence":4,"id":"HISTORICAL_REPLAY_SETTLED","label":"完成九十日历史回放","state":"BLOCKED"},{"sequence":5,"id":"SHADOW_EVALUATION_SETTLED","label":"结算六十分钟影子裁决","state":"BLOCKED"},{"sequence":6,"id":"RELEASE_AND_ROLLBACK_APPROVED","label":"三席批准发布授权与回滚预演","state":"BLOCKED"},{"sequence":7,"id":"POLICY_RELEASE_INDEPENDENT_READBACK","label":"独立复取全部内容地址并保持 G04 关闭","state":"BLOCKED"}],"actors":[{"sequence":1,"id":"CHANGE_REGISTRAR","duty":"登记策略候选与不可变差异","authority":"DIFF_ONLY"},{"sequence":2,"id":"IMPACT_SETTLER","duty":"结算五域影响图","authority":"IMPACT_ONLY"},{"sequence":3,"id":"REPLAY_EVALUATOR","duty":"复算九十日历史裁决","authority":"REPLAY_ONLY"},{"sequence":4,"id":"SHADOW_OBSERVER","duty":"比较现行与候选影子判定","authority":"SHADOW_ONLY"},{"sequence":5,"id":"RELEASE_NOTARY","duty":"结算三席发布批准","authority":"APPROVAL_ONLY"},{"sequence":6,"id":"ROLLBACK_CONTROLLER","duty":"预演一百二十秒回滚路径","authority":"ROLLBACK_ONLY"},{"sequence":7,"id":"INDEPENDENT_RELEASE_READER","duty":"独立复取差异、回放与回滚链","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B35 独立读回是 B36 唯一输入"},{"id":"I02","label":"策略已再认证不等于候选变更可发布"},{"id":"I03","label":"可发布不等于已经在生产生效"},{"id":"I04","label":"策略差异必须绑定旧根、新根和回滚根"},{"id":"I05","label":"五域影响必须分别裁定"},{"id":"I06","label":"缺少影响裁定不得开始历史回放"},{"id":"I07","label":"回放覆盖不得少于九十天"},{"id":"I08","label":"影子裁决不得影响真实请求"},{"id":"I09","label":"影子差异必须逐类解释"},{"id":"I10","label":"发布批准必须三席全票"},{"id":"I11","label":"批准与执行能力必须隔离"},{"id":"I12","label":"五级发布不得跳级"},{"id":"I13","label":"每级都必须保持可回滚"},{"id":"I14","label":"回滚目标不得超过一百二十秒"},{"id":"I15","label":"七类签署主体和公钥必须完全分离"},{"id":"I16","label":"工具 READY 不等于策略已经发布"}],"blockedCapabilities":["PRODUCTION_POLICY_READ","PRODUCTION_POLICY_WRITE","PRODUCTION_TELEMETRY_READ","HISTORICAL_ARCHIVE_READ","SHADOW_TRAFFIC_MIRROR","RELEASE_APPROVAL_CAST","ROLLOUT_AUTHORIZE","ROLLOUT_EXECUTE","ROLLBACK_EXECUTE","PRODUCTION_HOLD_APPLY","PAGER_DISPATCH","G04_RELEASE","G05_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"策略安全发布空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-change-diff-impact-graph-historical-replay-shadow-evaluation-release-approval-staged-rollout-rollback-rehearsal-independent-readback.template.json"},{"id":"T02","label":"浏览器本地策略差异预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-change-diff-impact-graph-historical-replay-shadow-evaluation-release-approval-staged-rollout-rollback-rehearsal-independent-readback.offline.html"},{"id":"T03","label":"Node.js 七方签名与一百一十二类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-policy-change-diff-impact-graph-historical-replay-shadow-evaluation-release-approval-staged-rollout-rollback-rehearsal-independent-readback.mjs"}],"denialCodes":["PR001","PR002","PR003","PR004","PR005","PR006","PR007","PR008","PR009","PR010","PR011","PR012","PR013","PR014","PR015","PR016","PR017","PR018","PR019","PR020","PR021","PR022","PR023","PR024","PR025","PR026","PR027","PR028","PR029","PR030","PR031","PR032","PR033","PR034","PR035","PR036","PR037","PR038","PR039","PR040","PR041","PR042","PR043","PR044","PR045","PR046","PR047","PR048","PR049","PR050","PR051","PR052","PR053","PR054","PR055","PR056","PR057","PR058","PR059","PR060","PR061","PR062","PR063","PR064","PR065","PR066","PR067","PR068","PR069","PR070","PR071","PR072","PR073","PR074","PR075","PR076","PR077","PR078","PR079","PR080","PR081","PR082","PR083","PR084","PR085","PR086","PR087","PR088","PR089","PR090","PR091","PR092","PR093","PR094","PR095","PR096","PR097","PR098","PR099","PR100","PR101","PR102","PR103","PR104","PR105","PR106","PR107","PR108","PR109","PR110","PR111","PR112"],"resultBoundary":"LOCAL_POLICY_SAFE_RELEASE_SETTLED_B35_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalReadsProductionPolicy":false,"portalWritesProductionPolicy":false,"portalReadsProductionTelemetry":false,"portalReadsHistoricalArchive":false,"portalMirrorsProductionTraffic":false,"portalCastsReleaseApprovals":false,"portalAuthorizesRollout":false,"portalExecutesRollout":false,"portalExecutesRollback":false,"portalAppliesProductionHolds":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"continuousResilienceEvidenceLineageTrendBudgetRepeatBreachRemediationPolicyRecertificationIndependentReadback":{"id":"D05-C02-G04-CONTINUOUS-RESILIENCE-EVIDENCE-LINEAGE-TREND-BUDGET-REPEAT-BREACH-REMEDIATION-POLICY-RECERTIFICATION-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-continuous-resilience-evidence-lineage-trend-budget-repeat-breach-remediation-policy-recertification-independent-readback/v1","state":"TOOLS_READY_LINEAGE_MANIFESTS_0_OF_5_TREND_WINDOWS_0_OF_5_BREACH_BUDGETS_0_OF_5_REPEAT_BREACH_REVIEWS_0_OF_1_REMEDIATION_DOSSIERS_0_OF_1_RECERTIFICATION_VOTES_0_OF_3_POLICY_RECERTIFICATIONS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B34 READBACK + FIVE-CLASS LINEAGE + 30-DAY TREND BUDGET + THREE-BREACH SUPPRESSION + THREE-SEAT POLICY RECERTIFICATION","toolsReady":3,"toolsTotal":3,"lineageManifestsObserved":0,"lineageManifestsRequired":5,"trendWindowsObserved":0,"trendWindowsRequired":5,"breachBudgetsObserved":0,"breachBudgetsRequired":5,"repeatBreachReviewsObserved":0,"repeatBreachReviewsRequired":1,"remediationDossiersObserved":0,"remediationDossiersRequired":1,"recertificationVotesObserved":0,"recertificationVotesRequired":3,"policyRecertificationsObserved":0,"policyRecertificationsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"trendWindowDays":30,"repeatBreachThreshold":3,"recertificationQuorum":3,"maximumPolicyAgeDays":90,"evidenceClasses":[{"id":"REPLICATION_SLO","label":"复制 SLO","lineage":"window lease → sample set → settlement","trendBudget":"30 天内漏窗 < 3","state":"LINEAGE_MISSING"},{"id":"DRIFT_CONTROL","label":"漂移控制","lineage":"scan plan → five-plane result → disposition","trendBudget":"30 天内未处置漂移 = 0","state":"LINEAGE_MISSING"},{"id":"CAPACITY_PARITY","label":"容量对等","lineage":"load profile → parity run → qualification","trendBudget":"30 天内降级窗口 < 3","state":"LINEAGE_MISSING"},{"id":"RESTORE_ASSURANCE","label":"恢复保障","lineage":"snapshot ref → restore run → digest readback","trendBudget":"30 天内失败抽样 < 3","state":"LINEAGE_MISSING"},{"id":"GAME_DAY","label":"受控 GameDay","lineage":"scenario → authority lease → drill settlement","trendBudget":"90 天内未结算演练 = 0","state":"LINEAGE_MISSING"}],"trendHorizons":[{"id":"LAST_24H","label":"最近 24 小时","purpose":"发现新鲜度突变","state":"NO_DATA"},{"id":"LAST_7D","label":"最近 7 天","purpose":"识别连续漏窗","state":"NO_DATA"},{"id":"LAST_30D","label":"最近 30 天","purpose":"结算重复违约预算","state":"NO_DATA"},{"id":"LAST_90D","label":"最近 90 天","purpose":"裁定策略是否需要再认证","state":"NO_DATA"}],"breachLevels":[{"level":"B0","trigger":"首个证据缺口","effect":"保持暂停并登记血缘缺口"},{"level":"B1","trigger":"同类第二次违约","effect":"强制形成整改草案"},{"level":"B2","trigger":"30 天内第三次违约","effect":"冻结策略再认证并升级三席裁定"},{"level":"B3","trigger":"整改后再次违约","effect":"维持 G04 关闭并进入独立问题管理"}],"recertificationSeats":[{"sequence":1,"id":"SERVICE_OWNER","label":"服务 Owner","authority":"REMEDIATION_ACCOUNTABILITY","state":"UNBOUND"},{"sequence":2,"id":"RESILIENCE_AUTHORITY","label":"韧性权威","authority":"POLICY_ADJUDICATION","state":"UNBOUND"},{"sequence":3,"id":"INDEPENDENT_EVIDENCE_READER","label":"独立证据 Reader","authority":"LINEAGE_READ_ONLY","state":"UNBOUND"}],"transactionSteps":[{"sequence":1,"id":"B34_READBACK_PINNED","label":"冻结 B34 节拍与新鲜度独立读回","state":"BLOCKED"},{"sequence":2,"id":"LINEAGE_MANIFESTS_SEALED","label":"为五类证据签署来源、转换与终局血缘","state":"BLOCKED"},{"sequence":3,"id":"TREND_WINDOWS_SETTLED","label":"结算五类三十日趋势窗口","state":"BLOCKED"},{"sequence":4,"id":"BREACH_BUDGETS_ADJUDICATED","label":"逐类裁定重复违约预算","state":"BLOCKED"},{"sequence":5,"id":"REMEDIATION_DOSSIER_SEALED","label":"对达到阈值的违约签署整改档案","state":"BLOCKED"},{"sequence":6,"id":"POLICY_RECERTIFIED","label":"三席全票重新认证持续韧性策略","state":"BLOCKED"},{"sequence":7,"id":"LINEAGE_INDEPENDENT_READBACK","label":"独立复取全部内容地址并保持 G04 关闭","state":"BLOCKED"}],"actors":[{"sequence":1,"id":"LINEAGE_REGISTRAR","duty":"登记五类证据血缘","authority":"LINEAGE_ONLY"},{"sequence":2,"id":"TREND_SETTLER","duty":"结算三十日趋势窗口","authority":"TREND_ONLY"},{"sequence":3,"id":"BREACH_BUDGET_NOTARY","duty":"裁定逐类重复违约预算","authority":"BUDGET_ONLY"},{"sequence":4,"id":"REPEAT_BREACH_ANALYST","duty":"复核同类三次违约","authority":"REVIEW_ONLY"},{"sequence":5,"id":"REMEDIATION_OWNER","duty":"签署整改档案与退出条件","authority":"REMEDIATION_ONLY"},{"sequence":6,"id":"RECERTIFICATION_NOTARY","duty":"结算三席策略再认证","authority":"RECERTIFICATION_ONLY"},{"sequence":7,"id":"INDEPENDENT_LINEAGE_READER","duty":"独立复取血缘与再认证链","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B34 独立读回是 B35 唯一输入"},{"id":"I02","label":"当前新鲜不等于长期趋势健康"},{"id":"I03","label":"趋势健康不等于策略已经再认证"},{"id":"I04","label":"五类证据必须分别形成血缘清单"},{"id":"I05","label":"血缘必须绑定来源、转换、签名与终局摘要"},{"id":"I06","label":"缺少血缘的证据不得进入趋势计算"},{"id":"I07","label":"五类趋势预算必须独立结算"},{"id":"I08","label":"三十日内第三次同类违约必须升级"},{"id":"I09","label":"整改档案不能抹去历史违约"},{"id":"I10","label":"再认证必须三席全票"},{"id":"I11","label":"再认证有效期不得超过九十天"},{"id":"I12","label":"Fixture 不得预填投票或虚构趋势"},{"id":"I13","label":"Portal 不读取生产遥测或写证据仓"},{"id":"I14","label":"七类签署主体和公钥必须完全分离"},{"id":"I15","label":"独立读回必须绑定前六份内容地址"},{"id":"I16","label":"工具 READY 不等于策略已再认证"}],"blockedCapabilities":["PRODUCTION_TELEMETRY_READ","PRODUCTION_EVIDENCE_ARCHIVE_WRITE","TREND_WINDOW_SETTLE","BREACH_BUDGET_MUTATE","INCIDENT_CREATE","REMEDIATION_EXECUTE","RECERTIFICATION_VOTE_CAST","POLICY_RECERTIFY","PRODUCTION_HOLD_APPLY","PAGER_DISPATCH","G04_RELEASE","G05_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"证据血缘与再认证空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-evidence-lineage-trend-budget-repeat-breach-remediation-policy-recertification-independent-readback.template.json"},{"id":"T02","label":"浏览器本地血缘预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-evidence-lineage-trend-budget-repeat-breach-remediation-policy-recertification-independent-readback.offline.html"},{"id":"T03","label":"Node.js 七方签名与一百零八类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-evidence-lineage-trend-budget-repeat-breach-remediation-policy-recertification-independent-readback.mjs"}],"denialCodes":["LR001","LR002","LR003","LR004","LR005","LR006","LR007","LR008","LR009","LR010","LR011","LR012","LR013","LR014","LR015","LR016","LR017","LR018","LR019","LR020","LR021","LR022","LR023","LR024","LR025","LR026","LR027","LR028","LR029","LR030","LR031","LR032","LR033","LR034","LR035","LR036","LR037","LR038","LR039","LR040","LR041","LR042","LR043","LR044","LR045","LR046","LR047","LR048","LR049","LR050","LR051","LR052","LR053","LR054","LR055","LR056","LR057","LR058","LR059","LR060","LR061","LR062","LR063","LR064","LR065","LR066","LR067","LR068","LR069","LR070","LR071","LR072","LR073","LR074","LR075","LR076","LR077","LR078","LR079","LR080","LR081","LR082","LR083","LR084","LR085","LR086","LR087","LR088","LR089","LR090","LR091","LR092","LR093","LR094","LR095","LR096","LR097","LR098","LR099","LR100","LR101","LR102","LR103","LR104","LR105","LR106","LR107","LR108"],"resultBoundary":"LOCAL_RESILIENCE_LINEAGE_RECERTIFICATION_SETTLED_B34_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalReadsProductionTelemetry":false,"portalWritesEvidenceArchive":false,"portalCreatesIncidents":false,"portalExecutesRemediation":false,"portalCastsRecertificationVotes":false,"portalRecertifiesPolicies":false,"portalAppliesProductionHolds":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"continuousResilienceAssuranceCadenceWindowLeaseEvidenceFreshnessMissedWindowRecoveryExceptionWaiverAutomaticHoldEscalationIndependentReadback":{"id":"D05-C02-G04-CONTINUOUS-RESILIENCE-ASSURANCE-CADENCE-WINDOW-LEASE-EVIDENCE-FRESHNESS-MISSED-WINDOW-RECOVERY-EXCEPTION-WAIVER-AUTOMATIC-HOLD-ESCALATION-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-continuous-resilience-assurance-cadence-window-lease-evidence-freshness-missed-window-recovery-exception-waiver-automatic-hold-escalation-independent-readback/v1","state":"TOOLS_READY_POLICIES_0_OF_1_WINDOW_LEASES_0_OF_5_FRESHNESS_ASSESSMENTS_0_OF_5_MISSED_WINDOW_RECOVERIES_0_OF_5_WAIVER_DECISIONS_0_OF_1_AUTOMATIC_HOLDS_0_OF_1_ESCALATIONS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B33 READBACK + 90-DAY LEASE HORIZON + FIVE-CLASS FRESHNESS BUDGET + MISSED-WINDOW RECOVERY + THREE-SEAT WAIVER + AUTOMATIC HOLD","toolsReady":3,"toolsTotal":3,"cadencePoliciesObserved":0,"cadencePoliciesRequired":1,"windowLeasesObserved":0,"windowLeasesRequired":5,"freshnessAssessmentsObserved":0,"freshnessAssessmentsRequired":5,"missedWindowRecoveriesObserved":0,"missedWindowRecoveriesRequired":5,"waiverDecisionsObserved":0,"waiverDecisionsRequired":1,"waiverQuorumApprovalsObserved":0,"waiverQuorumApprovalsRequired":3,"automaticHoldsObserved":0,"automaticHoldsRequired":1,"escalationsObserved":0,"escalationsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"scheduleHorizonDays":90,"maximumWaiverHours":24,"requiredWaiverQuorum":3,"cadenceClasses":[{"id":"REPLICATION_SLO","label":"复制 SLO","cadence":"每 60 分钟","maximumAge":"90 分钟","owner":"REPLICATION_SLO_SETTLER","state":"EVIDENCE_MISSING"},{"id":"DRIFT_CONTROL","label":"漂移控制","cadence":"每日","maximumAge":"24 小时","owner":"DRIFT_NOTARY","state":"EVIDENCE_MISSING"},{"id":"CAPACITY_PARITY","label":"容量对等","cadence":"每日","maximumAge":"24 小时","owner":"CAPACITY_QUALIFIER","state":"EVIDENCE_MISSING"},{"id":"RESTORE_ASSURANCE","label":"恢复保障","cadence":"每周","maximumAge":"7 天","owner":"RESTORE_WITNESS","state":"EVIDENCE_MISSING"},{"id":"GAME_DAY","label":"受控 GameDay","cadence":"每季度","maximumAge":"90 天","owner":"GAME_DAY_COMMANDER","state":"EVIDENCE_MISSING"}],"horizonBuckets":[{"id":"NOW","label":"当前","range":"T+0","state":"POLICY_REQUIRED"},{"id":"NEXT_24H","label":"未来 24 小时","range":"T+1d","state":"UNSCHEDULED"},{"id":"NEXT_7D","label":"未来 7 天","range":"T+7d","state":"UNSCHEDULED"},{"id":"NEXT_30D","label":"未来 30 天","range":"T+30d","state":"UNSCHEDULED"},{"id":"NEXT_90D","label":"未来 90 天","range":"T+90d","state":"UNSCHEDULED"}],"recoverySteps":[{"sequence":1,"id":"MISS_DETECTED","label":"按窗口租约检测漏窗","state":"BLOCKED"},{"sequence":2,"id":"AUTOMATIC_HOLD_REQUIRED","label":"立即要求自动暂停并冻结 G04","state":"REQUIRED"},{"sequence":3,"id":"RECOVERY_OWNER_BOUND","label":"绑定分离的恢复 Owner","state":"BLOCKED"},{"sequence":4,"id":"CATCH_UP_WINDOW_LEASED","label":"签署一次性补跑窗口","state":"BLOCKED"},{"sequence":5,"id":"FRESHNESS_REASSESSED","label":"补跑后重新评估证据年龄","state":"BLOCKED"},{"sequence":6,"id":"INDEPENDENT_READBACK","label":"独立 Reader 复取并裁定暂停","state":"BLOCKED"}],"waiverSeats":[{"sequence":1,"id":"SERVICE_OWNER","label":"服务 Owner","authority":"IMPACT_ATTESTATION","state":"UNBOUND"},{"sequence":2,"id":"RESILIENCE_AUTHORITY","label":"韧性权威","authority":"RISK_ADJUDICATION","state":"UNBOUND"},{"sequence":3,"id":"INDEPENDENT_RISK_READER","label":"独立风险 Reader","authority":"READ_ONLY_APPROVAL","state":"UNBOUND"}],"exceptionClasses":[{"id":"PLANNED_MAINTENANCE","label":"计划维护","maximum":"24h","selected":false},{"id":"PROVIDER_INCIDENT","label":"供应商事故","maximum":"24h","selected":false},{"id":"REGULATORY_FREEZE","label":"监管冻结","maximum":"24h","selected":false}],"escalationLevels":[{"level":"L0","trigger":"证据进入预警年龄","effect":"通知责任席；不解除控制"},{"level":"L1","trigger":"窗口租约到期","effect":"要求自动暂停；冻结 G04"},{"level":"L2","trigger":"补跑失败或重复漏窗","effect":"升级韧性权威与服务 Owner"},{"level":"L3","trigger":"豁免到期仍未恢复","effect":"维持暂停并进入独立事故裁定"}],"transactionSteps":[{"sequence":1,"id":"B33_READBACK_PINNED","label":"冻结 B33 持续韧性独立读回","state":"BLOCKED"},{"sequence":2,"id":"CADENCE_POLICY_SEALED","label":"签署五类节拍、年龄预算与九十日覆盖策略","state":"BLOCKED"},{"sequence":3,"id":"WINDOW_LEASES_SCHEDULED","label":"分别签署五类下一窗口租约","state":"BLOCKED"},{"sequence":4,"id":"EVIDENCE_FRESHNESS_ASSESSED","label":"按证据时间而非仪表盘颜色判断新鲜度","state":"BLOCKED"},{"sequence":5,"id":"MISSED_WINDOWS_RECOVERED","label":"漏窗自动暂停、补跑并重新评估","state":"BLOCKED"},{"sequence":6,"id":"WAIVER_AND_ESCALATION_ADJUDICATED","label":"三席裁定限时豁免并保持升级路径","state":"BLOCKED"},{"sequence":7,"id":"CADENCE_INDEPENDENT_READBACK","label":"独立读回全部内容地址并保持 G04 关闭","state":"BLOCKED"}],"actors":[{"sequence":1,"id":"CADENCE_POLICY_OWNER","duty":"签署节拍策略与年龄预算","authority":"POLICY_ONLY"},{"sequence":2,"id":"WINDOW_LEASE_SCHEDULER","duty":"签署五类下一窗口租约","authority":"SCHEDULE_ONLY"},{"sequence":3,"id":"FRESHNESS_NOTARY","duty":"按证据时间评估新鲜度","authority":"FRESHNESS_ONLY"},{"sequence":4,"id":"MISSED_WINDOW_RECOVERY_OWNER","duty":"编排漏窗补跑合同","authority":"RECOVERY_ONLY"},{"sequence":5,"id":"WAIVER_ADJUDICATOR","duty":"结算三席限时豁免","authority":"WAIVER_ONLY"},{"sequence":6,"id":"HOLD_ESCALATION_AUTHORITY","duty":"见证自动暂停与升级","authority":"HOLD_ONLY"},{"sequence":7,"id":"INDEPENDENT_CADENCE_READER","duty":"独立复取整条节拍链","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B33 独立读回是 B34 唯一输入"},{"id":"I02","label":"曾经通过不等于当前证据仍然新鲜"},{"id":"I03","label":"当前新鲜不等于下一窗口已经排期"},{"id":"I04","label":"五类节拍必须分别签署窗口租约"},{"id":"I05","label":"证据年龄只能由签名时间与预算计算"},{"id":"I06","label":"漏窗即要求自动暂停，不等待人工绿灯"},{"id":"I07","label":"补跑完成后必须重新评估新鲜度"},{"id":"I08","label":"豁免只允许三类显式例外"},{"id":"I09","label":"豁免必须三席全票且不超过二十四小时"},{"id":"I10","label":"豁免不得回填缺失证据或清除历史漏窗"},{"id":"I11","label":"Fixture 不得代选例外类型"},{"id":"I12","label":"Portal 不创建工单、不签发豁免、不执行补跑"},{"id":"I13","label":"自动暂停合同不等于已经改变生产"},{"id":"I14","label":"七类签署主体与公钥必须完全分离"},{"id":"I15","label":"独立读回必须绑定前六份内容地址"},{"id":"I16","label":"工具 READY 不等于持续节拍已经建立"}],"blockedCapabilities":["PRODUCTION_CRON_CREATE","PRODUCTION_TELEMETRY_READ","WINDOW_LEASE_ISSUE","EVIDENCE_FRESHNESS_ATTEST","CATCH_UP_RUN_EXECUTE","WAIVER_ISSUE","TICKET_CREATE","PRODUCTION_HOLD_APPLY","PAGER_DISPATCH","EVIDENCE_PERSIST","G04_RELEASE","G05_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"持续韧性节拍空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-assurance-cadence-window-lease-evidence-freshness-missed-window-recovery-exception-waiver-automatic-hold-escalation-independent-readback.template.json"},{"id":"T02","label":"浏览器本地节拍预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-assurance-cadence-window-lease-evidence-freshness-missed-window-recovery-exception-waiver-automatic-hold-escalation-independent-readback.offline.html"},{"id":"T03","label":"Node.js 七方签名与一百零四类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-assurance-cadence-window-lease-evidence-freshness-missed-window-recovery-exception-waiver-automatic-hold-escalation-independent-readback.mjs"}],"denialCodes":["CF001","CF002","CF003","CF004","CF005","CF006","CF007","CF008","CF009","CF010","CF011","CF012","CF013","CF014","CF015","CF016","CF017","CF018","CF019","CF020","CF021","CF022","CF023","CF024","CF025","CF026","CF027","CF028","CF029","CF030","CF031","CF032","CF033","CF034","CF035","CF036","CF037","CF038","CF039","CF040","CF041","CF042","CF043","CF044","CF045","CF046","CF047","CF048","CF049","CF050","CF051","CF052","CF053","CF054","CF055","CF056","CF057","CF058","CF059","CF060","CF061","CF062","CF063","CF064","CF065","CF066","CF067","CF068","CF069","CF070","CF071","CF072","CF073","CF074","CF075","CF076","CF077","CF078","CF079","CF080","CF081","CF082","CF083","CF084","CF085","CF086","CF087","CF088","CF089","CF090","CF091","CF092","CF093","CF094","CF095","CF096","CF097","CF098","CF099","CF100","CF101","CF102","CF103","CF104"],"resultBoundary":"LOCAL_RESILIENCE_CADENCE_POLICY_SETTLED_B33_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalReadsProductionTelemetry":false,"portalCreatesSchedules":false,"portalRunsRecovery":false,"portalIssuesWaivers":false,"portalAppliesProductionHolds":false,"portalCreatesTickets":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"continuousResilienceAssuranceReplicationDriftCapacityParityBackupRestoreGameDayFailoverReadinessIndependentReadback":{"id":"D05-C02-G04-CONTINUOUS-RESILIENCE-ASSURANCE-REPLICATION-DRIFT-CAPACITY-PARITY-BACKUP-RESTORE-GAME-DAY-FAILOVER-READINESS-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-continuous-resilience-assurance-replication-drift-capacity-parity-backup-restore-game-day-failover-readiness-independent-readback/v1","state":"TOOLS_READY_POLICIES_0_OF_1_REPLICATION_SLO_WINDOWS_0_OF_4_DRIFT_SCANS_0_OF_5_CAPACITY_PARITY_CHECKS_0_OF_4_RESTORE_SAMPLES_0_OF_4_GAME_DAY_DRILLS_0_OF_1_READINESS_CERTIFICATES_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B32 READBACK + FOUR-WINDOW RPO BARRIER + FIVE-PLANE DRIFT SCAN + CAPACITY PARITY + RESTORE SAMPLING + CONTROLLED GAME DAY","toolsReady":3,"toolsTotal":3,"assurancePoliciesObserved":0,"assurancePoliciesRequired":1,"replicationSloWindowsObserved":0,"replicationSloWindowsRequired":4,"driftScansObserved":0,"driftScansRequired":5,"capacityParityChecksObserved":0,"capacityParityChecksRequired":4,"restoreSamplesObserved":0,"restoreSamplesRequired":4,"gameDayDrillsObserved":0,"gameDayDrillsRequired":1,"readinessCertificatesObserved":0,"readinessCertificatesRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"maximumRpoSeconds":30,"minimumAssuranceWindowMinutes":60,"minimumCapacityParityPercent":100,"assuranceSteps":[{"sequence":1,"id":"B32_READBACK_PINNED","label":"冻结 B32 一主一备韧性恢复独立读回","state":"BLOCKED"},{"sequence":2,"id":"ASSURANCE_POLICY_SEALED","label":"签署复制、漂移、容量、恢复抽样与演练保障策略","state":"BLOCKED"},{"sequence":3,"id":"REPLICATION_SLO_SETTLED","label":"结算四个连续观察窗的四路复制 RPO","state":"BLOCKED"},{"sequence":4,"id":"DRIFT_PLANES_SCANNED","label":"扫描 Schema、配置、策略、Key/Endpoint 与运行发布五面漂移","state":"BLOCKED"},{"sequence":5,"id":"CAPACITY_PARITY_QUALIFIED","label":"资格化 Auth、交易账本、API 读取与事件工作器容量对等","state":"BLOCKED"},{"sequence":6,"id":"RESTORE_SAMPLES_VERIFIED","label":"验证数据库、事件、对象元数据与配置秘密引用恢复抽样","state":"BLOCKED"},{"sequence":7,"id":"GAME_DAY_READINESS_CERTIFIED","label":"执行受控 GameDay 并签发切换就绪证书","state":"BLOCKED"},{"sequence":8,"id":"ASSURANCE_INDEPENDENT_READBACK","label":"独立读回整条持续保障链，继续保持 G04 关闭","state":"BLOCKED"}],"assuranceLanes":[{"id":"REPLICATION_SLO","label":"复制 SLO","cadence":"4 × 60m","target":"RPO ≤ 30s","state":"NOT_OBSERVED"},{"id":"DRIFT_CONTROL","label":"漂移控制","cadence":"5 planes","target":"0 unresolved","state":"NOT_SCANNED"},{"id":"CAPACITY_PARITY","label":"容量对等","cadence":"4 groups","target":"100% critical","state":"NOT_QUALIFIED"},{"id":"RESTORE_ASSURANCE","label":"恢复保障","cadence":"4 samples","target":"digest + replay","state":"NOT_SAMPLED"}],"driftPlanes":[{"id":"SCHEMA","label":"数据与事件 Schema","proof":"version + digest + compatibility"},{"id":"CONFIG","label":"运行配置","proof":"content root + generation"},{"id":"POLICY","label":"授权与路由策略","proof":"policy digest + decision parity"},{"id":"KEY_ENDPOINT","label":"KeyRef 与 EndpointRef","proof":"active set + tombstone set"},{"id":"RUNTIME_RELEASE","label":"运行发布单元","proof":"source + artifact + sbom"}],"capacityGroups":[{"id":"AUTH_CONTROL","label":"Auth 控制面","target":"100% critical path","observed":null},{"id":"TRANSACTION_LEDGER","label":"交易与账本","target":"100% peak envelope","observed":null},{"id":"API_READ","label":"API 读取面","target":"100% protected traffic","observed":null},{"id":"EVENT_WORKERS","label":"事件工作器","target":"100% backlog drain","observed":null}],"restoreSampleClasses":[{"id":"DATABASE_SNAPSHOT","label":"数据库快照","acceptance":"checksum + point-in-time query"},{"id":"EVENT_JOURNAL","label":"事件日志","acceptance":"checkpoint + deterministic replay"},{"id":"OBJECT_METADATA","label":"对象元数据","acceptance":"manifest + referential integrity"},{"id":"CONFIG_SECRETREF","label":"配置与秘密引用","acceptance":"digest + reference resolution"}],"gameDayScenarios":[{"id":"PRIMARY_REGION_LOSS","label":"主区域不可用","selected":false},{"id":"STANDBY_ISOLATION","label":"备区域隔离","selected":false},{"id":"NETWORK_PARTITION","label":"跨区网络分区","selected":false}],"actors":[{"sequence":1,"id":"ASSURANCE_POLICY_OWNER","duty":"签署持续保障策略","authority":"POLICY_ONLY"},{"sequence":2,"id":"REPLICATION_SLO_SETTLER","duty":"结算四窗复制 SLO","authority":"REPLICATION_ONLY"},{"sequence":3,"id":"DRIFT_NOTARY","duty":"见证五面漂移扫描","authority":"DRIFT_ONLY"},{"sequence":4,"id":"CAPACITY_QUALIFIER","duty":"资格化四类容量对等","authority":"CAPACITY_ONLY"},{"sequence":5,"id":"RESTORE_WITNESS","duty":"见证四类恢复抽样","authority":"RESTORE_ONLY"},{"sequence":6,"id":"GAME_DAY_COMMANDER","duty":"批准演练并签发就绪证书","authority":"DRILL_ONLY"},{"sequence":7,"id":"INDEPENDENT_ASSURANCE_READER","duty":"独立复取完整保障链","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B32 独立读回是 B33 唯一输入"},{"id":"I02","label":"已再基线不等于持续满足韧性目标"},{"id":"I03","label":"四个复制观察窗必须分别结算"},{"id":"I04","label":"任何复制流 RPO 超过三十秒即失败关闭"},{"id":"I05","label":"五面漂移不得用整体绿色替代"},{"id":"I06","label":"关键容量对等不得低于百分之百"},{"id":"I07","label":"恢复抽样必须同时证明摘要和可重放性"},{"id":"I08","label":"Fixture 不得预选 GameDay 场景"},{"id":"I09","label":"演练必须在批准窗口内且具备停止条件"},{"id":"I10","label":"GameDay 不得触发未授权生产写入"},{"id":"I11","label":"复制达标不等于恢复抽样通过"},{"id":"I12","label":"恢复抽样通过不等于切换就绪"},{"id":"I13","label":"七类签署主体与公钥必须完全分离"},{"id":"I14","label":"证书必须绑定策略、SLO、漂移、容量、恢复和演练"},{"id":"I15","label":"Portal 不读取生产遥测或执行演练"},{"id":"I16","label":"工具 READY 不等于生产持续韧性已经成立"}],"blockedCapabilities":["PRODUCTION_TELEMETRY_READ","REPLICATION_SLO_ATTEST","DRIFT_SCAN_EXECUTE","CAPACITY_RESERVE","PRODUCTION_RESTORE","GAME_DAY_SCHEDULE","GAME_DAY_EXECUTE","TRAFFIC_SHIFT","AUTHORITY_LEASE","PRODUCTION_WRITE_PROBE","FAILOVER_READINESS_SIGN","EVIDENCE_PERSIST","G04_RELEASE","G05_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"持续韧性保障空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-assurance-replication-drift-capacity-parity-backup-restore-game-day-failover-readiness-independent-readback.template.json"},{"id":"T02","label":"浏览器本地保障链预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-assurance-replication-drift-capacity-parity-backup-restore-game-day-failover-readiness-independent-readback.offline.html"},{"id":"T03","label":"Node.js 七方签名与一百类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-continuous-resilience-assurance-replication-drift-capacity-parity-backup-restore-game-day-failover-readiness-independent-readback.mjs"}],"denialCodes":["CA001","CA002","CA003","CA004","CA005","CA006","CA007","CA008","CA009","CA010","CA011","CA012","CA013","CA014","CA015","CA016","CA017","CA018","CA019","CA020","CA021","CA022","CA023","CA024","CA025","CA026","CA027","CA028","CA029","CA030","CA031","CA032","CA033","CA034","CA035","CA036","CA037","CA038","CA039","CA040","CA041","CA042","CA043","CA044","CA045","CA046","CA047","CA048","CA049","CA050","CA051","CA052","CA053","CA054","CA055","CA056","CA057","CA058","CA059","CA060","CA061","CA062","CA063","CA064","CA065","CA066","CA067","CA068","CA069","CA070","CA071","CA072","CA073","CA074","CA075","CA076","CA077","CA078","CA079","CA080","CA081","CA082","CA083","CA084","CA085","CA086","CA087","CA088","CA089","CA090","CA091","CA092","CA093","CA094","CA095","CA096","CA097","CA098","CA099","CA100"],"resultBoundary":"LOCAL_CONTINUOUS_RESILIENCE_ASSURANCE_POLICY_SETTLED_B32_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalReadsProductionTelemetry":false,"portalExecutesDriftScans":false,"portalReservesCapacity":false,"portalRunsRestores":false,"portalSchedulesOrExecutesGameDay":false,"portalSignsReadinessCertificate":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"postFailoverResilienceRebaselinePrimaryBaselineStandbyRebuildReplicationCatchupCredentialEndpointRotationOldPrimaryDispositionIndependentReadback":{"id":"D05-C02-G04-POST-FAILOVER-RESILIENCE-REBASELINE-PRIMARY-BASELINE-STANDBY-REBUILD-REPLICATION-CATCHUP-CREDENTIAL-ENDPOINT-ROTATION-OLD-PRIMARY-DISPOSITION-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-post-failover-resilience-rebaseline-primary-baseline-standby-rebuild-replication-catchup-credential-endpoint-rotation-old-primary-disposition-independent-readback/v1","state":"TOOLS_READY_PRIMARY_BASELINES_0_OF_1_STANDBY_SEEDS_0_OF_1_REPLICATION_CATCHUPS_0_OF_4_ROTATIONS_0_OF_4_DISPOSITIONS_0_OF_1_RESILIENCE_CERTIFICATES_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B31 READBACK + THREE-REGION FAULT-DOMAIN SEPARATION + RPO-30S BARRIER","toolsReady":3,"toolsTotal":3,"primaryBaselinesObserved":0,"primaryBaselinesRequired":1,"standbySeedsObserved":0,"standbySeedsRequired":1,"replicationCatchupsObserved":0,"replicationCatchupsRequired":4,"credentialEndpointRotationsObserved":0,"credentialEndpointRotationsRequired":4,"oldPrimaryDispositionSettlementsObserved":0,"oldPrimaryDispositionSettlementsRequired":1,"resilienceCertificatesObserved":0,"resilienceCertificatesRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"maximumRpoSeconds":30,"minimumStandbyObservationMinutes":30,"rebaselineSteps":[{"sequence":1,"id":"B31_READBACK_PINNED","label":"冻结 B31 六十分钟稳定、会话、缓存、任务、旧主封存和回滚窗关闭读回","state":"BLOCKED"},{"sequence":2,"id":"NEW_PRIMARY_BASELINE_SEALED","label":"固化 Authority、Epoch、Ledger、JWKS、Policy、Session、Outbox、Config 八域基线","state":"BLOCKED"},{"sequence":3,"id":"NEW_STANDBY_SEEDED","label":"在独立故障域播种数据、事件、配置和秘密引用四层新备","state":"BLOCKED"},{"sequence":4,"id":"REPLICATION_STREAMS_CAUGHT_UP","label":"数据库、事件日志、对象元数据和配置状态四路复制追平","state":"BLOCKED"},{"sequence":5,"id":"KEYS_AND_ENDPOINTS_ROTATED","label":"轮换 JWKS、服务凭据、主端点和备份端点，墓碑旧引用","state":"BLOCKED"},{"sequence":6,"id":"OLD_PRIMARY_DISPOSITION_DECIDED","label":"由真实 Owner 在退役、重建、继续隔离中显式裁定","state":"BLOCKED"},{"sequence":7,"id":"RESILIENCE_CERTIFIED","label":"新备连续观察三十分钟并签发一主一备韧性恢复证书","state":"BLOCKED"},{"sequence":8,"id":"REBASELINE_INDEPENDENT_READBACK","label":"独立读回三区域、八域基线、复制、轮换、处置与韧性证书","state":"BLOCKED"}],"regionRoles":[{"id":"NEW_PRIMARY","label":"新权威主区","mode":"SOLE_WRITER","invariant":"唯一写主；绑定 B31 最终 epoch 与八域基线","state":"NOT_BASELINED"},{"id":"NEW_STANDBY","label":"新备区候选","mode":"READ_ONLY_STANDBY","invariant":"不同故障域；不可写；RPO≤30s","state":"NOT_SEEDED"},{"id":"OLD_PRIMARY","label":"隔离旧主","mode":"QUARANTINED","invariant":"保持六能力封存；不得直接复活","state":"DISPOSITION_UNDECIDED"}],"primaryBaselineDomains":[{"id":"AUTHORITY","label":"权威区域与单写身份","proof":"regionRef + soleWriterRef"},{"id":"EPOCH","label":"单调权威 epoch","proof":"authorityEpoch + fenceRoot"},{"id":"LEDGER","label":"正式账本终局头","proof":"ledgerHead + finalityCheckpoint"},{"id":"JWKS","label":"签名 KeySet 基线","proof":"jwksDigest + rotationEpoch"},{"id":"POLICY","label":"授权策略代际","proof":"policyDigest + generation"},{"id":"SESSION","label":"会话与撤销代际","proof":"sessionGeneration + revocationEpoch"},{"id":"OUTBOX","label":"事件 Outbox 游标","proof":"outboxCursor + consumerBarrier"},{"id":"CONFIG","label":"运行配置根","proof":"configDigest + secretRefSet"}],"standbySeedLayers":[{"id":"DATA","label":"数据库与不可变快照","source":"NEW_PRIMARY_BASELINE","state":"NOT_SEEDED"},{"id":"EVENTS","label":"事件日志与消费者检查点","source":"SIGNED_JOURNAL_HEAD","state":"NOT_SEEDED"},{"id":"CONFIG","label":"配置、策略与路由候选","source":"CONTENT_ADDRESSED_CONFIG","state":"NOT_SEEDED"},{"id":"SECRETS","label":"仅 SecretRef 与新 KeyRef","source":"REFERENCE_ONLY","state":"NOT_SEEDED"}],"replicationStreams":[{"id":"DATABASE","label":"数据库复制","targetRpo":"≤30s","lag":null,"state":"NOT_OBSERVED"},{"id":"EVENT_JOURNAL","label":"事件日志复制","targetRpo":"≤30s","lag":null,"state":"NOT_OBSERVED"},{"id":"OBJECT_METADATA","label":"对象元数据复制","targetRpo":"≤30s","lag":null,"state":"NOT_OBSERVED"},{"id":"CONFIG_STATE","label":"配置状态复制","targetRpo":"≤30s","lag":null,"state":"NOT_OBSERVED"}],"rotationSurfaces":[{"id":"JWKS_SIGNING_KEYS","label":"JWKS 签名密钥","oldReference":"REVOKE","newReference":"UNOBSERVED"},{"id":"SERVICE_CREDENTIALS","label":"服务间凭据","oldReference":"REVOKE","newReference":"UNOBSERVED"},{"id":"PRIMARY_ENDPOINTS","label":"主区入口与服务发现","oldReference":"TOMBSTONE","newReference":"UNOBSERVED"},{"id":"BACKUP_ENDPOINTS","label":"备区入口与恢复端点","oldReference":"TOMBSTONE","newReference":"UNOBSERVED"}],"oldPrimaryDispositionOptions":[{"id":"RETIRE","label":"退役","entry":"保留、审计、恢复证据和法定期限全部满足","effect":"显式拆除；不可由 Portal 执行"},{"id":"REBUILD","label":"重建为未来备区","entry":"旧权威、秘密、租约和身份彻底清除","effect":"按全新节点重新资格化"},{"id":"RETAIN_QUARANTINED","label":"继续隔离保留","entry":"取证、审计或恢复参考仍需要","effect":"保持离线、只读和六能力封存"}],"qualificationGates":[{"id":"Q01","label":"B31 独立读回内容地址有效"},{"id":"Q02","label":"新主八域来自同一基线截点"},{"id":"Q03","label":"新备与新主、旧主分属不同故障域"},{"id":"Q04","label":"四路复制 RPO 全部不超过三十秒"},{"id":"Q05","label":"新备只读一致性与恢复演练通过"},{"id":"Q06","label":"四类旧 KeyRef / EndpointRef 已撤销或墓碑"},{"id":"Q07","label":"旧主处置由真实 Owner 显式裁定"},{"id":"Q08","label":"新备连续三十分钟观察并由独立 Reader 复核"}],"actors":[{"sequence":1,"id":"PRIMARY_BASELINE_NOTARY","duty":"固化新主八域同截点基线","authority":"BASELINE_ONLY"},{"sequence":2,"id":"STANDBY_SEED_AUTHORITY","duty":"在独立故障域播种四层新备","authority":"SEED_ONLY"},{"sequence":3,"id":"REPLICATION_SETTLER","duty":"结算四路复制与 RPO","authority":"REPLICATION_ONLY"},{"sequence":4,"id":"ROTATION_AUTHORITY","duty":"轮换密钥、凭据与端点","authority":"ROTATION_ONLY"},{"sequence":5,"id":"OLD_PRIMARY_DISPOSITION_OWNER","duty":"裁定旧主退役、重建或继续隔离","authority":"DISPOSITION_ONLY"},{"sequence":6,"id":"RESILIENCE_CERTIFIER","duty":"资格化新备并签发韧性证书","authority":"CERTIFICATE_ONLY"},{"sequence":7,"id":"INDEPENDENT_REBASELINE_READER","duty":"独立复取完整再基线链","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B31 签名独立读回是 B32 唯一输入"},{"id":"I02","label":"稳定运行不等于跨区域韧性已经恢复"},{"id":"I03","label":"新主、新备、旧主必须是三个分离角色"},{"id":"I04","label":"任何时刻只能有一个写主"},{"id":"I05","label":"新主八域必须来自同一不可变截点"},{"id":"I06","label":"新备必须处于独立故障域且保持不可写"},{"id":"I07","label":"秘密播种只允许 SecretRef，不传输秘密值"},{"id":"I08","label":"四路复制必须分别证明 RPO 不超过三十秒"},{"id":"I09","label":"复制追平不等于备区已经资格化"},{"id":"I10","label":"旧 KeyRef 与 EndpointRef 必须撤销或墓碑"},{"id":"I11","label":"旧主处置只能由真实 Owner 三选一"},{"id":"I12","label":"重建旧主必须清除所有旧权威和秘密"},{"id":"I13","label":"新备资格化至少需要三十分钟观察"},{"id":"I14","label":"七类签署主体与公钥必须完全分离"},{"id":"I15","label":"Portal 不播种、不复制、不轮换、不处置生产资源"},{"id":"I16","label":"工具 READY 不等于生产灾备姿态已恢复"}],"blockedCapabilities":["PRIMARY_BASELINE_SEAL","STANDBY_RESOURCE_CREATE","PRODUCTION_DATA_SEED","PRODUCTION_SECRET_READ","REPLICATION_CONFIGURE","PRODUCTION_KEY_ROTATE","PRODUCTION_CREDENTIAL_ROTATE","ROUTING_ENDPOINT_ROTATE","OLD_PRIMARY_RETIRE","OLD_PRIMARY_REBUILD","QUARANTINE_RELEASE","RESILIENCE_CERTIFICATE_SIGN","PRODUCTION_TELEMETRY_READ","G04_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"新主固化与灾备再基线空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-post-failover-resilience-rebaseline-primary-baseline-standby-rebuild-replication-catchup-credential-endpoint-rotation-old-primary-disposition-independent-readback.template.json"},{"id":"T02","label":"浏览器本地三区域与处置裁定预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-post-failover-resilience-rebaseline-primary-baseline-standby-rebuild-replication-catchup-credential-endpoint-rotation-old-primary-disposition-independent-readback.offline.html"},{"id":"T03","label":"Node.js 七方签名与九十六类失败关闭验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-post-failover-resilience-rebaseline-primary-baseline-standby-rebuild-replication-catchup-credential-endpoint-rotation-old-primary-disposition-independent-readback.mjs"}],"denialCodes":["RR01","RR02","RR03","RR04","RR05","RR06","RR07","RR08","RR09","RR10","RR11","RR12","RR13","RR14","RR15","RR16","RR17","RR18","RR19","RR20","RR21","RR22","RR23","RR24","RR25","RR26","RR27","RR28","RR29","RR30","RR31","RR32","RR33","RR34","RR35","RR36","RR37","RR38","RR39","RR40","RR41","RR42","RR43","RR44","RR45","RR46","RR47","RR48","RR49","RR50","RR51","RR52","RR53","RR54","RR55","RR56","RR57","RR58","RR59","RR60","RR61","RR62","RR63","RR64","RR65","RR66","RR67","RR68","RR69","RR70","RR71","RR72","RR73","RR74","RR75","RR76","RR77","RR78","RR79","RR80","RR81","RR82","RR83","RR84","RR85","RR86","RR87","RR88","RR89","RR90","RR91","RR92","RR93","RR94","RR95","RR96"],"resultBoundary":"LOCAL_RESILIENCE_REBASELINE_POLICY_SETTLED_B31_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalCreatesStandbyResources":false,"portalSeedsProductionData":false,"portalRotatesProductionKeysOrEndpoints":false,"portalSelectsOldPrimaryDisposition":false,"portalSignsResilienceCertificate":false,"portalReadsProductionTelemetry":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"postCutoverStabilizationSessionRebindingCacheWarmupBackgroundJobResumeOldPrimaryQuarantineRollbackWindowClosureIndependentReadback":{"id":"D05-C02-G04-POST-CUTOVER-STABILIZATION-SESSION-REBINDING-CACHE-WARMUP-BACKGROUND-JOB-RESUME-OLD-PRIMARY-QUARANTINE-ROLLBACK-WINDOW-CLOSURE-INDEPENDENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-post-cutover-stabilization-session-rebinding-cache-warmup-background-job-resume-old-primary-quarantine-rollback-window-closure-independent-readback/v1","state":"TOOLS_READY_PLANS_0_OF_1_SESSION_REBINDINGS_0_OF_3_CACHE_WARMUPS_0_OF_4_JOB_RESUMES_0_OF_4_QUARANTINE_SEALS_0_OF_1_ROLLBACK_WINDOW_CLOSURES_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B30 CUTOVER READBACK + 60-MINUTE STABILITY BARRIER + OLD-PRIMARY CAPABILITY SEAL","toolsReady":3,"toolsTotal":3,"stabilizationPlansObserved":0,"stabilizationPlansRequired":1,"sessionRebindingsObserved":0,"sessionRebindingsRequired":3,"cacheWarmupsObserved":0,"cacheWarmupsRequired":4,"backgroundJobResumesObserved":0,"backgroundJobResumesRequired":4,"oldPrimaryQuarantineSealsObserved":0,"oldPrimaryQuarantineSealsRequired":1,"rollbackWindowClosuresObserved":0,"rollbackWindowClosuresRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"minimumStabilizationMinutes":60,"maximumSessionRebindingSeconds":300,"maximumCacheWarmupSeconds":600,"maximumBackgroundJobLagSeconds":30,"stabilizationSteps":[{"sequence":1,"id":"B30_CUTOVER_READBACK_PINNED","label":"冻结 B30 切流计划、路由、五级流量、四分区写探针与回退终态","state":"BLOCKED"},{"sequence":2,"id":"STABILIZATION_PLAN_DUAL_APPROVED","label":"双签六十分钟稳定计划、阈值、回退边界与职责分离","state":"BLOCKED"},{"sequence":3,"id":"SESSION_LANES_REBOUND","label":"Web、Mobile 与服务令牌三类会话分别重绑定新权威区","state":"BLOCKED"},{"sequence":4,"id":"CACHE_CELLS_WARMED","label":"JWKS、策略、会话与只读投影四类缓存暖化并验证代际","state":"BLOCKED"},{"sequence":5,"id":"BACKGROUND_JOBS_RESUMED","label":"过期、审计、对账与清理四类后台任务按游标恢复","state":"BLOCKED"},{"sequence":6,"id":"OLD_PRIMARY_QUARANTINE_SEALED","label":"封存旧主写网、凭据、租约、调度器、入口和配置能力","state":"BLOCKED"},{"sequence":7,"id":"ROLLBACK_WINDOW_CLOSED","label":"六十分钟全绿后双签关闭回滚窗口，异常则重新进入 B29/B30","state":"BLOCKED"},{"sequence":8,"id":"POST_CUTOVER_FINALITY_READBACK","label":"独立读回会话、缓存、任务、旧主隔离和回滚窗口终态","state":"BLOCKED"}],"observationWindows":[{"id":"OW01","range":"00–15m","gate":"新权威区单写、错误率与 P99 不劣化","state":"NOT_OBSERVED"},{"id":"OW02","range":"15–30m","gate":"三会话重绑定与四缓存代际一致","state":"NOT_OBSERVED"},{"id":"OW03","range":"30–45m","gate":"四任务游标追平且没有重复副作用","state":"NOT_OBSERVED"},{"id":"OW04","range":"45–60m","gate":"旧主六能力封存并满足回滚窗关闭条件","state":"NOT_OBSERVED"}],"sessionLanes":[{"id":"WEB_SESSION","label":"Web / BFF 会话","invariant":"Cookie 与 SessionRef 只指向新权威区","state":"NOT_REBOUND"},{"id":"MOBILE_SESSION","label":"iOS / Mobile 会话","invariant":"Refresh rotation 不复用旧 epoch","state":"NOT_REBOUND"},{"id":"SERVICE_TOKEN","label":"服务令牌与机器会话","invariant":"Audience、KeyRef 与租约 epoch 同步","state":"NOT_REBOUND"}],"cacheCells":[{"id":"JWKS_CACHE","label":"JWKS 与签名密钥缓存","invariant":"KeySet digest 与新权威区一致","state":"NOT_WARMED"},{"id":"POLICY_CACHE","label":"授权策略缓存","invariant":"Policy generation 单调且旧代失效","state":"NOT_WARMED"},{"id":"SESSION_CACHE","label":"会话与撤销缓存","invariant":"撤销 epoch 与 session generation 一致","state":"NOT_WARMED"},{"id":"PROJECTION_CACHE","label":"G04 只读投影缓存","invariant":"三消费者同代且 ETag 一致","state":"NOT_WARMED"}],"backgroundJobQueues":[{"id":"TOKEN_EXPIRY","label":"Token 过期与撤销","resumeFrom":"SIGNED_CURSOR","maximumLag":"30s","state":"NOT_RESUMED"},{"id":"AUDIT_OUTBOX","label":"审计 Outbox 发布","resumeFrom":"TERMINAL_EVENT_CURSOR","maximumLag":"30s","state":"NOT_RESUMED"},{"id":"RECONCILIATION","label":"授权与账本对账","resumeFrom":"SETTLEMENT_CHECKPOINT","maximumLag":"30s","state":"NOT_RESUMED"},{"id":"CLEANUP_JANITOR","label":"隔离与过期清理","resumeFrom":"FENCED_JOURNAL_HEAD","maximumLag":"30s","state":"NOT_RESUMED"}],"oldPrimaryQuarantineControls":[{"id":"QP01","capability":"WRITE_NETWORK","proof":"旧主写网络策略为 DENY"},{"id":"QP02","capability":"WRITE_CREDENTIALS","proof":"旧主写凭据已撤销且不可刷新"},{"id":"QP03","capability":"AUTHORITY_LEASE","proof":"旧 epoch 永久围栏且无未过期租约"},{"id":"QP04","capability":"BACKGROUND_SCHEDULER","proof":"旧主调度器保持停止"},{"id":"QP05","capability":"ROUTING_ENDPOINT","proof":"DNS、入口与服务发现不再指向旧主"},{"id":"QP06","capability":"CONFIG_MUTATION","proof":"旧主配置面只读并锁定"}],"rollbackWindowClosureConditions":[{"id":"RC01","label":"连续六十分钟稳定观察完成"},{"id":"RC02","label":"三类会话重绑定全部终局"},{"id":"RC03","label":"四类缓存暖化和代际读回全部一致"},{"id":"RC04","label":"四类后台任务追平且没有重复副作用"},{"id":"RC05","label":"旧主六项能力封存证明完整"},{"id":"RC06","label":"错误预算、延迟、饱和度和队列滞后均在阈值内"},{"id":"RC07","label":"关闭后恢复必须重新进入 B29 资格与 B30 切流"},{"id":"RC08","label":"独立 Reader 与六类执行主体完全分离"}],"actors":[{"sequence":1,"id":"STABILIZATION_COMMANDER","duty":"冻结 B30 输入并批准观察窗口","authority":"PLAN_ONLY"},{"sequence":2,"id":"SESSION_REBIND_AUTHORITY","duty":"重绑定三类会话且禁止旧 epoch","authority":"SESSION_ONLY"},{"sequence":3,"id":"CACHE_WARMUP_AUTHORITY","duty":"暖化四缓存并验证代际与 ETag","authority":"CACHE_ONLY"},{"sequence":4,"id":"JOB_RESUME_AUTHORITY","duty":"按签名游标恢复四类后台任务","authority":"JOB_ONLY"},{"sequence":5,"id":"OLD_PRIMARY_QUARANTINE_AUTHORITY","duty":"封存旧主六项生产能力","authority":"QUARANTINE_ONLY"},{"sequence":6,"id":"ROLLBACK_WINDOW_AUTHORITY","duty":"结算并关闭回滚窗口","authority":"CLOSURE_ONLY"},{"sequence":7,"id":"INDEPENDENT_STABILITY_READER","duty":"独立读回完整稳定链且不得参与执行","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B30 签名切流独立读回是 B31 唯一合法输入"},{"id":"I02","label":"到达 100% 流量不等于切流已经稳定"},{"id":"I03","label":"六十分钟观察窗口不得压缩、跳段或并行结算"},{"id":"I04","label":"Web、Mobile 和服务令牌必须分别重绑定"},{"id":"I05","label":"任何旧 epoch 会话或令牌必须永久拒绝"},{"id":"I06","label":"四缓存必须验证 digest、generation、ETag 与撤销 epoch"},{"id":"I07","label":"后台任务只能从签名游标恢复且不得重复副作用"},{"id":"I08","label":"旧主六项能力必须分别形成不可逆封存证明"},{"id":"I09","label":"错误预算、P99、饱和度或队列滞后超标即保持窗口开放"},{"id":"I10","label":"关闭回滚窗不能自动删除旧主数据或证据"},{"id":"I11","label":"回滚窗关闭后故障恢复必须重新进入 B29 和 B30"},{"id":"I12","label":"六类执行签署主体与独立 Reader 完全分离"},{"id":"I13","label":"Portal 不重绑定会话、不暖缓存、不恢复任务、不封存旧主"},{"id":"I14","label":"工具 READY 不等于任何生产稳定事实已发生"}],"blockedCapabilities":["STABILIZATION_PLAN_APPROVE","PRODUCTION_SESSION_REBIND","PRODUCTION_CACHE_WARMUP","BACKGROUND_JOB_RESUME","OLD_PRIMARY_NETWORK_MUTATE","OLD_PRIMARY_CREDENTIAL_REVOKE","OLD_PRIMARY_SCHEDULER_STOP","ROUTING_ENDPOINT_RETIRE","ROLLBACK_WINDOW_CLOSE","PRODUCTION_TELEMETRY_READ","PRODUCTION_DATA_DELETE","QUARANTINE_RELEASE","G04_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"切流后稳定、旧主封存与回滚窗关闭空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-post-cutover-stabilization-session-rebinding-cache-warmup-background-job-resume-old-primary-quarantine-rollback-window-closure-independent-readback.template.json"},{"id":"T02","label":"浏览器本地稳定序列与旧主封存预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-post-cutover-stabilization-session-rebinding-cache-warmup-background-job-resume-old-primary-quarantine-rollback-window-closure-independent-readback.offline.html"},{"id":"T03","label":"Node.js 会话、缓存、任务与回滚窗终局验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-post-cutover-stabilization-session-rebinding-cache-warmup-background-job-resume-old-primary-quarantine-rollback-window-closure-independent-readback.mjs"}],"denialCodes":["PS01","PS02","PS03","PS04","PS05","PS06","PS07","PS08","PS09","PS10","PS11","PS12","PS13","PS14","PS15","PS16","PS17","PS18","PS19","PS20","PS21","PS22","PS23","PS24","PS25","PS26","PS27","PS28","PS29","PS30","PS31","PS32","PS33","PS34","PS35","PS36","PS37","PS38","PS39","PS40","PS41","PS42","PS43","PS44","PS45","PS46","PS47","PS48","PS49","PS50","PS51","PS52","PS53","PS54","PS55","PS56","PS57","PS58","PS59","PS60","PS61","PS62","PS63","PS64","PS65","PS66","PS67","PS68","PS69","PS70","PS71","PS72","PS73","PS74","PS75","PS76","PS77","PS78","PS79","PS80","PS81","PS82","PS83","PS84","PS85","PS86","PS87","PS88","PS89","PS90","PS91","PS92"],"resultBoundary":"LOCAL_POST_CUTOVER_STABILITY_POLICY_SETTLED_B30_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalApprovesStabilizationPlan":false,"portalRebindsProductionSessions":false,"portalWarmsProductionCaches":false,"portalResumesBackgroundJobs":false,"portalSealsOldPrimary":false,"portalClosesRollbackWindow":false,"portalReadsProductionTelemetry":false,"portalReleasesQuarantine":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"disasterRecoveryCutoverConnectionDrainRoutingPropagationProgressiveTrafficWriteProbeAutomaticRollbackSettlementReadback":{"id":"D05-C02-G04-DISASTER-RECOVERY-CUTOVER-CONNECTION-DRAIN-ROUTING-PROPAGATION-PROGRESSIVE-TRAFFIC-WRITE-PROBE-AUTOMATIC-ROLLBACK-SETTLEMENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-disaster-recovery-cutover-connection-drain-routing-propagation-progressive-traffic-write-probe-automatic-rollback-settlement-readback/v1","state":"TOOLS_READY_PLANS_0_OF_1_TRAFFIC_STAGES_0_OF_5_DRAINS_0_OF_2_PROPAGATIONS_0_OF_3_WRITE_PROBES_0_OF_4_ROLLBACK_SETTLEMENTS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B29 AUTHORITY LEASE + FIVE-STAGE TRAFFIC + WRITE-PROBE FENCING","toolsReady":3,"toolsTotal":3,"cutoverPlansObserved":0,"cutoverPlansRequired":1,"trafficStagesObserved":0,"trafficStagesRequired":5,"connectionDrainReceiptsObserved":0,"connectionDrainReceiptsRequired":2,"routingPropagationReceiptsObserved":0,"routingPropagationReceiptsRequired":3,"writeProbeSettlementsObserved":0,"writeProbeSettlementsRequired":4,"rollbackSettlementsObserved":0,"rollbackSettlementsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"maximumDrainSeconds":120,"maximumDnsTtlSeconds":30,"maximumPropagationSeconds":90,"stageObservationSeconds":300,"maximumWriteProbeSeconds":15,"maximumRollbackSeconds":120,"cutoverSteps":[{"sequence":1,"id":"B29_AUTHORITY_LEASE_PINNED","label":"冻结 B29 资格、围栏、单写 epoch 与未过期恢复租约","state":"BLOCKED"},{"sequence":2,"id":"CUTOVER_PLAN_DUAL_APPROVED","label":"双签切流计划、五级权重、SLO 和自动中止阈值","state":"BLOCKED"},{"sequence":3,"id":"PRIMARY_CONNECTIONS_DRAINED","label":"停止旧主新连接并排空写连接、会话和后台任务","state":"BLOCKED"},{"sequence":4,"id":"EDGE_ROUTING_PROPAGATED","label":"验证 DNS、入口网关和服务发现三层传播","state":"BLOCKED"},{"sequence":5,"id":"PROGRESSIVE_TRAFFIC_SHIFTED","label":"按 1%、5%、25%、50%、100% 五级迁移流量","state":"BLOCKED"},{"sequence":6,"id":"PARTITIONED_WRITE_PROBES_SETTLED","label":"四分区幂等写探针分别形成终局读回","state":"BLOCKED"},{"sequence":7,"id":"ROLLBACK_WINDOW_SETTLED","label":"SLO 超标自动归零流量并在两分钟内完成回退","state":"BLOCKED"},{"sequence":8,"id":"CUTOVER_FINALITY_READBACK","label":"独立读回租约、路由、流量、写探针与回退终态","state":"BLOCKED"}],"trafficStages":[{"id":"TS01","weight":"1%","observation":"5 分钟","gate":"错误率、延迟、写一致性全部通过","state":"NOT_EXECUTED"},{"id":"TS02","weight":"5%","observation":"5 分钟","gate":"无旧主新连接且无双写","state":"NOT_EXECUTED"},{"id":"TS03","weight":"25%","observation":"5 分钟","gate":"四分区写探针全部终局","state":"NOT_EXECUTED"},{"id":"TS04","weight":"50%","observation":"5 分钟","gate":"消费者滞后和缓存命中稳定","state":"NOT_EXECUTED"},{"id":"TS05","weight":"100%","observation":"30 分钟","gate":"旧主流量归零并完成独立读回","state":"NOT_EXECUTED"}],"routingPlanes":[{"id":"DNS_EDGE","label":"权威 DNS 与边缘缓存","target":"TTL ≤ 30 秒 · 传播 ≤ 90 秒","observed":null,"state":"NOT_OBSERVED"},{"id":"INGRESS_GATEWAY","label":"入口网关与负载均衡","target":"旧主新连接 = 0","observed":null,"state":"NOT_OBSERVED"},{"id":"SERVICE_DISCOVERY","label":"服务发现与内部调用","target":"恢复端点 100% 一致","observed":null,"state":"NOT_OBSERVED"}],"writeProbePartitions":[{"id":"AUTH_SESSION","label":"会话写入","invariant":"单调版本 + 幂等键","state":"NOT_EXECUTED"},{"id":"AUTH_GRANT","label":"授权写入","invariant":"唯一 subject/resource tuple","state":"NOT_EXECUTED"},{"id":"AUDIT_EVENT","label":"审计事件","invariant":"追加一次且事件头连续","state":"NOT_EXECUTED"},{"id":"PROGRAM_LEDGER","label":"计划账本","invariant":"Portal 禁止写入","state":"NOT_EXECUTED"}],"abortTriggers":[{"id":"AT01","signal":"五分钟错误预算燃烧率 > 2","action":"TRAFFIC_ZERO_AND_ROLLBACK"},{"id":"AT02","signal":"P99 延迟超过基线 25%","action":"HOLD_STAGE_AND_DRAIN"},{"id":"AT03","signal":"检测到旧主新写或双租约","action":"FENCE_BOTH_AND_INCIDENT"},{"id":"AT04","signal":"任一分区写探针无法终局","action":"ROLLBACK_WITH_QUARANTINE"},{"id":"AT05","signal":"DNS、入口与服务发现读回不一致","action":"STOP_PROPAGATION"},{"id":"AT06","signal":"B29 租约到期或心跳丢失","action":"REVOKE_RECOVERY_WRITE"}],"actors":[{"sequence":1,"id":"CUTOVER_COMMANDER","duty":"冻结 B29 输入并批准切流窗口","authority":"PLAN_ONLY"},{"sequence":2,"id":"CONNECTION_DRAIN_AUTHORITY","duty":"停止旧主新连接并证明排空","authority":"DRAIN_ONLY"},{"sequence":3,"id":"ROUTING_AUTHORITY","duty":"执行 DNS、入口和服务发现传播","authority":"ROUTING_ONLY"},{"sequence":4,"id":"TRAFFIC_STAGE_AUTHORITY","duty":"按权重逐级推进且不能跳级","authority":"TRAFFIC_ONLY"},{"sequence":5,"id":"WRITE_PROBE_WITNESS","duty":"执行四分区幂等探针并形成终局","authority":"PROBE_ONLY"},{"sequence":6,"id":"ROLLBACK_AUTHORITY","duty":"触发自动回退并结算残留流量","authority":"ROLLBACK_ONLY"},{"sequence":7,"id":"INDEPENDENT_CUTOVER_READER","duty":"读回完整切流链且不得参与执行","authority":"READ_ONLY"}],"safetyInvariants":[{"id":"I01","label":"B29 已签名资格、围栏和未过期租约是唯一合法输入"},{"id":"I02","label":"旧主新连接必须先归零，不能用连接超时冒充排空"},{"id":"I03","label":"DNS、入口和服务发现必须分别传播与读回"},{"id":"I04","label":"流量只能按 1、5、25、50、100 百分比逐级推进"},{"id":"I05","label":"每级至少观察五分钟且不得并行推进下一阶段"},{"id":"I06","label":"四分区写探针必须幂等、单写并形成终局收据"},{"id":"I07","label":"任何旧 epoch 写入必须永久拒绝并隔离"},{"id":"I08","label":"错误预算、延迟、双写或传播漂移任一超标即自动中止"},{"id":"I09","label":"自动回退必须在两分钟内把恢复流量降为零"},{"id":"I10","label":"回退不自动恢复旧主写权，必须重新进入 B29 资格化"},{"id":"I11","label":"独立 Reader 与六类执行主体、KeyRef 全部分离"},{"id":"I12","label":"Portal 不执行排空、路由、切流、写探针或回退"}],"blockedCapabilities":["CUTOVER_PLAN_APPROVE","PRIMARY_CONNECTION_DRAIN","DNS_MUTATE","INGRESS_ROUTE_MUTATE","SERVICE_DISCOVERY_MUTATE","TRAFFIC_WEIGHT_SHIFT","PRODUCTION_WRITE_PROBE","AUTOMATIC_ROLLBACK_EXECUTE","AUTHORITY_LEASE_MUTATE","PRODUCTION_SESSION_REBIND","QUARANTINE_RELEASE","G04_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"灾备切流、路由传播与回退结算空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-disaster-recovery-cutover-connection-drain-routing-propagation-progressive-traffic-write-probe-automatic-rollback-settlement-readback.template.json"},{"id":"T02","label":"浏览器本地切流序列与自动中止预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-disaster-recovery-cutover-connection-drain-routing-propagation-progressive-traffic-write-probe-automatic-rollback-settlement-readback.offline.html"},{"id":"T03","label":"Node.js 路由、写探针与回退终局验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-disaster-recovery-cutover-connection-drain-routing-propagation-progressive-traffic-write-probe-automatic-rollback-settlement-readback.mjs"}],"denialCodes":["CT01","CT02","CT03","CT04","CT05","CT06","CT07","CT08","CT09","CT10","CT11","CT12","CT13","CT14","CT15","CT16","CT17","CT18","CT19","CT20","CT21","CT22","CT23","CT24","CT25","CT26","CT27","CT28","CT29","CT30","CT31","CT32","CT33","CT34","CT35","CT36","CT37","CT38","CT39","CT40","CT41","CT42","CT43","CT44","CT45","CT46","CT47","CT48","CT49","CT50","CT51","CT52","CT53","CT54","CT55","CT56","CT57","CT58","CT59","CT60","CT61","CT62","CT63","CT64","CT65","CT66","CT67","CT68","CT69","CT70","CT71","CT72","CT73","CT74","CT75","CT76","CT77","CT78","CT79","CT80","CT81","CT82","CT83","CT84","CT85","CT86","CT87","CT88"],"resultBoundary":"LOCAL_CUTOVER_POLICY_SETTLED_B29_AUTHORITY_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalApprovesCutoverPlan":false,"portalDrainsProductionConnections":false,"portalMutatesRouting":false,"portalShiftsProductionTraffic":false,"portalExecutesProductionWriteProbes":false,"portalExecutesAutomaticRollback":false,"portalMutatesAuthorityLease":false,"portalReleasesQuarantine":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"crossRegionFailoverQualificationRpoRtoAuthorityLeaseSplitBrainProtectionFailbackWindowDrillSettlementReadback":{"id":"D05-C02-G04-CROSS-REGION-FAILOVER-QUALIFICATION-RPO-RTO-AUTHORITY-LEASE-SPLIT-BRAIN-PROTECTION-FAILBACK-WINDOW-DRILL-SETTLEMENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-cross-region-failover-qualification-rpo-rto-authority-lease-split-brain-protection-failback-window-drill-settlement-readback/v1","state":"TOOLS_READY_QUALIFICATIONS_0_OF_1_RPO_PROOFS_0_OF_2_RTO_RUNS_0_OF_2_AUTHORITY_LEASES_0_OF_1_SPLIT_BRAIN_FENCES_0_OF_2_FAILBACK_WINDOWS_0_OF_1_DRILL_SETTLEMENTS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B28 SIGNED CHECKPOINT + MONOTONIC AUTHORITY EPOCH + LEASE FENCING","toolsReady":3,"toolsTotal":3,"failoverQualificationsObserved":0,"failoverQualificationsRequired":1,"rpoProofsObserved":0,"rpoProofsRequired":2,"rtoRunsObserved":0,"rtoRunsRequired":2,"authorityLeasesObserved":0,"authorityLeasesRequired":1,"splitBrainFencesObserved":0,"splitBrainFencesRequired":2,"failbackWindowsObserved":0,"failbackWindowsRequired":1,"drillSettlementsObserved":0,"drillSettlementsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"maximumRpoSeconds":60,"maximumRtoSeconds":900,"maximumAuthorityLeaseSeconds":300,"heartbeatIntervalSeconds":15,"fencingGraceSeconds":30,"minimumFailbackObservationMinutes":30,"failoverSteps":[{"sequence":1,"id":"B28_DR_CHECKPOINTS_PINNED","label":"冻结 B28 双区域签名检查点、归档摘要与四消费者游标","state":"BLOCKED"},{"sequence":2,"id":"FAILOVER_CANDIDATE_QUALIFIED","label":"校验恢复区域容量、依赖、密钥、时钟和只读健康","state":"BLOCKED"},{"sequence":3,"id":"RPO_BUDGET_PROVED","label":"分别证明事件链与四消费者检查点不超过六十秒","state":"BLOCKED"},{"sequence":4,"id":"RTO_RUNBOOK_TIMED","label":"计时演练控制面与数据面均在十五分钟内恢复","state":"BLOCKED"},{"sequence":5,"id":"PRIMARY_AUTHORITY_LEASE_FENCED","label":"撤销旧主区域租约并以单调 epoch 隔离旧写入者","state":"BLOCKED"},{"sequence":6,"id":"RECOVERY_AUTHORITY_LEASE_GRANTED","label":"双签发放一次性恢复写租约并限制五分钟","state":"BLOCKED"},{"sequence":7,"id":"FAILBACK_WINDOW_SETTLED","label":"原主区域完成追赶、观察、双签回切与新 epoch 结算","state":"BLOCKED"},{"sequence":8,"id":"DRILL_SETTLEMENT_READBACK","label":"独立读回 RPO、RTO、租约、围栏、回切与审计链","state":"BLOCKED"}],"objectives":[{"id":"EVENT_RPO","label":"不可变事件链","target":"≤ 60 秒","observed":null,"state":"NOT_OBSERVED"},{"id":"CONSUMER_RPO","label":"四消费者检查点","target":"≤ 60 秒","observed":null,"state":"NOT_OBSERVED"},{"id":"CONTROL_PLANE_RTO","label":"控制面恢复","target":"≤ 900 秒","observed":null,"state":"NOT_OBSERVED"},{"id":"DATA_PLANE_RTO","label":"数据面恢复","target":"≤ 900 秒","observed":null,"state":"NOT_OBSERVED"}],"regions":[{"id":"PRIMARY_REGION","label":"当前权威主区域","role":"SOLE_WRITER_UNTIL_FENCED","authorityEpoch":null,"leaseId":null,"writeEnabled":false,"state":"NOT_OBSERVED"},{"id":"RECOVERY_REGION","label":"候选恢复区域","role":"READ_ONLY_UNTIL_ONE_TIME_LEASE","authorityEpoch":null,"leaseId":null,"writeEnabled":false,"state":"NOT_OBSERVED"}],"incidentClasses":[{"id":"CONTROL_PLANE_LOSS","trigger":"主区域控制面不可达但数据检查点可读","decision":"QUALIFY_RECOVERY_REGION"},{"id":"DATA_PLANE_CORRUPTION","trigger":"主区域事件头、账本头或游标摘要漂移","decision":"QUARANTINE_AND_REBUILD"},{"id":"REGION_PARTITION","trigger":"两个区域无法互相见证租约","decision":"NO_NEW_WRITER_WITHOUT_QUORUM"},{"id":"FALSE_POSITIVE","trigger":"探针异常但主区域权威租约仍健康","decision":"HOLD_FAILOVER"}],"leaseGuards":[{"id":"LG01","guard":"任一时刻只能存在一个未过期写租约","failure":"DUAL_WRITER_DENIED"},{"id":"LG02","guard":"新租约 epoch 必须严格大于所有已读回 epoch","failure":"STALE_EPOCH_DENIED"},{"id":"LG03","guard":"旧主区域必须先撤销网络写能力和凭据再授予新租约","failure":"FENCE_REQUIRED"},{"id":"LG04","guard":"租约最长五分钟且每十五秒心跳，失联三十秒自动失效","failure":"LEASE_EXPIRED"},{"id":"LG05","guard":"恢复区域不得继承旧主区域的租约 ID、会话或写句柄","failure":"CAPABILITY_REUSE_DENIED"},{"id":"LG06","guard":"回切必须创建更高 epoch，禁止把旧主区域直接重新启写","failure":"FAILBACK_REQUALIFICATION_REQUIRED"}],"drillScenarios":[{"id":"DR01","label":"主区域完全失联","expected":"围栏证明后才允许恢复区域租约"},{"id":"DR02","label":"区域间网络分区","expected":"没有法定人数时两个区域都不得获得新租约"},{"id":"DR03","label":"恢复区域检查点落后","expected":"RPO 超标并阻断切换"},{"id":"DR04","label":"回切过程中旧主区域复活","expected":"旧 epoch 写入全部拒绝并进入隔离"}],"actors":[{"sequence":1,"id":"INCIDENT_COMMANDER","duty":"声明故障等级并冻结自动化","authority":"INCIDENT_SCOPE_ONLY"},{"sequence":2,"id":"FAILOVER_QUALIFIER","duty":"校验 B28 检查点、容量、依赖与 RPO/RTO","authority":"QUALIFICATION_ONLY"},{"sequence":3,"id":"PRIMARY_FENCE_AUTHORITY","duty":"撤销旧主区域写网络、凭据与租约","authority":"FENCE_ONLY"},{"sequence":4,"id":"RECOVERY_LEASE_AUTHORITY","duty":"双签授予一次性恢复写租约","authority":"LEASE_ONLY"},{"sequence":5,"id":"FAILBACK_AUTHORITY","duty":"在观察窗后签发更高 epoch 回切","authority":"FAILBACK_ONLY"},{"sequence":6,"id":"INDEPENDENT_READER","duty":"读回双区域、审计链、RPO/RTO 和围栏结果","authority":"READ_ONLY"}],"protectionInvariants":[{"id":"I01","label":"B28 双区域签名检查点和独立读回是切换资格唯一输入","state":"REQUIRED"},{"id":"I02","label":"恢复区域数据可读永远不自动等于恢复区域可写","state":"REQUIRED"},{"id":"I03","label":"事件链和消费者两类 RPO 必须分别证明且均不超过六十秒","state":"REQUIRED"},{"id":"I04","label":"控制面和数据面两类 RTO 必须分别计时且均不超过十五分钟","state":"REQUIRED"},{"id":"I05","label":"任何新写租约前必须读回旧主区域围栏证明","state":"REQUIRED"},{"id":"I06","label":"authority epoch 单调递增，旧 epoch 永久不能恢复写能力","state":"REQUIRED"},{"id":"I07","label":"同一时刻只能有一个区域持有有效写租约","state":"REQUIRED"},{"id":"I08","label":"跨区域失联且无独立法定人数时必须双边失败关闭","state":"REQUIRED"},{"id":"I09","label":"切换租约到期、心跳丢失或摘要漂移必须自动撤销","state":"REQUIRED"},{"id":"I10","label":"回切需经过追赶、摘要一致、三十分钟观察和双签授权","state":"REQUIRED"},{"id":"I11","label":"演练结算必须包含故障注入、时间证据、围栏和独立读回","state":"REQUIRED"},{"id":"I12","label":"Portal 不执行切换、围栏、租约、回切或生产演练","state":"REQUIRED"}],"blockedCapabilities":["FAILOVER_EXECUTE","PRIMARY_NETWORK_FENCE","PRIMARY_CREDENTIAL_REVOKE","AUTHORITY_EPOCH_CAS","RECOVERY_WRITE_LEASE_GRANT","RECOVERY_TRAFFIC_SHIFT","FAILBACK_EXECUTE","PRODUCTION_DRILL_INJECT","QUARANTINE_RELEASE","G04_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"灾备切换资格、租约与演练结算空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-cross-region-failover-qualification-rpo-rto-authority-lease-split-brain-protection-failback-window-drill-settlement-readback.template.json"},{"id":"T02","label":"浏览器本地灾备切换与脑裂保护预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-cross-region-failover-qualification-rpo-rto-authority-lease-split-brain-protection-failback-window-drill-settlement-readback.offline.html"},{"id":"T03","label":"Node.js RPO/RTO、权威租约与演练结算验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-cross-region-failover-qualification-rpo-rto-authority-lease-split-brain-protection-failback-window-drill-settlement-readback.mjs"}],"denialCodes":["DF01","DF02","DF03","DF04","DF05","DF06","DF07","DF08","DF09","DF10","DF11","DF12","DF13","DF14","DF15","DF16","DF17","DF18","DF19","DF20","DF21","DF22","DF23","DF24","DF25","DF26","DF27","DF28","DF29","DF30","DF31","DF32","DF33","DF34","DF35","DF36","DF37","DF38","DF39","DF40","DF41","DF42","DF43","DF44","DF45","DF46","DF47","DF48","DF49","DF50","DF51","DF52","DF53","DF54","DF55","DF56","DF57","DF58","DF59","DF60","DF61","DF62","DF63","DF64","DF65","DF66","DF67","DF68","DF69","DF70","DF71","DF72","DF73","DF74","DF75","DF76","DF77","DF78","DF79","DF80","DF81","DF82","DF83","DF84"],"resultBoundary":"LOCAL_DR_FAILOVER_POLICY_SETTLED_B28_CHECKPOINTS_AND_EXTERNAL_AUTHORITY_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalQualifiesFailover":false,"portalMeasuresProductionRpoRto":false,"portalFencesPrimaryRegion":false,"portalGrantsRecoveryWriteLease":false,"portalShiftsProductionTraffic":false,"portalExecutesFailback":false,"portalInjectsProductionDrill":false,"portalReleasesQuarantine":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"terminalEventRetentionReplayConsumerRebuildCheckpointCatchupCrossRegionDisasterRecoveryReadback":{"id":"D05-C02-G04-TERMINAL-EVENT-RETENTION-REPLAY-CONSUMER-REBUILD-CHECKPOINT-CATCHUP-CROSS-REGION-DISASTER-RECOVERY-READBACK-v1","schemaVersion":"developer.reits.tech/g04-terminal-event-retention-replay-consumer-rebuild-checkpoint-catchup-cross-region-disaster-recovery-readback/v1","state":"TOOLS_READY_RETENTION_POLICIES_0_OF_4_REPLAY_WINDOWS_0_OF_4_REBUILD_SESSIONS_0_OF_4_CATCHUP_RECEIPTS_0_OF_4_CROSS_REGION_CHECKPOINTS_0_OF_2_DR_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + B27 CURSOR CAS + SIGNED CHECKPOINT","toolsReady":3,"toolsTotal":3,"retentionPoliciesObserved":0,"retentionPoliciesRequired":4,"replayWindowsObserved":0,"replayWindowsRequired":4,"rebuildSessionsObserved":0,"rebuildSessionsRequired":4,"catchupReceiptsObserved":0,"catchupReceiptsRequired":4,"crossRegionCheckpointsObserved":0,"crossRegionCheckpointsRequired":2,"disasterRecoveryReadbacksObserved":0,"disasterRecoveryReadbacksRequired":1,"productionMutationsObserved":0,"hotEventRetentionDays":30,"signedArchiveRetentionDays":180,"terminalHeadRetention":"PERMANENT","maximumReplayWindowHours":24,"maximumCatchupLagSeconds":90,"recoverySteps":[{"sequence":1,"id":"B27_HEAD_AND_CURSOR_PINNED","label":"冻结目标消费者并绑定 B27 事件头与独立游标","state":"BLOCKED"},{"sequence":2,"id":"RETENTION_CHAIN_VERIFIED","label":"验证热事件、签名归档、终局头与墓碑保留链","state":"BLOCKED"},{"sequence":3,"id":"SIGNED_CHECKPOINT_SELECTED","label":"选择不超过目标游标的签名检查点","state":"BLOCKED"},{"sequence":4,"id":"REPLAY_WINDOW_AUTHORIZED","label":"双签授权明确起止游标与最长二十四小时窗口","state":"BLOCKED"},{"sequence":5,"id":"SHADOW_REBUILD_EXECUTED","label":"在隔离影子状态重放同一批不可变事件","state":"BLOCKED"},{"sequence":6,"id":"DIGEST_PARITY_PROVED","label":"比较影子摘要、B26 终局头与 B27 事件链","state":"BLOCKED"},{"sequence":7,"id":"EXPECTED_CURSOR_CATCHUP_CAS","label":"以 expected-cursor CAS 原子追赶并生成收据","state":"BLOCKED"},{"sequence":8,"id":"CROSS_REGION_DR_READBACK","label":"由独立区域读回检查点、游标、摘要与隔离状态","state":"BLOCKED"}],"retentionTiers":[{"id":"HOT_IMMUTABLE_EVENTS","duration":"30 天","content":"完整 B27 事件正文与发布回执","purgeGate":"SIGNED_ARCHIVE_AND_4_CURSOR_FLOOR"},{"id":"COLD_SIGNED_ARCHIVE","duration":"180 天","content":"压缩事件段、Merkle 根与签名清单","purgeGate":"DR_READBACK_AND_LEGAL_HOLD_CLEAR"},{"id":"SIGNED_CONSUMER_CHECKPOINT","duration":"180 天","content":"消费者、游标、状态摘要和事件链头","purgeGate":"NEWER_CHECKPOINT_AND_REPLAY_PROOF"},{"id":"TERMINAL_HEAD_AND_TOMBSTONE","duration":"永久","content":"B26 结算头、重试墓碑与最后事件 ID","purgeGate":"NEVER_PURGE"}],"consumers":[{"id":"AUTH_API","label":"Auth API","expectedCursor":null,"checkpointCursor":null,"replayFrom":null,"replayTo":null,"state":"WAITING_B27"},{"id":"RESOURCE_SERVER","label":"资源服务器","expectedCursor":null,"checkpointCursor":null,"replayFrom":null,"replayTo":null,"state":"WAITING_B27"},{"id":"LOG_AUDIT","label":"日志审计系统","expectedCursor":null,"checkpointCursor":null,"replayFrom":null,"replayTo":null,"state":"WAITING_B27"},{"id":"RELEASE_CONTROLLER","label":"发布控制器","expectedCursor":null,"checkpointCursor":null,"replayFrom":null,"replayTo":null,"state":"WAITING_B27"}],"regions":[{"id":"PRIMARY_REGION","label":"主区域","role":"AUTHORITATIVE_EVENT_AND_CURSOR_WRITES","checkpoint":null,"state":"NOT_OBSERVED"},{"id":"RECOVERY_REGION","label":"灾备区域","role":"ARCHIVE_CHECKPOINT_AND_READBACK_ONLY","checkpoint":null,"state":"NOT_OBSERVED"}],"replayGuards":[{"id":"RG01","guard":"重放必须绑定 consumer、fromCursor、toCursor 与 B27 head","failure":"REPLAY_DENIED"},{"id":"RG02","guard":"授权窗口不得超过二十四小时且必须双签","failure":"WINDOW_DENIED"},{"id":"RG03","guard":"重建只能写隔离影子状态，禁止直写生产投影","failure":"SHADOW_REQUIRED"},{"id":"RG04","guard":"每个事件摘要必须与 B27 不可变事件链一致","failure":"DIGEST_DRIFT"},{"id":"RG05","guard":"追赶前必须证明影子摘要与目标摘要相等","failure":"PARITY_REQUIRED"},{"id":"RG06","guard":"追赶只能使用该消费者自己的 expected-cursor CAS","failure":"CURSOR_CONFLICT"}],"failureDrills":[{"id":"HOT_SEGMENT_LOSS","injection":"主区域热事件段不可读","expected":"从签名归档恢复到影子状态"},{"id":"CHECKPOINT_CORRUPTION","injection":"消费者检查点摘要漂移","expected":"回退到前一有效检查点并隔离"},{"id":"CATCHUP_CONFLICT","injection":"追赶时 expected cursor 已变化","expected":"CAS 失败且丢弃影子提交"},{"id":"REGION_PARTITION","injection":"主备区域检查点不一致","expected":"保持主区域权威并阻断灾备晋升"}],"actors":[{"sequence":1,"id":"RETENTION_AUTHORITY","duty":"批准分层保留与销毁收据","authority":"RETENTION_POLICY_ONLY"},{"sequence":2,"id":"REPLAY_AUTHORIZER","duty":"双签限定消费者、游标和重放窗口","authority":"REPLAY_WINDOW_ONLY"},{"sequence":3,"id":"REBUILD_EXECUTOR","duty":"只在隔离影子状态执行重建","authority":"SHADOW_REBUILD_ONLY"},{"sequence":4,"id":"REGIONAL_WITNESS","duty":"见证跨区域检查点和归档摘要","authority":"CHECKPOINT_WITNESS_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"独立读回两区域与四消费者收敛","authority":"READ_ONLY"}],"protectionInvariants":[{"id":"I01","label":"B27 的事件 ID、事件摘要和独立游标是唯一消费真值","state":"REQUIRED"},{"id":"I02","label":"热事件至少保留三十天且销毁前必须完成签名归档","state":"REQUIRED"},{"id":"I03","label":"B26 终局头与重试墓碑永久保留且不可重写","state":"REQUIRED"},{"id":"I04","label":"重放必须有明确消费者和闭区间游标，禁止全量无界扫描","state":"REQUIRED"},{"id":"I05","label":"重放永远不得重新执行 B23–B26 的业务动作","state":"REQUIRED"},{"id":"I06","label":"消费者重建必须在隔离影子状态完成摘要一致性证明","state":"REQUIRED"},{"id":"I07","label":"断点追赶只能以该消费者 expected-cursor CAS 提交","state":"REQUIRED"},{"id":"I08","label":"灾备区域只能保管、读回和见证，不能代主区域推进游标","state":"REQUIRED"},{"id":"I09","label":"跨区域摘要漂移、断点缺口或归档损坏必须失败关闭","state":"REQUIRED"},{"id":"I10","label":"Portal 不授权重放、不执行重建、不推进游标、不切换区域","state":"REQUIRED"}],"blockedCapabilities":["RETENTION_POLICY_WRITE","EVENT_PURGE","REPLAY_AUTHORIZE","ARCHIVE_RESTORE","SHADOW_REBUILD_EXECUTE","PRODUCTION_PROJECTION_SWAP","CONSUMER_CURSOR_CAS","REGION_FAILOVER","QUARANTINE_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"事件保留、重放与灾备重建空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-terminal-event-retention-replay-consumer-rebuild-checkpoint-catchup-cross-region-disaster-recovery-readback.template.json"},{"id":"T02","label":"浏览器本地事件恢复与跨区域预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-terminal-event-retention-replay-consumer-rebuild-checkpoint-catchup-cross-region-disaster-recovery-readback.offline.html"},{"id":"T03","label":"Node.js 保留链、重放窗口与灾备读回验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-terminal-event-retention-replay-consumer-rebuild-checkpoint-catchup-cross-region-disaster-recovery-readback.mjs"}],"denialCodes":["ER01","ER02","ER03","ER04","ER05","ER06","ER07","ER08","ER09","ER10","ER11","ER12","ER13","ER14","ER15","ER16","ER17","ER18","ER19","ER20","ER21","ER22","ER23","ER24","ER25","ER26","ER27","ER28","ER29","ER30","ER31","ER32","ER33","ER34","ER35","ER36","ER37","ER38","ER39","ER40","ER41","ER42","ER43","ER44","ER45","ER46","ER47","ER48","ER49","ER50","ER51","ER52","ER53","ER54","ER55","ER56","ER57","ER58","ER59","ER60","ER61","ER62","ER63","ER64","ER65","ER66","ER67","ER68","ER69","ER70","ER71","ER72","ER73","ER74","ER75","ER76","ER77","ER78","ER79","ER80"],"resultBoundary":"LOCAL_TERMINAL_EVENT_RECOVERY_POLICY_SETTLED_B27_EVENTS_AND_CURSORS_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalWritesRetentionPolicy":false,"portalPurgesProductionEvent":false,"portalAuthorizesReplay":false,"portalRestoresProductionArchive":false,"portalExecutesConsumerRebuild":false,"portalAdvancesConsumerCursor":false,"portalSwapsProductionProjection":false,"portalFailsOverRegion":false,"portalReleasesQuarantine":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"terminalEventOutboxConsumerCursorLagBudgetRedriveQuarantineSlaEscalationReadback":{"id":"D05-C02-G04-TERMINAL-EVENT-OUTBOX-CONSUMER-CURSOR-LAG-BUDGET-REDRIVE-QUARANTINE-SLA-ESCALATION-READBACK-v1","schemaVersion":"developer.reits.tech/g04-terminal-event-outbox-consumer-cursor-lag-budget-redrive-quarantine-sla-escalation-readback/v1","state":"TOOLS_READY_OUTBOX_APPENDS_0_OF_1_EVENT_PUBLICATIONS_0_OF_1_CURSOR_ADVANCES_0_OF_4_LAG_BUDGET_RECEIPTS_0_OF_4_POISON_QUARANTINES_0_OF_1_SLA_ESCALATIONS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + OUTBOX CAS + CONSUMER CURSOR CAS","toolsReady":3,"toolsTotal":3,"outboxAppendsObserved":0,"outboxAppendsRequired":1,"eventPublicationsObserved":0,"eventPublicationsRequired":1,"consumerCursorAdvancesObserved":0,"consumerCursorAdvancesRequired":4,"lagBudgetReceiptsObserved":0,"lagBudgetReceiptsRequired":4,"poisonEventsObserved":0,"poisonQuarantinesObserved":0,"poisonQuarantinesRequired":1,"slaEscalationsObserved":0,"slaEscalationsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"maximumOutboxAppendSeconds":15,"maximumEventPublicationSeconds":30,"maximumConsumerAcknowledgementSeconds":90,"maximumQuarantineEscalationSeconds":120,"maximumIndependentReadbackSeconds":150,"maximumRedriveAttempts":5,"distributionSteps":[{"sequence":1,"id":"B26_PUBLICATION_BOUND","label":"绑定 B26 终局证书、账本头与墓碑摘要","state":"BLOCKED"},{"sequence":2,"id":"OUTBOX_APPEND_CAS","label":"同一事务以 expected-head CAS 追加不可变事件","state":"BLOCKED"},{"sequence":3,"id":"EVENT_ENVELOPE_SEALED","label":"封印事件 ID、序号、摘要与契约版本","state":"BLOCKED"},{"sequence":4,"id":"BROKER_PUBLICATION_RECEIPT","label":"取得至少一次投递的发布回执","state":"BLOCKED"},{"sequence":5,"id":"CONSUMER_CURSOR_LEASED","label":"四消费者分别认领独立游标租约","state":"BLOCKED"},{"sequence":6,"id":"IDEMPOTENT_APPLY_AND_CURSOR_CAS","label":"幂等应用后原子推进消费者游标","state":"BLOCKED"},{"sequence":7,"id":"LAG_OR_POISON_QUARANTINED","label":"超时、毒消息或摘要漂移进入隔离升级","state":"BLOCKED"},{"sequence":8,"id":"DELIVERY_CONVERGENCE_READBACK","label":"独立读回四游标、账本头和隔离状态","state":"BLOCKED"}],"consumers":[{"id":"AUTH_API","label":"Auth API","slaSeconds":30,"expectedCursor":null,"observedCursor":null,"lagSeconds":null,"state":"WAITING_B26"},{"id":"RESOURCE_SERVER","label":"资源服务器","slaSeconds":45,"expectedCursor":null,"observedCursor":null,"lagSeconds":null,"state":"WAITING_B26"},{"id":"LOG_AUDIT","label":"日志审计系统","slaSeconds":60,"expectedCursor":null,"observedCursor":null,"lagSeconds":null,"state":"WAITING_B26"},{"id":"RELEASE_CONTROLLER","label":"发布控制器","slaSeconds":90,"expectedCursor":null,"observedCursor":null,"lagSeconds":null,"state":"WAITING_B26"}],"lagLadder":[{"id":"PENDING","window":"0–15s","action":"等待事务发件箱发布","tone":"NEUTRAL"},{"id":"WATCH","window":"15–30s","action":"检查 Broker 发布回执","tone":"CYAN"},{"id":"DEGRADED","window":"30–60s","action":"冻结消费者游标并通知 Owner","tone":"AMBER"},{"id":"HOLD","window":"60–90s","action":"阻断隔离释放并启动独立读回","tone":"ORANGE"},{"id":"QUARANTINE_AND_PAGE","window":">90s","action":"毒消息隔离、SLA 升级和人工值守","tone":"RED"}],"redriveRules":[{"attempt":1,"backoffSeconds":5,"action":"REDELIVER_SAME_IMMUTABLE_EVENT"},{"attempt":2,"backoffSeconds":15,"action":"REDELIVER_SAME_IMMUTABLE_EVENT"},{"attempt":3,"backoffSeconds":30,"action":"REDELIVER_WITH_OWNER_WATCH"},{"attempt":4,"backoffSeconds":60,"action":"HOLD_AND_INDEPENDENT_READBACK"},{"attempt":5,"backoffSeconds":120,"action":"QUARANTINE_AND_PAGE"}],"quarantineCases":[{"id":"CONSUMER_LAG","trigger":"超过消费者 SLA","disposition":"HOLD_RELEASE"},{"id":"POISON_EVENT","trigger":"同一事件连续五次不可应用","disposition":"QUARANTINE_EVENT"},{"id":"CURSOR_CONFLICT","trigger":"expected cursor CAS 失败","disposition":"FREEZE_CONSUMER"},{"id":"DIGEST_DRIFT","trigger":"消费者读回摘要与 B26 不同","disposition":"QUARANTINE_ALL"}],"actors":[{"sequence":1,"id":"OUTBOX_COMMITTER","duty":"把 B26 终局与事件原子追加到发件箱","authority":"OUTBOX_CAS_ONLY"},{"sequence":2,"id":"EVENT_PUBLISHER","duty":"发布不可变事件并保全 Broker 回执","authority":"PUBLISH_ONLY"},{"sequence":3,"id":"CONSUMER_CHECKPOINT_OWNER","duty":"幂等应用并推进各自消费者游标","authority":"CURSOR_CAS_ONLY"},{"sequence":4,"id":"QUARANTINE_COMMANDER","duty":"隔离毒消息并执行 SLA 升级","authority":"QUARANTINE_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"读回四游标、账本头和隔离状态","authority":"READ_ONLY"}],"protectionInvariants":[{"id":"I01","label":"没有 B26 终局发布正文不得创建发件箱事件","state":"REQUIRED"},{"id":"I02","label":"发件箱追加与结算账本头必须共享同一事务边界","state":"REQUIRED"},{"id":"I03","label":"事件 ID、结算序号和正文摘要永久不可变","state":"REQUIRED"},{"id":"I04","label":"至少一次投递不得被误解释为至少一次业务执行","state":"REQUIRED"},{"id":"I05","label":"每个消费者必须拥有独立 expected-cursor CAS","state":"REQUIRED"},{"id":"I06","label":"只有幂等应用成功后才能推进消费者游标","state":"REQUIRED"},{"id":"I07","label":"重投只能发送同一事件，禁止重新执行 B23–B26 业务动作","state":"REQUIRED"},{"id":"I08","label":"游标冲突、毒消息和摘要漂移必须失败关闭并隔离","state":"REQUIRED"},{"id":"I09","label":"任一消费者超过 90 秒都必须阻断隔离释放","state":"REQUIRED"},{"id":"I10","label":"Portal 不追加、不发布、不消费、不推进游标、不解除隔离","state":"REQUIRED"}],"blockedCapabilities":["OUTBOX_APPEND","BROKER_PUBLISH","CONSUMER_APPLY","CONSUMER_CURSOR_CAS","EVENT_REDRIVE","POISON_QUARANTINE_WRITE","SLA_PAGE","QUARANTINE_RELEASE","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"终局事件发件箱与消费者游标空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-terminal-event-outbox-consumer-cursor-lag-budget-redrive-quarantine-sla-escalation-readback.template.json"},{"id":"T02","label":"浏览器本地终局事件分发预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-terminal-event-outbox-consumer-cursor-lag-budget-redrive-quarantine-sla-escalation-readback.offline.html"},{"id":"T03","label":"Node.js 五方签名、游标与 SLA 验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-terminal-event-outbox-consumer-cursor-lag-budget-redrive-quarantine-sla-escalation-readback.mjs"}],"denialCodes":["TD01","TD02","TD03","TD04","TD05","TD06","TD07","TD08","TD09","TD10","TD11","TD12","TD13","TD14","TD15","TD16","TD17","TD18","TD19","TD20","TD21","TD22","TD23","TD24","TD25","TD26","TD27","TD28","TD29","TD30","TD31","TD32","TD33","TD34","TD35","TD36","TD37","TD38","TD39","TD40","TD41","TD42","TD43","TD44","TD45","TD46","TD47","TD48","TD49","TD50","TD51","TD52","TD53","TD54","TD55","TD56","TD57","TD58","TD59","TD60","TD61","TD62","TD63","TD64","TD65","TD66","TD67","TD68","TD69","TD70","TD71","TD72","TD73","TD74","TD75","TD76"],"resultBoundary":"LOCAL_TERMINAL_EVENT_DELIVERY_POLICY_SETTLED_B26_PUBLICATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalAppendsProductionOutbox":false,"portalPublishesProductionEvent":false,"portalConsumesProductionEvent":false,"portalAdvancesConsumerCursor":false,"portalRedrivesProductionEvent":false,"portalWritesPoisonQuarantine":false,"portalPagesProductionOwner":false,"portalReleasesQuarantine":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"terminalSettlementCertificateLedgerCasCapabilityRetirementQuarantineDispositionReadback":{"id":"D05-C02-G04-TERMINAL-SETTLEMENT-CERTIFICATE-LEDGER-CAS-CAPABILITY-RETIREMENT-QUARANTINE-DISPOSITION-READBACK-v1","schemaVersion":"developer.reits.tech/g04-terminal-settlement-certificate-ledger-cas-capability-retirement-quarantine-disposition-readback/v1","state":"TOOLS_READY_CERTIFICATES_0_OF_1_LEDGER_CAS_0_OF_1_CAPABILITY_RETIREMENTS_0_OF_2_RETRY_TOMBSTONES_0_OF_1_CONSUMER_ACKS_0_OF_4_QUARANTINE_DISPOSITIONS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519 + EXPECTED-HEAD CAS","toolsReady":3,"toolsTotal":3,"terminalSettlementCertificatesObserved":0,"terminalSettlementCertificatesRequired":1,"ledgerCasCommitsObserved":0,"ledgerCasCommitsRequired":1,"permitRetirementsObserved":0,"permitRetirementsRequired":1,"claimRetirementsObserved":0,"claimRetirementsRequired":1,"retryTombstonesObserved":0,"retryTombstonesRequired":1,"consumerAcknowledgementsObserved":0,"consumerAcknowledgementsRequired":4,"quarantineDispositionsObserved":0,"quarantineDispositionsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionMutationsObserved":0,"maximumSettlementCertificateSeconds":30,"maximumLedgerPublicationSeconds":60,"maximumConsumerAcknowledgementSeconds":90,"maximumQuarantineDispositionSeconds":120,"outcomeModes":[{"id":"FINAL_NO_EFFECT","label":"未产生副作用，结算后永久终止本次许可","disposition":"RELEASE_WITHOUT_COMMIT","state":"NOT_OBSERVED"},{"id":"FINAL_COMMITTED","label":"副作用与提交事实一致，发布提交终局","disposition":"RELEASE_COMMITTED","state":"NOT_OBSERVED"},{"id":"FINAL_REVERSED","label":"补偿后状态恢复，发布回退终局","disposition":"RELEASE_REVERSED","state":"NOT_OBSERVED"},{"id":"UNKNOWN_QUARANTINED","label":"终态仍未知，永久保持隔离且禁止重试","disposition":"KEEP_QUARANTINED","state":"CURRENT"}],"publicationSteps":[{"sequence":1,"id":"B25_READBACK_BOUND","label":"绑定 B25 独立读回与四态裁定","state":"BLOCKED"},{"sequence":2,"id":"SETTLEMENT_CERTIFIED","label":"公证终局模式、序号与前后账本头","state":"BLOCKED"},{"sequence":3,"id":"LEDGER_HEAD_CAS","label":"用 expected-head CAS 原子发布结算","state":"BLOCKED"},{"sequence":4,"id":"CAPABILITIES_RETIRED","label":"永久退役一次性许可与持久认领","state":"BLOCKED"},{"sequence":5,"id":"RETRY_TOMBSTONE_PUBLISHED","label":"发布不可重放的重试墓碑","state":"BLOCKED"},{"sequence":6,"id":"CONSUMERS_ACKNOWLEDGED","label":"四消费者确认同一摘要与序号","state":"BLOCKED"},{"sequence":7,"id":"DISPOSITION_READ_BACK","label":"独立读回隔离处置与三头收敛","state":"BLOCKED"}],"convergenceHeads":[{"id":"SETTLEMENT_LEDGER_HEAD","label":"终局结算账本头","value":null,"state":"NOT_PUBLISHED"},{"id":"RETRY_GUARD_HEAD","label":"重试墓碑防重放头","value":null,"state":"NOT_PUBLISHED"},{"id":"RESOURCE_READBACK_HEAD","label":"资源服务器最终状态头","value":null,"state":"NOT_OBSERVED"}],"capabilityRetirementRows":[{"id":"ONE_TIME_PROMOTION_PERMIT","source":"B23","state":"NOT_ISSUED","retirement":"REQUIRED_BEFORE_RELEASE"},{"id":"DURABLE_PROVIDER_CLAIM","source":"B24","state":"NOT_CLAIMED","retirement":"REQUIRED_BEFORE_RELEASE"},{"id":"AMBIGUOUS_RETRY_RIGHT","source":"B24/B25","state":"DENIED","retirement":"TOMBSTONE_REQUIRED"}],"consumers":[{"id":"AUTH_API","label":"Auth API","acknowledgement":"0/1","state":"WAITING"},{"id":"RESOURCE_SERVER","label":"资源服务器","acknowledgement":"0/1","state":"WAITING"},{"id":"LOG_AUDIT","label":"日志审计系统","acknowledgement":"0/1","state":"WAITING"},{"id":"RELEASE_CONTROLLER","label":"发布控制器","acknowledgement":"0/1","state":"WAITING"}],"dispositionRules":[{"outcome":"FINAL_NO_EFFECT","quarantine":"RELEASE_AFTER_4_ACKS","retry":"PERMANENTLY_DENIED"},{"outcome":"FINAL_COMMITTED","quarantine":"RELEASE_AFTER_4_ACKS","retry":"PERMANENTLY_DENIED"},{"outcome":"FINAL_REVERSED","quarantine":"RELEASE_AFTER_4_ACKS","retry":"PERMANENTLY_DENIED"},{"outcome":"UNKNOWN_QUARANTINED","quarantine":"KEEP_QUARANTINED","retry":"PERMANENTLY_DENIED"}],"actors":[{"sequence":1,"id":"SETTLEMENT_NOTARY","duty":"公证唯一终局模式与单调序号","authority":"CERTIFY_ONLY"},{"sequence":2,"id":"LEDGER_COMMITTER","duty":"执行 expected-head CAS 账本发布","authority":"CAS_COMMIT_ONLY"},{"sequence":3,"id":"CAPABILITY_REVOKER","duty":"退役许可、认领并发布重试墓碑","authority":"RETIRE_ONLY"},{"sequence":4,"id":"CONSUMER_WITNESS","duty":"汇总四消费者相同摘要确认","authority":"ACK_WITNESS_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"独立读回三头和隔离处置","authority":"READ_ONLY"}],"protectionInvariants":[{"id":"I01","label":"没有 B25 独立读回不得创建终局结算证书","state":"REQUIRED"},{"id":"I02","label":"终局序号只能单调增加且账本发布必须 expected-head CAS","state":"REQUIRED"},{"id":"I03","label":"提交、回退、无副作用和未知隔离四态互斥且不可覆盖","state":"REQUIRED"},{"id":"I04","label":"一次性许可和持久认领一经结算必须永久退役","state":"REQUIRED"},{"id":"I05","label":"重试墓碑必须先于任何消费者解除冻结","state":"REQUIRED"},{"id":"I06","label":"四消费者必须确认相同结算摘要、序号和账本头","state":"REQUIRED"},{"id":"I07","label":"三头不一致时只允许继续隔离，禁止人工绕过","state":"REQUIRED"},{"id":"I08","label":"UNKNOWN_QUARANTINED 永远不能触发隔离释放","state":"REQUIRED"},{"id":"I09","label":"Portal 不签发、不提交、不退役、不确认、不解除隔离","state":"REQUIRED"}],"blockedCapabilities":["TERMINAL_CERTIFICATE_ISSUE","LEDGER_CAS_COMMIT","PERMIT_RETIREMENT","CLAIM_RETIREMENT","RETRY_TOMBSTONE_WRITE","CONSUMER_UNFREEZE","QUARANTINE_RELEASE","G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"终局结算、账本发布与能力退役空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-terminal-settlement-certificate-ledger-cas-capability-retirement-quarantine-disposition-readback.template.json"},{"id":"T02","label":"浏览器本地终局发布预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-terminal-settlement-certificate-ledger-cas-capability-retirement-quarantine-disposition-readback.offline.html"},{"id":"T03","label":"Node.js 五方签名与结算发布验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-terminal-settlement-certificate-ledger-cas-capability-retirement-quarantine-disposition-readback.mjs"}],"denialCodes":["TS01","TS02","TS03","TS04","TS05","TS06","TS07","TS08","TS09","TS10","TS11","TS12","TS13","TS14","TS15","TS16","TS17","TS18","TS19","TS20","TS21","TS22","TS23","TS24","TS25","TS26","TS27","TS28","TS29","TS30","TS31","TS32","TS33","TS34","TS35","TS36","TS37","TS38","TS39","TS40","TS41","TS42","TS43","TS44","TS45","TS46","TS47","TS48","TS49","TS50","TS51","TS52","TS53","TS54","TS55","TS56","TS57","TS58","TS59","TS60","TS61","TS62","TS63","TS64","TS65","TS66","TS67","TS68","TS69","TS70","TS71","TS72"],"resultBoundary":"LOCAL_TERMINAL_SETTLEMENT_PUBLICATION_POLICY_SETTLED_B25_READBACK_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalIssuesTerminalCertificate":false,"portalCommitsSettlementLedger":false,"portalRetiresProductionCapability":false,"portalPublishesRetryTombstone":false,"portalAcknowledgesForConsumers":false,"portalReleasesQuarantine":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"providerResponseSideEffectReconciliationCompensationFinalityReadback":{"id":"D05-C02-G04-PROVIDER-RESPONSE-SIDE-EFFECT-RECONCILIATION-COMPENSATION-FINALITY-READBACK-v1","schemaVersion":"developer.reits.tech/g04-provider-response-side-effect-reconciliation-compensation-finality-readback/v1","state":"TOOLS_READY_RESPONSE_SEALS_0_OF_1_POSTCONDITION_READBACKS_0_OF_1_RECONCILIATIONS_0_OF_1_COMPENSATION_FINALITIES_0_OF_1_TERMINAL_SETTLEMENTS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"responseSealsObserved":0,"responseSealsRequired":1,"postConditionReadbacksObserved":0,"postConditionReadbacksRequired":1,"sideEffectReconciliationsObserved":0,"sideEffectReconciliationsRequired":1,"compensationPlansObserved":0,"compensationPlansRequired":1,"compensationExecutionsObserved":0,"compensationExecutionsRequired":1,"compensationFinalitiesObserved":0,"compensationFinalitiesRequired":1,"terminalSettlementsObserved":0,"terminalSettlementsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionTrafficPercent":0,"productionMutationsObserved":0,"maximumResponseSealSeconds":30,"maximumReconciliationSeconds":120,"maximumCompensationFinalitySeconds":180,"outcomeModes":[{"id":"NO_EFFECT","label":"Provider 明确未生效，终止事务且不补偿","action":"TERMINAL_NO_EFFECT","state":"NOT_OBSERVED"},{"id":"EFFECT_APPLIED","label":"后置条件证明副作用已落地，允许补提交","action":"COMMIT_FINAL","state":"NOT_OBSERVED"},{"id":"EFFECT_REVERSED","label":"补偿后读回恢复目标状态，形成补偿终局","action":"COMPENSATION_FINAL","state":"NOT_OBSERVED"},{"id":"EFFECT_UNKNOWN_QUARANTINED","label":"响应与状态仍不一致，继续隔离且禁止重试","action":"KEEP_QUARANTINED","state":"CURRENT"}],"reconciliationSteps":[{"sequence":1,"id":"RESPONSE_CAPTURED","label":"捕获 Provider 原始响应与 Request ID","state":"BLOCKED"},{"sequence":2,"id":"RESPONSE_SEALED","label":"三十秒内封印请求与响应摘要","state":"BLOCKED"},{"sequence":3,"id":"POSTCONDITION_READ","label":"从独立资源端读回前后状态根","state":"BLOCKED"},{"sequence":4,"id":"EFFECT_RECONCILED","label":"对照响应语义与真实副作用","state":"BLOCKED"},{"sequence":5,"id":"TERMINAL_SETTLED","label":"提交终局、补偿终局或继续隔离","state":"BLOCKED"},{"sequence":6,"id":"INDEPENDENT_READBACK","label":"第五方复核全部引用与终态","state":"BLOCKED"}],"compensationTimeline":[{"sequence":1,"id":"PLAN","budgetSeconds":30,"label":"绑定目标状态、逆操作与幂等键"},{"sequence":2,"id":"EXECUTE","budgetSeconds":90,"label":"一次性执行并封印 Provider 回执"},{"sequence":3,"id":"READBACK","budgetSeconds":150,"label":"独立读回最终后置条件"},{"sequence":4,"id":"FINALIZE","budgetSeconds":180,"label":"签署 EFFECT_REVERSED 终局"}],"actors":[{"sequence":1,"id":"TRANSACTION_EXECUTOR","duty":"执行一次 Provider 调用并保留 Request ID","authority":"EXECUTE_ONCE"},{"sequence":2,"id":"PROVIDER_RESPONSE_WITNESS","duty":"封印请求、响应与返回时间","authority":"SEAL_ONLY"},{"sequence":3,"id":"RECONCILIATION_AUTHORITY","duty":"用后置条件裁定真实副作用","authority":"ADJUDICATE_ONLY"},{"sequence":4,"id":"COMPENSATION_OPERATOR","duty":"按裁定执行一次性补偿事务","authority":"COMPENSATE_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"独立读回资源状态与最终结算","authority":"READ_ONLY"}],"protectionInvariants":[{"id":"I01","label":"没有 B24 事务读回不得创建响应封印","state":"REQUIRED"},{"id":"I02","label":"HTTP 成功不等于副作用已落地","state":"REQUIRED"},{"id":"I03","label":"响应必须同时绑定请求摘要、响应摘要和 Request ID","state":"REQUIRED"},{"id":"I04","label":"后置条件必须来自 Provider 之外的独立资源读面","state":"REQUIRED"},{"id":"I05","label":"未知副作用只允许继续隔离，禁止盲目重试","state":"REQUIRED"},{"id":"I06","label":"补偿必须绑定原始事务、唯一幂等键和目标状态","state":"REQUIRED"},{"id":"I07","label":"补偿执行回执不等于补偿终局，必须再次读回","state":"REQUIRED"},{"id":"I08","label":"提交终局与补偿终局互斥且不可覆盖","state":"REQUIRED"},{"id":"I09","label":"Portal 不调用 Provider、不提交、不补偿、不解除隔离","state":"REQUIRED"}],"blockedCapabilities":["PRODUCTION_PROVIDER_CALL","PRODUCTION_COMMIT","PRODUCTION_COMPENSATION","PRODUCTION_RETRY","QUARANTINE_RELEASE","G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"响应封印、副作用对账与补偿终局空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-provider-response-side-effect-reconciliation-compensation-finality-readback.template.json"},{"id":"T02","label":"浏览器本地副作用终局预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-provider-response-side-effect-reconciliation-compensation-finality-readback.offline.html"},{"id":"T03","label":"Node.js 五方签名与补偿终局验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-provider-response-side-effect-reconciliation-compensation-finality-readback.mjs"}],"denialCodes":["SR01","SR02","SR03","SR04","SR05","SR06","SR07","SR08","SR09","SR10","SR11","SR12","SR13","SR14","SR15","SR16","SR17","SR18","SR19","SR20","SR21","SR22","SR23","SR24","SR25","SR26","SR27","SR28","SR29","SR30","SR31","SR32","SR33","SR34","SR35","SR36","SR37","SR38","SR39","SR40","SR41","SR42","SR43","SR44","SR45","SR46","SR47","SR48","SR49","SR50","SR51","SR52","SR53","SR54","SR55","SR56","SR57","SR58","SR59","SR60","SR61","SR62","SR63","SR64","SR65","SR66","SR67","SR68"],"resultBoundary":"LOCAL_RESPONSE_RECONCILIATION_POLICY_SETTLED_B24_TRANSACTION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalCallsProductionProvider":false,"portalCommitsProductionTransaction":false,"portalExecutesProductionCompensation":false,"portalRetriesAmbiguousCall":false,"portalReleasesQuarantine":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"promotionPermitClaimTransactionJournalAmbiguousOutcomeRecoveryReadback":{"id":"D05-C02-G04-PROMOTION-PERMIT-CLAIM-TRANSACTION-JOURNAL-AMBIGUOUS-OUTCOME-RECOVERY-READBACK-v1","schemaVersion":"developer.reits.tech/g04-promotion-permit-claim-transaction-journal-ambiguous-outcome-recovery-readback/v1","state":"TOOLS_READY_CLAIMS_0_OF_1_JOURNALS_0_OF_1_PROVIDER_CALLS_0_OF_1_COMMITS_0_OF_1_AMBIGUOUS_RECOVERIES_0_OF_1_ROLLBACKS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"durableClaimsObserved":0,"durableClaimsRequired":1,"journalTransactionsObserved":0,"journalTransactionsRequired":1,"providerCallsObserved":0,"providerCallsRequired":1,"commitsObserved":0,"commitsRequired":1,"ambiguousRecoveriesObserved":0,"ambiguousRecoveriesRequired":1,"rollbacksObserved":0,"rollbacksRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionTrafficPercent":0,"productionMutationsObserved":0,"maximumClaimTtlSeconds":90,"maximumAttempts":1,"maximumAmbiguitySeconds":120,"journalModel":"DURABLE_CAS_CLAIM_THEN_APPEND_ONLY_JOURNAL_THEN_READ_BEFORE_RETRY","normalPath":["PREPARED","CLAIMED","CALL_SENT","RECEIPT_SEALED","COMMITTED"],"ambiguousPath":["CALL_SENT","AMBIGUOUS","QUARANTINED","RECONCILED","ROLLED_BACK"],"journalStates":[{"sequence":1,"id":"PREPARED","label":"事务意图与幂等键已落盘","state":"BLOCKED"},{"sequence":2,"id":"CLAIMED","label":"B23 许可已由持久 CAS 原子认领","state":"BLOCKED"},{"sequence":3,"id":"CALL_SENT","label":"资源服务器请求已发送","state":"BLOCKED"},{"sequence":4,"id":"RECEIPT_SEALED","label":"Provider 回执摘要已封印","state":"BLOCKED"},{"sequence":5,"id":"COMMITTED","label":"事务提交并消费单次许可","state":"BLOCKED"},{"sequence":6,"id":"AMBIGUOUS","label":"调用结果不可确定","state":"ARMED"},{"sequence":7,"id":"QUARANTINED","label":"事务隔离，禁止盲目重试","state":"ARMED"},{"sequence":8,"id":"RECONCILED","label":"外部读回确认真实结果","state":"BLOCKED"},{"sequence":9,"id":"ROLLED_BACK","label":"按已证明事实完成回退","state":"BLOCKED"}],"crashBoundaries":[{"id":"CB01","point":"调用前","evidence":"CLAIMED，无 CALL_SENT","recovery":"释放或超时回收认领","forbidden":"伪造调用结果"},{"id":"CB02","point":"请求已发、响应未知","evidence":"CALL_SENT","recovery":"隔离并按 Request ID 独立读回","forbidden":"直接重试"},{"id":"CB03","point":"响应已到、回执未封印","evidence":"Provider 可读事实","recovery":"校验摘要后补封回执","forbidden":"直接提交"},{"id":"CB04","point":"回执已封、提交前","evidence":"RECEIPT_SEALED","recovery":"CAS 提交或按事实回退","forbidden":"再次调用 Provider"}],"readBeforeRetrySteps":[{"sequence":1,"id":"FREEZE","label":"冻结同一 Permit / Attempt / Idempotency Key"},{"sequence":2,"id":"READ_PROVIDER","label":"按 Provider Request ID 独立读回"},{"sequence":3,"id":"COMPARE_DIGEST","label":"比对请求、响应与事务日志摘要"},{"sequence":4,"id":"ADJUDICATE","label":"形成已生效、未生效或仍未知裁定"},{"sequence":5,"id":"SETTLE","label":"只允许补提交、回退或继续隔离"}],"actors":[{"sequence":1,"id":"CLAIM_POLICY_AUTHOR","duty":"定义租约、尝试次数与歧义预算","authority":"POLICY_ONLY"},{"sequence":2,"id":"CLAIM_AUTHORITY","duty":"以持久 CAS 认领并消费单次许可","authority":"CLAIM_ONLY"},{"sequence":3,"id":"JOURNAL_EXECUTOR","duty":"追加事务事件并执行一次 Provider 调用","authority":"EXECUTE_ONCE"},{"sequence":4,"id":"RECOVERY_ADJUDICATOR","duty":"裁定歧义结果并授权补提交或回退","authority":"RECOVERY_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"独立读回认领、日志、Provider 与生产副作用","authority":"READ_ONLY"}],"protectionInvariants":[{"id":"I01","label":"没有 B23 单次许可读回不得认领","state":"REQUIRED"},{"id":"I02","label":"同一许可只能被持久 CAS 成功认领一次","state":"REQUIRED"},{"id":"I03","label":"每个许可最大尝试次数固定为一","state":"REQUIRED"},{"id":"I04","label":"Provider 调用前必须先追加 PREPARED 与 CLAIMED","state":"REQUIRED"},{"id":"I05","label":"日志只追加并以序号和前序哈希形成链","state":"REQUIRED"},{"id":"I06","label":"CALL_SENT 后结果未知必须隔离并先读后判","state":"REQUIRED"},{"id":"I07","label":"HTTP 返回不等于提交，必须先封印回执","state":"REQUIRED"},{"id":"I08","label":"Portal 不认领许可、不调用 Provider、不重试或回退","state":"REQUIRED"}],"blockedCapabilities":["PRODUCTION_PERMIT_CLAIM","PRODUCTION_PROVIDER_CALL","PRODUCTION_TRANSACTION_COMMIT","PRODUCTION_RETRY","PRODUCTION_ROLLBACK","G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"许可认领、事务日志与歧义恢复空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-promotion-permit-claim-transaction-journal-ambiguous-outcome-recovery-readback.template.json"},{"id":"T02","label":"浏览器本地事务边界预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-promotion-permit-claim-transaction-journal-ambiguous-outcome-recovery-readback.offline.html"},{"id":"T03","label":"Node.js 五方签名与歧义恢复验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-promotion-permit-claim-transaction-journal-ambiguous-outcome-recovery-readback.mjs"}],"denialCodes":["PC01","PC02","PC03","PC04","PC05","PC06","PC07","PC08","PC09","PC10","PC11","PC12","PC13","PC14","PC15","PC16","PC17","PC18","PC19","PC20","PC21","PC22","PC23","PC24","PC25","PC26","PC27","PC28","PC29","PC30","PC31","PC32","PC33","PC34","PC35","PC36","PC37","PC38","PC39","PC40","PC41","PC42","PC43","PC44","PC45","PC46","PC47","PC48","PC49","PC50","PC51","PC52","PC53","PC54","PC55","PC56","PC57","PC58","PC59","PC60","PC61","PC62","PC63","PC64"],"resultBoundary":"LOCAL_CLAIM_JOURNAL_RECOVERY_POLICY_SETTLED_B23_PERMIT_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalClaimsProductionPermit":false,"portalCallsProductionProvider":false,"portalCommitsProductionTransaction":false,"portalRetriesAmbiguousCall":false,"portalExecutesProductionRollback":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"oneTimePromotionPermitTrafficShiftExposureBudgetRollbackSettlementReadback":{"id":"D05-C02-G04-ONE-TIME-PROMOTION-PERMIT-TRAFFIC-SHIFT-EXPOSURE-BUDGET-ROLLBACK-SETTLEMENT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-one-time-promotion-permit-traffic-shift-exposure-budget-rollback-settlement-readback/v1","state":"TOOLS_READY_PERMITS_0_OF_1_STAGE_LOCKS_0_OF_1_TRAFFIC_SHIFTS_0_OF_4_SETTLEMENTS_0_OF_4_ROLLBACKS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"permitsObserved":0,"permitsRequired":1,"stageLocksObserved":0,"stageLocksRequired":1,"trafficShiftsObserved":0,"trafficShiftsRequired":4,"settlementsObserved":0,"settlementsRequired":4,"rollbackExecutionsObserved":0,"rollbackExecutionsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionTrafficPercent":0,"productionMutationsObserved":0,"maximumPermitTtlSeconds":600,"maximumOpenPermits":1,"maximumRollbackSeconds":120,"currentDecision":"HOLD","currentDecisionReason":"B22_EXTERNAL_ADVANCE_DECISION_REQUIRED","transactionModel":"B22_ADVANCE_THEN_ONE_TIME_PERMIT_THEN_STAGE_LOCK_THEN_ATOMIC_SHIFT_THEN_SETTLEMENT","stageLadder":[{"sequence":1,"fromPercent":0,"toPercent":1,"exposureDeltaPercent":1,"state":"BLOCKED"},{"sequence":2,"fromPercent":1,"toPercent":5,"exposureDeltaPercent":4,"state":"BLOCKED"},{"sequence":3,"fromPercent":5,"toPercent":25,"exposureDeltaPercent":20,"state":"BLOCKED"},{"sequence":4,"fromPercent":25,"toPercent":100,"exposureDeltaPercent":75,"state":"BLOCKED"}],"transactionSteps":[{"sequence":1,"id":"BIND_ADVANCE","label":"绑定 B22 ADVANCE 独立读回","state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"ISSUE_PERMIT","label":"签发单次 Nonce 与 600 秒许可","state":"BLOCKED"},{"sequence":3,"id":"ACQUIRE_LOCK","label":"获取 Stage Epoch 与 CAS Generation 锁","state":"BLOCKED"},{"sequence":4,"id":"PREFLIGHT_CAPACITY","label":"复核目标阶段容量与曝险预算","state":"BLOCKED"},{"sequence":5,"id":"ATOMIC_SHIFT","label":"执行一次幂等原子切流事务","state":"BLOCKED"},{"sequence":6,"id":"SEAL_SETTLEMENT","label":"封印切流前后权重与配置摘要","state":"BLOCKED"},{"sequence":7,"id":"OPEN_OBSERVATION","label":"进入下一阶段 B22 观察窗口","state":"BLOCKED"},{"sequence":8,"id":"INDEPENDENT_READBACK","label":"独立读回许可、锁、切流与结算","state":"BLOCKED"}],"actors":[{"sequence":1,"id":"PERMIT_POLICY_AUTHOR","duty":"定义固定阶梯、TTL、并发和回退预算","authority":"POLICY_ONLY"},{"sequence":2,"id":"PROMOTION_AUTHORITY","duty":"消费 B22 ADVANCE 后签发单次许可","authority":"PERMIT_ONLY"},{"sequence":3,"id":"STAGE_LOCK_OPERATOR","duty":"获取 Epoch 与 CAS Generation 阶段锁","authority":"LOCK_ONLY"},{"sequence":4,"id":"TRAFFIC_SHIFT_WITNESS","duty":"见证原子切流与结算回执","authority":"SHIFT_WITNESS_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"独立读回全链及生产副作用","authority":"READ_ONLY"}],"protectionInvariants":[{"id":"I01","label":"没有 B22 ADVANCE 独立读回不得签发许可","state":"REQUIRED"},{"id":"I02","label":"每个阶段只能有一个 600 秒单次许可","state":"REQUIRED"},{"id":"I03","label":"Epoch、CAS Generation 与 Nonce 必须同时唯一","state":"REQUIRED"},{"id":"I04","label":"切流只能沿 0→1→5→25→100 固定阶梯","state":"REQUIRED"},{"id":"I05","label":"每次切流必须封印前后权重并进入下一观察窗","state":"REQUIRED"},{"id":"I06","label":"失败、超时、重放或漂移必须在 120 秒内回退","state":"REQUIRED"},{"id":"I07","label":"Portal 不签发许可、不获取锁、不切流、不回退","state":"REQUIRED"}],"blockedCapabilities":["PRODUCTION_PROMOTION_PERMIT","PRODUCTION_STAGE_LOCK","PRODUCTION_TRAFFIC_SHIFT","PRODUCTION_ROLLBACK","G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"单次晋级许可与切流事务空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-one-time-promotion-permit-traffic-shift-exposure-budget-rollback-settlement-readback.template.json"},{"id":"T02","label":"浏览器本地许可与曝险预算预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-one-time-promotion-permit-traffic-shift-exposure-budget-rollback-settlement-readback.offline.html"},{"id":"T03","label":"Node.js 五方签名与事务验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-one-time-promotion-permit-traffic-shift-exposure-budget-rollback-settlement-readback.mjs"}],"denialCodes":["PP01","PP02","PP03","PP04","PP05","PP06","PP07","PP08","PP09","PP10","PP11","PP12","PP13","PP14","PP15","PP16","PP17","PP18","PP19","PP20","PP21","PP22","PP23","PP24","PP25","PP26","PP27","PP28","PP29","PP30","PP31","PP32","PP33","PP34","PP35","PP36","PP37","PP38","PP39","PP40","PP41","PP42","PP43","PP44","PP45","PP46","PP47","PP48","PP49","PP50","PP51","PP52","PP53","PP54","PP55","PP56","PP57","PP58","PP59","PP60"],"resultBoundary":"LOCAL_PROMOTION_PERMIT_POLICY_SETTLED_B22_ADVANCE_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalIssuesProductionPermit":false,"portalAcquiresProductionLock":false,"portalShiftsProductionTraffic":false,"portalExecutesProductionRollback":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"canaryObservationWindowSloBurnRateAutomaticHoldRollbackReadback":{"id":"D05-C02-G04-CANARY-OBSERVATION-WINDOW-SLO-BURN-RATE-AUTOMATIC-HOLD-ROLLBACK-READBACK-v1","schemaVersion":"developer.reits.tech/g04-canary-observation-window-slo-burn-rate-automatic-hold-rollback-readback/v1","state":"TOOLS_READY_WINDOWS_0_OF_4_TELEMETRY_BATCHES_0_WINDOW_SETTLEMENTS_0_OF_4_ADVANCE_AUTHORIZATIONS_0_OF_1_ROLLBACKS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"observationPoliciesReady":1,"observationPoliciesRequired":1,"observationWindowsObserved":0,"observationWindowsRequired":4,"telemetryBatchesObserved":0,"windowSettlementsObserved":0,"windowSettlementsRequired":4,"advanceAuthorizationsObserved":0,"advanceAuthorizationsRequired":1,"rollbackExecutionsObserved":0,"rollbackExecutionsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"productionTrafficPercent":0,"productionMutationsObserved":0,"minimumCompletenessBasisPoints":9990,"maximumMissingIntervalSeconds":30,"errorRateLimitBasisPoints":50,"p95LatencyDeltaLimitMs":100,"saturationLimitPercent":80,"maximumRollbackSeconds":120,"decision":"HOLD","decisionReason":"EXTERNAL_WINDOWS_0_OF_4","observationModel":"FOUR_ORDERED_WINDOWS_FIVE_SIGNALS_DUAL_BURN_RATE_FAIL_CLOSED","observationWindows":[{"sequence":1,"id":"BASELINE_5M","durationSeconds":300,"minimumSamples":300,"state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"PROBE_15M","durationSeconds":900,"minimumSamples":900,"state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"CONFIDENCE_60M","durationSeconds":3600,"minimumSamples":3600,"state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"SOAK_240M","durationSeconds":14400,"minimumSamples":14400,"state":"EXTERNAL_REQUIRED"}],"signals":[{"id":"ERROR_RATE","label":"错误率增量","limit":"≤ 50 BP","state":"NOT_OBSERVED"},{"id":"P95_LATENCY","label":"P95 时延增量","limit":"≤ 100 MS","state":"NOT_OBSERVED"},{"id":"SATURATION","label":"关键资源饱和度","limit":"≤ 80%","state":"NOT_OBSERVED"},{"id":"STATE_ROOT_PARITY","label":"候选状态根一致性","limit":"EXACT","state":"NOT_OBSERVED"},{"id":"LEASE_CONTINUITY","label":"Epoch / Holder / Token 连续性","limit":"UNIQUE","state":"NOT_OBSERVED"}],"burnRateGates":[{"sequence":1,"id":"FAST_BURN","windows":"5M / 60M","threshold":"14.4×","action":"FORCE_ROLLBACK"},{"sequence":2,"id":"SLOW_BURN","windows":"30M / 360M","threshold":"6.0×","action":"HOLD_AND_REVIEW"}],"decisionStates":[{"sequence":1,"id":"ADVANCE","label":"四窗与五信号全量通过后形成外部晋级候选","state":"DENIED"},{"sequence":2,"id":"HOLD","label":"证据不足、慢燃尽或缺测时冻结后续阶梯","state":"CURRENT"},{"sequence":3,"id":"ROLLBACK","label":"快燃尽、Root 或 Lease 分叉时强制回退","state":"ARMED_HELD"}],"actors":[{"sequence":1,"id":"OBSERVATION_POLICY_AUTHOR","duty":"定义观测窗口、信号、样本与 SLO 门限","authority":"POLICY_ONLY"},{"sequence":2,"id":"TELEMETRY_COLLECTOR","duty":"采集并签署外部遥测证据","authority":"COLLECT_ONLY"},{"sequence":3,"id":"WINDOW_ADJUDICATOR","duty":"根据完整证据形成窗口裁定","authority":"ADJUDICATE_ONLY"},{"sequence":4,"id":"ROLLBACK_CONTROLLER","duty":"管理已批准的回退保护器","authority":"ROLLBACK_GUARD_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"独立读回全链和生产副作用","authority":"READ_ONLY"}],"protectionInvariants":[{"id":"I01","label":"四窗口必须按 5m→15m→60m→240m 顺序结算","state":"REQUIRED"},{"id":"I02","label":"完整率低于 99.90% 或连续缺测超过 30 秒必须 HOLD","state":"REQUIRED"},{"id":"I03","label":"快燃尽 14.4 触发强制回退，慢燃尽 6.0 触发暂停复核","state":"REQUIRED"},{"id":"I04","label":"Root 与 Lease 必须和业务 SLO 在同一窗口裁定","state":"REQUIRED"},{"id":"I05","label":"任何晋级都必须消费上一窗口独立读回","state":"REQUIRED"},{"id":"I06","label":"Portal 不接入生产遥测、不晋级、不切流、不回退","state":"REQUIRED"}],"rollbackTriggers":["FAST_BURN","SLOW_BURN","MISSING_DATA","ROOT_OR_LEASE_DIVERGENCE"],"blockedCapabilities":["PRODUCTION_TELEMETRY_INGEST","PRODUCTION_PROMOTION","PRODUCTION_TRAFFIC_SHIFT","PRODUCTION_ROLLBACK","G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"灰度观测窗口与燃尽率空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-canary-observation-window-slo-burn-rate-automatic-hold-rollback-readback.template.json"},{"id":"T02","label":"浏览器本地观测策略预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-canary-observation-window-slo-burn-rate-automatic-hold-rollback-readback.offline.html"},{"id":"T03","label":"Node.js 五方签名验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-canary-observation-window-slo-burn-rate-automatic-hold-rollback-readback.mjs"}],"denialCodes":["OW01","OW02","OW03","OW04","OW05","OW06","OW07","OW08","OW09","OW10","OW11","OW12","OW13","OW14","OW15","OW16","OW17","OW18","OW19","OW20","OW21","OW22","OW23","OW24","OW25","OW26","OW27","OW28","OW29","OW30","OW31","OW32","OW33","OW34","OW35","OW36","OW37","OW38","OW39","OW40","OW41","OW42","OW43","OW44","OW45","OW46","OW47","OW48","OW49","OW50","OW51","OW52","OW53","OW54","OW55","OW56"],"resultBoundary":"LOCAL_CANARY_OBSERVATION_POLICY_SETTLED_EXTERNAL_WINDOWS_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalIngestsProductionTelemetry":false,"portalAuthorizesAdvance":false,"portalExecutesPromotion":false,"portalShiftsProductionTraffic":false,"portalExecutesProductionRollback":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"recoveryCandidateQualificationControlledPromotionRollbackReadback":{"id":"D05-C02-G04-RECOVERY-CANDIDATE-QUALIFICATION-CONTROLLED-PROMOTION-ROLLBACK-READBACK-v1","schemaVersion":"developer.reits.tech/g04-recovery-candidate-qualification-controlled-promotion-rollback-readback/v1","state":"TOOLS_READY_CANDIDATES_0_OF_1_APPROVALS_0_OF_2_PROMOTIONS_0_OF_1_TRAFFIC_SHIFTS_0_OF_1_ROLLBACKS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"candidateQualificationsObserved":0,"candidateQualificationsRequired":1,"approvalReceiptsObserved":0,"approvalReceiptsRequired":2,"promotionTransactionsObserved":0,"promotionTransactionsRequired":1,"trafficShiftsObserved":0,"trafficShiftsRequired":1,"rollbackDrillsObserved":0,"rollbackDrillsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"trafficShiftPercent":0,"productionMutationsObserved":0,"rollbackMaximumSeconds":120,"errorRateThresholdBasisPoints":50,"latencyThresholdMilliseconds":100,"promotionModel":"QUALIFY_THEN_DUAL_APPROVE_THEN_0_1_5_25_100_WITH_FORCE_ROLLBACK","promotionStages":[{"sequence":1,"trafficPercent":0,"state":"BASELINE_ONLY","label":"候选资格化与零流量基线"},{"sequence":2,"trafficPercent":1,"state":"PLANNED_HELD","label":"单百分比探针"},{"sequence":3,"trafficPercent":5,"state":"PLANNED_HELD","label":"小流量错误率判定"},{"sequence":4,"trafficPercent":25,"state":"PLANNED_HELD","label":"四分之一容量与时延判定"},{"sequence":5,"trafficPercent":100,"state":"PLANNED_HELD","label":"全量提升前终局裁定"}],"qualificationChecks":[{"id":"Q01","label":"B20 恢复读回引用可验证","state":"EXTERNAL_REQUIRED"},{"id":"Q02","label":"状态根与恢复期望根一致","state":"EXTERNAL_REQUIRED"},{"id":"Q03","label":"Epoch、Holder 与 Fencing Token 一致","state":"EXTERNAL_REQUIRED"},{"id":"Q04","label":"RPO 五分钟、RTO 十五分钟均达标","state":"EXTERNAL_REQUIRED"},{"id":"Q05","label":"候选命名空间仍无生产写能力","state":"EXTERNAL_REQUIRED"},{"id":"Q06","label":"回退目标与 120 秒预算已绑定","state":"EXTERNAL_REQUIRED"}],"approvalSlots":[{"sequence":1,"id":"SECURITY_APPROVER","duty":"批准候选完整性与权限最小化","state":"NOT_OBSERVED"},{"sequence":2,"id":"SRE_APPROVER","duty":"批准容量、阈值、观测与回退预算","state":"NOT_OBSERVED"}],"actors":[{"sequence":1,"id":"CANDIDATE_QUALIFIER","duty":"只读资格化恢复候选","authority":"QUALIFY_ONLY"},{"sequence":2,"id":"SECURITY_APPROVER","duty":"审批权限与完整性边界","authority":"SECURITY_APPROVAL_ONLY"},{"sequence":3,"id":"SRE_APPROVER","duty":"审批灰度阈值与回退预算","authority":"SRE_APPROVAL_ONLY"},{"sequence":4,"id":"PROMOTION_EXECUTOR","duty":"按已批准阶梯执行受控提升","authority":"STAGED_PROMOTION_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"独立读回决策、流量与副作用","authority":"READ_ONLY"}],"rollbackTriggers":[{"id":"ROOT_MISMATCH","label":"状态根漂移","action":"FORCE_ROLLBACK"},{"id":"ERROR_RATE_BREACH","label":"错误率超过 50 基点","action":"FORCE_ROLLBACK"},{"id":"LATENCY_BREACH","label":"时延增量超过 100 毫秒","action":"FORCE_ROLLBACK"},{"id":"LEASE_DIVERGENCE","label":"Epoch、Holder 或 Token 分叉","action":"FORCE_ROLLBACK"}],"rollbackTimeline":[{"sequence":1,"maximumSeconds":0,"label":"触发即冻结后续阶梯"},{"sequence":2,"maximumSeconds":30,"label":"恢复稳定目标与写围栏"},{"sequence":3,"maximumSeconds":90,"label":"流量归零并验证租约唯一"},{"sequence":4,"maximumSeconds":120,"label":"独立读回终局结论"}],"protectionInvariants":[{"id":"I01","label":"无 B20 终局读回不得形成候选","state":"REQUIRED"},{"id":"I02","label":"Security 与 SRE 必须双签且主体分离","state":"REQUIRED"},{"id":"I03","label":"灰度只能按 0→1→5→25→100 单向推进","state":"REQUIRED"},{"id":"I04","label":"任一阈值越界立即强制回退","state":"REQUIRED"},{"id":"I05","label":"回退必须在 120 秒内完成独立读回","state":"REQUIRED"},{"id":"I06","label":"Portal 不具备生产提升、切流或回退能力","state":"REQUIRED"}],"blockedCapabilities":["PRODUCTION_PROMOTION","PRODUCTION_TRAFFIC_SHIFT","PRODUCTION_ROLLBACK","G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"恢复候选受控提升空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-recovery-candidate-qualification-controlled-promotion-rollback-readback.template.json"},{"id":"T02","label":"浏览器本地候选与回退预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-recovery-candidate-qualification-controlled-promotion-rollback-readback.offline.html"},{"id":"T03","label":"Node.js 五方签名验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-recovery-candidate-qualification-controlled-promotion-rollback-readback.mjs"}],"denialCodes":["RQ01","RQ02","RQ03","RQ04","RQ05","RQ06","RQ07","RQ08","RQ09","RQ10","RQ11","RQ12","RQ13","RQ14","RQ15","RQ16","RQ17","RQ18","RQ19","RQ20","RQ21","RQ22","RQ23","RQ24","RQ25","RQ26","RQ27","RQ28","RQ29","RQ30","RQ31","RQ32","RQ33","RQ34","RQ35","RQ36","RQ37","RQ38","RQ39","RQ40","RQ41","RQ42","RQ43","RQ44","RQ45","RQ46","RQ47","RQ48","RQ49","RQ50","RQ51","RQ52"],"resultBoundary":"LOCAL_RECOVERY_CANDIDATE_PROMOTION_ROLLBACK_REHEARSAL_SETTLED_EXTERNAL_EXECUTION_REQUIRED","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalQualifiesProductionCandidate":false,"portalExecutesPromotion":false,"portalShiftsProductionTraffic":false,"portalExecutesProductionRollback":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"readModelPublicationJournalIntegrityQuarantinePointInTimeRecoveryReadback":{"id":"D05-C02-G04-READ-MODEL-PUBLICATION-JOURNAL-INTEGRITY-QUARANTINE-POINT-IN-TIME-RECOVERY-READBACK-v1","schemaVersion":"developer.reits.tech/g04-read-model-publication-journal-integrity-quarantine-point-in-time-recovery-readback/v1","scanSchemaVersion":"developer.reits.tech/g04-read-model-publication-journal-integrity-scan/v1","quarantineSchemaVersion":"developer.reits.tech/g04-read-model-publication-journal-corruption-quarantine/v1","recoveryPlanSchemaVersion":"developer.reits.tech/g04-read-model-publication-point-in-time-recovery-plan/v1","restoreSchemaVersion":"developer.reits.tech/g04-read-model-publication-point-in-time-restore-receipt/v1","readbackSchemaVersion":"developer.reits.tech/g04-read-model-publication-recovery-readback/v1","state":"TOOLS_READY_SCANS_0_OF_1_QUARANTINES_0_OF_1_RECOVERY_PLANS_0_OF_1_RESTORES_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 MERKLE + Ed25519","toolsReady":3,"toolsTotal":3,"integrityScansObserved":0,"integrityScansRequired":1,"corruptionQuarantinesObserved":0,"corruptionQuarantinesRequired":1,"recoveryPlansObserved":0,"recoveryPlansRequired":1,"pointInTimeRestoresObserved":0,"pointInTimeRestoresRequired":1,"recoveryReadbacksObserved":0,"recoveryReadbacksRequired":1,"corruptEventsAppliedObserved":0,"productionMutationsObserved":0,"integrityScanSegmentCount":3,"integrityDetectionMaximumSeconds":60,"quarantineMaximumSeconds":60,"rpoBudgetSeconds":300,"rtoBudgetSeconds":900,"recoveryReadbackMaximumSeconds":60,"recoveryModel":"THREE_SEGMENT_INTEGRITY_SCAN_SINGLE_RANGE_QUARANTINE_LAST_GOOD_CHECKPOINT_ISOLATED_PITR","actors":[{"sequence":1,"id":"INTEGRITY_SCANNER","duty":"只读巡检封印事件段并重算 Merkle Root","authority":"READ_AND_REHASH_ONLY"},{"sequence":2,"id":"QUARANTINE_AUTHORITY","duty":"精确隔离损坏范围并保全原始证据","authority":"RANGE_BARRIER_ONLY"},{"sequence":3,"id":"RECOVERY_PLANNER","duty":"选择最后安全检查点并固定 RPO 与 RTO","authority":"PLAN_ONLY"},{"sequence":4,"id":"RESTORE_EXECUTOR","duty":"只在隔离命名空间执行时间点恢复","authority":"ISOLATED_RESTORE_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"读回状态、写屏障与零生产副作用","authority":"READ_ONLY"}],"lifecycleStages":[{"sequence":1,"id":"SCAN_SEALED_SEGMENT_ROOTS","label":"只读重算三个封印事件段 Root","state":"READY"},{"sequence":2,"id":"IDENTIFY_SINGLE_CORRUPTED_RANGE","label":"唯一定位预期与观察 Root 漂移范围","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"BIND_LAST_GOOD_CHECKPOINT","label":"绑定紧邻损坏前的最后安全检查点","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"ACTIVATE_RANGE_WRITE_BARRIER","label":"六十秒内为精确损坏范围建立写屏障","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"PRESERVE_CORRUPTION_EVIDENCE","label":"保留原始段、双 Root 与巡检签名","state":"EXTERNAL_REQUIRED"},{"sequence":6,"id":"PLAN_POINT_IN_TIME_RECOVERY","label":"固定五分钟 RPO 与十五分钟 RTO","state":"EXTERNAL_REQUIRED"},{"sequence":7,"id":"RESTORE_ISOLATED_NAMESPACE","label":"在零生产写能力命名空间恢复","state":"EXTERNAL_REQUIRED"},{"sequence":8,"id":"VERIFY_STATE_AND_LEASE_PARITY","label":"核对状态根、Epoch、Holder 与 Token","state":"EXTERNAL_REQUIRED"},{"sequence":9,"id":"PROVE_ZERO_PRODUCTION_EFFECT","label":"证明损坏事件、生产变更与切流均为零","state":"EXTERNAL_REQUIRED"},{"sequence":10,"id":"INDEPENDENT_RECOVERY_READBACK","label":"独立 Reader 终局读回完整恢复链","state":"EXTERNAL_REQUIRED"}],"recoveryProofChain":[{"sequence":1,"id":"SEALED_ROOT_SET","state":"EXPECTED_ROOTS_BOUND","authority":"INTEGRITY_SCANNER"},{"sequence":2,"id":"CORRUPTION_OBSERVATION","state":"SINGLE_RANGE_IDENTIFIED","authority":"INTEGRITY_SCANNER"},{"sequence":3,"id":"QUARANTINE_RECEIPT","state":"WRITE_BARRIER_ACTIVE","authority":"QUARANTINE_AUTHORITY"},{"sequence":4,"id":"RECOVERY_PLAN","state":"RPO_RTO_BOUND","authority":"RECOVERY_PLANNER"},{"sequence":5,"id":"RESTORE_RECEIPT","state":"ISOLATED_STATE_MATCH","authority":"RESTORE_EXECUTOR"},{"sequence":6,"id":"ZERO_EFFECT_PROOF","state":"PRODUCTION_UNCHANGED","authority":"RESTORE_EXECUTOR"},{"sequence":7,"id":"INDEPENDENT_READBACK","state":"EXTERNAL_REQUIRED","authority":"INDEPENDENT_READER"}],"protectionInvariants":[{"id":"I01","label":"健康段 Root 必须匹配且损坏段只能唯一","state":"REQUIRED"},{"id":"I02","label":"最后安全序号必须紧邻首个损坏序号","state":"REQUIRED"},{"id":"I03","label":"隔离范围必须精确且原始损坏证据保留","state":"REQUIRED"},{"id":"I04","label":"恢复点满足五分钟 RPO 和十五分钟 RTO","state":"REQUIRED"},{"id":"I05","label":"隔离恢复不得拥有生产写入或切流能力","state":"REQUIRED"},{"id":"I06","label":"五方主体与 Key 分离且损坏事件应用为零","state":"REQUIRED"}],"blockedCapabilities":["G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"日志损坏隔离与恢复空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-journal-integrity-quarantine-point-in-time-recovery-readback.template.json"},{"id":"T02","label":"浏览器本地损坏隔离恢复预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-journal-integrity-quarantine-point-in-time-recovery-readback.offline.html"},{"id":"T03","label":"Node.js 时间点恢复完整验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-journal-integrity-quarantine-point-in-time-recovery-readback.mjs"}],"denialCodes":["DR01_PACKET_SHAPE","DR02_SCHEMA_VERSION","DR03_PLAN_ID","DR04_EVALUATED_AT","DR05_B19_UPSTREAM_REFERENCE","DR06_SCAN_SHAPE","DR07_SCAN_IDENTITY","DR08_SCAN_WINDOW","DR09_SCAN_SEGMENT_SET","DR10_HEALTHY_ROOTS","DR11_CORRUPTION_DETECTION","DR12_CORRUPTED_RANGE","DR13_LAST_GOOD_CHECKPOINT","DR14_SCAN_PAYLOAD","DR15_SCANNER_SIGNATURE","DR16_QUARANTINE_SHAPE","DR17_QUARANTINE_BINDING","DR18_QUARANTINE_WINDOW","DR19_QUARANTINE_RANGE","DR20_WRITE_BARRIER","DR21_EVIDENCE_PRESERVED","DR22_QUARANTINE_ZERO_MUTATION","DR23_QUARANTINE_PAYLOAD","DR24_QUARANTINE_AUTHORITY_SIGNATURE","DR25_RECOVERY_PLAN_SHAPE","DR26_RECOVERY_PLAN_BINDING","DR27_RECOVERY_PLAN_WINDOW","DR28_CHECKPOINT_BINDING","DR29_RPO_BUDGET","DR30_RTO_BUDGET","DR31_ISOLATED_NAMESPACE","DR32_ZERO_PRODUCTION_CAPABILITY","DR33_EXCLUDED_CORRUPT_RANGE","DR34_EXPECTED_STATE_BINDING","DR35_RECOVERY_PLAN_PAYLOAD","DR36_RECOVERY_PLANNER_SIGNATURE","DR37_RESTORE_SHAPE","DR38_RESTORE_PLAN_BINDING","DR39_RESTORE_WINDOW","DR40_RESTORE_NAMESPACE","DR41_RESTORE_SEQUENCE","DR42_RESTORE_STATE_PARITY","DR43_ZERO_CORRUPT_APPLY","DR44_RESTORE_ZERO_SIDE_EFFECT","DR45_RESTORE_PAYLOAD","DR46_RESTORE_EXECUTOR_SIGNATURE","DR47_READBACK_SHAPE","DR48_READBACK_BINDING","DR49_READBACK_SETTLEMENT","DR50_INDEPENDENT_READER_SIGNATURE"],"resultBoundary":"LOCAL_JOURNAL_CORRUPTION_QUARANTINE_PITR_SETTLED_EXTERNAL_OBSERVATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalScansProductionJournal":false,"portalActivatesProductionBarrier":false,"portalExecutesProductionRestore":false,"portalPromotesRecoveredNamespace":false,"portalShiftsProductionTraffic":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"readModelPublicationLeaseEventJournalCheckpointCompactionReplayReadback":{"id":"D05-C02-G04-READ-MODEL-PUBLICATION-LEASE-EVENT-JOURNAL-CHECKPOINT-COMPACTION-REPLAY-READBACK-v1","schemaVersion":"developer.reits.tech/g04-read-model-publication-lease-event-journal-checkpoint-compaction-replay-readback/v1","journalSchemaVersion":"developer.reits.tech/g04-read-model-publication-lease-event-journal-segment/v1","checkpointSchemaVersion":"developer.reits.tech/g04-read-model-publication-lease-checkpoint/v1","compactionSchemaVersion":"developer.reits.tech/g04-read-model-publication-lease-compaction-receipt/v1","replaySchemaVersion":"developer.reits.tech/g04-read-model-publication-lease-replay-receipt/v1","readbackSchemaVersion":"developer.reits.tech/g04-read-model-publication-lease-replay-readback/v1","state":"TOOLS_READY_SEGMENTS_0_OF_1_CHECKPOINTS_0_OF_1_REPLAYS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 MERKLE + Ed25519","toolsReady":3,"toolsTotal":3,"journalSegmentsObserved":0,"journalSegmentsRequired":1,"checkpointsObserved":0,"checkpointsRequired":1,"compactionsObserved":0,"compactionsRequired":1,"replaysObserved":0,"replaysRequired":1,"replayReadbacksObserved":0,"replayReadbacksRequired":1,"droppedEventsObserved":0,"duplicateMutationsObserved":0,"segmentEventLimit":128,"segmentMaximumSeconds":900,"checkpointEventInterval":64,"checkpointMaximumSeconds":300,"replayMaximumSeconds":120,"rawRetentionDays":30,"journalModel":"APPEND_ONLY_HASH_CHAIN_MERKLE_CHECKPOINT_PROOF_PRESERVING_COMPACTION_ISOLATED_REPLAY","actors":[{"sequence":1,"id":"EVENT_WRITER","duty":"按全局序号追加租约事实并绑定前序摘要","authority":"APPEND_ONLY"},{"sequence":2,"id":"CHECKPOINT_SEALER","duty":"封印事件段 Merkle Root 与状态根","authority":"SEAL_ONLY"},{"sequence":3,"id":"COMPACTION_OPERATOR","duty":"冻结范围并生成保留证明的压缩包","authority":"COMPACT_ONLY"},{"sequence":4,"id":"REPLAY_EXECUTOR","duty":"在隔离命名空间从检查点确定性重放","authority":"ISOLATED_REPLAY_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"核对序列连续、状态根一致与零重复副作用","authority":"READ_ONLY"}],"eventTypes":["LEASE_CLAIMED","LEASE_RENEWED","WRITES_FROZEN","LEASE_YIELDED","CRASH_TAKEOVER_CLAIMED","TOKEN_FENCED","ORPHAN_CLEANUP_SETTLED"],"lifecycleStages":[{"sequence":1,"id":"APPEND_ORDERED_EVENTS","label":"以单调序号和前序摘要追加七类租约事件","state":"READY"},{"sequence":2,"id":"SEAL_SEGMENT_ROOT","label":"封印事件段摘要、Merkle Root 与首尾序号","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"MATERIALIZE_CHECKPOINT","label":"每六十四事件或五分钟生成状态检查点","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"FREEZE_COMPACTION_RANGE","label":"冻结已封印范围并禁止尾部事件进入压缩","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"COMPACT_PRESERVE_PROOF","label":"压缩原始段并保留 Manifest 与包含证明","state":"EXTERNAL_REQUIRED"},{"sequence":6,"id":"REPLAY_ISOLATED","label":"在无生产写权限的隔离空间执行确定性重放","state":"EXTERNAL_REQUIRED"},{"sequence":7,"id":"COMPARE_STATE_ROOT","label":"比较重放状态根、事件计数和最终 Holder","state":"EXTERNAL_REQUIRED"},{"sequence":8,"id":"DETECT_DUPLICATE_AND_GAP","label":"证明事件无缺口且幂等键没有重复副作用","state":"EXTERNAL_REQUIRED"},{"sequence":9,"id":"INDEPENDENT_REPLAY_READBACK","label":"独立 Reader 终局读回全链与能力防火墙","state":"EXTERNAL_REQUIRED"}],"protectionInvariants":[{"id":"I01","label":"事件序号连续且每项绑定前序事件摘要","state":"REQUIRED"},{"id":"I02","label":"事件段 Root、检查点 Root 与压缩证明不可漂移","state":"REQUIRED"},{"id":"I03","label":"压缩不能越过已封印范围或删除三十日原始审计链","state":"REQUIRED"},{"id":"I04","label":"重放必须在隔离命名空间且生产写入能力为零","state":"REQUIRED"},{"id":"I05","label":"重放状态根、Holder、Epoch 与 Token 必须精确一致","state":"REQUIRED"},{"id":"I06","label":"五方主体和 Key 分离，缺失或重复事件一律拒绝","state":"REQUIRED"}],"proofChain":[{"sequence":1,"id":"RAW_SEGMENT","state":"APPEND_ONLY","authority":"EVENT_WRITER"},{"sequence":2,"id":"SEALED_ROOT","state":"MERKLE_SEALED","authority":"CHECKPOINT_SEALER"},{"sequence":3,"id":"STATE_CHECKPOINT","state":"STATE_ROOT_BOUND","authority":"CHECKPOINT_SEALER"},{"sequence":4,"id":"COMPACTED_PROOF","state":"RAW_PROOF_PRESERVED","authority":"COMPACTION_OPERATOR"},{"sequence":5,"id":"REPLAY_RESULT","state":"ISOLATED_MATCH","authority":"REPLAY_EXECUTOR"},{"sequence":6,"id":"INDEPENDENT_READBACK","state":"EXTERNAL_REQUIRED","authority":"INDEPENDENT_READER"}],"blockedCapabilities":["G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"事件日志压缩重放空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-lease-event-journal-checkpoint-compaction-replay-readback.template.json"},{"id":"T02","label":"浏览器本地事件链与重放验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-lease-event-journal-checkpoint-compaction-replay-readback.offline.html"},{"id":"T03","label":"Node.js 日志压缩重放验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-lease-event-journal-checkpoint-compaction-replay-readback.mjs"}],"denialCodes":["EJ01_PACKET_SHAPE","EJ02_SCHEMA_VERSION","EJ03_PLAN_ID","EJ04_EVALUATED_AT","EJ05_B18_UPSTREAM_REFERENCE","EJ06_SEGMENT_SHAPE","EJ07_SEGMENT_IDENTITY","EJ08_SEGMENT_WINDOW","EJ09_EVENT_COUNT","EJ10_EVENT_ORDER","EJ11_EVENT_SHAPE","EJ12_EVENT_TYPE_ORDER","EJ13_SEQUENCE_CONTINUITY","EJ14_PREVIOUS_DIGEST_CHAIN","EJ15_EVENT_DIGEST","EJ16_IDEMPOTENCY_KEY","EJ17_EPOCH_MONOTONIC","EJ18_HOLDER_BINDING","EJ19_TOKEN_BINDING","EJ20_SEGMENT_MERKLE_ROOT","EJ21_SEGMENT_PAYLOAD","EJ22_WRITER_SIGNATURE","EJ23_CHECKPOINT_SHAPE","EJ24_CHECKPOINT_SEGMENT_BINDING","EJ25_CHECKPOINT_WINDOW","EJ26_CHECKPOINT_SEQUENCE","EJ27_CHECKPOINT_EVENT_COUNT","EJ28_CHECKPOINT_STATE_ROOT","EJ29_CHECKPOINT_CURRENT_BINDING","EJ30_CHECKPOINT_PAYLOAD","EJ31_SEALER_SIGNATURE","EJ32_COMPACTION_SHAPE","EJ33_COMPACTION_RANGE","EJ34_COMPACTION_RETENTION","EJ35_COMPACTION_PROOF","EJ36_COMPACTION_ZERO_MUTATION","EJ37_COMPACTION_PAYLOAD","EJ38_OPERATOR_SIGNATURE","EJ39_REPLAY_SHAPE","EJ40_REPLAY_BINDING","EJ41_REPLAY_ISOLATION","EJ42_REPLAY_SEQUENCE_AND_COUNT","EJ43_REPLAY_STATE_PARITY","EJ44_REPLAY_ZERO_SIDE_EFFECT","EJ45_REPLAY_PAYLOAD","EJ46_EXECUTOR_SIGNATURE","EJ47_READBACK_SETTLEMENT","EJ48_INDEPENDENT_READER_SIGNATURE"],"resultBoundary":"LOCAL_JOURNAL_CHECKPOINT_COMPACTION_REPLAY_SETTLED_EXTERNAL_OBSERVATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalAppendsProductionJournal":false,"portalCompactsProductionJournal":false,"portalExecutesProductionReplay":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"readModelPublicationLeaseRenewalHandoffCrashTakeoverReadback":{"id":"D05-C02-G04-READ-MODEL-PUBLICATION-LEASE-RENEWAL-HANDOFF-CRASH-TAKEOVER-READBACK-v1","schemaVersion":"developer.reits.tech/g04-read-model-publication-lease-renewal-handoff-crash-takeover-readback/v1","renewalSchemaVersion":"developer.reits.tech/g04-read-model-publication-lease-renewal-receipt/v1","handoffSchemaVersion":"developer.reits.tech/g04-read-model-publication-graceful-handoff-receipt/v1","takeoverSchemaVersion":"developer.reits.tech/g04-read-model-publication-crash-takeover-receipt/v1","readbackSchemaVersion":"developer.reits.tech/g04-read-model-publication-takeover-readback/v1","state":"TOOLS_READY_RENEWALS_0_OF_1_GRACEFUL_HANDOFFS_0_OF_1_CRASH_TAKEOVERS_0_OF_1_READBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"renewalsObserved":0,"renewalsRequired":1,"gracefulHandoffsObserved":0,"gracefulHandoffsRequired":1,"crashTakeoversObserved":0,"crashTakeoversRequired":1,"takeoverReadbacksObserved":0,"takeoverReadbacksRequired":1,"splitBrainMutationsObserved":0,"heartbeatMaximumSeconds":30,"renewalMaximumSeconds":90,"maximumConsecutiveRenewals":2,"gracefulHandoffMaximumSeconds":60,"crashGraceSeconds":30,"takeoverReadbackMaximumSeconds":60,"continuityModel":"VERSIONED_RENEWAL_GRACEFUL_YIELD_EXPIRED_CRASH_TAKEOVER_SINGLE_HOLDER","actors":[{"sequence":1,"id":"RENEWING_HOLDER","duty":"续约当前租约并轮换围栏能力","authority":"LEASE_RENEWAL_ONLY"},{"sequence":2,"id":"GRACEFUL_SUCCESSOR","duty":"冻结与双签后领取下一 Epoch","authority":"HANDOFF_CLAIM_ONLY"},{"sequence":3,"id":"CRASH_TAKEOVER_SUCCESSOR","duty":"到期与静默期后执行 CAS 接管","authority":"EXPIRED_TAKEOVER_ONLY"},{"sequence":4,"id":"FAILURE_DETECTOR","duty":"见证心跳终止、到期与静默期","authority":"WITNESS_ONLY"},{"sequence":5,"id":"INDEPENDENT_READER","duty":"读回单活 Holder、旧能力围栏与零双主写入","authority":"READ_ONLY"}],"lifecycleStages":[{"sequence":1,"id":"HEARTBEAT_CURRENT_LEASE","label":"读取当前 Epoch、版本与到期时间","state":"READY"},{"sequence":2,"id":"RENEW_WITH_TOKEN_ROTATION","label":"版本加一并轮换围栏能力摘要","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"FREEZE_SOURCE_WRITES","label":"优雅移交前冻结源 Holder","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"YIELD_AND_CLAIM_NEXT_EPOCH","label":"源与接任 Holder 双签并推进 Epoch","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"OBSERVE_HEARTBEAT_FAILURE","label":"异常路径记录故障但不立即抢占","state":"EXTERNAL_REQUIRED"},{"sequence":6,"id":"WAIT_EXPIRY_AND_GRACE","label":"等待租约到期与三十秒静默期","state":"EXTERNAL_REQUIRED"},{"sequence":7,"id":"CAS_CRASH_TAKEOVER","label":"故障见证与新 Holder 双签接管","state":"EXTERNAL_REQUIRED"},{"sequence":8,"id":"READBACK_SINGLE_HOLDER","label":"独立读回旧能力全围栏与双主为零","state":"EXTERNAL_REQUIRED"}],"protectionInvariants":[{"id":"I01","label":"续约不改变 Epoch，但必须递增版本并轮换 Token","state":"REQUIRED"},{"id":"I02","label":"连续续约最多两次且心跳不超过三十秒","state":"REQUIRED"},{"id":"I03","label":"优雅移交先冻结、后让出、再领取","state":"REQUIRED"},{"id":"I04","label":"崩溃接管必须等待到期与三十秒静默期","state":"REQUIRED"},{"id":"I05","label":"全部旧 Token 拒绝写入且双主写入为零","state":"REQUIRED"},{"id":"I06","label":"五方主体与 Key 全部分离","state":"REQUIRED"}],"tokenTimeline":[{"sequence":1,"id":"TOKEN_A7","owner":"RENEWING_HOLDER","epoch":41,"state":"REVOKED_FENCED"},{"sequence":2,"id":"TOKEN_A8","owner":"RENEWING_HOLDER","epoch":41,"state":"REVOKED_FENCED"},{"sequence":3,"id":"TOKEN_B9","owner":"GRACEFUL_SUCCESSOR","epoch":42,"state":"REVOKED_FENCED"},{"sequence":4,"id":"TOKEN_C10","owner":"CRASH_TAKEOVER_SUCCESSOR","epoch":43,"state":"ACTIVE_CANDIDATE"}],"blockedCapabilities":["G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"续约移交接管空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-lease-renewal-handoff-crash-takeover-readback.template.json"},{"id":"T02","label":"浏览器本地连续性验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-lease-renewal-handoff-crash-takeover-readback.offline.html"},{"id":"T03","label":"Node.js 续约移交接管验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-lease-renewal-handoff-crash-takeover-readback.mjs"}],"denialCodes":["HT01_PACKET_SHAPE","HT02_SCHEMA_VERSION","HT03_PLAN_ID","HT04_EVALUATED_AT","HT05_UPSTREAM_REFERENCES","HT06_RENEWAL_SHAPE","HT07_RENEWAL_LEASE_BINDING","HT08_RENEWAL_WINDOW","HT09_RENEWAL_VERSION_COUNT","HT10_HEARTBEAT_CADENCE","HT11_RENEWAL_HOLDER_IDENTITY","HT12_RENEWAL_TOKEN_ROTATION","HT13_RENEWAL_PROTECTED_REFERENCES","HT14_RENEWAL_FIREWALL","HT15_RENEWAL_PAYLOAD","HT16_RENEWAL_SIGNATURE","HT17_HANDOFF_SHAPE","HT18_HANDOFF_RENEWAL_BINDING","HT19_HANDOFF_WINDOW","HT20_HANDOFF_EPOCH","HT21_HANDOFF_SOURCE_BINDING","HT22_HANDOFF_SUCCESSOR_SEPARATION","HT23_HANDOFF_TOKEN_ROTATION","HT24_HANDOFF_FREEZE_BARRIER","HT25_HANDOFF_DECISION","HT26_HANDOFF_PAYLOAD","HT27_HANDOFF_DUAL_SIGNATURE","HT28_TAKEOVER_SHAPE","HT29_TAKEOVER_HANDOFF_BINDING","HT30_TAKEOVER_EXPIRY_GRACE","HT31_TAKEOVER_EPOCH","HT32_TAKEOVER_FAILED_HOLDER_BINDING","HT33_TAKEOVER_SUCCESSOR_SEPARATION","HT34_FAILURE_DETECTOR_SEPARATION","HT35_TAKEOVER_TOKEN_ROTATION","HT36_TAKEOVER_ZERO_PRECLAIM_MUTATION","HT37_TAKEOVER_DECISION","HT38_TAKEOVER_PAYLOAD","HT39_TAKEOVER_DUAL_SIGNATURE","HT40_READBACK_SHAPE","HT41_READBACK_BINDING_WINDOW","HT42_READBACK_CURRENT_BINDING","HT43_READBACK_SPLIT_BRAIN_FENCE","HT44_INDEPENDENT_READBACK_SIGNATURE"],"resultBoundary":"LOCAL_RENEWAL_HANDOFF_CRASH_TAKEOVER_SETTLED_EXTERNAL_OBSERVATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalRenewsLease":false,"portalTransfersHolder":false,"portalDetectsProductionFailure":false,"portalExecutesTakeover":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"readModelPublicationLeaseFencingOrphanCleanupReadback":{"id":"D05-C02-G04-READ-MODEL-PUBLICATION-LEASE-FENCING-ORPHAN-CLEANUP-READBACK-v1","schemaVersion":"developer.reits.tech/g04-read-model-publication-lease-fencing-orphan-cleanup-readback/v1","leaseSchemaVersion":"developer.reits.tech/g04-read-model-publication-lease/v1","cleanupSchemaVersion":"developer.reits.tech/g04-read-model-orphan-cleanup-receipt/v1","readbackSchemaVersion":"developer.reits.tech/g04-read-model-orphan-cleanup-readback/v1","state":"TOOLS_READY_LEASE_CLAIMS_0_OF_1_CONCURRENT_FENCES_0_OF_1_ORPHAN_SWEEPS_0_OF_1_CLEANUP_SETTLEMENTS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"leaseClaimsObserved":0,"leaseClaimsRequired":1,"concurrentFencesObserved":0,"concurrentFencesRequired":1,"orphanSweepsObserved":0,"orphanSweepsRequired":1,"cleanupSettlementsObserved":0,"cleanupSettlementsRequired":1,"protectedObjectMutationsObserved":0,"leaseMaximumSeconds":90,"cleanupMaximumSeconds":120,"readbackMaximumSeconds":60,"concurrencyModel":"SINGLE_ACTIVE_LEASE_MONOTONIC_EPOCH_FENCING","actors":[{"sequence":1,"id":"PUBLISHER_HOLDER","duty":"领取租约并持有唯一 fencing token","authority":"LEASE_SCOPED"},{"sequence":2,"id":"INDEPENDENT_JANITOR","duty":"隔离并清理旧 epoch 孤儿候选","authority":"ORPHAN_ONLY"},{"sequence":3,"id":"INDEPENDENT_READER","duty":"读回墓碑、对象缺失与保护集","authority":"READ_ONLY"}],"lifecycleStages":[{"sequence":1,"id":"CLAIM_LEASE_CAS","label":"以 expected epoch CAS 领取短租约","state":"READY"},{"sequence":2,"id":"ISSUE_FENCING_TOKEN","label":"签发只保存摘要的 epoch token","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"REJECT_COMPETITOR","label":"拒绝并发或旧 epoch Publisher","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"QUARANTINE_ORPHANS","label":"扫描并隔离旧 epoch 候选","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"TOMBSTONE_AND_DELETE","label":"生成墓碑后删除孤儿对象","state":"EXTERNAL_REQUIRED"},{"sequence":6,"id":"INDEPENDENT_CLEANUP_READBACK","label":"独立读回零误删与稳定保护集","state":"EXTERNAL_REQUIRED"}],"protectionInvariants":[{"id":"I01","label":"同一作用域只允许一个活跃租约","state":"REQUIRED"},{"id":"I02","label":"旧 epoch 与并发 Publisher 永远不能提交","state":"REQUIRED"},{"id":"I03","label":"稳定游标与活跃候选永不进入清理集","state":"REQUIRED"},{"id":"I04","label":"孤儿必须先隔离、再墓碑、最后删除","state":"REQUIRED"},{"id":"I05","label":"Holder、Janitor、Reader 三方职责分离","state":"REQUIRED"}],"blockedCapabilities":["G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"发布租约与孤儿清理空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-lease-fencing-orphan-cleanup-readback.template.json"},{"id":"T02","label":"浏览器本地租约与清理验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-lease-fencing-orphan-cleanup-readback.offline.html"},{"id":"T03","label":"Node.js 租约围栏与清理验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-read-model-publication-lease-fencing-orphan-cleanup-readback.mjs"}],"denialCodes":["LF01_PACKET_SHAPE","LF02_SCHEMA_VERSION","LF03_PLAN_ID","LF04_EVALUATED_AT","LF05_UPSTREAM_REFERENCES","LF06_LEASE_SHAPE","LF07_LEASE_IDENTITY_SCOPE","LF08_LEASE_WINDOW","LF09_EPOCH_MONOTONIC","LF10_HOLDER_IDENTITY","LF11_FENCING_TOKEN","LF12_PROTECTED_REFERENCES","LF13_CAPABILITY_FIREWALL","LF14_LEASE_PAYLOAD","LF15_HOLDER_SIGNATURE","LF16_FENCE_SHAPE","LF17_FENCE_LEASE_BINDING","LF18_FENCE_WINDOW","LF19_COMPETITOR_SEPARATION","LF20_STALE_OR_CONCURRENT_EPOCH","LF21_COMPETITOR_DENIED","LF22_WINNER_BINDING","LF23_NO_COMPETITOR_MUTATION","LF24_CLEANUP_SHAPE","LF25_SWEEP_IDENTITY","LF26_CLEANUP_WINDOW","LF27_CLEANUP_LEASE_BINDING","LF28_PROTECTED_SET_BINDING","LF29_CANDIDATE_SET","LF30_CANDIDATE_SHAPE","LF31_ORPHAN_CLASSIFICATION","LF32_EXPIRED_EPOCH","LF33_PROTECTED_CANDIDATE","LF34_QUARANTINE_FIRST","LF35_CLEANUP_ACTION","LF36_CLEANUP_PAYLOAD","LF37_INDEPENDENT_JANITOR_SIGNATURE","LF38_READBACK_SHAPE","LF39_READBACK_BINDING_WINDOW","LF40_INDEPENDENT_READBACK_SETTLEMENT"],"resultBoundary":"LOCAL_LEASE_FENCED_ORPHAN_CLEANUP_SETTLED_EXTERNAL_OBSERVATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalClaimsLease":false,"portalFencesPublisher":false,"portalSweepsCandidates":false,"portalDeletesCandidates":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"readModelAtomicPublicationConsistencyReadback":{"id":"D05-C02-G04-READ-MODEL-ATOMIC-PUBLICATION-CONSISTENCY-READBACK-v1","schemaVersion":"developer.reits.tech/g04-read-model-atomic-publication-consistency-readback/v1","publicationSchemaVersion":"developer.reits.tech/g04-read-model-atomic-publication-receipt/v1","consistencySchemaVersion":"developer.reits.tech/g04-read-model-atomic-consistency-readback/v1","state":"TOOLS_READY_PUBLICATION_BUNDLES_0_OF_1_ATOMIC_COMMITS_0_OF_1_CONSISTENCY_READBACKS_0_OF_1_ROLLBACKS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"publicationBundlesObserved":0,"publicationBundlesRequired":1,"atomicCommitsObserved":0,"atomicCommitsRequired":1,"consistencyReadbacksObserved":0,"consistencyReadbacksRequired":1,"rollbacksObserved":0,"rollbacksRequired":1,"consumersActivatedObserved":0,"consumersActivatedRequired":3,"releaseMode":"G04_READ_MODELS_ONLY","prepareMaximumSeconds":120,"consistencyReadbackMaximumSeconds":60,"rollbackMaximumSeconds":120,"generationRule":"PREVIOUS_PLUS_ONE","consumers":[{"sequence":1,"id":"G04_STATUS_CONSUMER","scope":"G04_STATUS_PROJECTION","generation":"CANDIDATE","stage":"STAGED_INVISIBLE","state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"G04_EVIDENCE_CONSUMER","scope":"G04_EVIDENCE_INDEX","generation":"CANDIDATE","stage":"STAGED_INVISIBLE","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"G04_AUDIT_CONSUMER","scope":"G04_AUDIT_TIMELINE","generation":"CANDIDATE","stage":"STAGED_INVISIBLE","state":"EXTERNAL_REQUIRED"}],"publicationStages":[{"sequence":1,"id":"PREPARE_THREE","label":"三投影进入不可见准备区","state":"READY"},{"sequence":2,"id":"VERIFY_TRIPLET","label":"核对同代、摘要、ETag 与对象引用","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"CAS_VISIBILITY_POINTER","label":"一次 CAS 切换可见游标","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"READBACK_BARRIER","label":"独立 Reader 读取三消费者","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"COMMIT_OR_ROLLBACK","label":"一致则提交，混代则回滚上一稳定游标","state":"EXTERNAL_REQUIRED"}],"visibilityStates":[{"sequence":1,"id":"STAGED_INVISIBLE","label":"候选世代不可见","authority":"NONE"},{"sequence":2,"id":"PARTIAL_VISIBLE_QUARANTINED","label":"发现部分可见，立即隔离","authority":"NONE"},{"sequence":3,"id":"ATOMIC_VISIBLE","label":"单指针切换完成","authority":"READ_ONLY"},{"sequence":4,"id":"CONSISTENT_SAME_GENERATION","label":"三消费者独立读回同代","authority":"READ_ONLY"},{"sequence":5,"id":"ROLLED_BACK_STABLE","label":"恢复到上一稳定游标","authority":"READ_ONLY_STALE"}],"blockedCapabilities":["G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"多投影原子发布空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-read-model-atomic-publication-consistency-readback.template.json"},{"id":"T02","label":"浏览器本地原子屏障验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-read-model-atomic-publication-consistency-readback.offline.html"},{"id":"T03","label":"Node.js 原子发布一致性验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-read-model-atomic-publication-consistency-readback.mjs"}],"denialCodes":["AB01_PACKET_SHAPE","AB02_SCHEMA_VERSION","AB03_PLAN_ID","AB04_EVALUATED_AT","AB05_UPSTREAM_REFERENCES","AB06_BUNDLE_SHAPE","AB07_BUNDLE_IDENTITY","AB08_RELEASE_MODE","AB09_GENERATION_WINDOW","AB10_CURSOR_BINDING","AB11_PROJECTION_ORDER","AB12_PROJECTION_SHAPE","AB13_PROJECTION_VERSION","AB14_GENERATION_PARITY","AB15_CONTENT_DIGEST","AB16_ETAG_BINDING","AB17_OBJECT_REFERENCE","AB18_STAGED_INVISIBLE","AB19_PROJECTION_SET_DIGEST","AB20_CAPABILITY_FIREWALL","AB21_RECEIPT_SHAPE","AB22_RECEIPT_IDENTITY","AB23_BUNDLE_BINDING","AB24_CAS_GENERATION","AB25_CURSOR_ADVANCE","AB26_ATOMIC_VISIBILITY","AB27_COMMIT_WINDOW","AB28_RECEIPT_PAYLOAD","AB29_PUBLISHER_SIGNATURE","AB30_READBACK_SHAPE","AB31_RECEIPT_BINDING","AB32_READBACK_WINDOW","AB33_RESULT_PARITY","AB34_CROSS_CONSUMER_BARRIER","AB35_ROLLBACK_CURSOR","AB36_INDEPENDENT_READER_SIGNATURE"],"resultBoundary":"LOCAL_ATOMIC_PUBLICATION_CONSISTENT_EXTERNAL_OBSERVATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalStagesProjection":false,"portalCommitsPublication":false,"portalPerformsRollback":false,"portalActivatesConsumers":false,"writeCapabilitiesReleased":0,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"readModelConsumerCompatibilityHealthReadback":{"id":"D05-C02-G04-READ-MODEL-CONSUMER-COMPATIBILITY-HEALTH-READBACK-v1","schemaVersion":"developer.reits.tech/g04-read-model-consumer-compatibility-health-readback/v1","invalidationSchemaVersion":"developer.reits.tech/g04-read-model-cache-invalidation-receipt/v1","healthSchemaVersion":"developer.reits.tech/g04-read-model-consumer-health-readback/v1","state":"TOOLS_READY_CONSUMER_CONTRACTS_0_OF_3_CACHE_INVALIDATIONS_0_OF_1_HEALTH_READBACKS_0_OF_3","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"consumerContractsObserved":0,"consumerContractsRequired":3,"cacheInvalidationsObserved":0,"cacheInvalidationsRequired":1,"consumerHealthReadbacksObserved":0,"consumerHealthReadbacksRequired":3,"consumersActivatedObserved":0,"consumersActivatedRequired":3,"releaseMode":"G04_READ_MODELS_ONLY","contractVersion":"1.0.0","invalidationMaximumSeconds":120,"healthReadbackMaximumSeconds":300,"fallbackState":"STALE_HELD_NO_AUTHORITY","consumers":[{"sequence":1,"id":"G04_STATUS_CONSUMER","scope":"G04_STATUS_PROJECTION","schemaId":"developer.reits.tech/g04-status-projection/v1","selectedVersion":"1.0.0","maxAgeSeconds":30,"state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"G04_EVIDENCE_CONSUMER","scope":"G04_EVIDENCE_INDEX","schemaId":"developer.reits.tech/g04-evidence-index/v1","selectedVersion":"1.0.0","maxAgeSeconds":60,"state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"G04_AUDIT_CONSUMER","scope":"G04_AUDIT_TIMELINE","schemaId":"developer.reits.tech/g04-audit-timeline/v1","selectedVersion":"1.0.0","maxAgeSeconds":60,"state":"EXTERNAL_REQUIRED"}],"invalidationTriggers":["CERTIFICATE_SEQUENCE_ADVANCE","PROJECTION_DIGEST_CHANGE","GATE_STATE_CHANGE","CERTIFICATE_EXPIRY","REVOCATION_EPOCH_ADVANCE"],"healthStates":[{"sequence":1,"id":"FRESH","label":"摘要、版本、ETag 与证书窗口一致","authority":"READ_ONLY"},{"sequence":2,"id":"STALE_HELD_NO_AUTHORITY","label":"可展示陈旧状态，但不得参与 Gate 决策","authority":"NONE"},{"sequence":3,"id":"DENIED","label":"主版本、签名、摘要或职责分离失败","authority":"NONE"}],"blockedCapabilities":["G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"只读消费者兼容空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-read-model-consumer-compatibility-health-readback.template.json"},{"id":"T02","label":"浏览器本地消费者与缓存验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-read-model-consumer-compatibility-health-readback.offline.html"},{"id":"T03","label":"Node.js 消费者兼容与健康读回验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-read-model-consumer-compatibility-health-readback.mjs"}],"denialCodes":["RC01_PACKET_SHAPE","RC02_SCHEMA_VERSION","RC03_PLAN_ID","RC04_EVALUATED_AT","RC05_UPSTREAM_REFERENCES","RC06_CONTRACT_SHAPE","RC07_CONTRACT_IDENTITY","RC08_NEGOTIATION_WINDOW","RC09_RELEASE_MODE","RC10_PROJECTION_ORDER","RC11_PROJECTION_SHAPE","RC12_PROJECTION_SCHEMA","RC13_VERSION_SET","RC14_MAJOR_VERSION_NEGOTIATION","RC15_CONTENT_DIGEST","RC16_CACHE_KEY_BINDING","RC17_ETAG_BINDING","RC18_TTL_POLICY","RC19_EXPIRY_MODE","RC20_CAPABILITY_FIREWALL","RC21_INVALIDATION_SHAPE","RC22_INVALIDATION_IDENTITY","RC23_CONTRACT_BINDING","RC24_CERTIFICATE_SEQUENCE","RC25_INVALIDATION_TRIGGERS","RC26_INVALIDATION_OUTCOME","RC27_INVALIDATION_WINDOW","RC28_INVALIDATOR_SIGNATURE","RC29_HEALTH_SHAPE","RC30_HEALTH_CONSUMER_PARITY","RC31_HEALTH_READBACK_BINDING","RC32_HEALTH_READER_SIGNATURE"],"resultBoundary":"LOCAL_CONSUMER_COMPATIBILITY_VALID_EXTERNAL_OBSERVATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalCreatesOrInvalidatesCache":false,"portalActivatesConsumers":false,"writeCapabilitiesReleased":0,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"closureCertificateDependencyReleaseReadback":{"id":"D05-C02-G04-CLOSURE-CERTIFICATE-DEPENDENCY-RELEASE-READBACK-v1","schemaVersion":"developer.reits.tech/g04-closure-certificate-dependency-release-readback/v1","certificateSchemaVersion":"developer.reits.tech/g04-closure-certificate/v1","readbackSchemaVersion":"developer.reits.tech/g04-dependency-release-readback/v1","state":"TOOLS_READY_CERTIFICATES_0_OF_1_DEPENDENCY_READBACKS_0_OF_1_READ_SCOPES_0_OF_3","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"closureCertificatesObserved":0,"closureCertificatesRequired":1,"dependencyReleaseReadbacksObserved":0,"dependencyReleaseReadbacksRequired":1,"readOnlyScopesReleasedObserved":0,"readOnlyScopesReleasedRequired":3,"maximumCertificateLifetimeMinutes":30,"maximumReadbackWindowMinutes":15,"releaseMode":"G04_READ_MODELS_ONLY","quorum":"CERTIFICATE_ISSUER_PLUS_INDEPENDENT_DIRECTORY_READER","releasedScopes":["G04_STATUS_PROJECTION","G04_EVIDENCE_INDEX","G04_AUDIT_TIMELINE"],"blockedScopes":["G05_CHANNEL_WINDOW","D05_EXECUTION","D06_GATE_ZERO"],"tools":[{"id":"T01","label":"G04 闭环证书空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-closure-certificate-dependency-release-readback.template.json"},{"id":"T02","label":"浏览器本地证书与作用域验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-closure-certificate-dependency-release-readback.offline.html"},{"id":"T03","label":"Node.js 闭环证书与依赖读回验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-closure-certificate-dependency-release-readback.mjs"}],"lifecycleStages":[{"sequence":1,"id":"B13_BIND","label":"绑定三头对账回执","state":"READY"},{"sequence":2,"id":"CERTIFICATE_SEAL","label":"签发防重放闭环证书","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"PUBLICATION","label":"发布到权威 Gate 目录","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"DIRECTORY_READBACK","label":"独立只读面复取","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"SCOPE_AUDIT","label":"核对允许与阻断作用域","state":"EXTERNAL_REQUIRED"},{"sequence":6,"id":"DEPENDENCY_HANDOFF","label":"仅交接 G04 只读依赖","state":"EXTERNAL_REQUIRED"}],"denialCodes":["GC01_PACKET_SHAPE","GC02_SCHEMA_VERSION","GC03_PLAN_ID","GC04_EVALUATED_AT","GC05_B13_RECEIPT","GC06_ENVELOPE_SHAPE","GC07_CERTIFICATE_SEQUENCE","GC08_GATE_STATE","GC09_B13_BINDING","GC10_FORMAL_RECEIPT","GC11_COMMIT_BINDING","GC12_CHECKPOINT_REFERENCE","GC13_PROJECTION_DIGEST","GC14_GATE_MATRIX_DIGEST","GC15_RELEASE_SCOPE_SHAPE","GC16_FORBIDDEN_SCOPE_RELEASE","GC17_CERTIFICATE_EXPIRY","GC18_ISSUER_IDENTITY","GC19_CERTIFICATE_PAYLOAD_ENCODING","GC20_CERTIFICATE_PAYLOAD_SHAPE","GC21_CERTIFICATE_PAYLOAD_BINDING","GC22_ISSUER_SIGNATURE_ENCODING","GC23_ISSUER_SIGNATURE_INVALID","GC24_READBACK_SHAPE","GC25_PUBLICATION_WINDOW","GC26_READER_SEPARATION","GC27_READBACK_SCOPE","GC28_READBACK_PAYLOAD_BINDING","GC29_READER_SIGNATURE_ENCODING","GC30_READER_SIGNATURE_INVALID"],"resultBoundary":"LOCAL_CLOSURE_CERTIFICATE_VALID_EXTERNAL_OBSERVATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalIssuesCertificate":false,"portalPublishesDirectory":false,"portalReleasesReadOnlyScopes":false,"portalReleasesExecution":false,"g05Unblocked":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"threeHeadConsistencyRecoveryReadback":{"id":"D05-C02-G04-THREE-HEAD-CONSISTENCY-RECOVERY-READBACK-v1","schemaVersion":"developer.reits.tech/g04-three-head-consistency-recovery-readback/v1","payloadSchemaVersion":"developer.reits.tech/g04-three-head-reconciliation/v1","state":"TOOLS_READY_RECONCILIATIONS_0_OF_1_RECOVERY_READBACKS_0_OF_1_DRIFT_RECOVERIES_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"reconciliationsObserved":0,"reconciliationsRequired":1,"recoveryReadbacksObserved":0,"recoveryReadbacksRequired":1,"driftRecoveriesObserved":0,"driftRecoveriesRequired":1,"headCount":3,"maximumObservationWindowMinutes":15,"quorum":"RECONCILER_PLUS_INDEPENDENT_RECOVERY_READER","tools":[{"id":"T01","label":"三头一致性空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-three-head-consistency-recovery-readback.template.json"},{"id":"T02","label":"浏览器本地三头验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-three-head-consistency-recovery-readback.offline.html"},{"id":"T03","label":"Node.js 三头与恢复读回验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-three-head-consistency-recovery-readback.mjs"}],"heads":[{"sequence":1,"id":"FORMAL_GATE_LEDGER","label":"正式 Gate 账本头","namespace":"formal-gate-ledger","state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"PROGRAM_TRUTH","label":"程序真值头","namespace":"program-truth-head","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"PUBLIC_PORTAL","label":"公开 Portal 投影头","namespace":"public-portal-head","state":"EXTERNAL_REQUIRED"}],"compareFields":["formalCommitReceiptRef","commitId","commitSequence","gateState","checkpointRef","projectionDigest"],"recoveryStages":[{"sequence":1,"id":"DETECT","label":"检测三头漂移","state":"READY"},{"sequence":2,"id":"FREEZE","label":"冻结公开推进","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"COMMON_SEQUENCE","label":"定位共同序号","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"REPLAY","label":"按正式账本回放","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"READBACK","label":"重新读取三头","state":"EXTERNAL_REQUIRED"},{"sequence":6,"id":"DUAL_SIGNATURE","label":"对账与恢复双签","state":"EXTERNAL_REQUIRED"}],"denialCodes":["TH01_PACKET_SHAPE","TH02_SCHEMA_VERSION","TH03_PLAN_ID","TH04_EVALUATED_AT","TH05_B12_RECEIPT","TH06_ENVELOPE_SHAPE","TH07_RECONCILIATION_SEQUENCE","TH08_GATE_COMMIT_STATE","TH09_B12_BINDING","TH10_CHECKPOINT_REFERENCE","TH11_HEAD_SET_SHAPE","TH12_HEAD_SOURCE_ORDER","TH13_HEAD_SOURCE_REFERENCE","TH14_HEAD_BINDING","TH15_HEAD_DIGEST","TH16_HEAD_OBSERVATION_WINDOW","TH17_RECONCILER_IDENTITY","TH18_PAYLOAD_ENCODING","TH19_PAYLOAD_SHAPE","TH20_PAYLOAD_BINDING","TH21_RECONCILER_SIGNATURE_ENCODING","TH22_RECONCILER_SIGNATURE_INVALID","TH23_RECOVERY_MODE_SHAPE","TH24_RECOVERY_READER_SEPARATION","TH25_RECOVERY_KEY_SEPARATION","TH26_RECOVERY_WINDOW","TH27_RECOVERY_BINDING","TH28_RECOVERY_SIGNATURE"],"resultBoundary":"LOCAL_THREE_HEAD_CONSISTENT_EXTERNAL_OBSERVATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalFreezesProjection":false,"portalReplaysLedger":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"formalCommitFinalityReadback":{"id":"D05-C02-G04-FORMAL-COMMIT-FINALITY-READBACK-v1","schemaVersion":"developer.reits.tech/g04-formal-commit-finality-readback/v1","payloadSchemaVersion":"developer.reits.tech/g04-formal-gate-commit/v1","state":"TOOLS_READY_COMMITS_0_OF_1_FINALITY_CHECKPOINTS_0_OF_1_COMMIT_SIGNATURES_0_OF_2_INDEPENDENT_READBACKS_0_OF_1_STATE_TRANSITIONS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"formalCommitsObserved":0,"formalCommitsRequired":1,"finalityCheckpointsObserved":0,"finalityCheckpointsRequired":1,"commitSignaturesObserved":0,"commitSignaturesRequired":2,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"stateTransitionsObserved":0,"stateTransitionsRequired":1,"roleReceiptsRequired":24,"controlReceiptsRequired":8,"maximumFinalityWindowMinutes":30,"maximumReadbackWindowMinutes":15,"quorum":"COMMITTER_PLUS_NOTARY_PLUS_INDEPENDENT_READER","tools":[{"id":"T01","label":"正式提交终局空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-formal-commit-finality-readback.template.json"},{"id":"T02","label":"浏览器本地终局与状态迁移验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-formal-commit-finality-readback.offline.html"},{"id":"T03","label":"Node.js 正式提交终局验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-formal-commit-finality-readback.mjs"}],"stages":[{"sequence":1,"id":"B11_APPROVE_RECEIPT","label":"B11 APPROVE 回执","state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"CARDINALITY_INHERITANCE","label":"24 角色 + 8 控制","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"STATE_TRANSITION","label":"HELD → SATISFIED","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"COMMITTER_SIGNATURE","label":"Gate Committer 签署","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"FORMAL_LEDGER_COMMIT","label":"正式 Gate 账本写入","state":"EXTERNAL_REQUIRED"},{"sequence":6,"id":"NOTARY_FINALITY","label":"Ledger Notary 终局","state":"EXTERNAL_REQUIRED"},{"sequence":7,"id":"INDEPENDENT_READBACK","label":"第三方只读复取","state":"EXTERNAL_REQUIRED"},{"sequence":8,"id":"LOCAL_VERIFICATION","label":"B12 本地失败关闭验真","state":"READY"},{"sequence":9,"id":"G04_REEVALUATION","label":"外部事实接入后重评","state":"HELD"}],"denialCodes":["FC01_PACKET_SHAPE","FC02_SCHEMA_VERSION","FC03_PLAN_ID","FC04_EVALUATED_AT","FC05_ADJUDICATION_REFERENCE","FC06_ENVELOPE_SHAPE","FC07_COMMIT_ID_SEQUENCE","FC08_STATE_TRANSITION","FC09_ADJUDICATION_BINDING","FC10_CARDINALITY","FC11_LEDGER_REFERENCE","FC12_CHECKPOINT_REFERENCE","FC13_ACTOR_SEPARATION","FC14_KEY_SEPARATION","FC15_FINALITY_WINDOW","FC16_EVALUATION_WINDOW","FC17_PAYLOAD_ENCODING","FC18_PAYLOAD_SHAPE","FC19_PAYLOAD_BINDING","FC20_COMMIT_SIGNATURE_ENCODING","FC21_COMMIT_SIGNATURE_INVALID","FC22_READBACK_SHAPE","FC23_READER_SEPARATION","FC24_READER_KEY_SEPARATION","FC25_READBACK_WINDOW","FC26_READBACK_BINDING","FC27_READER_SIGNATURE_ENCODING","FC28_READER_SIGNATURE_INVALID"],"resultBoundary":"LOCAL_FINALITY_VERIFIED_EXTERNAL_OBSERVATION_REQUIRED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalWritesFormalLedger":false,"portalNotarizesCheckpoint":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"gateAuthorityAdjudicationReadback":{"id":"D05-C02-G04-GATE-AUTHORITY-ADJUDICATION-READBACK-v1","schemaVersion":"developer.reits.tech/g04-gate-authority-adjudication-readback/v1","payloadSchemaVersion":"developer.reits.tech/g04-gate-authority-adjudication/v1","state":"TOOLS_READY_ADJUDICATIONS_0_OF_1_AUTHORITY_SIGNATURES_0_OF_2_INDEPENDENT_READBACKS_0_OF_1_FORMAL_COMMITS_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"adjudicationsObserved":0,"adjudicationsRequired":1,"authoritySignaturesObserved":0,"authoritySignaturesRequired":2,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"formalCommitsObserved":0,"formalCommitsRequired":1,"roleReceiptsRequired":24,"controlReceiptsRequired":8,"maximumAdjudicationWindowMinutes":15,"quorum":"2_OF_2_PLUS_1_INDEPENDENT_READBACK","tools":[{"id":"T01","label":"Gate Authority 裁定空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-gate-authority-adjudication-readback.template.json"},{"id":"T02","label":"浏览器本地双签与独立读回验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-gate-authority-adjudication-readback.offline.html"},{"id":"T03","label":"Node.js Gate Authority 裁定验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-gate-authority-adjudication-readback.mjs"}],"stages":[{"sequence":1,"id":"B10_INCLUSION","label":"B10 包含证明","state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"ROLE_CONTROL_BINDING","label":"24 角色 + 8 控制","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"AUTHORITY_A","label":"Authority A 双控签署","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"AUTHORITY_B","label":"Authority B 双控签署","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"INDEPENDENT_READBACK","label":"第三方同文读回","state":"EXTERNAL_REQUIRED"},{"sequence":6,"id":"LOCAL_VERIFICATION","label":"B11 本地失败关闭验真","state":"READY"},{"sequence":7,"id":"FORMAL_COMMIT","label":"外部正式提交","state":"EXTERNAL_REQUIRED"},{"sequence":8,"id":"G04","label":"G04 Gate","state":"HELD"}],"denialCodes":["GA01_PACKET_SHAPE","GA02_SCHEMA_VERSION","GA03_PLAN_ID","GA04_EVALUATED_AT","GA05_INCLUSION_REFERENCE","GA06_ENVELOPE_SHAPE","GA07_DECISION","GA08_EVIDENCE_BINDING","GA09_CARDINALITY","GA10_AUTHORITY_SEPARATION","GA11_AUTHORITY_KEY","GA12_WINDOW","GA13_PAYLOAD_ENCODING","GA14_PAYLOAD_SHAPE","GA15_PAYLOAD_BINDING","GA16_AUTHORITY_SIGNATURE_ENCODING","GA17_AUTHORITY_SIGNATURE_INVALID","GA18_READBACK_SHAPE","GA19_READER_SEPARATION","GA20_READER_KEY_SEPARATION","GA21_READBACK_WINDOW","GA22_READBACK_BINDING","GA23_READER_SIGNATURE_ENCODING","GA24_READER_SIGNATURE_INVALID"],"approveBoundary":"LOCAL_VALID_FORMAL_COMMIT_REQUIRED_G04_REMAINS_HELD","denyBoundary":"DENIAL_VERIFIED_G04_REMAINS_HELD","portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalPerformsAdjudication":false,"portalCommitsFormalGate":false,"g04Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"roleDispatch":{"id":"D05-C02-G04-ROLE-BINDING-DISPATCH-v1","schemaVersion":"developer.reits.tech/g04-role-binding-lane-request/v1","state":"TOOLS_READY_EXTERNAL_REQUESTS_0_OF_4_RECEIPTS_0_OF_4","ownersOrdered":["AUTH","SECURITY","SRE_DBA","QA_WITNESS"],"rolesOrdered":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"packetsReady":4,"packetsTotal":4,"toolsReady":6,"toolsTotal":6,"roleSlotsTotal":24,"separationAssertionsTotal":60,"authorizationRequestsAssembled":0,"authorizationRequestsTotal":4,"g04ReceiptsObserved":0,"g04ReceiptsRequired":4,"requestReferencePattern":"^urn:reits:request:g04:v1:[a-f0-9]{64}$","receiptReferencePattern":"^urn:reits:receipt:g04:v1:[a-f0-9]{64}$","tools":[{"id":"T01","label":"AUTH 分席空白任务包","format":"JSON","href":"/handoff/auth-s08-r02-c02/role-binding-lane-auth.template.json"},{"id":"T02","label":"SECURITY 分席空白任务包","format":"JSON","href":"/handoff/auth-s08-r02-c02/role-binding-lane-security.template.json"},{"id":"T03","label":"SRE_DBA 分席空白任务包","format":"JSON","href":"/handoff/auth-s08-r02-c02/role-binding-lane-sre-dba.template.json"},{"id":"T04","label":"QA_WITNESS 分席空白任务包","format":"JSON","href":"/handoff/auth-s08-r02-c02/role-binding-lane-qa-witness.template.json"},{"id":"T05","label":"浏览器本地四席汇总器","format":"HTML","href":"/handoff/auth-s08-r02-c02/role-binding-lane-assembler.offline.html"},{"id":"T06","label":"Node.js 四席汇总器","format":"MJS","href":"/handoff/auth-s08-r02-c02/role-binding-lane-assembler.mjs"}],"protocol":[{"id":"P01","label":"协调人分别派发四席空白任务包","actor":"组织负责人","state":"READY"},{"id":"P02","label":"四席在各自批准控制域填写六个匿名角色引用","actor":"四席负责人","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"各席独立见证复核十五对职责分离","actor":"四位独立见证","state":"EXTERNAL_REQUIRED"},{"id":"P04","label":"协调人离线汇总四席包并执行全局防碰撞","actor":"组织负责人 + 独立见证","state":"EXTERNAL_REQUIRED"},{"id":"P05","label":"保存四个授权申请摘要并提交组织授权","actor":"组织负责人","state":"EXTERNAL_REQUIRED"},{"id":"P06","label":"组织外部系统签发四个 G04 正式回执","actor":"组织授权系统","state":"EXTERNAL_REQUIRED"}],"denialCodes":[{"code":"RD01_PACKET_SHAPE","meaning":"分席任务包字段、顺序或 JSON 结构不合规"},{"code":"RD02_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"RD03_PLAN_ID","meaning":"分席计划标识不匹配"},{"code":"RD04_OWNER_ID","meaning":"席位不受支持、重复或与位置不一致"},{"code":"RD05_ROLE_ORDER","meaning":"六角色缺失、顺序漂移或出现额外字段"},{"code":"RD06_REF_MISSING","meaning":"匿名主体引用仍为空"},{"code":"RD07_REF_FORMAT","meaning":"匿名主体引用格式不合规"},{"code":"RD08_INTRA_LANE_COLLISION","meaning":"同席两个角色复用了同一引用"},{"code":"RD09_LANE_SET","meaning":"四席任务包不完整、重复或数量错误"},{"code":"RD10_CROSS_LANE_COLLISION","meaning":"不同席位复用了同一引用"}],"lanes":[{"sequence":1,"ownerId":"AUTH","owner":"Auth Owner","state":"PACKET_READY_EXTERNAL_FILL_REQUIRED","templateHref":"/handoff/auth-s08-r02-c02/role-binding-lane-auth.template.json","roleSlots":6,"separationAssertions":15,"authorizationRequestRef":null,"g04ReceiptRef":null,"externalRunCompleted":false},{"sequence":2,"ownerId":"SECURITY","owner":"Security Owner","state":"PACKET_READY_EXTERNAL_FILL_REQUIRED","templateHref":"/handoff/auth-s08-r02-c02/role-binding-lane-security.template.json","roleSlots":6,"separationAssertions":15,"authorizationRequestRef":null,"g04ReceiptRef":null,"externalRunCompleted":false},{"sequence":3,"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"PACKET_READY_EXTERNAL_FILL_REQUIRED","templateHref":"/handoff/auth-s08-r02-c02/role-binding-lane-sre-dba.template.json","roleSlots":6,"separationAssertions":15,"authorizationRequestRef":null,"g04ReceiptRef":null,"externalRunCompleted":false},{"sequence":4,"ownerId":"QA_WITNESS","owner":"QA Witness","state":"PACKET_READY_EXTERNAL_FILL_REQUIRED","templateHref":"/handoff/auth-s08-r02-c02/role-binding-lane-qa-witness.template.json","roleSlots":6,"separationAssertions":15,"authorizationRequestRef":null,"g04ReceiptRef":null,"externalRunCompleted":false}],"resultBoundary":"REQUEST_SET_PASS_AUTHORIZATION_REQUIRED","requestIsReceipt":false,"requestUnblocksG05":false,"acceptsUpload":false,"persistsInput":false,"externalTruthChanged":false,"formalProgressChanged":false},"receiptCustody":{"id":"D05-C02-G04-RECEIPT-CUSTODY-PREFLIGHT-v1","schemaVersion":"developer.reits.tech/g04-receipt-custody-preflight/v1","state":"TOOLS_READY_EXTERNAL_RECEIPTS_0_OF_4_READBACKS_0_OF_4","ownersOrdered":["AUTH","SECURITY","SRE_DBA","QA_WITNESS"],"lanesTotal":4,"referenceSlotsPerLane":4,"referenceSlotsTotal":16,"toolsReady":3,"toolsTotal":3,"requestRefsObserved":0,"requestRefsRequired":4,"receiptCandidatesObserved":0,"receiptCandidatesRequired":4,"independentReadbackRefsObserved":0,"independentReadbackRefsRequired":4,"cryptographicVerificationsObserved":0,"cryptographicVerificationsRequired":4,"custodyBundlesAssembled":0,"requestReferencePattern":"^urn:reits:request:g04:v1:[a-f0-9]{64}$","receiptReferencePattern":"^urn:reits:receipt:g04:v1:[a-f0-9]{64}$","issuerReferencePattern":"^urn:reits:issuer:g04:v1:[a-f0-9]{32,64}$","independentReadbackReferencePattern":"^urn:reits:verification:g04:v1:[a-f0-9]{64}$","custodyReferencePattern":"^urn:reits:custody:g04:v1:[a-f0-9]{64}$","tools":[{"id":"T01","label":"四席申请—回执保全空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-receipt-custody.template.json"},{"id":"T02","label":"浏览器本地回执保全预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-receipt-custody-preflight.offline.html"},{"id":"T03","label":"Node.js 回执保全预检器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-receipt-custody-preflight.mjs"}],"protocol":[{"id":"P01","label":"在批准控制域运行 B03 并形成四个申请摘要","actor":"组织协调人","state":"EXTERNAL_REQUIRED"},{"id":"P02","label":"把四个申请摘要分别提交组织授权系统","actor":"四席负责人","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"组织授权系统独立签发四席正式回执","actor":"组织授权系统","state":"EXTERNAL_REQUIRED"},{"id":"P04","label":"独立控制域回读每席回执并形成验证引用","actor":"四位独立见证","state":"EXTERNAL_REQUIRED"},{"id":"P05","label":"只使用公开引用组装四席保全包","actor":"组织协调人","state":"EXTERNAL_REQUIRED"},{"id":"P06","label":"运行离线预检并形成不可授权的保全摘要","actor":"组织协调人 + QA","state":"READY"},{"id":"P07","label":"在 Portal 外完成密码学验签、撤销与新鲜度裁决","actor":"独立验证系统","state":"EXTERNAL_REQUIRED"}],"denialCodes":[{"code":"RC01_PACKET_SHAPE","meaning":"顶层字段、顺序或 JSON 结构不合规"},{"code":"RC02_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"RC03_PLAN_ID","meaning":"保全计划标识不匹配"},{"code":"RC04_LANE_SET","meaning":"四席缺失、超额、重复、乱序或字段漂移"},{"code":"RC05_REQUEST_REF","meaning":"B03 request:g04 申请引用缺失或格式错误"},{"code":"RC06_RECEIPT_REF","meaning":"组织 receipt:g04 回执引用缺失或格式错误"},{"code":"RC07_NAMESPACE_CONFUSION","meaning":"授权申请被改名冒充正式回执"},{"code":"RC08_ISSUER_REF","meaning":"组织签发方公开引用缺失或格式错误"},{"code":"RC09_READBACK_REF","meaning":"独立 verification:g04 回读引用缺失或格式错误"},{"code":"RC10_REFERENCE_COLLISION","meaning":"申请、回执或回读引用发生跨席复用"},{"code":"RC11_PRIVATE_FIELD","meaning":"出现真实身份、私钥、签名值、凭据、通道、窗口或证据正文"},{"code":"RC12_DERIVED_RECEIPT_DENIED","meaning":"receipt 摘要只是由 request 摘要直接改名派生"}],"lanes":[{"sequence":1,"ownerId":"AUTH","owner":"Auth Owner","state":"INPUT_TEMPLATE_READY_EXTERNAL_RECEIPT_REQUIRED","requestRef":null,"receiptRef":null,"issuerRef":null,"independentReadbackRef":null,"custodyState":"NOT_ASSEMBLED","cryptographicVerificationState":"NOT_PERFORMED"},{"sequence":2,"ownerId":"SECURITY","owner":"Security Owner","state":"INPUT_TEMPLATE_READY_EXTERNAL_RECEIPT_REQUIRED","requestRef":null,"receiptRef":null,"issuerRef":null,"independentReadbackRef":null,"custodyState":"NOT_ASSEMBLED","cryptographicVerificationState":"NOT_PERFORMED"},{"sequence":3,"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"INPUT_TEMPLATE_READY_EXTERNAL_RECEIPT_REQUIRED","requestRef":null,"receiptRef":null,"issuerRef":null,"independentReadbackRef":null,"custodyState":"NOT_ASSEMBLED","cryptographicVerificationState":"NOT_PERFORMED"},{"sequence":4,"ownerId":"QA_WITNESS","owner":"QA Witness","state":"INPUT_TEMPLATE_READY_EXTERNAL_RECEIPT_REQUIRED","requestRef":null,"receiptRef":null,"issuerRef":null,"independentReadbackRef":null,"custodyState":"NOT_ASSEMBLED","cryptographicVerificationState":"NOT_PERFORMED"}],"resultBoundary":"RECEIPT_SET_STRUCTURE_PASS_INDEPENDENT_CRYPTOGRAPHIC_READBACK_REQUIRED","structurallyValidReceiptIsAuthorizedReceipt":false,"cryptographicVerificationPerformedByTool":false,"requestOrReceiptUploadedToPortal":false,"g04Unblocked":false,"g05Unblocked":false,"acceptsUpload":false,"persistsInput":false,"externalTruthChanged":false,"formalProgressChanged":false},"independentVerification":{"id":"D05-C02-G04-INDEPENDENT-CRYPTOGRAPHIC-READBACK-v1","schemaVersion":"developer.reits.tech/g04-independent-cryptographic-readback/v1","state":"TOOLS_READY_LOCAL_RUNS_0_OF_4_PRODUCTION_VERIFIED_0_OF_4","algorithm":"ECDSA_P256_SHA256_P1363","publicKeyFormat":"SPKI_DER_BASE64","signatureFormat":"P1363_RAW_64_BYTES_BASE64","payloadEncoding":"OPAQUE_BYTES_BASE64","payloadMaximumBytes":65536,"ownersOrdered":["AUTH","SECURITY","SRE_DBA","QA_WITNESS"],"lanesTotal":4,"toolsReady":3,"toolsTotal":3,"localRunsObserved":0,"localRunsRequired":4,"verificationCandidatesObserved":0,"verificationCandidatesRequired":4,"productionVerificationsObserved":0,"productionVerificationsRequired":4,"trustRootAdmissionsObserved":0,"trustRootAdmissionsRequired":4,"revocationChecksObserved":0,"revocationChecksRequired":4,"verificationReferencePattern":"^urn:reits:verification:g04:v1:[a-f0-9]{64}$","verificationSetReferencePattern":"^urn:reits:verification-set:g04:v1:[a-f0-9]{64}$","tools":[{"id":"T01","label":"四席独立验签空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-independent-cryptographic-readback.template.json"},{"id":"T02","label":"浏览器本地 P-256 验签器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-independent-cryptographic-readback.offline.html"},{"id":"T03","label":"Node.js P-256 验签器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-independent-cryptographic-readback.mjs"}],"protocol":[{"id":"P01","label":"从 B03 取得本席 request:g04 申请摘要","actor":"四席负责人","state":"EXTERNAL_REQUIRED"},{"id":"P02","label":"从组织授权系统取得 receipt、签名原文、P-256 公钥和 P1363 签名","actor":"组织授权系统","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"在批准的隔离控制域组装四席本地验签包","actor":"独立见证","state":"EXTERNAL_REQUIRED"},{"id":"P04","label":"分别执行四次 P-256 / SHA-256 验签并拒绝跨席材料复用","actor":"独立见证 + QA","state":"READY"},{"id":"P05","label":"只导出四个 verification:g04 引用与一个验证集合摘要","actor":"离线验签工具","state":"READY"},{"id":"P06","label":"把验证引用送入 B04 申请—回执保全包","actor":"组织协调人","state":"EXTERNAL_REQUIRED"},{"id":"P07","label":"在 Portal 外完成信任根准入、撤销状态与组织 Authority 裁决","actor":"组织安全控制域","state":"EXTERNAL_REQUIRED"}],"denialCodes":[{"code":"CV01_PACKET_SHAPE","meaning":"顶层字段、字段顺序或 JSON 结构漂移"},{"code":"CV02_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"CV03_PLAN_ID","meaning":"计划标识不匹配"},{"code":"CV04_LANE_SET","meaning":"四席缺失、重复、乱序或字段漂移"},{"code":"CV05_REQUEST_REF","meaning":"B03 request:g04 引用缺失或格式错误"},{"code":"CV06_RECEIPT_REF","meaning":"receipt:g04 引用缺失、格式错误或由 request 冒充"},{"code":"CV07_ISSUER_REF","meaning":"匿名化 issuer:g04 引用缺失或格式错误"},{"code":"CV08_PAYLOAD_ENCODING_OR_BOUNDS","meaning":"签名原文 Base64 非规范、为空或超过 64 KiB"},{"code":"CV09_PUBLIC_KEY_FORMAT_OR_CURVE","meaning":"公钥不是有界 SPKI DER 或不是 P-256"},{"code":"CV10_SIGNATURE_ENCODING","meaning":"签名不是规范 64 字节 P1363 r||s"},{"code":"CV11_REFERENCE_OR_MATERIAL_COLLISION","meaning":"回执、公钥或签名发生跨席复用"},{"code":"CV12_SIGNATURE_INVALID","meaning":"ECDSA P-256 / SHA-256 验签失败"},{"code":"CV13_DERIVED_RECEIPT_DENIED","meaning":"receipt 摘要只是替换 request 命名空间"},{"code":"CV14_PRIVATE_OR_UNEXPECTED_FIELD","meaning":"出现私钥、真实身份、凭据、通道或额外字段"}],"lanes":[{"sequence":1,"ownerId":"AUTH","owner":"Auth Owner","state":"OFFLINE_INPUT_REQUIRED","requestRef":null,"receiptRef":null,"issuerRef":null,"payloadDigestRef":null,"publicKeyDigestRef":null,"signatureDigestRef":null,"verificationRef":null,"cryptographicState":"NOT_PERFORMED","trustAdmissionState":"NOT_ADMITTED","revocationState":"NOT_CHECKED"},{"sequence":2,"ownerId":"SECURITY","owner":"Security Owner","state":"OFFLINE_INPUT_REQUIRED","requestRef":null,"receiptRef":null,"issuerRef":null,"payloadDigestRef":null,"publicKeyDigestRef":null,"signatureDigestRef":null,"verificationRef":null,"cryptographicState":"NOT_PERFORMED","trustAdmissionState":"NOT_ADMITTED","revocationState":"NOT_CHECKED"},{"sequence":3,"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"OFFLINE_INPUT_REQUIRED","requestRef":null,"receiptRef":null,"issuerRef":null,"payloadDigestRef":null,"publicKeyDigestRef":null,"signatureDigestRef":null,"verificationRef":null,"cryptographicState":"NOT_PERFORMED","trustAdmissionState":"NOT_ADMITTED","revocationState":"NOT_CHECKED"},{"sequence":4,"ownerId":"QA_WITNESS","owner":"QA Witness","state":"OFFLINE_INPUT_REQUIRED","requestRef":null,"receiptRef":null,"issuerRef":null,"payloadDigestRef":null,"publicKeyDigestRef":null,"signatureDigestRef":null,"verificationRef":null,"cryptographicState":"NOT_PERFORMED","trustAdmissionState":"NOT_ADMITTED","revocationState":"NOT_CHECKED"}],"resultBoundary":"SIGNATURE_SET_CRYPTOGRAPHICALLY_VERIFIED_EXTERNAL_TRUST_ADMISSION_REQUIRED","signaturePassingIsOrganizationAuthorization":false,"trustRootAdmissionPerformedByTool":false,"revocationCheckPerformedByTool":false,"rawPayloadReturnedByTool":false,"rawPublicKeyReturnedByTool":false,"rawSignatureReturnedByTool":false,"portalAcceptsFilledPackage":false,"g04Unblocked":false,"g05Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"trustRevocationQualification":{"id":"D05-C02-G04-TRUST-REVOCATION-QUALIFICATION-v1","schemaVersion":"developer.reits.tech/g04-trust-revocation-qualification/v1","state":"TOOLS_READY_EXTERNAL_RUNS_0_OF_4_PRODUCTION_QUALIFIED_0_OF_4_ANCHORS_0_OF_2","algorithm":"ECDSA_P256_SHA256_P1363","ownersOrdered":["AUTH","SECURITY","SRE_DBA","QA_WITNESS"],"lanesTotal":4,"toolsReady":3,"toolsTotal":3,"externalRunsObserved":0,"externalRunsRequired":4,"qualificationCandidatesObserved":0,"qualificationCandidatesRequired":4,"productionQualificationsObserved":0,"productionQualificationsRequired":4,"signedTrustSnapshotsObserved":0,"signedTrustSnapshotsRequired":1,"signedRevocationSnapshotsObserved":0,"signedRevocationSnapshotsRequired":1,"externalTrustAnchorAdmissionsObserved":0,"externalTrustAnchorAdmissionsRequired":2,"trustSnapshotMaximumLifetimeHours":24,"revocationSnapshotMaximumLifetimeMinutes":60,"revocationSnapshotMaximumAgeMinutes":15,"trustSnapshotReferencePattern":"^urn:reits:trust-snapshot:g04:v1:[a-f0-9]{64}$","revocationSnapshotReferencePattern":"^urn:reits:revocation-snapshot:g04:v1:[a-f0-9]{64}$","qualificationReferencePattern":"^urn:reits:qualification:g04:v1:[a-f0-9]{64}$","qualificationSetReferencePattern":"^urn:reits:qualification-set:g04:v1:[a-f0-9]{64}$","tools":[{"id":"T01","label":"四席信任与撤销资格化空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-trust-revocation-qualification.template.json"},{"id":"T02","label":"浏览器本地双快照资格化器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-trust-revocation-qualification.offline.html"},{"id":"T03","label":"Node.js 双快照资格化器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-trust-revocation-qualification.mjs"}],"protocol":[{"id":"P01","label":"取得 B05 形成的四席 verification:g04 引用","actor":"四席独立见证","state":"EXTERNAL_REQUIRED"},{"id":"P02","label":"从组织控制域导出签名信任根登记快照","actor":"Security Owner","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"使用独立 P-256 键验证信任根快照和四席 ADMITTED 成员关系","actor":"独立见证","state":"READY"},{"id":"P04","label":"从独立撤销源导出签名撤销状态快照","actor":"SRE / DBA Owner","state":"EXTERNAL_REQUIRED"},{"id":"P05","label":"验证撤销快照签名、四席 GOOD 状态和十五分钟新鲜度","actor":"QA Witness","state":"READY"},{"id":"P06","label":"只导出四席 qualification:g04 与资格化集合摘要","actor":"离线资格化工具","state":"READY"},{"id":"P07","label":"在 Portal 外准入两个签名锚并绑定组织 Authority","actor":"组织安全控制域","state":"EXTERNAL_REQUIRED"}],"denialCodes":[{"code":"TQ01_PACKET_SHAPE","meaning":"顶层字段、顺序或结构漂移"},{"code":"TQ02_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"TQ03_PLAN_ID","meaning":"计划标识不匹配"},{"code":"TQ04_EVALUATED_AT","meaning":"评估时间不是规范 UTC"},{"code":"TQ05_LANE_SET","meaning":"四席缺失、重复、乱序或字段漂移"},{"code":"TQ06_REFERENCE_FORMAT","meaning":"B05、回执、签发方或公钥摘要引用不合规"},{"code":"TQ07_SNAPSHOT_ENVELOPE","meaning":"快照封装字段或引用格式不合规"},{"code":"TQ08_BASE64_OR_BOUNDS","meaning":"快照原文 Base64 非规范、为空或越界"},{"code":"TQ09_SIGNER_KEY","meaning":"快照签名键不是有界 P-256 SPKI"},{"code":"TQ10_SIGNATURE_ENCODING","meaning":"快照签名不是 64 字节 P1363"},{"code":"TQ11_SIGNATURE_INVALID","meaning":"快照 P-256/SHA-256 签名无效"},{"code":"TQ12_PAYLOAD_SHAPE","meaning":"快照原文 Schema、引用或四席条目漂移"},{"code":"TQ13_TEMPORAL_WINDOW","meaning":"快照过期、来自未来、寿命或新鲜度越界"},{"code":"TQ14_TRUST_MEMBERSHIP","meaning":"四席未在信任根快照中精确 ADMITTED"},{"code":"TQ15_REVOCATION_MEMBERSHIP","meaning":"四席未在撤销快照中精确 GOOD"},{"code":"TQ16_REFERENCE_COLLISION","meaning":"跨席引用发生复用"},{"code":"TQ17_SIGNER_SEPARATION","meaning":"信任根与撤销快照复用同一签名键"},{"code":"TQ18_ANCHOR_ADMISSION_REQUIRED","meaning":"数学验签通过仍缺外部信任锚准入"},{"code":"TQ19_PRIVATE_OR_UNEXPECTED_FIELD","meaning":"出现私钥、身份、凭据、通道或额外字段"}],"lanes":[{"sequence":1,"ownerId":"AUTH","owner":"Auth Owner","state":"B05_VERIFICATION_AND_SIGNED_SNAPSHOTS_REQUIRED","verificationRef":null,"receiptRef":null,"issuerRef":null,"publicKeyDigestRef":null,"trustMembershipState":"NOT_EVALUATED","revocationMembershipState":"NOT_EVALUATED","qualificationRef":null},{"sequence":2,"ownerId":"SECURITY","owner":"Security Owner","state":"B05_VERIFICATION_AND_SIGNED_SNAPSHOTS_REQUIRED","verificationRef":null,"receiptRef":null,"issuerRef":null,"publicKeyDigestRef":null,"trustMembershipState":"NOT_EVALUATED","revocationMembershipState":"NOT_EVALUATED","qualificationRef":null},{"sequence":3,"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"B05_VERIFICATION_AND_SIGNED_SNAPSHOTS_REQUIRED","verificationRef":null,"receiptRef":null,"issuerRef":null,"publicKeyDigestRef":null,"trustMembershipState":"NOT_EVALUATED","revocationMembershipState":"NOT_EVALUATED","qualificationRef":null},{"sequence":4,"ownerId":"QA_WITNESS","owner":"QA Witness","state":"B05_VERIFICATION_AND_SIGNED_SNAPSHOTS_REQUIRED","verificationRef":null,"receiptRef":null,"issuerRef":null,"publicKeyDigestRef":null,"trustMembershipState":"NOT_EVALUATED","revocationMembershipState":"NOT_EVALUATED","qualificationRef":null}],"resultBoundary":"SIGNED_TRUST_AND_REVOCATION_SNAPSHOT_QUALIFIED_EXTERNAL_ANCHOR_ADMISSION_REQUIRED","snapshotSignaturePassingIsAnchorAdmission":false,"qualificationPassingIsOrganizationAuthorization":false,"rawSnapshotPayloadReturnedByTool":false,"rawSignerPublicKeyReturnedByTool":false,"rawSignatureReturnedByTool":false,"portalAcceptsFilledPackage":false,"g04Unblocked":false,"g05Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"authorityAdmissionHandoff":{"id":"D05-C02-G04-AUTHORITY-ADMISSION-HANDOFF-v1","schemaVersion":"developer.reits.tech/g04-authority-admission-handoff/v1","state":"TOOLS_READY_EXTERNAL_LINEAGE_0_OF_4_ANCHORS_0_OF_2_AUTHORITY_DECISIONS_0_OF_1","ownersOrdered":["AUTH","SECURITY","SRE_DBA","QA_WITNESS"],"lanesTotal":4,"toolsReady":3,"toolsTotal":3,"externalLineageLanesObserved":0,"externalLineageLanesRequired":4,"externalAnchorAdmissionsObserved":0,"externalAnchorAdmissionsRequired":2,"handoffCandidatesObserved":0,"handoffCandidatesRequired":1,"authorityDecisionsObserved":0,"authorityDecisionsRequired":1,"maximumDecisionWindowHours":24,"cohortReferencePattern":"^urn:reits:cohort:g04:v1:[a-f0-9]{64}$","anchorAdmissionReferencePattern":"^urn:reits:anchor-admission:g04:v1:[a-f0-9]{64}$","handoffReferencePattern":"^urn:reits:authority-admission-handoff:g04:v1:[a-f0-9]{64}$","tools":[{"id":"T01","label":"四席 Authority 候选交接空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-authority-admission-handoff.template.json"},{"id":"T02","label":"浏览器本地候选交接组装器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-authority-admission-handoff.offline.html"},{"id":"T03","label":"Node.js 候选交接组装器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-authority-admission-handoff.mjs"}],"protocol":[{"id":"P01","label":"分别取得四席 B03 request 与组织 receipt 引用","actor":"四席负责人","state":"EXTERNAL_REQUIRED"},{"id":"P02","label":"绑定 B04 custody 与 B05 verification 引用","actor":"独立见证","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"绑定 B06 qualification 与 qualification-set","actor":"QA Witness","state":"EXTERNAL_REQUIRED"},{"id":"P04","label":"登记两个相互独立的外部签名锚准入引用","actor":"组织安全控制域","state":"EXTERNAL_REQUIRED"},{"id":"P05","label":"指定职责分离的绑定裁决方和独立见证","actor":"组织负责人","state":"EXTERNAL_REQUIRED"},{"id":"P06","label":"本地组装不可授权的候选交接摘要","actor":"协调人 + QA","state":"READY"},{"id":"P07","label":"外部 Authority 回读原始材料并独立裁决","actor":"绑定裁决方","state":"EXTERNAL_REQUIRED"}],"denialCodes":[{"code":"AH01_PACKET_SHAPE","meaning":"顶层字段、顺序或结构漂移"},{"code":"AH02_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"AH03_PLAN_ID","meaning":"计划标识不匹配"},{"code":"AH04_EVALUATED_AT","meaning":"评估时间不是规范 UTC"},{"code":"AH05_ROOT_REFERENCE","meaning":"cohort、集合或双快照根引用不合规"},{"code":"AH06_ANCHOR_ADMISSION_SET","meaning":"两个签名锚准入引用缺失或顺序漂移"},{"code":"AH07_ANCHOR_SEPARATION","meaning":"两个签名锚复用同一准入引用"},{"code":"AH08_LANE_SET","meaning":"四席缺失、重复、乱序或字段漂移"},{"code":"AH09_LANE_REFERENCE","meaning":"B03–B06 谱系引用缺失或格式错误"},{"code":"AH10_CROSS_LANE_COLLISION","meaning":"同类引用发生跨席复用"},{"code":"AH11_AUTHORITY_CANDIDATE","meaning":"裁决方或独立见证匿名引用不合规"},{"code":"AH12_AUTHORITY_SEPARATION","meaning":"裁决方与独立见证未职责分离"},{"code":"AH13_DECISION_WINDOW","meaning":"裁决窗口无效、过期或超过二十四小时"},{"code":"AH14_PRIVATE_OR_UNEXPECTED_FIELD","meaning":"出现身份、签名、凭据、通道、窗口或证据正文"},{"code":"AH15_PREDECLARED_DECISION_DENIED","meaning":"候选包提前写入 Authority 决策"}],"lanes":[{"sequence":1,"ownerId":"AUTH","owner":"Auth Owner","state":"B03_TO_B06_EXTERNAL_LINEAGE_REQUIRED","requestRef":null,"receiptRef":null,"custodyRef":null,"verificationRef":null,"qualificationRef":null},{"sequence":2,"ownerId":"SECURITY","owner":"Security Owner","state":"B03_TO_B06_EXTERNAL_LINEAGE_REQUIRED","requestRef":null,"receiptRef":null,"custodyRef":null,"verificationRef":null,"qualificationRef":null},{"sequence":3,"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"B03_TO_B06_EXTERNAL_LINEAGE_REQUIRED","requestRef":null,"receiptRef":null,"custodyRef":null,"verificationRef":null,"qualificationRef":null},{"sequence":4,"ownerId":"QA_WITNESS","owner":"QA Witness","state":"B03_TO_B06_EXTERNAL_LINEAGE_REQUIRED","requestRef":null,"receiptRef":null,"custodyRef":null,"verificationRef":null,"qualificationRef":null}],"resultBoundary":"QUALIFICATION_HANDOFF_READY_EXTERNAL_AUTHORITY_DECISION_REQUIRED","candidateIsAuthorityDecision":false,"authorityDecisionPerformedByTool":false,"portalAcceptsFilledPackage":false,"portalPersistsInput":false,"g04Unblocked":false,"g05Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"authorityDecisionReadback":{"id":"D05-C02-G04-AUTHORITY-DECISION-READBACK-v1","schemaVersion":"developer.reits.tech/g04-authority-decision-readback/v1","payloadSchemaVersion":"developer.reits.tech/g04-authority-decision-payload/v1","state":"TOOLS_READY_EXTERNAL_RECEIPTS_0_OF_1_SIGNATURES_0_OF_2_ADMISSIONS_0_OF_2","algorithm":"Ed25519","toolsReady":3,"toolsTotal":3,"decisionReceiptsObserved":0,"decisionReceiptsRequired":1,"signaturesObserved":0,"signaturesRequired":2,"principalAdmissionsObserved":0,"principalAdmissionsRequired":2,"roleBindingsObserved":0,"roleBindingsRequired":24,"maximumDecisionWindowMinutes":15,"handoffReferencePattern":"^urn:reits:authority-admission-handoff:g04:v1:[a-f0-9]{64}$","decisionReceiptReferencePattern":"^urn:reits:authority-decision-receipt:g04:v1:[a-f0-9]{64}$","keyReferencePattern":"^urn:reits:key:ed25519:v1:[a-f0-9]{64}$","tools":[{"id":"T01","label":"Authority 双签裁决回执空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-authority-decision-readback.template.json"},{"id":"T02","label":"浏览器本地双签裁决验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-authority-decision-readback.offline.html"},{"id":"T03","label":"Node.js 双签裁决验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-authority-decision-readback.mjs"}],"protocol":[{"id":"P01","label":"取得 B07 内容寻址候选交接摘要","actor":"组织协调人","state":"EXTERNAL_REQUIRED"},{"id":"P02","label":"绑定职责分离的裁决方与独立见证主体准入","actor":"组织安全控制域","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"生成精确绑定候选、24 个角色槽和十五分钟窗口的规范正文","actor":"绑定裁决方","state":"EXTERNAL_REQUIRED"},{"id":"P04","label":"裁决方使用外部 Ed25519 键签署规范正文","actor":"绑定裁决方","state":"EXTERNAL_REQUIRED"},{"id":"P05","label":"独立见证回读同一字节并使用不同 Ed25519 键复签","actor":"独立见证","state":"EXTERNAL_REQUIRED"},{"id":"P06","label":"本地重算双 KeyRef、双签、正文和时效并生成回执摘要","actor":"协调人 + QA","state":"READY"},{"id":"P07","label":"外部系统独立确认主体准入和二十四个角色回执","actor":"组织授权系统","state":"EXTERNAL_REQUIRED"}],"denialCodes":[{"code":"AD01_PACKET_SHAPE","meaning":"顶层字段、顺序或结构漂移"},{"code":"AD02_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"AD03_PLAN_ID","meaning":"计划标识不匹配"},{"code":"AD04_EVALUATED_AT","meaning":"评估时间不是规范 UTC"},{"code":"AD05_UPSTREAM_REFERENCE","meaning":"B07 交接或资格集合引用不合规"},{"code":"AD06_PRINCIPAL_ADMISSION","meaning":"双主体外部准入引用缺失"},{"code":"AD07_ADMISSION_SEPARATION","meaning":"裁决方与见证复用主体准入引用"},{"code":"AD08_ENVELOPE_SHAPE","meaning":"裁决封装字段或顺序漂移"},{"code":"AD09_DECISION","meaning":"决定标识或 APPROVE/DENY 值错误"},{"code":"AD10_NONCE","meaning":"nonce 格式或长度不合规"},{"code":"AD11_PRINCIPAL_REFERENCE","meaning":"匿名主体引用不合规"},{"code":"AD12_PRINCIPAL_SEPARATION","meaning":"裁决方与见证主体未分离"},{"code":"AD13_KEY_REFERENCE","meaning":"Ed25519 KeyRef 缺失或摘要不匹配"},{"code":"AD14_KEY_SEPARATION","meaning":"双签复用 KeyRef 或公钥"},{"code":"AD15_DECISION_WINDOW","meaning":"裁决窗口无效或超过十五分钟"},{"code":"AD16_PAYLOAD_ENCODING","meaning":"裁决正文 Base64 不规范或越界"},{"code":"AD17_PAYLOAD_SHAPE","meaning":"裁决正文不是规范 JSON"},{"code":"AD18_PAYLOAD_BINDING","meaning":"正文未绑定候选、决定、角色槽或时效"},{"code":"AD19_KEY_OR_SIGNATURE_ENCODING","meaning":"公钥或 64 字节签名编码错误"},{"code":"AD20_PRIVATE_OR_UNEXPECTED_FIELD","meaning":"出现身份正文、私钥、凭据、通道或证据正文"},{"code":"AD21_SIGNATURE_INVALID","meaning":"Authority 或独立见证签名无效"}],"signers":[{"sequence":1,"signerId":"BINDING_AUTHORITY","label":"绑定裁决方","state":"EXTERNAL_SIGNATURE_REQUIRED","principalRef":null,"admissionRef":null,"keyRef":null,"signatureState":"NOT_OBSERVED"},{"sequence":2,"signerId":"INDEPENDENT_WITNESS","label":"独立见证","state":"EXTERNAL_SIGNATURE_REQUIRED","principalRef":null,"admissionRef":null,"keyRef":null,"signatureState":"NOT_OBSERVED"}],"approveResultBoundary":"AUTHORITY_DECISION_SIGNATURES_VERIFIED_EXTERNAL_ADMISSION_AND_ROLE_RECEIPT_READBACK_REQUIRED","denyResultBoundary":"AUTHORITY_DECISION_VERIFIED_DENIED_G04_HELD","signaturePassingIsPrincipalAdmission":false,"signaturePassingIsRoleBinding":false,"portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalPerformsDecision":false,"g04Unblocked":false,"g05Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"externalLedgerInclusionReadback":{"id":"D05-C02-G04-EXTERNAL-LEDGER-INCLUSION-READBACK-v1","schemaVersion":"developer.reits.tech/g04-external-ledger-inclusion-readback/v1","entrySchemaVersion":"developer.reits.tech/g04-external-ledger-entry/v1","checkpointSchemaVersion":"developer.reits.tech/g04-ledger-checkpoint/v1","state":"TOOLS_READY_B09_RECEIPT_SET_0_OF_1_LEDGER_INCLUSION_0_OF_1_CHECKPOINT_0_OF_1_INDEPENDENT_READBACK_0_OF_1_GATE_ADJUDICATION_0_OF_1","algorithm":"SHA-256 + Ed25519","toolsReady":3,"toolsTotal":3,"roleReceiptSetsObserved":0,"roleReceiptSetsRequired":1,"ledgerInclusionsObserved":0,"ledgerInclusionsRequired":1,"signedCheckpointsObserved":0,"signedCheckpointsRequired":1,"independentReadbacksObserved":0,"independentReadbacksRequired":1,"gateAdjudicationsObserved":0,"gateAdjudicationsRequired":1,"maximumAuditPathDepth":32,"maximumCommitToCheckpointMinutes":5,"maximumCheckpointFreshnessMinutes":15,"leafDomainPrefix":"0x00","branchDomainPrefix":"0x01","roleReceiptSetReferencePattern":"^urn:reits:role-binding-receipt-set:g04:v1:[a-f0-9]{64}$","ledgerReferencePattern":"^urn:reits:ledger:g04:v1:[a-f0-9]{32,64}$","inclusionReceiptReferencePattern":"^urn:reits:external-ledger-inclusion:g04:v1:[a-f0-9]{64}$","keyReferencePattern":"^urn:reits:key:ed25519:v1:[a-f0-9]{64}$","tools":[{"id":"T01","label":"外部账本包含证明空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-external-ledger-inclusion-readback.template.json"},{"id":"T02","label":"浏览器本地 Merkle 与检查点验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-external-ledger-inclusion-readback.offline.html"},{"id":"T03","label":"Node.js 外部账本包含证明验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-external-ledger-inclusion-readback.mjs"}],"systems":[{"sequence":1,"systemId":"EXTERNAL_LEDGER_SYSTEM","label":"外部组织账本","responsibility":"记录 B09 回执集合并签发可复算 Merkle 检查点","signatureState":"NOT_OBSERVED","state":"EXTERNAL_INCLUSION_REQUIRED"},{"sequence":2,"systemId":"INDEPENDENT_CHECKPOINT_READER","label":"独立检查点读回","responsibility":"从只读面取得同一检查点正文并使用不同 KeyRef 复签","signatureState":"NOT_OBSERVED","state":"EXTERNAL_READBACK_REQUIRED"}],"proofStages":[{"sequence":1,"id":"ROLE_RECEIPT_SET","label":"B09 回执集合","detail":"复算 roleReceiptSetRef","state":"EXTERNAL_REQUIRED"},{"sequence":2,"id":"CANONICAL_ENTRY","label":"规范账本条目","detail":"绑定 G04、24 角色与提交时间","state":"EXTERNAL_REQUIRED"},{"sequence":3,"id":"LEAF_HASH","label":"域分离叶子","detail":"SHA-256(0x00 || entry)","state":"EXTERNAL_REQUIRED"},{"sequence":4,"id":"AUDIT_PATH","label":"Merkle 包含路径","detail":"最多 32 层 LEFT / RIGHT","state":"EXTERNAL_REQUIRED"},{"sequence":5,"id":"SIGNED_CHECKPOINT","label":"账本签名检查点","detail":"Ed25519 · signer 1","state":"EXTERNAL_REQUIRED"},{"sequence":6,"id":"INDEPENDENT_READBACK","label":"独立只读复签","detail":"Ed25519 · signer 2","state":"EXTERNAL_REQUIRED"},{"sequence":7,"id":"LOCAL_VERIFICATION","label":"B10 本地验真","detail":"只形成裁定候选","state":"READY"},{"sequence":8,"id":"GATE_ADJUDICATION","label":"外部 Gate 裁定","detail":"G04 remains held","state":"DENIED"}],"protocol":[{"id":"P01","label":"取得并复算 B09 角色回执集合公开投影","actor":"协调人 + QA","state":"READY"},{"id":"P02","label":"从组织账本导出规范条目、sequence 与提交时间","actor":"账本管理员","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"导出域分离 leafHash 与最多三十二层 auditPath","actor":"账本管理员","state":"EXTERNAL_REQUIRED"},{"id":"P04","label":"取得账本系统签名的 Merkle 检查点","actor":"账本签发系统","state":"EXTERNAL_REQUIRED"},{"id":"P05","label":"独立读回系统从只读面取得同一检查点并复签","actor":"独立检查点读回","state":"EXTERNAL_REQUIRED"},{"id":"P06","label":"本地复算 B09、条目、Merkle Path、双 KeyRef、双签与新鲜度","actor":"协调人 + QA","state":"READY"},{"id":"P07","label":"把内容寻址候选提交外部 Gate Authority 裁定","actor":"Gate Authority + QA Witness","state":"EXTERNAL_REQUIRED"}],"denialCodes":[{"code":"LR01_PACKET_SHAPE","meaning":"顶层字段、顺序或结构漂移"},{"code":"LR02_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"LR03_PLAN_ID","meaning":"计划标识不匹配"},{"code":"LR04_EVALUATED_AT","meaning":"评估时间不是规范 UTC"},{"code":"LR05_ROLE_READBACK_SHAPE","meaning":"B09 回执集合公开投影不合规"},{"code":"LR06_ROLE_RECEIPT_SET_REF","meaning":"B09 内容寻址引用不一致"},{"code":"LR07_LEDGER_ENVELOPE_SHAPE","meaning":"账本包含证明封装字段漂移"},{"code":"LR08_LEDGER_OR_SYSTEM_REFERENCE","meaning":"账本或系统匿名引用不合规"},{"code":"LR09_ENTRY_ID_OR_SEQUENCE","meaning":"条目标识或单调 sequence 不合规"},{"code":"LR10_ENTRY_PAYLOAD_ENCODING","meaning":"账本条目 Base64 无效或越界"},{"code":"LR11_ENTRY_PAYLOAD_SHAPE","meaning":"账本条目不是规范 JSON"},{"code":"LR12_ENTRY_BINDING","meaning":"条目未绑定 B09、G04、24 角色或提交时间"},{"code":"LR13_ENTRY_DIGEST","meaning":"条目摘要与规范字节不一致"},{"code":"LR14_LEAF_HASH","meaning":"叶子未使用 0x00 域分离或摘要错误"},{"code":"LR15_AUDIT_PATH_SHAPE","meaning":"Merkle 路径方向、层数或摘要格式错误"},{"code":"LR16_MERKLE_INCLUSION","meaning":"包含路径不能复算到检查点根"},{"code":"LR17_CHECKPOINT_PROJECTION","meaning":"检查点标识、根或 KeyRef 不合规"},{"code":"LR18_CHECKPOINT_FRESHNESS","meaning":"提交、检查点或读回新鲜度超限"},{"code":"LR19_INDEPENDENT_READBACK_SHAPE","meaning":"独立读回不是同一检查点正文"},{"code":"LR20_ACTOR_SEPARATION","meaning":"账本系统与独立读回系统未分离"},{"code":"LR21_KEY_REFERENCE","meaning":"Ed25519 KeyRef 缺失或摘要不匹配"},{"code":"LR22_KEY_SEPARATION","meaning":"双签复用 KeyRef 或公钥"},{"code":"LR23_SIGNATURE_OR_KEY_ENCODING","meaning":"公钥或 64 字节签名编码错误"},{"code":"LR24_PRIVATE_OR_UNEXPECTED_FIELD","meaning":"出现身份正文、私钥、凭据、通道或证据正文"},{"code":"LR25_SIGNATURE_INVALID","meaning":"账本检查点或独立读回签名无效"}],"resultBoundary":"G04_EXTERNAL_LEDGER_INCLUSION_VERIFIED_GATE_ADJUDICATION_REQUIRED","localPassCreatesEvaluationCandidate":true,"localPassWritesExternalLedger":false,"portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalReadsExternalLedger":false,"portalPerformsGateAdjudication":false,"externalLedgerObservedByPortal":false,"gateAdjudicationObservedByPortal":false,"g04Unblocked":false,"g05Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"principalAdmissionRoleReceiptReadback":{"id":"D05-C02-G04-PRINCIPAL-ADMISSION-ROLE-RECEIPT-READBACK-v1","schemaVersion":"developer.reits.tech/g04-principal-admission-role-receipt-readback/v1","payloadSchemaVersion":"developer.reits.tech/g04-principal-admission-role-receipt-set/v1","state":"TOOLS_READY_DECISION_0_OF_1_ADMISSIONS_0_OF_2_ROLE_RECEIPTS_0_OF_24_EXTERNAL_LEDGER_0_OF_1","algorithm":"Ed25519","toolsReady":3,"toolsTotal":3,"decisionReceiptsObserved":0,"decisionReceiptsRequired":1,"principalAdmissionsObserved":0,"principalAdmissionsRequired":2,"roleReceiptsObserved":0,"roleReceiptsRequired":24,"externalLedgersObserved":0,"externalLedgersRequired":1,"maximumReceiptWindowMinutes":15,"ownersOrdered":["AUTH","SECURITY","SRE_DBA","QA_WITNESS"],"rolesOrdered":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"decisionReceiptReferencePattern":"^urn:reits:authority-decision-receipt:g04:v1:[a-f0-9]{64}$","principalAdmissionSetReferencePattern":"^urn:reits:principal-admission-set:g04:v1:[a-f0-9]{64}$","roleReceiptReferencePattern":"^urn:reits:role-binding-receipt:g04:v1:[a-f0-9]{64}$","roleReceiptSetReferencePattern":"^urn:reits:role-binding-receipt-set:g04:v1:[a-f0-9]{64}$","keyReferencePattern":"^urn:reits:key:ed25519:v1:[a-f0-9]{64}$","tools":[{"id":"T01","label":"双主体准入与二十四角色回执空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/g04-principal-admission-role-receipt-readback.template.json"},{"id":"T02","label":"浏览器本地主体与角色回执验真器","format":"HTML","href":"/handoff/auth-s08-r02-c02/g04-principal-admission-role-receipt-readback.offline.html"},{"id":"T03","label":"Node.js 主体与角色回执验真器","format":"MJS","href":"/handoff/auth-s08-r02-c02/g04-principal-admission-role-receipt-readback.mjs"}],"systems":[{"sequence":1,"systemId":"ORGANIZATION_AUTHORITY_SYSTEM","label":"组织授权系统","responsibility":"签发两名主体准入与二十四个角色绑定回执","signatureState":"NOT_OBSERVED","state":"EXTERNAL_SIGNATURE_REQUIRED"},{"sequence":2,"systemId":"INDEPENDENT_READBACK","label":"独立读回系统","responsibility":"从只读面复取同一规范正文并使用不同密钥复签","signatureState":"NOT_OBSERVED","state":"EXTERNAL_SIGNATURE_REQUIRED"}],"protocol":[{"id":"P01","label":"取得并复算 B08 APPROVE 裁决回执公开投影","actor":"协调人 + QA","state":"READY"},{"id":"P02","label":"从组织授权系统导出两名签署主体 ADMITTED 准入引用","actor":"组织安全控制域","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"按 AUTH、SECURITY、SRE_DBA、QA_WITNESS 固定四席排序","actor":"组织授权系统","state":"EXTERNAL_REQUIRED"},{"id":"P04","label":"为每席六角色导出二十四个唯一主体与内容寻址回执","actor":"四席负责人","state":"EXTERNAL_REQUIRED"},{"id":"P05","label":"组织授权系统使用 Ed25519 签署规范回执集合","actor":"组织授权系统","state":"EXTERNAL_REQUIRED"},{"id":"P06","label":"独立读回系统从只读面复取同文并使用不同密钥复签","actor":"独立读回系统","state":"EXTERNAL_REQUIRED"},{"id":"P07","label":"本地复算 B08、准入集合、24 回执、双 KeyRef、双签与十五分钟窗口","actor":"协调人 + QA","state":"READY"}],"denialCodes":[{"code":"PR01_PACKET_SHAPE","meaning":"顶层字段、顺序或结构漂移"},{"code":"PR02_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"PR03_PLAN_ID","meaning":"计划标识不匹配"},{"code":"PR04_EVALUATED_AT","meaning":"评估时间不是规范 UTC"},{"code":"PR05_DECISION_READBACK_SHAPE","meaning":"B08 裁决回读结构不合规"},{"code":"PR06_DECISION_PROJECTION","meaning":"B08 公开投影引用格式错误"},{"code":"PR07_DECISION_SEPARATION","meaning":"B08 双主体、准入或 KeyRef 未分离"},{"code":"PR08_DECISION_RECEIPT_REF","meaning":"B08 裁决回执内容寻址不一致"},{"code":"PR09_APPROVE_REQUIRED","meaning":"B08 决定不是 APPROVE"},{"code":"PR10_ENVELOPE_SHAPE","meaning":"角色回执集合封装字段漂移"},{"code":"PR11_SET_ID_OR_NONCE","meaning":"集合标识或 nonce 格式错误"},{"code":"PR12_SYSTEM_ACTOR","meaning":"系统匿名主体引用不合规"},{"code":"PR13_SYSTEM_SEPARATION","meaning":"授权系统与独立读回方未分离"},{"code":"PR14_KEY_REFERENCE","meaning":"Ed25519 KeyRef 缺失或摘要不匹配"},{"code":"PR15_KEY_SEPARATION","meaning":"双签复用 KeyRef 或公钥"},{"code":"PR16_RECEIPT_WINDOW","meaning":"签发窗口无效或超过十五分钟"},{"code":"PR17_PAYLOAD_ENCODING","meaning":"规范正文 Base64 无效或越界"},{"code":"PR18_PAYLOAD_SHAPE","meaning":"正文不是规范 JSON 或顺序漂移"},{"code":"PR19_PAYLOAD_BINDING","meaning":"正文未绑定 B08 APPROVE、范围或时效"},{"code":"PR20_PRINCIPAL_ADMISSION_SET","meaning":"双主体准入未与 B08 精确绑定"},{"code":"PR21_PRIVATE_OR_UNEXPECTED_FIELD","meaning":"出现身份正文、私钥、凭据、通道或证据正文"},{"code":"PR22_ROLE_RECEIPT_SET","meaning":"二十四个角色回执缺失、乱序、碰撞或摘要不一致"},{"code":"PR23_KEY_OR_SIGNATURE_ENCODING","meaning":"公钥或 64 字节签名编码错误"},{"code":"PR24_SIGNATURE_INVALID","meaning":"组织授权系统或独立读回方签名无效"}],"resultBoundary":"G04_PRINCIPAL_ADMISSIONS_AND_ROLE_RECEIPTS_VERIFIED_EXTERNAL_LEDGER_AND_GATE_ADJUDICATION_REQUIRED","localPassCreatesEvaluationCandidate":true,"localPassWritesExternalLedger":false,"portalAcceptsFilledPackage":false,"portalPersistsInput":false,"portalPerformsAdmission":false,"portalPerformsRoleBinding":false,"g04Unblocked":false,"g05Unblocked":false,"externalTruthChanged":false,"formalProgressChanged":false},"rolePreflight":{"id":"D05-C02-G04-ROLE-BINDING-PREFLIGHT-v1","schemaVersion":"developer.reits.tech/g04-role-binding-preflight/v1","state":"TOOLS_READY_EXTERNAL_RUNS_0_OF_4","referencePattern":"^urn:reits:principal:v1:[a-f0-9]{32,64}$","ownersOrdered":["AUTH","SECURITY","SRE_DBA","QA_WITNESS"],"rolesOrdered":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"slotsTotal":24,"bindingsObserved":0,"toolsReady":3,"toolsTotal":3,"externalRunsCompleted":0,"externalRunsTotal":4,"separationPairsPerLane":15,"separationAssertionsTotal":60,"globalCollisionFirewall":true,"tools":[{"id":"T01","label":"四席空白绑定模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/role-binding-preflight.template.json"},{"id":"T02","label":"浏览器本地离线预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/role-binding-preflight.offline.html"},{"id":"T03","label":"Node.js 离线预检器","format":"MJS","href":"/handoff/auth-s08-r02-c02/role-binding-preflight.mjs"}],"protocol":[{"id":"P01","label":"下载三件公开工具","actor":"组织负责人","state":"READY"},{"id":"P02","label":"在批准的离线控制域填写二十四个匿名主体引用","actor":"组织负责人","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"逐席运行十五对分离检查并执行全局防碰撞","actor":"独立见证","state":"EXTERNAL_REQUIRED"},{"id":"P04","label":"在 Portal 外保存四份预检结果并交由组织授权复核","actor":"组织负责人 + 独立见证","state":"EXTERNAL_REQUIRED"}],"denialCodes":[{"code":"RB01_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"RB02_PLAN_ID","meaning":"预检计划标识不匹配"},{"code":"RB03_LANE_ORDER","meaning":"四席顺序、数量或席位字段不匹配"},{"code":"RB04_ROLE_ORDER","meaning":"六角色顺序、数量或角色字段不匹配"},{"code":"RB05_REF_MISSING","meaning":"匿名主体引用仍为空"},{"code":"RB06_REF_FORMAT","meaning":"匿名主体引用格式不合规"},{"code":"RB07_INTRA_LANE_COLLISION","meaning":"同席两个角色复用了同一引用"},{"code":"RB08_CROSS_LANE_COLLISION","meaning":"不同席位复用了同一引用"},{"code":"RB09_UNEXPECTED_OR_PRIVATE_FIELD","meaning":"出现未授权字段或可能承载私密信息的字段"}],"lanes":[{"sequence":1,"ownerId":"AUTH","owner":"Auth Owner","state":"EXTERNAL_RUN_REQUIRED","slots":[{"order":1,"roleId":"OWNER_SENDER","label":"Owner 发送方","assignedRef":null,"state":"UNASSIGNED"},{"order":2,"roleId":"RECEIVER","label":"真实接收方","assignedRef":null,"state":"UNASSIGNED"},{"order":3,"roleId":"INDEPENDENT_WITNESS","label":"独立见证","assignedRef":null,"state":"UNASSIGNED"},{"order":4,"roleId":"QUARANTINE_OPERATOR","label":"隔离管理员","assignedRef":null,"state":"UNASSIGNED"},{"order":5,"roleId":"BINDING_AUTHORITY","label":"绑定裁决方","assignedRef":null,"state":"UNASSIGNED"},{"order":6,"roleId":"BALLOT_ACCEPTOR","label":"Ballot 接纳方","assignedRef":null,"state":"UNASSIGNED"}],"separationAssertions":[{"order":1,"id":"OWNER_SENDER__RECEIVER","leftRoleId":"OWNER_SENDER","rightRoleId":"RECEIVER","state":"NOT_EVALUATED"},{"order":2,"id":"OWNER_SENDER__INDEPENDENT_WITNESS","leftRoleId":"OWNER_SENDER","rightRoleId":"INDEPENDENT_WITNESS","state":"NOT_EVALUATED"},{"order":3,"id":"OWNER_SENDER__QUARANTINE_OPERATOR","leftRoleId":"OWNER_SENDER","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":4,"id":"OWNER_SENDER__BINDING_AUTHORITY","leftRoleId":"OWNER_SENDER","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":5,"id":"OWNER_SENDER__BALLOT_ACCEPTOR","leftRoleId":"OWNER_SENDER","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":6,"id":"RECEIVER__INDEPENDENT_WITNESS","leftRoleId":"RECEIVER","rightRoleId":"INDEPENDENT_WITNESS","state":"NOT_EVALUATED"},{"order":7,"id":"RECEIVER__QUARANTINE_OPERATOR","leftRoleId":"RECEIVER","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":8,"id":"RECEIVER__BINDING_AUTHORITY","leftRoleId":"RECEIVER","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":9,"id":"RECEIVER__BALLOT_ACCEPTOR","leftRoleId":"RECEIVER","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":10,"id":"INDEPENDENT_WITNESS__QUARANTINE_OPERATOR","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":11,"id":"INDEPENDENT_WITNESS__BINDING_AUTHORITY","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":12,"id":"INDEPENDENT_WITNESS__BALLOT_ACCEPTOR","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":13,"id":"QUARANTINE_OPERATOR__BINDING_AUTHORITY","leftRoleId":"QUARANTINE_OPERATOR","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":14,"id":"QUARANTINE_OPERATOR__BALLOT_ACCEPTOR","leftRoleId":"QUARANTINE_OPERATOR","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":15,"id":"BINDING_AUTHORITY__BALLOT_ACCEPTOR","leftRoleId":"BINDING_AUTHORITY","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"}],"externalRunCompleted":false},{"sequence":2,"ownerId":"SECURITY","owner":"Security Owner","state":"EXTERNAL_RUN_REQUIRED","slots":[{"order":1,"roleId":"OWNER_SENDER","label":"Owner 发送方","assignedRef":null,"state":"UNASSIGNED"},{"order":2,"roleId":"RECEIVER","label":"真实接收方","assignedRef":null,"state":"UNASSIGNED"},{"order":3,"roleId":"INDEPENDENT_WITNESS","label":"独立见证","assignedRef":null,"state":"UNASSIGNED"},{"order":4,"roleId":"QUARANTINE_OPERATOR","label":"隔离管理员","assignedRef":null,"state":"UNASSIGNED"},{"order":5,"roleId":"BINDING_AUTHORITY","label":"绑定裁决方","assignedRef":null,"state":"UNASSIGNED"},{"order":6,"roleId":"BALLOT_ACCEPTOR","label":"Ballot 接纳方","assignedRef":null,"state":"UNASSIGNED"}],"separationAssertions":[{"order":1,"id":"OWNER_SENDER__RECEIVER","leftRoleId":"OWNER_SENDER","rightRoleId":"RECEIVER","state":"NOT_EVALUATED"},{"order":2,"id":"OWNER_SENDER__INDEPENDENT_WITNESS","leftRoleId":"OWNER_SENDER","rightRoleId":"INDEPENDENT_WITNESS","state":"NOT_EVALUATED"},{"order":3,"id":"OWNER_SENDER__QUARANTINE_OPERATOR","leftRoleId":"OWNER_SENDER","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":4,"id":"OWNER_SENDER__BINDING_AUTHORITY","leftRoleId":"OWNER_SENDER","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":5,"id":"OWNER_SENDER__BALLOT_ACCEPTOR","leftRoleId":"OWNER_SENDER","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":6,"id":"RECEIVER__INDEPENDENT_WITNESS","leftRoleId":"RECEIVER","rightRoleId":"INDEPENDENT_WITNESS","state":"NOT_EVALUATED"},{"order":7,"id":"RECEIVER__QUARANTINE_OPERATOR","leftRoleId":"RECEIVER","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":8,"id":"RECEIVER__BINDING_AUTHORITY","leftRoleId":"RECEIVER","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":9,"id":"RECEIVER__BALLOT_ACCEPTOR","leftRoleId":"RECEIVER","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":10,"id":"INDEPENDENT_WITNESS__QUARANTINE_OPERATOR","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":11,"id":"INDEPENDENT_WITNESS__BINDING_AUTHORITY","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":12,"id":"INDEPENDENT_WITNESS__BALLOT_ACCEPTOR","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":13,"id":"QUARANTINE_OPERATOR__BINDING_AUTHORITY","leftRoleId":"QUARANTINE_OPERATOR","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":14,"id":"QUARANTINE_OPERATOR__BALLOT_ACCEPTOR","leftRoleId":"QUARANTINE_OPERATOR","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":15,"id":"BINDING_AUTHORITY__BALLOT_ACCEPTOR","leftRoleId":"BINDING_AUTHORITY","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"}],"externalRunCompleted":false},{"sequence":3,"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"EXTERNAL_RUN_REQUIRED","slots":[{"order":1,"roleId":"OWNER_SENDER","label":"Owner 发送方","assignedRef":null,"state":"UNASSIGNED"},{"order":2,"roleId":"RECEIVER","label":"真实接收方","assignedRef":null,"state":"UNASSIGNED"},{"order":3,"roleId":"INDEPENDENT_WITNESS","label":"独立见证","assignedRef":null,"state":"UNASSIGNED"},{"order":4,"roleId":"QUARANTINE_OPERATOR","label":"隔离管理员","assignedRef":null,"state":"UNASSIGNED"},{"order":5,"roleId":"BINDING_AUTHORITY","label":"绑定裁决方","assignedRef":null,"state":"UNASSIGNED"},{"order":6,"roleId":"BALLOT_ACCEPTOR","label":"Ballot 接纳方","assignedRef":null,"state":"UNASSIGNED"}],"separationAssertions":[{"order":1,"id":"OWNER_SENDER__RECEIVER","leftRoleId":"OWNER_SENDER","rightRoleId":"RECEIVER","state":"NOT_EVALUATED"},{"order":2,"id":"OWNER_SENDER__INDEPENDENT_WITNESS","leftRoleId":"OWNER_SENDER","rightRoleId":"INDEPENDENT_WITNESS","state":"NOT_EVALUATED"},{"order":3,"id":"OWNER_SENDER__QUARANTINE_OPERATOR","leftRoleId":"OWNER_SENDER","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":4,"id":"OWNER_SENDER__BINDING_AUTHORITY","leftRoleId":"OWNER_SENDER","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":5,"id":"OWNER_SENDER__BALLOT_ACCEPTOR","leftRoleId":"OWNER_SENDER","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":6,"id":"RECEIVER__INDEPENDENT_WITNESS","leftRoleId":"RECEIVER","rightRoleId":"INDEPENDENT_WITNESS","state":"NOT_EVALUATED"},{"order":7,"id":"RECEIVER__QUARANTINE_OPERATOR","leftRoleId":"RECEIVER","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":8,"id":"RECEIVER__BINDING_AUTHORITY","leftRoleId":"RECEIVER","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":9,"id":"RECEIVER__BALLOT_ACCEPTOR","leftRoleId":"RECEIVER","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":10,"id":"INDEPENDENT_WITNESS__QUARANTINE_OPERATOR","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":11,"id":"INDEPENDENT_WITNESS__BINDING_AUTHORITY","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":12,"id":"INDEPENDENT_WITNESS__BALLOT_ACCEPTOR","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":13,"id":"QUARANTINE_OPERATOR__BINDING_AUTHORITY","leftRoleId":"QUARANTINE_OPERATOR","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":14,"id":"QUARANTINE_OPERATOR__BALLOT_ACCEPTOR","leftRoleId":"QUARANTINE_OPERATOR","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":15,"id":"BINDING_AUTHORITY__BALLOT_ACCEPTOR","leftRoleId":"BINDING_AUTHORITY","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"}],"externalRunCompleted":false},{"sequence":4,"ownerId":"QA_WITNESS","owner":"QA Witness","state":"EXTERNAL_RUN_REQUIRED","slots":[{"order":1,"roleId":"OWNER_SENDER","label":"Owner 发送方","assignedRef":null,"state":"UNASSIGNED"},{"order":2,"roleId":"RECEIVER","label":"真实接收方","assignedRef":null,"state":"UNASSIGNED"},{"order":3,"roleId":"INDEPENDENT_WITNESS","label":"独立见证","assignedRef":null,"state":"UNASSIGNED"},{"order":4,"roleId":"QUARANTINE_OPERATOR","label":"隔离管理员","assignedRef":null,"state":"UNASSIGNED"},{"order":5,"roleId":"BINDING_AUTHORITY","label":"绑定裁决方","assignedRef":null,"state":"UNASSIGNED"},{"order":6,"roleId":"BALLOT_ACCEPTOR","label":"Ballot 接纳方","assignedRef":null,"state":"UNASSIGNED"}],"separationAssertions":[{"order":1,"id":"OWNER_SENDER__RECEIVER","leftRoleId":"OWNER_SENDER","rightRoleId":"RECEIVER","state":"NOT_EVALUATED"},{"order":2,"id":"OWNER_SENDER__INDEPENDENT_WITNESS","leftRoleId":"OWNER_SENDER","rightRoleId":"INDEPENDENT_WITNESS","state":"NOT_EVALUATED"},{"order":3,"id":"OWNER_SENDER__QUARANTINE_OPERATOR","leftRoleId":"OWNER_SENDER","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":4,"id":"OWNER_SENDER__BINDING_AUTHORITY","leftRoleId":"OWNER_SENDER","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":5,"id":"OWNER_SENDER__BALLOT_ACCEPTOR","leftRoleId":"OWNER_SENDER","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":6,"id":"RECEIVER__INDEPENDENT_WITNESS","leftRoleId":"RECEIVER","rightRoleId":"INDEPENDENT_WITNESS","state":"NOT_EVALUATED"},{"order":7,"id":"RECEIVER__QUARANTINE_OPERATOR","leftRoleId":"RECEIVER","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":8,"id":"RECEIVER__BINDING_AUTHORITY","leftRoleId":"RECEIVER","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":9,"id":"RECEIVER__BALLOT_ACCEPTOR","leftRoleId":"RECEIVER","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":10,"id":"INDEPENDENT_WITNESS__QUARANTINE_OPERATOR","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"QUARANTINE_OPERATOR","state":"NOT_EVALUATED"},{"order":11,"id":"INDEPENDENT_WITNESS__BINDING_AUTHORITY","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":12,"id":"INDEPENDENT_WITNESS__BALLOT_ACCEPTOR","leftRoleId":"INDEPENDENT_WITNESS","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":13,"id":"QUARANTINE_OPERATOR__BINDING_AUTHORITY","leftRoleId":"QUARANTINE_OPERATOR","rightRoleId":"BINDING_AUTHORITY","state":"NOT_EVALUATED"},{"order":14,"id":"QUARANTINE_OPERATOR__BALLOT_ACCEPTOR","leftRoleId":"QUARANTINE_OPERATOR","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"},{"order":15,"id":"BINDING_AUTHORITY__BALLOT_ACCEPTOR","leftRoleId":"BINDING_AUTHORITY","rightRoleId":"BALLOT_ACCEPTOR","state":"NOT_EVALUATED"}],"externalRunCompleted":false}],"resultBoundary":"STRUCTURE_PASS_NOT_BOUND","authorizationRequiredAfterPass":true,"externalTruthChanged":false,"formalProgressChanged":false},"controlPreflight":{"id":"D05-C02-G05-CHANNEL-WINDOW-PREFLIGHT-v1","schemaVersion":"developer.reits.tech/g05-channel-window-preflight/v1","state":"TOOLS_READY_G04_HELD_EXTERNAL_RUNS_0_OF_4","upstreamGate":"G04_EXTERNAL_ROLE_BINDING","upstreamGateState":"HELD","channelReferencePattern":"^urn:reits:channel:v1:[a-f0-9]{32,64}$","g04ReceiptReferencePattern":"^urn:reits:receipt:g04:v1:[a-f0-9]{64}$","approvalReceiptReferencePattern":"^urn:reits:approval:g05:v1:[a-f0-9]{64}$","ownersOrdered":["AUTH","SECURITY","SRE_DBA","QA_WITNESS"],"approversOrdered":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS"],"controlSlotsTotal":8,"controlsObserved":0,"approvalReceiptSlotsTotal":12,"approvalReceiptRefsObserved":0,"windowsTotal":4,"windowsScheduled":0,"maximumWindowHours":24,"toolsReady":3,"toolsTotal":3,"externalRunsCompleted":0,"externalRunsTotal":4,"uniqueChannelFirewall":true,"tools":[{"id":"T01","label":"四席通道窗口空白模板","format":"JSON","href":"/handoff/auth-s08-r02-c02/channel-window-preflight.template.json"},{"id":"T02","label":"浏览器本地离线预检器","format":"HTML","href":"/handoff/auth-s08-r02-c02/channel-window-preflight.offline.html"},{"id":"T03","label":"Node.js 离线预检器","format":"MJS","href":"/handoff/auth-s08-r02-c02/channel-window-preflight.mjs"}],"protocol":[{"id":"P01","label":"引用组织在 Portal 外形成的 G04 角色绑定回执","actor":"组织负责人","state":"UPSTREAM_HELD"},{"id":"P02","label":"为四席分别登记匿名带外通道引用","actor":"Owner 发送方 + 真实接收方","state":"EXTERNAL_REQUIRED"},{"id":"P03","label":"以 UTC 安排大于零且不超过二十四小时的窗口","actor":"Owner 发送方 + 真实接收方","state":"EXTERNAL_REQUIRED"},{"id":"P04","label":"绑定发送方、接收方与独立见证批准回执引用","actor":"三方批准者","state":"EXTERNAL_REQUIRED"},{"id":"P05","label":"在外部控制域运行预检并申请真实控制批准","actor":"独立见证 + 组织负责人","state":"EXTERNAL_REQUIRED"}],"denialCodes":[{"code":"CW01_SCHEMA_VERSION","meaning":"Schema 版本不匹配"},{"code":"CW02_PLAN_ID","meaning":"预检计划标识不匹配"},{"code":"CW03_LANE_ORDER","meaning":"四席数量、顺序或席位字段漂移"},{"code":"CW04_G04_RECEIPT_MISSING","meaning":"缺少外部 G04 角色绑定回执引用"},{"code":"CW05_G04_RECEIPT_FORMAT","meaning":"G04 回执引用格式不合规"},{"code":"CW06_CHANNEL_MISSING","meaning":"批准的带外通道引用为空"},{"code":"CW07_CHANNEL_FORMAT","meaning":"通道引用格式不合规或泄露通道细节"},{"code":"CW08_CHANNEL_COLLISION","meaning":"不同席位复用了同一通道引用"},{"code":"CW09_WINDOW_FORMAT","meaning":"窗口不是带 Z 的 UTC ISO 8601 时间"},{"code":"CW10_WINDOW_RANGE","meaning":"窗口非正数或超过二十四小时"},{"code":"CW11_WINDOW_EXPIRED","meaning":"执行窗口已经过期"},{"code":"CW12_APPROVAL_SET","meaning":"三方批准引用缺失、格式错误或顺序漂移"},{"code":"CW13_APPROVAL_COLLISION","meaning":"批准回执引用发生跨角色或跨席碰撞"},{"code":"CW14_UNEXPECTED_OR_PRIVATE_FIELD","meaning":"出现未授权字段或可能承载私密信息的字段"}],"lanes":[{"sequence":1,"ownerId":"AUTH","owner":"Auth Owner","state":"G04_RECEIPT_AND_EXTERNAL_APPROVAL_REQUIRED","g04RoleBindingReceiptRef":null,"controls":[{"order":1,"controlId":"APPROVED_CHANNEL_REF","label":"批准的带外通道","state":"UNBOUND","boundValue":null},{"order":2,"controlId":"WINDOW_24H","label":"二十四小时执行窗口","state":"UNBOUND","boundValue":null}],"approvalReceiptSlots":[{"order":1,"roleId":"OWNER_SENDER","state":"UNASSIGNED","receiptRef":null},{"order":2,"roleId":"RECEIVER","state":"UNASSIGNED","receiptRef":null},{"order":3,"roleId":"INDEPENDENT_WITNESS","state":"UNASSIGNED","receiptRef":null}],"window":{"maximumHours":24,"startsAt":null,"endsAt":null,"state":"UNSCHEDULED"},"externalRunCompleted":false},{"sequence":2,"ownerId":"SECURITY","owner":"Security Owner","state":"G04_RECEIPT_AND_EXTERNAL_APPROVAL_REQUIRED","g04RoleBindingReceiptRef":null,"controls":[{"order":1,"controlId":"APPROVED_CHANNEL_REF","label":"批准的带外通道","state":"UNBOUND","boundValue":null},{"order":2,"controlId":"WINDOW_24H","label":"二十四小时执行窗口","state":"UNBOUND","boundValue":null}],"approvalReceiptSlots":[{"order":1,"roleId":"OWNER_SENDER","state":"UNASSIGNED","receiptRef":null},{"order":2,"roleId":"RECEIVER","state":"UNASSIGNED","receiptRef":null},{"order":3,"roleId":"INDEPENDENT_WITNESS","state":"UNASSIGNED","receiptRef":null}],"window":{"maximumHours":24,"startsAt":null,"endsAt":null,"state":"UNSCHEDULED"},"externalRunCompleted":false},{"sequence":3,"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","state":"G04_RECEIPT_AND_EXTERNAL_APPROVAL_REQUIRED","g04RoleBindingReceiptRef":null,"controls":[{"order":1,"controlId":"APPROVED_CHANNEL_REF","label":"批准的带外通道","state":"UNBOUND","boundValue":null},{"order":2,"controlId":"WINDOW_24H","label":"二十四小时执行窗口","state":"UNBOUND","boundValue":null}],"approvalReceiptSlots":[{"order":1,"roleId":"OWNER_SENDER","state":"UNASSIGNED","receiptRef":null},{"order":2,"roleId":"RECEIVER","state":"UNASSIGNED","receiptRef":null},{"order":3,"roleId":"INDEPENDENT_WITNESS","state":"UNASSIGNED","receiptRef":null}],"window":{"maximumHours":24,"startsAt":null,"endsAt":null,"state":"UNSCHEDULED"},"externalRunCompleted":false},{"sequence":4,"ownerId":"QA_WITNESS","owner":"QA Witness","state":"G04_RECEIPT_AND_EXTERNAL_APPROVAL_REQUIRED","g04RoleBindingReceiptRef":null,"controls":[{"order":1,"controlId":"APPROVED_CHANNEL_REF","label":"批准的带外通道","state":"UNBOUND","boundValue":null},{"order":2,"controlId":"WINDOW_24H","label":"二十四小时执行窗口","state":"UNBOUND","boundValue":null}],"approvalReceiptSlots":[{"order":1,"roleId":"OWNER_SENDER","state":"UNASSIGNED","receiptRef":null},{"order":2,"roleId":"RECEIVER","state":"UNASSIGNED","receiptRef":null},{"order":3,"roleId":"INDEPENDENT_WITNESS","state":"UNASSIGNED","receiptRef":null}],"window":{"maximumHours":24,"startsAt":null,"endsAt":null,"state":"UNSCHEDULED"},"externalRunCompleted":false}],"resultBoundary":"STRUCTURE_PASS_NOT_APPROVED","g04AuthorizationVerifiedByTool":false,"organizationApprovalRequiredAfterPass":true,"externalTruthChanged":false,"formalProgressChanged":false},"sources":{"fourLaneReadbackDispatchHref":"/development-plan/archive#d05-c02-four-lane-readback-dispatch","currentBaselineEvidenceRebuildHref":"/development-plan/archive#d05-c02-current-baseline-evidence-rebuild","productionDriftAdjudicationHref":"/development-plan/archive#d05-c02-production-drift-adjudication","ownerPacketsHref":"/development-plan/archive#owner-execution-packet-factory","receiverReadinessHref":"/development-plan/archive#receiver-readiness-integrity-workbench","p02Href":"/d05-auth-owner-local-preflight","p04Href":"/d05-auth-contribution-custody-handoff","p05Href":"/d05-auth-receiver-intake-rehash","p03Href":"/d05-auth-contribution-quarantine","schemaHref":"/schemas/auth-s08-r02-c02-external-ceremony-coordination.v1.schema.json","rolePreflightHref":"/development-plan/archive#g04-role-binding-preflight","controlPreflightHref":"/development-plan/archive#g05-channel-window-preflight","roleDispatchHref":"/development-plan/archive#g04-role-binding-dispatch","receiptCustodyHref":"/development-plan/archive#g04-receipt-custody-preflight","independentVerificationHref":"/development-plan/archive#g04-independent-cryptographic-readback","trustRevocationQualificationHref":"/development-plan/archive#g04-trust-revocation-qualification","authorityAdmissionHandoffHref":"/development-plan/archive#g04-authority-admission-handoff","authorityDecisionReadbackHref":"/development-plan/archive#g04-authority-decision-readback","principalAdmissionRoleReceiptReadbackHref":"/development-plan/archive#g04-principal-admission-role-receipt-readback","externalLedgerInclusionReadbackHref":"/development-plan/archive#g04-external-ledger-inclusion-readback","gateAuthorityAdjudicationReadbackHref":"/development-plan/archive#g04-gate-authority-adjudication-readback","formalCommitFinalityReadbackHref":"/development-plan/archive#g04-formal-commit-finality-readback","threeHeadConsistencyRecoveryReadbackHref":"/development-plan/archive#g04-three-head-consistency-recovery-readback","closureCertificateDependencyReleaseReadbackHref":"/development-plan/archive#g04-closure-certificate-dependency-release-readback","readModelConsumerCompatibilityHealthReadbackHref":"/development-plan/archive#g04-read-model-consumer-compatibility-health-readback"},"separationContract":{"rolesPerPlan":6,"controlsPerPlan":2,"checkpointsPerPlan":7,"separationPairsPerPlan":15,"separationAssertionsTotal":60,"crossLaneReferenceReuseAllowed":false,"conflictRules":["同一席位的六个真实角色必须由六个互不相同的匿名主体引用表示","四个席位的二十四个匿名主体引用必须全局唯一，不得跨席复用","每席六角色两两形成十五条职责分离断言，四席合计六十条","匿名主体引用只允许 urn:reits:principal:v1:<32-64 位小写十六进制> 格式","绑定文件不得包含姓名、邮箱、电话、凭据、签名、通道或执行时间","离线预检通过只证明结构与冲突检查通过，不代表角色已被组织授权","Developer Portal 与 AI 均不得担任六个真实角色中的任何一个","任何缺失、格式错误、席内碰撞、跨席碰撞或额外私密字段都必须失败关闭"],"bindingAuthority":"ORGANIZATION_EXTERNAL_CONTROL_DOMAIN_ONLY","portalAuthority":"NONE","aiAuthority":"NONE"},"safety":{"planOnly":true,"acceptsUpload":false,"acceptsRealIdentity":false,"acceptsCredential":false,"acceptsSignature":false,"acceptsExternalEvidence":false,"persistsInput":false,"createsChannel":false,"createsExecutionWindow":false,"bindsAuthority":false,"acceptsBallot":false,"writesExternalEvidence":false,"advancesFormalProgress":false},"plans":[{"planId":"D05-C02-AUTH-EXTERNAL-CEREMONY-PLAN-v1","sequence":1,"ownerId":"AUTH","owner":"Auth Owner","responsibility":"Auth 主线与签名材料","state":"PLAN_READY_EXTERNAL_BINDINGS_REQUIRED","packetRefs":{"ownerExecutionPacket":"D05-C02-AUTH-OWNER-EXECUTION-PACKET-v1","ownerStartHref":"/handoff/auth-s08-r02-c02/auth-owner-authority-contribution.template.json","receiverLane":"D05-C02-AUTH-RECEIVER-LANE-v1","receiverHref":"/d05-auth-receiver-intake-rehash"},"expectedInboundFiles":[{"filename":"auth.normalized-owner-authority-contribution.json","source":"P02","contains":"规范化公开贡献","state":"NOT_RECEIVED"},{"filename":"auth.unsigned-transfer-manifest.json","source":"P04","contains":"贡献摘要、席位、批准通道、双方引用与窗口","state":"NOT_RECEIVED"},{"filename":"auth.sanitized-custody-ack-template.json","source":"P04","contains":"等待真实接收方填写的净化确认候选","state":"NOT_RECEIVED"}],"roleSlots":[{"order":1,"id":"OWNER_SENDER","label":"Owner 发送方","responsibility":"在本席自有控制域运行 P02 与 P04，并通过批准的带外通道派送三件公开材料。","placeholder":"<owner-sender-ref>","separationWith":["RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":2,"id":"RECEIVER","label":"真实接收方","responsibility":"确认带外来源、接收三件套，并使用 P05 独立重算摘要。","placeholder":"<receiver-ref>","separationWith":["OWNER_SENDER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":3,"id":"INDEPENDENT_WITNESS","label":"独立见证","responsibility":"见证角色分离、批准通道、二十四小时窗口、到达和摘要比对，不代替执行。","placeholder":"<independent-witness-ref>","separationWith":["OWNER_SENDER","RECEIVER","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":4,"id":"QUARANTINE_OPERATOR","label":"隔离管理员","responsibility":"在四席分别通过 P05 后运行 P03，保持席位隔离并拒绝缺席、重复或碰撞。","placeholder":"<quarantine-operator-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":5,"id":"BINDING_AUTHORITY","label":"绑定裁决方","responsibility":"独立复核待定 Authority Set，并决定是否形成真实 Authority Binding。","placeholder":"<binding-authority-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":6,"id":"BALLOT_ACCEPTOR","label":"Ballot 接纳方","responsibility":"只在绑定、独立回读和准入条件满足后接纳本席真实 Ballot。","placeholder":"<ballot-acceptor-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY"],"state":"UNASSIGNED","assignedRef":null}],"controlSlots":[{"order":1,"id":"APPROVED_CHANNEL_REF","label":"批准的带外通道","description":"由真实发送方、接收方和独立见证共同确认；Developer Portal 不创建或保管通道。","placeholder":"<approved-out-of-band-channel-ref>","state":"UNSCHEDULED","boundValue":null},{"order":2,"id":"WINDOW_24H","label":"二十四小时执行窗口","description":"使用 ISO 8601 起止时间；窗口必须由组织批准，过期后失败关闭并重新排期。","placeholder":"<window-start-iso8601>/<window-end-iso8601>","state":"UNSCHEDULED","boundValue":null}],"checkpoints":[{"order":1,"id":"C01","label":"复核公开工具与本席输入清单","actor":"真实接收方 + 独立见证","entry":"四席执行包与接收侧七文件完整性清单均已发布","exit":"七份公开工具的 HTTP、字节数与 SHA-256 全部一致","stop":"任一公开工具漂移时停止，不得安排真实派送","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":2,"id":"C02","label":"在 Portal 外绑定六个真实角色","actor":"组织负责人","entry":"本席协调计划已下载","exit":"六个角色引用齐全且职责分离规则全部满足","stop":"任何角色缺失、冲突或由 Portal/AI 代理时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":3,"id":"C03","label":"批准带外通道与二十四小时窗口","actor":"发送方 + 接收方 + 独立见证","entry":"六角色已真实绑定","exit":"批准通道引用和 ISO 8601 起止时间形成带外记录","stop":"通道未批准、窗口超过二十四小时或已过期时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":4,"id":"C04","label":"Owner 在自有控制域运行 P02 与 P04","actor":"Owner 发送方","entry":"角色、通道和窗口全部有效","exit":"规范化公开贡献、移交清单和净化确认候选三件套齐全","stop":"出现秘密、凭据、签名、摘要漂移或预检失败时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":5,"id":"C05","label":"执行带外派送并确认真实到达","actor":"Owner 发送方 + 真实接收方 + 独立见证","entry":"三件套已在 Owner 控制域完成","exit":"接收方在窗口内确认本席三件套真实到达","stop":"不得上传到 Developer Portal；到达引用不完整时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":6,"id":"C06","label":"运行 P05 并在四席齐备后运行 P03","actor":"真实接收方 + 隔离管理员 + 独立见证","entry":"本席三件套真实到达","exit":"本席摘要重算通过；四席齐备后形成待复核 Authority Set","stop":"任一摘要不匹配、席位缺失、重复或碰撞时失败关闭","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":7,"id":"C07","label":"独立绑定 Authority 并接纳 Ballot","actor":"绑定裁决方 + Ballot 接纳方","entry":"四席 P05 与 P03 证据均可独立回读","exit":"真实 Authority Binding 与本席 Ballot 接纳证据分别形成","stop":"不得由 Portal、AI、Fixture 或未授权角色代签、代绑、代投","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null}],"kickoffBrief":"# D05 C02 AUTH 外部执行仪式启动单\n\n- 责任席位：Auth Owner\n- Owner 执行包：D05-C02-AUTH-OWNER-EXECUTION-PACKET-v1\n- 正式进度：已验收 4/36，当前第 5/36 刀，含当前剩余 32 刀\n- 真实进度：角色绑定 0/6，控制绑定 0/2，检查点完成 0/7，外部事实 0/1\n\n## 必须在 Portal 外绑定的角色\n- [ ] Owner 发送方：<owner-sender-ref>\n- [ ] 真实接收方：<receiver-ref>\n- [ ] 独立见证：<independent-witness-ref>\n- [ ] 隔离管理员：<quarantine-operator-ref>\n- [ ] 绑定裁决方：<binding-authority-ref>\n- [ ] Ballot 接纳方：<ballot-acceptor-ref>\n\n## 必须在 Portal 外批准的控制\n- [ ] 批准的带外通道：<approved-out-of-band-channel-ref>\n- [ ] 二十四小时执行窗口：<window-start-iso8601>/<window-end-iso8601>\n\n## 本席三件公开材料\n- [ ] auth.normalized-owner-authority-contribution.json\n- [ ] auth.unsigned-transfer-manifest.json\n- [ ] auth.sanitized-custody-ack-template.json\n\n## 七个检查点\n- [ ] C01 复核公开工具与本席输入清单；停止条件：任一公开工具漂移时停止，不得安排真实派送\n- [ ] C02 在 Portal 外绑定六个真实角色；停止条件：任何角色缺失、冲突或由 Portal/AI 代理时停止\n- [ ] C03 批准带外通道与二十四小时窗口；停止条件：通道未批准、窗口超过二十四小时或已过期时停止\n- [ ] C04 Owner 在自有控制域运行 P02 与 P04；停止条件：出现秘密、凭据、签名、摘要漂移或预检失败时停止\n- [ ] C05 执行带外派送并确认真实到达；停止条件：不得上传到 Developer Portal；到达引用不完整时停止\n- [ ] C06 运行 P05 并在四席齐备后运行 P03；停止条件：任一摘要不匹配、席位缺失、重复或碰撞时失败关闭\n- [ ] C07 独立绑定 Authority 并接纳 Ballot；停止条件：不得由 Portal、AI、Fixture 或未授权角色代签、代绑、代投\n\n> 此启动单不含真实人员、通道、时间、签名、凭据或证据。填写与执行必须在组织批准的外部控制域完成。","effects":{"rolesBound":0,"controlsBound":0,"checkpointsCompleted":0,"dispatched":false,"arrived":false,"rehashed":false,"quarantined":false,"authorityBound":false,"ballotAccepted":false,"productionEffect":false,"formalAdvance":false}},{"planId":"D05-C02-SECURITY-EXTERNAL-CEREMONY-PLAN-v1","sequence":2,"ownerId":"SECURITY","owner":"Security Owner","responsibility":"算法、密钥用途与拒绝边界","state":"PLAN_READY_EXTERNAL_BINDINGS_REQUIRED","packetRefs":{"ownerExecutionPacket":"D05-C02-SECURITY-OWNER-EXECUTION-PACKET-v1","ownerStartHref":"/handoff/auth-s08-r02-c02/security-owner-authority-contribution.template.json","receiverLane":"D05-C02-SECURITY-RECEIVER-LANE-v1","receiverHref":"/d05-auth-receiver-intake-rehash"},"expectedInboundFiles":[{"filename":"security.normalized-owner-authority-contribution.json","source":"P02","contains":"规范化公开贡献","state":"NOT_RECEIVED"},{"filename":"security.unsigned-transfer-manifest.json","source":"P04","contains":"贡献摘要、席位、批准通道、双方引用与窗口","state":"NOT_RECEIVED"},{"filename":"security.sanitized-custody-ack-template.json","source":"P04","contains":"等待真实接收方填写的净化确认候选","state":"NOT_RECEIVED"}],"roleSlots":[{"order":1,"id":"OWNER_SENDER","label":"Owner 发送方","responsibility":"在本席自有控制域运行 P02 与 P04，并通过批准的带外通道派送三件公开材料。","placeholder":"<owner-sender-ref>","separationWith":["RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":2,"id":"RECEIVER","label":"真实接收方","responsibility":"确认带外来源、接收三件套，并使用 P05 独立重算摘要。","placeholder":"<receiver-ref>","separationWith":["OWNER_SENDER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":3,"id":"INDEPENDENT_WITNESS","label":"独立见证","responsibility":"见证角色分离、批准通道、二十四小时窗口、到达和摘要比对，不代替执行。","placeholder":"<independent-witness-ref>","separationWith":["OWNER_SENDER","RECEIVER","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":4,"id":"QUARANTINE_OPERATOR","label":"隔离管理员","responsibility":"在四席分别通过 P05 后运行 P03，保持席位隔离并拒绝缺席、重复或碰撞。","placeholder":"<quarantine-operator-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":5,"id":"BINDING_AUTHORITY","label":"绑定裁决方","responsibility":"独立复核待定 Authority Set，并决定是否形成真实 Authority Binding。","placeholder":"<binding-authority-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":6,"id":"BALLOT_ACCEPTOR","label":"Ballot 接纳方","responsibility":"只在绑定、独立回读和准入条件满足后接纳本席真实 Ballot。","placeholder":"<ballot-acceptor-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY"],"state":"UNASSIGNED","assignedRef":null}],"controlSlots":[{"order":1,"id":"APPROVED_CHANNEL_REF","label":"批准的带外通道","description":"由真实发送方、接收方和独立见证共同确认；Developer Portal 不创建或保管通道。","placeholder":"<approved-out-of-band-channel-ref>","state":"UNSCHEDULED","boundValue":null},{"order":2,"id":"WINDOW_24H","label":"二十四小时执行窗口","description":"使用 ISO 8601 起止时间；窗口必须由组织批准，过期后失败关闭并重新排期。","placeholder":"<window-start-iso8601>/<window-end-iso8601>","state":"UNSCHEDULED","boundValue":null}],"checkpoints":[{"order":1,"id":"C01","label":"复核公开工具与本席输入清单","actor":"真实接收方 + 独立见证","entry":"四席执行包与接收侧七文件完整性清单均已发布","exit":"七份公开工具的 HTTP、字节数与 SHA-256 全部一致","stop":"任一公开工具漂移时停止，不得安排真实派送","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":2,"id":"C02","label":"在 Portal 外绑定六个真实角色","actor":"组织负责人","entry":"本席协调计划已下载","exit":"六个角色引用齐全且职责分离规则全部满足","stop":"任何角色缺失、冲突或由 Portal/AI 代理时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":3,"id":"C03","label":"批准带外通道与二十四小时窗口","actor":"发送方 + 接收方 + 独立见证","entry":"六角色已真实绑定","exit":"批准通道引用和 ISO 8601 起止时间形成带外记录","stop":"通道未批准、窗口超过二十四小时或已过期时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":4,"id":"C04","label":"Owner 在自有控制域运行 P02 与 P04","actor":"Owner 发送方","entry":"角色、通道和窗口全部有效","exit":"规范化公开贡献、移交清单和净化确认候选三件套齐全","stop":"出现秘密、凭据、签名、摘要漂移或预检失败时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":5,"id":"C05","label":"执行带外派送并确认真实到达","actor":"Owner 发送方 + 真实接收方 + 独立见证","entry":"三件套已在 Owner 控制域完成","exit":"接收方在窗口内确认本席三件套真实到达","stop":"不得上传到 Developer Portal；到达引用不完整时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":6,"id":"C06","label":"运行 P05 并在四席齐备后运行 P03","actor":"真实接收方 + 隔离管理员 + 独立见证","entry":"本席三件套真实到达","exit":"本席摘要重算通过；四席齐备后形成待复核 Authority Set","stop":"任一摘要不匹配、席位缺失、重复或碰撞时失败关闭","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":7,"id":"C07","label":"独立绑定 Authority 并接纳 Ballot","actor":"绑定裁决方 + Ballot 接纳方","entry":"四席 P05 与 P03 证据均可独立回读","exit":"真实 Authority Binding 与本席 Ballot 接纳证据分别形成","stop":"不得由 Portal、AI、Fixture 或未授权角色代签、代绑、代投","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null}],"kickoffBrief":"# D05 C02 SECURITY 外部执行仪式启动单\n\n- 责任席位：Security Owner\n- Owner 执行包：D05-C02-SECURITY-OWNER-EXECUTION-PACKET-v1\n- 正式进度：已验收 4/36，当前第 5/36 刀，含当前剩余 32 刀\n- 真实进度：角色绑定 0/6，控制绑定 0/2，检查点完成 0/7，外部事实 0/1\n\n## 必须在 Portal 外绑定的角色\n- [ ] Owner 发送方：<owner-sender-ref>\n- [ ] 真实接收方：<receiver-ref>\n- [ ] 独立见证：<independent-witness-ref>\n- [ ] 隔离管理员：<quarantine-operator-ref>\n- [ ] 绑定裁决方：<binding-authority-ref>\n- [ ] Ballot 接纳方：<ballot-acceptor-ref>\n\n## 必须在 Portal 外批准的控制\n- [ ] 批准的带外通道：<approved-out-of-band-channel-ref>\n- [ ] 二十四小时执行窗口：<window-start-iso8601>/<window-end-iso8601>\n\n## 本席三件公开材料\n- [ ] security.normalized-owner-authority-contribution.json\n- [ ] security.unsigned-transfer-manifest.json\n- [ ] security.sanitized-custody-ack-template.json\n\n## 七个检查点\n- [ ] C01 复核公开工具与本席输入清单；停止条件：任一公开工具漂移时停止，不得安排真实派送\n- [ ] C02 在 Portal 外绑定六个真实角色；停止条件：任何角色缺失、冲突或由 Portal/AI 代理时停止\n- [ ] C03 批准带外通道与二十四小时窗口；停止条件：通道未批准、窗口超过二十四小时或已过期时停止\n- [ ] C04 Owner 在自有控制域运行 P02 与 P04；停止条件：出现秘密、凭据、签名、摘要漂移或预检失败时停止\n- [ ] C05 执行带外派送并确认真实到达；停止条件：不得上传到 Developer Portal；到达引用不完整时停止\n- [ ] C06 运行 P05 并在四席齐备后运行 P03；停止条件：任一摘要不匹配、席位缺失、重复或碰撞时失败关闭\n- [ ] C07 独立绑定 Authority 并接纳 Ballot；停止条件：不得由 Portal、AI、Fixture 或未授权角色代签、代绑、代投\n\n> 此启动单不含真实人员、通道、时间、签名、凭据或证据。填写与执行必须在组织批准的外部控制域完成。","effects":{"rolesBound":0,"controlsBound":0,"checkpointsCompleted":0,"dispatched":false,"arrived":false,"rehashed":false,"quarantined":false,"authorityBound":false,"ballotAccepted":false,"productionEffect":false,"formalAdvance":false}},{"planId":"D05-C02-SRE_DBA-EXTERNAL-CEREMONY-PLAN-v1","sequence":3,"ownerId":"SRE_DBA","owner":"SRE / DBA Owner","responsibility":"运行、存储与恢复边界","state":"PLAN_READY_EXTERNAL_BINDINGS_REQUIRED","packetRefs":{"ownerExecutionPacket":"D05-C02-SRE_DBA-OWNER-EXECUTION-PACKET-v1","ownerStartHref":"/handoff/auth-s08-r02-c02/sre-dba-owner-authority-contribution.template.json","receiverLane":"D05-C02-SRE_DBA-RECEIVER-LANE-v1","receiverHref":"/d05-auth-receiver-intake-rehash"},"expectedInboundFiles":[{"filename":"sre-dba.normalized-owner-authority-contribution.json","source":"P02","contains":"规范化公开贡献","state":"NOT_RECEIVED"},{"filename":"sre-dba.unsigned-transfer-manifest.json","source":"P04","contains":"贡献摘要、席位、批准通道、双方引用与窗口","state":"NOT_RECEIVED"},{"filename":"sre-dba.sanitized-custody-ack-template.json","source":"P04","contains":"等待真实接收方填写的净化确认候选","state":"NOT_RECEIVED"}],"roleSlots":[{"order":1,"id":"OWNER_SENDER","label":"Owner 发送方","responsibility":"在本席自有控制域运行 P02 与 P04，并通过批准的带外通道派送三件公开材料。","placeholder":"<owner-sender-ref>","separationWith":["RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":2,"id":"RECEIVER","label":"真实接收方","responsibility":"确认带外来源、接收三件套，并使用 P05 独立重算摘要。","placeholder":"<receiver-ref>","separationWith":["OWNER_SENDER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":3,"id":"INDEPENDENT_WITNESS","label":"独立见证","responsibility":"见证角色分离、批准通道、二十四小时窗口、到达和摘要比对，不代替执行。","placeholder":"<independent-witness-ref>","separationWith":["OWNER_SENDER","RECEIVER","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":4,"id":"QUARANTINE_OPERATOR","label":"隔离管理员","responsibility":"在四席分别通过 P05 后运行 P03，保持席位隔离并拒绝缺席、重复或碰撞。","placeholder":"<quarantine-operator-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":5,"id":"BINDING_AUTHORITY","label":"绑定裁决方","responsibility":"独立复核待定 Authority Set，并决定是否形成真实 Authority Binding。","placeholder":"<binding-authority-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":6,"id":"BALLOT_ACCEPTOR","label":"Ballot 接纳方","responsibility":"只在绑定、独立回读和准入条件满足后接纳本席真实 Ballot。","placeholder":"<ballot-acceptor-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY"],"state":"UNASSIGNED","assignedRef":null}],"controlSlots":[{"order":1,"id":"APPROVED_CHANNEL_REF","label":"批准的带外通道","description":"由真实发送方、接收方和独立见证共同确认；Developer Portal 不创建或保管通道。","placeholder":"<approved-out-of-band-channel-ref>","state":"UNSCHEDULED","boundValue":null},{"order":2,"id":"WINDOW_24H","label":"二十四小时执行窗口","description":"使用 ISO 8601 起止时间；窗口必须由组织批准，过期后失败关闭并重新排期。","placeholder":"<window-start-iso8601>/<window-end-iso8601>","state":"UNSCHEDULED","boundValue":null}],"checkpoints":[{"order":1,"id":"C01","label":"复核公开工具与本席输入清单","actor":"真实接收方 + 独立见证","entry":"四席执行包与接收侧七文件完整性清单均已发布","exit":"七份公开工具的 HTTP、字节数与 SHA-256 全部一致","stop":"任一公开工具漂移时停止，不得安排真实派送","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":2,"id":"C02","label":"在 Portal 外绑定六个真实角色","actor":"组织负责人","entry":"本席协调计划已下载","exit":"六个角色引用齐全且职责分离规则全部满足","stop":"任何角色缺失、冲突或由 Portal/AI 代理时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":3,"id":"C03","label":"批准带外通道与二十四小时窗口","actor":"发送方 + 接收方 + 独立见证","entry":"六角色已真实绑定","exit":"批准通道引用和 ISO 8601 起止时间形成带外记录","stop":"通道未批准、窗口超过二十四小时或已过期时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":4,"id":"C04","label":"Owner 在自有控制域运行 P02 与 P04","actor":"Owner 发送方","entry":"角色、通道和窗口全部有效","exit":"规范化公开贡献、移交清单和净化确认候选三件套齐全","stop":"出现秘密、凭据、签名、摘要漂移或预检失败时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":5,"id":"C05","label":"执行带外派送并确认真实到达","actor":"Owner 发送方 + 真实接收方 + 独立见证","entry":"三件套已在 Owner 控制域完成","exit":"接收方在窗口内确认本席三件套真实到达","stop":"不得上传到 Developer Portal；到达引用不完整时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":6,"id":"C06","label":"运行 P05 并在四席齐备后运行 P03","actor":"真实接收方 + 隔离管理员 + 独立见证","entry":"本席三件套真实到达","exit":"本席摘要重算通过；四席齐备后形成待复核 Authority Set","stop":"任一摘要不匹配、席位缺失、重复或碰撞时失败关闭","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":7,"id":"C07","label":"独立绑定 Authority 并接纳 Ballot","actor":"绑定裁决方 + Ballot 接纳方","entry":"四席 P05 与 P03 证据均可独立回读","exit":"真实 Authority Binding 与本席 Ballot 接纳证据分别形成","stop":"不得由 Portal、AI、Fixture 或未授权角色代签、代绑、代投","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null}],"kickoffBrief":"# D05 C02 SRE_DBA 外部执行仪式启动单\n\n- 责任席位：SRE / DBA Owner\n- Owner 执行包：D05-C02-SRE_DBA-OWNER-EXECUTION-PACKET-v1\n- 正式进度：已验收 4/36，当前第 5/36 刀，含当前剩余 32 刀\n- 真实进度：角色绑定 0/6，控制绑定 0/2，检查点完成 0/7，外部事实 0/1\n\n## 必须在 Portal 外绑定的角色\n- [ ] Owner 发送方：<owner-sender-ref>\n- [ ] 真实接收方：<receiver-ref>\n- [ ] 独立见证：<independent-witness-ref>\n- [ ] 隔离管理员：<quarantine-operator-ref>\n- [ ] 绑定裁决方：<binding-authority-ref>\n- [ ] Ballot 接纳方：<ballot-acceptor-ref>\n\n## 必须在 Portal 外批准的控制\n- [ ] 批准的带外通道：<approved-out-of-band-channel-ref>\n- [ ] 二十四小时执行窗口：<window-start-iso8601>/<window-end-iso8601>\n\n## 本席三件公开材料\n- [ ] sre-dba.normalized-owner-authority-contribution.json\n- [ ] sre-dba.unsigned-transfer-manifest.json\n- [ ] sre-dba.sanitized-custody-ack-template.json\n\n## 七个检查点\n- [ ] C01 复核公开工具与本席输入清单；停止条件：任一公开工具漂移时停止，不得安排真实派送\n- [ ] C02 在 Portal 外绑定六个真实角色；停止条件：任何角色缺失、冲突或由 Portal/AI 代理时停止\n- [ ] C03 批准带外通道与二十四小时窗口；停止条件：通道未批准、窗口超过二十四小时或已过期时停止\n- [ ] C04 Owner 在自有控制域运行 P02 与 P04；停止条件：出现秘密、凭据、签名、摘要漂移或预检失败时停止\n- [ ] C05 执行带外派送并确认真实到达；停止条件：不得上传到 Developer Portal；到达引用不完整时停止\n- [ ] C06 运行 P05 并在四席齐备后运行 P03；停止条件：任一摘要不匹配、席位缺失、重复或碰撞时失败关闭\n- [ ] C07 独立绑定 Authority 并接纳 Ballot；停止条件：不得由 Portal、AI、Fixture 或未授权角色代签、代绑、代投\n\n> 此启动单不含真实人员、通道、时间、签名、凭据或证据。填写与执行必须在组织批准的外部控制域完成。","effects":{"rolesBound":0,"controlsBound":0,"checkpointsCompleted":0,"dispatched":false,"arrived":false,"rehashed":false,"quarantined":false,"authorityBound":false,"ballotAccepted":false,"productionEffect":false,"formalAdvance":false}},{"planId":"D05-C02-QA_WITNESS-EXTERNAL-CEREMONY-PLAN-v1","sequence":4,"ownerId":"QA_WITNESS","owner":"QA Witness","responsibility":"独立见证与负向验收","state":"PLAN_READY_EXTERNAL_BINDINGS_REQUIRED","packetRefs":{"ownerExecutionPacket":"D05-C02-QA_WITNESS-OWNER-EXECUTION-PACKET-v1","ownerStartHref":"/handoff/auth-s08-r02-c02/qa-witness-owner-authority-contribution.template.json","receiverLane":"D05-C02-QA_WITNESS-RECEIVER-LANE-v1","receiverHref":"/d05-auth-receiver-intake-rehash"},"expectedInboundFiles":[{"filename":"qa-witness.normalized-owner-authority-contribution.json","source":"P02","contains":"规范化公开贡献","state":"NOT_RECEIVED"},{"filename":"qa-witness.unsigned-transfer-manifest.json","source":"P04","contains":"贡献摘要、席位、批准通道、双方引用与窗口","state":"NOT_RECEIVED"},{"filename":"qa-witness.sanitized-custody-ack-template.json","source":"P04","contains":"等待真实接收方填写的净化确认候选","state":"NOT_RECEIVED"}],"roleSlots":[{"order":1,"id":"OWNER_SENDER","label":"Owner 发送方","responsibility":"在本席自有控制域运行 P02 与 P04，并通过批准的带外通道派送三件公开材料。","placeholder":"<owner-sender-ref>","separationWith":["RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":2,"id":"RECEIVER","label":"真实接收方","responsibility":"确认带外来源、接收三件套，并使用 P05 独立重算摘要。","placeholder":"<receiver-ref>","separationWith":["OWNER_SENDER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":3,"id":"INDEPENDENT_WITNESS","label":"独立见证","responsibility":"见证角色分离、批准通道、二十四小时窗口、到达和摘要比对，不代替执行。","placeholder":"<independent-witness-ref>","separationWith":["OWNER_SENDER","RECEIVER","QUARANTINE_OPERATOR","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":4,"id":"QUARANTINE_OPERATOR","label":"隔离管理员","responsibility":"在四席分别通过 P05 后运行 P03，保持席位隔离并拒绝缺席、重复或碰撞。","placeholder":"<quarantine-operator-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","BINDING_AUTHORITY","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":5,"id":"BINDING_AUTHORITY","label":"绑定裁决方","responsibility":"独立复核待定 Authority Set，并决定是否形成真实 Authority Binding。","placeholder":"<binding-authority-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BALLOT_ACCEPTOR"],"state":"UNASSIGNED","assignedRef":null},{"order":6,"id":"BALLOT_ACCEPTOR","label":"Ballot 接纳方","responsibility":"只在绑定、独立回读和准入条件满足后接纳本席真实 Ballot。","placeholder":"<ballot-acceptor-ref>","separationWith":["OWNER_SENDER","RECEIVER","INDEPENDENT_WITNESS","QUARANTINE_OPERATOR","BINDING_AUTHORITY"],"state":"UNASSIGNED","assignedRef":null}],"controlSlots":[{"order":1,"id":"APPROVED_CHANNEL_REF","label":"批准的带外通道","description":"由真实发送方、接收方和独立见证共同确认；Developer Portal 不创建或保管通道。","placeholder":"<approved-out-of-band-channel-ref>","state":"UNSCHEDULED","boundValue":null},{"order":2,"id":"WINDOW_24H","label":"二十四小时执行窗口","description":"使用 ISO 8601 起止时间；窗口必须由组织批准，过期后失败关闭并重新排期。","placeholder":"<window-start-iso8601>/<window-end-iso8601>","state":"UNSCHEDULED","boundValue":null}],"checkpoints":[{"order":1,"id":"C01","label":"复核公开工具与本席输入清单","actor":"真实接收方 + 独立见证","entry":"四席执行包与接收侧七文件完整性清单均已发布","exit":"七份公开工具的 HTTP、字节数与 SHA-256 全部一致","stop":"任一公开工具漂移时停止，不得安排真实派送","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":2,"id":"C02","label":"在 Portal 外绑定六个真实角色","actor":"组织负责人","entry":"本席协调计划已下载","exit":"六个角色引用齐全且职责分离规则全部满足","stop":"任何角色缺失、冲突或由 Portal/AI 代理时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":3,"id":"C03","label":"批准带外通道与二十四小时窗口","actor":"发送方 + 接收方 + 独立见证","entry":"六角色已真实绑定","exit":"批准通道引用和 ISO 8601 起止时间形成带外记录","stop":"通道未批准、窗口超过二十四小时或已过期时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":4,"id":"C04","label":"Owner 在自有控制域运行 P02 与 P04","actor":"Owner 发送方","entry":"角色、通道和窗口全部有效","exit":"规范化公开贡献、移交清单和净化确认候选三件套齐全","stop":"出现秘密、凭据、签名、摘要漂移或预检失败时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":5,"id":"C05","label":"执行带外派送并确认真实到达","actor":"Owner 发送方 + 真实接收方 + 独立见证","entry":"三件套已在 Owner 控制域完成","exit":"接收方在窗口内确认本席三件套真实到达","stop":"不得上传到 Developer Portal；到达引用不完整时停止","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":6,"id":"C06","label":"运行 P05 并在四席齐备后运行 P03","actor":"真实接收方 + 隔离管理员 + 独立见证","entry":"本席三件套真实到达","exit":"本席摘要重算通过；四席齐备后形成待复核 Authority Set","stop":"任一摘要不匹配、席位缺失、重复或碰撞时失败关闭","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null},{"order":7,"id":"C07","label":"独立绑定 Authority 并接纳 Ballot","actor":"绑定裁决方 + Ballot 接纳方","entry":"四席 P05 与 P03 证据均可独立回读","exit":"真实 Authority Binding 与本席 Ballot 接纳证据分别形成","stop":"不得由 Portal、AI、Fixture 或未授权角色代签、代绑、代投","state":"HELD_EXTERNAL_ASSIGNMENT_REQUIRED","evidenceRef":null}],"kickoffBrief":"# D05 C02 QA_WITNESS 外部执行仪式启动单\n\n- 责任席位：QA Witness\n- Owner 执行包：D05-C02-QA_WITNESS-OWNER-EXECUTION-PACKET-v1\n- 正式进度：已验收 4/36，当前第 5/36 刀，含当前剩余 32 刀\n- 真实进度：角色绑定 0/6，控制绑定 0/2，检查点完成 0/7，外部事实 0/1\n\n## 必须在 Portal 外绑定的角色\n- [ ] Owner 发送方：<owner-sender-ref>\n- [ ] 真实接收方：<receiver-ref>\n- [ ] 独立见证：<independent-witness-ref>\n- [ ] 隔离管理员：<quarantine-operator-ref>\n- [ ] 绑定裁决方：<binding-authority-ref>\n- [ ] Ballot 接纳方：<ballot-acceptor-ref>\n\n## 必须在 Portal 外批准的控制\n- [ ] 批准的带外通道：<approved-out-of-band-channel-ref>\n- [ ] 二十四小时执行窗口：<window-start-iso8601>/<window-end-iso8601>\n\n## 本席三件公开材料\n- [ ] qa-witness.normalized-owner-authority-contribution.json\n- [ ] qa-witness.unsigned-transfer-manifest.json\n- [ ] qa-witness.sanitized-custody-ack-template.json\n\n## 七个检查点\n- [ ] C01 复核公开工具与本席输入清单；停止条件：任一公开工具漂移时停止，不得安排真实派送\n- [ ] C02 在 Portal 外绑定六个真实角色；停止条件：任何角色缺失、冲突或由 Portal/AI 代理时停止\n- [ ] C03 批准带外通道与二十四小时窗口；停止条件：通道未批准、窗口超过二十四小时或已过期时停止\n- [ ] C04 Owner 在自有控制域运行 P02 与 P04；停止条件：出现秘密、凭据、签名、摘要漂移或预检失败时停止\n- [ ] C05 执行带外派送并确认真实到达；停止条件：不得上传到 Developer Portal；到达引用不完整时停止\n- [ ] C06 运行 P05 并在四席齐备后运行 P03；停止条件：任一摘要不匹配、席位缺失、重复或碰撞时失败关闭\n- [ ] C07 独立绑定 Authority 并接纳 Ballot；停止条件：不得由 Portal、AI、Fixture 或未授权角色代签、代绑、代投\n\n> 此启动单不含真实人员、通道、时间、签名、凭据或证据。填写与执行必须在组织批准的外部控制域完成。","effects":{"rolesBound":0,"controlsBound":0,"checkpointsCompleted":0,"dispatched":false,"arrived":false,"rehashed":false,"quarantined":false,"authorityBound":false,"ballotAccepted":false,"productionEffect":false,"formalAdvance":false}}],"zeroFactRule":"协调计划 READY 只表示角色位、通道位、窗口位和检查点已定义；所有真实绑定与外部事实继续为零，正式验收保持 4/36、当前第 5/36 刀。","nextRequiredEvent":"F05-06 已提供 Authority 最终接管与 D05 验收包八步交接面；下一真实事件仍是四席先完成 F05-04/F05-05 外部执行并形成候选，再由 Portal 外独立 Authority 接管、四席重算、绑定、铸造正式摘要和收取四票。完成前候选 0/1、Authority 0/4、Ballot 0/4、验收包 0/1、G03 STALE。","truthRule":"正式计划当前仍是第 5/36 刀；F05 内部六个 UI/合同子切片已完成 6/6，这只代表开发交接面齐备，不等于第 5 刀被正式验收。没有真实候选、四席独立 Authority、正式摘要、四份 Ballot 与 D05 正式验收回执，就不能把正式已验收从 4/36 改为 5/36。"}