{"schemaVersion":"developer.reits.tech/runner-factory-controller-activation-transaction-executor/v1","status":"ACTIVATION_TRANSACTION_EXECUTOR_IMPLEMENTED_NOT_CONFIGURED","observedAt":"2026-07-21T05:00:00Z","scope":{"mode":"IN_MEMORY_TEST_DRIVER_ONLY","input":"AUTHORITY_VERIFIED_TEST_ONLY_ACTIVATION_PLAN_AND_30_SECOND_FIXTURE_REQUEST","output":"DIGEST_BOUND_COMMIT_ROLLBACK_OR_CONTAINMENT_RECEIPT","endpoint":"127.0.0.1:8110","requestValiditySeconds":30,"rollbackDeadlineSeconds":60,"networkAuthority":"NONE","deploymentAuthority":"NONE","productionEntrypointWired":false},"truth":{"productionActivationPlanReceipts":0,"productionTransactionRequests":0,"productionExecutorsConfigured":0,"systemdUnitsInstalled":0,"controllerServicesStarted":0,"controllerListeners":0,"listenerStarts":0,"publicRoutes":0,"reverseProxyRoutes":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0,"paidResourcesCreated":false,"deploymentPermitted":false},"ports":[{"id":"acquireLock","operation":"ACQUIRE_LOCK","authority":"fixture-driver-only"},{"id":"snapshotRollback","operation":"SNAPSHOT_ROLLBACK","authority":"fixture-driver-only"},{"id":"installUnit","operation":"INSTALL_UNIT","authority":"fixture-driver-only"},{"id":"startLoopback","operation":"START_LOOPBACK","authority":"fixture-driver-only"},{"id":"probeHealth","operation":"PROBE_HEALTH_OR_READY","authority":"fixture-driver-only"},{"id":"stopLoopback","operation":"STOP_LOOPBACK","authority":"fixture-driver-only"},{"id":"removeUnit","operation":"REMOVE_UNIT","authority":"fixture-driver-only"},{"id":"restoreSnapshot","operation":"RESTORE_SNAPSHOT","authority":"fixture-driver-only"},{"id":"releaseLock","operation":"RELEASE_LOCK","authority":"fixture-driver-only"}],"operations":[{"id":"prepare","guard":"revalidate the exact zero-authority activation plan and a 30-second fixture-only request","result":"opaque one-shot transaction handle"},{"id":"execute","guard":"consume the handle once and invoke only the nine typed driver ports","result":"committed, rolled-back or contained fixture receipt"},{"id":"verify","guard":"reconstruct transaction identity, result shape and production-zero truth","result":"boolean receipt validation"},{"id":"dispose","guard":"revoke retained transaction state before execution","result":"idempotent disposal receipt"}],"forwardSequence":["ACQUIRE_LOCK","SNAPSHOT_ROLLBACK","INSTALL_UNIT","START_LOOPBACK","PROBE_HEALTH","PROBE_READY","RELEASE_LOCK"],"compensationSequence":["STOP_LOOPBACK","REMOVE_UNIT","RESTORE_SNAPSHOT","RELEASE_LOCK"],"stateModel":[{"id":"UNTRUSTED","meaning":"the packet has no transaction standing"},{"id":"PLAN_BOUND","meaning":"the authoritative fixture-only plan is exact and current"},{"id":"PREPARED","meaning":"one opaque 30-second fixture capability exists"},{"id":"LOCKED","meaning":"the in-memory host fence was acquired"},{"id":"SNAPSHOTTED","meaning":"the in-memory rollback state was captured"},{"id":"UNIT_INSTALLED_FIXTURE","meaning":"the digest-bound unit exists only inside the memory driver"},{"id":"LOOPBACK_STARTED_FIXTURE","meaning":"the memory driver reports only 127.0.0.1:8110"},{"id":"HEALTHY_FIXTURE","meaning":"both fixture health paths positively verified"},{"id":"COMMITTED_FIXTURE","meaning":"the success receipt is test-only and grants no production authority"},{"id":"ROLLED_BACK_FIXTURE","meaning":"reverse-order compensation proved a clean memory state"},{"id":"CONTAINED_FIXTURE","meaning":"ambiguous compensation is sealed for manual review without production effect"},{"id":"DENIED","meaning":"input, provenance, sequence or receipt drift failed closed"}],"invariants":["the upstream plan is exact, digest-bound, unexpired and positively verified by its authority","the upstream plan remains fixture-only with activationAuthorized=false","the upstream plan remains unconfigured with executorConfigured=false","the upstream plan proves no installed unit, running service or listener","the transaction action is exactly EXECUTE_FIXTURE_TRANSACTION_ONLY","the transaction mode is exactly IN_MEMORY_TEST_DRIVER","the transaction request lives no longer than 30 seconds","the transaction cannot outlive the upstream plan","release identity is unchanged from the plan","rollback release is unchanged from the plan and remains distinct","controller and host identities are unchanged from the plan","manifest, configuration and unit digests are unchanged from the plan","service user is exactly reits-runner-factory","service unit is exactly reits-runner-factory-controller.service","bind host is exactly 127.0.0.1 and port is exactly 8110","health paths are exactly /healthz then /readyz","public route and reverse proxy requests are always false","the transaction nonce is format checked and single use","secret-like and executable fields are structurally rejected","the driver exposes exactly nine named ports and no generic command port","the production entrypoint does not import or configure this executor","the opaque handle is WeakMap-backed, one-shot and disposable","lock acquisition precedes every fixture mutation","rollback snapshot precedes fixture unit installation","fixture unit installation precedes fixture loopback start","fixture loopback start precedes health and readiness probes","each driver receipt is exact, digest-bound and positively verified","each driver receipt remains bound to plan, release, host, config and unit","every driver receipt reports loopback 8110 with no route or proxy","health and readiness must both positively prove their exact paths","unit or listener identity drift triggers compensation","step verifier rejection triggers compensation","start, health and readiness failure trigger compensation","compensation stops loopback before removing the fixture unit","compensation removes the fixture unit before restoring the snapshot","the fixture lock is released after success or compensation","a clean reverse sequence seals FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK","any compensation or lock-release ambiguity seals FIXTURE_ACTIVATION_TRANSACTION_CONTAINED","a committed receipt explicitly names its in-memory fixture state","a rolled-back receipt proves snapshot, unit and listener are all absent","a contained receipt preserves the compound failure code","fixture driver calls are counted separately from production external reads and writes","fixture mutation operations are counted separately from production mutations","all production activation, executor, unit, service and listener truth remains false","external reads, writes, mutations, paid resources, proxy and public routes remain zero","the executor module imports no child process, shell or network implementation","port 8110 is never opened by this repository packet","the fixture transaction receipt cannot be promoted into production authority"],"verification":{"status":"PASS_FIXTURE_ONLY","fixtures":72,"acceptedOutcomes":18,"deniedOutcomes":54,"planReceiptsVerified":48,"fixtureStepReceiptsVerified":114,"committedTransactions":5,"rolledBackTransactions":9,"containedTransactions":4,"fixtureDriverCalls":130,"fixtureMutationOperations":30,"fixtureCompensationOperations":25,"productionActivationPlanReceipts":0,"productionExecutorsConfigured":0,"systemdUnitsInstalled":0,"controllerServicesStarted":0,"listenerStarts":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0},"productionPrerequisites":["replace the fixture-only activation plan with a newly reviewed production authority receipt","implement a target-host driver as a separate least-privilege package with no shell interpolation","bind every target-host effect receipt to an asymmetric production signer and monotonic journal","run the transaction and every compensation branch on a disposable non-production host","prove the 60-second rollback watchdog independently from the forward executor","prove systemd sandbox, filesystem ownership and configuration references on the target host","capture live negative evidence that no public route or reverse proxy exists","obtain a new two-person change authorization for the exact target-host transaction","wire the production executor only through a separately reviewed composition root","repeat EC2 inventory and port audit immediately before any production activation"],"fixtureRegistry":{"schemaVersion":"developer.reits.tech/runner-factory-controller-activation-transaction-executor-fixtures/v1","fixedTime":"2026-07-21T05:00:00.000Z","cases":[{"id":"RFATX-01","profile":"prepare","expected":"ACCEPT","outcome":"PREPARED"},{"id":"RFATX-02","profile":"execute-commit","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_COMMITTED"},{"id":"RFATX-03","profile":"verify-receipt","expected":"ACCEPT","outcome":"RECEIPT_VERIFIED"},{"id":"RFATX-04","profile":"dispose","expected":"ACCEPT","outcome":"DISPOSED"},{"id":"RFATX-05","profile":"dispose-replay","expected":"ACCEPT","outcome":"DISPOSED_REPLAY"},{"id":"RFATX-06","profile":"fail-acquire","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK"},{"id":"RFATX-07","profile":"fail-snapshot","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK"},{"id":"RFATX-08","profile":"fail-install","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK"},{"id":"RFATX-09","profile":"fail-start","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK"},{"id":"RFATX-10","profile":"fail-health","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK"},{"id":"RFATX-11","profile":"fail-ready","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK"},{"id":"RFATX-12","profile":"compensate-stop-contained","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_CONTAINED"},{"id":"RFATX-13","profile":"compensate-remove-contained","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_CONTAINED"},{"id":"RFATX-14","profile":"compensate-restore-contained","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_CONTAINED"},{"id":"RFATX-15","profile":"drift-install","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK"},{"id":"RFATX-16","profile":"drift-start","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK"},{"id":"RFATX-17","profile":"verifier-reject-start","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_ROLLED_BACK"},{"id":"RFATX-18","profile":"fail-release-contained","expected":"ACCEPT","outcome":"FIXTURE_ACTIVATION_TRANSACTION_CONTAINED"},{"id":"RFATX-19","profile":"missing-plan-verifier","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_DEPENDENCIES"},{"id":"RFATX-20","profile":"missing-step-verifier","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_DEPENDENCIES"},{"id":"RFATX-21","profile":"driver-missing-port","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_DEPENDENCIES"},{"id":"RFATX-22","profile":"driver-extra-port","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_DEPENDENCIES"},{"id":"RFATX-23","profile":"invalid-clock","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_CLOCK"},{"id":"RFATX-24","profile":"plan-status","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-25","profile":"plan-expired","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-26","profile":"plan-digest","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN_DIGEST"},{"id":"RFATX-27","profile":"plan-id","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN_DIGEST"},{"id":"RFATX-28","profile":"plan-release-format","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-29","profile":"plan-same-rollback","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-30","profile":"plan-bind","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-31","profile":"plan-port","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-32","profile":"plan-authority","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-33","profile":"plan-executor","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-34","profile":"plan-unit","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-35","profile":"plan-service","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-36","profile":"plan-listener","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-37","profile":"plan-route","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-38","profile":"plan-proxy","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-39","profile":"plan-executable-steps","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-40","profile":"plan-external-write","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN"},{"id":"RFATX-41","profile":"plan-prohibited","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_EXECUTABLE_MATERIAL"},{"id":"RFATX-42","profile":"plan-provenance","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN_PROVENANCE"},{"id":"RFATX-43","profile":"plan-provenance-throws","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_PLAN_PROVENANCE"},{"id":"RFATX-44","profile":"request-action","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-45","profile":"request-mode","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-46","profile":"request-plan-id","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-47","profile":"request-plan-receipt","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-48","profile":"request-release","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-49","profile":"request-rollback","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-50","profile":"request-controller","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-51","profile":"request-host","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-52","profile":"request-manifest","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-53","profile":"request-config","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-54","profile":"request-unit","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-55","profile":"request-user","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-56","profile":"request-unit-name","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-57","profile":"request-bind","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-58","profile":"request-port","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-59","profile":"request-paths","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-60","profile":"request-route","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-61","profile":"request-proxy","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-62","profile":"request-nonce","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-63","profile":"request-expired","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-64","profile":"request-too-long","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-65","profile":"request-beyond-plan","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_REQUEST"},{"id":"RFATX-66","profile":"request-prohibited","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_EXECUTABLE_MATERIAL"},{"id":"RFATX-67","profile":"forged-handle","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_HANDLE"},{"id":"RFATX-68","profile":"execute-replay","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_HANDLE"},{"id":"RFATX-69","profile":"execute-after-dispose","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_HANDLE"},{"id":"RFATX-70","profile":"receipt-status","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_RECEIPT"},{"id":"RFATX-71","profile":"receipt-digest","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_RECEIPT_DIGEST"},{"id":"RFATX-72","profile":"nonce-replay","expected":"DENY","errorCode":"RF_ACTIVATION_TRANSACTION_NONCE"}]},"discovery":{"controller":"/api/runner-factory/controller","lifecycle":"/api/runner-factory","upstream":"/api/runner-factory/controller/activation-executor","workbench":"/release-foundation#activation-transaction","schema":"/schemas/runner-factory-controller-activation-transaction-executor.v1.schema.json"}}