{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-conformance-admission/v1","status":"DISPOSABLE_HOST_CONFORMANCE_ADMISSION_IMPLEMENTED_NOT_CONFIGURED","observedAt":"2026-07-21T07:00:00Z","scope":{"mode":"PLAN_ADMISSION_ONLY_NO_HOST_EXECUTION","input":"EXACT_DRIVER_QUALIFICATION_HOST_PROFILE_PLAN_AND_EMPTY_EVIDENCE_MANIFEST","output":"TEST_ONLY_DISPOSABLE_HOST_CONFORMANCE_PLAN_ADMISSION_RECEIPT","hostProvisioned":false,"packageLoaded":false,"driverExecuted":false,"watchdogStarted":false,"networkAuthority":"NONE","deploymentAuthority":"NONE","productionEntrypointWired":false},"truth":{"productionHostClaims":0,"productionCandidatePackages":0,"productionDriversConfigured":0,"systemdUnitsInstalled":0,"controllerServicesStarted":0,"controllerListeners":0,"listenerStarts":0,"publicRoutes":0,"reverseProxyRoutes":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0,"paidResourcesCreated":false,"deploymentPermitted":false},"operations":[{"id":"prepare","guard":"verify exact upstream qualification, isolated host profile, frozen plan and empty evidence manifest","result":"opaque one-shot admission handle"},{"id":"admit","guard":"consume the handle without provisioning a host or loading a package","result":"test-only conformance-plan admission receipt"},{"id":"verify","guard":"recompute admission identity and zero-execution counters","result":"boolean receipt validation"},{"id":"dispose","guard":"revoke an unused admission handle","result":"idempotent disposal receipt"}],"hostProfile":{"provider":"AWS_EC2_DISPOSABLE_TEST_HOST","environment":"NON_PRODUCTION_CONFORMANCE","platform":"linux/amd64","lifecycle":"ONE_PLAN_ONE_HOST_TERMINATE","productionAccount":false,"productionVpc":false,"publicIp":false,"ipv6":false,"ingressRules":0,"productionRoute":false,"peering":false,"instanceProfile":false,"imdsEnabled":false,"artifactDelivery":"PRESTAGED_IMMUTABLE_IMAGE","encryptedRootVolume":true,"deleteOnTermination":true,"productionHostMarkerExpected":false,"serviceUser":"reits-runner-factory","unitName":"reits-runner-factory-controller.service","endpoint":"127.0.0.1:8110"},"phases":[{"ordinal":1,"id":"claimHost","evidenceType":"HOST_CLAIM","state":"PLANNED_NOT_EXECUTED"},{"ordinal":2,"id":"verifyIsolation","evidenceType":"ISOLATION_ATTESTATION","state":"PLANNED_NOT_EXECUTED"},{"ordinal":3,"id":"verifyBaseline","evidenceType":"BASELINE_ATTESTATION","state":"PLANNED_NOT_EXECUTED"},{"ordinal":4,"id":"stageArtifact","evidenceType":"ARTIFACT_ATTESTATION","state":"PLANNED_NOT_EXECUTED"},{"ordinal":5,"id":"exerciseForward","evidenceType":"FORWARD_TRACE","state":"PLANNED_NOT_EXECUTED"},{"ordinal":6,"id":"exerciseDenials","evidenceType":"NEGATIVE_GUARD_TRACE","state":"PLANNED_NOT_EXECUTED"},{"ordinal":7,"id":"triggerWatchdog","evidenceType":"WATCHDOG_TRACE","state":"PLANNED_NOT_EXECUTED"},{"ordinal":8,"id":"exerciseCompensation","evidenceType":"COMPENSATION_TRACE","state":"PLANNED_NOT_EXECUTED"},{"ordinal":9,"id":"verifyHostClean","evidenceType":"HOST_CLEAN_ATTESTATION","state":"PLANNED_NOT_EXECUTED"},{"ordinal":10,"id":"verifyNetworkClean","evidenceType":"NETWORK_CLEAN_ATTESTATION","state":"PLANNED_NOT_EXECUTED"},{"ordinal":11,"id":"retireHost","evidenceType":"RETIREMENT_ATTESTATION","state":"PLANNED_NOT_EXECUTED"},{"ordinal":12,"id":"sealDossier","evidenceType":"DOSSIER_SEAL","state":"PLANNED_NOT_EXECUTED"}],"watchdog":{"mode":"INDEPENDENT_FAIL_CLOSED_OBSERVER","owner":"DISPOSABLE_HOST_WATCHDOG","sharesControllerProcess":false,"sharesControllerUser":false,"deadlineSeconds":60,"killEscalationSeconds":10,"triggers":["PROCESS_EXIT_NON_ZERO","HEALTH_DEADLINE_EXCEEDED","READY_DEADLINE_EXCEEDED","PUBLIC_BIND_DETECTED","REVERSE_PROXY_DETECTED","UNIT_DIGEST_DRIFT","ROLLBACK_EVIDENCE_MISSING","MONOTONIC_JOURNAL_GAP"],"terminalAssertions":["CONTROLLER_PROCESS_ABSENT","PORT_8110_ABSENT","PUBLIC_BIND_ABSENT","REVERSE_PROXY_ABSENT","UNIT_REMOVED_OR_EXACTLY_RESTORED","ROLLBACK_SNAPSHOT_EXACTLY_RESTORED","EXCLUSIVE_LOCK_RELEASED","HOST_AND_ROOT_VOLUME_RETIRED"],"commands":[],"networkAuthority":"NONE","deploymentAuthority":"NONE"},"evidenceManifest":{"requiredSlots":12,"observedEvidence":0,"state":"REQUIRED_NOT_OBSERVED","signer":"ASYMMETRIC_REQUIRED_NOT_CONFIGURED","hostCallsExecuted":0,"driverCallsExecuted":0,"watchdogStarts":0},"stateModel":[{"id":"UNTRUSTED","meaning":"no upstream qualification standing exists"},{"id":"QUALIFICATION_BOUND","meaning":"the exact target-host driver qualification was positively verified"},{"id":"HOST_PROFILE_BOUND","meaning":"the non-production disposable-host boundary is exact"},{"id":"PLAN_BOUND","meaning":"twelve phases and the independent watchdog are frozen without commands"},{"id":"EVIDENCE_MANIFEST_BOUND","meaning":"all twelve future evidence slots are explicit and unobserved"},{"id":"PREPARED","meaning":"one opaque sixty-second admission capability exists"},{"id":"ADMITTED_TEST_ONLY","meaning":"the plan may proceed only to a separately authorized disposable-host run"},{"id":"DISPOSED","meaning":"an unused capability was revoked"},{"id":"DENIED","meaning":"shape, isolation, provenance, execution material or receipt drift failed closed"}],"invariants":["the exact target-host driver qualification contract digest is pinned by the admission evaluator","the upstream qualification receipt is live and positively verified by the authoritative verifier","the upstream qualification remains dossier-only and grants no activation authority","the upstream package-loaded and driver-executed flags remain false","the upstream production driver, unit, service, listener, route, proxy and mutation counters remain zero","the candidate host provider is a disposable non-production EC2 test host","the candidate host is Linux amd64","the candidate host lifecycle is exactly one plan, one host and termination","the candidate host is not in a production account","the candidate host is not in a production VPC","the candidate host has no public IP or IPv6","the candidate host has zero ingress rules","the candidate host has no production route or peering","the candidate host has no instance profile or IMDS","the candidate artifact arrives only in a prestaged immutable image","the encrypted root volume is delete-on-termination","the production-host marker must be absent","the service identity and unit name are exact","the candidate endpoint remains exactly loopback port 8110","the conformance plan contains exactly twelve ordered phases","every phase remains PLANNED_NOT_EXECUTED","the plan contains no execution commands or shell material","the plan does not permit host provisioning","the plan does not permit package loading","the plan does not permit activation","the independent watchdog has a different process owner","the independent watchdog does not share the Controller process","the independent watchdog does not share the Controller user","the watchdog deadline is exactly sixty seconds","the watchdog kill escalation begins after ten seconds","the watchdog contains exactly eight reviewed triggers","the watchdog contains exactly eight terminal assertions","the watchdog contains no commands","the watchdog grants no network or deployment authority","the evidence manifest contains exactly twelve phase-bound slots","every evidence slot remains REQUIRED_NOT_OBSERVED","every evidence slot requires an asymmetric signer that is not configured here","the evidence manifest contains zero observed host evidence","the evidence manifest contains zero host and driver calls","the evidence manifest contains zero watchdog starts","the request lives no longer than sixty seconds and uses a single-use nonce","secret-like, user-data and executable fields are rejected recursively","the opaque handle is WeakMap-backed, one-shot and disposable","admission does not provision or contact a host","admission does not load a package or execute a driver","the production Controller entrypoint does not import the admission evaluator","the admission receipt cannot be promoted into a host claim or activation request","all production and paid-resource counters remain zero"],"verification":{"status":"PASS_FIXTURE_ONLY","fixtures":68,"acceptedOutcomes":8,"deniedOutcomes":60,"qualificationReceiptsVerified":54,"admittedPlans":5,"admissionReceiptsVerified":3,"disposedHandles":1,"productionHostClaims":0,"productionCandidatePackages":0,"productionDriversConfigured":0,"systemdUnitsInstalled":0,"controllerServicesStarted":0,"listenerStarts":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0},"productionPrerequisites":["obtain explicit cost and runtime approval for a disposable non-production host","create a dedicated non-production account and VPC with no production connectivity","build and sign the prestaged immutable conformance image","implement the separate target-host driver package and complete syscall review","configure an asymmetric evidence signer without exporting private material","configure a durable monotonic journal and independent watchdog identity","execute all twelve phases and eight watchdog triggers on the disposable host","capture signed terminal evidence for process, port, proxy, unit, snapshot and lock cleanup","prove instance and root-volume retirement from an independent authority","review the sealed conformance dossier before any production activation discussion"],"fixtureRegistry":{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-conformance-admission-fixtures/v1","cases":[{"id":"RFDHCA-01","mutation":"ADMIT_BASELINE","expected":"ACCEPT"},{"id":"RFDHCA-02","mutation":"ADMIT_SECOND_NONCE","expected":"ACCEPT"},{"id":"RFDHCA-03","mutation":"ADMIT_WINDOW_EDGE","expected":"ACCEPT"},{"id":"RFDHCA-04","mutation":"VERIFY_RECEIPT","expected":"ACCEPT"},{"id":"RFDHCA-05","mutation":"VERIFY_RECEIPT_REPLAY","expected":"ACCEPT"},{"id":"RFDHCA-06","mutation":"DISPOSE_AND_REPLAY","expected":"ACCEPT"},{"id":"RFDHCA-07","mutation":"PREPARE_ONLY","expected":"ACCEPT"},{"id":"RFDHCA-08","mutation":"PREPARE_SECOND","expected":"ACCEPT"},{"id":"RFDHCA-09","mutation":"DEPENDENCY_MISSING","expected":"DENY"},{"id":"RFDHCA-10","mutation":"CONTRACT_DIGEST_INVALID","expected":"DENY"},{"id":"RFDHCA-11","mutation":"VERIFIER_FALSE","expected":"DENY"},{"id":"RFDHCA-12","mutation":"VERIFIER_THROW","expected":"DENY"},{"id":"RFDHCA-13","mutation":"CLOCK_INVALID","expected":"DENY"},{"id":"RFDHCA-14","mutation":"EXECUTABLE_KEY","expected":"DENY"},{"id":"RFDHCA-15","mutation":"USER_DATA_KEY","expected":"DENY"},{"id":"RFDHCA-16","mutation":"QUAL_STATUS","expected":"DENY"},{"id":"RFDHCA-17","mutation":"QUAL_EXPIRED","expected":"DENY"},{"id":"RFDHCA-18","mutation":"QUAL_PACKAGE_LOADED","expected":"DENY"},{"id":"RFDHCA-19","mutation":"QUAL_DRIVER_EXECUTED","expected":"DENY"},{"id":"RFDHCA-20","mutation":"QUAL_LISTENER","expected":"DENY"},{"id":"RFDHCA-21","mutation":"QUAL_ROUTE","expected":"DENY"},{"id":"RFDHCA-22","mutation":"QUAL_DIGEST","expected":"DENY"},{"id":"RFDHCA-23","mutation":"QUAL_PORT_DIGESTS","expected":"DENY"},{"id":"RFDHCA-24","mutation":"QUAL_SIGNATURE_COUNT","expected":"DENY"},{"id":"RFDHCA-25","mutation":"QUAL_EXTRA_KEY","expected":"DENY"},{"id":"RFDHCA-26","mutation":"HOST_PRODUCTION_ACCOUNT","expected":"DENY"},{"id":"RFDHCA-27","mutation":"HOST_PRODUCTION_VPC","expected":"DENY"},{"id":"RFDHCA-28","mutation":"HOST_PUBLIC_IP","expected":"DENY"},{"id":"RFDHCA-29","mutation":"HOST_IPV6","expected":"DENY"},{"id":"RFDHCA-30","mutation":"HOST_INGRESS","expected":"DENY"},{"id":"RFDHCA-31","mutation":"HOST_PRODUCTION_ROUTE","expected":"DENY"},{"id":"RFDHCA-32","mutation":"HOST_PEERING","expected":"DENY"},{"id":"RFDHCA-33","mutation":"HOST_INSTANCE_PROFILE","expected":"DENY"},{"id":"RFDHCA-34","mutation":"HOST_IMDS","expected":"DENY"},{"id":"RFDHCA-35","mutation":"HOST_ARTIFACT_DELIVERY","expected":"DENY"},{"id":"RFDHCA-36","mutation":"HOST_ROOT_UNENCRYPTED","expected":"DENY"},{"id":"RFDHCA-37","mutation":"HOST_DELETE_FALSE","expected":"DENY"},{"id":"RFDHCA-38","mutation":"HOST_MARKER_TRUE","expected":"DENY"},{"id":"RFDHCA-39","mutation":"HOST_SERVICE_USER","expected":"DENY"},{"id":"RFDHCA-40","mutation":"HOST_UNIT_NAME","expected":"DENY"},{"id":"RFDHCA-41","mutation":"HOST_PUBLIC_BIND","expected":"DENY"},{"id":"RFDHCA-42","mutation":"PLAN_MODE","expected":"DENY"},{"id":"RFDHCA-43","mutation":"PLAN_CONTRACT_DIGEST","expected":"DENY"},{"id":"RFDHCA-44","mutation":"PLAN_PHASE_ORDER","expected":"DENY"},{"id":"RFDHCA-45","mutation":"PLAN_PHASE_STATE","expected":"DENY"},{"id":"RFDHCA-46","mutation":"PLAN_COMMAND","expected":"DENY"},{"id":"RFDHCA-47","mutation":"PLAN_SHELL","expected":"DENY"},{"id":"RFDHCA-48","mutation":"PLAN_HOST_PROVISION","expected":"DENY"},{"id":"RFDHCA-49","mutation":"PLAN_PACKAGE_LOAD","expected":"DENY"},{"id":"RFDHCA-50","mutation":"PLAN_ACTIVATION","expected":"DENY"},{"id":"RFDHCA-51","mutation":"WATCHDOG_SHARED_PROCESS","expected":"DENY"},{"id":"RFDHCA-52","mutation":"WATCHDOG_SHARED_USER","expected":"DENY"},{"id":"RFDHCA-53","mutation":"WATCHDOG_DEADLINE","expected":"DENY"},{"id":"RFDHCA-54","mutation":"WATCHDOG_TRIGGER","expected":"DENY"},{"id":"RFDHCA-55","mutation":"WATCHDOG_COMMAND","expected":"DENY"},{"id":"RFDHCA-56","mutation":"MANIFEST_SLOT_MISSING","expected":"DENY"},{"id":"RFDHCA-57","mutation":"MANIFEST_SLOT_STATE","expected":"DENY"},{"id":"RFDHCA-58","mutation":"MANIFEST_SLOT_SIGNER","expected":"DENY"},{"id":"RFDHCA-59","mutation":"MANIFEST_OBSERVED","expected":"DENY"},{"id":"RFDHCA-60","mutation":"MANIFEST_HOST_CALL","expected":"DENY"},{"id":"RFDHCA-61","mutation":"MANIFEST_DIGEST","expected":"DENY"},{"id":"RFDHCA-62","mutation":"REQUEST_ACTION","expected":"DENY"},{"id":"RFDHCA-63","mutation":"REQUEST_MODE","expected":"DENY"},{"id":"RFDHCA-64","mutation":"REQUEST_NONCE_FORMAT","expected":"DENY"},{"id":"RFDHCA-65","mutation":"REQUEST_EXPIRED","expected":"DENY"},{"id":"RFDHCA-66","mutation":"REQUEST_LONG_TTL","expected":"DENY"},{"id":"RFDHCA-67","mutation":"REQUEST_MANIFEST_DIGEST","expected":"DENY"},{"id":"RFDHCA-68","mutation":"REQUEST_NONCE_REPLAY","expected":"DENY"}]},"discovery":{"controller":"/api/runner-factory/controller","lifecycle":"/api/runner-factory","upstream":"/api/runner-factory/controller/target-host-driver-qualification","workbench":"/release-foundation#disposable-host-conformance-admission","schema":"/schemas/runner-factory-controller-disposable-host-conformance-admission.v1.schema.json"}}