{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-conformance-dossier-sealer-contract/v1","status":"DISPOSABLE_HOST_CONFORMANCE_DOSSIER_SEALER_IMPLEMENTED_NOT_CONFIGURED","observedAt":"2026-07-21T08:00:00.000Z","scope":{"mode":"FIXTURE_EVIDENCE_SEALING_ONLY_NO_HOST_EXECUTION","input":"EXACT_PLAN_ADMISSION_PLUS_EXECUTION_AND_SIGNED_EVIDENCE_RECEIPTS","output":"TEST_ONLY_CONFORMANCE_DOSSIER_SEAL","hostContacted":false,"packageLoaded":false,"driverExecuted":false,"watchdogStarted":false,"productionEvidenceObserved":false,"promotionAuthority":"NONE","productionEntrypointWired":false},"operations":["prepare","seal","verify","dispose"],"upstream":{"contract":"controller-disposable-host-conformance-admission-contract.json","receiptStatus":"DISPOSABLE_HOST_CONFORMANCE_PLAN_ADMITTED_TEST_ONLY","verification":"ASYMMETRIC_VERIFY_ONLY_FIXTURE","contractDigest":"SHA256_PINNED_AT_VERIFIER_RUNTIME"},"evidenceTopology":{"executionReceipts":1,"phaseReceipts":12,"terminalAttestations":8,"evidenceSignaturesPerDossier":21,"journal":"MONOTONIC_HASH_CHAIN","phaseSigner":"fixture-p256-conformance-evidence","executionSigner":"fixture-p256-conformance-execution","terminalAuthority":"INDEPENDENT_FIXTURE_WATCHDOG","executionMode":"IN_MEMORY_HOST_EVIDENCE_FIXTURE_ONLY","promotionAuthority":"NONE"},"phases":[{"ordinal":1,"id":"claimHost","evidenceType":"HOST_CLAIM"},{"ordinal":2,"id":"verifyIsolation","evidenceType":"ISOLATION_ATTESTATION"},{"ordinal":3,"id":"verifyBaseline","evidenceType":"BASELINE_ATTESTATION"},{"ordinal":4,"id":"stageArtifact","evidenceType":"ARTIFACT_ATTESTATION"},{"ordinal":5,"id":"exerciseForward","evidenceType":"FORWARD_TRACE"},{"ordinal":6,"id":"exerciseDenials","evidenceType":"NEGATIVE_GUARD_TRACE"},{"ordinal":7,"id":"triggerWatchdog","evidenceType":"WATCHDOG_TRACE"},{"ordinal":8,"id":"exerciseCompensation","evidenceType":"COMPENSATION_TRACE"},{"ordinal":9,"id":"verifyHostClean","evidenceType":"HOST_CLEAN_ATTESTATION"},{"ordinal":10,"id":"verifyNetworkClean","evidenceType":"NETWORK_CLEAN_ATTESTATION"},{"ordinal":11,"id":"retireHost","evidenceType":"RETIREMENT_ATTESTATION"},{"ordinal":12,"id":"sealDossier","evidenceType":"DOSSIER_SEAL"}],"terminalAssertions":["CONTROLLER_PROCESS_ABSENT","PORT_8110_ABSENT","PUBLIC_BIND_ABSENT","REVERSE_PROXY_ABSENT","UNIT_REMOVED_OR_EXACTLY_RESTORED","ROLLBACK_SNAPSHOT_EXACTLY_RESTORED","EXCLUSIVE_LOCK_RELEASED","HOST_AND_ROOT_VOLUME_RETIRED"],"stateModel":["UNTRUSTED","PLAN_ADMISSION_BOUND","EXECUTION_RECEIPT_BOUND","PHASE_CHAIN_BOUND","TERMINAL_PROOF_BOUND","PREPARED","SEALED_TEST_ONLY","VERIFIED","DISPOSED","DENIED"],"truth":{"productionHostRuns":0,"productionHostClaims":0,"productionCandidatePackages":0,"productionDriversConfigured":0,"systemdUnitsInstalled":0,"controllerServicesStarted":0,"listenerStarts":0,"publicRoutes":0,"reverseProxyRoutes":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0,"paidResourcesCreated":false,"deploymentPermitted":false},"selectedDenialTrace":{"fixtureId":"RFDHCDS-58","mutation":"TERMINAL_AUTHORITY","expected":"DENY","reason":"Controller self-report cannot replace the independent terminal watchdog authority."},"invariants":["the upstream plan-admission receipt must match its exact v1 schema","the upstream admission receipt digest is recalculated before trust","the upstream admission contract digest is pinned exactly","the upstream admission receipt is positively verified by an injected authority","the upstream admission remains test-only and grants no host execution authority","the execution receipt must match its exact v1 schema","the execution receipt is bound to the admitted plan identity","the execution receipt is bound to the admission receipt digest","the execution evidence mode remains in-memory fixture only","the execution receipt grants no deployment authority","the execution receipt contains no commands","the execution duration cannot exceed fifteen minutes","the host claim and immutable image are digest-bound","exactly twelve phase receipts are required","phase receipt order is immutable","each phase identity and evidence type are exact","every phase remains VERIFIED_FIXTURE_ONLY","every phase is bound to the same plan and execution","every phase payload carries a SHA-256 digest","the first phase begins at the all-zero genesis digest","every later phase is chained to its immediate predecessor","every phase timestamp lies inside the execution interval","every phase receipt digest is recalculated before trust","exactly eight terminal attestations are required","terminal assertion order is immutable","every terminal status remains PROVED_FIXTURE_ONLY","every terminal attestation is bound to the same execution","terminal authority must be INDEPENDENT_FIXTURE_WATCHDOG","every terminal evidence value carries a SHA-256 digest","every terminal timestamp lies inside the execution interval","every terminal receipt digest is recalculated before trust","the execution receipt binds all twelve phase receipt digests","the execution receipt binds all eight terminal attestation digests","the execution journal head equals the final phase receipt digest","one execution plus twelve phases plus eight terminals require twenty-one positive signature verifications","a false evidence-verifier result fails closed","an evidence-verifier exception fails closed","the request binds admission, execution, phase bundle and terminal bundle digests","the request lives no longer than sixty seconds","the request nonce is single-use","secret-like and executable fields are rejected recursively","all evidence objects reject unknown fields","the opaque preparation handle is WeakMap-backed","the opaque preparation handle is one-shot","an unused handle can be disposed and disposal is idempotent","a disposed handle cannot seal a dossier","a sealed dossier verdict is fixture-conformant only","a sealed dossier has no production-promotion authority","the production Controller entrypoint does not import the dossier sealer","dossier sealing does not contact, provision or mutate a host","dossier sealing does not start a service, listener, proxy or route","all production, external-write and paid-resource counters remain zero"],"verification":{"status":"PASS_FIXTURE_ONLY","fixtures":72,"acceptedOutcomes":8,"deniedOutcomes":64,"admissionReceiptsVerified":58,"evidenceSignaturesVerified":338,"sealedDossiers":5,"sealReceiptsVerified":3,"disposedHandles":1,"productionHostRuns":0,"productionCandidatePackages":0,"productionDriversConfigured":0,"systemdUnitsInstalled":0,"controllerServicesStarted":0,"listenerStarts":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0},"productionPrerequisites":["obtain explicit cost and runtime approval for a disposable non-production host","create a dedicated non-production account and VPC with no production connectivity","build and sign the prestaged immutable conformance image","implement the separate target-host driver package and complete syscall review","configure asymmetric evidence signers without exporting private material","configure a durable monotonic journal and independent watchdog identity","execute all twelve phases and eight watchdog assertions on the disposable host","capture signed terminal evidence for process, port, proxy, unit, snapshot and lock cleanup","prove instance and root-volume retirement from an independent authority","review the sealed production dossier under a separately approved promotion policy"],"fixtureRegistry":{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-conformance-dossier-sealer-fixtures/v1","mode":"FIXTURE_EVIDENCE_SEALING_ONLY_NO_HOST_EXECUTION","cases":[{"id":"RFDHCDS-01","mutation":"SEAL_BASELINE","expected":"ACCEPT"},{"id":"RFDHCDS-02","mutation":"SEAL_SECOND_NONCE","expected":"ACCEPT"},{"id":"RFDHCDS-03","mutation":"SEAL_WINDOW_EDGE","expected":"ACCEPT"},{"id":"RFDHCDS-04","mutation":"VERIFY_SEAL_RECEIPT","expected":"ACCEPT"},{"id":"RFDHCDS-05","mutation":"VERIFY_SEAL_RECEIPT_REPLAY","expected":"ACCEPT"},{"id":"RFDHCDS-06","mutation":"DISPOSE_AND_REPLAY","expected":"ACCEPT"},{"id":"RFDHCDS-07","mutation":"PREPARE_ONLY","expected":"ACCEPT"},{"id":"RFDHCDS-08","mutation":"PREPARE_SECOND","expected":"ACCEPT"},{"id":"RFDHCDS-09","mutation":"DEPENDENCY_MISSING","expected":"DENY"},{"id":"RFDHCDS-10","mutation":"CONTRACT_DIGEST_INVALID","expected":"DENY"},{"id":"RFDHCDS-11","mutation":"ADMISSION_VERIFIER_FALSE","expected":"DENY"},{"id":"RFDHCDS-12","mutation":"ADMISSION_VERIFIER_THROW","expected":"DENY"},{"id":"RFDHCDS-13","mutation":"EVIDENCE_VERIFIER_MISSING","expected":"DENY"},{"id":"RFDHCDS-14","mutation":"EVIDENCE_VERIFIER_FALSE","expected":"DENY"},{"id":"RFDHCDS-15","mutation":"EVIDENCE_VERIFIER_THROW","expected":"DENY"},{"id":"RFDHCDS-16","mutation":"CLOCK_INVALID","expected":"DENY"},{"id":"RFDHCDS-17","mutation":"EXECUTABLE_KEY","expected":"DENY"},{"id":"RFDHCDS-18","mutation":"ADMISSION_STATUS","expected":"DENY"},{"id":"RFDHCDS-19","mutation":"ADMISSION_MODE","expected":"DENY"},{"id":"RFDHCDS-20","mutation":"ADMISSION_HOST_PROVISIONED","expected":"DENY"},{"id":"RFDHCDS-21","mutation":"ADMISSION_DRIVER_EXECUTED","expected":"DENY"},{"id":"RFDHCDS-22","mutation":"ADMISSION_ROUTE","expected":"DENY"},{"id":"RFDHCDS-23","mutation":"ADMISSION_DIGEST","expected":"DENY"},{"id":"RFDHCDS-24","mutation":"ADMISSION_TIME_ORDER","expected":"DENY"},{"id":"RFDHCDS-25","mutation":"ADMISSION_PHASES","expected":"DENY"},{"id":"RFDHCDS-26","mutation":"ADMISSION_EVIDENCE_SLOTS","expected":"DENY"},{"id":"RFDHCDS-27","mutation":"EXECUTION_SCHEMA","expected":"DENY"},{"id":"RFDHCDS-28","mutation":"EXECUTION_STATUS","expected":"DENY"},{"id":"RFDHCDS-29","mutation":"EXECUTION_MODE","expected":"DENY"},{"id":"RFDHCDS-30","mutation":"EXECUTION_PLAN_ID","expected":"DENY"},{"id":"RFDHCDS-31","mutation":"EXECUTION_ADMISSION_DIGEST","expected":"DENY"},{"id":"RFDHCDS-32","mutation":"EXECUTION_HOST_CLAIM","expected":"DENY"},{"id":"RFDHCDS-33","mutation":"EXECUTION_IMAGE_DIGEST","expected":"DENY"},{"id":"RFDHCDS-34","mutation":"EXECUTION_PHASE_DIGESTS","expected":"DENY"},{"id":"RFDHCDS-35","mutation":"EXECUTION_TERMINAL_DIGESTS","expected":"DENY"},{"id":"RFDHCDS-36","mutation":"EXECUTION_TIME_ORDER","expected":"DENY"},{"id":"RFDHCDS-37","mutation":"EXECUTION_DURATION","expected":"DENY"},{"id":"RFDHCDS-38","mutation":"EXECUTION_COMMAND","expected":"DENY"},{"id":"RFDHCDS-39","mutation":"EXECUTION_NETWORK_AUTHORITY","expected":"DENY"},{"id":"RFDHCDS-40","mutation":"PHASE_MISSING","expected":"DENY"},{"id":"RFDHCDS-41","mutation":"PHASE_ORDER","expected":"DENY"},{"id":"RFDHCDS-42","mutation":"PHASE_ID","expected":"DENY"},{"id":"RFDHCDS-43","mutation":"PHASE_EVIDENCE_TYPE","expected":"DENY"},{"id":"RFDHCDS-44","mutation":"PHASE_STATUS","expected":"DENY"},{"id":"RFDHCDS-45","mutation":"PHASE_PLAN_ID","expected":"DENY"},{"id":"RFDHCDS-46","mutation":"PHASE_EXECUTION_ID","expected":"DENY"},{"id":"RFDHCDS-47","mutation":"PHASE_PAYLOAD_DIGEST","expected":"DENY"},{"id":"RFDHCDS-48","mutation":"PHASE_PREDECESSOR","expected":"DENY"},{"id":"RFDHCDS-49","mutation":"PHASE_SIGNER","expected":"DENY"},{"id":"RFDHCDS-50","mutation":"PHASE_TIME_BEFORE","expected":"DENY"},{"id":"RFDHCDS-51","mutation":"PHASE_TIME_AFTER","expected":"DENY"},{"id":"RFDHCDS-52","mutation":"PHASE_DIGEST","expected":"DENY"},{"id":"RFDHCDS-53","mutation":"TERMINAL_MISSING","expected":"DENY"},{"id":"RFDHCDS-54","mutation":"TERMINAL_ORDER","expected":"DENY"},{"id":"RFDHCDS-55","mutation":"TERMINAL_ASSERTION","expected":"DENY"},{"id":"RFDHCDS-56","mutation":"TERMINAL_STATUS","expected":"DENY"},{"id":"RFDHCDS-57","mutation":"TERMINAL_EXECUTION_ID","expected":"DENY"},{"id":"RFDHCDS-58","mutation":"TERMINAL_AUTHORITY","expected":"DENY"},{"id":"RFDHCDS-59","mutation":"TERMINAL_EVIDENCE_DIGEST","expected":"DENY"},{"id":"RFDHCDS-60","mutation":"TERMINAL_TIME","expected":"DENY"},{"id":"RFDHCDS-61","mutation":"TERMINAL_DIGEST","expected":"DENY"},{"id":"RFDHCDS-62","mutation":"REQUEST_ACTION","expected":"DENY"},{"id":"RFDHCDS-63","mutation":"REQUEST_MODE","expected":"DENY"},{"id":"RFDHCDS-64","mutation":"REQUEST_EXECUTION_ID","expected":"DENY"},{"id":"RFDHCDS-65","mutation":"REQUEST_NONCE_FORMAT","expected":"DENY"},{"id":"RFDHCDS-66","mutation":"REQUEST_EXPIRED","expected":"DENY"},{"id":"RFDHCDS-67","mutation":"REQUEST_LONG_TTL","expected":"DENY"},{"id":"RFDHCDS-68","mutation":"REQUEST_NONCE_REPLAY","expected":"DENY"},{"id":"RFDHCDS-69","mutation":"EXECUTION_EXTRA_KEY","expected":"DENY"},{"id":"RFDHCDS-70","mutation":"ADMISSION_EXTRA_KEY","expected":"DENY"},{"id":"RFDHCDS-71","mutation":"PHASE_EXTRA_KEY","expected":"DENY"},{"id":"RFDHCDS-72","mutation":"TERMINAL_EXTRA_KEY","expected":"DENY"}]},"discovery":{"controller":"/api/runner-factory/controller","lifecycle":"/api/runner-factory","upstream":"/api/runner-factory/controller/disposable-host-conformance-admission","workbench":"/release-foundation#disposable-host-conformance-dossier-sealer","schema":"/schemas/runner-factory-controller-disposable-host-conformance-dossier-sealer.v1.schema.json"}}