{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-live-evidence-collection-authorization-contract/v1","status":"DISPOSABLE_HOST_LIVE_EVIDENCE_COLLECTION_AUTHORIZATION_IMPLEMENTED_NOT_CONFIGURED","observedAt":"2026-07-21T11:00:00Z","scope":{"mode":"FIXTURE_AUTHORIZATION_SHAPE_ONLY_NO_LIVE_READ_NO_LAUNCH","input":"POSITIVELY_VERIFIED_TEST_ONLY_REAL_HOST_PREREQUISITES_ADMISSION_RECEIPT","output":"LIVE_EVIDENCE_COLLECTION_AUTHORIZATION_ENVELOPE_TEST_ONLY","liveEvidenceCollected":false,"liveQuoteRead":false,"hostContacted":false,"packageLoaded":false,"processSpawned":false,"shellSurface":"NONE","paidHostAuthorizationPresent":false,"launchAuthority":"NONE","billingAuthority":"NONE","promotionAuthority":"NONE","productionEntrypointWired":false},"operations":["prepare","authorize","verify","dispose"],"upstream":{"contract":"controller-disposable-host-real-prerequisites-admission-contract.json","receiptStatus":"REAL_HOST_PREREQUISITES_ADMITTED_TEST_ONLY","verdict":"ELIGIBLE_FOR_SEPARATELY_APPROVED_LIVE_EVIDENCE_COLLECTION_ONLY","verification":"POSITIVE_AUTHORITATIVE_CALLBACK_PLUS_EXACT_SHAPE_AND_IDENTITY","launchAuthority":"NONE"},"evidenceSlots":[{"ordinal":1,"slot":"USER_COST_AUTHORIZATION","authority":"USER_COST_OWNER","signerKeyId":"fixture-p256-user-cost-owner","observedLive":false},{"ordinal":2,"slot":"FRESH_SIGNED_PRICE_QUOTE","authority":"FINOPS_QUOTE_AUTHORITY","signerKeyId":"fixture-p256-finops-quote-authority","observedLive":false},{"ordinal":3,"slot":"DURABLE_CLAIM_RESERVATION","authority":"DURABLE_CAPACITY_OWNER","signerKeyId":"fixture-p256-durable-capacity-owner","observedLive":false},{"ordinal":4,"slot":"NO_SHELL_DRIVER_RELEASE","authority":"EXECUTION_SECURITY_OWNER","signerKeyId":"fixture-p256-execution-security-owner","observedLive":false},{"ordinal":5,"slot":"INDEPENDENT_WATCHDOG_ESCROW","authority":"INDEPENDENT_RETIREMENT_OWNER","signerKeyId":"fixture-p256-independent-retirement-owner","observedLive":false},{"ordinal":6,"slot":"ISOLATED_NETWORK_LEASE","authority":"NETWORK_PLATFORM_OWNER","signerKeyId":"fixture-p256-network-platform-owner","observedLive":false},{"ordinal":7,"slot":"IMMUTABLE_IMAGE_PACKAGE_ATTESTATION","authority":"SUPPLY_CHAIN_OWNER","signerKeyId":"fixture-p256-supply-chain-owner","observedLive":false},{"ordinal":8,"slot":"RETIREMENT_DRILL_WITNESS","authority":"INDEPENDENT_RETIREMENT_OWNER","signerKeyId":"fixture-p256-independent-retirement-owner","observedLive":false},{"ordinal":9,"slot":"INCIDENT_RESPONSE_WINDOW","authority":"INCIDENT_COMMANDER","signerKeyId":"fixture-p256-incident-commander","observedLive":false}],"authorityTopology":[{"authority":"USER_COST_OWNER","slots":1,"mayLaunch":false},{"authority":"FINOPS_QUOTE_AUTHORITY","slots":1,"mayLaunch":false},{"authority":"DURABLE_CAPACITY_OWNER","slots":1,"mayLaunch":false},{"authority":"EXECUTION_SECURITY_OWNER","slots":1,"mayLaunch":false},{"authority":"INDEPENDENT_RETIREMENT_OWNER","slots":2,"mayLaunch":false},{"authority":"NETWORK_PLATFORM_OWNER","slots":1,"mayLaunch":false},{"authority":"SUPPLY_CHAIN_OWNER","slots":1,"mayLaunch":false},{"authority":"INCIDENT_COMMANDER","slots":1,"mayLaunch":false}],"collectionGuardrails":{"requestValiditySeconds":30,"authorizationShapeValiditySeconds":3600,"hostCountMaximum":1,"maximumMilliUsdCeiling":500,"quoteMaxAgeSeconds":300,"collectionWindowSeconds":600,"retirementSlaSeconds":120,"environment":"isolated-nonproduction-required-not-provisioned","networkIngress":"NONE","networkEgress":"DEFAULT_DENY_ALLOWLIST_REQUIRED","shellSurface":"NONE","liveQuoteRead":false,"productionConfigured":false},"stateModel":["UNTRUSTED","UPSTREAM_VERIFIED","SCOPE_INTENT_BOUND","COST_SHAPE_VERIFIED","QUOTE_SHAPE_VERIFIED","CLAIM_SHAPE_VERIFIED","DRIVER_SHAPE_VERIFIED","WATCHDOG_SHAPE_VERIFIED","NETWORK_SHAPE_VERIFIED","SUPPLY_CHAIN_SHAPE_VERIFIED","RETIREMENT_SHAPE_VERIFIED","INCIDENT_WINDOW_SHAPE_VERIFIED","AUTHORIZED_TEST_ONLY","DENIED_OR_DISPOSED"],"truth":{"productionAuthorizationsObserved":0,"userCostAuthorizationsObserved":0,"livePriceQuotesObserved":0,"durableClaimReservationsObserved":0,"productionDriversObserved":0,"watchdogEscrowsObserved":0,"networkLeasesObserved":0,"imageAttestationsObserved":0,"retirementDrillsObserved":0,"incidentWindowsObserved":0,"productionHostRuns":0,"productionHostClaims":0,"systemdUnitsInstalled":0,"controllerServicesStarted":0,"listenerStarts":0,"publicRoutes":0,"reverseProxyRoutes":0,"pricingReadsExecuted":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0,"paidResourcesCreated":false,"deploymentPermitted":false},"selectedDenialTrace":{"fixtureId":"RFDHLEC-75","mutation":"SCOPE_HOST_LAUNCH_PERMITTED","expected":"DENY","reason":"A collection scope that claims host-launch permission is rejected even when all nine fixture authorization shapes are otherwise digest-valid."},"invariants":["The production Controller composition root never imports this evaluator.","Only an exact real-host prerequisites admission receipt may enter this boundary.","The upstream receipt remains explicitly TEST_ONLY.","The upstream receipt must be positively verified by its authoritative boundary.","False upstream verification denies without local-digest fallback.","Upstream verifier exceptions fail closed.","The upstream admission identity is deterministically recomputed.","The upstream receipt proves eight fixture prerequisites and no production prerequisites.","Every upstream production and side-effect counter remains zero.","The upstream receipt carries no launch, billing or promotion authority.","Exactly nine authorization-shape slots are supplied in canonical order.","Every authorization-shape receipt has an exact bounded shape.","Every authorization-shape receipt binds the exact upstream admission digest.","Every authorization-shape receipt binds the scope intent digest.","Every authorization-shape receipt is positively verified by its boundary.","False authorization-shape verification denies the full envelope.","Authorization-shape verifier exceptions deny the full envelope.","Authorization-shape receipts are valid for no more than one hour.","Authorization-shape receipts must be live at the evaluator clock instant.","Every authorization shape has FIXTURE_ONLY origin.","No authorization shape may claim observed live evidence.","No authorization shape may claim production configuration.","No authorization shape may claim external authority verification.","The user-cost slot is owned only by USER_COST_OWNER.","The quote slot is owned only by FINOPS_QUOTE_AUTHORITY.","The claim-reservation slot is owned only by DURABLE_CAPACITY_OWNER.","The driver-release slot is owned only by EXECUTION_SECURITY_OWNER.","Watchdog and retirement evidence are owned by the independent retirement owner.","The network lease is owned only by NETWORK_PLATFORM_OWNER.","The immutable supply-chain attestation is owned only by SUPPLY_CHAIN_OWNER.","The incident window is owned only by INCIDENT_COMMANDER.","Eight distinct authority identities cover the nine authorization shapes.","A shared retirement owner never gains launch authority.","The collection scope binds the exact upstream admission receipt.","The immutable scope intent is calculated before evidence receipts are issued.","The final scope binds all nine evidence receipt digests in canonical order.","At most one future evidence host may be requested.","The synthetic cost ceiling cannot exceed five hundred milli-USD.","No live price quote is read by this evaluator.","A future signed quote must be no older than three hundred seconds.","The future evidence collection window is capped at six hundred seconds.","The future retirement SLA is one hundred twenty seconds.","The isolated target permits no ingress.","The isolated target requires default-deny allowlisted egress.","The scope shell surface remains NONE.","The immutable image and package are digest-bound.","Every live-observation flag remains false.","The collection scope cannot claim production configuration.","The collection scope cannot permit host launch.","The collection scope cannot permit billing.","The collection scope cannot permit promotion.","The request is valid for at most thirty seconds.","The request binds the upstream receipt, final scope and ordered slot list.","The request nonce differs from the upstream admission nonce.","A request nonce can prepare at most one opaque handle.","Opaque handles are WeakMap-bound and cannot be reconstructed.","A reconstructed handle is rejected.","Each opaque handle can authorize at most once.","Disposed handles cannot authorize.","Repeated disposal is idempotent.","The terminal authorization identity binds upstream, scope, nonce and request time.","Terminal receipt verification is deterministic and replay-safe.","The output remains an authorization envelope for fixture shapes only.","The verdict requires a separate user-confirmed live collection transaction.","All production authorization and evidence counters remain zero.","The evaluator performs no network, pricing, host, package, process, external-write, mutation or paid-resource operation."],"productionPrerequisites":["A real user-signed cost authorization with exact amount, scope and expiry.","A fresh signed provider quote from a qualified source, verified within three hundred seconds.","A durable conditional claim reservation with generation fencing.","A production no-shell driver release qualified against the exact image and package.","Independent watchdog credentials escrowed outside execution authority.","An isolated nonproduction network lease with zero ingress and reviewed egress allowlist.","A signed immutable image attestation from the supply-chain owner.","A signed immutable execution-package attestation.","A witnessed instance and root-volume retirement drill within one hundred twenty seconds.","A staffed incident-response window with an accountable incident commander.","Metrics, paging and immutable audit storage for the evidence window.","A durable single-host budget ledger preventing concurrent or replayed spend.","A separate explicit user-confirmed live collection transaction; this envelope cannot launch it."],"verification":{"status":"PASS_FIXTURE_ONLY","fixtures":92,"acceptedOutcomes":12,"deniedOutcomes":80,"upstreamReceiptsVerified":72,"evidenceSignaturesVerified":254,"authorizationReceiptsVerified":3,"authorizedEnvelopes":10,"disposedHandles":2,"productionAuthorizationsObserved":0,"userCostAuthorizationsObserved":0,"livePriceQuotesObserved":0,"productionHostRuns":0,"pricingReadsExecuted":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0,"paidResourcesCreated":false},"fixtureRegistry":{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-live-evidence-collection-authorization-fixtures/v1","mode":"FIXTURE_AUTHORIZATION_SHAPE_ONLY_NO_LIVE_READ_NO_LAUNCH","networkRequestsExecuted":0,"pricingReadsExecuted":0,"hostLaunchesExecuted":0,"externalWritesExecuted":0,"paidResourcesCreated":false,"cases":[{"id":"RFDHLEC-01","mutation":"PREPARE_BASELINE","expected":"ACCEPT"},{"id":"RFDHLEC-02","mutation":"AUTHORIZE_BASELINE","expected":"ACCEPT"},{"id":"RFDHLEC-03","mutation":"VERIFY_RECEIPT","expected":"ACCEPT"},{"id":"RFDHLEC-04","mutation":"VERIFY_REPLAY","expected":"ACCEPT"},{"id":"RFDHLEC-05","mutation":"DISPOSE_REPLAY","expected":"ACCEPT"},{"id":"RFDHLEC-06","mutation":"REQUEST_WINDOW_EDGE","expected":"ACCEPT"},{"id":"RFDHLEC-07","mutation":"MAXIMUM_COST_ZERO_EDGE","expected":"ACCEPT"},{"id":"RFDHLEC-08","mutation":"MAXIMUM_COST_CAP_EDGE","expected":"ACCEPT"},{"id":"RFDHLEC-09","mutation":"EVIDENCE_VALIDITY_EDGE","expected":"ACCEPT"},{"id":"RFDHLEC-10","mutation":"AUTHORIZATION_OBSERVED_AT_EDGE","expected":"ACCEPT"},{"id":"RFDHLEC-11","mutation":"DISPOSE_AFTER_AUTHORIZE","expected":"ACCEPT"},{"id":"RFDHLEC-12","mutation":"INDEPENDENT_SCOPE_CLONE","expected":"ACCEPT"},{"id":"RFDHLEC-13","mutation":"EXECUTABLE_KEY","expected":"DENY"},{"id":"RFDHLEC-14","mutation":"PRICING_CLIENT_KEY","expected":"DENY"},{"id":"RFDHLEC-15","mutation":"UPSTREAM_SCHEMA","expected":"DENY"},{"id":"RFDHLEC-16","mutation":"UPSTREAM_STATUS","expected":"DENY"},{"id":"RFDHLEC-17","mutation":"UPSTREAM_VERDICT","expected":"DENY"},{"id":"RFDHLEC-18","mutation":"UPSTREAM_MODE","expected":"DENY"},{"id":"RFDHLEC-19","mutation":"UPSTREAM_ID","expected":"DENY"},{"id":"RFDHLEC-20","mutation":"UPSTREAM_RECEIPT_DIGEST","expected":"DENY"},{"id":"RFDHLEC-21","mutation":"UPSTREAM_PREREQUISITE_COUNT","expected":"DENY"},{"id":"RFDHLEC-22","mutation":"UPSTREAM_QUALIFICATION_COUNT","expected":"DENY"},{"id":"RFDHLEC-23","mutation":"UPSTREAM_FIXTURE_QUALIFIED","expected":"DENY"},{"id":"RFDHLEC-24","mutation":"UPSTREAM_PRODUCTION_SATISFIED","expected":"DENY"},{"id":"RFDHLEC-25","mutation":"UPSTREAM_MAX_COST","expected":"DENY"},{"id":"RFDHLEC-26","mutation":"UPSTREAM_QUOTE_AGE","expected":"DENY"},{"id":"RFDHLEC-27","mutation":"UPSTREAM_RETIREMENT_SLA","expected":"DENY"},{"id":"RFDHLEC-28","mutation":"UPSTREAM_USER_COST_OBSERVED","expected":"DENY"},{"id":"RFDHLEC-29","mutation":"UPSTREAM_LIVE_QUOTE_OBSERVED","expected":"DENY"},{"id":"RFDHLEC-30","mutation":"UPSTREAM_HOST_RUN","expected":"DENY"},{"id":"RFDHLEC-31","mutation":"UPSTREAM_EXTERNAL_READ","expected":"DENY"},{"id":"RFDHLEC-32","mutation":"UPSTREAM_PAID_RESOURCE","expected":"DENY"},{"id":"RFDHLEC-33","mutation":"UPSTREAM_LAUNCH_AUTHORITY","expected":"DENY"},{"id":"RFDHLEC-34","mutation":"UPSTREAM_VERIFIER_FALSE","expected":"DENY"},{"id":"RFDHLEC-35","mutation":"UPSTREAM_VERIFIER_THROW","expected":"DENY"},{"id":"RFDHLEC-36","mutation":"EVIDENCE_COUNT","expected":"DENY"},{"id":"RFDHLEC-37","mutation":"EVIDENCE_ORDER","expected":"DENY"},{"id":"RFDHLEC-38","mutation":"EVIDENCE_SLOT","expected":"DENY"},{"id":"RFDHLEC-39","mutation":"EVIDENCE_DECISION","expected":"DENY"},{"id":"RFDHLEC-40","mutation":"EVIDENCE_AUTHORITY","expected":"DENY"},{"id":"RFDHLEC-41","mutation":"EVIDENCE_SIGNER","expected":"DENY"},{"id":"RFDHLEC-42","mutation":"EVIDENCE_MODE","expected":"DENY"},{"id":"RFDHLEC-43","mutation":"EVIDENCE_SUBJECT","expected":"DENY"},{"id":"RFDHLEC-44","mutation":"EVIDENCE_SCOPE","expected":"DENY"},{"id":"RFDHLEC-45","mutation":"EVIDENCE_ORIGIN","expected":"DENY"},{"id":"RFDHLEC-46","mutation":"EVIDENCE_OBSERVED_LIVE","expected":"DENY"},{"id":"RFDHLEC-47","mutation":"EVIDENCE_PRODUCTION_CONFIGURED","expected":"DENY"},{"id":"RFDHLEC-48","mutation":"EVIDENCE_EXTERNAL_AUTHORITY","expected":"DENY"},{"id":"RFDHLEC-49","mutation":"EVIDENCE_NOT_YET_VALID","expected":"DENY"},{"id":"RFDHLEC-50","mutation":"EVIDENCE_EXPIRED","expected":"DENY"},{"id":"RFDHLEC-51","mutation":"EVIDENCE_DIGEST","expected":"DENY"},{"id":"RFDHLEC-52","mutation":"EVIDENCE_EXTRA_KEY","expected":"DENY"},{"id":"RFDHLEC-53","mutation":"EVIDENCE_VERIFIER_FALSE","expected":"DENY"},{"id":"RFDHLEC-54","mutation":"EVIDENCE_VERIFIER_THROW","expected":"DENY"},{"id":"RFDHLEC-55","mutation":"SCOPE_SCHEMA","expected":"DENY"},{"id":"RFDHLEC-56","mutation":"SCOPE_UPSTREAM","expected":"DENY"},{"id":"RFDHLEC-57","mutation":"SCOPE_REGION","expected":"DENY"},{"id":"RFDHLEC-58","mutation":"SCOPE_ENVIRONMENT","expected":"DENY"},{"id":"RFDHLEC-59","mutation":"SCOPE_HOST_COUNT_ZERO","expected":"DENY"},{"id":"RFDHLEC-60","mutation":"SCOPE_HOST_COUNT_TWO","expected":"DENY"},{"id":"RFDHLEC-61","mutation":"SCOPE_MAX_COST_NEGATIVE","expected":"DENY"},{"id":"RFDHLEC-62","mutation":"SCOPE_MAX_COST_OVER","expected":"DENY"},{"id":"RFDHLEC-63","mutation":"SCOPE_CURRENCY","expected":"DENY"},{"id":"RFDHLEC-64","mutation":"SCOPE_QUOTE_AGE","expected":"DENY"},{"id":"RFDHLEC-65","mutation":"SCOPE_COLLECTION_WINDOW","expected":"DENY"},{"id":"RFDHLEC-66","mutation":"SCOPE_RETIREMENT_SLA","expected":"DENY"},{"id":"RFDHLEC-67","mutation":"SCOPE_NETWORK_INGRESS","expected":"DENY"},{"id":"RFDHLEC-68","mutation":"SCOPE_NETWORK_EGRESS","expected":"DENY"},{"id":"RFDHLEC-69","mutation":"SCOPE_SHELL_SURFACE","expected":"DENY"},{"id":"RFDHLEC-70","mutation":"SCOPE_IMAGE_DIGEST","expected":"DENY"},{"id":"RFDHLEC-71","mutation":"SCOPE_PACKAGE_DIGEST","expected":"DENY"},{"id":"RFDHLEC-72","mutation":"SCOPE_EVIDENCE_DIGESTS","expected":"DENY"},{"id":"RFDHLEC-73","mutation":"SCOPE_LIVE_OBSERVED","expected":"DENY"},{"id":"RFDHLEC-74","mutation":"SCOPE_PRODUCTION_CONFIGURED","expected":"DENY"},{"id":"RFDHLEC-75","mutation":"SCOPE_HOST_LAUNCH_PERMITTED","expected":"DENY"},{"id":"RFDHLEC-76","mutation":"SCOPE_BILLING_PERMITTED","expected":"DENY"},{"id":"RFDHLEC-77","mutation":"SCOPE_PROMOTION_PERMITTED","expected":"DENY"},{"id":"RFDHLEC-78","mutation":"SCOPE_EXTRA_KEY","expected":"DENY"},{"id":"RFDHLEC-79","mutation":"REQUEST_SCHEMA","expected":"DENY"},{"id":"RFDHLEC-80","mutation":"REQUEST_ACTION","expected":"DENY"},{"id":"RFDHLEC-81","mutation":"REQUEST_MODE","expected":"DENY"},{"id":"RFDHLEC-82","mutation":"REQUEST_UPSTREAM","expected":"DENY"},{"id":"RFDHLEC-83","mutation":"REQUEST_SCOPE","expected":"DENY"},{"id":"RFDHLEC-84","mutation":"REQUEST_SLOT_ORDER","expected":"DENY"},{"id":"RFDHLEC-85","mutation":"REQUEST_NONCE_INVALID","expected":"DENY"},{"id":"RFDHLEC-86","mutation":"REQUEST_EXPIRED","expected":"DENY"},{"id":"RFDHLEC-87","mutation":"REQUEST_WINDOW_LONG","expected":"DENY"},{"id":"RFDHLEC-88","mutation":"REQUEST_REPLAY","expected":"DENY"},{"id":"RFDHLEC-89","mutation":"RECONSTRUCTED_HANDLE","expected":"DENY"},{"id":"RFDHLEC-90","mutation":"DISPOSED_HANDLE","expected":"DENY"},{"id":"RFDHLEC-91","mutation":"AUTHORIZE_REPLAY","expected":"DENY"},{"id":"RFDHLEC-92","mutation":"RECEIPT_LIVE_QUOTE","expected":"DENY"}]},"discovery":{"controller":"/api/runner-factory/controller","lifecycle":"/api/runner-factory","upstream":"/api/runner-factory/controller/disposable-host-real-prerequisites-admission","workbench":"/release-foundation#disposable-host-live-evidence-collection-authorization","schema":"/schemas/runner-factory-controller-disposable-host-live-evidence-collection-authorization.v1.schema.json"}}