{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-live-evidence-collection-transaction-intent-contract/v1","status":"DISPOSABLE_HOST_LIVE_EVIDENCE_COLLECTION_TRANSACTION_INTENT_IMPLEMENTED_NOT_CONFIGURED","observedAt":"2026-07-21T11:05:00Z","scope":{"mode":"FIXTURE_TRANSACTION_INTENT_ONLY_NO_LIVE_READ_NO_LAUNCH_NO_BILLING","input":"POSITIVELY_VERIFIED_TEST_ONLY_LIVE_EVIDENCE_COLLECTION_AUTHORIZATION_RECEIPT","output":"LIVE_COLLECTION_TRANSACTION_INTENT_PREPARED_TEST_ONLY","verdict":"REQUIRES_REAL_USER_SIGNATURE_AND_EXECUTION_TIME_REVALIDATION","realUserConfirmed":false,"liveEvidenceCollected":false,"liveQuoteRead":false,"budgetHeld":false,"hostClaimCreated":false,"hostContacted":false,"packageLoaded":false,"processSpawned":false,"shellSurface":"NONE","transactionAuthority":"NONE","launchAuthority":"NONE","billingAuthority":"NONE","promotionAuthority":"NONE","productionEntrypointWired":false},"upstream":{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-live-evidence-collection-authorization-receipt/v1","status":"LIVE_EVIDENCE_COLLECTION_AUTHORIZATION_ENVELOPE_TEST_ONLY","verdict":"REQUIRES_SEPARATE_USER_CONFIRMED_LIVE_COLLECTION_TRANSACTION","authoritativeVerificationRequired":true,"positiveBooleanRequired":true},"operations":[{"id":"prepare","input":"authorization receipt + seven factor receipts + transaction scope + request","output":"opaque one-shot handle","sideEffect":"NONE"},{"id":"project","input":"exact opaque handle","output":"test-only transaction-intent receipt","sideEffect":"NONE"},{"id":"verify","input":"transaction-intent receipt","output":"deterministic boolean","sideEffect":"NONE"},{"id":"dispose","input":"opaque handle","output":"idempotent disposal boolean","sideEffect":"NONE"}],"factorSlots":[{"ordinal":1,"slot":"USER_CONFIRMATION_CHALLENGE","authority":"USER_COST_OWNER","signerKeyId":"fixture-p256-user-cost-owner","observedLive":false},{"ordinal":2,"slot":"FRESH_QUOTE_REVALIDATION","authority":"FINOPS_QUOTE_AUTHORITY","signerKeyId":"fixture-p256-finops-quote-authority","observedLive":false},{"ordinal":3,"slot":"DURABLE_BUDGET_HOLD_PROPOSAL","authority":"DURABLE_CAPACITY_OWNER","signerKeyId":"fixture-p256-durable-capacity-owner","observedLive":false},{"ordinal":4,"slot":"IDEMPOTENT_HOST_CLAIM_PROPOSAL","authority":"DURABLE_CAPACITY_OWNER","signerKeyId":"fixture-p256-durable-capacity-owner","observedLive":false},{"ordinal":5,"slot":"WATCHDOG_ARMING_PLAN","authority":"INDEPENDENT_RETIREMENT_OWNER","signerKeyId":"fixture-p256-independent-retirement-owner","observedLive":false},{"ordinal":6,"slot":"INCIDENT_WINDOW_CONFIRMATION","authority":"INCIDENT_COMMANDER","signerKeyId":"fixture-p256-incident-commander","observedLive":false},{"ordinal":7,"slot":"EXECUTION_TIME_POLICY_REVALIDATION","authority":"EXECUTION_SECURITY_OWNER","signerKeyId":"fixture-p256-execution-security-owner","observedLive":false}],"authorityTopology":[{"authority":"USER_COST_OWNER","slots":1,"mayExecute":false},{"authority":"FINOPS_QUOTE_AUTHORITY","slots":1,"mayExecute":false},{"authority":"DURABLE_CAPACITY_OWNER","slots":2,"mayExecute":false},{"authority":"INDEPENDENT_RETIREMENT_OWNER","slots":1,"mayExecute":false},{"authority":"INCIDENT_COMMANDER","slots":1,"mayExecute":false},{"authority":"EXECUTION_SECURITY_OWNER","slots":1,"mayExecute":false}],"transactionGuardrails":{"requestValiditySeconds":30,"factorShapeValiditySeconds":3600,"hostCountMaximum":1,"maximumMilliUsdCeiling":500,"quoteMaxAgeSeconds":300,"collectionWindowSeconds":600,"retirementSlaSeconds":120,"environment":"isolated-nonproduction-required-not-provisioned","networkIngress":"NONE","networkEgress":"DEFAULT_DENY_ALLOWLIST_REQUIRED","shellSurface":"NONE","confirmationMethod":"DETACHED_USER_SIGNATURE_REQUIRED_NOT_PRESENT","realUserSignatureObserved":false,"liveQuoteRead":false,"budgetHoldCreated":false,"hostClaimCreated":false,"productionConfigured":false},"stateModel":["UNTRUSTED","UPSTREAM_VERIFIED","INTENT_SCOPE_BOUND","CONFIRMATION_CHALLENGE_SHAPE_VERIFIED","QUOTE_REVALIDATION_SHAPE_VERIFIED","BUDGET_HOLD_SHAPE_VERIFIED","HOST_CLAIM_SHAPE_VERIFIED","WATCHDOG_ARMING_SHAPE_VERIFIED","INCIDENT_WINDOW_SHAPE_VERIFIED","POLICY_REVALIDATION_SHAPE_VERIFIED","INTENT_PREPARED_TEST_ONLY","INTENT_RECEIPT_VERIFIED","DENIED_OR_DISPOSED"],"invariants":["The upstream receipt must have the exact authorization-receipt shape.","The upstream receipt must remain test-only and no-launch.","The upstream receipt requires a positive authoritative callback.","The upstream receipt must be unexpired at preparation time.","The upstream receipt must report zero production authorizations.","The upstream host maximum must remain one.","The upstream cost ceiling must not exceed five hundred milli-USD.","Exactly seven factor receipts are required.","Factor receipts are ordered by the canonical slot registry.","Every factor binds its exact authority identity.","Every factor binds its exact signer key identity.","Every factor requires a positive authoritative callback.","Every factor reports observedLive false.","Every factor reports realUserSignatureObserved false.","Every factor reports productionConfigured false.","Every factor validity window is no longer than one hour.","Every factor binds the exact upstream receipt digest.","Every factor binds the exact transaction intent scope digest.","The final scope binds all ordered factor receipt digests.","The transaction intent scope has an exact closed shape.","The transaction type is disposable-host live-evidence collection only.","The region remains the fixture region.","The environment remains isolated nonproduction and unprovisioned.","Network ingress is none.","Network egress is default deny with an allowlist required.","The shell surface is none.","The confirmation method explicitly requires an absent detached user signature.","The confirmation challenge is digest-bound.","The budget-hold proposal is digest-bound.","The host claim key uses a deterministic namespaced digest.","The driver package is immutable and digest-bound.","The intent scope digest excludes only downstream factor bindings.","The final scope digest binds the intent and ordered factors.","All live, executable, launch, billing and promotion booleans remain false.","The request has an exact closed shape.","The request action may only prepare a test-only intent.","The request mode forbids live reads, launch and billing.","The request binds the exact upstream receipt digest.","The request binds the exact final transaction scope digest.","The request preserves canonical factor ordering.","The request nonce is a bounded namespaced digest.","The request nonce differs from the upstream nonce.","The request validity window is no longer than thirty seconds.","A nonce cannot prepare twice.","Handles are opaque WeakMap-backed capabilities.","A reconstructed handle cannot project an intent.","A handle projects at most once.","An expired prepared handle cannot project an intent.","Projection exposes no command, callback, client or function.","The intent receipt has an exact closed shape.","The intent identifier is deterministically digest-derived.","The intent receipt status remains test-only.","The intent verdict requires a real user signature and execution-time revalidation.","Real user confirmations observed remain zero.","Live price quotes observed remain zero.","Durable budget holds observed remain zero.","Durable claim reservations observed remain zero.","Production drivers observed remain zero.","Watchdog armings observed remain zero.","Incident windows observed remain zero.","Execution-time policy revalidations observed remain zero.","Production host claims and runs remain zero.","Processes and host contacts remain zero.","Package loads remain zero.","Pricing reads remain zero.","Systemd units, services and listeners remain zero.","Public and reverse-proxy routes remain zero.","External reads, writes and mutations remain zero.","Paid resources created remains false.","The production Controller composition root does not import this evaluator."],"productionPrerequisites":["A real detached user signature over the exact challenge, cost ceiling, scope and expiry.","A fresh provider quote revalidated at transaction execution time.","A durable conditional budget hold with generation fencing and automatic release.","A durable idempotent host claim bound to the exact transaction intent.","A production no-shell driver qualified for the exact image and package.","Independent watchdog credentials armed outside execution authority.","An isolated nonproduction network lease with no ingress and reviewed egress.","A signed immutable image attestation.","A signed immutable execution-package attestation.","A witnessed instance and root-volume retirement drill within one hundred twenty seconds.","A staffed incident-response window with an accountable incident commander.","Execution-time policy revalidation against the exact current production policy digest.","Immutable audit storage, metrics and paging for confirmation through retirement.","A separate explicit execution authorization after all real evidence is freshly reverified."],"selectedDenialTrace":{"fixtureId":"RFDHLECTI-78","mutation":"SCOPE_USER_CONFIRMED","expected":"DENY","reason":"A caller cannot turn the test-only transaction intent into user confirmation by setting userConfirmed=true, even when every fixture factor remains digest-valid."},"verification":{"status":"PASS_FIXTURE_ONLY","fixtures":96,"acceptedOutcomes":12,"deniedOutcomes":84,"upstreamReceiptsVerified":73,"factorSignaturesVerified":205,"intentReceiptsVerified":3,"projectedIntents":12,"disposedHandles":2,"realUserConfirmationsObserved":0,"livePriceQuotesObserved":0,"durableBudgetHoldsObserved":0,"durableClaimReservationsObserved":0,"productionHostRuns":0,"pricingReadsExecuted":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0,"paidResourcesCreated":false},"truth":{"realUserConfirmationsObserved":0,"userCostAuthorizationsObserved":0,"livePriceQuotesObserved":0,"durableBudgetHoldsObserved":0,"durableClaimReservationsObserved":0,"productionDriversObserved":0,"watchdogArmingsObserved":0,"networkLeasesObserved":0,"imageAttestationsObserved":0,"retirementDrillsObserved":0,"incidentWindowsObserved":0,"policyRevalidationsObserved":0,"productionHostRuns":0,"productionHostClaims":0,"processesSpawned":0,"hostContacts":0,"packageLoads":0,"pricingReadsExecuted":0,"systemdUnitsInstalled":0,"controllerServicesStarted":0,"listenerStarts":0,"publicRoutes":0,"reverseProxyRoutes":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0,"paidResourcesCreated":false,"deploymentPermitted":false},"fixtureRegistry":{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-live-evidence-collection-transaction-intent-fixtures/v1","description":"Deterministic fixture-only transaction-intent cases. No real user signature, quote, budget hold, claim, host, process, network client, billing or paid resource is used.","mode":"FIXTURE_TRANSACTION_INTENT_ONLY_NO_LIVE_READ_NO_LAUNCH_NO_BILLING","cases":[{"id":"RFDHLECTI-01","mutation":"PREPARE_BASELINE","expected":"ACCEPT"},{"id":"RFDHLECTI-02","mutation":"PROJECT_BASELINE","expected":"ACCEPT"},{"id":"RFDHLECTI-03","mutation":"VERIFY_RECEIPT","expected":"ACCEPT"},{"id":"RFDHLECTI-04","mutation":"VERIFY_REPLAY","expected":"ACCEPT"},{"id":"RFDHLECTI-05","mutation":"DISPOSE_REPLAY","expected":"ACCEPT"},{"id":"RFDHLECTI-06","mutation":"REQUEST_WINDOW_EDGE","expected":"ACCEPT"},{"id":"RFDHLECTI-07","mutation":"MAXIMUM_COST_ZERO_EDGE","expected":"ACCEPT"},{"id":"RFDHLECTI-08","mutation":"MAXIMUM_COST_CAP_EDGE","expected":"ACCEPT"},{"id":"RFDHLECTI-09","mutation":"FACTOR_VALIDITY_EDGE","expected":"ACCEPT"},{"id":"RFDHLECTI-10","mutation":"PROJECT_OBSERVED_AT_EDGE","expected":"ACCEPT"},{"id":"RFDHLECTI-11","mutation":"DISPOSE_AFTER_PROJECT","expected":"ACCEPT"},{"id":"RFDHLECTI-12","mutation":"INDEPENDENT_SCOPE_CLONE","expected":"ACCEPT"},{"id":"RFDHLECTI-13","mutation":"EXECUTABLE_KEY","expected":"DENY"},{"id":"RFDHLECTI-14","mutation":"PRICING_CLIENT_KEY","expected":"DENY"},{"id":"RFDHLECTI-15","mutation":"CHARGE_ACCOUNT_KEY","expected":"DENY"},{"id":"RFDHLECTI-16","mutation":"UPSTREAM_SCHEMA","expected":"DENY"},{"id":"RFDHLECTI-17","mutation":"UPSTREAM_STATUS","expected":"DENY"},{"id":"RFDHLECTI-18","mutation":"UPSTREAM_VERDICT","expected":"DENY"},{"id":"RFDHLECTI-19","mutation":"UPSTREAM_MODE","expected":"DENY"},{"id":"RFDHLECTI-20","mutation":"UPSTREAM_ID","expected":"DENY"},{"id":"RFDHLECTI-21","mutation":"UPSTREAM_RECEIPT_DIGEST","expected":"DENY"},{"id":"RFDHLECTI-22","mutation":"UPSTREAM_EVIDENCE_COUNT","expected":"DENY"},{"id":"RFDHLECTI-23","mutation":"UPSTREAM_SHAPES_VERIFIED","expected":"DENY"},{"id":"RFDHLECTI-24","mutation":"UPSTREAM_PRODUCTION_AUTH","expected":"DENY"},{"id":"RFDHLECTI-25","mutation":"UPSTREAM_HOST_COUNT","expected":"DENY"},{"id":"RFDHLECTI-26","mutation":"UPSTREAM_MAX_COST","expected":"DENY"},{"id":"RFDHLECTI-27","mutation":"UPSTREAM_QUOTE_AGE","expected":"DENY"},{"id":"RFDHLECTI-28","mutation":"UPSTREAM_COLLECTION_WINDOW","expected":"DENY"},{"id":"RFDHLECTI-29","mutation":"UPSTREAM_RETIREMENT_SLA","expected":"DENY"},{"id":"RFDHLECTI-30","mutation":"UPSTREAM_USER_COST","expected":"DENY"},{"id":"RFDHLECTI-31","mutation":"UPSTREAM_LIVE_QUOTE","expected":"DENY"},{"id":"RFDHLECTI-32","mutation":"UPSTREAM_HOST_RUN","expected":"DENY"},{"id":"RFDHLECTI-33","mutation":"UPSTREAM_HOST_CONTACT","expected":"DENY"},{"id":"RFDHLECTI-34","mutation":"UPSTREAM_PRICING_READ","expected":"DENY"},{"id":"RFDHLECTI-35","mutation":"UPSTREAM_PAID_RESOURCE","expected":"DENY"},{"id":"RFDHLECTI-36","mutation":"UPSTREAM_EXPIRED","expected":"DENY"},{"id":"RFDHLECTI-37","mutation":"UPSTREAM_VERIFIER_FALSE","expected":"DENY"},{"id":"RFDHLECTI-38","mutation":"UPSTREAM_VERIFIER_THROW","expected":"DENY"},{"id":"RFDHLECTI-39","mutation":"FACTOR_COUNT","expected":"DENY"},{"id":"RFDHLECTI-40","mutation":"FACTOR_ORDER","expected":"DENY"},{"id":"RFDHLECTI-41","mutation":"FACTOR_SLOT","expected":"DENY"},{"id":"RFDHLECTI-42","mutation":"FACTOR_DECISION","expected":"DENY"},{"id":"RFDHLECTI-43","mutation":"FACTOR_AUTHORITY","expected":"DENY"},{"id":"RFDHLECTI-44","mutation":"FACTOR_SIGNER","expected":"DENY"},{"id":"RFDHLECTI-45","mutation":"FACTOR_MODE","expected":"DENY"},{"id":"RFDHLECTI-46","mutation":"FACTOR_SUBJECT","expected":"DENY"},{"id":"RFDHLECTI-47","mutation":"FACTOR_SCOPE","expected":"DENY"},{"id":"RFDHLECTI-48","mutation":"FACTOR_OBSERVED_LIVE","expected":"DENY"},{"id":"RFDHLECTI-49","mutation":"FACTOR_USER_SIGNATURE","expected":"DENY"},{"id":"RFDHLECTI-50","mutation":"FACTOR_PRODUCTION_CONFIGURED","expected":"DENY"},{"id":"RFDHLECTI-51","mutation":"FACTOR_NOT_YET_VALID","expected":"DENY"},{"id":"RFDHLECTI-52","mutation":"FACTOR_EXPIRED","expected":"DENY"},{"id":"RFDHLECTI-53","mutation":"FACTOR_VALIDITY_LONG","expected":"DENY"},{"id":"RFDHLECTI-54","mutation":"FACTOR_DIGEST","expected":"DENY"},{"id":"RFDHLECTI-55","mutation":"FACTOR_EXTRA_KEY","expected":"DENY"},{"id":"RFDHLECTI-56","mutation":"FACTOR_VERIFIER_FALSE","expected":"DENY"},{"id":"RFDHLECTI-57","mutation":"FACTOR_VERIFIER_THROW","expected":"DENY"},{"id":"RFDHLECTI-58","mutation":"SCOPE_SCHEMA","expected":"DENY"},{"id":"RFDHLECTI-59","mutation":"SCOPE_UPSTREAM","expected":"DENY"},{"id":"RFDHLECTI-60","mutation":"SCOPE_TRANSACTION_TYPE","expected":"DENY"},{"id":"RFDHLECTI-61","mutation":"SCOPE_ENVIRONMENT","expected":"DENY"},{"id":"RFDHLECTI-62","mutation":"SCOPE_HOST_COUNT_ZERO","expected":"DENY"},{"id":"RFDHLECTI-63","mutation":"SCOPE_HOST_COUNT_TWO","expected":"DENY"},{"id":"RFDHLECTI-64","mutation":"SCOPE_MAX_COST_NEGATIVE","expected":"DENY"},{"id":"RFDHLECTI-65","mutation":"SCOPE_MAX_COST_OVER","expected":"DENY"},{"id":"RFDHLECTI-66","mutation":"SCOPE_QUOTE_AGE","expected":"DENY"},{"id":"RFDHLECTI-67","mutation":"SCOPE_COLLECTION_WINDOW","expected":"DENY"},{"id":"RFDHLECTI-68","mutation":"SCOPE_RETIREMENT_SLA","expected":"DENY"},{"id":"RFDHLECTI-69","mutation":"SCOPE_NETWORK_INGRESS","expected":"DENY"},{"id":"RFDHLECTI-70","mutation":"SCOPE_NETWORK_EGRESS","expected":"DENY"},{"id":"RFDHLECTI-71","mutation":"SCOPE_SHELL_SURFACE","expected":"DENY"},{"id":"RFDHLECTI-72","mutation":"SCOPE_CONFIRMATION_METHOD","expected":"DENY"},{"id":"RFDHLECTI-73","mutation":"SCOPE_CHALLENGE_DIGEST","expected":"DENY"},{"id":"RFDHLECTI-74","mutation":"SCOPE_BUDGET_DIGEST","expected":"DENY"},{"id":"RFDHLECTI-75","mutation":"SCOPE_CLAIM_KEY","expected":"DENY"},{"id":"RFDHLECTI-76","mutation":"SCOPE_DRIVER_DIGEST","expected":"DENY"},{"id":"RFDHLECTI-77","mutation":"SCOPE_FACTOR_DIGESTS","expected":"DENY"},{"id":"RFDHLECTI-78","mutation":"SCOPE_USER_CONFIRMED","expected":"DENY"},{"id":"RFDHLECTI-79","mutation":"SCOPE_TRANSACTION_EXECUTABLE","expected":"DENY"},{"id":"RFDHLECTI-80","mutation":"SCOPE_HOST_LAUNCH_PERMITTED","expected":"DENY"},{"id":"RFDHLECTI-81","mutation":"SCOPE_BILLING_PERMITTED","expected":"DENY"},{"id":"RFDHLECTI-82","mutation":"REQUEST_SCHEMA","expected":"DENY"},{"id":"RFDHLECTI-83","mutation":"REQUEST_ACTION","expected":"DENY"},{"id":"RFDHLECTI-84","mutation":"REQUEST_MODE","expected":"DENY"},{"id":"RFDHLECTI-85","mutation":"REQUEST_UPSTREAM","expected":"DENY"},{"id":"RFDHLECTI-86","mutation":"REQUEST_SCOPE","expected":"DENY"},{"id":"RFDHLECTI-87","mutation":"REQUEST_SLOT_ORDER","expected":"DENY"},{"id":"RFDHLECTI-88","mutation":"REQUEST_NONCE_INVALID","expected":"DENY"},{"id":"RFDHLECTI-89","mutation":"REQUEST_EXPIRED","expected":"DENY"},{"id":"RFDHLECTI-90","mutation":"REQUEST_WINDOW_LONG","expected":"DENY"},{"id":"RFDHLECTI-91","mutation":"REQUEST_REPLAY","expected":"DENY"},{"id":"RFDHLECTI-92","mutation":"RECONSTRUCTED_HANDLE","expected":"DENY"},{"id":"RFDHLECTI-93","mutation":"DISPOSED_HANDLE","expected":"DENY"},{"id":"RFDHLECTI-94","mutation":"PROJECT_REPLAY","expected":"DENY"},{"id":"RFDHLECTI-95","mutation":"EXPIRED_HANDLE","expected":"DENY"},{"id":"RFDHLECTI-96","mutation":"RECEIPT_USER_CONFIRMATION","expected":"DENY"}],"networkRequestsExecuted":0,"pricingReadsExecuted":0,"userConfirmationsExecuted":0,"budgetHoldsExecuted":0,"hostClaimsExecuted":0,"hostLaunchesExecuted":0,"externalWritesExecuted":0,"paidResourcesCreated":false},"discovery":{"controller":"/api/runner-factory/controller","lifecycle":"/api/runner-factory","upstream":"/api/runner-factory/controller/disposable-host-live-evidence-collection-authorization","workbench":"/release-foundation#disposable-host-live-evidence-collection-transaction-intent","schema":"/schemas/runner-factory-controller-disposable-host-live-evidence-collection-transaction-intent.v1.schema.json"}}