{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-real-prerequisites-admission-contract/v1","status":"DISPOSABLE_HOST_REAL_PREREQUISITES_ADMISSION_IMPLEMENTED_NOT_CONFIGURED","observedAt":"2026-07-21T10:00:00Z","scope":{"mode":"FIXTURE_PREREQUISITE_VALIDATION_ONLY_NO_LAUNCH_NO_BILLING","input":"POSITIVELY_VERIFIED_RETIRED_NO_SHELL_FIXTURE_RECEIPT","output":"TEST_ONLY_PREREQUISITE_ADMISSION_RECEIPT","liveEvidenceCollected":false,"hostContacted":false,"packageLoaded":false,"processSpawned":false,"shellSurface":"NONE","paidHostAuthorizationPresent":false,"launchAuthority":"NONE","billingAuthority":"NONE","promotionAuthority":"NONE","productionEntrypointWired":false},"operations":["prepare","admit","verify","dispose"],"upstream":{"contract":"controller-disposable-host-no-shell-executor-contract.json","receiptStatus":"FIXTURE_NO_SHELL_EXECUTION_RETIRED","verdict":"FIXTURE_DRIVER_ONLY_NO_PAID_HOST_AUTHORITY","verification":"POSITIVE_AUTHORITATIVE_CALLBACK_PLUS_EXACT_SHAPE","launchAuthority":"NONE"},"prerequisiteSlots":[{"ordinal":1,"slot":"USER_COST_AUTHORIZATION_RECEIPT","authority":"USER_COST_OWNER","signerKeyId":"fixture-p256-user-cost-owner","liveSatisfied":false},{"ordinal":2,"slot":"LIVE_QUOTE_SOURCE_QUALIFICATION","authority":"FINOPS_QUOTE_AUTHORITY","signerKeyId":"fixture-p256-finops-quote-authority","liveSatisfied":false},{"ordinal":3,"slot":"DURABLE_HOST_CLAIM_STORE_QUALIFICATION","authority":"DURABLE_CAPACITY_OWNER","signerKeyId":"fixture-p256-durable-capacity-owner","liveSatisfied":false},{"ordinal":4,"slot":"PRODUCTION_NO_SHELL_DRIVER_QUALIFICATION","authority":"EXECUTION_SECURITY_OWNER","signerKeyId":"fixture-p256-execution-security-owner","liveSatisfied":false},{"ordinal":5,"slot":"INDEPENDENT_WATCHDOG_QUALIFICATION","authority":"INDEPENDENT_RETIREMENT_OWNER","signerKeyId":"fixture-p256-independent-retirement-owner","liveSatisfied":false},{"ordinal":6,"slot":"ISOLATED_NONPRODUCTION_NETWORK_QUALIFICATION","authority":"NETWORK_PLATFORM_OWNER","signerKeyId":"fixture-p256-network-platform-owner","liveSatisfied":false},{"ordinal":7,"slot":"IMMUTABLE_IMAGE_PACKAGE_QUALIFICATION","authority":"EXECUTION_SECURITY_OWNER","signerKeyId":"fixture-p256-execution-security-owner","liveSatisfied":false},{"ordinal":8,"slot":"RETIREMENT_DRILL_QUALIFICATION","authority":"INDEPENDENT_RETIREMENT_OWNER","signerKeyId":"fixture-p256-independent-retirement-owner","liveSatisfied":false}],"authorityTopology":[{"authority":"USER_COST_OWNER","slots":1,"mayLaunch":false},{"authority":"FINOPS_QUOTE_AUTHORITY","slots":1,"mayLaunch":false},{"authority":"DURABLE_CAPACITY_OWNER","slots":1,"mayLaunch":false},{"authority":"EXECUTION_SECURITY_OWNER","slots":2,"mayLaunch":false},{"authority":"NETWORK_PLATFORM_OWNER","slots":1,"mayLaunch":false},{"authority":"INDEPENDENT_RETIREMENT_OWNER","slots":2,"mayLaunch":false}],"manifestGuardrails":{"requestValiditySeconds":30,"qualificationValiditySeconds":86400,"maximumMilliUsdCeiling":500,"quoteMaxAgeSeconds":300,"retirementSlaSeconds":120,"claimStore":"DURABLE_CONDITIONAL_GENERATION_FENCED_REQUIRED_NOT_CONFIGURED","driverSurface":"NO_SHELL_CLOSED_TYPED_PORTS_REQUIRED_NOT_CONFIGURED","networkIngress":"NONE","networkEgress":"DEFAULT_DENY","liveQuoteFetched":false,"productionConfigured":false},"stateModel":["UNTRUSTED","EXECUTOR_RECEIPT_VERIFIED","SUBJECT_BOUND","COST_AUTHORITY_VERIFIED_FIXTURE_ONLY","QUOTE_SOURCE_QUALIFIED_FIXTURE_ONLY","DURABLE_CLAIM_STORE_QUALIFIED_FIXTURE_ONLY","NO_SHELL_DRIVER_QUALIFIED_FIXTURE_ONLY","RETIREMENT_AUTHORITY_QUALIFIED_FIXTURE_ONLY","ISOLATED_NETWORK_QUALIFIED_FIXTURE_ONLY","IMMUTABLE_PACKAGE_QUALIFIED_FIXTURE_ONLY","RETIREMENT_DRILL_QUALIFIED_FIXTURE_ONLY","PREREQUISITES_ADMITTED_TEST_ONLY","DENIED_OR_DISPOSED"],"truth":{"userCostAuthorizationsObserved":0,"livePriceQuotesObserved":0,"durableClaimStoresConfigured":0,"productionDriversConfigured":0,"independentRetirementDriversConfigured":0,"productionHostRuns":0,"productionHostClaims":0,"systemdUnitsInstalled":0,"controllerServicesStarted":0,"listenerStarts":0,"publicRoutes":0,"reverseProxyRoutes":0,"pricingReadsExecuted":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0,"paidResourcesCreated":false,"deploymentPermitted":false},"selectedDenialTrace":{"fixtureId":"RFDHRP-64","mutation":"MANIFEST_LAUNCH_AUTHORITY","expected":"DENY","reason":"A prerequisite dossier that claims AWS host-launch authority is rejected even when all eight fixture qualification receipts are otherwise digest-valid."},"invariants":["The production Controller composition root never imports this evaluator.","Only an exact retired no-shell fixture receipt may enter prerequisite admission.","Contained and rolled-back fixture executor receipts cannot enter prerequisite admission.","The upstream executor receipt must be positively verified by its authoritative boundary.","False upstream verification denies without falling back to local digest trust.","Upstream verifier exceptions fail closed and never become launch authority.","The upstream receipt identity is deterministically recomputed before trust.","The upstream receipt must prove one claim and one complete retirement.","The upstream receipt must prove the fixture session was sealed.","The upstream receipt must prove both host and root-volume retirement.","The upstream receipt cannot report shell commands or spawned processes.","The upstream receipt cannot report host contact or package loading.","The upstream receipt cannot carry paid-host authorization.","Every upstream production, external and mutation counter remains zero.","Exactly eight prerequisite slots are supplied in canonical order.","Every prerequisite receipt binds the exact upstream executor receipt digest.","Every prerequisite receipt is exact-shape and digest-bound.","Every prerequisite receipt is positively verified by the qualification boundary.","False qualification verification denies the entire dossier.","Qualification verifier exceptions deny the entire dossier.","Qualification receipts are valid for no more than twenty-four hours.","Qualification receipts must be live at the evaluator clock instant.","All qualification decisions remain QUALIFIED_FIXTURE_ONLY.","No qualification receipt may claim observed live evidence.","No qualification receipt may claim a production configuration.","The user cost slot is owned only by USER_COST_OWNER.","The quote-source slot is owned only by FINOPS_QUOTE_AUTHORITY.","The durable-claim slot is owned only by DURABLE_CAPACITY_OWNER.","Driver and immutable-package slots share the reviewed execution-security owner.","Watchdog and retirement-drill slots share the independent retirement owner.","The isolated-network slot is owned only by NETWORK_PLATFORM_OWNER.","Six distinct authority identities cover the eight prerequisite slots.","A shared slot owner never gains host-launch or billing authority.","The manifest binds all eight qualification receipt digests in canonical order.","The manifest maximum is an authorization ceiling, not a live price quote.","The synthetic maximum cannot exceed five hundred milli-USD.","The quote source is a fixture-qualified reference and is never fetched here.","A future live quote must be no older than three hundred seconds.","Durable conditional generation-fenced claim storage remains required and unconfigured.","The production driver requirement remains a closed typed no-shell surface.","The manifest shell surface remains NONE.","The watchdog requirement uses credentials separate from execution authority.","The target network requires no ingress and default-deny egress.","The immutable image and execution package are digest-bound prerequisites.","Retirement requires both instance and root-volume proof within one hundred twenty seconds.","The manifest cannot claim production configuration or live observation.","The manifest carries no launch, billing or promotion authority.","The request is valid for at most thirty seconds.","The request binds the upstream digest, manifest digest and canonical slot list.","The request nonce differs from the upstream executor nonce.","A request nonce can prepare at most one opaque admission handle.","Opaque handles are identity-bound in a WeakMap and cannot be reconstructed.","Each opaque handle is one-shot and cannot admit twice.","Disposed handles cannot admit and repeated disposal is idempotent.","The terminal admission identity binds upstream, manifest, nonce and request time.","Terminal receipt verification is deterministic and safe to replay.","The terminal receipt qualifies eight fixture prerequisite shapes and zero production prerequisites.","No user cost authorization or live price quote is observed by this evaluator.","No durable store or production execution/retirement driver is configured here.","No host, package, process, service, listener, route or proxy is contacted or created.","External reads, writes, mutations and paid resources remain zero.","Port 8110, public ingress, host launch, billing and promotion remain outside this evaluator."],"verification":{"status":"PASS_FIXTURE_ONLY","fixtures":84,"acceptedOutcomes":10,"deniedOutcomes":74,"executorReceiptsVerified":62,"qualificationSignaturesVerified":368,"admissionReceiptsVerified":3,"disposedHandles":1,"userCostAuthorizationsObserved":0,"livePriceQuotesObserved":0,"productionHostRuns":0,"productionHostClaims":0,"processesSpawned":0,"hostContacts":0,"packageLoads":0,"pricingReadsExecuted":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"mutationsExecuted":0,"paidResourcesCreated":false},"productionPrerequisites":["A user-controlled, scope-bound and expiring cost authorization receipt must be supplied outside this fixture evaluator.","A reviewed live pricing source must be queried and its fresh signed quote bound to the exact host request.","A durable conditional-write claim store with generation fencing and recovery tests must be configured.","A production no-shell driver must implement only the reviewed typed ports and carry no generic command surface.","An independently credentialed deadline watchdog must retain authority to retire the instance and root volume.","A dedicated nonproduction network must prove no public ingress and reviewed default-deny egress policy.","The selected immutable image must be scanned, signed, region-available and bound to the candidate package.","The execution package must be immutable, size-bounded, signature-verified and free of secret or executable injection fields.","Retirement drills must prove instance and root-volume deletion under success, timeout, crash and ambiguous API outcomes.","FinOps alerts, budget ceilings, billing tags and an independent spend reconciliation path must be operational.","Runtime audit evidence must enter the durable signed journal without giving the Controller promotion authority.","A separately approved live-evidence collection change must prove all prerequisites before any paid host may be launched."],"fixtureRegistry":{"schemaVersion":"developer.reits.tech/runner-factory-disposable-host-real-prerequisites-admission-fixtures/v1","mode":"FIXTURE_PREREQUISITE_VALIDATION_ONLY_NO_LAUNCH_NO_BILLING","cases":[{"id":"RFDHRP-01","mutation":"PREPARE_BASELINE","expected":"ACCEPT"},{"id":"RFDHRP-02","mutation":"ADMIT_BASELINE","expected":"ACCEPT"},{"id":"RFDHRP-03","mutation":"VERIFY_RECEIPT","expected":"ACCEPT"},{"id":"RFDHRP-04","mutation":"VERIFY_REPLAY","expected":"ACCEPT"},{"id":"RFDHRP-05","mutation":"DISPOSE_REPLAY","expected":"ACCEPT"},{"id":"RFDHRP-06","mutation":"REQUEST_WINDOW_EDGE","expected":"ACCEPT"},{"id":"RFDHRP-07","mutation":"MAXIMUM_COST_ZERO_EDGE","expected":"ACCEPT"},{"id":"RFDHRP-08","mutation":"MAXIMUM_COST_CAP_EDGE","expected":"ACCEPT"},{"id":"RFDHRP-09","mutation":"QUALIFICATION_VALIDITY_EDGE","expected":"ACCEPT"},{"id":"RFDHRP-10","mutation":"ADMISSION_OBSERVED_AT_EDGE","expected":"ACCEPT"},{"id":"RFDHRP-11","mutation":"EXECUTABLE_KEY","expected":"DENY"},{"id":"RFDHRP-12","mutation":"UPSTREAM_SCHEMA","expected":"DENY"},{"id":"RFDHRP-13","mutation":"UPSTREAM_STATUS","expected":"DENY"},{"id":"RFDHRP-14","mutation":"UPSTREAM_VERDICT","expected":"DENY"},{"id":"RFDHRP-15","mutation":"UPSTREAM_MODE","expected":"DENY"},{"id":"RFDHRP-16","mutation":"UPSTREAM_RECEIPT_DIGEST","expected":"DENY"},{"id":"RFDHRP-17","mutation":"UPSTREAM_ID","expected":"DENY"},{"id":"RFDHRP-18","mutation":"UPSTREAM_FAILURE","expected":"DENY"},{"id":"RFDHRP-19","mutation":"UPSTREAM_CLAIMS","expected":"DENY"},{"id":"RFDHRP-20","mutation":"UPSTREAM_RETIREMENT","expected":"DENY"},{"id":"RFDHRP-21","mutation":"UPSTREAM_SHELL_COUNT","expected":"DENY"},{"id":"RFDHRP-22","mutation":"UPSTREAM_PROCESS_COUNT","expected":"DENY"},{"id":"RFDHRP-23","mutation":"UPSTREAM_HOST_CONTACT","expected":"DENY"},{"id":"RFDHRP-24","mutation":"UPSTREAM_PACKAGE_LOAD","expected":"DENY"},{"id":"RFDHRP-25","mutation":"UPSTREAM_PAID_AUTHORITY","expected":"DENY"},{"id":"RFDHRP-26","mutation":"UPSTREAM_PRODUCTION_RUN","expected":"DENY"},{"id":"RFDHRP-27","mutation":"UPSTREAM_EXTERNAL_READ","expected":"DENY"},{"id":"RFDHRP-28","mutation":"UPSTREAM_LAUNCH_AUTHORITY","expected":"DENY"},{"id":"RFDHRP-29","mutation":"UPSTREAM_EXTRA_KEY","expected":"DENY"},{"id":"RFDHRP-30","mutation":"UPSTREAM_VERIFIER_FALSE","expected":"DENY"},{"id":"RFDHRP-31","mutation":"UPSTREAM_VERIFIER_THROW","expected":"DENY"},{"id":"RFDHRP-32","mutation":"QUALIFICATION_COUNT","expected":"DENY"},{"id":"RFDHRP-33","mutation":"QUALIFICATION_ORDER","expected":"DENY"},{"id":"RFDHRP-34","mutation":"QUALIFICATION_SLOT","expected":"DENY"},{"id":"RFDHRP-35","mutation":"QUALIFICATION_DECISION","expected":"DENY"},{"id":"RFDHRP-36","mutation":"QUALIFICATION_AUTHORITY","expected":"DENY"},{"id":"RFDHRP-37","mutation":"QUALIFICATION_SIGNER","expected":"DENY"},{"id":"RFDHRP-38","mutation":"QUALIFICATION_MODE","expected":"DENY"},{"id":"RFDHRP-39","mutation":"QUALIFICATION_SUBJECT","expected":"DENY"},{"id":"RFDHRP-40","mutation":"QUALIFICATION_OBSERVED_LIVE","expected":"DENY"},{"id":"RFDHRP-41","mutation":"QUALIFICATION_PRODUCTION_CONFIGURED","expected":"DENY"},{"id":"RFDHRP-42","mutation":"QUALIFICATION_NOT_YET_VALID","expected":"DENY"},{"id":"RFDHRP-43","mutation":"QUALIFICATION_EXPIRED","expected":"DENY"},{"id":"RFDHRP-44","mutation":"QUALIFICATION_DIGEST","expected":"DENY"},{"id":"RFDHRP-45","mutation":"QUALIFICATION_EXTRA_KEY","expected":"DENY"},{"id":"RFDHRP-46","mutation":"QUALIFICATION_VERIFIER_FALSE","expected":"DENY"},{"id":"RFDHRP-47","mutation":"QUALIFICATION_VERIFIER_THROW","expected":"DENY"},{"id":"RFDHRP-48","mutation":"MANIFEST_SUBJECT","expected":"DENY"},{"id":"RFDHRP-49","mutation":"MANIFEST_MAX_COST_NEGATIVE","expected":"DENY"},{"id":"RFDHRP-50","mutation":"MANIFEST_MAX_COST_OVER_CAP","expected":"DENY"},{"id":"RFDHRP-51","mutation":"MANIFEST_QUOTE_MODE","expected":"DENY"},{"id":"RFDHRP-52","mutation":"MANIFEST_QUOTE_AGE","expected":"DENY"},{"id":"RFDHRP-53","mutation":"MANIFEST_CLAIM_STORE","expected":"DENY"},{"id":"RFDHRP-54","mutation":"MANIFEST_GENERATION_FENCE","expected":"DENY"},{"id":"RFDHRP-55","mutation":"MANIFEST_DRIVER_SURFACE","expected":"DENY"},{"id":"RFDHRP-56","mutation":"MANIFEST_SHELL_SURFACE","expected":"DENY"},{"id":"RFDHRP-57","mutation":"MANIFEST_WATCHDOG_CREDENTIALS","expected":"DENY"},{"id":"RFDHRP-58","mutation":"MANIFEST_NETWORK_INGRESS","expected":"DENY"},{"id":"RFDHRP-59","mutation":"MANIFEST_NETWORK_EGRESS","expected":"DENY"},{"id":"RFDHRP-60","mutation":"MANIFEST_ROOT_VOLUME","expected":"DENY"},{"id":"RFDHRP-61","mutation":"MANIFEST_QUALIFICATION_DIGESTS","expected":"DENY"},{"id":"RFDHRP-62","mutation":"MANIFEST_PRODUCTION_CONFIGURED","expected":"DENY"},{"id":"RFDHRP-63","mutation":"MANIFEST_LIVE_OBSERVED","expected":"DENY"},{"id":"RFDHRP-64","mutation":"MANIFEST_LAUNCH_AUTHORITY","expected":"DENY"},{"id":"RFDHRP-65","mutation":"MANIFEST_BILLING_AUTHORITY","expected":"DENY"},{"id":"RFDHRP-66","mutation":"MANIFEST_PROMOTION_AUTHORITY","expected":"DENY"},{"id":"RFDHRP-67","mutation":"MANIFEST_DIGEST","expected":"DENY"},{"id":"RFDHRP-68","mutation":"MANIFEST_EXTRA_KEY","expected":"DENY"},{"id":"RFDHRP-69","mutation":"REQUEST_SCHEMA","expected":"DENY"},{"id":"RFDHRP-70","mutation":"REQUEST_ACTION","expected":"DENY"},{"id":"RFDHRP-71","mutation":"REQUEST_MODE","expected":"DENY"},{"id":"RFDHRP-72","mutation":"REQUEST_SUBJECT","expected":"DENY"},{"id":"RFDHRP-73","mutation":"REQUEST_MANIFEST","expected":"DENY"},{"id":"RFDHRP-74","mutation":"REQUEST_SLOT_ORDER","expected":"DENY"},{"id":"RFDHRP-75","mutation":"REQUEST_NONCE_INVALID","expected":"DENY"},{"id":"RFDHRP-76","mutation":"REQUEST_EXPIRED","expected":"DENY"},{"id":"RFDHRP-77","mutation":"REQUEST_WINDOW_LONG","expected":"DENY"},{"id":"RFDHRP-78","mutation":"REQUEST_REPLAY","expected":"DENY"},{"id":"RFDHRP-79","mutation":"RECONSTRUCTED_HANDLE","expected":"DENY"},{"id":"RFDHRP-80","mutation":"DISPOSED_HANDLE","expected":"DENY"},{"id":"RFDHRP-81","mutation":"ADMIT_REPLAY","expected":"DENY"},{"id":"RFDHRP-82","mutation":"RECEIPT_LIVE_QUOTE","expected":"DENY"},{"id":"RFDHRP-83","mutation":"RECEIPT_PAID_RESOURCE","expected":"DENY"},{"id":"RFDHRP-84","mutation":"RECEIPT_DIGEST","expected":"DENY"}]},"discovery":{"controller":"/api/runner-factory/controller","lifecycle":"/api/runner-factory","upstream":"/api/runner-factory/controller/disposable-host-no-shell-executor","workbench":"/release-foundation#disposable-host-real-prerequisites-admission","schema":"/schemas/runner-factory-controller-disposable-host-real-prerequisites-admission.v1.schema.json"}}