{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://developer.reits.tech/schemas/runner-factory-controller-disposable-host-live-evidence-collection-execution-authorization-authority-compromise-containment-audit-chain-recovery-review.v1.schema.json",
  "title": "Runner Factory Authority Compromise Containment and Audit-chain Recovery Review",
  "type": "object",
  "required": ["schemaVersion", "status", "observedAt", "scope", "upstream", "operations", "recoverySlots", "authorityTopology", "recoveryGuardrails", "stateModel", "invariants", "productionPrerequisites", "selectedDenialTrace", "verification", "truth", "fixtureRegistry", "discovery"],
  "properties": {
    "schemaVersion": { "const": "developer.reits.tech/runner-factory-disposable-host-live-evidence-collection-execution-authorization-authority-compromise-containment-audit-chain-recovery-review-contract/v1" },
    "status": { "const": "DISPOSABLE_HOST_LIVE_EVIDENCE_COLLECTION_EXECUTION_AUTHORIZATION_AUTHORITY_COMPROMISE_CONTAINMENT_AUDIT_CHAIN_RECOVERY_REVIEW_IMPLEMENTED_NOT_CONFIGURED" },
    "observedAt": { "type": "string", "format": "date-time" },
    "scope": {
      "type": "object",
      "required": ["mode", "input", "output", "verdict", "fixtureRecoveryShapesVerified", "productionCompromiseSignalPresent", "generationQuarantined", "grantsAndLeasesContained", "settlementAndCapacityCompensated", "auditContinuityProven", "operatorEscalationApproved", "recoveryGenerationReadmitted", "keyMaterialCreated", "containmentReviewPermitted", "recoveryPermitted", "hostStarted", "shellSurface", "transactionAuthority", "launchAuthority", "billingAuthority", "promotionAuthority", "productionEntrypointWired"],
      "properties": {
        "mode": { "const": "FIXTURE_COMPROMISE_CONTAINMENT_RECOVERY_REVIEW_ONLY_NO_QUARANTINE_NO_KEY_ACTION_NO_AUDIT_WRITE_NO_HOST_START" },
        "input": { "const": "POSITIVELY_VERIFIED_FIXTURE_EXECUTION_AUTHORIZATION_AUTHORITY_TRUST_REVOCATION_ADMISSION_RECEIPT" },
        "output": { "const": "AUTHORITY_COMPROMISE_CONTAINMENT_AUDIT_CHAIN_RECOVERY_REVIEW_PREPARED_FIXTURE_ONLY" },
        "verdict": { "const": "REQUIRES_PRODUCTION_COMPROMISE_SIGNALS_QUARANTINE_GENERATION_CONTAINMENT_COMPENSATION_AUDIT_CONTINUITY_ESCALATION_AND_RECOVERY_EVIDENCE" },
        "fixtureRecoveryShapesVerified": { "const": 7 },
        "productionCompromiseSignalPresent": { "const": false },
        "generationQuarantined": { "const": false },
        "grantsAndLeasesContained": { "const": false },
        "settlementAndCapacityCompensated": { "const": false },
        "auditContinuityProven": { "const": false },
        "operatorEscalationApproved": { "const": false },
        "recoveryGenerationReadmitted": { "const": false },
        "keyMaterialCreated": { "const": false },
        "containmentReviewPermitted": { "const": false },
        "recoveryPermitted": { "const": false },
        "hostStarted": { "const": false },
        "shellSurface": { "const": "NONE" },
        "transactionAuthority": { "const": "NONE" },
        "launchAuthority": { "const": "NONE" },
        "billingAuthority": { "const": "NONE" },
        "promotionAuthority": { "const": "NONE" },
        "productionEntrypointWired": { "const": false }
      },
      "additionalProperties": true
    },
    "upstream": {
      "type": "object",
      "required": ["schemaVersion", "status", "verdict", "authoritativeVerificationRequired", "positiveBooleanRequired"],
      "properties": {
        "schemaVersion": { "const": "developer.reits.tech/runner-factory-disposable-host-live-evidence-collection-execution-authorization-authority-trust-revocation-admission-receipt/v1" },
        "status": { "const": "EXECUTION_AUTHORIZATION_AUTHORITY_TRUST_REVOCATION_ADMISSION_PREPARED_FIXTURE_ONLY" },
        "verdict": { "const": "REQUIRES_PRODUCTION_INTERFACES_PINNED_KEYS_REVOCATION_COMPENSATION_EXPIRY_AND_IMMUTABLE_AUDIT_EVIDENCE" },
        "authoritativeVerificationRequired": { "const": true },
        "positiveBooleanRequired": { "const": true }
      },
      "additionalProperties": false
    },
    "operations": { "type": "array", "minItems": 4, "maxItems": 4 },
    "recoverySlots": {
      "type": "array",
      "minItems": 7,
      "maxItems": 7,
      "items": {
        "type": "object",
        "required": ["ordinal", "slot", "authority", "signerKeyId", "requiredBinding", "observedLive"],
        "properties": {
          "ordinal": { "type": "integer", "minimum": 1, "maximum": 7 },
          "slot": { "enum": ["COMPROMISE_SIGNAL_ADMISSION", "KEY_GENERATION_QUARANTINE_ADMISSION", "GRANT_AND_LEASE_CONTAINMENT_ADMISSION", "SETTLEMENT_AND_CAPACITY_COMPENSATION_ADMISSION", "AUDIT_CHAIN_CONTINUITY_ADMISSION", "OPERATOR_ESCALATION_DECISION_ADMISSION", "RECOVERY_GENERATION_READMISSION_REVIEW"] },
          "authority": { "enum": ["SECURITY_DETECTION_AUTHORITY", "KEY_QUARANTINE_AUTHORITY", "EXECUTION_CONTAINMENT_AUTHORITY", "COMPENSATION_RECOVERY_AUTHORITY", "AUDIT_CONTINUITY_AUTHORITY", "INCIDENT_COMMAND_AUTHORITY", "RECOVERY_ADMISSION_AUTHORITY"] },
          "signerKeyId": { "type": "string", "pattern": "^fixture-p256-" },
          "requiredBinding": { "type": "string" },
          "observedLive": { "const": false }
        },
        "additionalProperties": false
      }
    },
    "authorityTopology": { "type": "array", "minItems": 7, "maxItems": 7 },
    "recoveryGuardrails": {
      "type": "object",
      "required": ["requestValiditySeconds", "recoveryShapeValiditySeconds", "hostCountMaximum", "maximumMilliUsdCeiling", "currency", "containmentOrdering", "failurePolicy", "shellSurface", "productionCompromiseSignalPresent", "generationQuarantined", "grantsAndLeasesContained", "settlementAndCapacityCompensated", "auditContinuityProven", "operatorEscalationApproved", "recoveryGenerationReadmitted", "containmentReviewPermitted", "recoveryPermitted", "executionAuthorized", "hostStarted", "productionConfigured"],
      "properties": {
        "requestValiditySeconds": { "const": 30 },
        "recoveryShapeValiditySeconds": { "const": 3600 },
        "hostCountMaximum": { "const": 1 },
        "maximumMilliUsdCeiling": { "const": 500 },
        "currency": { "const": "USD" },
        "containmentOrdering": { "const": "DETECT_THEN_QUARANTINE_GENERATION_THEN_CONTAIN_GRANTS_AND_LEASES_THEN_COMPENSATE_THEN_PROVE_AUDIT_CONTINUITY_THEN_ESCALATE_THEN_REVIEW_RECOVERY" },
        "failurePolicy": { "const": "KEEP_GENERATION_QUARANTINED_REVOKE_AND_EXPIRE_AUTHORITY_CONTAIN_OR_ESCALATE" },
        "shellSurface": { "const": "NONE" },
        "productionCompromiseSignalPresent": { "const": false },
        "generationQuarantined": { "const": false },
        "grantsAndLeasesContained": { "const": false },
        "settlementAndCapacityCompensated": { "const": false },
        "auditContinuityProven": { "const": false },
        "operatorEscalationApproved": { "const": false },
        "recoveryGenerationReadmitted": { "const": false },
        "containmentReviewPermitted": { "const": false },
        "recoveryPermitted": { "const": false },
        "executionAuthorized": { "const": false },
        "hostStarted": { "const": false },
        "productionConfigured": { "const": false }
      },
      "additionalProperties": true
    },
    "stateModel": { "type": "array", "minItems": 19, "maxItems": 19, "items": { "type": "string" } },
    "invariants": { "type": "array", "minItems": 94, "maxItems": 94, "items": { "type": "string" } },
    "productionPrerequisites": { "type": "array", "minItems": 20, "maxItems": 20, "items": { "type": "string" } },
    "selectedDenialTrace": {
      "type": "object",
      "required": ["fixtureId", "mutation", "expected", "reason"],
      "properties": { "fixtureId": { "const": "RFDHLEAACCRR-119" }, "mutation": { "const": "DOSSIER_RECOVERY_PERMITTED" }, "expected": { "const": "DENY" }, "reason": { "type": "string" } },
      "additionalProperties": false
    },
    "verification": {
      "type": "object",
      "required": ["status", "fixtures", "acceptedOutcomes", "deniedOutcomes", "upstreamReceiptsVerified", "recoverySlotReceiptsVerified", "recoveryReceiptsVerified", "projectedReviews", "disposedHandles", "productionCompromiseSignalsObserved", "quarantinedKeyGenerations", "auditContinuityWitnessesObserved", "operatorEscalationsObserved", "recoveryReadmissionsObserved", "keysCreated", "keysRotated", "keysRevoked", "grantsRevoked", "auditWritesExecuted", "transactionCommitsObserved", "executionAuthorizationsObserved", "externalReadsExecuted", "externalWritesExecuted", "mutationsExecuted", "paidResourcesCreated"],
      "properties": {
        "status": { "const": "PASS_FIXTURE_ONLY" },
        "fixtures": { "const": 120 },
        "acceptedOutcomes": { "const": 22 },
        "deniedOutcomes": { "const": 98 },
        "upstreamReceiptsVerified": { "const": 98 },
        "recoverySlotReceiptsVerified": { "const": 331 },
        "recoveryReceiptsVerified": { "const": 3 },
        "projectedReviews": { "const": 25 },
        "disposedHandles": { "const": 2 },
        "productionCompromiseSignalsObserved": { "const": 0 },
        "quarantinedKeyGenerations": { "const": 0 },
        "auditContinuityWitnessesObserved": { "const": 0 },
        "operatorEscalationsObserved": { "const": 0 },
        "recoveryReadmissionsObserved": { "const": 0 },
        "keysCreated": { "const": 0 },
        "keysRotated": { "const": 0 },
        "keysRevoked": { "const": 0 },
        "grantsRevoked": { "const": 0 },
        "auditWritesExecuted": { "const": 0 },
        "transactionCommitsObserved": { "const": 0 },
        "executionAuthorizationsObserved": { "const": 0 },
        "externalReadsExecuted": { "const": 0 },
        "externalWritesExecuted": { "const": 0 },
        "mutationsExecuted": { "const": 0 },
        "paidResourcesCreated": { "const": false }
      },
      "additionalProperties": true
    },
    "truth": {
      "type": "object",
      "required": ["productionCompromiseSignalsObserved", "quarantinedKeyGenerations", "grantContainmentsObserved", "leaseContainmentsObserved", "settlementCompensationsObserved", "capacityReleasesObserved", "auditContinuityWitnessesObserved", "operatorEscalationsObserved", "recoveryReadmissionsObserved", "keysCreated", "keysRotated", "keysRevoked", "grantsRevoked", "auditWritesExecuted", "transactionCommitsObserved", "executionAuthorizationsObserved", "productionHostRuns", "externalReadsExecuted", "externalWritesExecuted", "mutationsExecuted", "paidResourcesCreated", "containmentReviewPermitted", "recoveryPermitted", "executionPermitted", "deploymentPermitted"],
      "properties": {
        "productionCompromiseSignalsObserved": { "const": 0 },
        "quarantinedKeyGenerations": { "const": 0 },
        "grantContainmentsObserved": { "const": 0 },
        "leaseContainmentsObserved": { "const": 0 },
        "settlementCompensationsObserved": { "const": 0 },
        "capacityReleasesObserved": { "const": 0 },
        "auditContinuityWitnessesObserved": { "const": 0 },
        "operatorEscalationsObserved": { "const": 0 },
        "recoveryReadmissionsObserved": { "const": 0 },
        "keysCreated": { "const": 0 },
        "keysRotated": { "const": 0 },
        "keysRevoked": { "const": 0 },
        "grantsRevoked": { "const": 0 },
        "auditWritesExecuted": { "const": 0 },
        "transactionCommitsObserved": { "const": 0 },
        "executionAuthorizationsObserved": { "const": 0 },
        "productionHostRuns": { "const": 0 },
        "externalReadsExecuted": { "const": 0 },
        "externalWritesExecuted": { "const": 0 },
        "mutationsExecuted": { "const": 0 },
        "paidResourcesCreated": { "const": false },
        "containmentReviewPermitted": { "const": false },
        "recoveryPermitted": { "const": false },
        "executionPermitted": { "const": false },
        "deploymentPermitted": { "const": false }
      },
      "additionalProperties": true
    },
    "fixtureRegistry": {
      "type": "object",
      "required": ["schemaVersion", "mode", "networkRequestsExecuted", "compromiseSignalsConsumed", "keyGenerationsQuarantined", "keysCreated", "keysRotated", "keysRevoked", "grantsRevoked", "compensationsExecuted", "leasesExpired", "auditWritesExecuted", "operatorEscalationsExecuted", "recoveryReadmissionsExecuted", "transactionCommitsExecuted", "executionAuthorizationsExecuted", "hostLaunchesExecuted", "externalWritesExecuted", "paidResourcesCreated", "cases"],
      "properties": {
        "schemaVersion": { "const": "developer.reits.tech/runner-factory-disposable-host-live-evidence-collection-execution-authorization-authority-compromise-containment-audit-chain-recovery-review-fixtures/v1" },
        "mode": { "const": "FIXTURE_COMPROMISE_CONTAINMENT_RECOVERY_REVIEW_ONLY_NO_QUARANTINE_NO_KEY_ACTION_NO_AUDIT_WRITE_NO_HOST_START" },
        "networkRequestsExecuted": { "const": 0 },
        "compromiseSignalsConsumed": { "const": 0 },
        "keyGenerationsQuarantined": { "const": 0 },
        "keysCreated": { "const": 0 },
        "keysRotated": { "const": 0 },
        "keysRevoked": { "const": 0 },
        "grantsRevoked": { "const": 0 },
        "compensationsExecuted": { "const": 0 },
        "leasesExpired": { "const": 0 },
        "auditWritesExecuted": { "const": 0 },
        "operatorEscalationsExecuted": { "const": 0 },
        "recoveryReadmissionsExecuted": { "const": 0 },
        "transactionCommitsExecuted": { "const": 0 },
        "executionAuthorizationsExecuted": { "const": 0 },
        "hostLaunchesExecuted": { "const": 0 },
        "externalWritesExecuted": { "const": 0 },
        "paidResourcesCreated": { "const": false },
        "cases": { "type": "array", "minItems": 120, "maxItems": 120, "items": { "type": "object", "required": ["id", "expected", "mutation"], "properties": { "id": { "pattern": "^RFDHLEAACCRR-[0-9]{3}$" }, "expected": { "enum": ["ACCEPT", "DENY"] }, "mutation": { "type": "string" } }, "additionalProperties": false } }
      },
      "additionalProperties": true
    },
    "discovery": {
      "type": "object",
      "required": ["controller", "lifecycle", "upstream", "workbench", "schema"],
      "properties": {
        "controller": { "const": "/api/runner-factory/controller" },
        "lifecycle": { "const": "/api/runner-factory" },
        "upstream": { "const": "/api/runner-factory/controller/disposable-host-live-evidence-collection-execution-authorization-authority-trust-revocation-admission" },
        "workbench": { "const": "/release-foundation#disposable-host-live-evidence-collection-execution-authorization-authority-compromise-containment-audit-chain-recovery-review" },
        "schema": { "const": "/schemas/runner-factory-controller-disposable-host-live-evidence-collection-execution-authorization-authority-compromise-containment-audit-chain-recovery-review.v1.schema.json" }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}