REITS / ARCHITECTURED05 · G04 · CUT 94
P58 · PRODUCTION-LIKE ISOLATED DRY-RUN QUALIFIED · LIVE INVOCATION HELD

Activate briefly.
Sign exactly.
Revoke always.

Cut 94 将 Cut 93 capability-free terminal receipt 投影成一个短期、一次性、仅限 dry-run 的 Lease Activation：每个 Invocation Envelope 只绑定一个 frozen descriptor；production-like Adapter 只能完成 construct、validate、normalize、schema dry-run 与 dispose。成功和失败都强制撤销激活，网络、存储、真实调用与 8110 始终为零。

GLOBAL CUT94 / 10410 cuts left
QA312 / 3124,496 cumulative
QUALIFIED24isolated dry-runs
REJECTED288reject / revoke
ENVELOPES365fixture-issued
DRY-RUN CALLS317production-like isolated
RESULT SEALS269zero effect
PRODUCTION0activation / calls
01

CURRENT EXTERNAL RED GATE

Repository dry-run 可以验证 production shape，不能替代 live roots、durable claim registry、真实 Adapter、专用主机或 8110 listener。

HOSTshared production portalDENIED
ACTIVATION ROOTPlatform root absent0 PROD ACTIVATIONS
ENVELOPE ROOTRuntime root absent0 PROD ENVELOPES
CONTROLLERlistener remains absent8110 · 0
02

CUT 93 INPUT — CAPABILITY-FREE SEQUENTIAL TERMINAL RECEIPT

只接受 P57 已完成 cursor+1、Permit、response seal、terminal settlement 且 Lease activation 与 production invocation 都为零的终态事实。

CUT 93 TERMINALchain complete / capability freeZERO LIVE EXECUTION
→
CUT 94 ACTIVATIONshort-lived / dry-run onlyNOT PRODUCTION
→
MANDATORY REVOCATIONsuccess or failureZERO EFFECT
03

BOUNDARY CONTRACT — ACTIVATION IS NOT INVOCATION

Lease Activation 仅允许签名信封进入隔离校验；它不能生成 callable、连接、网络请求、持久化写入或真实 Adapter invocation。

ACTIVATIONsession identity + dry-run fenceNOT CALLABLE
INVOCATION ENVELOPEone descriptor / one useDRY-RUN ONLY
LIVE ADAPTERproduction invocation authorityHELD
04

28-FIELD CUT 93 TERMINAL RECEIPT CRITICAL PROJECTION

Transaction、chain、cursor、Lease identity、Permit counts 和所有生产零副作用字段按 digest 精确回读，不接收调用对象。

05

22-FIELD FROZEN RESUME PLAN EXACT READBACK

原 ordinal、port、method、request digest、expected schema 和 timeout 全部只读；dry-run 无权改写 frozen descriptor。

06

FOUR DETACHED LEASE & INVOCATION DRY-RUN AUTHORITIES

Activation、Envelope、Result Seal 和 Revocation 分属四个 owner；keyRef、nonce、职责与生产权限彼此隔离。

PLATFORMshort-lived activationteam:platform-lease-activation
RUNTIMEsigned envelopeteam:runtime-invocation-envelope
SECURITYdry-run result sealteam:security-dry-run-firewall
SRErevocation + settlementteam:sre-activation-revocation
07

29-FIELD SHORT-LIVED LEASE ACTIVATION RECEIPT

Receipt 绑定 Cut 93 digest、transaction、Lease、generation、attempt、plan、terminal chain、Adapter profile、允许的 port-method set 和全套零权限位。

08

FOUR-SECOND ACTIVATION WINDOW

Activation 的 notBefore → expiresAt 不得超过 4,000ms；过期、未来签发、二次 claim 或跨 generation 使用全部失败关闭。

WINDOWnotBefore → expiresAt≤ 4,000 ms
MAX USESactivation nonce1
CONCURRENCYactive envelopes1 MAX
MODEimmutable activation scopeDRY-RUN ONLY
09

ACTIVATION NONCE — CLAIM ONCE, NEVER PROMOTE

Platform signature 验证后，Activation nonce 必须原子 claim；claim 结果不确定时不会尝试 Envelope，而是进入强制撤销。

AVAILABLEsigned, not active
→
CLAIMED DRY-RUN ONLYone isolated session
→
REVOKEDnever live-promoted
10

33-FIELD SIGNED ONE-DESCRIPTOR INVOCATION ENVELOPE

Envelope 精确绑定 Activation、Cut 93、transaction、Lease、plan、terminal chain、一个调用 tuple、Adapter profile、字节预算与 timeout。

11

ONE DESCRIPTOR IDENTITY — NO RANGE, NO TEMPLATE

ordinal、port、method、request digest 与 expected schema 共同构成不可拆分的调用身份；Envelope 不能覆盖列表或未来调用。

identity segmentsourcecardinalitymutation
ordinalfrozen plan1DENIED
portId + methodexact descriptor1 pairDENIED
requestDigestCut 93 plan1 digestDENIED
expected schemafrozen descriptor1 schemaDENIED
12

TWO-SECOND ENVELOPE & REQUEST BUDGET

Envelope 最长 2,000ms、一次一用；canonical request 只包含纯数据身份且最大 2,048 bytes，timeout 继承 frozen plan。

ENVELOPE WINDOWnotBefore → expiresAt≤ 2,000 ms
CANONICAL BYTESidentity-only request32–2,048
TIMEOUTfrozen plan exact≤ 500 ms
MAX USESenvelope nonce1
13

ZERO-EFFECT INVOCATION FIREWALL

四个 permission bit 必须全部保持封闭；任何一个打开都在 Adapter 构造前拒绝。

NETWORK IODNS / HTTP / socketsFALSE
PERSISTENCED1 / R2 / filesystem writesFALSE
PRODUCTION INVOCATIONreal Adapter dispatchFALSE
LISTENER STARTport 8110FALSE
14

PRODUCTION-LIKE ISOLATED ADAPTER PROFILE

使用同样的 port-method 形状、request normalization、schema contract 和 lifecycle，但实现是 deterministic、memory-only、无配置引用和无外部 IO 的隔离 Adapter。

PRODUCTION SHAPEinterface + schema + lifecycleEXACT
+
ISOLATION FENCEnetwork + persistence + listener 0HARD
=
DRY-RUN ADAPTERnot production-qualifiedZERO EFFECT
15

FOUR-STAGE ADAPTER LIFECYCLE

每个 Envelope 都必须完整经过构造、验证、dry-run 和 dispose；跳过 dispose、复用实例或返回 callable 都失败关闭。

01 · CONSTRUCTpure profile
02 · VALIDATEscope + schema
03 · DRY-RUNnormalize only
04 · DISPOSEzero handles
05 · VERIFYeffects = 0
06 · SEALdigest only
07 · NEXTone envelope
08 · REVOKEalways
16

CANONICAL REQUEST NORMALIZATION

Dry-run 只重建 request identity 的 canonical bytes，生成 normalization digest；不读取真实配置、不加载 prior response payload、不执行外部读取。

INPUTordinal + tuple + digestsPURE DATA
NORMALIZEcanonical deterministic bytesSHA-256
OUTPUTnormalization digestNO PAYLOAD
EXTERNAL READall fixture paths0
17

EXPECTED RESPONSE SCHEMA VALIDATION DRY-RUN

Validator 证明 Envelope 的 expected schema 可由目标 Adapter profile 识别；不生成业务 response，也不把 schema validation 误报为生产成功。

PORTprofile exactMATCH
METHODallowlist exactMATCH
REQUESTdigest identityVALID
SCHEMAexpected exactRECOGNIZED
RESPONSEbusiness dataNONE
18

28-FIELD PRODUCTION-LIKE DRY-RUN RESULT SEAL

Security seal 绑定 Envelope、Adapter profile、lifecycle、normalization、validation code、schema 与零网络/存储/生产调用事实。

19

ENVELOPE-BOUND RESULT CHAIN

resultChainDigest 同时吸收 Envelope digest、ordinal、normalization digest、validation code 和 response schema；任何跨 Envelope 重放都会改变 digest。

ENVELOPE DIGESTone descriptor identitySIGNED
+
DRY-RUN RESULTnormalization + validationZERO EFFECT
=
RESULT CHAINpayload-free sealIMMUTABLE
20

SUCCESS PATH STILL REVOKES ACTIVATION

所有 descriptor 通过并不会把 Activation 升级为生产 Lease；最后一个 result seal 验证完成后立即进入 SRE mandatory revocation。

ALL DRY-RUNS SEALEDproduction-like shape qualifiedNOT LIVE
→
MANDATORY REVOKEActivation nonce terminalALWAYS
→
CAPABILITY-FREE RECEIPTnext gate remains externalPRODUCTION 0
21

FAILURE PATH — STOP FUTURE ENVELOPES, REVOKE NOW

签名、scope、claim、construction、normalization、schema、dispose 或 result seal 任一失败，都不猜测成功、不重试 inside dry-run、不签发后续 Envelope。

BEFORE FAILURE
  • one active envelope max
  • network / persistence = 0
  • production calls = 0
STOP + REVOKEno envelope promotion
  • block all future envelopes
  • dispose isolated Adapter
  • revoke Activation immediately
TERMINAL PROOF
  • active envelopes = 0
  • active calls = 0
  • listeners = 0
22

26-FIELD ACTIVATION REVOCATION RECEIPT

SRE receipt 记录成功/失败终态、Envelope/Invocation/Seal counts，并对 active、network、persistence、production 与 listener 五类效果逐项归零。

23

ZERO-EFFECT TERMINAL SETTLEMENT

只有通过 SRE Revocation signature 验证的终态才可 settlement；缺少 revocation、数量漂移或任一非零效果都会拒绝。

ACTIVE ENVELOPESafter terminal0
ACTIVE CALLSafter dispose0
NETWORK / STORAGEall paths0 / 0
PRODUCTION / 8110authority still held0 / 0
24

19 FAILURE CUTPOINTS

从 Cut 93 readback 到 terminal settlement 的每个边界均可注入故障；claim 后路径必须完成撤销或明确失败关闭。

25

24 QUALIFIED LEASE ACTIVATION DRY-RUNS

覆盖五种 frozen suffix；每个合法场景完成签名 Envelope、production-like lifecycle、result seal、mandatory revocation 与零效果 settlement。

24 CUT 93 RECEIPTScapability free
→
74 HAPPY-PATH ENVELOPESfive suffix shapes
→
24 REVOCATIONSproduction calls 0
26

288 REJECTED OR REVOKED DRY-RUNS

六个拒绝面覆盖 upstream、Activation、Envelope、Adapter isolation、Result Seal 与 Revocation。

48 · CUT 93terminal integrity
48 · ACTIVATIONsignature / window / scope
48 · ENVELOPEdescriptor / bytes / permissions
48 · ADAPTERnetwork / storage / lifecycle
48 · RESULT SEALdigest / payload / signature
48 · REVOCATIONterminal zero-effect proof
27

312-CASE EXECUTABLE QA LAB

按 suite 筛选、搜索并点击用例，核对 Activation、Envelope、dry-run lifecycle、Result Seal、Revocation 与生产零副作用字段。

Select a QA case312 / 312 passed · activeEnvelopes=0 · activeCalls=0 · networkCalls=0 · persistenceWrites=0 · productionLeaseActivations=0 · productionInvocationEnvelopes=0 · productionAdapterInvocations=0 · port8110Calls=0
28

P58A–H SUBGATES

八个仓库与隔离 dry-run 子门全部闭环；真实 activation/envelope roots、durable registry、production Adapter、专用主机和 listener 继续独立红门。

29

126 / 137 QUALITY GATES & VISIBLE DEBT

十一个 live 门未观测；production-like 只描述形状相同，不代表生产 runtime、production authority 或 live invocation 已成立。

CUT 95 / 104 · 9 CUTS REMAIN

15 LIVE DEBTS · CUT 95 HANDOFF — one-call Production Invocation Authorization & no-effect shadow dispatch

下一刀承接 Cut 94 capability-free dry-run terminal receipt，定义一次性 Production Invocation Authorization Receipt、目标 Adapter identity、shadow dispatch transaction 和取消/回收边界。Cut 94 Activation 与 Envelope 不能进入真实 Adapter。

01 · INVOCATION AUTHone call / signed subject
02 · ADAPTER IDENTITYexact target + revision
03 · SHADOW DISPATCHno effect / no network
04 · CANCEL & RECLAIMauthorization burn
ownermissing production factstatus
surfacecanonical pathuse
Machine API/api/runner-controller/d05-g04-lease-activation-signed-invocation-envelope-dry-run-admissionruntime evidence
JSON Schema/schemas/runner-controller-d05-g04-lease-activation-signed-invocation-envelope-dry-run-admission.v1.schema.jsonconsumer validation
Candidateops/runner-factory/controller-production-adapter-lease-activation-signed-invocation-envelope-dry-run-candidate.mjsqualification logic
Verifierscripts/verify-runner-controller-production-adapter-lease-activation-signed-invocation-envelope-dry-run-candidate.mjs312 cases
Architecture docdocs/ui-blueprint/187-d05-g04-lease-activation-signed-invocation-envelope-dry-run-admission.mdteam handoff