Admission boundary
CURRENT EXTERNAL RED GATE
01P62_LIVE_INVOCATION_RELEASE_AUTHORITYNo dedicated Controller host, live release root, callable provider, commit witness or 8110 listener exists.
Accepted artifactterminal receipt
Escrow stateDESTROYED
Callable refs0
receiptsealed digestHOLDrevokedestroy
Intent describes. Vote evaluates. Neither executes.
36-FIELD CUT 97 TERMINAL RECEIPT CRITICAL PROJECTION
exact readback
Capability-free Invocation Intent
40-FIELD CAPABILITY-FREE SEALED INVOCATION INTENT
Release signed
CAPABILITY-FREE SEALED REQUEST ANATOMY
06requestDigest: sha256(canonical descriptor)
requestPayloadDigest: sha256(payload bytes)
payloadStored: false
payloadExported: false
callableReferenceStored: false
FOUR DETACHED INTENT AND VOTE AUTHORITIES
separated roots
1.2-SECOND SEALED INTENT WINDOW
bounded0seal
200verify
400claim
600target
800vote
1000closeout
1200expired
maximum claims1
requested calls1
release votes1 max
invocation releases0
Target continuity, no instance
32-FIELD TARGET CONTINUITY ATTESTATION
Runtime signed
TARGET CONTINUITY PROVENANCE
11Source revisionexact Cut 97 SHA
→Module + profiledigest only
→Continuity epochmonotonic identity
→Port contractmethod + schemas
900MS TARGET CONTINUITY WINDOW
ephemeralnotBeforeT+0
expiresAtT+900ms
stale epochREJECT
TARGET CONTINUITY ZERO-SCOPE PROOF
13ConfigRefs resolved0
instance boundfalse
network / storagefalse
listenerfalse
Independent release vote
INDEPENDENT VOTER SEPARATION MAP
hard boundaryRelease · IntentRuntime · Target
Independent
HOLD Voter
The voter owner and key root cannot equal Release, Runtime or SRE custody.
36-FIELD INDEPENDENT HOLD RELEASE VOTE
HOLD
VOTER INDEPENDENCE PROOF
16Release owner matchfalse
Runtime owner matchfalse
SRE root sharedfalse
vote capabilityHOLD only
600MS RELEASE VOTE WINDOW
short leaseissue0ms
claim< 600ms
expiry actionREVOKE
claim surface#2
maximum uses1
accepted votes136
replayREJECT
HOLD-ONLY RELEASE VOTE STATE MACHINE
no approve edgePROPOSEDVERIFIEDCLAIMEDHELDREVOKED
There is deliberately no APPROVED or RELEASED state in Cut 98.
Hold adjudication and zero release
34-FIELD RELEASE VOTE HOLD ADJUDICATION
Independent signed
ADJUDICATION EXACT BINDING
21IntentID + digest
→TargetID + digest
→VoteID + digest
→Requestdescriptor + payload digest
claim surface#3
maximum uses1
claimed80
decisionHOLD
ZERO RELEASE APPROVAL
hard invariantrelease approvals0
approval transitions0
downstream approvals0
ZERO CALLABLE AND PERMIT RELEASE
24invocation permits0
callable releases0
commit transitions0
active calls0
Mandatory closeout
INDEPENDENT RELEASE VOTE REVOCATION
25Revoke before any release transitionA HOLD Vote cannot remain active after adjudication, failure or timeout.
verified revocations80
active votes0
33-FIELD INTENT DESTRUCTION & VOTE REVOCATION RECEIPT
SRE signed
QUALIFIED PATH STILL REVOKES AND DESTROYS
27qualified paths24
voteHOLD
terminal actionREVOKE + DESTROY
catch(any failure) {
hold();
revokeVote();
destroyIntent();
cancelIntent();
releaseTargetContinuity();
settleZeroEffect();
}
TARGET CONTINUITY RELEASE
29ELIGIBLEINTENT_BOUNDRELEASED
Release means dropping an identity attestation, never releasing a callable.
ZERO-EFFECT TERMINAL SETTLEMENT
192 / 192active intent / vote / call0 / 0 / 0
network / persistence0 / 0
production calls0
8110 calls0
receipt / Intent5
Target Continuity5
Release Vote6
Adjudication / closeout7
Executable quality evidence
24 QUALIFIED HELD RELEASE VOTES
all revoked
24 held-qualified336 fail-closed
336 REJECTED OR REVOKED INTENTS
33six negative suites6 × 56
escaped approvals0
escaped calls0
360-CASE EXECUTABLE QA LAB
real P-256
P62A–H SUBGATES / 138 / 153 QUALITY GATES / CUT 99 HANDOFF
15 heldTwo-phase Release Quorum + Non-callable Execution PermitCut 99 may consume only the capability-free destruction receipt. It receives no approval, Vote capability, payload, callable, Target object or production instance from Cut 98.
Cut 98 ✓Cut 99 →6 cuts left