{ "edition": "Odexa v1.2 RC1 — unchanged normative register from consolidated review edition 1", "protocol_status": "implementation candidate; exact wire versions remain explicit", "purpose": "Normative requirement register and explicit reference evidence map; not certification. Closed schemas and linked semantic contracts remain integral to each requirement.", "requirements": [ { "id": "CORE-01", "capabilities": [ "all" ], "requirement": "An implementation MUST validate the selected closed envelope, strict UTF-8 JSON, lexical unsigned safe integers, canonical identifiers and exact calendar timestamps; unknown profiles or fields MUST NOT be silently downgraded.", "contract": "SPECIFICATION.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_closed_keys_and_strict_wire_numbers", "source": "tests/test_free_contracts.py", "line": 115, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_no_legacy_envelope_or_global_version_mutation", "source": "tests/test_free_contracts.py", "line": 110, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_contracts.JSONContractTests.test_lexical_invalid_json", "source": "tests/test_contracts.py", "line": 34, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_current_runtime.CurrentRuntimeTests.test_raw_request_target_aliases_rejected_before_dispatch", "source": "tests/test_current_runtime.py", "line": 66, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "CORE-02", "capabilities": [ "all" ], "requirement": "Signed payloads, offers, contexts and retained evidence MUST preserve exact original bytes and their digests; reserialization MUST NOT substitute for the signed or accepted bytes.", "contract": "docs/FREE-CONTRACTS.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_context_exact_bytes_and_semantics", "source": "tests/test_free_contracts.py", "line": 126, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_resigned_same_acceptance_payload_has_same_receipt_binding", "source": "tests/test_free_contracts.py", "line": 144, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_history.AuthorityHistoryTests.test_same_revision_whitespace_conflict_is_not_canonicalized_away", "source": "tests/test_authority_history.py", "line": 99, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "POL-01", "capabilities": [ "policy" ], "requirement": "Publishers and evaluators MUST use the native policy contract, canonical origin/path/query scope and explicit action-purpose vocabulary; a selected resource MUST NOT implicitly grant another action or purpose.", "contract": "docs/POLICY-CORE.md", "evidence": [ { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_all_examples_validate", "source": "tests/test_policy.py", "line": 39, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_no_implicit_storage", "source": "tests/test_policy.py", "line": 45, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_no_implicit_training", "source": "tests/test_policy.py", "line": 48, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_action_purpose_cartesian_product", "source": "tests/test_policy.py", "line": 58, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "POL-02", "capabilities": [ "policy" ], "requirement": "Evaluation MUST include every overlapping resource and every requested action-purpose pair, applying prohibit, no_grant, unsupported, require_agreement, then permit precedence without treating duty support as completion.", "contract": "docs/POLICY-CORE.md", "evidence": [ { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_global_prohibit_dominates_narrow_permission", "source": "tests/test_policy.py", "line": 62, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_no_grant_dominates_agreement_for_combined_request", "source": "tests/test_policy.py", "line": 81, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_known_unsupported_duty_never_permits", "source": "tests/test_policy.py", "line": 91, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_supported_duty_remains_unverified", "source": "tests/test_policy.py", "line": 96, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "POL-03", "capabilities": [ "policy" ], "requirement": "Applicable duties MUST accumulate deterministically, deduplicating attribution and taking the strictest retention/report deadlines; rule order MUST NOT change the decision.", "contract": "docs/POLICY-CORE.md", "evidence": [ { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_duties_accumulate_deduplicate_and_tighten", "source": "tests/test_policy.py", "line": 113, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_policy.EvaluatorTests.test_rule_order_does_not_change_output", "source": "tests/test_policy.py", "line": 123, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "AUTH-01", "capabilities": [ "authority" ], "requirement": "Origin authority MUST bind the selected service, issuer, capability, exact endpoint, key use, scope and lifetime. External operation MUST use one explicit current delegation; partial grants MUST NOT be unioned or subdelegated.", "contract": "docs/DELEGATED-PROFILE.md", "evidence": [ { "kind": "python_unittest", "id": "test_delegation_profile.DelegationProfileTests.test_external_requires_named_grant_and_remote_observation", "source": "tests/test_delegation_profile.py", "line": 107, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_delegation_profile.DelegationProfileTests.test_no_union_of_partial_delegations", "source": "tests/test_delegation_profile.py", "line": 112, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_delegation_profile.DelegationProfileTests.test_provider_tenant_endpoint_issuer_key_substitution", "source": "tests/test_delegation_profile.py", "line": 120, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_delegation_profile.DelegationProfileTests.test_unknown_capability_subdelegation_and_scope_rejected", "source": "tests/test_delegation_profile.py", "line": 128, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_runtime_client_authority.ClientAuthorityTests.test_every_authenticated_operation_denies_withdrawn_delegation_before_setup", "source": "tests/test_runtime_client_authority.py", "line": 70, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_runtime_client_authority.ClientAuthorityTests.test_narrowed_scope_denies_all_operations_before_setup", "source": "tests/test_runtime_client_authority.py", "line": 76, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_runtime_client_authority.ClientAuthorityTests.test_delegation_capability_removed_for_every_operation", "source": "tests/test_runtime_client_authority.py", "line": 85, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "AUTH-02", "capabilities": [ "authority" ], "requirement": "Current authority MUST come from bounded verified origin acquisition with revalidation, canonical publication routes, exact bytes and no stale fallback or redirect; discovery MUST transmit no agent/provider credential.", "contract": "docs/AUTHORITY-TRANSPORT.md", "evidence": [ { "kind": "python_unittest", "id": "test_authority_transport.TransportTests.test_real_two_origin_fetch_exact_bytes_and_authority_evaluation", "source": "tests/test_authority_transport.py", "line": 104, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_transport.TransportTests.test_untrusted_ca_and_wrong_hostname_fail", "source": "tests/test_authority_transport.py", "line": 124, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_transport.TransportTests.test_redirect_never_contacts_other_origin", "source": "tests/test_authority_transport.py", "line": 145, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_transport.TransportTests.test_no_stale_fallback_after_prior_success_and_second_document_failure", "source": "tests/test_authority_transport.py", "line": 150, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "AUTH-03", "capabilities": [ "authority" ], "requirement": "An acquisition observation MUST begin before retrieval and remain within the permitted freshness budget at use; expired, unavailable, cached or superseded authority MUST NOT authorize sending context or committing a result.", "contract": "docs/AUTHORITY-TRANSPORT.md", "evidence": [ { "kind": "python_unittest", "id": "test_authority_transport.TransportTests.test_combined_fetch_budget_and_start_time", "source": "tests/test_authority_transport.py", "line": 198, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_transport.TransportTests.test_no_store_and_age_requirements", "source": "tests/test_authority_transport.py", "line": 157, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_network_payments.NetworkPaymentTests.test_pretransmission_wait_cannot_send_context_using_expired_authority", "source": "tests/test_network_payments.py", "line": 220, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_node.IndependentAssetNodeTests.test_slow_or_cached_origin_observation_cannot_be_minted_as_fresh", "source": "tests/test_asset_node.py", "line": 166, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_runtime_client_authority.ClientAuthorityTests.test_expired_observation_during_setup_prevents_emission_for_all_routes", "source": "tests/test_runtime_client_authority.py", "line": 101, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_runtime_client_authority.ClientAuthorityTests.test_response_after_withdrawal_is_not_returned", "source": "tests/test_runtime_client_authority.py", "line": 122, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "AUTH-04", "capabilities": [ "authority" ], "requirement": "Credentials MUST be restricted to their appointed HTTPS origin and tenant route. A trusted pre-send guard MUST run after connection/TLS delay, and authority-dependent mutations MUST recheck current trust after lock waits and before commit.", "contract": "docs/AUTHORITY-TRANSPORT.md", "evidence": [ { "kind": "python_unittest", "id": "test_authority_transport.TransportTests.test_scoped_post_jose_no_ambient_credentials_or_proxy", "source": "tests/test_authority_transport.py", "line": 221, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_transport.TransportTests.test_before_send_denial_after_tls_emits_no_http_or_credential", "source": "tests/test_authority_transport.py", "line": 251, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_adapter.PaymentAdapterTests.test_write_lock_wait_rechecks_stale_authority", "source": "tests/test_payment_adapter.py", "line": 113, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_network_payments.NetworkPaymentTests.test_withdrawal_during_provider_reply_blocks_commit", "source": "tests/test_network_payments.py", "line": 153, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_runtime_client_authority.ClientAuthorityTLS.test_actual_tls_setup_guard_denies_without_provider_http", "source": "tests/test_runtime_client_authority.py", "line": 202, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "AUTH-05", "capabilities": [ "authority" ], "requirement": "Retained history MUST reject revision rollback, changed bytes under one revision, policy-lineage reset and immutable service/key identity redefinition, while keeping historical documents separate from current authorization.", "contract": "docs/AUTHORITY-HISTORY.md", "evidence": [ { "kind": "python_unittest", "id": "test_authority_history.AuthorityHistoryTests.test_both_revision_rollbacks_rejected_after_restart", "source": "tests/test_authority_history.py", "line": 88, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_history.AuthorityHistoryTests.test_policy_lineage_switch_is_not_a_revision_reset", "source": "tests/test_authority_history.py", "line": 119, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_history.AuthorityHistoryTests.test_key_material_validity_uses_and_issuer_redefinitions_rejected", "source": "tests/test_authority_history.py", "line": 174, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_history.AuthorityHistoryTests.test_history_does_not_reactivate_expired_snapshot", "source": "tests/test_authority_history.py", "line": 297, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "AUTH-06", "capabilities": [ "authority" ], "requirement": "New operations MUST use active keys. Retirement, compromise and withdrawal MUST retain their documented distinctions; locally observed revoked material MUST NOT regain authority under a replacement key ID for that origin.", "contract": "docs/AUTHORITY-HISTORY.md", "evidence": [ { "kind": "python_unittest", "id": "test_authority_history.AuthorityHistoryTests.test_key_rotation_retirement_then_revocation_keeps_original_receipts", "source": "tests/test_authority_history.py", "line": 163, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_history.AuthorityHistoryTests.test_revoked_material_cannot_return_under_new_kid_after_removal_and_restart", "source": "tests/test_authority_history.py", "line": 218, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_authority_history.AuthorityHistoryTests.test_removed_key_is_withdrawn_even_if_original_metadata_calls_it_active", "source": "tests/test_authority_history.py", "line": 211, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_runtime_client_authority.ClientAuthorityTests.test_current_key_retirement_prevents_offer_and_current_signature_use", "source": "tests/test_runtime_client_authority.py", "line": 138, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "FREE-01", "capabilities": [ "free" ], "requirement": "The reference distribution MUST support a complete direct free exchange without a commercial platform, payer, payment configuration or payment-provider call; delegated free exchange MUST retain the same free contract under explicit appointment.", "contract": "docs/FREE-SERVICE.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_service.FreeServiceTests.test_provider_absent_same_origin_same_contract", "source": "tests/test_free_service.py", "line": 192, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_gateway.FreeGatewayTests.test_independent_node_direct_exchange_without_provider", "source": "tests/test_free_gateway.py", "line": 149, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_gateway.FreeGatewayTests.test_independent_node_two_origin_exchange_with_real_delivery_and_report", "source": "tests/test_free_gateway.py", "line": 146, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_current_runtime.CurrentRuntimeTests.test_free_initialisation_imports_no_paid_runtime", "source": "tests/test_current_runtime.py", "line": 86, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "FREE-02", "capabilities": [ "free" ], "requirement": "An offer and its exact policy/authority/human-terms contexts MUST preserve the requested scope, cumulative duties and permitted lifetime; authenticated explicit assent MUST bind the exact offer, nonce, service, client and authorized principal.", "contract": "docs/FREE-CONTRACTS.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_context_exact_bytes_and_semantics", "source": "tests/test_free_contracts.py", "line": 126, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_assent_binds_exact_offer_principal_nonce_and_window", "source": "tests/test_free_contracts.py", "line": 134, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_service.FreeServiceTests.test_wrong_tenant_issuer_key_principal_and_scope", "source": "tests/test_free_service.py", "line": 216, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "FREE-03", "capabilities": [ "free" ], "requirement": "Acceptance MUST atomically consume one offer and preserve one original receipt. Exact decoded-payload retries MUST recover the original result across restart; changed payloads under the same retry identity MUST conflict.", "contract": "docs/FREE-CONTRACTS.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_store.FreeStoreTests.test_duplicate_offer_nonce_and_one_agreement_per_offer", "source": "tests/test_free_store.py", "line": 109, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_store.FreeStoreTests.test_concurrent_exact_acceptance_retries_have_single_receipt", "source": "tests/test_free_store.py", "line": 301, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_store.FreeStoreTests.test_idempotency_key_conflict_compares_exact_request_bytes", "source": "tests/test_free_store.py", "line": 134, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_service.FreeServiceTests.test_exact_acceptance_restart_after_commit_and_conflict", "source": "tests/test_free_service.py", "line": 246, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "FREE-04", "capabilities": [ "free" ], "requirement": "A receipt MUST remain immutable evidence with access_credential:false and exactly accepted access/use windows; neither receipt possession nor an original-receipt retry MUST create fresh access.", "contract": "docs/FREE-CONTRACTS.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_receipt_binds_decoded_acceptance_bytes_and_exact_windows", "source": "tests/test_free_contracts.py", "line": 139, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_service.FreeServiceTests.test_withdrawal_blocks_new_access_but_original_receipt_survives", "source": "tests/test_free_service.py", "line": 206, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_service.PaidServiceTests.test_original_paid_receipt_available_after_origin_outage", "source": "tests/test_paid_service.py", "line": 223, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "FREE-05", "capabilities": [ "free", "gateway" ], "requirement": "Protected access MUST require a separately issued, bounded token and authenticated introspection matching agreement, principal, exact resource, method, actions and purposes. Both active and permitted MUST be true; a denial MUST contain no admission.", "contract": "docs/FREE-CONTRACTS.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_token_expiry_bound_to_clock_and_agreement", "source": "tests/test_free_contracts.py", "line": 156, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_introspection_allows_no_token_echo_and_requires_both_booleans", "source": "tests/test_free_contracts.py", "line": 160, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_introspection_request_principal_scope_and_expiry_correlation", "source": "tests/test_free_contracts.py", "line": 167, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_service.FreeServiceTests.test_scope_expansion_wrong_role_and_duplicate_admission_denied", "source": "tests/test_free_service.py", "line": 226, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "FREE-06", "capabilities": [ "free" ], "requirement": "Status/revocation MUST bind the exact agreement and current authorized signer. State versions and original signed command retries MUST remain durable; future-access revocation MUST NOT rewrite past accepted use terms or revive terminal access.", "contract": "docs/FREE-CONTRACTS.md", "evidence": [ { "kind": "python_unittest", "id": "test_delegation_profile.DelegationProfileTests.test_status_and_revoke_are_exact_agreement_bound_zero_duration_operations", "source": "tests/test_delegation_profile.py", "line": 58, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_status_is_bound_current_observation_without_access_extension", "source": "tests/test_free_contracts.py", "line": 150, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_store.FreeStoreTests.test_status_update_needs_new_version_and_terminal_state_never_reactivates", "source": "tests/test_free_store.py", "line": 185, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_store.FreeStoreTests.test_exact_command_retry_returns_original_response_and_is_route_scoped", "source": "tests/test_free_store.py", "line": 121, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "GW-01", "capabilities": [ "gateway" ], "requirement": "A gateway MUST record admission before sending protected bytes, constrain the actual request including cached bodies, and distinguish admission, attempted transport, completed/failed transport and unresolved interruption.", "contract": "docs/GATEWAY-REPORTING.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_gateway.FreeGatewayTests.test_admission_delivery_and_unresolved_restart_are_distinct", "source": "tests/test_free_gateway.py", "line": 54, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_gateway.FreeGatewayTests.test_withdrawal_outage_expiry_and_cached_body_cannot_reuse_admission", "source": "tests/test_free_gateway.py", "line": 71, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_gateway.FreeGatewayTests.test_completion_cannot_claim_invalid_time_or_byte_count", "source": "tests/test_free_gateway.py", "line": 93, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "GW-02", "capabilities": [ "gateway" ], "requirement": "The terminal observed outcome and original signed outbox record MUST commit together; retries MUST preserve the exact event and original collector acknowledgement. Failure or crash MUST NOT invent completion.", "contract": "docs/GATEWAY-REPORTING.md", "evidence": [ { "kind": "python_unittest", "id": "test_gateway_reports.GatewayReportJournalTests.test_signer_or_sql_failure_rolls_back_terminal_and_outbox_together", "source": "tests/test_gateway_reports.py", "line": 94, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_gateway_reports.GatewayReportJournalTests.test_process_exit_after_outbox_insert_before_terminal_commit_recovers_unresolved", "source": "tests/test_gateway_reports.py", "line": 104, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_gateway_reports.GatewayReportTLSTests.test_lost_ack_exact_retry_after_restart_retains_original_receipt", "source": "tests/test_gateway_reports.py", "line": 175, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "REPORT-01", "capabilities": [ "collector", "gateway" ], "requirement": "Reported client use, observed gateway transport and service-recorded transitions MUST remain distinct. Authenticated roles and admission correlation MUST prevent source, reporter, scope or delivery-ID promotion.", "contract": "docs/FREE-CONTRACTS.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_report_roles_and_intake_cannot_promote_claims", "source": "tests/test_free_contracts.py", "line": 171, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_delivery_report_matches_admission_and_preserves_http_semantics", "source": "tests/test_free_contracts.py", "line": 178, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_service.FreeServiceTests.test_gateway_report_is_bound_to_admission_and_retained_on_exact_retry", "source": "tests/test_free_service.py", "line": 273, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "REPORT-02", "capabilities": [ "collector" ], "requirement": "An intake MUST retain exact report bytes/digest, the original verified reporter signature where present, authenticated identity, source qualification and collector authority. Retry/conflict handling MUST use exact reporter/event/payload identities.", "contract": "docs/FREE-CONTRACTS.md", "evidence": [ { "kind": "python_unittest", "id": "test_free_store.FreeStoreTests.test_records_are_idempotent_by_reporter_and_exact_event_bytes", "source": "tests/test_free_store.py", "line": 150, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_free_contracts.FreeContractsTests.test_report_roles_and_intake_cannot_promote_claims", "source": "tests/test_free_contracts.py", "line": 171, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_gateway_reports.GatewayReportTLSTests.test_signed_wrong_report_or_bad_signature_never_acknowledges", "source": "tests/test_gateway_reports.py", "line": 226, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "PAY-01", "capabilities": [ "paid" ], "requirement": "A fixed quote MUST distinguish resource-license and provider-service payees/items, use bounded canonical integer minor-unit strings and exact positive sums. An all-zero agreement MUST use the free path without a payer/verifier.", "contract": "docs/PAYMENT-PROFILE.md", "evidence": [ { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_valid_quote_fee_and_sum", "source": "tests/test_payment_profile.py", "line": 31, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_amounts_reject_negative_float_exponent_bool_overflow", "source": "tests/test_payment_profile.py", "line": 32, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_resource_line_required_but_may_be_free", "source": "tests/test_payment_profile.py", "line": 40, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_exact_free_bypass", "source": "tests/test_payment_profile.py", "line": 90, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "PAY-02", "capabilities": [ "paid" ], "requirement": "A paid offer MUST bind exact quote bytes and explicit paid selection; its original receipt MUST be pending_payment, payment_required:true and access_credential:false with exactly accepted windows. Free and paid envelopes MUST NOT be interchanged.", "contract": "docs/PAID-SERVICE.md", "evidence": [ { "kind": "python_unittest", "id": "test_paid_contracts.PaidContractsTests.test_full_paid_context_validates_without_changing_free_or_crypto", "source": "tests/test_paid_contracts.py", "line": 59, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_contracts.PaidContractsTests.test_receipt_must_preserve_exact_access_and_use_durations", "source": "tests/test_paid_contracts.py", "line": 85, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_contracts.PaidContractsTests.test_paid_and_free_receipts_cannot_be_interchanged", "source": "tests/test_paid_contracts.py", "line": 141, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_node.IndependentPaidNodeTests.test_authorised_signature_cannot_turn_paid_receipt_into_access_grant", "source": "tests/test_paid_node.py", "line": 166, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "PAY-03", "capabilities": [ "paid" ], "requirement": "Spending authority MUST require a separately authenticated payer and exact-quote mandate binding every amount, currency, payer, payee and agreement. Agent assent/credentials MUST NOT substitute for payer authority.", "contract": "docs/PAID-SERVICE.md", "evidence": [ { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_acceptance_is_not_mandate", "source": "tests/test_payment_profile.py", "line": 53, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_wrong_payer_and_exact_mandate_bindings", "source": "tests/test_payment_profile.py", "line": 55, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_service.PaidServiceTests.test_assent_alone_and_agent_credential_cannot_authorize_payment", "source": "tests/test_paid_service.py", "line": 158, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_node.IndependentPaidNodeTests.test_valid_but_unapproved_price_and_payee_are_rejected_before_assent", "source": "tests/test_paid_node.py", "line": 152, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "PAY-04", "capabilities": [ "paid" ], "requirement": "A read-only payment check MUST authenticate the origin-appointed verifier and original signature and bind check, request, offer, quote, mandate, amount and accepted scope before financial state changes. A provider response MUST NOT nominate its own authority.", "contract": "docs/PAYMENT-AUTHENTICATION.md", "evidence": [ { "kind": "python_unittest", "id": "test_payment_adapter.PaymentAdapterTests.test_wrong_signer_key_role_and_exact_bytes_fail_without_commit", "source": "tests/test_payment_adapter.py", "line": 55, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_adapter.PaymentAdapterTests.test_signed_wrong_amount_or_check_is_not_authorized_settlement", "source": "tests/test_payment_adapter.py", "line": 67, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_network_payments.NetworkPaymentTests.test_wrong_tenant_is_denied_before_provider_contact", "source": "tests/test_network_payments.py", "line": 168, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_network_payments.NetworkPaymentTests.test_withdrawal_during_provider_reply_blocks_commit", "source": "tests/test_network_payments.py", "line": 153, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "PAY-05", "capabilities": [ "paid" ], "requirement": "Provider states and sequences MUST follow the documented pending/failed/confirmed/reversed transition graph and fixed transaction binding. Verification MUST NOT initiate or retry a debit; exact historical check replay MUST return current state without reapplying the old transition.", "contract": "docs/PAYMENT-PROFILE.md", "evidence": [ { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_response_time_and_sequence", "source": "tests/test_payment_profile.py", "line": 74, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_confirmation_and_duplicate_no_charge_action", "source": "tests/test_payment_profile.py", "line": 62, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_failed_then_confirmed_reference_fixed", "source": "tests/test_payment_profile.py", "line": 88, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_service.PaidServiceTests.test_exact_verification_retry_never_reactivates_after_reversal", "source": "tests/test_paid_service.py", "line": 196, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "PAY-06", "capabilities": [ "paid" ], "requirement": "Financial state MUST remain separate from access state. Pending/failed payments MUST deny access; reversal MUST revoke future access, and later confirmation or replay MUST NOT revive expired/revoked access or rewrite original receipts.", "contract": "docs/PAID-SERVICE.md", "evidence": [ { "kind": "python_unittest", "id": "test_paid_service.PaidServiceTests.test_actual_paid_pending_confirmed_delivery_reversed_denial", "source": "tests/test_paid_service.py", "line": 167, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_service.PaidServiceTests.test_late_financial_confirmation_cannot_extend_expired_access", "source": "tests/test_paid_service.py", "line": 217, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_profile.PaymentProfileTests.test_reversal_terminal_old_retry_no_resurrection", "source": "tests/test_payment_profile.py", "line": 85, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "PAY-07", "capabilities": [ "paid" ], "requirement": "Receipt, accepted payment binding, provider evidence and access transition MUST use one durable transaction with live post-lock and pre-commit authority/deadline guards; failures MUST roll back the attempted transition.", "contract": "docs/PAID-SERVICE.md", "evidence": [ { "kind": "python_unittest", "id": "test_paid_service.PaidServiceTests.test_paid_acceptance_and_payment_state_share_atomic_commit", "source": "tests/test_paid_service.py", "line": 204, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_adapter.PaymentAdapterTests.test_write_lock_wait_rechecks_key_expiry_within_freshness_window", "source": "tests/test_payment_adapter.py", "line": 117, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_payment_adapter.PaymentAdapterTests.test_write_lock_wait_applies_access_expiry_before_confirmation", "source": "tests/test_payment_adapter.py", "line": 122, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "ASSET-01", "capabilities": [ "asset" ], "requirement": "Asset/version/representation references MUST bind immutable version IDs and exact signed payload digests, with independently authorized scoped publication signatures; a mutable resource URL MUST NOT substitute for version identity.", "contract": "docs/ASSET-EVIDENCE.md", "evidence": [ { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_closed_version_signature_and_byte_substitution", "source": "tests/test_asset_evidence.py", "line": 83, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_origin_scope_issuer_key_use_and_endpoint_substitution", "source": "tests/test_asset_evidence.py", "line": 108, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_runtime.AssetRuntimeTests.test_direct_versions_coding_relocation_and_closed_archive", "source": "tests/test_asset_runtime.py", "line": 178, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "ASSET-02", "capabilities": [ "asset" ], "requirement": "Every included publisher MUST have independently acquired current origin knowledge and exact retained historical pins. Bundled keys/documents MUST NOT bootstrap trust; known revoked material and rebound immutable key identity MUST be rejected.", "contract": "docs/ASSET-EVIDENCE.md", "evidence": [ { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_untrusted_bundle_cannot_bootstrap_origin_history", "source": "tests/test_asset_evidence.py", "line": 92, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_removed_compromised_key_remains_rejected_by_pinned_history", "source": "tests/test_asset_evidence.py", "line": 133, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_same_key_identity_cannot_be_rebound", "source": "tests/test_asset_evidence.py", "line": 142, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_node.IndependentAssetNodeTests.test_cross_origin_parent_requires_both_independent_current_origins", "source": "tests/test_asset_node.py", "line": 135, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "ASSET-03", "capabilities": [ "asset" ], "requirement": "A verified derivation graph MUST close every declared parent with exact qualified references, source chronology and copy equivalence. Missing, duplicate, extra, cyclic, substituted or over-limit dependencies MUST fail rather than be truncated.", "contract": "docs/ASSET-EVIDENCE.md", "evidence": [ { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_missing_extra_duplicate_context_and_unreachable_manifest_rejected", "source": "tests/test_asset_evidence.py", "line": 99, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_exact_copy_derivation_closes_and_changed_copy_is_rejected", "source": "tests/test_asset_evidence.py", "line": 157, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_depth_bound_and_same_version_conflicts_are_closed", "source": "tests/test_asset_evidence.py", "line": 168, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_duplicate_root_or_edge_cannot_hide_behind_object_member_order", "source": "tests/test_asset_evidence.py", "line": 176, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "ASSET-04", "capabilities": [ "asset", "measurement" ], "requirement": "Encoded bytes, decoded representations, ranges, metadata and observation source MUST remain distinct. Local matches or signed claims MUST NOT establish remote receipt, actual downstream use or verified derivation computation.", "contract": "docs/ASSET-EVIDENCE.md", "evidence": [ { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_signed_digest_claim_is_not_proof_of_client_receipt_or_model_use", "source": "tests/test_asset_evidence.py", "line": 185, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_coded_variant_and_decoded_representation_are_separate_checks", "source": "tests/test_asset_evidence.py", "line": 200, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_evidence.AssetEvidenceTests.test_ranges_head_missing_metadata_and_upstream_hops_never_become_full_delivery", "source": "tests/test_asset_evidence.py", "line": 209, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "ASSET-05", "capabilities": [ "asset" ], "requirement": "Retained version pins and exact original publications MUST survive restart; an authorized signer MUST NOT redefine an existing version, and late verification failure MUST NOT partially retain a new catalog bundle.", "contract": "docs/ASSET-EVIDENCE.md", "evidence": [ { "kind": "python_unittest", "id": "test_asset_catalog.AssetCatalogTests.test_same_version_cannot_change_after_restart", "source": "tests/test_asset_catalog.py", "line": 32, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_catalog.AssetCatalogTests.test_late_current_authority_failure_rolls_back_all_material", "source": "tests/test_asset_catalog.py", "line": 47, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_node.IndependentAssetNodeTests.test_redefined_immutable_version_is_rejected_after_process_restart", "source": "tests/test_asset_node.py", "line": 109, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "STORE-01", "capabilities": [ "storage" ], "requirement": "Continuing storage MUST be explicitly selected in request, offer, signed assent and receipt, and in its signed event profile. Ordinary messages MUST reject or decline unselected storage fields rather than infer/downgrade selection.", "contract": "docs/STORAGE-INTEGRATION.md", "evidence": [ { "kind": "python_unittest", "id": "test_storage_contracts.SelectedStorageContractsTests.test_exact_free_and_paid_selection_chain", "source": "tests/test_storage_contracts.py", "line": 31, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_contracts.SelectedStorageContractsTests.test_selection_is_closed_and_never_inferred", "source": "tests/test_storage_contracts.py", "line": 42, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_contracts.SelectedStorageContractsTests.test_exact_wire_digest_not_projected_base_digest", "source": "tests/test_storage_contracts.py", "line": 51, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "STORE-02", "capabilities": [ "storage" ], "requirement": "Completed store actions and continuing custody sessions MUST remain separate; copy references MUST close exact authenticated parent writes and preserve original acquisition and the earliest accepted retention/use deadline.", "contract": "docs/STORAGE-SESSIONS.md", "evidence": [ { "kind": "python_unittest", "id": "test_storage_sessions.StorageSessionTests.test_complete_write_many_reports_one_action", "source": "tests/test_storage_sessions.py", "line": 53, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_sessions.StorageSessionTests.test_copy_inherits_time_and_resolves_parent_exactly", "source": "tests/test_storage_sessions.py", "line": 182, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_sessions.StorageSessionTests.test_wrong_claimed_retention_deadline_invalid_and_original_use_expiry_caps", "source": "tests/test_storage_sessions.py", "line": 189, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_evidence.StorageEvidenceTests.test_copy_parent_outside_snapshot_cannot_be_silently_dropped", "source": "tests/test_storage_evidence.py", "line": 79, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "STORE-03", "capabilities": [ "storage", "measurement" ], "requirement": "Checkpoint deadlines MUST use original scheduled times. Exact retries MUST NOT add actions/checkpoints; late, absent, conflicting or failed-cleanup observations MUST remain visible and MUST NOT invent cessation or backfill coverage.", "contract": "docs/STORAGE-SESSIONS.md", "evidence": [ { "kind": "python_unittest", "id": "test_storage_sessions.StorageSessionTests.test_exact_retry_not_new_action_session_or_checkpoint", "source": "tests/test_storage_sessions.py", "line": 81, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_sessions.StorageSessionTests.test_late_wake_does_not_backfill_previous_indices", "source": "tests/test_storage_sessions.py", "line": 164, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_sessions.StorageSessionTests.test_failed_cleanup_does_not_fabricate_cessation_or_drop_expected_checks", "source": "tests/test_storage_sessions.py", "line": 177, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_sessions.StorageSessionTests.test_all_conflict_variants_and_exact_retries_are_order_independent", "source": "tests/test_storage_sessions.py", "line": 98, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "AGENT-01", "capabilities": [ "agent" ], "requirement": "A managed agent MUST execute every supported applicable duty for its claimed operation, retain durable exact report intent and decline unsupported or irreversible/model uses outside its declared executor profile.", "contract": "docs/AGENT-DUTIES.md", "evidence": [ { "kind": "python_unittest", "id": "test_storage_runtime.StorageRuntimeTests.test_provider_independent_agent_storage_and_signed_reporting", "source": "tests/test_storage_runtime.py", "line": 79, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_runtime.StorageRuntimeTests.test_two_origin_agent_storage_and_signed_reporting", "source": "tests/test_storage_runtime.py", "line": 81, "result": "verification/integrated-python-tests.txt" }, { "kind": "node_test", "name": "unsupported duties and irreversible or model uses are refused", "source": "verification/test_duty_executor.mjs", "result": "verification/integrated-node-tests.txt" }, { "kind": "node_test", "name": "attribution output preserves all required distinct names and source links", "source": "verification/test_duty_executor.mjs", "result": "verification/integrated-node-tests.txt" }, { "kind": "node_test", "name": "pending outbox survives reopen with identical bytes, IDs and original deadline", "source": "verification/test_duty_executor.mjs", "result": "verification/integrated-node-tests.txt" }, { "kind": "node_test", "name": "safe cancelled acquisition does not block a separately permitted new acquisition or fabricate events", "source": "verification/test_storage_executor.mjs", "result": "verification/integrated-node-tests.txt" }, { "kind": "node_test", "name": "cancellation persistence failure remains uncertain and restart never invents completion", "source": "verification/test_storage_executor.mjs", "result": "verification/integrated-node-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "EVID-01", "capabilities": [ "archive" ], "requirement": "An evidence export/import MUST select its exact free/paid/storage/asset profile and close the signed inventory of original artifacts, authority, reporter and payer trust, related evidence and selected dependencies. Unknown or omitted dependencies MUST fail.", "contract": "docs/PORTABILITY.md", "evidence": [ { "kind": "python_unittest", "id": "test_portable_evidence.PortableEvidenceTests.test_missing_extra_duplicate_and_changed_blobs_rejected", "source": "tests/test_portable_evidence.py", "line": 232, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_portable_evidence.PortableEvidenceTests.test_exporter_keys_cannot_bootstrap_external_client_trust", "source": "tests/test_portable_evidence.py", "line": 247, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_asset_runtime.AssetRuntimeTests.test_importer_rejects_authorized_exporter_asset_omission_and_untrusted_origin", "source": "tests/test_asset_runtime.py", "line": 200, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_evidence.PaidEvidenceTests.test_independent_payer_pin_is_required_and_known_compromise_is_not_hidden", "source": "tests/test_paid_evidence.py", "line": 171, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "EVID-02", "capabilities": [ "archive" ], "requirement": "An archive MUST independently recompute the retained agreement/status/admission and paid audit timeline using exact proofs; an exporter signature MUST NOT rescue missing, reordered, changed or invented lifecycle evidence.", "contract": "docs/PAID-PORTABILITY.md", "evidence": [ { "kind": "python_unittest", "id": "test_portable_evidence.PortableEvidenceTests.test_indexed_lifecycle_cannot_invent_unattested_revocation_or_versions", "source": "tests/test_portable_evidence.py", "line": 135, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_evidence.PaidEvidenceTests.test_audit_missing_reordered_changed_state_or_cut_fails_after_exporter_resigns", "source": "tests/test_paid_evidence.py", "line": 179, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_evidence.PaidEvidenceTests.test_signed_provider_proof_and_authority_are_both_required", "source": "tests/test_paid_evidence.py", "line": 201, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_evidence.PaidEvidenceTests.test_late_confirmation_and_lazy_expiry_never_restore_access", "source": "tests/test_paid_evidence.py", "line": 145, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "EVID-03", "capabilities": [ "archive" ], "requirement": "Combined paid/storage/asset claims MUST validate all selected dependencies together, retaining the separate payer mandate, provider proofs, copy parents and complete native asset graph. Ordinary free-archive validation MUST NOT stand in for a selected combination.", "contract": "docs/PAID-PORTABILITY.md", "evidence": [ { "kind": "python_unittest", "id": "test_paid_evidence.PaidEvidenceTests.test_selected_paid_storage_has_signed_copy_parent_closure", "source": "tests/test_paid_evidence.py", "line": 261, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_evidence.PaidEvidenceTests.test_paid_asset_graph_and_actual_delivery_archive", "source": "tests/test_paid_evidence.py", "line": 299, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_evidence.PaidEvidenceTests.test_paid_asset_storage_graph_archive", "source": "tests/test_paid_evidence.py", "line": 300, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_storage_evidence.StorageEvidenceTests.test_ordinary_exporter_never_infers_selected_storage", "source": "tests/test_storage_evidence.py", "line": 75, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "EVID-04", "capabilities": [ "archive" ], "requirement": "Import MUST be inert, idempotent and separate from live operational state. Exports MUST contain no live credential or token; imported records MUST NOT transfer authority, reactivate access or claim total capture beyond the selected retained source.", "contract": "docs/PORTABILITY.md", "evidence": [ { "kind": "python_unittest", "id": "test_portable_evidence.PortableEvidenceTests.test_archive_import_restart_and_exact_retry_are_inert", "source": "tests/test_portable_evidence.py", "line": 209, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_portable_evidence.PortableEvidenceTests.test_no_credential_tables_or_token_plaintext_exported", "source": "tests/test_portable_evidence.py", "line": 222, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_portable_evidence.PortableEvidenceTests.test_archive_cannot_be_constructed_over_live_service_database", "source": "tests/test_portable_evidence.py", "line": 451, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_paid_evidence.PaidEvidenceTests.test_source_restart_preserves_exact_payment_proofs_without_credentials", "source": "tests/test_paid_evidence.py", "line": 245, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "MIG-01", "capabilities": [ "handover" ], "requirement": "Provider handover MUST be origin-controlled and preserve original issuer, signatures, accepted terms and evidence. The supported transition MUST create fresh credentials/agreements and, when paid, a fresh quote/mandate; outage MUST NOT silently restore the withdrawn provider.", "contract": "docs/PROVIDER-HANDOVER.md", "evidence": [ { "kind": "python_unittest", "id": "test_provider_handover.ProviderHandoverTests.test_real_cutover_preserves_exact_evidence_and_requires_fresh_assent", "source": "tests/test_provider_handover.py", "line": 249, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_provider_handover.ProviderHandoverTests.test_successor_staging_cannot_self_appoint_or_receive_old_credentials", "source": "tests/test_provider_handover.py", "line": 306, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_provider_handover.ProviderHandoverTests.test_outage_and_rollback_after_cutover_never_fall_back_to_old_provider", "source": "tests/test_provider_handover.py", "line": 325, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_provider_handover.ProviderHandoverTests.test_paid_rights_stay_original_and_new_provider_requires_new_quote_and_mandate", "source": "tests/test_provider_handover.py", "line": 373, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "MIG-02", "capabilities": [ "handover" ], "requirement": "A limited reporting tail MUST appoint only the collector scope still needed for original accepted duties; it MUST NOT restore old agreement, token, payment or publication authority. Key rotation MUST preserve historical evidence while blocking new use of retired keys.", "contract": "docs/PROVIDER-HANDOVER.md", "evidence": [ { "kind": "python_unittest", "id": "test_provider_handover.ProviderHandoverTests.test_old_collector_can_drain_selected_storage_without_future_access_authority", "source": "tests/test_provider_handover.py", "line": 277, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_provider_handover.ProviderHandoverTests.test_live_key_rotation_retains_old_receipt_and_blocks_retired_signer", "source": "tests/test_provider_handover.py", "line": 343, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "METRIC-01", "capabilities": [ "measurement" ], "requirement": "An observation registry MUST be a separately acquired origin declaration bound to exact native policy, named scopes/profiles/intervals and monotonic history. Static publication MUST remain possible without a service/payment account.", "contract": "docs/OBSERVATION-COVERAGE.md", "evidence": [ { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_closed_registry_exact_policy_scope_time_and_no_secret_fields", "source": "tests/test_observation_coverage.py", "line": 200, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_history_restart_rollback_same_revision_conflict_and_repeated_read_clock", "source": "tests/test_observation_coverage.py", "line": 221, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTLSTests.test_static_registry_fetch_needs_no_service_payment_or_credential", "source": "tests/test_observation_coverage.py", "line": 280, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_registry_acquisition_age_covers_both_requests", "source": "tests/test_observation_coverage.py", "line": 243, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "METRIC-02", "capabilities": [ "measurement" ], "requirement": "Origin declarations, authenticated intakes and trusted expected-observation journals MUST remain distinct. Completeness ratios MUST use explicit known cohorts; unknown traffic and empty denominators MUST NOT become zero use or a whole-origin capture percentage.", "contract": "docs/OBSERVATION-COVERAGE.md", "evidence": [ { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_static_publication_has_unknown_traffic_and_null_not_zero_percent", "source": "tests/test_observation_coverage.py", "line": 68, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_zero_expectations_is_unknown_ratio_and_unexpected_reports_are_not_a_denominator", "source": "tests/test_observation_coverage.py", "line": 102, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_collector_receipt_uses_exact_payload_and_is_not_another_use", "source": "tests/test_observation_coverage.py", "line": 139, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "METRIC-03", "capabilities": [ "measurement" ], "requirement": "Overlaps, retries and conflicts MUST NOT inflate observations or shrink known expected denominators. Missing, late, pending and unresolved reports MUST remain separate, with exact agreement/profile/source boundaries and as-of time.", "contract": "docs/OBSERVATION-COVERAGE.md", "evidence": [ { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_known_cohort_separates_timely_late_missing_and_pending", "source": "tests/test_observation_coverage.py", "line": 84, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_expectation_conflicts_never_shrink_or_rewrite_the_denominator", "source": "tests/test_observation_coverage.py", "line": 131, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_another_agreement_or_selected_profile_cannot_fill_a_known_gap", "source": "tests/test_observation_coverage.py", "line": 192, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_observation_coverage.CoverageTests.test_as_of_does_not_backfill_a_missing_report_with_future_receipt", "source": "tests/test_observation_coverage.py", "line": 96, "result": "verification/integrated-python-tests.txt" } ], "status": "reference evidence; integrated review pending" }, { "id": "REF-01", "capabilities": [ "reference_distribution" ], "requirement": "The installed reference MUST expose a reproducible standalone free setup and explicit optional synthetic payment configuration, with private credentials, TLS verification, scoped routes, restart and separately trusted archive verification. Synthetic state MUST NOT be represented as real settlement.", "contract": "docs/CURRENT-QUICKSTART.md", "evidence": [ { "kind": "python_unittest", "id": "test_current_runtime.CurrentRuntimeTests.test_free_initialisation_imports_no_paid_runtime", "source": "tests/test_current_runtime.py", "line": 86, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_current_runtime.CurrentRuntimeTests.test_private_configuration_and_no_synthetic_public_verifier", "source": "tests/test_current_runtime.py", "line": 94, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_current_runtime.CurrentRuntimeTests.test_static_only_allowlist_no_secrets_or_unprotected_asset", "source": "tests/test_current_runtime.py", "line": 46, "result": "verification/integrated-python-tests.txt" }, { "kind": "python_unittest", "id": "test_current_runtime.CurrentRuntimeTests.test_client_verifies_public_authority_without_reading_service_private_key", "source": "tests/test_current_runtime.py", "line": 76, "result": "verification/integrated-python-tests.txt" }, { "kind": "installed_flow", "source": "verification/check_installed_runtime.py", "result": "verification/integrated-installed-checks.json", "status": "executed fresh M6 installation: 57 checks passed" } ], "status": "reference evidence; integrated review pending" } ] }