{
  "schema": "concresca.operator-contracts.v021",
  "site_version": "0.28.0-wip",
  "as_of": "2026-08-31",
  "release_state": "WIP_LINEAGE_RECOVERY",
  "truth_boundary": "These registries define and locally exercise synthetic repository-owned governance fixtures. They do not establish a sealed v0.20 lineage, external execution, production migration, legal authority, institutional adoption, human-study findings, independent certification, or deployment.",
  "contract_count": 6,
  "actor_type_count": 8,
  "actor_count": 13,
  "outcomes": [
    "PASS",
    "FAIL",
    "PARTIAL",
    "BLOCKED",
    "NOT_RUN",
    "NON_COMPARABLE",
    "EXPECTED_ENVIRONMENT_VARIANCE",
    "UNEXPECTED_VARIANCE"
  ],
  "actor_types": [
    {
      "actor_type_id": "SOURCE_OPERATOR",
      "name": "Source operator",
      "minimum_duties": [
        "preserve origin evidence",
        "declare authority and purpose",
        "transmit correction state"
      ],
      "prohibited_collapse": "The source operator cannot become its own receiving operator merely by renaming the same actor."
    },
    {
      "actor_type_id": "RECEIVING_OPERATOR",
      "name": "Receiving operator",
      "minimum_duties": [
        "enforce received purpose limits",
        "preserve provenance and dissent",
        "accept valid corrections"
      ],
      "prohibited_collapse": "Receipt does not create authority beyond the source grant and receiving jurisdiction."
    },
    {
      "actor_type_id": "DATA_SUBJECT",
      "name": "Affected person or represented subject",
      "minimum_duties": [],
      "prohibited_collapse": "A person cannot be reduced to an operator-owned identifier, score, or risk class."
    },
    {
      "actor_type_id": "REVIEWER",
      "name": "Reviewer",
      "minimum_duties": [
        "independent review where available",
        "preserve recusal and dissent",
        "state limits of review"
      ],
      "prohibited_collapse": "A reviewer cannot silently become the issuing or receiving authority in the same contested decision."
    },
    {
      "actor_type_id": "CHALLENGER",
      "name": "Challenger",
      "minimum_duties": [
        "identify contested proposition or transformation",
        "preserve supplied evidence"
      ],
      "prohibited_collapse": "A live challenge cannot be converted into a confidence adjustment or hidden annotation."
    },
    {
      "actor_type_id": "CORRECTION_RECIPIENT",
      "name": "Correction recipient",
      "minimum_duties": [
        "acknowledge or state nonresponse",
        "propagate correction within declared reach"
      ],
      "prohibited_collapse": "A downstream holder is not treated as corrected until its state is identified."
    },
    {
      "actor_type_id": "DISCLOSURE_RECIPIENT",
      "name": "Disclosure recipient",
      "minimum_duties": [
        "use only authorized fields",
        "honor retention and onward-disclosure limits"
      ],
      "prohibited_collapse": "Audience membership does not create permission for unrelated inference or redistribution."
    },
    {
      "actor_type_id": "ROLLBACK_AUTHORITY",
      "name": "Rollback authority",
      "minimum_duties": [
        "state technical and legal reach",
        "identify irreversible effects",
        "avoid complete-restoration overclaim"
      ],
      "prohibited_collapse": "The actor executing a rollback cannot certify its completeness without the required independent review."
    }
  ],
  "actors": [
    {
      "actor_id": "ACT-SRC-001",
      "actor_type_id": "SOURCE_OPERATOR",
      "name": "Synthetic Civic Source Custodian",
      "organization": "Concresca synthetic fixture organization A",
      "custody_boundary": "repository-owned synthetic records only",
      "independence_limits": "operator-controlled local fixture"
    },
    {
      "actor_id": "ACT-RCV-001",
      "actor_type_id": "RECEIVING_OPERATOR",
      "name": "Rights-Constrained Civic Receiver",
      "organization": "Concresca synthetic fixture organization B",
      "custody_boundary": "purpose-limited synthetic civic records",
      "independence_limits": "operator-controlled local fixture"
    },
    {
      "actor_id": "ACT-RCV-002",
      "actor_type_id": "RECEIVING_OPERATOR",
      "name": "Restricted Cross-Jurisdiction Receiver",
      "organization": "Concresca synthetic fixture organization C",
      "custody_boundary": "restricted evidence compartment",
      "independence_limits": "operator-controlled local fixture"
    },
    {
      "actor_id": "ACT-RCV-003",
      "actor_type_id": "RECEIVING_OPERATOR",
      "name": "Emergency Continuity Receiver",
      "organization": "Concresca synthetic fixture organization D",
      "custody_boundary": "time-limited emergency continuity compartment",
      "independence_limits": "operator-controlled local fixture"
    },
    {
      "actor_id": "ACT-RCV-004",
      "actor_type_id": "RECEIVING_OPERATOR",
      "name": "Research Sandbox Receiver",
      "organization": "Concresca synthetic fixture organization E",
      "custody_boundary": "non-operational synthetic research environment",
      "independence_limits": "operator-controlled local fixture"
    },
    {
      "actor_id": "ACT-RCV-005",
      "actor_type_id": "RECEIVING_OPERATOR",
      "name": "Public Transparency Receiver",
      "organization": "Concresca synthetic fixture organization F",
      "custody_boundary": "public non-personal disclosure records only",
      "independence_limits": "operator-controlled local fixture"
    },
    {
      "actor_id": "ACT-RCV-006",
      "actor_type_id": "RECEIVING_OPERATOR",
      "name": "Successor Escrow Trustee",
      "organization": "Concresca synthetic fixture organization G",
      "custody_boundary": "successor custody under bounded restoration authority",
      "independence_limits": "operator-controlled local fixture"
    },
    {
      "actor_id": "ACT-SUB-001",
      "actor_type_id": "DATA_SUBJECT",
      "name": "Synthetic affected person",
      "organization": null,
      "custody_boundary": "no operator ownership of personhood",
      "independence_limits": "synthetic identity; no real participant"
    },
    {
      "actor_id": "ACT-REV-001",
      "actor_type_id": "REVIEWER",
      "name": "Synthetic independent reviewer",
      "organization": "Concresca synthetic review cell",
      "custody_boundary": "review copy and declared evidence index",
      "independence_limits": "not institutionally independent; local fixture only"
    },
    {
      "actor_id": "ACT-CHA-001",
      "actor_type_id": "CHALLENGER",
      "name": "Synthetic challenger",
      "organization": null,
      "custody_boundary": "challenge submission and disclosed support",
      "independence_limits": "synthetic identity; no real participant"
    },
    {
      "actor_id": "ACT-COR-001",
      "actor_type_id": "CORRECTION_RECIPIENT",
      "name": "Synthetic correction endpoint",
      "organization": "Concresca synthetic downstream recipient",
      "custody_boundary": "correction payload and receipt state",
      "independence_limits": "operator-controlled local fixture"
    },
    {
      "actor_id": "ACT-DIS-001",
      "actor_type_id": "DISCLOSURE_RECIPIENT",
      "name": "Synthetic disclosure requester",
      "organization": "Concresca synthetic relying party",
      "custody_boundary": "authorized minimum disclosure",
      "independence_limits": "operator-controlled local fixture"
    },
    {
      "actor_id": "ACT-ROL-001",
      "actor_type_id": "ROLLBACK_AUTHORITY",
      "name": "Synthetic rollback custodian",
      "organization": "Concresca synthetic restoration cell",
      "custody_boundary": "bounded rollback command and receipt",
      "independence_limits": "operator-controlled local fixture"
    }
  ],
  "contracts": [
    {
      "contract_id": "OPR-001",
      "name": "Rights-constrained civic evidence receiver",
      "execution_environment_class": "LOCAL_SYNTHETIC_POLICY_PROFILE",
      "jurisdictional_assumptions": [
        "synthetic constitutional-administration setting",
        "due process and cognitive liberty are hard constraints",
        "no claim of legal compliance"
      ],
      "authority_boundaries": [
        "custody",
        "purpose-limited review",
        "correction propagation"
      ],
      "identity_and_key_ownership": {
        "operator_key_owner": "ACT-RCV-001",
        "subject_identifier_policy": "rotatable scoped identifier",
        "key_substitution": "prohibited"
      },
      "allowed_transformations": [
        "schema-preserving serialization",
        "field minimization",
        "explicit unknown-field preservation",
        "lossless Unicode retention"
      ],
      "prohibited_inferences": [
        "dangerousness from curiosity",
        "social score",
        "private lawful conduct as guilt",
        "unrelated identity linkage"
      ],
      "disclosure_policy": "Only fields necessary for the declared civic review purpose may be shown to typed recipients.",
      "retention_policy": {
        "maximum_days": 365,
        "extension_requires": "new recorded authority and notice",
        "cognitive_data_default": "do not retain"
      },
      "correction_duties": [
        "accept signed correction notice",
        "preserve supersession history",
        "notify reachable downstream recipients"
      ],
      "dissent_handling": "Preserve majority, minority, recusal, unresolved objection, and constitutional veto as distinct fields.",
      "appeal_routes": [
        "subject challenge",
        "reviewer reconsideration",
        "bounded stay",
        "correction and downstream notice"
      ],
      "service_level_assumptions": {
        "notice_acknowledgement_hours": 72,
        "emergency_stay_hours": 4,
        "availability_is_authority": false
      },
      "unknowns": [
        "real legal jurisdiction",
        "external operator adoption",
        "production availability"
      ],
      "actor_bindings": {
        "source_operator": "ACT-SRC-001",
        "data_subject": "ACT-SUB-001",
        "reviewer": "ACT-REV-001",
        "challenger": "ACT-CHA-001",
        "correction_recipient": "ACT-COR-001",
        "disclosure_recipient": "ACT-DIS-001",
        "rollback_authority": "ACT-ROL-001",
        "receiving_operator": "ACT-RCV-001"
      }
    },
    {
      "contract_id": "OPR-002",
      "name": "Restricted cross-jurisdiction evidence receiver",
      "execution_environment_class": "LOCAL_SYNTHETIC_RESTRICTED_PROFILE",
      "jurisdictional_assumptions": [
        "source and receiver authority may conflict",
        "conflict remains unresolved until reviewed",
        "no automatic supremacy"
      ],
      "authority_boundaries": [
        "restricted custody",
        "evidence-index review",
        "no coercive action"
      ],
      "identity_and_key_ownership": {
        "operator_key_owner": "ACT-RCV-002",
        "subject_identifier_policy": "pairwise pseudonymous identifier",
        "key_substitution": "requires explicit rotation chain"
      },
      "allowed_transformations": [
        "envelope reserialization",
        "field-level redaction with verifiable reason",
        "explicit retention shortening"
      ],
      "prohibited_inferences": [
        "cross-context identity graph",
        "purpose migration",
        "authority inferred from technical access"
      ],
      "disclosure_policy": "Restricted fields remain compartmented; a disclosure index may identify withheld categories without exposing content.",
      "retention_policy": {
        "maximum_days": 180,
        "extension_requires": "joint source and reviewer authorization",
        "cognitive_data_default": "prohibited"
      },
      "correction_duties": [
        "freeze contested derivative use",
        "record conflicting authority",
        "propagate correction or nonreachability state"
      ],
      "dissent_handling": "Dissent survives jurisdiction transfer and cannot be normalized into a single confidence value.",
      "appeal_routes": [
        "source review",
        "receiving review",
        "conflict hold",
        "human-readable unresolved notice"
      ],
      "service_level_assumptions": {
        "notice_acknowledgement_hours": 96,
        "emergency_stay_hours": 8,
        "availability_is_authority": false
      },
      "unknowns": [
        "which real jurisdiction would control",
        "whether an external reviewer exists",
        "production key custody"
      ],
      "actor_bindings": {
        "source_operator": "ACT-SRC-001",
        "data_subject": "ACT-SUB-001",
        "reviewer": "ACT-REV-001",
        "challenger": "ACT-CHA-001",
        "correction_recipient": "ACT-COR-001",
        "disclosure_recipient": "ACT-DIS-001",
        "rollback_authority": "ACT-ROL-001",
        "receiving_operator": "ACT-RCV-002"
      }
    },
    {
      "contract_id": "OPR-003",
      "name": "Emergency continuity receiver with mandatory sunset",
      "execution_environment_class": "LOCAL_SYNTHETIC_EMERGENCY_PROFILE",
      "jurisdictional_assumptions": [
        "temporary emergency basis",
        "ordinary authority is not silently displaced",
        "hard sunset unless renewed"
      ],
      "authority_boundaries": [
        "temporary continuity copy",
        "life-safety notification",
        "no permanent classification"
      ],
      "identity_and_key_ownership": {
        "operator_key_owner": "ACT-RCV-003",
        "subject_identifier_policy": "ephemeral incident identifier",
        "key_substitution": "prohibited during active incident"
      },
      "allowed_transformations": [
        "minimum emergency extract",
        "expiry annotation",
        "temporary access log"
      ],
      "prohibited_inferences": [
        "long-term risk profile",
        "permanent watchlist",
        "secondary enforcement purpose",
        "future eligibility decision"
      ],
      "disclosure_policy": "Only the minimum incident fields may be disclosed during the bounded emergency window.",
      "retention_policy": {
        "maximum_days": 14,
        "extension_requires": "post-emergency human review",
        "cognitive_data_default": "exclude"
      },
      "correction_duties": [
        "expire emergency copies",
        "notify recipients of corrected incident facts",
        "retain minimal audit tombstone"
      ],
      "dissent_handling": "Emergency dissent and unresolved authority objections remain visible and trigger post-event review.",
      "appeal_routes": [
        "immediate stay when safe",
        "post-event review",
        "correction",
        "compensation review"
      ],
      "service_level_assumptions": {
        "notice_acknowledgement_hours": 4,
        "emergency_stay_hours": 1,
        "availability_is_authority": false
      },
      "unknowns": [
        "actual emergency law",
        "real-world response capacity",
        "production notification reach"
      ],
      "actor_bindings": {
        "source_operator": "ACT-SRC-001",
        "data_subject": "ACT-SUB-001",
        "reviewer": "ACT-REV-001",
        "challenger": "ACT-CHA-001",
        "correction_recipient": "ACT-COR-001",
        "disclosure_recipient": "ACT-DIS-001",
        "rollback_authority": "ACT-ROL-001",
        "receiving_operator": "ACT-RCV-003"
      }
    },
    {
      "contract_id": "OPR-004",
      "name": "Synthetic research sandbox receiver",
      "execution_environment_class": "LOCAL_NON_OPERATIONAL_RESEARCH_PROFILE",
      "jurisdictional_assumptions": [
        "repository-owned synthetic data only",
        "no operational authority",
        "no human participant evidence"
      ],
      "authority_boundaries": [
        "local deterministic testing",
        "publication of aggregate synthetic results"
      ],
      "identity_and_key_ownership": {
        "operator_key_owner": "ACT-RCV-004",
        "subject_identifier_policy": "fixture-only identifier",
        "key_substitution": "test mutation only"
      },
      "allowed_transformations": [
        "deterministic fixture mutation",
        "canonical JSON serialization",
        "aggregate counting"
      ],
      "prohibited_inferences": [
        "claim about real people",
        "claim about production safety",
        "claim of external validation"
      ],
      "disclosure_policy": "Synthetic fixtures and bounded results may be public when their limitations remain attached.",
      "retention_policy": {
        "maximum_days": null,
        "extension_requires": null,
        "cognitive_data_default": "no real cognitive data permitted"
      },
      "correction_duties": [
        "correct generated reports",
        "invalidate stale dependent claims",
        "preserve failed development evidence internally"
      ],
      "dissent_handling": "Synthetic dissent fields are preserved to test portability and cannot be collapsed by the runner.",
      "appeal_routes": [
        "fixture challenge",
        "test correction",
        "release-gate failure"
      ],
      "service_level_assumptions": {
        "notice_acknowledgement_hours": null,
        "emergency_stay_hours": null,
        "availability_is_authority": false
      },
      "unknowns": [
        "external reproducibility",
        "human legibility outcome",
        "production behavior"
      ],
      "actor_bindings": {
        "source_operator": "ACT-SRC-001",
        "data_subject": "ACT-SUB-001",
        "reviewer": "ACT-REV-001",
        "challenger": "ACT-CHA-001",
        "correction_recipient": "ACT-COR-001",
        "disclosure_recipient": "ACT-DIS-001",
        "rollback_authority": "ACT-ROL-001",
        "receiving_operator": "ACT-RCV-004"
      }
    },
    {
      "contract_id": "OPR-005",
      "name": "Public transparency archive receiver",
      "execution_environment_class": "LOCAL_SYNTHETIC_PUBLICATION_PROFILE",
      "jurisdictional_assumptions": [
        "public-interest publication does not erase privacy",
        "only non-personal public records qualify"
      ],
      "authority_boundaries": [
        "publish declared public fields",
        "publish correction and supersession notices"
      ],
      "identity_and_key_ownership": {
        "operator_key_owner": "ACT-RCV-005",
        "subject_identifier_policy": "no persistent personal identifier",
        "key_substitution": "must preserve publication provenance"
      },
      "allowed_transformations": [
        "HTML rendering",
        "machine-readable JSON rendering",
        "accessibility annotation"
      ],
      "prohibited_inferences": [
        "identity reconstruction",
        "private-context linkage",
        "social scoring",
        "hidden ranking instruction"
      ],
      "disclosure_policy": "Public pages expose only non-personal fields and explicit evidence boundaries.",
      "retention_policy": {
        "maximum_days": null,
        "extension_requires": "continued public-purpose review",
        "cognitive_data_default": "prohibited"
      },
      "correction_duties": [
        "publish correction",
        "mark superseded pages",
        "update machine and human representations together"
      ],
      "dissent_handling": "Published summaries must expose material dissent and unresolved states.",
      "appeal_routes": [
        "correction request",
        "source challenge",
        "publication withdrawal when lawful and technically possible"
      ],
      "service_level_assumptions": {
        "notice_acknowledgement_hours": 120,
        "emergency_stay_hours": 12,
        "availability_is_authority": false
      },
      "unknowns": [
        "search indexing",
        "crawler visitation",
        "AI citation",
        "external reliance"
      ],
      "actor_bindings": {
        "source_operator": "ACT-SRC-001",
        "data_subject": "ACT-SUB-001",
        "reviewer": "ACT-REV-001",
        "challenger": "ACT-CHA-001",
        "correction_recipient": "ACT-COR-001",
        "disclosure_recipient": "ACT-DIS-001",
        "rollback_authority": "ACT-ROL-001",
        "receiving_operator": "ACT-RCV-005"
      }
    },
    {
      "contract_id": "OPR-006",
      "name": "Successor escrow trustee after operator loss",
      "execution_environment_class": "LOCAL_SYNTHETIC_SUCCESSION_PROFILE",
      "jurisdictional_assumptions": [
        "predecessor may be unavailable",
        "custody can transfer without transferring every authority",
        "rights survive operator dissolution"
      ],
      "authority_boundaries": [
        "escrow custody",
        "correction relay",
        "limited restoration under proof obligations"
      ],
      "identity_and_key_ownership": {
        "operator_key_owner": "ACT-RCV-006",
        "subject_identifier_policy": "preserved scoped identifier with rotation record",
        "key_substitution": "rotation chain required"
      },
      "allowed_transformations": [
        "custody re-envelope",
        "key rotation with provenance",
        "tombstone and correction relay"
      ],
      "prohibited_inferences": [
        "successor authority by possession alone",
        "purpose expansion",
        "dissent deletion",
        "deadline shortening"
      ],
      "disclosure_policy": "The trustee discloses only what the surviving authority and original purpose permit.",
      "retention_policy": {
        "maximum_days": 730,
        "extension_requires": "succession review and renewed authority",
        "cognitive_data_default": "minimize and segregate"
      },
      "correction_duties": [
        "maintain challenge route",
        "relay corrections to known holders",
        "record unreachable predecessor dependencies"
      ],
      "dissent_handling": "Dissent, recusal, veto, and unresolved challenge survive archive transfer and key rotation.",
      "appeal_routes": [
        "successor review",
        "external reviewer when identified",
        "bounded nonuse pending authority"
      ],
      "service_level_assumptions": {
        "notice_acknowledgement_hours": 120,
        "emergency_stay_hours": 12,
        "availability_is_authority": false
      },
      "unknowns": [
        "real successor legitimacy",
        "complete recipient inventory",
        "legal retention duties"
      ],
      "actor_bindings": {
        "source_operator": "ACT-SRC-001",
        "data_subject": "ACT-SUB-001",
        "reviewer": "ACT-REV-001",
        "challenger": "ACT-CHA-001",
        "correction_recipient": "ACT-COR-001",
        "disclosure_recipient": "ACT-DIS-001",
        "rollback_authority": "ACT-ROL-001",
        "receiving_operator": "ACT-RCV-006"
      }
    }
  ],
  "validation_rules": [
    "Every contract binds exactly one typed source operator and one distinct typed receiving operator.",
    "Reviewer, challenger, correction recipient, disclosure recipient, and rollback authority remain separately typed.",
    "Authority, purpose, retention, disclosure, dissent, correction, and appeal fields are mandatory.",
    "Unknowns remain explicit and cannot be converted into affirmative compatibility.",
    "Availability or technical possession never creates authority."
  ]
}