Implemented locally
Append-only ledger state machine, one-current-owner checks, forced failures, atomic publication, compensating rollback, and receipt invalidation.
ROUTE OWNERSHIP
Candidate is not current.
Exact MATM custody, license/notice digests, archive member and source-line evidence, callable, methods, upstream suites, dependency lock, database receipts, staging origin, public-survival set, previous owner, rollback target, plan, and authorization must bind before commit.
LOCAL WIP CONTROLJudgment state: NONE
| Ledger transition | Required evidence | Owner state |
|---|---|---|
| Candidate prepared | Custody, member, source-line, callable, method, dependency, limitation | Previous owner remains current |
| Candidate verified | Upstream suites, backend, public-survival, rollback, authorization | Previous owner remains current |
| Commit | One signed append-only transition and projection digest | Candidate becomes current atomically |
| Post-commit verify | Exact owner, public survival, receipt and backend checks | Current only if all pass |
| Rollback | Previous-owner target and candidate invalidation | Exact previous owner restored |
| Correction/revocation | Attributable immutable follow-up record | Affected pointers invalidated only |
Fail-closed route behavior
Invented routes, owner collisions, stale custody, source-line mismatch, callable mismatch, dependency drift, backend mismatch, configuration-epoch mismatch, missing public-survival evidence, expired authorization, duplicate commit, and partial publication are rejected.
Public reading, status, appeals, health, discovery, and the previous runtime must survive every activation failure.
EVIDENCE BOUNDARY
Mechanism, authorization, public reachability, and operational activation remain separate.
Not supplied or verified
No authenticated MATM archive, upstream suite receipt, verified database receipt, candidate process, Passenger registration, or route switch.
Exact current condition
BLOCKED_AUTHENTICATED_ARCHIVE_NOT_IN_LOCAL_CUSTODY
No participant judgment
Participant evaluation effect and standing effect remain NONE.
NO JUDGMENT WHATSOEVER. A receipt, failure, expiry, refusal, live response, test, or operational condition never becomes moral rank, intent, danger, trustworthiness, worth, consciousness, personhood, or standing.