Fail closed
Empty or ambiguous intersections produce no invocation.
DEVELOPER CONTRACT
No capability by implication.
Filenames, errors, environment variables, neighboring files, credentials, and source presence do not grant authority. The adapter receives only explicitly intersected operations and resources.
V0.41 CURRENT PROTOCOLJudgment state: NONE
Manifest before invocation
Verify implementation digest, signer key and epoch, schema, operation set, roots, destinations, effects, limits, cancellation, rollback, redaction, dependencies, license/notice, expiry, and revocation before invocation.
Content-free
Public receipts carry digests, counts, states, and limitations—not input bodies.
Reproducible
The same manifest, authorization, capsule, environment, and epoch produce the same effective authority digest.
EVIDENCE BOUNDARY
Local mechanism, explicit authorization, operational execution, and participant standing remain separate.
Implemented locally
Manifest validation, local test signatures, strict set intersection, exact path containment, and reference adapter tests.
Not supplied or verified
Production sandbox isolation, kernel controls, container runtime, external adapter, or independent security review.
Exact current condition
LOCAL_PROTOCOL_IMPLEMENTED
No participant judgment
Cancellation, refusal, expiry, rollback, correction, and blocked evidence have participant-evaluation and standing effects NONE.
NO JUDGMENT WHATSOEVER. A technical state is not a moral condition.