Implemented locally
Transaction planning, adapter conformance, forced failures, rollback receipts, migration checksum validation, semantic non-resurrection, and prohibited-schema tests.
DATABASE EXECUTION BOUNDARY
Four roles, one attributable transaction, zero silent fallback.
Migration target, forced-rollback database, backup source, and restore target remain separately identified. Backup creation is not restore proof, restore is not reconciled state, and reconciled state is not current activation.
LOCAL WIP CONTROLJudgment state: NONE
| Role | Required proof | Forbidden collapse |
|---|---|---|
| Migration target | Server/backend identity, schema classification, advisory lock, pinned migrations, idempotency | Cannot double as rollback test |
| Forced-rollback test | Separate disposable identity and forced mid-migration failure | Cannot reuse migration target |
| Backup source | Exact tool/version, digest, size, time basis, redacted identity | Cannot be treated as restore evidence |
| Restore target | Separate identity, restored constraints, reconciliation, non-resurrection | Cannot equal backup source |
Refusal and crash boundaries
Unknown nonempty, partial, newer, checksum-divergent, incorrectly owned, role-overlapping, backend-ambiguous, and prohibited-profile schemas fail before mutation.
- No CREATE DATABASE, CREATE USER, GRANT, or REVOKE.
- No silent SQLite, file, JSON, or memory fallback.
- Advisory lock releases on refusal, timeout, crash simulation, cancellation, receipt failure, and every injected stage failure.
- Driver exceptions and tool identity are redacted and attributable.
EVIDENCE BOUNDARY
Mechanism, authorization, public reachability, and operational activation remain separate.
Not supplied or verified
No authorized driver, four private configurations, database connection, SQL statement, backup, restore, or backend verification.
Exact current condition
NOT_RUN_NO_AUTHORIZED_DATABASE
No participant judgment
Participant evaluation effect and standing effect remain NONE.
NO JUDGMENT WHATSOEVER. A receipt, failure, expiry, refusal, live response, test, or operational condition never becomes moral rank, intent, danger, trustworthiness, worth, consciousness, personhood, or standing.