The v0.21 harness creates independent negative conditions and records whether the intended mutation was detected for the required reason.
The mutation must actually occur, the harness must reject it, and the rejection reason must match the detector contract. Copied expected statuses do not count.
Truth boundary: This WIP lineage-recovery branch locally evaluates repository-owned synthetic fixtures. It does not supply the missing sealed v0.19/v0.20 lineage, external execution, production migration, legal authority, institutional adoption, participant-study evidence, independent certification or deployment.
| ID | Control | Mutation | Required failure reason | Canonical actual |
|---|---|---|---|---|
| TM-001 | Manifest/file mismatch | manifest_file_mismatch | Authenticated input digest mismatch must be detected. | null |
| TM-002 | Omitted indirect runtime input | omitted_runtime_input | The manifest must enumerate every runtime-read file. | null |
| TM-003 | Runner substitution | runner_substitution | The recorded runner digest must not match a substituted runner. | null |
| TM-004 | ZIP path traversal | zip_path_traversal | Unsafe archive paths must be rejected before extraction. | null |
| TM-005 | Duplicate ZIP member | duplicate_zip_member | Duplicate members must be rejected even when CRC passes. | null |
| TM-006 | Stale baseline lock | stale_baseline_lock | The retained v0.18 source archive hash must remain exact. | null |
| TM-007 | Environment-ID substitution | environment_id_substitution | Unknown environment IDs must not inherit a green result. | null |
| TM-008 | Actor-role substitution | actor_role_substitution | An actor bound to the wrong typed role must be rejected. | null |
| TM-009 | Authority escalation | authority_escalation | Receiving scope cannot exceed granted authority. | null |
| TM-010 | Purpose expansion | purpose_expansion | A new purpose cannot be smuggled into an otherwise valid payload. | null |
| TM-011 | Dissent deletion | dissent_deletion | Material dissent cannot disappear during transfer. | null |
| TM-012 | Correction-recipient deletion | correction_recipient_deletion | Known recipients cannot be removed from propagation accounting. | null |
| TM-013 | Rollback overclaim | rollback_overclaim | Irreversible effects prohibit a COMPLETE rollback label. | null |
| TM-014 | Receipt replay | receipt_replay | Duplicate receipt identity and nonce must be detected. | null |
| TM-015 | Partial report truncation | partial_report_truncation | Missing mandatory report sections must fail validation. | null |
| TM-016 | Structured-data contradiction | structured_data_contradiction | Machine-readable claims cannot contradict visible evidence boundaries. | null |
| TM-017 | Null-to-pass mutation | null_to_pass | Definition-only actual_result fields must remain null. | null |
| TM-018 | Semantic-digest manipulation | semantic_digest_manipulation | Reported semantic digest must recompute from the declared projection. | null |
The identified local run reports execute each detector separately. A detector that is disabled, observes a different mutation, or reports the wrong failure reason fails the technical gate.
Eighteen independent negative controls execute deliberate mutations and require detector-specific failure reasons.
This WIP lineage-recovery branch locally evaluates repository-owned synthetic fixtures. It does not supply the missing sealed v0.19/v0.20 lineage, external execution, production migration, legal authority, institutional adoption, participant-study evidence, independent certification or deployment.NO JUDGMENT WHATSOEVER. Concresca coordinates without assigning moral worth, character, guilt, danger, trustworthiness, loyalty, purity, normality, or social standing. Questions, thoughts, identities, messages, content, and conduct are not objects of Concresca judgment.