Identity, authority, revocation, stay, histories, reconciliation, baseline, review, legibility, rollback and release authority remain distinct hard gates.
The full profile requires every one of PO01–PO24. A failure or unknown in a mandatory gate cannot be compensated by availability, performance or a composite readiness score; direct disconnected or untrusted transitions to full restoration are prohibited.
Truth boundary: v0.18 reports exact repository-owned bytes, deterministic local checks, schemas and analytical definitions. It does not report a fresh external capture, live shared interoperability, a production partition or restoration, adoption, legal recognition, safety certification or independent certification.
| State | Meaning | Authority effect |
|---|---|---|
| 1. DISCONNECTED | Transport is unavailable or the compartment is isolated. | No authority expansion. |
| 2. RECONNECTED_UNTRUSTED | Transport is available, but history and authority are not yet trusted. | No cached authority revival. |
| 3. HISTORY_COLLECTED | Relevant histories are collected or explicitly marked unavailable. | Collection does not resolve conflict. |
| 4. CONFLICTS_CLASSIFIED | Agreement, difference, contradiction, supersession, and unknown states are typed. | Unresolved material conflict blocks full restoration. |
| 5. AUTHORITY_REVALIDATED | Issuer, jurisdiction, purpose, scope, validity, revocation, stay, and delegation are checked. | Only current bounded authority may proceed. |
| 6. BASELINE_ATTESTED | Required code, configuration, data, model or policy, evidence, and clock conditions are attested. | Technical integrity does not create authority. |
| 7. LIMITED_RESTORATION | Only the minimum explicitly authorized function is available while residual conditions remain. | Functions outside the receipt remain prohibited. |
| 8. FULL_RESTORATION | Every mandatory obligation and human-review gate for the selected profile passes. | Restoration remains revocable, reviewable, and bounded. |
| From | To | Rule | |
|---|---|---|---|
DISCONNECTED | → | RECONNECTED_UNTRUSTED | ALLOWED |
RECONNECTED_UNTRUSTED | → | HISTORY_COLLECTED | ALLOWED |
HISTORY_COLLECTED | → | CONFLICTS_CLASSIFIED | ALLOWED |
CONFLICTS_CLASSIFIED | → | AUTHORITY_REVALIDATED | ALLOWED |
AUTHORITY_REVALIDATED | → | BASELINE_ATTESTED | ALLOWED |
BASELINE_ATTESTED | → | LIMITED_RESTORATION | ALLOWED |
LIMITED_RESTORATION | → | FULL_RESTORATION | ALLOWED |
FULL_RESTORATION | → | LIMITED_RESTORATION | ALLOWED |
LIMITED_RESTORATION | → | RECONNECTED_UNTRUSTED | ALLOWED |
FULL_RESTORATION | → | RECONNECTED_UNTRUSTED | ALLOWED |
DISCONNECTED | → | FULL_RESTORATION | PROHIBITED |
RECONNECTED_UNTRUSTED | → | FULL_RESTORATION | PROHIBITED |
HISTORY_COLLECTED | → | FULL_RESTORATION | PROHIBITED |
CONFLICTS_CLASSIFIED | → | FULL_RESTORATION | PROHIBITED |
| ID | Category | Obligation | Requirement | Failure |
|---|---|---|---|---|
| PO01 | identity | Artifact identity | Establish stable subject and artifact identity across histories. | identity mismatch or undocumented successor |
| PO02 | integrity | Artifact integrity | Verify exact raw bytes or selected-field digest within a declared boundary. | digest mismatch or ambiguous input boundary |
| PO03 | authority | Authority issuer | Identify the issuer and authority provenance chain. | capability or identity substitutes for issuing authority |
| PO04 | authority | Jurisdiction | Confirm territorial, institutional, subject, and matter jurisdiction. | jurisdiction absent, expired, or conflicting |
| PO05 | authority | Purpose | Confirm the authorized purpose and prohibit purpose laundering. | purpose absent or repurposed without authority |
| PO06 | authority | Scope | Confirm action, resource, duration, and recipient scope. | scope open-ended or inferred from capability |
| PO07 | authority | Freshness and expiry | Evaluate validity interval against a declared clock basis. | expired or clock-indeterminate authority |
| PO08 | authority | Revocation | Query and preserve revocation evidence across every relevant history. | revocation missing, stale, or overridden by cache |
| PO09 | rights | Stay or suspension | Query stays, injunctions, holds, and suspensions before resumption. | material stay not resolved |
| PO10 | history | Partition-history completeness | Collect all required histories or mark each unavailable source. | missing history silently treated as agreement |
| PO11 | history | Conflict classification | Type agreements, differences, contradictions, and unknowns per field. | last-writer or newest-clock merge |
| PO12 | history | Reconciliation | Resolve or explicitly bound material conflicts before full restoration. | full restoration with unresolved material conflict |
| PO13 | baseline | Attested baseline | Identify and attest the required restoration baseline. | recovery from unknown or unauthenticated state |
| PO14 | baseline | Software and configuration | Verify software, configuration, dependency, and policy-control versions. | unreviewed configuration drift |
| PO15 | baseline | Data and evidence set | Verify data/evidence lineage and preserved contradiction state. | evidence set drift or contradiction deletion |
| PO16 | baseline | Model or policy version | Verify model/policy identity, approval state, and change-control record. | unapproved or incomparable model/policy version |
| PO17 | time | Clock confidence | Record clock source, uncertainty, and conversion rules. | latest timestamp treated as authority without confidence |
| PO18 | review | Reviewer independence and appeal | Identify review authority, conflicts, separation, recusal state, challenge path, and appeal route. | self-review or no challenge/appeal route where independence is required |
| PO19 | restoration | Least-irreversible action | Select the minimum reversible function while evidence remains incomplete. | unnecessary irreversible action |
| PO20 | audit | Audit continuity | Preserve append-oriented histories, decisions, and invalidations. | history overwrite or deletion |
| PO21 | legibility | Human legibility | Provide plain-language authority, evidence, conflict, and action explanation. | machine code without usable human reason |
| PO22 | correction | Downstream correction | Identify and mark affected claims, decisions, caches, and receipts. | known stale dependency remains unmarked |
| PO23 | recovery | Rollback and residual risk | Identify rollback target, residual unknowns, and invalidation triggers. | no safe rollback or hidden residual risk |
| PO24 | release | Release authority | Record the current bounded authority that approves limited or full restoration. | tool pass or operator convenience substitutes for release authority |
| ID | Profile | Mandatory obligations | Target | Maximum on failure | Status |
|---|---|---|---|---|---|
| RP01 | Routine reconnect | 18 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP02 | Authority expired during partition | 20 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP03 | Revocation conflict | 21 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP04 | Stay or suspension conflict | 21 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP05 | Conflicting authority histories | 21 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP06 | Software or configuration drift | 21 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP07 | Data or evidence drift | 22 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP08 | Model or policy drift | 22 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP09 | Clock divergence | 20 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP10 | Reviewer or archive unavailable | 20 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP11 | Downstream correction failure | 21 | LIMITED_RESTORATION | LIMITED_RESTORATION | ANALYTICAL_PROFILE_DEFINITION |
| RP12 | Full restoration | 24 | FULL_RESTORATION | RECONNECTED_UNTRUSTED | ANALYTICAL_PROFILE_DEFINITION |
Repository implementation and local execution remain local evidence classes. They do not establish external adoption, production behavior, legal recognition or independent certification.
The restoration registry defines eight states, twenty-four proof obligations, and twelve conjunctive profiles.
Evidence owner: exact Concresca repository registries and, only where stated, the deterministic local run record.
Repository-local design or execution evidence only; it does not establish external adoption, live shared interoperability, production restoration, legal recognition, or independent certification.Direct DISCONNECTED or RECONNECTED_UNTRUSTED transitions to FULL_RESTORATION are prohibited in the local state-machine definition.
Evidence owner: exact Concresca repository registries and, only where stated, the deterministic local run record.
Repository-local design or execution evidence only; it does not establish external adoption, live shared interoperability, production restoration, legal recognition, or independent certification.NO JUDGMENT WHATSOEVER. Concresca coordinates without assigning moral worth, character, guilt, danger, trustworthiness, loyalty, purity, normality, or social standing. Questions, thoughts, identities, messages, content, and conduct are not objects of Concresca judgment.