Identity
Name, version, implementation digest, entry point, runtime, schema, dependencies, and license/notice.
OPERATOR WORKBENCH
An adapter receives only the authority every boundary shares.
The effective operation set is the strict intersection of capsule scope, authorization scope, adapter manifest, environment policy, one configuration epoch, and current revocation state.
DEFAULT: NO_EXTERNAL_ADAPTERJudgment state: NONE
No implicit discovery
The adapter may not search home directories, environment variables, neighboring folders, shell history, process tables, browser stores, cloud metadata, or unlisted destinations.
Resources
Exact read/write roots and bounded runtime, memory, input, output, retries, and concurrency.
Effects
Network, database, archive, subprocess, clock, randomness, and environment access are explicit booleans—not inferred.
Reference adapter boundary
The packaged reference adapter reads one explicitly supplied synthetic fixture below one explicit root and emits only its digest and byte count. It performs zero network calls, database connections, SQL statements, archive extractions, process spawns, and environment reads.
Synthetic fixture success is not production evidence.
EVIDENCE BOUNDARY
Local mechanism, explicit authorization, operational execution, and participant standing remain separate.
Implemented locally
A signed manifest schema, strict intersection algorithm, local synthetic digest-reader adapter, cancellation check, size bound, path containment, and neutral exception grammar.
Not supplied or verified
Any production adapter, network destination, database credential, archive import, subprocess, or external execution.
Exact current condition
NO_EXTERNAL_ADAPTER
No participant judgment
Cancellation, refusal, expiry, rollback, correction, and blocked evidence have participant-evaluation and standing effects NONE.
NO JUDGMENT WHATSOEVER. A technical state is not a moral condition.