Replay
The same ordered public ledger and exact private verification inputs reproduce the same state and digest.
OPERATOR WORKBENCH
Authorization that can be replayed, revoked, and refused.
Create a plan, verify the exact signer and key epoch, issue finite authority, admit or refuse execution, record cancellation or rollback, and preserve correction and downstream invalidation without copying private values.
LOCAL DETERMINISTIC CONTROLJudgment state: NONE
One append-only sequence
Every event binds its predecessor digest, actor, signer, capsule, plan, adapter, configuration epoch, rollback target, environment, operation set, time, correction route, and limitation.
Refusal
Forks, time reversal, scope broadening, signer substitution, key-epoch mixing, token reuse, and completion without admission fail closed.
Renewal
A renewal is a new authorization. Expired bytes are not edited in place.
| Stage | Required result | Failure state |
|---|---|---|
| Plan | Exact capsule, plan, adapter, epoch, environment, rollback target | PLAN_INCOMPLETE |
| Sign | Authorized key, algorithm, epoch, scope, issue and expiry | SIGNER_OR_SCOPE_INVALID |
| Admit | Strict capability intersection remains non-empty | EXECUTION_REFUSED |
| Execute | Started only after admission; completion bound to execution ID | NO_COMPLETION_CLAIM |
| Correct | Attributable correction and downstream invalidation | CURRENT_POINTER_UNCHANGED |
EVIDENCE BOUNDARY
Local mechanism, explicit authorization, operational execution, and participant standing remain separate.
Implemented locally
Deterministic HMAC fixture verification, append-only event construction, replay, cancellation, correction, invalidation, and neutral refusal controls.
Not supplied or verified
Operational signer keys, private evidence, external adapters, database access, MATM source, or live execution authority.
Exact current condition
LOCAL_DETERMINISTIC_CONTROL_IMPLEMENTED
No participant judgment
Cancellation, refusal, expiry, rollback, correction, and blocked evidence have participant-evaluation and standing effects NONE.
NO JUDGMENT WHATSOEVER. A technical state is not a moral condition.