Implemented locally
Single-use digest model, hard expiry, neutral reason codes, and content-free public projection.
OPERATOR CONTROL
Cancellation is a technical state, not a verdict.
A cancellation binds one authorization and execution, expires, cannot be reused, and never creates participant blame, rank, danger, or standing.
LOCAL CONTROLJudgment state: NONE
Before, during, and after
Before start, cancellation prevents adapter admission. During execution, the adapter must acknowledge cancellation or publish a bounded non-completion state. After completion, cancellation is refused and rollback remains a separate authorized operation.
- Never place private input in a cancellation token.
- Never treat timeout as participant intent.
- Never reuse cancellation authority across executions.
- Invalidate dependent candidate receipts after cancellation.
EVIDENCE BOUNDARY
Local mechanism, explicit authorization, operational execution, and participant standing remain separate.
Not supplied or verified
Operational adapter acknowledgement or any external cancellation action.
Exact current condition
LOCAL_CONTENT_FREE_CONTROL_IMPLEMENTED
No participant judgment
Cancellation, refusal, expiry, rollback, correction, and blocked evidence have participant-evaluation and standing effects NONE.
NO JUDGMENT WHATSOEVER. A technical state is not a moral condition.