Before
Record the exact content-free current state.
A rollback proof binds before, intended, observed and restored digests and proves every declared lock or capability was released.
Record the exact content-free current state.
Record intended and actually observed states separately.
Restored digest must equal the before digest.
Every declared lock and capability must be released.
A secret-free local command allows a second implementation to verify the proof.
Canonical page, machine owner and executable local controls.
External authorization, live package identity, operational execution, adoption and certification.
PASS_LOCAL_WIP_
Refusal, disagreement, expiry, revocation and rollback are technical states with participant-evaluation and standing effects NONE.
NO JUDGMENT WHATSOEVER. A technical condition is not a moral condition.