@ixo/topic-protocol 0.7.0 → 1.0.0-rc.1

package/templates/decision-to-pay/README.md

@@ -0,0 +1,67 @@
+# Decision-to-Pay Topic template pack
+
+This directory publishes versioned, machine-readable Topic Templates for
+consequential payment decisions:
+
+1. [Verified Work Payment v0.1](verified-work-payment.template.json) — the original generic contract extension, retained unchanged for compatibility.
+2. [Verified Work Payment v0.2](verified-work-payment.v0.2.template.json) — the Claims-native candidate that binds a Deed, Job Topic, scoped AuthZ, intent escrow, claim, signed evaluation receipt, payment and canonical dispute.
+3. [Payment on Delivery](payment-on-delivery.template.json)
+4. [Milestone Payment Release](milestone-payment-release.template.json)
+5. [Outcome Payment Claim](outcome-payment-claim.template.json)
+
+The v1 manifests extend the Topic kinds, recipes, and external-work contracts
+in `@ixo/topic-protocol` 0.7.0. Verified Work Payment v0.2 targets Topic
+Protocol 0.8.0 and the canonical IXO Claims and Evaluation Engine interfaces.
+Every compatibility block pins its reviewed baseline and required extensions.
+
+## Shared contracts
+
+- [`decision-to-pay-template.schema.json`](../../schemas/decision-to-pay-template.schema.json)
+  validates each template manifest.
+- [`payment-terms.schema.json`](../../schemas/payment-terms.schema.json) defines
+  immutable commercial and control terms for one payable unit.
+- [`payable-obligation.schema.json`](../../schemas/payable-obligation.schema.json)
+  defines a payment-case envelope with separate delivery, evaluation, approval,
+  claim, and settlement projections.
+- Matching synthetic reference vectors live in [`examples/`](../../examples).
+
+## Trust boundary
+
+These artifacts do not grant a capability, verify a signature, establish
+eligibility, approve a claim, or move money. For v1, Topic Protocol operations
+and referenced records are the projected authorities. For Verified Work
+Payment v0.2, the Deed owns the work package and the IXO Claims module owns
+intent, escrow, claim, evaluation, payment, deposits, disputes, and
+adjudication. A conforming runtime must verify DIDs, delegated capabilities,
+signatures, revocation, replay protection, funding, evidence and rubric digests
+before offering a chain transaction.
+
+Neither Payable Obligation version is an alternative settlement authority.
+
+## Draft and privacy rules
+
+- A Topic may begin as an honest Draft with only a title and Kind.
+- Missing intent, owner, outcome, authority, evidence, amount, or deadline must
+  remain visibly missing until supplied or accepted.
+- A template names required capabilities but never grants them.
+- Confidential evidence stays in an appropriately scoped encrypted room or a
+  UCAN-protected VFS resource. Topic membership does not grant VFS byte access.
+- The example fixtures set `notRealEvidence: true`; zero digests and example
+  identifiers must never be treated as verified evidence.
+
+## Compatibility notes
+
+The Job Card profile and external-work contracts support the strongest path for
+Verified Work Payment. Physical delivery still needs a delivery-order resource
+or profile. The milestone template uses one child Topic per payable milestone,
+so corrections do not become new milestones. Outcome Payment Claim assumes a
+Delivery Packet for the underlying intervention; claims without external work
+need a future generalised obligation handoff.
+
+The v2 Verified Work Payment contract deliberately uses separate schemas:
+
+- [`decision-to-pay-template-v2.schema.json`](../../schemas/decision-to-pay-template-v2.schema.json) fixes the authority model: Deed for the work package, Job Topic for the binder/thread, Claims for execution, Evaluation Engine for the signed determination, and Portal for orchestration.
+- [`payment-terms-v2.schema.json`](../../schemas/payment-terms-v2.schema.json) maps immutable accepted terms to Claim Collection, AuthZ, evaluation and dispute configuration.
+- [`payable-obligation-v2.schema.json`](../../schemas/payable-obligation-v2.schema.json) is a read-only projection of chain and receipt evidence; it cannot approve or settle.
+
+The v1 schemas and all other templates remain available and retain their original semantics.

package/templates/decision-to-pay/milestone-payment-release.template.json

@@ -0,0 +1,195 @@
+{
+  "$schema": "../../schemas/decision-to-pay-template.schema.json",
+  "version": 1,
+  "id": "urn:ixo:decision-to-pay:template:milestone-payment-release",
+  "templateVersion": "0.1.0",
+  "label": "Milestone Payment Release",
+  "description": "Create one governed child Topic for each payable milestone so its terms, handoff, evaluation, claim, settlement, corrections, and disputes remain independently auditable.",
+  "maturity": "draft",
+  "compatibility": {
+    "protocolPackage": "@ixo/topic-protocol",
+    "protocolVersion": "0.7.0",
+    "sourceCommit": "40d1ce5160757553cd57f670b5b1708a5c0d0ea3",
+    "implementationStatus": "draft_contract_extension",
+    "requiredExtensions": [
+      "org.ixo.payment-terms/v1",
+      "org.ixo.payable-obligation/v1",
+      "ixo.payment capability policy/v1",
+      "payment-rail adapter"
+    ],
+    "constraints": [
+      "One child Topic represents one payable milestone; Delivery Packet sequence numbers represent corrections and not additional milestones.",
+      "Parent project completion, child milestone acceptance, and payment settlement remain separate statuses."
+    ]
+  },
+  "topic": {
+    "primaryRole": "payable_milestone",
+    "kindRef": {"source": "standard", "kind": "task"},
+    "recipe": "project",
+    "workingMode": "client",
+    "temporalMode": "finite",
+    "acceptance": {
+      "requiredTopicContractPaths": [
+        "/intent/text",
+        "/outcome/statement/text",
+        "/outcome/successCriteria",
+        "/ownerId",
+        "/completion/definition",
+        "/completion/acceptanceAuthorityIds"
+      ],
+      "allowHonestDraft": true
+    },
+    "lifecyclePolicy": {
+      "separateTopicContractOutcomeAxes": true,
+      "waitingRule": "A milestone Topic may wait on dependencies, delivery correction, evaluation, approval, claim, or settlement without changing the parent project outcome.",
+      "resolveRule": "Resolve the milestone under its own accepted closure rule; never infer parent project completion from one paid child."
+    }
+  },
+  "topology": {
+    "requiresParentTopic": true,
+    "parentBaseKind": "task",
+    "relation": "branches_from",
+    "onePayableUnitPerTopic": true
+  },
+  "actors": [
+    {"role": "payer", "label": "Project client or payer", "required": true, "identity": "did", "capabilities": ["ixo.payment/accept-terms"]},
+    {"role": "milestone_owner", "label": "Milestone owner and claimant", "required": true, "identity": "did", "capabilities": ["topic/write", "ixo.payment/submit-delivery", "ixo.payment/record-claim"]},
+    {"role": "milestone_acceptor", "label": "Milestone acceptance authority", "required": true, "identity": "did", "capabilities": ["ixo.payment/accept-delivery"]},
+    {"role": "evaluator", "label": "Milestone evaluator", "required": true, "identity": "did", "capabilities": ["ixo.payment/evaluate"]},
+    {"role": "payment_approver", "label": "Payment approval authority", "required": true, "identity": "did", "capabilities": ["ixo.payment/approve"]},
+    {"role": "settlement_controller", "label": "Settlement controller", "required": true, "identity": "did", "capabilities": ["ixo.payment/record-settlement"]}
+  ],
+  "resources": [
+    {"role": "parent_topic", "type": "ixo.topic", "required": true, "binding": "external_reference", "authority": "topic_contract", "availability": "topic_protocol_0.7", "confidentiality": "room_encrypted", "notes": "Linked by an append-only Topic relation; the parent does not own this child's payment state."},
+    {"role": "payment_terms", "type": "org.ixo.payment-terms", "required": true, "binding": "typed_context", "authority": "bound_resource", "availability": "contract_pack", "schemaRef": "https://topic-protocol.ixo.world/schemas/payment-terms.schema.json", "confidentiality": "vfs_ucan"},
+    {"role": "payable_obligation", "type": "org.ixo.payable-obligation", "required": true, "binding": "typed_context", "authority": "bound_resource", "availability": "contract_pack", "schemaRef": "https://topic-protocol.ixo.world/schemas/payable-obligation.schema.json", "confidentiality": "room_encrypted"},
+    {"role": "external_work", "type": "ixo.external-work-binding", "required": true, "binding": "protocol_record", "authority": "external_system", "availability": "topic_protocol_0.7", "schemaRef": "https://topic-protocol.ixo.world/schemas/external-work-binding.schema.json", "confidentiality": "room_encrypted"},
+    {"role": "milestone_evidence", "type": "ixo.vfs", "required": true, "binding": "vfs_attachment", "authority": "bound_resource", "availability": "topic_protocol_0.7", "schemaRef": "https://topic-protocol.ixo.world/schemas/topic-file-attachment.schema.json", "confidentiality": "vfs_ucan"}
+  ],
+  "protocolContracts": [
+    {"name": "topic-contract-state", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/topic-contract-state.schema.json", "required": true},
+    {"name": "external-work-binding", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/external-work-binding.schema.json", "required": true},
+    {"name": "delivery-packet", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/delivery-packet.schema.json", "required": true},
+    {"name": "delivery-decision", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/delivery-decision.schema.json", "required": true},
+    {"name": "evaluation-assertion", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/evaluation-assertion.schema.json", "required": true},
+    {"name": "approval-decision", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/approval-decision.schema.json", "required": true},
+    {"name": "claim-record", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/claim-record.schema.json", "required": true},
+    {"name": "settlement-receipt", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/settlement-receipt.schema.json", "required": true},
+    {"name": "payment-terms", "source": "contract_pack", "schemaRef": "https://topic-protocol.ixo.world/schemas/payment-terms.schema.json", "required": true},
+    {"name": "payable-obligation", "source": "contract_pack", "schemaRef": "https://topic-protocol.ixo.world/schemas/payable-obligation.schema.json", "required": true}
+  ],
+  "operations": [
+    "branch",
+    "propose-contract",
+    "update-contract",
+    "accept-contract",
+    "supersede-contract",
+    "bind-external-work",
+    "sync-external-work",
+    "submit-delivery",
+    "record-delivery-decision",
+    "record-evaluation",
+    "record-approval",
+    "record-claim",
+    "record-settlement",
+    "change-status",
+    "resolve-conflict"
+  ],
+  "gates": [
+    {
+      "id": "milestone-terms-accepted",
+      "stage": "terms",
+      "description": "The child Topic must pin one milestone, one amount rule, dependencies, evidence, acceptance authority, and payment timing.",
+      "all": [
+        {"contract": "topic-contract-state", "path": "/contracts/effective/body/status", "operator": "equals", "value": "accepted"},
+        {"contract": "payment-terms", "path": "/calculation/model", "operator": "equals", "value": "milestone"},
+        {"contract": "payment-terms", "path": "/status", "operator": "equals", "value": "accepted"}
+      ],
+      "onFailure": "block"
+    },
+    {
+      "id": "milestone-delivery-submitted",
+      "stage": "delivery",
+      "description": "The Delivery Packet must bind only this milestone's accepted contract, work snapshot, deliverables, and evidence.",
+      "all": [
+        {"contract": "delivery-packet", "path": "/status", "operator": "equals", "value": "submitted"},
+        {"contract": "delivery-packet", "path": "/contract/digest", "operator": "digest_matches", "value": "effective_child_contract"},
+        {"contract": "delivery-packet", "path": "/paymentTerms/digest", "operator": "digest_matches", "value": "accepted_milestone_terms"}
+      ],
+      "onFailure": "return_for_changes"
+    },
+    {
+      "id": "milestone-accepted",
+      "stage": "delivery",
+      "description": "The authorised acceptance decision must accept the current packet under the child's completion criteria.",
+      "all": [
+        {"contract": "delivery-decision", "path": "/decision", "operator": "equals", "value": "accepted"},
+        {"contract": "delivery-decision", "path": "/deliveryPacketDigest", "operator": "digest_matches", "value": "current_delivery_packet"}
+      ],
+      "onFailure": "return_for_changes"
+    },
+    {
+      "id": "milestone-evaluation-supported",
+      "stage": "evaluation",
+      "description": "Every required success criterion must be supported by the approved milestone rubric.",
+      "all": [
+        {"contract": "evaluation-assertion", "path": "/outcome", "operator": "all_equal", "value": "supported"},
+        {"contract": "evaluation-assertion", "path": "/rubric/governanceStatus", "operator": "all_equal", "value": "approved"}
+      ],
+      "onFailure": "human_review"
+    },
+    {
+      "id": "milestone-payment-approved",
+      "stage": "approval",
+      "description": "Approval must reference the exact child packet and supported evaluation set.",
+      "all": [
+        {"contract": "approval-decision", "path": "/decision", "operator": "equals", "value": "approved"},
+        {"contract": "approval-decision", "path": "/evaluationIds", "operator": "all_equal", "value": "settlement_evaluation_ids"}
+      ],
+      "onFailure": "block"
+    },
+    {
+      "id": "milestone-claim-approved",
+      "stage": "claim",
+      "description": "The claim must be approved for this milestone's exact amount, asset, and recipient.",
+      "all": [
+        {"contract": "claim-record", "path": "/status", "operator": "equals", "value": "approved"},
+        {"contract": "claim-record", "path": "/requested", "operator": "digest_matches", "value": "payable_obligation_requested"}
+      ],
+      "onFailure": "block"
+    },
+    {
+      "id": "milestone-settlement-clear",
+      "stage": "settlement",
+      "description": "Dependencies, disputes, funding, identity, and replay checks must pass for this child Topic only.",
+      "all": [
+        {"contract": "operator-verification", "path": "/dependencies", "operator": "equals", "value": "satisfied"},
+        {"contract": "operator-verification", "path": "/disputeHold", "operator": "equals", "value": false},
+        {"contract": "operator-verification", "path": "/funding", "operator": "equals", "value": "passed"},
+        {"contract": "operator-verification", "path": "/idempotencyKey", "operator": "exists"}
+      ],
+      "onFailure": "block"
+    }
+  ],
+  "settlement": {
+    "movesFunds": false,
+    "requiresExternalAdapter": true,
+    "failClosed": true,
+    "requiredAxes": ["delivery", "evaluation", "approval", "claim", "settlement"],
+    "exactMatchFields": ["topicId", "deliveryPacketId", "deliveryPacketDigest", "evaluationIds", "approvalId", "claimId", "amount", "asset", "recipient"],
+    "terminalState": "confirmed"
+  },
+  "privacy": {
+    "topicIsConfidentialityBoundary": false,
+    "topicCapabilityGrantsVfsAccess": false,
+    "sensitiveResourceStorage": "encrypted_room_or_ucan_vfs",
+    "minimumRoomVisibleFields": ["milestone label", "milestone phase", "target date"]
+  },
+  "acceptanceCriteria": [
+    {"id": "one-payable-unit", "statement": "Each child Topic contains exactly one payable milestone and one Payment Terms resource."},
+    {"id": "correction-not-milestone", "statement": "A corrected handoff supersedes the prior Delivery Packet and never creates a second payable milestone."},
+    {"id": "parent-child-separation", "statement": "Parent project, child milestone, claim, and settlement states remain independently visible."},
+    {"id": "dependency-gate", "statement": "Unmet accepted dependencies block payment without fabricating milestone failure."},
+    {"id": "exact-amount", "statement": "The claim and settlement must exactly match the accepted milestone amount, asset, and recipient."}
+  ]
+}

package/templates/decision-to-pay/outcome-payment-claim.template.json

@@ -0,0 +1,198 @@
+{
+  "$schema": "../../schemas/decision-to-pay-template.schema.json",
+  "version": 1,
+  "id": "urn:ixo:decision-to-pay:template:outcome-payment-claim",
+  "templateVersion": "0.1.0",
+  "label": "Outcome Payment Claim",
+  "description": "Adjudicate a payment claim against a pinned outcome contract, approved methodology, immutable intervention handoff, admissible evidence, and authorised evaluation and approval records.",
+  "maturity": "draft",
+  "compatibility": {
+    "protocolPackage": "@ixo/topic-protocol",
+    "protocolVersion": "0.7.0",
+    "sourceCommit": "40d1ce5160757553cd57f670b5b1708a5c0d0ea3",
+    "implementationStatus": "draft_contract_extension",
+    "requiredExtensions": [
+      "org.ixo.payment-terms/v1",
+      "org.ixo.payable-obligation/v1",
+      "ixo.payment capability policy/v1",
+      "outcome contract or deed resource",
+      "evaluation runtime and oracle adapter",
+      "claims authority adapter",
+      "payment-rail adapter"
+    ],
+    "constraints": [
+      "The template assumes an immutable Delivery Packet for the intervention or service that produced the claimed result.",
+      "Outcome claims without external work require a future generalized obligation handoff and cannot bypass the current settlement gate.",
+      "A supported evaluation is evidence for approval and is never itself payment authority."
+    ]
+  },
+  "topic": {
+    "primaryRole": "payment_claim",
+    "kindRef": {"source": "standard", "kind": "claims"},
+    "recipe": "claims",
+    "workingMode": "client",
+    "temporalMode": "finite",
+    "acceptance": {
+      "requiredTopicContractPaths": [
+        "/intent/text",
+        "/outcome/statement/text",
+        "/completion/definition",
+        "/completion/acceptanceAuthorityIds",
+        "/attachments/0"
+      ],
+      "allowHonestDraft": true
+    },
+    "lifecyclePolicy": {
+      "separateTopicContractOutcomeAxes": true,
+      "waitingRule": "The Claims Topic may wait on admissible evidence, evaluator availability, manual review, dispute resolution, claim authority, funding, or payment finality.",
+      "resolveRule": "Resolve only under the accepted claim-closure rule; a supported outcome, approved claim, and confirmed settlement remain separate facts."
+    }
+  },
+  "actors": [
+    {"role": "payer", "label": "Outcome payer or funder", "required": true, "identity": "did", "capabilities": ["ixo.payment/accept-terms"]},
+    {"role": "claimant", "label": "Outcome provider and claimant", "required": true, "identity": "did", "capabilities": ["ixo.payment/record-claim"]},
+    {"role": "evaluator", "label": "Independent evaluator or oracle", "required": true, "identity": "did", "capabilities": ["ixo.payment/evaluate"], "constraints": ["Must bind the exact approved rubric, evidence digests, trace digests, delivery packet, and capability."]},
+    {"role": "approval_authority", "label": "Outcome payment approval authority", "required": true, "identity": "did", "capabilities": ["ixo.payment/approve"]},
+    {"role": "claims_authority", "label": "External claims authority", "required": true, "identity": "did", "capabilities": ["ixo.payment/record-claim"]},
+    {"role": "settlement_controller", "label": "Settlement controller", "required": true, "identity": "did", "capabilities": ["ixo.payment/record-settlement"]},
+    {"role": "beneficiary_representative", "label": "Beneficiary or affected-party representative", "required": false, "identity": "did", "capabilities": ["topic/read"]}
+  ],
+  "resources": [
+    {"role": "outcome_contract", "type": "ixo.outcome-contract", "required": true, "binding": "vfs_attachment", "authority": "bound_resource", "availability": "external", "confidentiality": "vfs_ucan", "notes": "Must pin the result definition, population or asset scope, baseline, measurement window, methodology, pricing rule, dispute rights, and authority."},
+    {"role": "claim_collection", "type": "ixo.claim-collection", "required": true, "binding": "vfs_attachment", "authority": "external_system", "availability": "external", "confidentiality": "vfs_ucan"},
+    {"role": "payment_terms", "type": "org.ixo.payment-terms", "required": true, "binding": "typed_context", "authority": "bound_resource", "availability": "contract_pack", "schemaRef": "https://topic-protocol.ixo.world/schemas/payment-terms.schema.json", "confidentiality": "vfs_ucan"},
+    {"role": "payable_obligation", "type": "org.ixo.payable-obligation", "required": true, "binding": "typed_context", "authority": "bound_resource", "availability": "contract_pack", "schemaRef": "https://topic-protocol.ixo.world/schemas/payable-obligation.schema.json", "confidentiality": "room_encrypted"},
+    {"role": "intervention_delivery", "type": "ixo.delivery-packet", "required": true, "binding": "protocol_record", "authority": "protocol_record", "availability": "topic_protocol_0.7", "schemaRef": "https://topic-protocol.ixo.world/schemas/delivery-packet.schema.json", "confidentiality": "room_encrypted"},
+    {"role": "outcome_evidence", "type": "ixo.vfs", "required": true, "binding": "vfs_attachment", "authority": "bound_resource", "availability": "topic_protocol_0.7", "schemaRef": "https://topic-protocol.ixo.world/schemas/topic-file-attachment.schema.json", "confidentiality": "vfs_ucan"},
+    {"role": "approved_rubric", "type": "ixo.evaluation-rubric", "required": true, "binding": "external_reference", "authority": "bound_resource", "availability": "external", "confidentiality": "vfs_ucan"}
+  ],
+  "protocolContracts": [
+    {"name": "topic-contract-state", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/topic-contract-state.schema.json", "required": true},
+    {"name": "delivery-packet", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/delivery-packet.schema.json", "required": true},
+    {"name": "delivery-decision", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/delivery-decision.schema.json", "required": true},
+    {"name": "evaluation-assertion", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/evaluation-assertion.schema.json", "required": true},
+    {"name": "approval-decision", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/approval-decision.schema.json", "required": true},
+    {"name": "claim-record", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/claim-record.schema.json", "required": true},
+    {"name": "settlement-receipt", "source": "topic_protocol", "schemaRef": "https://topic-protocol.ixo.world/schemas/settlement-receipt.schema.json", "required": true},
+    {"name": "payment-terms", "source": "contract_pack", "schemaRef": "https://topic-protocol.ixo.world/schemas/payment-terms.schema.json", "required": true},
+    {"name": "payable-obligation", "source": "contract_pack", "schemaRef": "https://topic-protocol.ixo.world/schemas/payable-obligation.schema.json", "required": true}
+  ],
+  "operations": [
+    "propose-contract",
+    "update-contract",
+    "accept-contract",
+    "supersede-contract",
+    "submit-delivery",
+    "record-delivery-decision",
+    "record-evaluation",
+    "record-approval",
+    "record-claim",
+    "record-settlement",
+    "record-decision",
+    "change-status",
+    "resolve-conflict"
+  ],
+  "gates": [
+    {
+      "id": "outcome-terms-accepted",
+      "stage": "terms",
+      "description": "The claim must pin an accepted outcome contract, methodology, pricing rule, claim collection, payment terms, and authority model.",
+      "all": [
+        {"contract": "topic-contract-state", "path": "/contracts/effective/body/status", "operator": "equals", "value": "accepted"},
+        {"contract": "payment-terms", "path": "/status", "operator": "equals", "value": "accepted"},
+        {"contract": "payment-terms", "path": "/calculation/model", "operator": "equals", "value": "outcome"}
+      ],
+      "onFailure": "block"
+    },
+    {
+      "id": "intervention-handoff-accepted",
+      "stage": "delivery",
+      "description": "The claimed result must bind an accepted immutable intervention or service handoff.",
+      "all": [
+        {"contract": "delivery-packet", "path": "/status", "operator": "equals", "value": "submitted"},
+        {"contract": "delivery-decision", "path": "/decision", "operator": "equals", "value": "accepted"},
+        {"contract": "delivery-decision", "path": "/deliveryPacketDigest", "operator": "digest_matches", "value": "claim_delivery_packet"}
+      ],
+      "onFailure": "block"
+    },
+    {
+      "id": "outcome-evidence-admissible",
+      "stage": "evaluation",
+      "description": "Evidence provenance, methodology version, measurement window, population or asset scope, and evaluator authority must pass before determination.",
+      "all": [
+        {"contract": "evaluation-assertion", "path": "/rubric/governanceStatus", "operator": "all_equal", "value": "approved"},
+        {"contract": "evaluation-assertion", "path": "/evidenceDigests", "operator": "min_count", "value": 1},
+        {"contract": "operator-verification", "path": "/evidenceAdmissibility", "operator": "equals", "value": "passed"},
+        {"contract": "operator-verification", "path": "/evaluatorCapability", "operator": "equals", "value": "valid"}
+      ],
+      "onFailure": "human_review"
+    },
+    {
+      "id": "outcome-supported",
+      "stage": "evaluation",
+      "description": "Every settlement-referenced evaluation must support the exact claim; non-terminal or contested outcomes cannot pay.",
+      "all": [
+        {"contract": "evaluation-assertion", "path": "/outcome", "operator": "all_equal", "value": "supported"},
+        {"contract": "evaluation-assertion", "path": "/deliveryPacketDigest", "operator": "all_equal", "value": "claim_delivery_packet_digest"}
+      ],
+      "onFailure": "human_review"
+    },
+    {
+      "id": "outcome-payment-approved",
+      "stage": "approval",
+      "description": "Approval must apply the pinned policy to the exact packet and evaluation set.",
+      "all": [
+        {"contract": "approval-decision", "path": "/decision", "operator": "equals", "value": "approved"},
+        {"contract": "approval-decision", "path": "/evaluationIds", "operator": "all_equal", "value": "settlement_evaluation_ids"}
+      ],
+      "onFailure": "block"
+    },
+    {
+      "id": "outcome-claim-approved",
+      "stage": "claim",
+      "description": "The external claims authority must approve the current claim for the calculated amount, asset, and recipient.",
+      "all": [
+        {"contract": "claim-record", "path": "/status", "operator": "equals", "value": "approved"},
+        {"contract": "claim-record", "path": "/requested", "operator": "digest_matches", "value": "payable_obligation_requested"},
+        {"contract": "claim-record", "path": "/evaluationIds", "operator": "all_equal", "value": "approval_evaluation_ids"}
+      ],
+      "onFailure": "block"
+    },
+    {
+      "id": "outcome-settlement-clear",
+      "stage": "settlement",
+      "description": "Identity, eligibility, funding, dispute, trusted-time, revocation, and replay checks must pass before the receipt is admitted.",
+      "all": [
+        {"contract": "operator-verification", "path": "/identity", "operator": "equals", "value": "passed"},
+        {"contract": "operator-verification", "path": "/eligibility", "operator": "equals", "value": "passed"},
+        {"contract": "operator-verification", "path": "/funding", "operator": "equals", "value": "passed"},
+        {"contract": "operator-verification", "path": "/disputeHold", "operator": "equals", "value": false},
+        {"contract": "operator-verification", "path": "/revocation", "operator": "equals", "value": "clear"},
+        {"contract": "operator-verification", "path": "/idempotencyKey", "operator": "exists"}
+      ],
+      "onFailure": "block"
+    }
+  ],
+  "settlement": {
+    "movesFunds": false,
+    "requiresExternalAdapter": true,
+    "failClosed": true,
+    "requiredAxes": ["delivery", "evaluation", "approval", "claim", "settlement"],
+    "exactMatchFields": ["topicId", "deliveryPacketId", "deliveryPacketDigest", "evaluationIds", "approvalId", "claimId", "amount", "asset", "recipient"],
+    "terminalState": "confirmed"
+  },
+  "privacy": {
+    "topicIsConfidentialityBoundary": false,
+    "topicCapabilityGrantsVfsAccess": false,
+    "sensitiveResourceStorage": "encrypted_room_or_ucan_vfs",
+    "minimumRoomVisibleFields": ["claim reference", "claim status", "evaluation status", "settlement status"]
+  },
+  "acceptanceCriteria": [
+    {"id": "honest-draft", "statement": "A Claims Draft may begin without fabricating outcome, methodology, evidence, amount, claimant, or authority."},
+    {"id": "methodology-pinned", "statement": "The evaluation references an approved immutable rubric and exact evidence and trace digests."},
+    {"id": "non-terminal-blocked", "statement": "Refuted, insufficient-evidence, human-review, disputed, or superseded evaluations cannot support settlement."},
+    {"id": "approval-is-separate", "statement": "A supported evaluation cannot directly approve a claim or move funds."},
+    {"id": "claim-state-retained", "statement": "Claim updates retain packet, evaluation, approval, claimant, requested amount, asset, recipient, source, and replay key."},
+    {"id": "operator-gates", "statement": "Funding, identity, eligibility, revocation, disputes, trusted time, idempotency, and finality are verified by deployed adapters before settlement confirmation."}
+  ]
+}