@wowok/agent-mcp 3.3.2 → 3.3.3

package/dist/knowledge/builtin-templates.js

@@ -1 +1 @@
-import{SV2_REPLAY_GATE_CLAUSE}from'./protocol-facts.js';import{validateAllocatorRows}from'./template-validation.js';export const BUILTIN_TEMPLATES_VERSION=0x57;const REWARD_CLAIM_PURPOSE='Review\x20claim\x20condition:\x20progress\x20in\x20the\x20claim-allowed\x20NODE\x20SET\x20resolved\x20from\x20THIS\x20template\x27s\x20machine_shape\x20—\x20the\x20review\x20node\x20PLUS\x20the\x20settlement\x20terminal\x20(semantic_role\x20final)\x20PLUS\x20any\x20optional\x20post-settlement\x20feedback\x20side\x20nodes\x20THIS\x20shape\x20declares\x20(wonder/no_wonder\x20convention\x20—\x20UPWC-K3/CAT-D1:\x20praising\x20after\x20settlement\x20must\x20not\x20void\x20the\x20bounty).\x20NEVER\x20hardcode\x20a\x20node-name\x20set\x20copied\x20from\x20another\x20template\x20(0\x20builtin\x20templates\x20have\x20a\x20\x27closed\x27\x20node\x20—\x20a\x20stale\x20copied\x20set\x20like\x20{reviewed,\x20closed}\x20welds\x20the\x20rail\x20shut),\x20and\x20NEVER\x20a\x20single\x20transient\x20node\x20—\x20the\x20merchant\x27s\x20settlement\x20advance\x20past\x20the\x20review\x20node\x20makes\x20a\x20reviewed-only\x20leg\x20permanently\x20false\x20and\x20the\x20reward\x20unclaimable:\x20mainnet\x20261014\x20order\x20tests,\x200.5\x20WOW\x20evaporations;\x20the\x20settlement\x20terminal\x20must\x20stay\x20claim-admissible,\x20or\x20anchor\x20\x27was\x20ever\x20at\x27\x20via\x20progress.history.find\x20id\x201274\x20+\x20signer\x20==\x20order.owner\x20(identity\x20leg\x20MANDATORY\x20—\x20the\x20on-chain\x20reward\x20claim\x20entry\x20is\x20permissionless\x20until\x20the\x20chain-side\x20patch,\x20audit-261012\x20B5)\x20+\x20review\x20content\x20hash;\x20'+SV2_REPLAY_GATE_CLAUSE+'\x20QUOTE\x20DISCLOSURE\x20(crs-mn-261014\x20F-28):\x20state\x20the\x20claim\x20scope\x20in\x20buyer\x20language\x20in\x20the\x20quote/reward\x20terms\x20—\x20a\x20quote\x20promising\x20per-order\x20rewards\x20over\x20a\x20recipient-only\x20gate\x20breaks\x20at\x20claim\x20time.\x20Do\x20NOT\x20gate\x20on\x20repository.data\x20record\x20counts\x20(F-02).\x20For\x20strict\x20once-per-order\x20semantics\x20the\x20order-scoped\x20gate\x20above\x20IS\x20the\x20primary\x20form\x20(SV-2);\x20route\x20the\x20incentive\x20through\x20an\x20Allocation\x20leg\x20gated\x20on\x20protocol\x20slot\x20254\x20instead\x20only\x20when\x20you\x20want\x20the\x20per-order\x20once\x20enforced\x20by\x20the\x20chain\x20itself,\x20immune\x20to\x20guard-tree\x20mistakes.\x20reward_claim_policy\x20is\x20documentation\x20and\x20arms\x20nothing.\x20POSITIVE-AMOUNT\x20LEG\x20(BKN-P2,\x20v55):\x20the\x20resolved\x20claim\x20root\x20MUST\x20carry\x20logic_as_u256_greater_or_equal[query(order.amount),\x20>=1]\x20—\x20a\x20zero-total\x20order\x20(zeroing-coupon\x20buy)\x20holds\x20an\x20EMPTY\x20escrow\x20and\x20must\x20never\x20claim\x20(R-REWARD-ZERO-ORDER\x20audits\x20this).\x20CLAIM-WINDOW\x20TIME\x20LEG\x20(v75,\x20bkm4/yfdx\x20ruling\x20-\x20reward\x20timing):\x20the\x20claim\x20root\x20ALSO\x20carries\x20logic_as_u256_greater_or_equal[{\x22type\x22:\x22context\x22,\x22context\x22:\x22Clock\x22},\x20calc_number_add[query(1280\x20progress.history.time,\x20next_node=<review-node>,\x20find=last,\x20witness=OrderProgress),\x20identifier[N](reward_claim_window_days\x20x\x2086400000\x20ms)]]\x20-\x20the\x20incentive\x20pays\x20only\x20AFTER\x20the\x20post-review\x20claim\x20window\x20has\x20CLOSED\x20(anchor\x20=\x20the\x20review\x20node\x27s\x20ENTRY\x20timestamp\x20via\x20the\x20IMMUTABLE\x201280\x20history\x20query;\x201272\x20is\x20rewritten\x20at\x20every\x20node\x20migration\x20so\x20the\x20base\x20drifts,\x20ETS-C),\x20so\x20a\x20reviewer\x20cannot\x20cash\x20the\x20reward\x20while\x20a\x20dispute\x20on\x20the\x20order\x20it\x20reviews\x20can\x20still\x20overturn\x20that\x20settlement;\x20fee_params.reward_claim_window_days\x20sizes\x20the\x20window\x20(default\x2014).\x20When\x20the\x20template\x27s\x20rail\x20anchors\x20ONLY\x20on\x20a\x20settlement\x20terminal\x20(no\x20review\x20node\x20exists),\x20anchor\x20the\x20time\x20leg\x20on\x20that\x20terminal\x27s\x20entry\x20instead.\x20On\x20an\x20execution\x20layer\x20older\x20than\x20the\x201280\x20release,\x20fall\x20back\x20to\x20the\x20repository-oracle\x20time\x20source\x20(pattern.time_source_repository_oracle),\x20never\x20to\x201272.\x20RECIPIENT\x20(crs-mn-261015\x20F-12,\x20live\x20mainnet):\x20the\x20reward\x20guard_add\x20ENTRY\x20recipient\x20MUST\x20be\x20{Signer:\x27signer\x27}\x20—\x20the\x20claim\x20entry\x20requires\x20recipient\x20==\x20tx_context::sender\x20(E_CLAIM_RECIPIENT_NOT_SIGNER),\x20and\x20a\x20{GuardIdentifier}\x20recipient\x20resolves\x20from\x20the\x20passport\x20submission\x20(conventionally\x20the\x20submitted\x20Order\x20address)\x20which\x20can\x20never\x20be\x20the\x20signer:\x20the\x20pool\x20behind\x20it\x20is\x20structurally\x20unpayable\x20(a\x20live\x20funded\x20pool\x20aborted\x20E_CLAIM_RECIPIENT_NOT_SIGNER\x20on\x20every\x20claim).\x20The\x20Allocation\x20anchor\x20idiom\x20(a\x20GuardIdentifier\x20recipient\x20row\x20pinned\x20to\x20the\x20paying\x20Order,\x20money\x20landing\x20ON\x20it)\x20is\x20a\x20push\x20rail\x20—\x20NEVER\x20copy\x20it\x20onto\x20the\x20reward\x20pull\x20rail;\x20an\x20{Entity}\x20recipient\x20passes\x20(the\x20SDK\x20replaces\x20it\x20with\x20the\x20claimant\x27s\x20local\x20account\x20at\x20claim\x20time);\x20the\x20MCP\x20guard_add\x20recipient\x20gate\x20rejects\x20the\x20GuardIdentifier\x20form.\x20SETTLEMENT-DRAINED\x20LEG\x20—\x20DELIBERATE\x20OPTION\x20(crs-mn-261015\x20F-16):\x20a\x20bounty\x20meant\x20as\x20the\x20follow-on\x20to\x20a\x20COMPLETED\x20purchase\x20adds\x20logic_as_u256_lesser[query(\x27allocation.balance\x27,\x20object:{identifier:0,\x20convert_witness:\x27OrderAllocation\x27}),\x20query(\x27order.amount\x27,\x20object:{identifier:0})]\x20—\x20the\x20escrow\x20must\x20be\x20at\x20least\x20partially\x20drained\x20(query\x201051\x20+\x20witness\x20109)\x20before\x20the\x20bounty\x20pays\x20(no\x20release,\x20no\x20incentive\x20—\x20closes\x20the\x20stalling-merchant\x20hole\x20and\x20the\x20unknown-commit\x20race);\x20do\x20NOT\x20add\x20it\x20for\x20a\x20review-nudge\x20bounty\x20claimed\x20at\x20the\x20review\x20node\x20(the\x20adjudicated\x20review->claim->complete\x20ordering\x20deliberately\x20PRECEDES\x20settlement,\x20upwc-mn-261013\x20(3))\x20—\x20choose\x20per\x20business\x20intent\x20and\x20state\x20the\x20choice\x20in\x20the\x20quote\x27s\x20reward\x20terms.\x20RATING-FLOOR\x20LEG\x20(upw-mn-261016\x20F-01\x20—\x20a\x20minimum-rating\x20reward\x20is\x20ENFORCEABLE\x20by\x20THIS\x20guard,\x20never\x20by\x20a\x20repository\x20write\x20policy):\x20to\x20pay\x20only\x20above\x20a\x20rating\x20floor,\x20add\x20logic_as_u256_greater_or_equal[nodes]\x20with\x20one\x20query-1167\x20leg\x20(repository.data:\x20policy-name\x20string\x20row\x20+\x20order\x20Address\x20row\x20—\x20the\x20review\x20row\x20keyed\x20by\x20the\x20order)\x20against\x20the\x20floor\x20constant\x20row,\x20or\x20a\x20query-1177\x20keys-where\x20membership\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row)\x20—\x20the\x20candidate\x20id\x20IS\x20the\x20order\x20itself,\x20so\x20the\x20id\x20set\x20cannot\x20be\x20pumped\x20(structurally\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular.\x20State\x20the\x20floor\x20in\x20the\x20quote\x27s\x20reward\x20terms\x20either\x20way.\x20THE\x20ROW\x20KEY\x20IS\x20THE\x20ORDER,\x20ALWAYS\x20(upwk-mn-261017\x20F-62):\x20the\x20floor\x20leg\x20reads\x20the\x20ORDER-keyed\x20U64\x20rating\x20row\x20(id\x20=\x20the\x20order\x20address,\x20under\x20the\x20compile-emitted\x20\x27rating\x27\x20policy\x20written\x20by\x20the\x20buyer\x20at\x20review\x20time)\x20—\x20the\x20Signer-keyed\x20review\x20TEXT\x20row\x20is\x20display-only\x20and\x20NEVER\x20keys\x20the\x20leg:\x20without\x20the\x20order-keyed\x20numeric\x20row\x20emitted\x20at\x20review\x20time\x20the\x20leg\x20has\x20nothing\x20to\x20read\x20and\x20the\x20bounty\x20dead-locks\x20fail-closed,\x20so\x20emit\x20the\x20ROW\x20(compile\x20review\x20component)\x20and\x20the\x20LEG\x20(tpl_reward_one_time_claim)\x20as\x20a\x20PAIR\x20or\x20ship\x20neither;\x20if\x20the\x20rating\x20policy\x20is\x20quote-guard-protected\x20the\x20claim\x20passport\x20must\x20carry\x20it\x20(1167\x20fails\x20closed\x20otherwise).\x20tpl_reward_one_time_claim\x20v1.14.0\x20carries\x20the\x20canonical\x20leg',STAY_DATE_CORE='STAY-DATE\x20PRESCRIPTION\x20(D3-A1,\x20batch-19\x20ruling):\x20the\x20chain\x20has\x20no\x20use-date\x20primitive\x20'+'(order.time\x20is\x20the\x20BOOKING\x20moment\x20—\x20written\x20once\x20at\x20creation,\x20immutable)\x20and\x20the\x20use-date\x20'+'field\x20proposal\x20is\x20DEFERRED\x20(D-01,\x20architecture\x20backlog),\x20so\x20a\x20window\x20RELATIVE\x20TO\x20THE\x20'+'STAY/USE\x20(\x2748h\x20before\x20arrival\x27,\x20tiered\x20ladders,\x20no-show\x20floor,\x20voucher\x20validity)\x20rides\x20a\x20'+'repository\x20stay-date\x20row:\x20(1)\x20ROW\x20—\x20one\x20batched\x20row\x20in\x20the\x20buyer\x27s\x20order-scoped\x20Repository\x20'+'at\x20buy\x20time,\x20id_from\x20None(0),\x20item\x20name\x20\x27stay_date\x27,\x20data\x20=\x20stay/use\x20start\x20as\x20u64\x20epoch-ms\x20'+'(name-stable\x20key\x20so\x20guard\x20legs\x20find\x20it);\x20(2)\x20WRITE\x20—\x20buy-time\x20compile-emitted\x20buyer\x20step;\x20'+'for\x20tamper-critical\x20venues\x20gate\x20the\x20write\x20(write_guard)\x20or\x20pair\x20it\x20with\x20the\x20merchant\x27s\x20'+'accept\x20so\x20a\x20changed\x20date\x20is\x20a\x20renegotiation,\x20not\x20a\x20silent\x20rewrite;\x20(3)\x20LEG\x20—\x20the\x20guard\x20root\x20'+'ANDs\x20a\x20pattern.repository_data_check\x20leg\x20that\x20finds\x20the\x20\x27stay_date\x27\x20row\x20and\x20compares\x20Clock\x20'+'against\x20row\x20value\x20+\x20window\x20offset,\x20CLOSING\x20direction\x20(<=)\x20for\x20pre-use\x20windows.\x20A\x20booking-time\x20'+'anchor\x20stays\x20the\x20ZERO-addition\x20default\x20—\x20honest\x20ONLY\x20while\x20the\x20buyer-facing\x20copy\x20says\x20'+'\x27from\x20booking\x27,\x20never\x20\x27before\x20arrival\x27',ZERO_BALANCE_MASKING_NOTE='Zero-balance\x20masking\x20(KLM-FIND-13,\x20klk-mn-261019):\x20once\x20an\x20order\x27s\x20Allocation\x20is\x20fully\x20distributed,\x20ANY\x20further\x20rail\x20trigger\x20returns\x20the\x20zero-value\x20abort\x20and\x20the\x20guard\x20verdict\x20is\x20never\x20evaluated\x20—\x20a\x20settled\x20order\x20cannot\x20negative-test\x20other\x20rails;\x20probe\x20with\x20a\x20fresh\x20funded\x20order.';export const BUILTIN_TEMPLATES=[{'id':'retail/scale-marketplace','industry':'retail','variant':'scale-marketplace','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'after_sales_mode':'return','product_ref':'amazon','archetype':'leader','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'paid','role':'Entry:\x20order\x20created\x20and\x20fully\x20escrowed\x20via\x20the\x20on-chain\x20buy\x20flow;\x20Machine\x20starts\x20here','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'shipped','role':'Seller/fulfiller\x20ships\x20goods\x20with\x20tracking\x20evidence\x20(fulfiller\x20permission\x20slot)','semantic_role':'active','from':[{'prev':'paid','forward':'Ship','guard_key':'ship'}]},{'name':'delivered','role':'Carrier\x20or\x20buyer\x20confirms\x20delivery\x20—\x20buyer-first\x20confirmation;\x20buyer\x20silence\x20cannot\x20strand\x20the\x20escrow:\x20the\x20keeper\x20auto-confirms\x20auto_confirm_days\x20after\x20shipment\x20and\x20the\x20buyer\x20keeps\x20every\x20remedy\x20(return\x20window,\x20the\x20Arbitration\x20case\x20window)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'shipped','forward':'ConfirmDelivery','guard_key':'deliver_confirm'},{'prev':'shipped','forward':'AutoConfirmDelivery','operator':'merchant','permission_index':0x3ea,'guard_key':'deliver_confirm_timeout'}]},{'name':'reviewed','role':'Buyer\x20reviews\x20within\x20the\x2014-day\x20review\x20window','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Settlement\x20point:\x20the\x20settlement\x20time-lock\x20has\x20elapsed\x20(return\x20window\x20included)\x20—\x20the\x20settlement\x20Allocator\x20releases\x20funds.\x20Open\x20disputes\x20never\x20block\x20this\x20node:\x20disputes\x20live\x20on\x20the\x20separate\x20Arbitration\x20object,\x20and\x20a\x20\x27no\x20open\x20claims\x27\x20precondition\x20is\x20UNSATISFIABLE\x20by\x20design\x20(Order.dispute\x20is\x20append-only\x20—\x20a\x20one-way\x20door;\x20azq9-mn-261019\x20P0-6:\x20teaching\x20builders\x20to\x20wait\x20for\x20claims\x20to\x20clear\x20or\x20to\x20encode\x20a\x20claims-cleared\x20leg\x20welds\x20the\x20settlement\x20rail\x20shut\x20forever)','semantic_role':'final','from':[{'prev':'delivered','forward':'AutoCompleteAfter30d','operator':'merchant','permission_index':0x3ea,'guard_key':'settle_window'},{'prev':'reviewed','forward':'CompleteAfterReview','operator':'merchant','permission_index':0x3ea,'guard_key':'settle_window'}]},{'name':'return_requested','role':'Buyer\x20requests\x20return\x20within\x20the\x2030-day\x20return\x20window','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'shipped','forward':'RequestReturnBeforeDelivery','guard_key':'return_request_pre_delivery'},{'prev':'delivered','forward':'RequestReturn','guard_key':'return_window'}]},{'name':'returned','role':'Return\x20receipt\x20evidenced\x20—\x20triggers\x20refund\x20Allocator\x20to\x20buyer','semantic_role':'cancelled','from':[{'prev':'return_requested','forward':'ReturnReceived','permission_index':0x3e8,'guard_key':'return_received'}]},{'name':'item_lost','role':'Carrier\x20lost\x20the\x20parcel\x20—\x20RECORD\x20waypoint\x20only:\x20the\x20fulfiller\x20files\x20the\x20carrier\x27s\x20lost-package\x20record\x20hash\x20into\x20the\x20evidence\x20Repository.\x20Not\x20a\x20terminal\x20and\x20NOT\x20a\x20dispute\x20node\x20(R-M1-11\x20exemption:\x20\x27lost\x27\x20is\x20a\x20business\x20STATE\x20like\x20\x27returned\x27,\x20not\x20an\x20outcome\x20naming);\x20disputes\x20over\x20who\x20bears\x20the\x20loss\x20still\x20go\x20to\x20the\x20separate\x20Arbitration\x20object','semantic_role':'active','from':[{'prev':'shipped','forward':'RecordLost','permission_index':0x3e8,'guard_key':'lost_evidence'}]},{'name':'closed_cancel','role':'Pre-delivery\x20cancellation\x20—\x20triggers\x20refund\x20Allocator\x20to\x20buyer','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'CancelBeforePayment','guard_key':'cancel_from_paid'},{'prev':'shipped','forward':'CancelBeforeShipment','guard_key':'cancel_from_shipped'},{'prev':'return_requested','forward':'CancelOrder','guard_key':'cancel_from_return'},{'prev':'item_lost','forward':'RefundAfterLoss','guard_key':'lost_refund'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Buyer\x20region\x20eligibility\x20and\x20optional\x20buyer\x20Passport\x20gate\x20on\x20purchase'},{'template_id':'pattern.repository_data_check','host':'machine','key':'ship','purpose':'Shipping\x20evidence\x20(tracking\x20hash)\x20required\x20to\x20ship'},{'template_id':'pattern.repository_data_check','host':'machine','key':'return_received','purpose':'Return\x20receipt\x20evidence\x20(RMA\x20row\x20in\x20the\x20evidence\x20Repository)\x20required\x20to\x20advance\x20return_requested\x20->\x20returned'},{'template_id':'pattern.repository_data_check','host':'machine','key':'lost_evidence','purpose':'Carrier\x20lost-package\x20record\x20hash\x20(evidence\x20Repository\x20row,\x20same\x20writer\x20authorization\x20as\x20tracking\x20rows)\x20required\x20to\x20file\x20item_lost'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','purpose':'Evidence\x20Repository\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20(merchant\x20Signer,\x20Permission\x20staff\x20index,\x20or\x20the\x20Order\x20holder/agent):\x20the\x20chain\x20only\x20asserts\x20the\x20guard\x20list\x20is\x20non-empty\x20(repository.move,\x20E_POLICY_WRITE_GUARD_REQUIRED=22),\x20so\x20a\x20placeholder\x20that\x20returns\x20true\x20is\x20an\x20OPEN\x20write\x20—\x20a\x20counterparty\x20can\x20pre-write\x20the\x20tracking/return-receipt\x20row\x20and\x20satisfy\x20the\x20ship/deliver\x20evidence\x20gate\x20(testnet\x20HIGH-04,\x20tx\x20BLA7F62r)','policy':{'name':'evidence','id_from':'none','value_type':'String'}},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20shop\x20declares\x20customer_required\x20(personalised\x20goods,\x20import\x20VAT/ID):\x20order.required_info\x20some\x20before\x20fulfilment.\x20DESIGN-ONLY\x20here\x20—\x20the\x20marketplace\x20topology\x20has\x20no\x20forward\x20that\x20needs\x20buyer\x20credentials\x20before\x20shipping\x20(the\x20ship\x20rail\x20gates\x20tracking\x20evidence,\x20not\x20identity),\x20so\x20nothing\x20binds\x20this\x20key\x20and\x20no\x20Guard\x20is\x20created;\x20a\x20shop\x20whose\x20flow\x20needs\x20presence\x20enforcement\x20resolves\x20key\x20\x27ship\x27\x20with\x20the\x20tracking\x20check\x20AND-ed\x20with\x20the\x20presence\x20root\x20(tpl_required_info_present)\x20or\x20mounts\x20a\x20dedicated\x20gate\x20forward\x20via\x20guard_resolutions.\x20The\x20acceptance-rail\x20archetype\x20(retail/vertical-handmade)\x20ships\x20the\x20tpl\x20ENFORCED\x20on\x20its\x20accept\x20forward\x20—\x20that\x20is\x20the\x20industry-appropriate\x20default'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'deliver_confirm','purpose':'Delivery\x20confirmed\x20by\x20buyer-first;\x20carrier\x20only\x20auxiliary\x20evidence\x20—\x20seller\x20can\x20never\x20self-confirm'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_from_paid','purpose':'Buyer\x20cancels\x20the\x20fully-escrowed\x20order\x20before\x20shipment\x20(source\x20node\x20paid).\x20A\x20dedicated\x20key\x20per\x20source\x20node:\x20one\x20approved\x20order-holder\x20assertion\x20authorizes\x20exactly\x20one\x20business\x20decision\x20—\x20the\x20pre-M-T2\x20single\x20\x27deliver\x27\x20key\x20made\x20a\x20delivery-confirmation\x20assertion\x20stand\x20in\x20for\x20four\x20cancel/refund\x20semantics'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_from_shipped','purpose':'Buyer\x20cancels\x20after\x20shipment\x20but\x20before\x20delivery\x20confirmation\x20(source\x20node\x20shipped);\x20refunds\x20ride\x20the\x20same\x20single\x20refund\x20rail\x20via\x20closed_cancel'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_from_return','purpose':'Buyer\x20abandons\x20the\x20return\x20flow\x20and\x20takes\x20the\x20direct\x20refund\x20exit\x20(source\x20node\x20return_requested)\x20—\x20the\x20return-receipt\x20evidence\x20path\x20and\x20this\x20instant\x20path\x20are\x20alternatives,\x20never\x20both'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'lost_refund','purpose':'Buyer\x20order-holder\x20confirmation\x20advancing\x20the\x20lost-parcel\x20refund\x20into\x20closed_cancel\x20(source\x20node\x20item_lost,\x20after\x20the\x20fulfiller\x20filed\x20the\x20carrier\x20loss\x20evidence)\x20—\x20mirrors\x20the\x20disruption-refund\x20buyer\x20double-confirmation\x20convention'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Review\x20DEADLINE\x20window\x20(az3-mn-261013\x20F-03\x20direction\x20fix):\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20(14)\x20of\x20delivery\x20—\x20a\x20CLOSING\x20window\x20(<=\x20anchor+duration),\x20so\x20the\x20correct\x20anchor\x20pattern\x20is\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20made\x20\x27first\x2014\x20days\x20forbidden,\x20forever\x20open\x20after\x27\x20—\x20direction\x20inversion\x20is\x20a\x20business\x20accident,\x20pattern.deadline_window\x20notes).\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settle_window','purpose':'Settlement\x20OPENING\x20gate:\x20Clock\x20>=\x20delivered\x20entry\x20+\x20merge\x20duration\x20—\x20a\x20PURE\x20time\x20lock,\x20deliberately\x20NO\x20dispute/claim\x20precondition\x20(Order.dispute\x20is\x20append-only:\x20encoding\x20\x27no\x20open\x20claims\x27\x20as\x20a\x20settlement\x20leg\x20welds\x20the\x20rail\x20shut\x20forever\x20once\x20any\x20case\x20was\x20ever\x20filed\x20—\x20azq9-mn-261019\x20P0-6;\x20open\x20disputes\x20ride\x20the\x20separate\x20Arbitration\x20object\x20and\x20the\x20refund/recover\x20claimed_by\x20polarity\x20pair).\x20ETM-T1\x20ANCHOR\x20CONSTRAINT:\x20the\x20merged\x20settle\x20duration\x20(reserve\x20+\x20settlement\x20cycle\x20+\x20return\x20window)\x20must\x20be\x20>=\x20return_window_days\x20so\x20settlement\x20can\x20never\x20fire\x20before\x20the\x20return\x20window\x20closes\x20(source-platform\x20return\x20rights\x20survive\x20settlement);\x20generation\x20asserts\x20settle\x20>=\x20return\x20when\x20both\x20knobs\x20are\x20set'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'deliver_confirm_timeout','purpose':'Buyer-silence\x20auto-confirm:\x20Clock\x20>=\x20shipped\x20entry\x20+\x20auto_confirm_days\x20—\x20the\x20keeper\x20advances\x20delivery\x20when\x20the\x20buyer\x20never\x20confirms,\x20so\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow\x20at\x20shipped\x20(T-04);\x20anchored\x20on\x20the\x20shipped\x20node\x20entry\x20(carrier\x20transit\x20counts\x20from\x20shipment)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'return_request_pre_delivery','purpose':'Buyer\x20requests\x20a\x20return/refund\x20while\x20the\x20order\x20is\x20IN\x20TRANSIT\x20(source\x20node\x20shipped,\x20delivery\x20not\x20yet\x20confirmed)\x20—\x20F-TPL-01\x20(amzn2-ln-261016):\x20this\x20rail\x20previously\x20shared\x20return_window\x20with\x20the\x20delivered-side\x20edge,\x20but\x20return_window\x20anchors\x20the\x20DELIVERED\x20entry\x20time\x20(id\x201280,\x20next_node=\x27delivered\x27),\x20which\x20an\x20in-transit\x20order\x20has\x20never\x20written:\x20the\x20history\x20query\x20aborts\x20W_FIELD_NOT_FOUND\x20and\x20logic\x20nodes\x20evaluate\x20ALL\x20operands\x20before\x20merging\x20(no\x20short-circuit),\x20killing\x20the\x20entire\x20guard\x20—\x20the\x20pre-delivery\x20return\x20rail\x20was\x20chain-unreachable\x20forever.\x20Identity-only\x20BY\x20DESIGN\x20(no\x20time\x20window):\x20transit\x20is\x20naturally\x20bounded\x20by\x20the\x20auto-confirm\x20(deliver_confirm_timeout);\x20after\x20delivery\x20the\x2030-day\x20return_window\x20governs\x20the\x20delivered→RequestReturn\x20leg.\x20ONE\x20business\x20decision\x20per\x20key,\x20per\x20M-T2'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'return_window','purpose':'Return-request\x20DEADLINE\x20window\x20(az3-mn-261013\x20F-03\x20direction\x20fix):\x20return\x20allowed\x20only\x20WITHIN\x20return_window_days\x20(fee_param,\x20default\x2030)\x20of\x20delivery\x20—\x20a\x20CLOSING\x20window,\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20encoded\x20\x27no\x20returns\x20for\x2030\x20days,\x20unlimited\x20returns\x20after\x27\x20—\x20the\x20exact\x20inverse\x20of\x20the\x20source\x20platform\x27s\x20policy);\x20ETM-T1:\x20the\x20knob\x20is\x20return_window_days\x20and\x20settlement\x20(settle_window)\x20is\x20constrained\x20to\x20open\x20no\x20earlier\x20than\x20this\x20window\x27s\x20end.\x20F-TPL-01\x20SCOPE\x20RULE\x20(amzn2-ln-261016):\x20bind\x20this\x20key\x20ONLY\x20to\x20entry\x20edges\x20whose\x20prev\x20node\x20can\x20REACH\x20the\x20anchor\x20node\x20—\x20the\x20anchor\x20reads\x20the\x20delivered\x20history\x20row\x20(id\x201280\x20next_node=\x27delivered\x27,\x20fail-hard\x20W_FIELD_NOT_FOUND\x20when\x20absent,\x20no\x20logic\x20short-circuit),\x20so\x20an\x20edge\x20departing\x20shipped\x20(an\x20order\x20still\x20in\x20transit\x20has\x20no\x20delivered\x20row)\x20must\x20NEVER\x20ride\x20this\x20key;\x20give\x20pre-delivery\x20rails\x20their\x20own\x20identity-based\x20key\x20(return_request_pre_delivery)\x20—\x20a\x20shared\x20key\x20across\x20semantically\x20different\x20edges\x20was\x20the\x20root\x20cause'},{'template_id':'pattern.identity_check_service_provider_dynamic','host':'machine','key':'refund_execute','purpose':'Refund\x20execution\x20requires\x20the\x20refund-executor\x20permission\x20slot\x20or\x20an\x20arbiter'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20run75747\x20F-06:\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_execute\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.allocator_order_anchor','host':'service','key':'order_anchor','purpose':'Settlement\x20anchor\x20DESIGN\x20(no\x20standalone\x20binding\x20site):\x20the\x20builtin\x20carries\x20the\x20Rate-0\x20{GuardIdentifier:\x200}\x20anchor\x20leg\x20INLINE\x20inside\x20the\x20settlement\x20allocator\x20(guard_key\x20settle_window)\x20because\x20chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator\x20—\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register.\x20The\x20pattern\x20stays\x20for\x20builders\x20who\x20re-derive\x20the\x20shape;\x20the\x20effect\x20is\x20that\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20settlement\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20built\x20from\x20a\x20sibling\x20order\x27s\x20settled\x20state\x20can\x20no\x20longer\x20satisfy\x20the\x20settlement\x20Guard\x20(testnet\x20CR-01\x20drain);\x20the\x20anchor\x20leg\x20pays\x20nothing'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','refund_track':'order_anchored','count':0x3,'mode':'rate','once_per_order':!![],'description':'Full\x20escrow\x20+\x20single-point\x20settlement.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20A\x20single\x20Rate\x2010000\x20leg\x20to\x20the\x20seller\x27s\x20own\x20Entity\x20at\x20the\x20settlement\x20point;\x20any\x20fulfilment\x20cost\x20the\x20seller\x20recovers\x20is\x20its\x20own\x20pricing\x20and\x20must\x20be\x20declared\x20as\x20an\x20explicit\x20non-zero\x20leg\x20with\x20a\x20non-empty\x20recipient.\x20every\x20settlement/refund\x20allocator\x20carries\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order;\x20full\x20refund\x20to\x20buyer\x20(Rate\x2010000,\x20order-anchored)\x20on\x20returned/cancelled;\x20an\x20AWARDED\x20order\x27s\x20escrow\x20principal\x20exits\x20via\x20the\x20shipped\x20merchant-recovery\x20allocator\x20(recover_gate,\x20claimed_by\x20some\x20==\x20true\x20—\x20the\x20polarity\x20twin\x20of\x20the\x20refund\x20seal);\x20post-settlement\x20claims\x20paid\x20from\x20the\x20compensation\x20fund','rows':[{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'settle_window','note':'0%\x20commission.\x20Explicit\x20non-empty\x20Entity\x20is\x20mandatory:\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently\x20(ts-sdk/packages/wowok/src/w/local/index.ts\x20is\x20the\x20SDK-side\x20substitution).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_window','note':'Rate-0\x20ORDER\x20anchor\x20LEG\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20it\x20forces\x20the\x20settlement\x20Guard\x20to\x20declare\x20slot\x200\x20(the\x20submitted\x20Order,\x20b_submission\x20Address)\x20and\x20makes\x20a\x20sibling\x20order\x27s\x20passport\x20unable\x20to\x20drive\x20this\x20rail\x20(testnet\x20CR-01\x20drain);\x20pays\x20nothing.\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator\x20on\x20chain\x20(a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register),\x20so\x20the\x20anchor\x20shares\x20the\x20settlement\x20guard_key\x20—\x20N-T10/N-K21:\x20this\x20leg\x20is\x20the\x20templated\x20carrier\x20of\x20the\x20slot-0=order-address\x20semantics\x20the\x20publish\x20gate\x20enforces.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_execute','note':'Order-anchored\x20full\x20return.\x20The\x20paired\x20guard\x20must\x20assert\x20order.service\x20binding,\x20the\x20qualifying\x20node,\x20and\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20so\x20it\x20cannot\x20run\x20twice\x20or\x20after\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid;\x20signer\x20==\x20order.owner\x20is\x20OPTIONAL\x20(trigger-rights\x20only\x20—\x20the\x20GuardIdentifier\x20recipient\x20already\x20hard-binds\x20the\x20payee\x20to\x20the\x20order,\x20so\x20the\x20signer\x20leg\x20adds\x20no\x20fund\x20safety).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20Order.dispute\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever\x20and\x20strand\x20the\x20escrow\x20(one-way\x20door).'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20merchant\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits\x20(the\x20mainnet\x202.38-at-reviewed\x20stranding).\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_window/refund_execute),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000\x20on\x20chain;\x20exactly\x20one\x20of\x20refund_execute\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'key_risk':'Settlement\x20uncertainty\x20—\x20sellers\x20need\x20a\x20deterministic\x20release\x20point\x20after\x20reserve\x20+\x20cycle\x20+\x20return\x20window','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Full\x20escrow\x20+\x20single-point\x20settlement:\x20funds\x20stay\x20100%\x20in\x20the\x20pool\x20until\x20the\x20settlement\x20time-lock\x20fires','Reserve\x20(7d)\x20+\x20settlement\x20cycle\x20(14d)\x20+\x20return\x20window\x20(30d)\x20merge\x20into\x20ONE\x20settlement\x20time-lock\x20Guard','Disputes\x20go\x20to\x20an\x20independent\x20Arbitration\x20object\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11)','ITEM\x20LOST\x20WAYPOINT:\x20\x27item_lost\x27\x20is\x20a\x20RECORD\x20waypoint,\x20not\x20a\x20terminal\x20and\x20not\x20a\x20dispute\x20node\x20—\x20the\x20fulfiller\x20files\x20the\x20carrier\x27s\x20lost-package\x20evidence\x20(guard\x20\x27lost_evidence\x27,\x20same\x20Repository\x20writer\x20authorization\x20as\x20tracking\x20rows),\x20then\x20\x27RefundAfterLoss\x27\x20advances\x20into\x20closed_cancel\x20so\x20the\x20SAME\x20single\x20refund\x20rail\x20pays\x20the\x20buyer\x20(no\x20second\x20refund\x20allocator).\x20R-M1-11\x20EXEMPTION:\x20\x27lost\x27\x20is\x20a\x20business\x20STATE\x20like\x20\x27returned\x27,\x20not\x20a\x20dispute-OUTCOME\x20naming\x20—\x20never\x20express\x20it\x20as\x20a\x20dispute/arb-prefixed\x20node,\x20and\x20route\x20loss-liability\x20disputes\x20to\x20the\x20separate\x20Arbitration\x20object','STRANDED-AT-CREATION\x20REMEDY\x20(AZ3-T5,\x20az3-mn-261013\x20T10/T11,\x20mainnet-proven):\x20the\x20machine\x20keeps\x20ONE\x20entry\x20edge\x20by\x20design\x20—\x20a\x20second\x20prev:\x22\x22\x20edge\x20would\x20make\x20the\x20automatic\x20entry-forward\x20application\x20ambiguous,\x20so\x20it\x20is\x20never\x20added.\x20An\x20order\x20stranded\x20at\x20the\x20creation\x20sentinel\x20(current\x20\x22\x22,\x20e.g.\x20created\x20by\x20an\x20older\x20build\x20that\x20did\x20not\x20apply\x20the\x20entry\x20forward)\x20is\x20recovered\x20by\x20the\x20merchant:\x20advance\x20it\x20into\x20\x27paid\x27\x20with\x20the\x20entry\x20forward\x20(chain\x20name\x20\x22Enter\x22\x20—\x20azq9-mn-261019\x20TPL-C:\x20a\x20keeper\x20following\x20a\x20\x27ConfirmPaid\x27\x20instruction\x20finds\x20no\x20such\x20forward\x20and\x20stalls),\x20then\x20ride\x20the\x20EXISTING\x20pre-shipment\x20cancel\x20rail\x20(paid\x20->\x20closed_cancel,\x20key\x20cancel_from_paid)\x20—\x20the\x20full\x20refund\x20pays\x20through\x20the\x20normal\x20rail.\x20A\x20zero-escrow\x20strander\x20needs\x20no\x20recovery;\x20it\x20only\x20pollutes\x20pending\x20counts','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed;\x20run75747\x20F-06):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20The\x20pairing\x20is\x20now\x20STRUCTURAL,\x20not\x20prose:\x20the\x20allocator\x20rows\x20SHIP\x20the\x20merchant-recovery\x20allocator\x20(recover_gate\x20row\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity).\x20The\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20guard\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20the\x20Machine\x20publish;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','Service\x20Permission\x20and\x20Arbitration\x20Permission\x20must\x20be\x20two\x20separate\x20objects\x20(contract-enforced)','Allocator\x20threshold\x20=\x20minimum\x20payout\x20unit\x20(maps\x20to\x20the\x20$1\x20payout\x20threshold)','Repository\x20evidence\x20chain:\x20tracking\x20hash,\x20delivery\x20scan,\x20WTS\x20message\x20proof,\x20authenticity\x20proof,\x20return\x20receipt','EVIDENCE\x20WRITE\x20GATE\x20(testnet\x20HIGH-04):\x20the\x20evidence\x20Repository\x20runs\x20under\x20id_from=None\x20(the\x20caller\x20supplies\x20the\x20ORDER\x20address\x20as\x20the\x20data\x20key),\x20which\x20is\x20the\x20ONLY\x20routing\x20the\x20ship/return\x20evidence\x20design\x20can\x20use\x20—\x20and\x20the\x20chain\x20merely\x20asserts\x20a\x20NON-EMPTY\x20write_guard\x20list\x20(repository.move,\x20E_POLICY_WRITE_GUARD_REQUIRED=22);\x20it\x20never\x20checks\x20what\x20the\x20guard\x20proves.\x20A\x20tautology\x20guard\x20therefore\x20publishes\x20as\x20\x27guarded\x27\x20while\x20letting\x20ANY\x20address\x20write\x20or\x20overwrite\x20any\x20row\x20(buyer1\x20forged\x20order5\x27s\x20tracking\x20row,\x20tx\x20BLA7F62r;\x20the\x20merchant\x27s\x20real\x20write\x20upserted\x20over\x20it,\x20tx\x20DaZaPn6o\x20—\x20no\x20lock,\x20but\x20zero\x20provenance).\x20Generate\x20the\x20write_guard\x20from\x20pattern.repository_write_authorization\x20(identity\x20leaf\x20mandatory),\x20make\x20the\x20row\x20write-once\x20with\x20logic_not(repository.data\x20has)\x20(1166)\x20where\x20re-writing\x20would\x20falsify\x20history,\x20and\x20store\x20a\x20signed\x20WTS\x20Proof\x20ADDRESS\x20as\x20the\x20value\x20for\x20anything\x20an\x20arbitrator\x20must\x20trust\x20(proof.signer/proof.about/proof.time)\x20—\x20existence-only\x20gates\x20(1166)\x20are\x20satisfied\x20by\x20forged\x20rows','Category-differentiated\x20commission\x20/\x20per-order\x20return\x20policy:\x20every\x20order\x20gets\x20its\x20OWN\x20Allocation\x20(order_allocators\x20is\x20only\x20the\x20template),\x20so\x20add\x20ONE\x20allocator\x20entry\x20per\x20category\x20—\x20each\x20with\x20a\x20category\x20Guard\x20whose\x20relies\x20reference\x20a\x20Repository\x20holding\x20the\x20category\x20rules\x20(commission\x20rate\x20or\x20fixed\x20amount,\x20return\x20window);\x20the\x20Guard\x20validates\x20the\x20differentiated\x20supply\x20(amount\x20or\x20rate)\x20at\x20runtime.\x20No\x20contract\x20change\x20needed','OPERATIONAL:\x20allocator\x20guards\x20within\x20one\x20Allocation\x20must\x20be\x20mutually\x20distinct\x20and\x20one-shot\x20—\x20rate\x20mode\x20splits\x20the\x20balance\x20at\x20execution\x20time,\x20so\x20a\x20second\x20firing\x20of\x20the\x20same\x20guard\x20re-splits\x20the\x20remaining\x20balance\x20(no\x20on-chain\x20idempotence;\x20E-2)','OPERATIONAL\x20E-2:\x20trigger\x20protection\x20is\x20BALANCE-EXHAUSTION\x20ONLY\x20—\x20the\x20chain\x20records\x20no\x20\x27already\x20triggered\x27\x20flag\x20on\x20a\x20guard.\x20Pure-Rate\x20sums\x20==\x2010000\x20are\x20single-shot\x20by\x20construction;\x20but\x20a\x20partial\x20allocator\x20(Rate\x20sum\x20<\x2010000\x20with\x20NO\x20Surplus\x20recipient)\x20leaves\x20residual\x20balance\x20claimable\x20REPEATEDLY\x20by\x20anyone\x20who\x20passes\x20the\x20same\x20guard.\x20Always\x20either\x20sum\x20Rates\x20to\x2010000\x20or\x20pair\x20partial\x20Rates\x20with\x20a\x20Surplus\x20recipient;\x20run\x20the\x20guard-design\x20REPLAY\x20TEST\x20before\x20publish','ONCE-PER-ORDER\x20(E-2(b),\x20DEFAULT\x20ON\x20for\x20this\x20archetype):\x20this\x20allocator\x20sets\x20once_per_order=true.\x20Generation\x20must\x20(a)\x20add\x20a\x20submission\x20entry\x20to\x20each\x20allocator\x20Guard\x20—\x20identifier\x20254\x20(ONCE-FOR-OBJECT)\x20for\x20one-shot\x20rails\x20(refund,\x20single\x20settlement),\x20identifier\x20255\x20(byte-keyed)\x20for\x20rails\x20that\x20run\x20once\x20PER\x20PERIOD\x20with\x20a\x20\x27period-<N>\x27\x20key\x20—\x20and\x20(b)\x20submit\x20the\x20matching\x20identifier\x20in\x20the\x20trigger\x20Passport.\x20A\x20replay\x20then\x20aborts\x20with\x20code\x2016\x20instead\x20of\x20silently\x20re-splitting\x20residual\x20balance.\x20254\x20derives\x20its\x20slot\x20key\x20on-chain\x20from\x20payment_info.for_object\x20(the\x20submitted\x20bytes\x20are\x20ignored),\x20so\x20it\x20cannot\x20be\x20widened\x20by\x20a\x20varying\x20submission\x20—\x20prefer\x20it\x20whenever\x20the\x20rail\x20is\x20one-shot\x20per\x20bound\x20order','SCOPE\x20OF\x20THE\x20255\x20SLOT:\x20it\x20is\x20stored\x20per\x20Allocation\x20(one\x20pool)\x20—\x20(guard,\x20allocator,\x20submission)\x20is\x20recorded\x20on\x20THAT\x20Allocation,\x20so\x20a\x20second\x20Allocation\x20of\x20the\x20same\x20Service\x20starts\x20with\x20no\x20once\x20record.\x20255\x20alone\x20does\x20NOT\x20stop\x20a\x20cross-order\x20passport;\x20the\x20order\x20anchor\x20(pattern.allocator_order_anchor)\x20is\x20what\x20binds\x20a\x20Guard\x20to\x20its\x20own\x20order\x20(testnet\x20CR-01:\x20a\x20settled\x20order1\x20passport\x20drained\x20order2\x27s\x20pool\x20while\x20every\x20recipient\x20was\x20an\x20Entity)','PRICE\x20FLOOR\x20FOR\x20THE\x20FIXED\x20LEG:\x20the\x20Amount\x20fulfillment\x20fee\x20is\x20a\x20hard\x20subtraction\x20—\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20(allocation.move,\x20EINSUFFICIENT_BALANCE)\x20and\x20offers\x20no\x20floor,\x20so\x20ANY\x20order\x20escrowed\x20below\x20it\x20can\x20never\x20settle\x20nor\x20refund\x20(testnet\x20CR-02,\x20deadlocked\x20permanently\x20at\x20a\x20terminal\x20node).\x20Every\x20catalog\x20category\x20must\x20keep\x20min_sku_price\x20above\x20the\x20fixed\x20leg,\x20or\x20model\x20the\x20per-order\x20fee\x20as\x20Rate/RateGross','OPERATIONAL:\x20fee_params\x20values\x20(settlement/reserve/return/dispute\x20windows)\x20are\x20TS-layer\x20generation\x20parameters,\x20NOT\x20on-chain\x20guarantees\x20—\x20they\x20bind\x20only\x20when\x20embedded\x20into\x20Guard\x20data\x20and\x20enforced\x20by\x20keeper\x20scheduling','customer_required\x20IS\x20DECLARATIVE\x20(testnet\x20HIGH-05):\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(service.move:399-419),\x20so\x20an\x20order\x20missing\x20every\x20required\x20field\x20still\x20creates\x20successfully.\x20INDUSTRY\x20DEFAULT\x20(T-02\x27):\x20the\x20marketplace\x20topology\x20has\x20no\x20forward\x20that\x20needs\x20buyer\x20credentials\x20(the\x20ship\x20rail\x20gates\x20tracking\x20evidence),\x20so\x20this\x20archetype\x20keeps\x20required-info\x20as\x20a\x20DESIGN\x20(key\x20\x27required_info\x27,\x20no\x20Guard\x20created);\x20the\x20acceptance-rail\x20archetype\x20(retail/vertical-handmade)\x20ships\x20tpl_required_info_present\x20ENFORCED\x20on\x20its\x20accept\x20forward.\x20A\x20marketplace\x20shop\x20that\x20needs\x20presence\x20enforcement\x20resolves\x20key\x20\x27ship\x27\x20with\x20the\x20tracking\x20check\x20AND-ed\x20with\x20the\x20presence\x20root\x20(order.required_info\x20some,\x20query\x201572\x20—\x20the\x20Option<address>\x20the\x20buyer\x20sets\x20via\x20order_required_info_update\x20to\x20either\x20the\x20merchant\x27s\x20IM\x20user\x20address\x20or\x20an\x20on-chain\x20WTS\x20Proof\x20address;\x201573\x20aborts\x20while\x20the\x20Option\x20is\x20empty\x20and\x20the\x20value\x20is\x20unvalidated\x20input:\x20pin\x20it\x20to\x20a\x20merchant-issued\x20Proof\x20when\x20the\x20CONTENT\x20matters)','DISCOUNT\x20CREATION\x20STEP:\x20when\x20the\x20merchant\x20wants\x20promotions,\x20create\x20a\x20Discount\x20object\x20through\x20the\x20Service\x20data\x20operation\x20`discount`\x20(MCP:\x20onchain_operations\x20service\x20data;\x20SDK:\x20Service\x20data.discount\x20—\x20the\x20mint\x20delivers\x20to\x20the\x20discount\x27s\x20recipients\x20directly)\x20pointing\x20at\x20this\x20Service\x27s\x20address.\x20TIMING\x20(T9\x20az3-mn-261013,\x20mainnet-verified):\x20the\x20discount\x20registry\x20is\x20NOT\x20frozen\x20by\x20publish\x20—\x20coupons\x20can\x20be\x20minted\x20or\x20destroyed\x20at\x20any\x20time,\x20BEFORE\x20or\x20AFTER\x20publish\x20(the\x20T9\x20probe\x20coupon\x20was\x20minted\x20post-publish\x20and\x20delivered\x20to\x20its\x20recipients\x20successfully).\x20Pre-publish\x20minting\x20is\x20a\x20timing\x20preference\x20only\x20(the\x20promotion\x20is\x20visible\x20to\x20buyers\x20at\x20quote\x20time);\x20there\x20is\x20no\x20freeze\x20deadline\x20to\x20beat.\x20Idempotence\x20warning:\x20the\x20chain\x20does\x20NOT\x20dedupe\x20discounts\x20by\x20name\x20—\x20every\x20`discount`\x20op\x20mints\x20a\x20NEW\x20object\x20with\x20its\x20own\x20UID\x20(duplicate-name\x20same-value\x20coupons\x20are\x20independently\x20redeemable\x20real\x20leaks,\x20mainnet\x20M-K1),\x20so\x20reuse\x20an\x20existing\x20coupon\x20or\x20merge\x20the\x20budget\x20into\x20max_uses\x20instead\x20of\x20re-minting.\x20The\x20Discount\x20carries:\x20type\x20(percentage/fixed),\x20value,\x20max_uses,\x20and\x20optionally\x20a\x20Guard\x20for\x20eligibility\x20(e.g.\x20first-time\x20buyer,\x20whitelist).\x20Discounts\x20are\x20BURNED\x20on\x20use\x20—\x20each\x20redemption\x20decrements\x20the\x20remaining\x20budget\x20permanently;\x20a\x20used\x20discount\x20is\x20never\x20refunded\x20or\x20restocked.\x20Budget\x20formula:\x20max_uses\x20*\x20discount_value\x20=\x20total\x20exposure.','WIP\x20CUSTODY\x20NOTE:\x20this\x20template\x27s\x20machine_shape\x20has\x20NO\x20WIP\x20(work-in-progress)\x20mode\x20—\x20the\x20chain\x20does\x20not\x20support\x20WIP\x20nodes\x20in\x20Machine\x20v1.\x20Work-in-progress\x20tracking\x20(partial\x20fulfilment,\x20drafts,\x20revision\x20cycles)\x20must\x20live\x20OFF-CHAIN\x20in\x20the\x20Messenger\x20conversation\x20(WTS\x20evidence)\x20or\x20in\x20a\x20separate\x20Repository\x20the\x20merchant\x20manages.\x20The\x20Machine\x20only\x20sees:\x20paid\x20→\x20shipped\x20→\x20delivered\x20→\x20reviewed\x20→\x20completed.\x20Any\x20intermediate\x20WIP\x20state\x20is\x20a\x20Keeper\x20obligation,\x20not\x20a\x20Machine\x20node.','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'settlement_days':0xe,'reserve_days':0x7,'return_window_days':0x1e,'dispute_window_days':0x5a,'seller_contact_hours':0x30,'auto_confirm_days':0x7,'review_window_days':0xe,'min_sku_price':'must\x20exceed\x20the\x20per-order\x20fixed\x20fulfillment\x20fee\x20for\x20every\x20listed\x20category','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'settlement':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20the\x20merged\x20settlement/reserve/return\x20time-lock\x20measures\x20from\x20the\x20DELIVERY\x20ENTRY\x20timestamp\x20(next_node=\x27delivered\x27\x20reads\x20the\x20ENTER\x20moment;\x20node=\x27delivered\x27\x20would\x20read\x20the\x20LEAVE\x20moment\x20—\x20the\x20run-75747\x20F-17\x20double-wrong\x20form\x20—\x20and\x201274\x20returns\x20the\x20entry\x20INDEX,\x20not\x20a\x20time);\x201272\x20progress.current_time\x20is\x20REWRITTEN\x20at\x20every\x20node\x20migration,\x20so\x20a\x20\x27delivered\x20entry\x27\x20reading\x20on\x20it\x20drifts\x20to\x20the\x20last\x20forward\x20(ETS-C)\x20—\x20never\x20anchor\x20a\x20delivered-window\x20on\x20current_time;\x20ETM-T1:\x20merged\x20duration\x20>=\x20return_window_days\x20—\x20settlement\x20never\x20before\x20the\x20return\x20window\x20closes','return_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20delivery\x20ENTRY\x20timestamp\x20—\x20CLOSING\x20window\x20(upper\x20bound,\x20pattern.time_window_upper_bound;\x20az3\x20F-03\x20direction\x20fix);\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','deliver_confirm_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27shipped\x27,\x20find=last)\x20shipment\x20ENTRY\x20timestamp\x20—\x20carrier\x20transit\x20counts\x20from\x20shipment;\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','dispute_window':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard)','seller_contact':'seller_contact_hours\x20—\x20off-chain\x20service-level\x20response\x20obligation\x20(keeper-monitored;\x20no\x20on-chain\x20timestamp\x20anchor)'},'trust_mechanisms':['R1\x20refund\x20path:\x20refund\x20Guard\x20+\x20buyer\x20Rate\x2010000\x20Allocator\x20+\x20dispute\x20compensation\x20channel','R3\x20compensation\x20fund\x20>=\x203x\x20the\x20order\x20amount\x20(MAX_INDEMNITY_MULTIPLE\x20caps\x20any\x20award\x20at\x203x\x20escrow\x20at\x20arbitration\x20time,\x20arb.move);\x20fund\x20below\x20that\x20only\x20under-covers,\x20it\x20does\x20not\x20block\x20the\x20award','R2\x20independent\x20Arbitration\x20with\x20its\x20own\x20Permission\x20(admin\x20=\x20arbitration\x20team)','R4\x20buyer-first\x20delivery\x20confirmation\x20—\x20seller\x20self-sign\x20forbidden','R5\x20every\x20settlement/refund\x20allocator\x20carries\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01)','R6\x20settlement\x20allocator\x20=\x20Entity\x20Rate\x2010000\x20(0%\x20commission,\x20explicit\x20non-empty\x20Entity\x20—\x20NO\x20Surplus\x20leg)\x20+\x20an\x20inline\x20Rate-0\x20ORDER\x20anchor\x20leg\x20sharing\x20the\x20settle\x20guard_key\x20(per-allocator\x20Rate\x20sums\x20must\x20be\x20exactly\x2010000\x20on\x20chain);\x20refund\x20allocator\x20=\x20single\x20order-anchored\x20Rate\x2010000;\x20recovery\x20allocator\x20=\x20merchant\x20Entity\x20Rate\x2010000\x20gated\x20on\x20claimed_by\x20some\x20==\x20true\x20(polarity\x20twin\x20of\x20the\x20refund\x20seal)','R7\x20all\x20nodes/forwards/Guards\x20configured\x20before\x20publish\x20(publish\x20freezes)','R8\x20customer-service\x20Contact\x20bound\x20to\x20Service\x20and\x20Machine','R9\x20keeper\x20declared\x20for\x20settlement\x20trigger,\x20absence\x20timeout,\x20and\x20window\x20expiry','R10\x20business\x20parameters\x20(claim\x20cap,\x20return\x20window,\x20settlement\x20cycle)\x20embedded\x20as\x20Guard\x20parameters\x20—\x20industry-recommended\x20defaults,\x20merchant-configurable\x20at\x20build\x20time'],'keeper_dependencies':['settlement\x20trigger\x20at\x20the\x20single\x20release\x20point','delivery\x20auto-confirm\x20(auto_confirm_days\x20after\x20shipment\x20—\x20AutoConfirmDelivery\x20advances\x20a\x20silent\x20buyer\x27s\x20order)','48h\x20absence\x20auto-loss\x20in\x20arbitration','90-day\x20dispute\x20window\x20expiry','return\x20window\x20expiry'],'recommended_role':'merchant','role_rationale':'Marketplace\x20operator\x20owns\x20the\x20Service\x20and\x20hosts\x20third-party\x20sellers\x20as\x20Permission\x20entities;\x20individual\x20sellers\x20join\x20under\x20the\x20operator\x27s\x20permission\x20slots.','differences':['Scale-first\x20general\x20marketplace:\x20third-party\x20sellers\x20are\x20hosted\x20under\x20the\x20operator\x27s\x20Permission\x20entities,\x20unlike\x20the\x20vertical\x20variant\x20where\x20makers\x20self-fulfill\x20their\x20own\x20storefront\x20Services','Single-point\x20settlement\x20merges\x20reserve\x20+\x20settlement\x20cycle\x20+\x20return\x20window\x20into\x20ONE\x20settlement\x20time-lock\x20(14-day\x20cycle\x20vs\x20the\x20vertical\x20variant\x27s\x200-3\x20day\x20fast\x20settlement)','Post-settlement\x20claims\x20are\x20paid\x20from\x20a\x20compensation\x20fund\x20instead\x20of\x20per-order\x20holds'],'user_inputs':['commission_rate_bps\x20—\x20KEEP\x20AT\x200.\x20WoWok\x20takes\x20no\x20platform\x20commission;\x20a\x20merchant\x20may\x20price\x20its\x20own\x20service\x20into\x20an\x20explicit\x20non-empty\x20Entity\x20(merchant_service_fee_bps).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','settlement_days\x20/\x20reserve_days\x20/\x20return_window_days\x20—\x20the\x20three\x20windows\x20merged\x20into\x20the\x20settlement\x20time-lock','dispute_window_days\x20—\x20post-settlement\x20claim\x20window','fixed\x20fulfillment\x20fee\x20+\x20min_sku_price\x20—\x20the\x20fixed\x20leg\x20MUST\x20be\x20below\x20the\x20cheapest\x20listed\x20SKU\x20(a\x20sub-fee\x20order\x20cannot\x20settle\x20or\x20refund)','Compensation\x20fund\x20size\x20(>=\x203x\x20the\x20order\x20amount\x20—\x20the\x20on-chain\x20indemnity\x20hard\x20cap\x20in\x20arbitration.compensate)','Discount\x20(optional)\x20—\x20create\x20a\x20Discount\x20object\x20pointing\x20at\x20this\x20Service\x20to\x20run\x20promotions\x20(percentage\x20or\x20fixed-amount\x20off).\x20The\x20discount\x20is\x20burned\x20on\x20use:\x20once\x20a\x20buyer\x20redeems\x20it\x20against\x20an\x20order,\x20the\x20Discount\x20object\x27s\x20balance\x20decrements\x20permanently\x20and\x20CANNOT\x20be\x20reverted\x20—\x20no\x20restock,\x20no\x20refund\x20of\x20the\x20discount\x20itself.\x20Plan\x20the\x20total\x20discount\x20budget\x20(max_uses\x20*\x20discount_value)\x20before\x20publishing\x20the\x20Discount.']},{'id':'retail/vertical-handmade','industry':'retail','variant':'vertical-handmade','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'after_sales_mode':'return','product_ref':'etsy','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'paid','role':'Entry:\x20order\x20created\x20and\x20fully\x20escrowed;\x20Machine\x20starts\x20here','semantic_role':'draft','from':[{'prev':'','forward':'pay','operator':'order_payer'}]},{'name':'confirmed','role':'Seller\x20accepts\x20the\x20handmade/custom\x20order\x20before\x20crafting','semantic_role':'active','from':[{'prev':'paid','forward':'accept_order','permission_index':0x3e8,'guard_key':'required_info'}]},{'name':'shipped','role':'Seller\x20ships\x20within\x20processing\x20time\x20with\x20tracking\x20evidence','semantic_role':'active','from':[{'prev':'confirmed','forward':'ship','permission_index':0x3e8}]},{'name':'delivered','role':'Carrier\x20or\x20buyer\x20confirms\x20delivery\x20—\x20buyer-first\x20confirmation;\x20buyer\x20silence\x20cannot\x20strand\x20the\x20escrow:\x20the\x20keeper\x20auto-confirms\x20auto_confirm_days\x20after\x20shipment\x20and\x20the\x20buyer\x20keeps\x20every\x20remedy\x20(cancel/return\x20rails,\x20the\x20Arbitration\x20case\x20window)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'shipped','forward':'confirm_delivery','operator':'order_payer'},{'prev':'shipped','forward':'AutoConfirmDelivery','operator':'merchant','permission_index':0x3ea,'guard_key':'deliver_confirm_timeout'}]},{'name':'reviewed','role':'Buyer\x20reviews\x20within\x20the\x20case\x20window\x20—\x20optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20the\x20settlement\x20rail\x20(reviewed\x20→\x20completed\x20rides\x20the\x20same\x20settle\x20forward),\x20so\x20a\x20review\x20can\x20never\x20strand\x20the\x20escrow\x20(the\x20unexited\x20version\x20of\x20this\x20node\x20stranded\x20a\x20live\x20mainnet\x20escrow,\x20az-mn-261007\x20T5;\x20R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','optional':!![],'from':[{'prev':'delivered','forward':'submit_review','operator':'order_payer','guard_key':'review_window'}]},{'name':'completed','role':'Settlement:\x20fast\x20challenger\x20settlement\x20—\x20the\x20Allocator\x20releases\x20settlement_delay_days\x20after\x20delivery\x20confirmation\x20(the\x200-3\x20day\x20lever\x20vs\x20the\x2014-day\x20marketplace\x20cycle).\x20The\x20machine\x20return/refund\x20rail\x20is\x20reachable\x20only\x20PRE-settlement;\x20post-settlement\x20buyer\x20remedy\x20is\x20the\x2030-day\x20case\x20window\x20on\x20the\x20independent\x20Arbitration\x20+\x20compensation\x20fund\x20(purchase\x20protection),\x20never\x20a\x20second\x20machine\x20refund\x20path','semantic_role':'final','from':[{'prev':'delivered','forward':'settle','permission_index':0x3e8,'guard_key':'settle_clock'},{'prev':'reviewed','forward':'settle','permission_index':0x3e8,'guard_key':'settle_clock'}]},{'name':'return_requested','role':'Return\x20request\x20within\x20the\x20seller\x27s\x20policy\x20window\x20—\x20PRE-settlement\x20rail\x20only:\x20once\x20the\x20settlement\x20Allocator\x20has\x20drained\x20the\x20escrow\x20this\x20edge\x20is\x20topologically\x20dead,\x20and\x20post-settlement\x20remedies\x20ride\x20the\x20Arbitration\x20case\x20window','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'request_return','operator':'order_payer','guard_key':'return_window'}]},{'name':'returned','role':'Return\x20received\x20or\x20returnless\x20approval\x20—\x20triggers\x20refund\x20Allocator\x20to\x20buyer','semantic_role':'cancelled','from':[{'prev':'return_requested','forward':'return_received','permission_index':0x3e8}]},{'name':'closed_cancel','role':'Cancellation\x20exit\x20—\x20pre-ship\x20buyer\x20cancel,\x20in-processing-window\x20buyer\x20cancel,\x20or\x20keeper\x20ship-deadline\x20timeout\x20—\x20triggers\x20refund\x20Allocator\x20to\x20buyer','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'cancel','operator':'order_payer'},{'prev':'confirmed','forward':'cancel','operator':'order_payer','guard_key':'cancel_window'},{'prev':'confirmed','forward':'CancelUnshipped','operator':'merchant','permission_index':0x3ea,'guard_key':'ship_timeout'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Private-allowlist\x20storefronts\x20ONLY:\x20product\x20policy\x20gate\x20(handmade/vintage/craft/digital\x20categories)\x20+\x20seller\x20verification\x20proof\x20—\x20buyer\x20identity\x20must\x20be\x20in\x20the\x20shop\x27s\x20allowlist\x20before\x20purchase.\x20A\x20public\x20storefront\x20(the\x20benchmark\x20default)\x20ships\x20NO\x20buy\x20gate:\x20anyone\x20may\x20buy'},{'template_id':'pattern.time_window_upper_bound','host':'machine','purpose':'Ship-by\x20DEADLINE\x20—\x20shipping\x20allowed\x20only\x20WITHIN\x20processing_time_days\x20(a\x20CLOSING\x20window,\x20anchored\x20time_window_upper_bound;\x20the\x20enforcement\x20twin\x20is\x20the\x20ship_timeout\x20keeper\x20force-cancel)\x20AND\x20tracking\x20hash\x20non-empty\x20(logic_and\x20with\x20a\x20repository_data_check\x20on\x20the\x20tracking-hash\x20commitment)'},{'template_id':'tpl_required_info_present','host':'machine','key':'required_info','purpose':'Auto-filled\x20default\x20(the\x20tpl\x20of\x20pattern.required_info_evidence_gate):\x20gate\x20\x27confirmed\x27\x20(seller\x20acceptance)\x20on\x20order.required_info\x20some\x20so\x20the\x20buyer\x27s\x20recorded\x20credential\x20is\x20on-chain\x20BEFORE\x20crafting\x20starts\x20—\x20the\x20maker\x20eyeballs\x20the\x20recorded\x20spec/contact\x20in\x20the\x20Messenger\x20conversation,\x20and\x20that\x20accepting\x20forward\x20(never\x20the\x20recorded\x20address\x20value)\x20is\x20the\x20acceptance\x20basis;\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(testnet\x20HIGH-05),\x20so\x20this\x20Guard\x20is\x20the\x20only\x20enforcement.\x20MERCHANT\x20OVERRIDE:\x20resolve\x20key\x20\x27required_info\x27\x20via\x20guard_resolutions\x20(inline\x20table+root,\x20or\x20another\x20tpl_*)\x20when\x20the\x20shop\x27s\x20flow\x20needs\x20a\x20different\x20gate'},{'template_id':'pattern.identity_check_order_holder','host':'machine','purpose':'Delivery\x20confirmed\x20by\x20buyer-first;\x20seller/carrier\x20only\x20auxiliary\x20evidence'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'return_window','purpose':'Return-request\x20DEADLINE\x20window\x20—\x20returns\x20allowed\x20only\x20WITHIN\x20the\x20seller\x27s\x20return\x20policy\x20window\x20(a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20—\x20the\x20opening-gate\x20twin\x20encodes\x20\x27no\x20returns\x20now,\x20unlimited\x20returns\x20forever\x20after\x27,\x20the\x20exact\x20inverse;\x20az3\x20F-03,\x20catalog\x20sweep\x202026-10-19)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'cancel_window','purpose':'In-processing-window\x20buyer\x20cancellation:\x20Clock\x20<=\x20order.time\x20+\x20processing_time_days\x20—\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20cancel\x20forbidden\x20inside\x20the\x20window,\x20allowed\x20forever\x20after\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19).\x20The\x20SAME\x20deadline\x20the\x20ship\x20guard\x20enforces,\x20so\x20either\x20the\x20seller\x20ships\x20on\x20time\x20or\x20the\x20buyer\x20keeps\x20a\x20self-service\x20exit\x20(anchored\x20on\x20order.time,\x20not\x20on\x20the\x20confirm\x20forward)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'ship_timeout','purpose':'Ship-deadline\x20timeout:\x20Clock\x20>=\x20order.time\x20+\x20processing_time_days\x20while\x20the\x20machine\x20is\x20still\x20at\x20\x27confirmed\x27\x20(arrival\x20past\x20the\x20deadline\x20is\x20itself\x20the\x20unshipped\x20proof)\x20—\x20the\x20keeper\x20permission\x20slot\x20(1002)\x20force-cancels\x20with\x20a\x20full\x20buyer\x20refund'},{'template_id':'pattern.identity_check_service_provider_dynamic','host':'machine','key':'refund_execute','purpose':'Refund\x20execution\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_execute):\x20the\x20qualifying\x20NODE\x20SET\x20{returned,\x20closed_cancel}\x20covers\x20BOTH\x20refund\x20terminals\x20(FUND-EXIT-01\x20—\x20an\x20uncovered\x20terminal\x20strands\x20the\x20escrow\x20permanently,\x20IMMUT-001),\x20plus\x20order.service\x20binding,\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20one-directional),\x20and\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it);\x20signer\x20==\x20order.owner\x20is\x20optional\x20(the\x20recipient\x20is\x20already\x20hard-bound\x20to\x20the\x20paying\x20order).\x20Refund\x20execution\x20may\x20ALSO\x20require\x20the\x20refund-executor\x20permission\x20slot\x20(protection\x20program\x20executor)\x20when\x20the\x20shop\x20routes\x20payouts\x20through\x20its\x20program'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_execute\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settle_window','purpose':'Settlement\x20allocator\x20gate\x20(v68\x20pin-vs-prev\x20correction),\x20bound\x20to\x20the\x20settlement\x20allocator\x20rows\x20ONLY\x20(guard_key\x20settle_window):\x20progress.current\x20==\x20completed\x20PLUS\x20the\x20window\x20=\x20settlement_delay_days\x20after\x20delivery\x20confirmation\x20(0-3\x20day\x20challenger\x20lever\x20vs\x20the\x2014-day\x20scale-marketplace\x20cycle);\x20the\x20Rate-0\x20ORDER\x20anchor\x20leg\x20rides\x20the\x20same\x20key\x20so\x20the\x20anchor\x20and\x20the\x20merchant\x20leg\x20share\x20one\x20Allocator\x20(chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator\x20—\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register).\x20Allocator\x20guards\x20evaluate\x20at\x20alloc\x20time,\x20when\x20progress.current\x20is\x20the\x20REACHED\x20node,\x20so\x20the\x20completed\x20pin\x20is\x20correct\x20here.\x20NEVER\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20edge:\x20a\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance\x20(progress.current\x20==\x20prev),\x20so\x20the\x20pin\x20would\x20weld\x20the\x20edge\x20shut\x20(bkng\x20F22\x20dead\x20rail)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settle_clock','purpose':'Settle\x20FORWARD\x20time\x20gate\x20(v68,\x20split\x20off\x20settle_window\x20per\x20bkng\x20F22):\x20\x27Clock\x20>=\x20delivered\x20entry\x20+\x20settlement_delay_days\x27\x20—\x20TIME\x20LEG\x20ONLY,\x20anchored\x20on\x20the\x20PREV\x20node\x27s\x20entry\x20(progress.current\x20reads\x20as\x20prev\x20on\x20a\x20forward,\x20so\x20the\x20delivered-entry\x20anchor\x20is\x20correct\x20from\x20both\x20delivered\x20and\x20reviewed\x20prevs\x20—\x20reviewed\x20is\x20reachable\x20only\x20through\x20delivered,\x20so\x20its\x20entry\x20is\x20strictly\x20later\x20and\x20the\x20window\x20still\x20holds).\x20A\x20progress.current\x20pin\x20must\x20NEVER\x20appear\x20here\x20(it\x20would\x20target\x20the\x20destination\x20node\x20completed\x20and\x20weld\x20the\x20edge\x20shut);\x20the\x20completed\x20state\x20pin\x20stays\x20on\x20the\x20settlement\x20allocator\x20rows\x20(settle_window),\x20which\x20evaluate\x20at\x20alloc\x20time\x20on\x20the\x20reached\x20node'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'deliver_confirm_timeout','purpose':'Buyer-silence\x20auto-confirm:\x20Clock\x20>=\x20shipped\x20entry\x20+\x20auto_confirm_days\x20—\x20the\x20keeper\x20advances\x20delivery\x20when\x20the\x20buyer\x20never\x20confirms,\x20so\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow\x20at\x20shipped\x20(T-04);\x20anchored\x20on\x20the\x20shipped\x20node\x20entry\x20(carrier\x20transit\x20counts\x20from\x20shipment)'},{'template_id':'pattern.allocator_order_anchor','host':'service','purpose':'Settlement\x20+\x20refund\x20allocator\x20anchor:\x20one\x20Rate-0\x20{GuardIdentifier:\x200}\x20row\x20makes\x20the\x20submitted\x20ORDER\x20the\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20from\x20an\x20already-settled\x20sibling\x20order\x20cannot\x20re-release\x20this\x20order\x27s\x20escrow\x20(testnet\x20CR-01)\x20—\x20the\x20anchor\x20row\x20pays\x20nothing'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Buyer\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20of\x20delivery\x20confirmation,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20RATING-FLOOR\x20REALITY\x20(upw-mn-261016\x20F-01\x20unification\x20—\x20corrects\x20this\x20line\x27s\x20earlier\x20\x27enforceable\x20via\x20write\x20policy\x27\x20claim):\x20a\x20Repository\x20write\x20policy\x20canNOT\x20compare\x20VALUES\x20(the\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20observation\x20was\x20a\x20U8\x20type-tag\x20mismatch,\x20not\x20a\x20numeric\x20floor);\x20the\x20enforceable\x20path\x20is\x20a\x20GUARD\x20leg\x20—\x20logic_as_u256_greater_or_equal\x20over\x20query\x201167\x20repository.data,\x20or\x20the\x20query\x201177\x20keys-where\x20Range-gte\x20probe\x20whose\x20candidate\x20id\x20is\x20the\x20order\x20itself\x20(full\x20form\x20in\x20the\x20layered\x20ruling\x20on\x20the\x20freelance\x20review_window\x20lines).\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20escrow\x20always\x20keeps\x20the\x20unreviewed\x20path\x20delivered\x20->\x20completed.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'}],'allocator':{'recipient':'entity','refund_track':'order_anchored','count':0x3,'mode':'rate','description':'Attribution-first\x20ordering\x20is\x20a\x20SELLER-SIDE\x20priority,\x20never\x20a\x20pricing\x20penalty:\x20under\x20direct\x20sales\x20the\x20seller\x20keeps\x20the\x20whole\x20sale\x20on\x20every\x20order\x20regardless\x20of\x20how\x20it\x20was\x20attributed,\x20so\x20a\x20cheap\x20acquisition\x20channel\x20(KOC\x20/\x20social\x20/\x20repeat\x20buyer)\x20must\x20never\x20be\x20charged\x20extra.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20Default\x20=\x20Rate\x2010000\x20to\x20the\x20seller\x27s\x20Entity\x20on\x20every\x20order.\x20full\x20refund\x20to\x20buyer\x20(Rate\x2010000)\x20on\x20returned/cancelled;\x20every\x20settlement/refund\x20allocator\x20carries\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order;\x20small\x20claims\x20(<=\x20$250)\x20absorbed\x20by\x20the\x20compensation\x20fund','rows':[{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'settle_window','note':'0%\x20commission.\x20Attribution\x20is\x20a\x20SELLER-SIDE\x20priority,\x20never\x20a\x20pricing\x20penalty:\x20under\x20direct\x20sales\x20the\x20seller\x20keeps\x20the\x20whole\x20sale\x20however\x20it\x20was\x20attributed.\x20Explicit\x20non-empty\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20one\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20building,\x20while\x20on\x20chain\x20a\x20zero-address\x20recipient\x20burns\x20the\x20share\x20permanently).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_window','note':'Rate-0\x20ORDER\x20anchor\x20LEG\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator\x20(a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register),\x20so\x20the\x20anchor\x20shares\x20the\x20settlement\x20guard_key\x20settle_window\x20(10000\x20+\x200\x20=\x2010000)\x20—\x20it\x20forces\x20the\x20settlement\x20Guard\x27s\x20slot\x200\x20to\x20be\x20the\x20submitted\x20Order\x20address\x20(N-K21)\x20and\x20makes\x20a\x20sibling\x20order\x27s\x20passport\x20unable\x20to\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_execute','note':'Order-anchored\x20full\x20return,\x20gated\x20by\x20the\x20refund_execute\x20guard\x20(node\x20set\x20{returned,\x20closed_cancel}).\x20The\x20paired\x20guard\x20must\x20assert\x20order.service\x20binding,\x20the\x20qualifying\x20node,\x20and\x20claimed_by\x20some\x20==\x20false\x20(signer\x20==\x20order.owner\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20—\x20the\x20GuardIdentifier\x20recipient\x20already\x20hard-binds\x20the\x20payee\x20to\x20the\x20order;\x20CAT-B2:\x20do\x20not\x20list\x20it\x20as\x20an\x20encoded\x20leg,\x20the\x20resolution\x20template\x20cannot\x20produce\x20it)\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool).\x20That\x20exclusion\x20is\x20ONE-DIRECTIONAL\x20(v42):\x20it\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid\x20—\x20never\x20the\x20reverse\x20(a\x20refunded\x20buyer\x20can\x20still\x20file\x20and\x20win\x20a\x20case;\x20nothing\x20on\x20chain\x20seals\x20that\x20—\x20only\x20the\x20arbitrator\x27s\x20net\x20ruling\x20does,\x20and\x20the\x20compensation\x20fund\x20stays\x20an\x20independent\x20third\x20channel).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20Order.dispute\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever\x20and\x20strand\x20the\x20escrow\x20(one-way\x20door).'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20merchant\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_window/refund_execute),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_execute\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'key_risk':'Attribution\x20stays\x20off-chain\x20evidence\x20and\x20never\x20gates\x20a\x20money\x20split\x20—\x20under\x20direct\x20sales\x20the\x20seller\x20keeps\x20the\x20whole\x20sale\x20on\x20every\x20order\x20regardless\x20of\x20channel;\x20buyer-first\x20delivery\x20confirmation\x20and\x20order-anchored\x20refunds\x20carry\x20the\x20fund\x20safety','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Extra\x20\x27confirmed\x27\x20node\x20vs\x20the\x20scale-marketplace\x20template\x20—\x20handmade/custom\x20orders\x20need\x20seller\x20acceptance\x20before\x20crafting','No\x20independent\x20fulfiller\x20role\x20—\x20sellers\x20self-fulfill','Buyer-side\x20forwards\x20(delivered\x20/\x20reviewed\x20/\x20return_requested\x20/\x20cancelled)\x20MUST\x20bind\x20an\x20EMPTY\x20namedOperator\x20(\x27\x27),\x20NOT\x20a\x20merchant\x20permission\x20index\x20—\x20the\x20on-chain\x20check\x20resolves\x20an\x20empty\x20name\x20on\x20an\x20order-bound\x20forward\x20to\x20the\x20order\x20owner\x20or\x20its\x20registered\x20order\x20agents,\x20so\x20the\x20buyer\x20side\x20can\x20advance\x20their\x20own\x20order;\x20a\x20merchant-only\x20permission\x20slot\x20aborts\x20E_PERMISSION_DENIED\x20for\x20the\x20buyer','Allocator\x20paths\x20are\x20selected\x20by\x20the\x20SUBMITTED\x20guard,\x20not\x20by\x20list\x20position\x20(the\x20allocation.move\x20dispatch\x20fires\x20every\x20allocator\x20bound\x20to\x20the\x20submitted\x20guard,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20—\x20E_ALLOCATOR_NOT_MATCHED\x20when\x20none\x20matches)\x20—\x20different\x20business\x20paths\x20must\x20bind\x20different\x20guards,\x20and\x20mutual\x20exclusion\x20belongs\x20inside\x20the\x20guard\x20conditions','Fast\x20settlement\x20(0-3\x20days)\x20is\x20the\x20challenger\x20lever\x20against\x20the\x20scale\x20marketplace\x27s\x2014-day\x20cycle','Settlement\x20is\x20NOT\x20automatic\x20on\x20reaching\x20\x27completed\x27\x20—\x20an\x20explicit\x20alloc_by_guard\x20call\x20(keeper\x20or\x20merchant)\x20triggers\x20the\x20settlement\x20Allocator;\x20declare\x20the\x20node->allocator\x20trigger\x20so\x20the\x20migration\x20plan\x20includes\x20the\x20settlement\x20step','Every\x20settlement/refund\x20Allocator\x20carries\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor):\x20recipients\x20are\x20otherwise\x20resolved\x20without\x20the\x20passport\x20ever\x20naming\x20the\x20paying\x20Order,\x20and\x20the\x20identifier-255\x20once-slot\x20is\x20per-Allocation,\x20so\x20a\x20settled\x20sibling\x20order\x27s\x20passport\x20can\x20re-split\x20this\x20pool\x20(testnet\x20CR-01)','Star-seller\x20tiering\x20goes\x20through\x20Passport,\x20not\x20the\x20Permission\x20entity\x20table\x20(entity\x20capacity\x20is\x20limited)','Disputes\x20go\x20to\x20an\x20independent\x20Arbitration\x20(case\x20mediators)\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11)','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed;\x20run75747\x20F-06):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20The\x20pairing\x20is\x20STRUCTURAL,\x20not\x20prose:\x20the\x20allocator\x20rows\x20SHIP\x20the\x20merchant-recovery\x20allocator\x20(recover_gate\x20row\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity).\x20The\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20guard\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20the\x20Machine\x20publish;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20The\x20template\x20SHIPS\x20the\x20enforcement:\x20key\x20\x27required_info\x27\x20auto-fills\x20tpl_required_info_present\x20(order.required_info\x20some\x20on\x20\x27confirmed\x27,\x20BEFORE\x20crafting\x20starts)\x20—\x20only\x20the\x20PRESENCE\x20is\x20asserted,\x20the\x20recorded\x20address\x20value\x20is\x20never\x20a\x20guard\x20condition,\x20and\x20acceptance\x20of\x20the\x20delivered\x20info\x20is\x20the\x20seller\x27s\x20confirming\x20forward.\x20A\x20shop\x20needing\x20a\x20different\x20gate\x20resolves\x20\x27required_info\x27\x20via\x20guard_resolutions\x20(inline\x20or\x20another\x20tpl_*)','Post-confirmation\x20cancellation\x20refunds\x20the\x20buyer\x20in\x20FULL\x20on-chain\x20(in-window\x20cancel\x20and\x20ship-timeout\x20alike)\x20—\x20a\x20handmade\x20maker\x20who\x20has\x20started\x20crafting\x20absorbs\x20real\x20material\x20cost.\x20Compensation\x20for\x20work-in-progress\x20is\x20a\x20DISCLOSURE,\x20not\x20an\x20on-chain\x20rail:\x20publish\x20it\x20in\x20the\x20shop\x20policy,\x20negotiate\x20specifics\x20in\x20Messenger,\x20and\x20route\x20contested\x20post-start\x20costs\x20through\x20the\x20independent\x20Arbitration\x20(partial-refund\x20settlement)\x20—\x20never\x20by\x20splitting\x20the\x20refund\x20allocator\x20(one\x20escrow,\x20one\x20refund\x20rail;\x20a\x20second\x20partial-refund\x20path\x20invites\x20double-pay)','The\x20ship-timeout\x20forward\x20rides\x20permission_index\x201002\x20—\x20the\x20keeper/automation\x20slot\x20(same\x20idiom\x20as\x20p2p-shortstay\x20and\x20booking);\x20R9\x20keeper\x20gains\x20a\x20fourth\x20duty:\x20advance\x20confirmed\x20->\x20closed_cancel\x20(CancelUnshipped)\x20when\x20processing_time_days\x20lapses\x20unshipped','The\x20buy\x20gate\x20is\x20CONDITIONAL\x20on\x20storefront_mode\x20(v42,\x20one\x20kernel\x20emission\x20mechanism\x20—\x20conditional_guards\x20->\x20compile,\x20never\x20per-template\x20prose):\x20public\x20storefronts\x20(the\x20benchmark\x20default)\x20ship\x20NO\x20purchase\x20gate,\x20the\x20marketplace\x20is\x20open\x20to\x20every\x20buyer;\x20private-allowlist\x20storefronts\x20(wholesale,\x20invite-only,\x20verified\x20drops)\x20mount\x20the\x20allowlist\x20buy\x20guard\x20keyed\x20\x27buy\x27\x20with\x20the\x20buyer\x20allowlist\x20as\x20a\x20Guard\x20table\x20constant','TIME-ANCHOR\x20DISCIPLINE\x20(261010\x20template\x20audit\x20T-09):\x20the\x20time_anchors\x20block\x20is\x20the\x20DESIGN\x20contract\x20a\x20guard\x20resolution\x20must\x20implement.\x20pattern.time_lock_progress\x27s\x20reference\x20recipe\x20anchors\x20node-entry\x20(Clock\x20vs\x20progress.history.time\x201280,\x20next_node=<node>,\x20find=last),\x20so\x20an\x20inline\x20resolution\x20honoring\x20the\x20declared\x20\x27order.time\x27\x20anchor\x20needs\x20the\x20order-creation\x20query\x20—\x20a\x20node-entry\x20shortcut\x20silently\x20shifts\x20the\x20window\x20base\x20(audit\x20rule\x20TIME-ANCHOR-01)\x20and\x20must\x20be\x20disclosed\x20in\x20the\x20build\x20report,\x20not\x20shipped\x20silently','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'base_commission_rate_bps':0x0,'offsite_ads_rate_bps':0x0,'attributed_commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'settlement_delay_days':0x1,'protection_cap_usd':0xfa,'processing_time_days':0x3,'auto_confirm_days':0x7,'storefront_mode':'public_storefront','review_reward_pool':0x64,'review_window_days':0xe,'reward_claim_window_days':0xe},'conditional_guards':[{'guard_key':'buy','param':'storefront_mode','values':['public_storefront','private-allowlist'],'emit_value':'private-allowlist','question':'Who\x20may\x20buy\x20from\x20this\x20shop\x20—\x20open\x20to\x20everyone\x20(public\x20marketplace),\x20or\x20restricted\x20to\x20an\x20allowlist\x20of\x20verified\x20buyers\x20(private/wholesale)?'}],'time_anchors':{'processing_time':'order.time\x20(paid\x20is\x20the\x20entry\x20node;\x20the\x20ship-within\x20window,\x20the\x20in-window\x20buyer\x20cancel\x20and\x20the\x20keeper\x20ship-timeout\x20all\x20open\x20at\x20purchase\x20and\x20share\x20the\x20SAME\x20processing_time_days\x20deadline)','settlement_delay':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20delivery\x20ENTRY\x20timestamp\x20—\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','deliver_confirm_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27shipped\x27,\x20find=last)\x20shipment\x20ENTRY\x20timestamp\x20—\x20carrier\x20transit\x20counts\x20from\x20shipment;\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(ETS-C)'},'trust_mechanisms':['R1\x20refund\x20path:\x20refund\x20Guard\x20+\x20buyer\x20Rate\x2010000\x20Allocator\x20+\x20purchase-protection\x20payout\x20channel','R2\x20independent\x20Arbitration\x20Permission\x20(a\x20testnet\x20shared-Permission\x20lesson\x20hardened\x20into\x20a\x20contract\x20assertion).\x20Venue\x20SLA\x20expectation\x20(a\x20SELECTION\x20criterion\x20—\x20the\x20case\x20window\x20is\x20the\x20arbitrator\x27s\x20order,\x20not\x20a\x20guard\x20this\x20build\x20mounts):\x20prefer\x20venues\x20opening\x20cases\x20within\x2030\x20days\x20of\x20expected\x20delivery\x20and\x20only\x20after\x2048h\x20of\x20unresolved\x20help\x20contact;\x20purchase-protection\x20claims\x20are\x20absorbed\x20by\x20the\x20compensation\x20fund\x20up\x20to\x20protection_cap_usd','R3\x20compensation\x20fund\x20sized\x20so\x20every\x20order\x20you\x20SELL\x20is\x20covered:\x20per-order\x20coverage\x20is\x20enforced\x20at\x20BUY\x20time\x20(each\x20order\x20needs\x20the\x20fund\x20>=\x203x\x20ITS\x20OWN\x20amount,\x20MAX_INDEMNITY_MULTIPLE)\x20—\x20size\x20for\x20the\x20typical\x20single\x20order,\x20no\x203x-highest-SKU\x20parking','R4\x20buyer-first\x20delivery\x20confirmation\x20—\x20self-sign/self-verify\x20forbidden','R5\x20escrow\x20payment\x20anchored\x20to\x20the\x20order\x20object','R6\x20settlement\x20allocators\x20carry\x20Surplus\x20so\x20Rates\x20<=\x2010000;\x20refund\x20Allocator\x20Rate\x20=\x2010000','R7\x20all\x20configuration\x20before\x20publish\x20(publish\x20freezes;\x20return\x20policy\x20cannot\x20vary\x20per\x20listing\x20after\x20publish)','R8\x20customer-service\x20Contact\x20bound\x20to\x20Service\x20and\x20Machine','R9\x20keeper\x20for\x2048h\x20help-request\x20escalation,\x20settlement\x20trigger\x20and\x20ship-deadline\x20timeout','R10\x20category\x20policy\x20embedded\x20in\x20the\x20buy\x20guard\x20as\x20immutable\x20parameters\x20—\x20the\x20gate\x20mounts\x20only\x20for\x20private-allowlist\x20storefronts\x20(v42);\x20a\x20public\x20storefront\x20ships\x20no\x20purchase\x20restriction'],'keeper_dependencies':['48h\x20help\x20request\x20escalation','settlement\x20trigger\x20after\x20delivery\x20confirmation\x20(0-3\x20day\x20delay)','case\x20window\x20expiry','ship-deadline\x20timeout\x20(processing\x20window\x20lapsed,\x20machine\x20still\x20at\x20confirmed\x20—\x20CancelUnshipped\x20force-cancel)','delivery\x20auto-confirm\x20(auto_confirm_days\x20after\x20shipment\x20—\x20AutoConfirmDelivery\x20advances\x20a\x20silent\x20buyer\x27s\x20order)'],'recommended_role':'merchant','role_rationale':'Artisans\x20and\x20vintage\x20sellers\x20run\x20their\x20own\x20storefront\x20Service\x20directly;\x20the\x20vertical-platform\x20variant\x20hosts\x20makers\x20under\x20Permission\x20entities.','differences':['Makers\x20self-fulfill\x20—\x20no\x20independent\x20fulfiller\x20role;\x20a\x20\x27confirmed\x27\x20node\x20lets\x20the\x20seller\x20accept\x20handmade/custom\x20orders\x20before\x20crafting','Marketplace-faithful\x20buyer\x20exit\x20(v42):\x20cancellation\x20stays\x20open\x20through\x20the\x20whole\x20processing\x20window\x20—\x20buyer\x20self-cancel\x20until\x20the\x20ship\x20deadline,\x20keeper\x20force-cancel\x20after\x20it\x20—\x20where\x20the\x20pre-v42\x20topology\x20left\x20a\x20confirmed\x20order\x20without\x20any\x20self-service\x20exit\x20until\x20shipped','Fast\x20settlement\x20(0-3\x20days\x20after\x20delivery\x20confirmation)\x20is\x20the\x20challenger\x20lever\x20against\x20the\x20scale\x20marketplace\x27s\x2014-day\x20cycle','Off-site\x20attribution\x20is\x20recorded\x20off-chain\x20as\x20plain\x20evidence\x20(no\x20Machine\x20guard,\x20no\x20fee\x20differential)\x20—\x20direct\x20sales\x20means\x20the\x20seller\x20keeps\x20the\x20whole\x20sale\x20however\x20the\x20order\x20was\x20attributed'],'user_inputs':['storefront_mode\x20—\x20\x27public_storefront\x27\x20(benchmark\x20default:\x20anyone\x20may\x20buy,\x20NO\x20purchase\x20gate\x20mounts)\x20or\x20\x27private-allowlist\x27\x20(wholesale\x20/\x20invite-only\x20shops:\x20the\x20allowlist\x20buy\x20guard\x20keyed\x20\x27buy\x27\x20mounts\x20with\x20the\x20buyer\x20allowlist\x20as\x20a\x20Guard\x20table\x20constant\x20+\x20seller\x20verification\x20conditions).\x20Answered\x20in\x20the\x20migration\x20wizard;\x20passed\x20as\x20fee_overrides.storefront_mode\x20at\x20generation','base_commission_rate_bps\x20/\x20offsite_ads_rate_bps\x20/\x20attributed_commission_rate_bps\x20—\x20ALL\x20KEEP\x20AT\x200.\x20Attribution\x20must\x20not\x20raise\x20the\x20seller\x27s\x20take\x20(audit\x20R-ECON-05\x20warns\x20on\x20attributed\x20>\x20base).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','processing_time_days\x20—\x20ONE\x20knob\x20with\x20three\x20readers:\x20the\x20seller\x27s\x20ship-within\x20deadline,\x20the\x20buyer\x27s\x20in-window\x20cancellation\x20deadline,\x20and\x20the\x20keeper\x20ship-timeout\x20trigger\x20(all\x20anchored\x20on\x20order.time)','protection_cap_usd\x20—\x20purchase-protection\x20cap\x20absorbed\x20by\x20the\x20compensation\x20fund','Seller\x20return-policy\x20window\x20(return_auth_guard_timelock\x20parameter)']},{'id':'retail/preorder-deposit','industry':'retail','variant':'preorder-deposit','installment_mode':'deposit_balance','review_mode':'review','product_ref':'gamefound','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'deposit_paid','role':'Entry:\x20preorder\x20placed\x20and\x20the\x20DEPOSIT\x20escrowed\x20atomically\x20at\x20buy\x20(Order.amount\x20=\x20deposit_amount;\x20Allocation.balance\x20=\x20deposit_amount).\x20buy()\x20escrows\x20in\x20ONE\x20PTB\x20—\x20there\x20is\x20NO\x20unpaid-reservation\x20state\x20on\x20chain,\x20so\x20the\x20plan\x27s\x20reserved→deposit_paid\x20two-node\x20entry\x20collapses\x20to\x20THIS\x20single\x20deposit-held\x20node\x20(a\x20free\x20waitlist\x20slot\x20before\x20the\x20deposit\x20is\x20an\x20off-chain\x20Keeper\x20concern,\x20not\x20a\x20Machine\x20node).\x20The\x20preorder\x20slot\x20is\x20held;\x20the\x20buyer\x20can\x20still\x20walk\x20away\x20(deposit-exit).','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'balance_due','role':'Merchant\x20opens\x20the\x20balance-capture\x20window\x20(production/release\x20imminent):\x20the\x20buyer\x20now\x20owes\x20the\x20BALANCE\x20(full_price\x20−\x20deposit_amount).\x20DEPOSIT-HELD\x20state\x20—\x20INV-B2\x20mandates\x20a\x20deposit-exit\x20rail\x20from\x20here\x20(the\x20buyer\x20is\x20NEVER\x20obliged\x20to\x20pay\x20the\x20balance,\x20H1).','semantic_role':'active','from':[{'prev':'deposit_paid','forward':'OpenBalanceWindow','operator':'merchant','permission_index':0x3e8,'guard_key':'balance_window_open'}]},{'name':'balance_paid','role':'Buyer\x20captured\x20the\x20BALANCE\x20via\x20order_renew\x20—\x20ONE\x20PTB\x20funds\x20the\x20SAME\x20order\x27s\x20Allocation\x20(allocation.balance\x20now\x20>=\x20full_price)\x20and\x20advances\x20this\x20forward\x20ATOMICALLY,\x20gated\x20by\x20the\x20balance_capture\x20fund\x20gate\x20(allocation.balance\x20query\x201051).\x20A\x20BARE\x20data.progress\x20advance\x20without\x20the\x20capture\x20landing\x20ABORTS\x20at\x20the\x20gate\x20(INV-B1,\x20never\x20a\x20zero-value\x20advance\x20H4).','semantic_role':'active','from':[{'prev':'balance_due','forward':'PayBalance','operator':'order_payer','guard_key':'balance_capture'}]},{'name':'shipped','role':'Merchant\x20ships\x20the\x20goods\x20with\x20tracking\x20evidence\x20(fulfiller\x20permission\x20slot)\x20—\x20reachable\x20ONLY\x20through\x20balance_paid,\x20so\x20the\x20release\x20can\x20never\x20fire\x20on\x20an\x20unfunded\x20order.','semantic_role':'active','from':[{'prev':'balance_paid','forward':'Ship','operator':'merchant','permission_index':0x3e8,'guard_key':'ship'}]},{'name':'delivered','role':'Carrier\x20or\x20buyer\x20confirms\x20delivery\x20—\x20buyer-first;\x20buyer\x20silence\x20cannot\x20strand\x20the\x20escrow\x20(the\x20keeper\x20auto-confirms\x20auto_confirm_days\x20after\x20shipment\x20and\x20the\x20buyer\x20keeps\x20every\x20remedy).','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'shipped','forward':'ConfirmDelivery','guard_key':'deliver_confirm'},{'prev':'shipped','forward':'AutoConfirmDelivery','operator':'merchant','permission_index':0x3ea,'guard_key':'deliver_confirm_timeout'}]},{'name':'reviewed','role':'Buyer\x20reviews\x20within\x20the\x20review\x20window\x20—\x20OPTIONAL\x20reputation\x20side-stop,\x20NEVER\x20a\x20settlement\x20gateway\x20(a\x20silent\x20reviewer\x20keeps\x20the\x20delivered→completed\x20path,\x20R-DEAD-END).','operator':'order_payer','semantic_role':'delivered','optional':!![],'from':[{'prev':'delivered','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Settlement\x20terminal:\x20goods\x20delivered\x20and\x20the\x20settlement\x20time-lock\x20elapsed\x20—\x20the\x20settlement\x20Allocator\x20releases\x20the\x20FULL\x20pool\x20(deposit\x20+\x20balance)\x20to\x20the\x20merchant.\x20Reachable\x20only\x20through\x20balance_paid,\x20so\x20an\x20unfunded\x20order\x20never\x20settles.','semantic_role':'final','from':[{'prev':'delivered','forward':'Settle','operator':'merchant','permission_index':0x3ea,'guard_key':'settle_window'},{'prev':'reviewed','forward':'SettleAfterReview','operator':'merchant','permission_index':0x3ea,'guard_key':'settle_window'}]},{'name':'reservation_cancelled','role':'DEPOSIT-EXIT\x20terminal\x20(pre-balance\x20walk-away):\x20the\x20buyer\x20cancelled\x20at\x20deposit_paid,\x20or\x20declined/timed-out\x20at\x20balance_due\x20WITHOUT\x20paying\x20the\x20balance.\x20Money\x20per\x20the\x20deposit_exit_policy\x20SELECTOR\x20—\x20\x27refund\x27\x20returns\x20the\x20deposit\x20to\x20the\x20buyer;\x20\x27kill_fee\x27\x20forfeits\x20kill_fee_bps\x20of\x20it\x20to\x20the\x20merchant\x20as\x20reserved-slot/production\x20compensation.\x20INV-B2:\x20this\x20rail\x20is\x20WHY\x20the\x20deposit\x20can\x20never\x20strand\x20(H1).\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20without\x20the\x20guard\x20chain\x20(R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'deposit_paid','forward':'CancelReservation','guard_key':'deposit_exit'},{'prev':'balance_due','forward':'DeclineBalance','guard_key':'deposit_exit'},{'prev':'balance_due','forward':'BalanceWindowTimeout','operator':'merchant','permission_index':0x3ea,'guard_key':'balance_deadline'}]},{'name':'closed_cancel','role':'POST-BALANCE\x20full-refund\x20cancel:\x20the\x20buyer\x20paid\x20the\x20BALANCE\x20in\x20full,\x20then\x20cancelled\x20BEFORE\x20shipment\x20—\x20the\x20WHOLE\x20pool\x20(deposit\x20+\x20balance)\x20refunds\x20to\x20the\x20buyer,\x20NEVER\x20a\x20kill-fee\x20(a\x20paid-in-full\x20buyer\x20is\x20made\x20whole).\x20A\x20DISTINCT\x20terminal\x20from\x20reservation_cancelled\x20so\x20the\x20deposit-forfeit\x20selector\x20can\x20never\x20eat\x20a\x20paid-in-full\x20order.','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'balance_paid','forward':'CancelBeforeShipment','guard_key':'cancel_before_ship'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Preorder\x20eligibility\x20gate\x20on\x20the\x20DEPOSIT\x20purchase\x20—\x20a\x20limited-drop\x20allowlist\x20/\x20buyer\x20region\x20/\x20optional\x20buyer\x20Passport.\x20The\x20buy\x20total_pay\x20IS\x20deposit_amount\x20(the\x20deposit),\x20NOT\x20full_price;\x20the\x20balance\x20is\x20captured\x20later\x20via\x20order_renew.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'balance_window_open','purpose':'Merchant\x20opens\x20the\x20balance-capture\x20window:\x20Clock\x20>=\x20deposit_paid\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27deposit_paid\x27,\x20find=last)\x20+\x20production_lead_days\x20—\x20the\x20buyer\x20is\x20not\x20asked\x20for\x20the\x20balance\x20until\x20production/release\x20is\x20actually\x20imminent.\x20OPENING\x20gate\x20(time_lock_progress),\x20anchored\x20on\x20the\x20immutable\x20deposit_paid\x20entry\x20record\x20(1272\x20current_time\x20drifts\x20every\x20migration,\x20ETS-C).'},{'template_id':'tpl_forward_fund_gate','host':'machine','key':'balance_capture','purpose':'INV-B1\x20FUND\x20GATE\x20(the\x20teeth\x20of\x20the\x20two-phase\x20capture):\x20allocation.balance\x20(query\x201051,\x20witness\x20TypeOrderAllocation\x20109,\x20resolved\x20from\x20the\x20submitted\x20Order)\x20>=\x20full_price\x20BEFORE\x20balance_due→balance_paid\x20advances.\x20Resolve\x20min_balance\x20=\x20full_price\x20(smallest\x20units).\x20The\x20runtime\x20routes\x20this\x20forward\x20through\x20order_renew\x20—\x20ONE\x20PTB:\x20create\x20the\x20payment\x20receipt\x20→\x20fund\x20the\x20same\x20order\x27s\x20Allocation\x20→\x20issue\x20the\x20payment\x20→\x20forward\x20—\x20so\x20the\x20capture\x20FUNDS\x20the\x20same\x20order\x27s\x20Allocation\x20and\x20advances\x20ATOMICALLY;\x20a\x20bare\x20data.progress\x20advance\x20without\x20the\x20balance\x20landing\x20ABORTS\x20here\x20(never\x20a\x20zero-value\x20advance,\x20H4).\x20The\x20gate\x20is\x20a\x20STATE\x20READ,\x20not\x20a\x20once\x20(H5):\x20pair\x20it\x20with\x20the\x20once_per_order\x20release\x20allocator\x20+\x20the\x20Rate-0\x20order\x20anchor\x20so\x20a\x20permissionless\x20top-up\x20/\x20overpay\x20(H2\x20—\x20Allocation.receive\x20is\x20permissionless)\x20cannot\x20trigger\x20a\x20DOUBLE\x20release.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'deposit_exit','purpose':'Buyer\x20order-holder\x20decision\x20to\x20WALK\x20AWAY\x20pre-balance\x20—\x20binds\x20BOTH\x20deposit_paid→reservation_cancelled\x20(CancelReservation)\x20and\x20balance_due→reservation_cancelled\x20(DeclineBalance).\x20Identity-only\x20(signer\x20==\x20order.owner),\x20node-agnostic:\x20one\x20approved\x20assertion\x20authorizes\x20the\x20single\x20\x27abandon\x20the\x20preorder,\x20take\x20the\x20deposit-exit\x27\x20decision\x20(M-T2).\x20The\x20money\x20outcome\x20(refund\x20vs\x20kill-fee)\x20is\x20the\x20deposit_exit_policy\x20SELECTOR\x20on\x20the\x20reservation_cancelled-terminal\x20allocator,\x20NOT\x20this\x20forward\x20guard.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'balance_deadline','purpose':'Balance-window\x20TIMEOUT\x20(keeper):\x20Clock\x20>=\x20balance_due\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27balance_due\x27,\x20find=last)\x20+\x20balance_window_days\x20—\x20the\x20buyer\x20never\x20paid\x20the\x20balance,\x20so\x20the\x20keeper\x20advances\x20balance_due→reservation_cancelled\x20and\x20the\x20deposit-exit\x20fires.\x20The\x20INV-B2\x20mandatory\x20rail:\x20without\x20it\x20a\x20buyer\x20who\x20goes\x20silent\x20freezes\x20the\x20deposit\x20forever\x20(H1).'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_before_ship','purpose':'Buyer\x20order-holder\x20cancel\x20AFTER\x20paying\x20the\x20balance\x20in\x20full\x20but\x20BEFORE\x20shipment\x20(balance_paid→closed_cancel)\x20—\x20the\x20whole\x20pool\x20refunds,\x20NEVER\x20a\x20kill-fee.\x20Distinct\x20key\x20from\x20deposit_exit\x20(M-T2):\x20a\x20paid-in-full\x20cancel\x20is\x20a\x20different\x20business\x20decision\x20with\x20a\x20different\x20money\x20outcome\x20(closed_cancel,\x20not\x20reservation_cancelled).'},{'template_id':'pattern.repository_data_check','host':'machine','key':'ship','purpose':'Shipping\x20evidence\x20(tracking\x20hash\x20in\x20the\x20evidence\x20Repository)\x20required\x20to\x20ship\x20(balance_paid→shipped).'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','purpose':'Evidence\x20Repository\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20(merchant\x20Signer,\x20Permission\x20staff\x20index,\x20or\x20the\x20Order\x20holder/agent):\x20the\x20chain\x20only\x20asserts\x20the\x20guard\x20list\x20is\x20non-empty\x20(repository.move,\x20E_POLICY_WRITE_GUARD_REQUIRED=22),\x20so\x20a\x20placeholder\x20that\x20returns\x20true\x20is\x20an\x20OPEN\x20write\x20—\x20a\x20counterparty\x20could\x20pre-write\x20the\x20tracking\x20row\x20and\x20satisfy\x20the\x20ship\x20evidence\x20gate.\x20Rows\x20are\x20ORDER-keyed\x20(id_from\x20none,\x20azq9-mn-261019\x20TPL-B\x20family\x20fix):\x20a\x20Signer-keyed\x20policy\x20collides\x20every\x20order\x27s\x20evidence\x20rows\x20into\x20one\x20writer-keyed\x20row\x20and\x20the\x20ship\x20rail\x20can\x20never\x20pass.','policy':{'name':'evidence','id_from':'none','value_type':'String'}},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20shop\x20declares\x20customer_required\x20(personalised/import\x20goods):\x20order.required_info\x20some\x20before\x20fulfilment.\x20DESIGN-ONLY\x20here\x20—\x20the\x20preorder\x20topology\x20has\x20no\x20forward\x20that\x20needs\x20buyer\x20credentials\x20before\x20shipping\x20(the\x20ship\x20rail\x20gates\x20tracking\x20evidence,\x20not\x20identity),\x20so\x20nothing\x20binds\x20this\x20key\x20and\x20no\x20Guard\x20is\x20created;\x20a\x20shop\x20whose\x20flow\x20needs\x20presence\x20enforcement\x20resolves\x20key\x20\x27ship\x27\x20with\x20the\x20tracking\x20check\x20AND-ed\x20with\x20the\x20presence\x20root\x20(tpl_required_info_present)\x20or\x20mounts\x20a\x20dedicated\x20gate\x20forward\x20via\x20guard_resolutions.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'deliver_confirm','purpose':'Delivery\x20confirmed\x20buyer-first;\x20the\x20seller\x20can\x20never\x20self-confirm.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'deliver_confirm_timeout','purpose':'Buyer-silence\x20auto-confirm:\x20Clock\x20>=\x20shipped\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27shipped\x27,\x20find=last)\x20+\x20auto_confirm_days\x20—\x20the\x20keeper\x20advances\x20delivery\x20so\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow\x20at\x20shipped.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Review\x20DEADLINE\x20window:\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20of\x20delivery\x20—\x20a\x20CLOSING\x20window\x20(<=\x20delivered\x20ENTRY\x20+\x20duration),\x20anchored\x20time_window_upper_bound\x20(progress.history.time\x20id\x201280,\x20next_node=\x27delivered\x27,\x20find=last),\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy,\x20az3\x20F-03).\x20OPTIONAL\x20side\x20action\x20—\x20NEVER\x20a\x20settlement\x20gate.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settle_window','purpose':'Settlement\x20OPENING\x20gate\x20(forward\x20+\x20allocator):\x20Clock\x20>=\x20delivered\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20+\x20settlement_days.\x20Time-based\x20(NO\x20node-equality\x20leg),\x20so\x20the\x20SAME\x20design\x20serves\x20the\x20delivered/reviewed→completed\x20forwards\x20AND\x20the\x20settlement\x20allocator\x20rows.\x20The\x20release\x20pays\x20the\x20FULL\x20pool\x20(deposit\x20+\x20balance)\x20and\x20is\x20reachable\x20only\x20through\x20balance_paid,\x20so\x20an\x20unfunded\x20order\x20can\x20never\x20settle.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'deposit_refund','purpose':'DEPOSIT-EXIT\x20REFUND\x20allocator\x20gate\x20(deposit_exit_policy\x20\x27refund\x27,\x20the\x20default):\x20progress.current\x20==\x20reservation_cancelled\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20—\x20pays\x20the\x20WHOLE\x20current\x20pool\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x20254).\x20Refunds\x20read\x20BALANCE,\x20not\x20Order.amount\x20(H3):\x20at\x20reservation_cancelled\x20the\x20pool\x20holds\x20exactly\x20what\x20was\x20captured\x20(deposit\x20only,\x20or\x20deposit\x20+\x20any\x20partial\x20top-up),\x20so\x20the\x20buyer\x20is\x20made\x20whole.\x20Resolve\x20tpl_allocator_node_gate_refund.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(Order.dispute\x20is\x20append-only\x20—\x20a\x20one-way\x20door).\x20SELECTOR:\x20mounts\x20only\x20when\x20deposit_exit_policy\x20==\x20\x27refund\x27;\x20the\x20kill_fee\x20variant\x20drops\x20this\x20row\x20+\x20guard.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'deposit_forfeit','purpose':'DEPOSIT-EXIT\x20KILL-FEE\x20allocator\x20gate\x20(deposit_exit_policy\x20\x27kill_fee\x27):\x20progress.current\x20==\x20reservation_cancelled\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20—\x20forfeits\x20kill_fee_bps\x20of\x20the\x20deposit\x20to\x20the\x20merchant\x20Entity\x20as\x20reserved-slot\x20/\x20production-start\x20compensation\x20(the\x20buyer\x20keeps\x20kill_fee_buyer_bps;\x20the\x20two\x20Rate\x20legs\x20sum\x2010000,\x20a\x20full\x20forfeit\x20is\x2010000/0).\x20BOTH\x20legs\x20ride\x20the\x20REFUND\x20track\x20(one\x20guard_key\x20group)\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x2010000.\x20NEVER\x20fires\x20from\x20closed_cancel\x20(a\x20paid-in-full\x20buyer\x20always\x20refunds\x20whole).\x20SELECTOR:\x20mounts\x20only\x20when\x20deposit_exit_policy\x20==\x20\x27kill_fee\x27.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'full_refund','purpose':'POST-BALANCE\x20full-refund\x20allocator\x20gate:\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20—\x20returns\x20the\x20WHOLE\x20pool\x20(deposit\x20+\x20balance,\x20Rate\x2010000)\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x20254).\x20Resolve\x20tpl_allocator_node_gate_refund.\x20A\x20DISTINCT\x20node\x20from\x20reservation_cancelled\x20so\x20the\x20kill-fee\x20selector\x20never\x20touches\x20a\x20paid-in-full\x20order.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20v74\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands,\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20the\x20refund\x20rails\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion.'}],'allocator':{'recipient':'entity','recipient_key':'merchant','refund_track':'order_anchored','count':0x3,'mode':'rate','once_per_order':!![],'description':'TWO-PHASE\x20escrow\x20+\x20single-point\x20release.\x20The\x20pool\x20holds\x20the\x20DEPOSIT\x20at\x20buy\x20and\x20grows\x20to\x20full_price\x20at\x20the\x20balance\x20capture\x20(order_renew\x20funds\x20the\x20SAME\x20Allocation,\x20balance::join).\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission,\x20so\x20the\x20release\x20gives\x20the\x20merchant\x20the\x20whole\x20pool\x20(Rate\x2010000\x20→\x20an\x20explicit\x20non-empty\x20merchant\x20Entity)\x20at\x20completed,\x20reachable\x20ONLY\x20through\x20the\x20fund-gated\x20balance_paid.\x20every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(a\x20Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20slot-254\x20refund\x20legs)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01).\x20THREE\x20refund\x20rails:\x20the\x20deposit-exit\x20at\x20cancelled\x20(refund\x20OR\x20kill_fee\x20per\x20the\x20deposit_exit_policy\x20SELECTOR\x20—\x20exactly\x20one\x20mounts),\x20the\x20post-balance\x20full\x20refund\x20at\x20closed_cancel,\x20and\x20the\x20merchant-recovery\x20sweep\x20(recover_gate,\x20claimed_by\x20some\x20==\x20true\x20—\x20the\x20polarity\x20twin\x20of\x20the\x20refund\x20seals).\x20once_per_order\x20+\x20the\x20order\x20anchor\x20make\x20a\x20permissionless\x20top-up\x20/\x20overpay\x20(H2)\x20unable\x20to\x20double-release\x20(INV-B3).\x20THRESHOLD:\x20the\x20Allocation\x20threshold\x20is\x20POOL-GLOBAL\x20and\x20gates\x20EVERY\x20alloc\x20(allocation.move\x20EINSUFFICIENT_BALANCE)\x20—\x20it\x20MUST\x20stay\x20<=\x20deposit_amount,\x20or\x20the\x20deposit-exit\x20refund\x20would\x20be\x20blocked\x20while\x20the\x20pool\x20holds\x20only\x20the\x20deposit\x20(INV-B2\x20stranding);\x20the\x20release\x20fund-gate\x20lives\x20in\x20the\x20balance_capture\x20forward\x20guard,\x20NOT\x20the\x20threshold.','rows':[{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'settle_window','note':'Release\x20the\x20FULL\x20pool\x20(deposit\x20+\x20balance)\x20to\x20the\x20merchant\x20at\x20completed.\x200%\x20commission\x20direct\x20sales;\x20an\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer\x20—\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20—\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20burns\x20the\x20share).\x20Reachable\x20only\x20through\x20balance_paid,\x20so\x20an\x20unfunded\x20order\x20never\x20settles.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_window','note':'Rate-0\x20ORDER\x20anchor\x20LEG\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.\x20Rate\x20sums\x20are\x20per-Allocator,\x20so\x20the\x20anchor\x20shares\x20settle_window.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'deposit_refund','note':'DEPOSIT-EXIT\x20refund\x20(SELECTOR\x20\x27refund\x27,\x20the\x20default):\x20the\x20whole\x20current\x20pool\x20back\x20to\x20the\x20order-anchored\x20buyer\x20at\x20cancelled\x20(slot\x20254,\x20the\x20task-binding\x20order\x20anchor\x20—\x20mainnet-verified\x20executable;\x20a\x20STATIC\x20slot\x20aborts\x20ERECIPIENT_NOT_FOR_OBJECT).\x20Refunds\x20read\x20BALANCE\x20(H3)\x20so\x20a\x20deposit-only\x20pool\x20refunds\x20the\x20deposit.\x20claimed_by\x20some\x20==\x20false;\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).\x20once_per_order\x20stops\x20a\x20replay.'},{'track':'refund','recipient':'entity','recipient_key':'merchant','mode':'rate','value_from':'kill_fee_bps','guard_key':'deposit_forfeit','note':'DEPOSIT-EXIT\x20kill-fee\x20(SELECTOR\x20\x27kill_fee\x27):\x20the\x20forfeited\x20share\x20of\x20the\x20deposit\x20to\x20the\x20merchant\x20Entity\x20at\x20cancelled\x20(reserved-slot\x20/\x20production\x20compensation).\x20Pairs\x20with\x20the\x20buyer-remainder\x20leg\x20below\x20so\x20the\x20refund/deposit_forfeit\x20group\x20sums\x2010000.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value_from':'kill_fee_buyer_bps','guard_key':'deposit_forfeit','note':'DEPOSIT-EXIT\x20kill-fee\x20buyer\x20remainder\x20(SELECTOR\x20\x27kill_fee\x27):\x20the\x20non-forfeited\x20share\x20of\x20the\x20deposit\x20back\x20to\x20the\x20order-anchored\x20buyer.\x20kill_fee_bps\x20+\x20kill_fee_buyer_bps\x20==\x2010000\x20(a\x20full\x20forfeit\x20is\x2010000/0).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'full_refund','note':'POST-BALANCE\x20full\x20refund\x20at\x20closed_cancel:\x20the\x20whole\x20pool\x20(deposit\x20+\x20balance)\x20back\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x20254).\x20A\x20paid-in-full\x20buyer\x20is\x20ALWAYS\x20made\x20whole\x20—\x20the\x20kill-fee\x20selector\x20never\x20reaches\x20this\x20node.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20v74\x20catalog\x20sweep):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20true)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20merchant\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(distinct\x20guard_key)\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x2010000;\x20exactly\x20one\x20of\x20the\x20refund\x20rails\x20/\x20recover_gate\x20can\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'conditional_guards':[{'guard_key':'deposit_refund','param':'deposit_exit_policy','values':['refund','kill_fee'],'emit_value':'refund','question':'Deposit-exit\x20policy:\x20when\x20the\x20buyer\x20walks\x20away\x20BEFORE\x20paying\x20the\x20balance\x20(cancel\x20at\x20deposit_paid,\x20or\x20decline/timeout\x20at\x20balance_due),\x20what\x20happens\x20to\x20the\x20deposit?\x20\x27refund\x27\x20returns\x20the\x20whole\x20deposit\x20to\x20the\x20buyer\x20(buyer-friendly\x20default);\x20\x27kill_fee\x27\x20forfeits\x20kill_fee_bps\x20of\x20it\x20to\x20the\x20merchant\x20as\x20reserved-slot\x20/\x20production-start\x20compensation\x20(the\x20rest\x20refunds\x20to\x20the\x20buyer).\x20A\x20buyer\x20who\x20already\x20paid\x20the\x20BALANCE\x20in\x20full\x20and\x20cancels\x20before\x20shipment\x20ALWAYS\x20refunds\x20whole\x20via\x20closed_cancel\x20—\x20this\x20selector\x20never\x20touches\x20a\x20paid-in-full\x20order.'},{'guard_key':'deposit_forfeit','param':'deposit_exit_policy','values':['refund','kill_fee'],'emit_value':'kill_fee','question':'Deposit-exit\x20policy\x20(kill_fee\x20variant):\x20mounts\x20the\x20forfeit\x20allocator\x20(merchant\x20kill_fee_bps\x20+\x20buyer\x20remainder,\x20summing\x2010000)\x20instead\x20of\x20the\x20full\x20deposit\x20refund.'}],'key_risk':'Two-phase\x20funding\x20—\x20the\x20buyer\x20is\x20never\x20obliged\x20to\x20pay\x20the\x20balance,\x20so\x20the\x20deposit\x20must\x20have\x20an\x20exit,\x20and\x20the\x20balance\x20capture\x20must\x20fund\x20atomically\x20or\x20a\x20bare\x20advance\x20ships\x20an\x20unfunded\x20order.','build_notes':['TWO-PHASE\x20CAPTURE\x20(installment_mode\x20deposit_balance,\x20§11.0\x20G6\x20RESOLVED):\x20buy()\x20escrows\x20the\x20DEPOSIT\x20(Order.amount\x20=\x20deposit_amount,\x20total_pay\x20=\x20deposit_amount);\x20the\x20BALANCE\x20is\x20captured\x20later\x20by\x20funding\x20the\x20SAME\x20order\x27s\x20Allocation.\x20SOLE\x20TRUTH\x20(allocation.move\x20/\x20order.move\x20/\x20payment.move,\x20all\x20stable):\x20Order.amount\x20is\x20IMMUTABLE\x20(set\x20at\x20new(),\x20never\x20reassigned)\x20but\x20Allocation.balance\x20is\x20MUTABLE\x20via\x20the\x20renewal\x20receive\x20path\x20(balance::join),\x20so\x20the\x20later\x20capture\x20lands\x20without\x20a\x20chain\x20change\x20—\x20the\x20very\x20primitive\x20subscription\x20renewal\x20uses.','INV-B1\x20ATOMIC\x20FUNDING\x20(H4):\x20the\x20balance_due→balance_paid\x20forward\x20binds\x20the\x20balance_capture\x20fund\x20gate\x20(tpl_forward_fund_gate:\x20allocation.balance\x20query\x201051\x20via\x20witness\x20TypeOrderAllocation\x20109\x20>=\x20full_price).\x20The\x20runtime\x20MUST\x20route\x20it\x20through\x20order_renew\x20—\x20ONE\x20PTB:\x20create\x20the\x20payment\x20receipt\x20→\x20fund\x20the\x20Allocation\x20→\x20issue\x20the\x20payment\x20→\x20forward\x20—\x20so\x20the\x20capture\x20funds\x20the\x20Allocation\x20and\x20advances\x20ATOMICALLY.\x20A\x20BARE\x20data.progress\x20advance\x20without\x20the\x20capture\x20landing\x20ABORTS\x20at\x20the\x20gate\x20(never\x20a\x20zero-value\x20advance).\x20radar-core\x20routes\x20an\x20order-holder\x20advance\x20on\x20a\x20due→paid\x20edge\x20to\x20data.order_renew\x20automatically.','INV-B2\x20DEPOSIT\x20NEVER\x20STRANDED\x20(H1):\x20there\x20is\x20NO\x20on-chain\x20obligation\x20to\x20pay\x20the\x20balance,\x20so\x20EVERY\x20deposit-held\x20state\x20(deposit_paid,\x20balance_due)\x20carries\x20a\x20deposit-exit\x20rail\x20into\x20reservation_cancelled\x20—\x20the\x20buyer\x27s\x20own\x20abandon\x20(deposit_exit,\x20identity-only)\x20AND\x20the\x20keeper\x27s\x20balance-window\x20timeout\x20(balance_deadline).\x20The\x20deposit_exit_policy\x20SELECTOR\x20decides\x20the\x20money:\x20\x27refund\x27\x20returns\x20the\x20whole\x20deposit;\x20\x27kill_fee\x27\x20forfeits\x20kill_fee_bps\x20to\x20the\x20merchant\x20(reserved-slot\x20/\x20production\x20compensation)\x20and\x20refunds\x20the\x20rest.\x20compile\x20blocks\x20a\x20deposit-held\x20state\x20with\x20no\x20exit\x20(INSTALLMENT_DEPOSIT_STRANDED).','POST-BALANCE\x20CANCEL\x20IS\x20A\x20DISTINCT\x20TERMINAL:\x20a\x20buyer\x20who\x20paid\x20the\x20BALANCE\x20in\x20full\x20and\x20cancels\x20before\x20shipment\x20exits\x20via\x20closed_cancel\x20(full_refund,\x20Rate\x2010000\x20to\x20the\x20buyer),\x20NEVER\x20reservation_cancelled\x20—\x20so\x20the\x20kill-fee\x20selector\x20can\x20never\x20eat\x20a\x20paid-in-full\x20order.\x20Two\x20cancel\x20terminals,\x20two\x20money\x20outcomes,\x20both\x20claimed_by-gated.','INV-B3\x20RELEASE\x20IS\x20ONCE\x20+\x20ORDER-ANCHORED\x20(H2/H5):\x20Allocation.receive\x20is\x20PERMISSIONLESS\x20(anyone\x20with\x20a\x20valid\x20Payment\x20+\x20wrapper\x20can\x20top\x20up),\x20so\x20the\x20pool\x20can\x20be\x20over-paid\x20(balance\x20>\x20full_price).\x20The\x20fund\x20gate\x20is\x20a\x20STATE\x20READ\x20(>=\x20full_price),\x20true\x20forever\x20once\x20satisfied\x20—\x20NOT\x20a\x20once.\x20The\x20release\x20allocator\x20therefore\x20sets\x20once_per_order=true\x20(protocol\x20slot\x20254,\x20chain-derived\x20from\x20payment_info.for_object)\x20+\x20the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor,\x20so\x20a\x20replay\x20or\x20a\x20sibling-order\x20passport\x20aborts\x20code\x2016\x20instead\x20of\x20double-releasing.\x20The\x20over-pay\x20residual\x20is\x20swept\x20by\x20the\x20same\x20Rate-10000\x20release\x20(it\x20drains\x20the\x20whole\x20pool).\x20SCOPE:\x20the\x20identifier-255/254\x20once-slot\x20is\x20keyed\x20(guard,\x20allocator,\x20submission)\x20ON\x20ONE\x20Allocation\x20—\x20it\x20is\x20PER-ALLOCATION\x20(per-pool),\x20NOT\x20cross-order\x20idempotency;\x20a\x20second\x20Allocation\x20of\x20the\x20same\x20Service\x20starts\x20with\x20no\x20record,\x20so\x20the\x20once\x20flag\x20is\x20always\x20paired\x20with\x20the\x20order\x20anchor\x20(R-ANCHOR-01)\x20for\x20cross-order\x20safety.','H3\x20amount≠balance\x20DISCLOSURE:\x20Order.amount\x20stays\x20frozen\x20at\x20the\x20DEPOSIT\x20while\x20Allocation.balance\x20grows\x20to\x20full_price\x20at\x20capture.\x20Refunds\x20read\x20BALANCE\x20(always\x20safe\x20—\x20the\x20buyer\x20is\x20made\x20whole),\x20but\x20any\x20reporting\x20anchored\x20on\x20Order.amount\x20UNDER-represents\x20the\x20captured\x20total.\x20Declared,\x20never\x20hidden:\x20the\x20buy\x20total_pay\x20is\x20deposit_amount\x20and\x20full_price\x20is\x20a\x20SEPARATELY\x20declared\x20fee_param\x20the\x20fund\x20gate\x20reads.','THRESHOLD\x20IS\x20POOL-GLOBAL\x20(the\x20INV-B2\x20trap):\x20alloc()\x20asserts\x20balance\x20>=\x20self.allocators.threshold\x20UNCONDITIONALLY\x20at\x20the\x20start,\x20BEFORE\x20any\x20allocator\x20runs\x20(allocation.move\x20EINSUFFICIENT_BALANCE),\x20and\x20the\x20threshold\x20is\x20shared\x20by\x20EVERY\x20alloc\x20—\x20release\x20AND\x20refund.\x20Setting\x20it\x20to\x20full_price\x20would\x20BLOCK\x20the\x20deposit-exit\x20refund\x20while\x20the\x20pool\x20holds\x20only\x20the\x20deposit,\x20stranding\x20it.\x20The\x20threshold\x20MUST\x20be\x20<=\x20deposit_amount;\x20the\x20release\x20fund-gate\x20lives\x20in\x20the\x20balance_capture\x20forward\x20guard\x20+\x20the\x20topology\x20(completed\x20reachable\x20only\x20via\x20balance_paid),\x20NOT\x20the\x20threshold.','ALLOCATOR\x20THRESHOLD\x20vs\x20FIXED\x20LEG:\x20this\x20template\x20uses\x20pure-Rate\x20legs\x20(no\x20fixed\x20Amount),\x20so\x20the\x20R-DEADLOCK-01\x20\x27fixed\x20leg\x20exceeds\x20a\x20small\x20escrow\x27\x20hazard\x20does\x20not\x20apply\x20—\x20a\x20Rate\x20split\x20scales\x20to\x20whatever\x20the\x20pool\x20holds.\x20Keep\x20the\x20threshold\x20at\x20the\x20minimum\x20payout\x20unit.','STOP-NODE\x20FUND-EXIT\x20COVERAGE:\x20every\x20resting\x20state\x20has\x20both\x20a\x20release\x20and\x20a\x20refund\x20rail\x20evaluated\x20—\x20deposit_paid/balance_due\x20→\x20reservation_cancelled\x20(deposit-exit),\x20balance_paid\x20→\x20closed_cancel\x20(full\x20refund)\x20or\x20shipped,\x20delivered/reviewed\x20→\x20completed\x20(release),\x20and\x20the\x20recover_gate\x20sweep\x20backstops\x20an\x20awarded\x20order\x20at\x20ANY\x20node\x20(claimed_by\x20some\x20==\x20true,\x20no\x20node\x20leg).\x20Machine\x20+\x20Allocator\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001)\x20—\x20an\x20uncovered\x20stop\x20node\x20strands\x20funds\x20permanently.','ESCROW\x20EXIT\x20INVARIANT\x20(az-mn-261007,\x20D-BUG-2):\x20the\x20refund\x20rails\x20block\x20once\x20an\x20award\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false),\x20and\x20the\x20recover_gate\x20row\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20→\x20merchant)\x20is\x20the\x20structural\x20polarity\x20twin\x20so\x20an\x20awarded\x20order\x27s\x20principal\x20still\x20exits.\x20The\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20publish;\x20exactly\x20one\x20of\x20the\x20two\x20can\x20ever\x20pass.','EVIDENCE\x20WRITE\x20GATE\x20(testnet\x20HIGH-04):\x20the\x20evidence\x20Repository\x20runs\x20under\x20id_from=None\x20and\x20the\x20chain\x20merely\x20asserts\x20a\x20NON-EMPTY\x20write_guard\x20list\x20(repository.move\x20E_POLICY_WRITE_GUARD_REQUIRED=22),\x20never\x20what\x20it\x20proves.\x20Generate\x20the\x20write_guard\x20from\x20pattern.repository_write_authorization\x20(identity\x20leaf\x20mandatory)\x20so\x20a\x20counterparty\x20cannot\x20forge\x20the\x20tracking\x20row;\x20store\x20a\x20signed\x20WTS\x20Proof\x20ADDRESS\x20as\x20the\x20value\x20for\x20anything\x20an\x20arbitrator\x20must\x20trust.','DISCOUNT\x20FLOOR:\x20a\x20coupon\x20that\x20zeroes\x20the\x20DEPOSIT\x20would\x20make\x20Order.amount\x200\x20(an\x20empty\x20escrow)\x20and\x20the\x20fund\x20gate\x27s\x20full_price\x20comparison\x20would\x20still\x20expect\x20the\x20balance\x20—\x20floor\x20coupons\x20at\x20issuance\x20so\x20the\x20deposit\x20stays\x20positive\x20(discount-threshold.ts\x20checkDiscountFloorBeforeIssue).\x20The\x20discount\x20registry\x20is\x20mutable\x20after\x20publish\x20(SERVICE_DISCOUNT\x20permission\x20312);\x20the\x20chain\x20does\x20NOT\x20dedupe\x20by\x20name,\x20so\x20reuse\x20a\x20coupon\x20or\x20merge\x20budget\x20into\x20max_uses\x20instead\x20of\x20re-minting.','OPERATIONAL\x20E-2:\x20trigger\x20protection\x20is\x20BALANCE-EXHAUSTION\x20+\x20the\x20once\x20slot.\x20Pure-Rate\x20sums\x20==\x2010000\x20are\x20single-shot\x20by\x20construction;\x20once_per_order=true\x20arms\x20slot\x20254\x20so\x20a\x20replay\x20aborts\x20code\x2016.\x20Run\x20the\x20guard-design\x20REPLAY\x20TEST\x20before\x20publish.','ONCE-SLOT\x20ARMING\x20(R-ONCE-ARM\x20—\x20once_per_order\x20has\x20NO\x20automatic\x20on-chain\x20wiring):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20EACH\x20allocator-bound\x20Guard\x20(settle_window,\x20deposit_refund,\x20deposit_forfeit,\x20full_refund,\x20recover_gate)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20254\x20ONCE-FOR-OBJECT\x20slot\x20is\x20keyed\x20on\x20payment_info.for_object,\x20so\x20it\x20doubles\x20as\x20the\x20order\x20anchor\x20AND\x20the\x20once-per-order\x20replay\x20gate\x20(a\x20replay\x20aborts\x20code\x2016).\x20Rails\x20that\x20legitimately\x20repeat\x20would\x20arm\x20identifier\x20255\x20with\x20a\x20per-period\x20key\x20instead;\x20here\x20every\x20rail\x20is\x20single-shot\x20per\x20order,\x20so\x20254\x20is\x20correct.\x20Without\x20this\x20declaration\x20the\x20advertised\x20replay\x20protection\x20does\x20not\x20exist\x20on\x20chain.','fee_params\x20values\x20(windows,\x20deposit,\x20full\x20price,\x20kill-fee\x20share)\x20are\x20TS-layer\x20generation\x20parameters,\x20NOT\x20on-chain\x20guarantees\x20—\x20they\x20bind\x20only\x20when\x20embedded\x20into\x20Guard\x20data\x20and\x20enforced\x20by\x20keeper\x20scheduling.\x20The\x20deposit/full_price/balance_amount\x20values\x20are\x20product-specific\x20build\x20INPUTS\x20(smallest\x20units).','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20preorder\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention),\x20or\x20self-host\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'deposit_amount':'the\x20per-unit\x20DEPOSIT\x20captured\x20at\x20buy\x20(smallest\x20units)\x20—\x20this\x20IS\x20Order.amount\x20and\x20the\x20buy\x20total_pay,\x20immutable\x20after\x20buy\x20(H3)','full_price':'the\x20TOTAL\x20order\x20price\x20(smallest\x20units),\x20declared\x20SEPARATELY\x20from\x20deposit_amount\x20because\x20Order.amount\x20is\x20frozen\x20at\x20the\x20deposit\x20—\x20the\x20balance_capture\x20fund\x20gate\x20reads\x20THIS\x20(min_balance\x20=\x20full_price)','balance_amount':'the\x20BALANCE\x20captured\x20at\x20balance_due→balance_paid\x20via\x20order_renew\x20(smallest\x20units)\x20=\x20full_price\x20−\x20deposit_amount','production_lead_days':0x1e,'balance_window_days':0xe,'auto_confirm_days':0x7,'settlement_days':0x7,'review_window_days':0xe,'deposit_exit_policy':'refund','kill_fee_bps':0x2710,'kill_fee_buyer_bps':0x0,'allocator_threshold':'MUST\x20be\x20<=\x20deposit_amount\x20(the\x20minimum\x20payout\x20unit).\x20The\x20threshold\x20gates\x20EVERY\x20alloc\x20(allocation.move\x20EINSUFFICIENT_BALANCE),\x20release\x20AND\x20refund\x20alike\x20—\x20never\x20set\x20it\x20to\x20full_price\x20or\x20the\x20deposit-exit\x20refund\x20is\x20blocked\x20while\x20the\x20pool\x20holds\x20only\x20the\x20deposit.\x20The\x20release\x20fund-gate\x20lives\x20in\x20the\x20balance_capture\x20forward\x20guard,\x20NOT\x20here.'},'time_anchors':{'balance_window_open':'progress.history.time\x20(id\x201280,\x20next_node=\x27deposit_paid\x27,\x20find=last)\x20—\x20the\x20balance-capture\x20window\x20opens\x20production_lead_days\x20after\x20the\x20DEPOSIT\x20entry\x20(immutable\x20entry\x20record;\x201272\x20current_time\x20drifts\x20every\x20migration,\x20ETS-C)','balance_deadline':'progress.history.time\x20(id\x201280,\x20next_node=\x27balance_due\x27,\x20find=last)\x20—\x20the\x20buyer\x20must\x20pay\x20the\x20balance\x20WITHIN\x20balance_window_days\x20of\x20the\x20balance_due\x20ENTRY;\x20on\x20timeout\x20the\x20keeper\x20fires\x20the\x20deposit-exit\x20(INV-B2)','deliver_confirm_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27shipped\x27,\x20find=last)\x20—\x20carrier\x20transit\x20counts\x20from\x20shipment','settlement':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20the\x20release\x20time-lock\x20measures\x20from\x20the\x20DELIVERY\x20entry','review_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20CLOSING\x20review\x20window\x20from\x20delivery\x20(time_window_upper_bound)'},'trust_mechanisms':['R1\x20refund\x20path:\x20TWO\x20deposit-exit\x20rails\x20—\x20the\x20pre-balance\x20deposit\x20refund/kill-fee\x20(reservation_cancelled)\x20and\x20the\x20post-balance\x20full\x20refund\x20(closed_cancel)\x20—\x20plus\x20the\x20dispute\x20compensation\x20channel;\x20every\x20refund\x20is\x20order-anchored\x20(slot\x20254)\x20and\x20claimed_by-gated','R2\x20independent\x20Arbitration\x20with\x20its\x20own\x20Permission\x20(arbitration_mode\x20third_party);\x20disputes\x20flow\x20off-Machine\x20(R-M1-11)','R3\x20compensation\x20fund\x20>=\x203x\x20the\x20order\x20amount\x20(MAX_INDEMNITY_MULTIPLE\x20caps\x20any\x20award\x20at\x203x\x20escrow,\x20arb.move)','R4\x20buyer-first\x20delivery\x20confirmation\x20—\x20seller\x20self-sign\x20forbidden;\x20buyer\x20silence\x20auto-confirms\x20via\x20the\x20keeper\x20(deliver_confirm_timeout)','R5\x20every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20slot-254\x20refund\x20legs)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01)','R6\x20settlement\x20allocator\x20=\x20merchant\x20Entity\x20Rate\x2010000\x20(0%\x20commission,\x20explicit\x20non-empty\x20Entity)\x20+\x20inline\x20Rate-0\x20ORDER\x20anchor;\x20the\x20release\x20pays\x20the\x20FULL\x20pool\x20(deposit\x20+\x20balance)\x20and\x20is\x20reachable\x20ONLY\x20through\x20balance_paid\x20(the\x20fund-gated\x20capture),\x20so\x20an\x20unfunded\x20order\x20can\x20never\x20settle','R7\x20all\x20nodes/forwards/Guards\x20configured\x20before\x20publish\x20(publish\x20freezes;\x20IMMUT-001)','R8\x20customer-service\x20Contact\x20bound\x20to\x20Service\x20and\x20Machine','R9\x20keeper\x20declared\x20for\x20the\x20balance-window\x20open,\x20the\x20balance-deadline\x20deposit-exit,\x20delivery\x20auto-confirm,\x20and\x20the\x20settlement\x20trigger','R10\x20business\x20parameters\x20(deposit,\x20full\x20price,\x20windows,\x20kill-fee\x20share)\x20embedded\x20as\x20Guard\x20parameters\x20—\x20industry-recommended\x20defaults,\x20merchant-configurable\x20at\x20build\x20time','R11\x20TWO-PHASE\x20FUND\x20SAFETY\x20(installment_mode\x20deposit_balance):\x20the\x20balance\x20capture\x20is\x20ATOMIC\x20(order_renew\x20one\x20PTB\x20funds\x20the\x20Allocation\x20+\x20advances,\x20gated\x20by\x20allocation.balance\x20>=\x20full_price\x20—\x20INV-B1);\x20the\x20deposit\x20is\x20NEVER\x20stranded\x20(a\x20deposit-exit\x20rail\x20from\x20every\x20deposit-held\x20state\x20—\x20INV-B2);\x20the\x20release\x20is\x20once_per_order\x20+\x20order-anchored\x20so\x20a\x20permissionless\x20top-up\x20/\x20overpay\x20cannot\x20double-release\x20(INV-B3)'],'keeper_dependencies':['balance-window\x20open\x20(production_lead_days\x20after\x20the\x20deposit\x20—\x20OpenBalanceWindow\x20advances\x20deposit_paid\x20→\x20balance_due)','balance-deadline\x20deposit-exit\x20(balance_window_days\x20after\x20balance_due\x20—\x20BalanceWindowTimeout\x20advances\x20a\x20silent\x20buyer\x27s\x20order\x20to\x20reservation_cancelled\x20so\x20the\x20deposit\x20never\x20strands,\x20INV-B2)','delivery\x20auto-confirm\x20(auto_confirm_days\x20after\x20shipment\x20—\x20AutoConfirmDelivery\x20advances\x20a\x20silent\x20buyer\x27s\x20order)','settlement\x20trigger\x20at\x20the\x20release\x20point\x20(settlement_days\x20after\x20delivery)','48h\x20absence\x20auto-loss\x20in\x20arbitration'],'recommended_role':'merchant','role_rationale':'A\x20preorder\x20/\x20crowd-purchase\x20operator\x20(a\x20maker\x20funding\x20a\x20production\x20run,\x20a\x20limited-drop\x20seller)\x20owns\x20the\x20Service,\x20sets\x20the\x20deposit\x20and\x20full\x20price,\x20and\x20drives\x20the\x20balance\x20window\x20+\x20fulfilment;\x20buyers\x20fund\x20the\x20two-phase\x20escrow.','differences':['TWO-PHASE\x20funding\x20(installment_mode\x20deposit_balance)\x20vs\x20the\x20sibling\x20retail\x20archetypes\x27\x20single\x20full\x20escrow\x20at\x20buy:\x20the\x20buyer\x20pays\x20a\x20DEPOSIT\x20to\x20reserve\x20a\x20preorder\x20slot\x20and\x20the\x20BALANCE\x20later\x20(before\x20shipment),\x20captured\x20atomically\x20via\x20order_renew\x20into\x20the\x20SAME\x20order\x27s\x20Allocation\x20—\x20the\x20chain\x20primitive\x20subscription\x20renewal\x20uses,\x20so\x20zero\x20chain\x20change','Order.amount\x20is\x20frozen\x20at\x20the\x20DEPOSIT\x20while\x20Allocation.balance\x20grows\x20to\x20full_price\x20at\x20capture\x20(H3):\x20refunds\x20read\x20BALANCE\x20(always\x20safe),\x20but\x20reporting\x20anchored\x20on\x20Order.amount\x20under-represents\x20the\x20captured\x20total\x20—\x20declared,\x20never\x20hidden','A\x20DEPOSIT-EXIT\x20rail\x20(refund\x20or\x20merchant\x20kill-fee\x20via\x20the\x20deposit_exit_policy\x20selector)\x20replaces\x20the\x20sibling\x20archetypes\x27\x20pre-shipment\x20cancel:\x20there\x20is\x20NO\x20on-chain\x20obligation\x20to\x20pay\x20the\x20balance\x20(H1),\x20so\x20a\x20buyer\x20who\x20walks\x20away\x20must\x20still\x20release\x20the\x20deposit','The\x20plan\x27s\x20reserved→deposit_paid\x20two-node\x20entry\x20collapses\x20to\x20ONE\x20deposit_paid\x20entry\x20node:\x20buy()\x20escrows\x20the\x20deposit\x20atomically\x20(no\x20unpaid-reservation\x20state\x20exists\x20on\x20chain),\x20so\x20a\x20free\x20waitlist\x20slot\x20before\x20the\x20deposit\x20is\x20an\x20off-chain\x20Keeper\x20concern,\x20not\x20a\x20Machine\x20node'],'user_inputs':['deposit_amount\x20—\x20the\x20per-unit\x20deposit\x20captured\x20at\x20buy\x20(smallest\x20units);\x20this\x20IS\x20Order.amount\x20and\x20the\x20buy\x20total_pay,\x20immutable\x20after\x20buy','full_price\x20—\x20the\x20total\x20order\x20price\x20(smallest\x20units),\x20declared\x20SEPARATELY\x20from\x20the\x20deposit;\x20the\x20balance_capture\x20fund\x20gate\x20reads\x20it\x20(min_balance\x20=\x20full_price)\x20and\x20order_renew\x20captures\x20balance_amount\x20=\x20full_price\x20−\x20deposit_amount','production_lead_days\x20/\x20balance_window_days\x20—\x20when\x20the\x20balance\x20window\x20opens\x20(production/release\x20imminent)\x20and\x20how\x20long\x20the\x20buyer\x20has\x20to\x20pay\x20before\x20the\x20deposit-exit\x20fires','deposit_exit_policy\x20—\x20\x27refund\x27\x20(default:\x20the\x20whole\x20deposit\x20returns\x20to\x20a\x20buyer\x20who\x20walks\x20away\x20pre-balance)\x20or\x20\x27kill_fee\x27\x20(forfeit\x20kill_fee_bps\x20of\x20the\x20deposit\x20to\x20the\x20merchant\x20as\x20reserved-slot/production\x20compensation);\x20a\x20paid-in-full\x20buyer\x20always\x20refunds\x20whole\x20via\x20closed_cancel\x20regardless','kill_fee_bps\x20/\x20kill_fee_buyer_bps\x20—\x20the\x20deposit-forfeit\x20split\x20when\x20deposit_exit_policy\x20is\x20\x27kill_fee\x27\x20(must\x20sum\x2010000;\x20a\x20full\x20forfeit\x20is\x2010000/0)','settlement_days\x20/\x20auto_confirm_days\x20/\x20review_window_days\x20—\x20the\x20release\x20time-lock,\x20the\x20buyer-silence\x20auto-confirm,\x20and\x20the\x20review\x20window','allocator_threshold\x20—\x20MUST\x20be\x20<=\x20deposit_amount:\x20the\x20threshold\x20is\x20POOL-GLOBAL\x20and\x20gates\x20EVERY\x20alloc\x20(release\x20AND\x20refund),\x20so\x20a\x20threshold\x20above\x20the\x20deposit\x20would\x20block\x20the\x20deposit-exit\x20refund\x20when\x20the\x20pool\x20holds\x20only\x20the\x20deposit\x20(INV-B2\x20stranding).\x20The\x20release\x20is\x20gated\x20by\x20topology\x20+\x20the\x20balance_capture\x20fund\x20gate,\x20NOT\x20the\x20threshold','Compensation\x20fund\x20size\x20(>=\x203x\x20the\x20order\x20amount\x20—\x20the\x20on-chain\x20indemnity\x20hard\x20cap,\x20arbitration.compensate)','Discount\x20(optional)\x20—\x20a\x20Discount\x20object\x20pointing\x20at\x20this\x20Service;\x20floor\x20coupons\x20at\x20issuance\x20so\x20a\x20zeroing\x20coupon\x20cannot\x20make\x20the\x20DEPOSIT\x200\x20(an\x20empty\x20escrow)']},{'id':'freelance/enterprise-talent-market','industry':'freelance','variant':'enterprise-talent-market','product_ref':'upwork','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'paid','role':'Entry:\x20fixed-price\x20contract\x20signed\x20and\x20fully\x20escrowed;\x20Machine\x20starts\x20here','semantic_role':'draft','from':[{'prev':''}]},{'name':'in_progress','role':'Freelancer\x20accepts\x20(permission\x20slot)\x20and\x20works;\x20revision\x20loop\x20returns\x20here\x20(max\x202\x20rounds,\x20counted\x20off-chain)','semantic_role':'active','from':[{'prev':'paid'}]},{'name':'delivered','role':'Deliverable\x20submitted\x20with\x20WIP\x20hash\x20evidence\x20(submit-work\x20semantics)','semantic_role':'delivered','from':[{'prev':'in_progress'}]},{'name':'accepted','role':'Client\x20confirms\x20acceptance\x20—\x20manual\x20signature\x20OR\x2014-day\x20timeout\x20(dual-branch\x20guard)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered'}]},{'name':'reviewed','role':'Client\x20reviews\x20the\x20delivered\x20work\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM\x20—\x20row\x20policy\x20is\x20single-typed,\x20so\x20each\x20review\x20event\x20writes\x20TWO\x20rows\x20keyed\x20to\x20the\x20same\x20order:\x20a\x20U256\x20rating\x20row\x201-5,\x20the\x20range-queryable\x20column\x20via\x20keys_where\x20numeric\x20Range,\x20plus\x20a\x20String\x20comment\x20row,\x20presence-queryable;\x20review\x20text\x20lives\x20on-chain\x20as\x20its\x20own\x20row,\x20never\x20in\x20progress\x20history\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'accepted','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Freelancer\x20withdraws\x20released\x20funds\x20(triple-check\x20withdraw\x20guard)','semantic_role':'final','from':[{'prev':'accepted'},{'prev':'reviewed','forward':'CompleteAfterReview'}]},{'name':'wonder','role':'Post-settlement\x20POSITIVE\x20feedback\x20(wonder\x20convention,\x20v70\x20adoption\x20of\x20upw-mn-261014):\x20buyer-only\x20advance\x20off\x20the\x20settled\x20terminal\x20—\x20the\x20pool\x20is\x20empty\x20here\x20(the\x20settlement\x20Allocator\x20drained\x20the\x20full\x20escrow\x20at\x20completed),\x20so\x20the\x20review-credential\x20ordering\x20trap\x20(F-40:\x20press-forward-first\x20kills\x20the\x20pre-settlement\x20write\x20credential)\x20structurally\x20cannot\x20strand\x20feedback.\x20First-wins\x20competing\x20pair\x20with\x20no_wonder:\x20one\x20rating\x20per\x20order.\x20Optional\x20pure\x20side\x20action\x20—\x20completion\x20never\x20routes\x20through\x20it\x20and\x20it\x20gates\x20no\x20money.\x20Praise-gated\x20bounties\x20may\x20anchor\x20a\x20claim\x20guard\x20on\x20progress.current\x20==\x20\x27wonder\x27\x20(NAMING\x20CONVENTION\x20—\x20no\x20chain\x20primitive;\x20queryable\x20via\x20Progress.current\x20and\x20Progress.history)','operator':'order_payer','optional':!![],'semantic_role':'delivered','from':[{'prev':'completed','forward':'Praise'}]},{'name':'no_wonder','role':'Post-settlement\x20NEGATIVE\x20feedback\x20(wonder\x20convention):\x20buyer\x20signals\x20dissatisfaction;\x20the\x20node\x20transition\x20itself\x20is\x20the\x20on-chain\x20negative\x20signal,\x20queryable\x20in\x20Progress.history\x20(F-50\x20structural\x20fix\x20—\x20a\x20suppressed\x20low\x20rating\x20still\x20leaves\x20a\x20reachable\x20record).\x20First-wins\x20with\x20Praise:\x20one\x20rating\x20per\x20order.\x20Optional\x20pure\x20side\x20action\x20—\x20gates\x20no\x20money\x20(pool\x20is\x20empty:\x20the\x20settlement\x20rail\x20drained\x20the\x20full\x20escrow\x20at\x20completed\x20before\x20any\x20advance\x20off\x20it)','operator':'order_payer','optional':!![],'semantic_role':'delivered','from':[{'prev':'completed','forward':'Complain'}]},{'name':'closed_cancel','role':'Pre-work\x20cancellation\x20—\x20triggers\x20full\x20refund\x20Allocator\x20to\x20client','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid'}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20freelancer\x20self-purchase\x20of\x20their\x20own\x20service\x20(Passport-gated\x20purchase\x20once\x20set)'},{'template_id':'pattern.repository_data_check','host':'machine','purpose':'WIP\x20hash\x20required\x20on\x20every\x20submission\x20(submit-work\x20evidence)'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'Dual-branch\x20acceptance:\x20client\x20signature\x20OR\x2014-day\x20timeout\x20—\x20forward\x20operator\x20left\x20unbound\x20so\x20the\x20keeper\x20can\x20submit\x20the\x20timeout\x20path'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_gate','purpose':'Single-shot\x20settlement\x20allocator\x20gate\x20(KLM-C:\x20one-shot\x20per-order\x20escrow\x20settles\x20via\x20the\x20CHAIN-DERIVED\x20protocol-254\x20once\x20key\x20—\x20the\x20old\x20255+history-count\x20key\x20is\x20publicly\x20computable\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20locks\x20the\x20rail,\x20mainnet\x20KL-LIVE-01\x20261014):\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20declared\x20254\x20Address\x20submission\x20slot\x20(once\x20key\x20=\x20bcs(payment_info.for_object),\x20replay\x20aborts\x2016).\x20The\x20kernel\x20injects\x20service_name\x20=\x20the\x20plan\x27s\x20service\x20name;\x20the\x20node\x20leg\x20is\x20a\x20SET:\x20settle_node\x20defaults\x20to\x20\x27completed\x27\x20and\x20settle_node_alt/alt2\x20DEFAULT\x20TO\x20THE\x20SAME\x20VALUE\x20(tautology\x20legs\x20—\x20a\x20default\x20never\x20introduces\x20a\x20new\x20dead\x20literal);\x20fill\x20alt/alt2\x20with\x20THIS\x20machine\x27s\x20post-settlement\x20side\x20nodes\x20(wonder/no_wonder\x20convention)\x20so\x20a\x20praise/complain\x20advance\x20off\x20completed\x20cannot\x20seal\x20the\x20escrow\x20(CAT-C1,\x20upwc-cat-261017\x20live:\x200.5\x20WOW\x20stranded\x20when\x20Praise\x20moved\x20the\x20order\x20off\x20completed\x20before\x20settlement\x20fired)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate\x20(pending\x20judgment):\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool;\x20blocks\x20refund\x20once\x20an\x20award\x20ACTUALLY\x20paid;\x20the\x20paired\x20recover_gate\x20leg\x20keeps\x20the\x20awarded\x20escrow\x20exiting).\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017:\x20the\x20old\x20prose\x20claimed\x20\x27signer\x20==\x20order.owner\x20(anti-hijack\x20R5)\x27\x20but\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter\x20—\x20audit\x20against\x20the\x20encoded\x20THREE\x20legs,\x20never\x20the\x20old\x20text);\x20anti-hijack\x20is\x20STRUCTURAL:\x20the\x20GuardIdentifier(0)\x20order-anchored\x20recipient\x20lands\x20funds\x20ON\x20the\x20Order\x20and\x20only\x20the\x20owner\x20can\x20receive\x20them;\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20(add\x20it\x20inline\x20only\x20if\x20you\x20also\x20declare\x20its\x20slot).\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2\x20—\x20the\x20b9-261015\x20\x27FULL-SET\x20node\x20gate\x27\x20is\x20REMOVED:\x20the\x20encoded\x20legs\x20are\x20claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20ONLY,\x20deliberately\x20NO\x20node\x20equality\x20leg):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding.\x20Why\x20no\x20node\x20gate:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20(upw-mn-261014\x20F-51:\x20a\x20delivered-pinned\x20rail\x20aborted\x207\x20after\x20the\x20auto-accept\x20keeper\x20moved\x20the\x20order\x20on;\x20upwc-cat-261017\x20CAT-C2\x20live:\x20a\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20after\x20the\x20award\x20paid),\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20already\x20carries\x20the\x20mutual\x20exclusion\x20vs\x20refund_gate\x20(exactly\x20one\x20polarity\x20can\x20pass,\x20D-BUG-2)\x20—\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail\x20and\x20strands\x20the\x20escrow.\x20Pays\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Client\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20acceptance,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20escrow\x20always\x20keeps\x20the\x20unreviewed\x20path\x20accepted\x20->\x20completed;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','count':0x3,'mode':'rate','refund_track':'order_anchored','description':'Fixed-price\x20settlement\x20on\x20completed.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20A\x20single\x20Rate\x2010000\x20leg\x20to\x20the\x20freelancer\x27s\x20Entity;\x20the\x200%\x20offer\x20is\x20not\x20a\x20launch\x20discount,\x20it\x20is\x20the\x20standing\x20model.\x20full\x20refund\x20to\x20client\x20(Rate\x2010000\x20via\x20order-anchored\x20recipient)\x20on\x20cancelled;\x20multi-milestone\x20=\x20chained\x20Orders\x20each\x20with\x20its\x20own\x20Allocation','rows':[{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'settle_gate','note':'0%\x20platform\x20commission\x20—\x20the\x20standing\x20direct-sales\x20model.\x20Recipient\x20MUST\x20be\x20an\x20explicit\x20non-empty\x20Entity:\x20an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently.\x20Binds\x20the\x20settle_gate\x20guard\x20(auto-filled\x20from\x20tpl_allocator_node_gate_settle_once:\x20node\x20gate\x20+\x20order.service\x20binding\x20+\x20chain-derived\x20254\x20once\x20—\x20KLM-C).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_gate','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20submitted\x20ORDER\x20the\x20settlement\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20settle_gate\x20key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20freelancer\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20full\x20refund.\x20GuardIdentifier(0)\x20resolves\x20to\x20the\x20paying\x20Order,\x20and\x20allocation.move\x20ERECIPIENT_NOT_FOR_OBJECT\x20then\x20makes\x20redirection\x20structurally\x20impossible;\x20the\x20buyer\x20claims\x20via\x20order\x20receive.\x20The\x20refund_gate\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20—\x20the\x20paired\x20recover_gate\x20leg\x20is\x20the\x20only\x20other\x20exit\x20once\x20an\x20award\x20paid.'}]},'key_risk':'Client\x20never\x20accepts\x20delivery\x20—\x20the\x2014-day\x20timeout\x20keeper\x20auto-advances\x20acceptance\x20to\x20unblock\x20freelancer\x20payment','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','The\x20acceptance\x20forward\x20must\x20NOT\x20bind\x20the\x20client\x20as\x20operator\x20—\x20the\x20dual-branch\x20guard\x20carries\x20both\x20the\x20manual\x20(client\x20signature)\x20and\x20timeout\x20(keeper)\x20paths','Every\x20return\x20to\x20delivered\x20refreshes\x20the\x20progress\x20clock\x20—\x20the\x2014-day\x20window\x20resets\x20naturally\x20on\x20re-submission','Refund\x20recipient\x20is\x20the\x20order\x20object\x20(anchored)\x20—\x20the\x20client\x20then\x20claims\x20via\x20the\x20two-step\x20receive\x20flow','IN-PROGRESS\x20CANCELLATION\x20REALITY\x20(ctra2-mn-261020\x20E7,\x20live\x20mainnet\x20probe):\x20a\x20buyer\x20can\x20unilaterally\x20cancel\x20a\x20RUNNING\x20order\x20from\x20in_progress\x20(the\x20chain\x27s\x20cancel-from-in-progress\x20primitive\x20needs\x20NO\x20seller\x20consent\x20and\x20bypasses\x20the\x20declared\x20paid-only\x20closed_cancel\x20edge)\x20and\x20the\x20order-anchored\x20refund\x20rail\x20pays\x20back\x20the\x20FULL\x20escrow\x20—\x20the\x20freelancer\x20has\x20ZERO\x20on-chain\x20protection\x20for\x20work\x20already\x20spent,\x20and\x20no\x20guard/keeper\x20in\x20this\x20template\x27s\x20rails\x20can\x20block\x20it.\x20This\x20is\x20180°\x20opposite\x20to\x20a\x20prepaid\x20non-refundable\x20policy\x20(the\x20ctra2-mn-261020\x20G12\x20finding);\x20the\x20template\x20is\x20client-friendly\x20BY\x20DESIGN.\x20Mitigation\x20is\x20structural,\x20not\x20configurational:\x20split\x20large\x20contracts\x20into\x20chained\x20milestone\x20Orders\x20(caps\x20per-order\x20exposure),\x20keep\x20pre-delivery\x20stages\x20short,\x20and\x20advance\x20the\x20machine\x20promptly.\x20A\x20cancellation\x20fee\x20or\x20non-refundable\x20prepay\x20is\x20NOT\x20expressible\x20with\x20these\x20rails\x20—\x20it\x20needs\x20a\x20custom\x20allocator/machine\x20build;\x20never\x20promise\x20one\x20from\x20this\x20template.','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20pairing\x20is\x20DECLARED\x20STRUCTURALLY\x20in\x20the\x20rows\x20—\x20the\x20refund\x20row\x20binds\x20guard_key\x20refund_gate\x20(order.claimed_by\x20some\x20==\x20false,\x20query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20and\x20the\x20recovery\x20row\x20binds\x20guard_key\x20recover_gate\x20(order.claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity),\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits.\x20Both\x20gates\x20arrive\x20PENDING\x20judgment\x20designs:\x20resolve\x20them\x20via\x20guide_confirm.guard_resolutions\x20(the\x20guide\x20lists\x20suggested\x20templates\x20and\x20parameters).\x20Exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','Milestones\x20=\x20multiple\x20chained\x20Orders,\x20each\x20with\x20an\x20independent\x20Allocation;\x20leftover\x20balance\x20can\x20be\x20recharged\x20into\x20the\x20next\x20Order\x20pool','Arbitration:\x20independent\x20Permission\x20(arbiter\x20slot),\x20fee\x20near-zero\x20to\x20cover\x20the\x20small-dispute\x20tail\x20the\x20incumbent\x20abandoned.\x20VENUE\x20READINESS\x20(role\x20boundary):\x20the\x20venue\x27s\x20internal\x20permission/voting\x20setup\x20and\x20its\x20unpause\x20belong\x20to\x20the\x20ARBITRATOR\x20on\x20their\x20own\x20objects\x20—\x20an\x20empty\x20voting_guard\x20on\x20the\x20venue\x20means\x20equal\x20vote\x20weight\x20(1\x20person\x201\x20vote),\x20not\x20permissionless,\x20but\x20configuring\x20it\x20is\x20never\x20this\x20build\x27s\x20duty.\x20Your\x20duty\x20is\x20selection:\x20bind\x20only\x20a\x20venue\x20already\x20operational\x20(unpaused,\x20voting\x20armed)\x20—\x20a\x20fresh\x20Arbitration\x20ships\x20paused\x20with\x20zero\x20grants,\x20and\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20with\x20E_PAUSED','Disputes\x20flow\x20through\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11);\x20the\x207-day\x20dispute\x20response\x20timeout\x20is\x20a\x20KEEPER\x20obligation\x20over\x20the\x20Arbitration\x20case\x20(see\x20keeper_dependencies),\x20not\x20a\x20Machine\x20guard','Every\x20Guard\x20that\x20consumes\x20a\x20caller-submitted\x20Order\x20address\x20MUST\x20bind\x20it\x20to\x20this\x20project\x20(logic_equal[order.service,\x20<this\x20service>])\x20—\x20otherwise\x20a\x20cross-project\x20Order\x20passes\x20the\x20time-lock\x20for\x20a\x20fresh\x20order\x20(R-C3-05;\x20verified\x20by\x20guard-advice\x20HIGH\x20on\x20the\x20unbound\x20pattern)','commission_rate_bps\x20is\x200\x20and\x20is\x20NOT\x20a\x20placeholder\x20to\x20be\x20filled\x20in:\x20WoWok\x20extracts\x20nothing.\x20For\x20reference\x20only,\x20the\x20incumbent\x20marketplace\x27s\x20freelancer\x20Service\x20Fee\x20is\x200-15%\x20variable\x20per\x20contract\x20(its\x20catalog\x20historically\x2010%)\x20and\x20the\x20client\x20additionally\x20pays\x20a\x20marketplace\x20fee\x20(up\x20to\x207.99%)\x20plus\x20a\x20one-time\x20contract\x20initiation\x20fee\x20that\x20WoWok\x20order_allocators\x20cannot\x20express\x20(order-fund\x20splits\x20only)\x20—\x20those\x20are\x20the\x20numbers\x20this\x20template\x20exists\x20to\x20eliminate.\x20If\x20the\x20talent\x20agency\x20itself\x20wants\x20a\x20placement\x20fee,\x20price\x20it\x20as\x20its\x20own\x20product\x20line\x20(an\x20explicit\x20order),\x20not\x20as\x20a\x20silent\x20share\x20of\x20a\x20candidate\x27s\x20rate.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','The\x20incumbent\x27s\x20catalog\x20orders\x20have\x20NO\x20milestones\x20—\x20this\x20template\x20models\x20the\x20incumbent\x27s\x20fixed-price\x20CONTRACTS.\x20For\x20catalog-style\x20listings\x20(tiers\x20+\x20add-ons\x20+\x20buyer\x20requirements\x20+\x20single\x20funded\x20order)\x20use\x20the\x20freelance/catalog-tiers\x20template\x20instead','fee_params\x20keep\x20the\x20incumbent\x27s\x20benchmark\x20values\x20(commission\x201540\x20bps,\x20arbitration\x20fee\x20$337.5)\x20as\x20the\x20replication\x20reference;\x20the\x20wowok-recommended\x20defaults\x20are\x200%\x20commission\x20and\x20a\x20near-zero\x20arbitration\x20fee\x20—\x20set\x20both\x20at\x20generation\x20time\x20via\x20fee_overrides','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'escrow_release_days':0xe,'dispute_timeout_days':0x7,'arbitration_fee_usd':337.5,'revision_rounds_max':0x2,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'acceptance_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20LAST\x20delivery\x20ENTRY\x20timestamp\x20(a\x20re-delivery\x20appends\x20a\x20fresh\x20entry\x20and\x20naturally\x20resets\x20it);\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','dispute_timeout':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard)'},'trust_mechanisms':['R1\x20dual-track\x20refund:\x20pre-work\x20cancellation\x20Allocator\x20+\x20arbitration-ruled\x20refund','R2\x20independent\x20arbitration\x20Permission\x20enforced\x20by\x20contract\x20assertion','R3\x20compensation\x20fund\x20required\x20before\x20publish\x20whenever\x20the\x20fund\x20is\x20non-zero','R4\x20acceptance\x20gate:\x20client\x20signature\x20or\x20timeout\x20—\x20freelancer\x20can\x20never\x20self-accept','R5\x20order-anchored\x20refund\x20recipient\x20(anti-hijack)','R6\x20Rate\x20sums\x20=\x2010000\x20on\x20every\x20allocator','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x2014-day\x20auto-accept\x20and\x207-day\x20dispute\x20timeout','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration'],'keeper_dependencies':['14-day\x20acceptance\x20timeout\x20auto-advance','7-day\x20dispute\x20response\x20timeout','arbitration\x20ruling\x20execution\x20(refund\x20path)'],'recommended_role':'supplier','role_rationale':'Freelancers\x20fulfill\x20client\x20demand\x20(demand/sub-order\x20takers\x20in\x20WoWok\x20terms);\x20the\x20marketplace-operator\x20variant\x20flips\x20the\x20role\x20to\x20merchant.','differences':['Commission-based\x20revenue\x20(floating\x20take,\x20capped\x20at\x201540\x20bps)\x20versus\x20the\x20zero-commission\x20variant\x27s\x20fixed\x20contract\x20fee','14-day\x20acceptance\x20timeout\x20keeper\x20unblocks\x20freelancer\x20payment\x20when\x20the\x20client\x20never\x20accepts','Milestones\x20=\x20chained\x20Orders\x20each\x20with\x20an\x20independent\x20Allocation;\x20leftover\x20balance\x20recharges\x20into\x20the\x20next\x20Order\x20pool'],'user_inputs':['commission_rate_bps\x20—\x20KEEP\x20AT\x200.\x20The\x20incumbent\x27s\x2015.4%\x20take\x20is\x20the\x20benchmark\x20being\x20displaced,\x20not\x20a\x20default.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','escrow_release_days\x20—\x20the\x20acceptance\x20timeout\x20window','dispute_timeout_days\x20—\x20dispute\x20response\x20timeout\x20(keeper-enforced\x20over\x20the\x20Arbitration\x20case)','revision_rounds_max\x20—\x20revision\x20loop\x20cap\x20(counted\x20off-chain)','arbitration_fee_usd\x20—\x20the\x20Arbitration\x20filing\x20fee\x20(benchmark\x20$337.5\x20=\x20incumbent\x27s\x20real\x20fee;\x20wowok\x20recommends\x20near-zero\x20to\x20cover\x20the\x20small-dispute\x20tail)']},{'id':'freelance/catalog-tiers','industry':'freelance','variant':'catalog-tiers','product_ref':'upwork-catalog','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'in_progress','role':'Entry\x20pair:\x20buyer\x20submits\x20requirement\x20answers\x20(incumbent:\x20delivery\x20clock\x20starts\x20at\x20requirement\x20submission);\x20also\x20revision\x20restart\x20and\x20decline-refund\x20return\x20target','semantic_role':'active','from':[{'prev':''},{'prev':'revision_requested'},{'prev':'refund_requested'},{'prev':'cancel_requested'}]},{'name':'delivered','role':'Submit\x20Work\x20—\x20deliverable\x20WIP\x20hash\x20retained\x20into\x20progress\x20history\x20as\x20evidence','semantic_role':'delivered','from':[{'prev':'in_progress','guard_key':'deliver_work'},{'prev':'refund_requested'}]},{'name':'accepted','role':'Approve\x20&\x20Pay\x20(buyer\x20signature)\x20OR\x2014-day\x20auto-accept\x20timeout\x20—\x20competing\x20forwards\x20within\x20ONE\x20pair\x20(same\x20prev_node\x20pairs\x20abort\x20E_DUPLICATE_NODE_PREV).\x20DISTINCT\x20forward\x20names\x20are\x20MANDATORY:\x20sibling\x20forwards\x20sharing\x20a\x20prev\x20default\x20to\x20the\x20same\x20<prev>_to_<node>\x20name\x20and\x20abort\x20E_DUPLICATE_FORWARD_NAME\x20(6)\x20at\x20publish\x20(audit-261012\x20B1)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'AcceptByBuyer','operator':'order_payer'},{'prev':'delivered','forward':'AutoAcceptByKeeper','permission_index':0x3e8,'guard_key':'accept_timeout'}]},{'name':'reviewed','role':'Buyer\x20reviews\x20the\x20delivered\x20tier\x20work\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM\x20—\x20row\x20policy\x20is\x20single-typed,\x20so\x20each\x20review\x20event\x20writes\x20TWO\x20rows\x20keyed\x20to\x20the\x20same\x20order:\x20a\x20U256\x20rating\x20row\x201-5,\x20the\x20range-queryable\x20column\x20via\x20keys_where\x20numeric\x20Range,\x20plus\x20a\x20String\x20comment\x20row,\x20presence-queryable;\x20review\x20text\x20lives\x20on-chain\x20as\x20its\x20own\x20row,\x20never\x20in\x20progress\x20history\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'accepted','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Final:\x20seller\x20withdraws;\x20settlement\x20Allocator\x20splits\x20payout\x20(platform\x20fee\x20as\x20a\x20Rate\x20row)','semantic_role':'final','from':[{'prev':'accepted'},{'prev':'reviewed','forward':'CompleteAfterReview'}]},{'name':'wonder','role':'Post-settlement\x20POSITIVE\x20feedback\x20(wonder\x20convention,\x20v70\x20adoption\x20of\x20upw-mn-261014):\x20buyer-only\x20advance\x20off\x20the\x20settled\x20terminal\x20—\x20the\x20pool\x20is\x20empty\x20here\x20(the\x20settlement\x20Allocator\x20drained\x20the\x20full\x20escrow\x20at\x20completed),\x20so\x20the\x20review-credential\x20ordering\x20trap\x20(F-40:\x20press-forward-first\x20kills\x20the\x20pre-settlement\x20write\x20credential)\x20structurally\x20cannot\x20strand\x20feedback.\x20First-wins\x20competing\x20pair\x20with\x20no_wonder:\x20one\x20rating\x20per\x20order.\x20Optional\x20pure\x20side\x20action\x20—\x20completion\x20never\x20routes\x20through\x20it\x20and\x20it\x20gates\x20no\x20money.\x20Praise-gated\x20bounties\x20may\x20anchor\x20a\x20claim\x20guard\x20on\x20progress.current\x20==\x20\x27wonder\x27\x20(NAMING\x20CONVENTION\x20—\x20no\x20chain\x20primitive;\x20queryable\x20via\x20Progress.current\x20and\x20Progress.history)','operator':'order_payer','optional':!![],'semantic_role':'delivered','from':[{'prev':'completed','forward':'Praise'}]},{'name':'no_wonder','role':'Post-settlement\x20NEGATIVE\x20feedback\x20(wonder\x20convention):\x20buyer\x20signals\x20dissatisfaction;\x20the\x20node\x20transition\x20itself\x20is\x20the\x20on-chain\x20negative\x20signal,\x20queryable\x20in\x20Progress.history\x20(F-50\x20structural\x20fix\x20—\x20a\x20suppressed\x20low\x20rating\x20still\x20leaves\x20a\x20reachable\x20record).\x20First-wins\x20with\x20Praise:\x20one\x20rating\x20per\x20order.\x20Optional\x20pure\x20side\x20action\x20—\x20gates\x20no\x20money\x20(pool\x20is\x20empty:\x20the\x20settlement\x20rail\x20drained\x20the\x20full\x20escrow\x20at\x20completed\x20before\x20any\x20advance\x20off\x20it)','operator':'order_payer','optional':!![],'semantic_role':'delivered','from':[{'prev':'completed','forward':'Complain'}]},{'name':'revision_requested','role':'Buyer\x20requests\x20revision\x20—\x20blocks\x20payment\x20until\x20redelivery;\x20each\x20redelivery\x20restarts\x20the\x20review\x20window','operator':'order_payer','semantic_role':'active','from':[{'prev':'delivered','operator':'order_payer'}]},{'name':'refund_requested','role':'Buyer\x20refund\x20request\x20(post-delivery\x20or\x20in-progress)\x20—\x20seller\x20grants\x20(closed_cancel)\x20or\x20declines\x20(back\x20to\x20delivered/in_progress)','operator':'order_payer','semantic_role':'draft','from':[{'prev':'in_progress','operator':'order_payer'},{'prev':'delivered','operator':'order_payer'}]},{'name':'cancel_requested','role':'Buyer\x20cancel\x20request\x20while\x20in\x20progress\x20—\x20seller\x20approves\x20/\x20declines\x20/\x20ignores\x20(timeout)','operator':'order_payer','semantic_role':'draft','from':[{'prev':'in_progress','operator':'order_payer'}]},{'name':'closed_cancel','role':'Terminal\x20for\x20ALL\x20refund\x20routes\x20(instant\x20<24h\x20cancel,\x20seller\x20grant,\x20auto-cancel\x20timeouts,\x20seller-initiated\x20cancel)\x20—\x20100%\x20order-anchored\x20refund\x20Allocator.\x20The\x20two\x20in_progress\x20entries\x20are\x20DISTINCT\x20forwards:\x20buyer\x20InstantCancel\x20(inside\x20the\x2024h\x20window)\x20and\x20keeper\x20RequirementsTimeout\x20(after\x2048h)\x20—\x20sibling\x20forwards\x20sharing\x20a\x20prev\x20MUST\x20carry\x20distinct\x20explicit\x20forward\x20names\x20(E_DUPLICATE_FORWARD_NAME,\x20audit-261012\x20B1)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'in_progress','forward':'InstantCancel','operator':'order_payer','guard_key':'instant_cancel_24h'},{'prev':'in_progress','forward':'RequirementsTimeout','permission_index':0x3e8,'guard_key':'requirements_timeout_48h'},{'prev':'refund_requested'},{'prev':'cancel_requested'}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20self-purchase\x20/\x20self-review\x20farming\x20(Passport-gated\x20purchase\x20once\x20set)\x20—\x20without\x20it\x20the\x20merchant\x20can\x20buy\x20their\x20own\x20listing,\x20review\x20it,\x20and\x20claim\x20the\x20review\x20reward\x20pool\x20(audit-261012\x20B2)'},{'template_id':'pattern.repository_data_check','host':'machine','key':'deliver_work','purpose':'deliver_work\x20guard\x20bound\x20to\x20the\x20in_progress->delivered\x20edge:\x20submitted\x20deliverable\x20WIP\x20hash\x20must\x20be\x20non-empty;\x20retained_submission\x20persists\x20it\x20into\x20progress\x20history\x20(submit-work\x20evidence\x20for\x20disputes).\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20—\x20a\x20GuardSpec\x20without\x20an\x20edge\x20guard_key\x20is\x20never\x20collected\x20into\x20the\x20build\x20(audit-261012\x20B3)'},{'template_id':'pattern.deadline_window','host':'machine','key':'instant_cancel_24h','purpose':'InstantCancel\x20buyer\x20edge\x20(in_progress->closed_cancel):\x20Clock\x20<=\x20order.time\x20+\x2024h\x20(UPPER-BOUND\x20deadline\x20window,\x20project-bound\x20via\x20order.service\x20==\x20<service>)\x20—\x20the\x20no-questions-asked\x20cancel\x20window;\x20after\x2024h\x20the\x20refund-request\x20flow\x20applies'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'requirements_timeout_48h','purpose':'RequirementsTimeout\x20keeper\x20edge\x20(in_progress->closed_cancel):\x20Clock\x20>=\x20order.time\x20+\x20requirements_timeout_hours\x20auto-cancel\x20(fee_param,\x20incumbent:\x2048h)\x20+\x20full\x20refund\x20when\x20the\x20buyer\x20never\x20submits\x20requirements;\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05);\x20operator\x20is\x20a\x20service-admin\x20permission\x20index\x20(1000)\x20acting\x20as\x20keeper'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'accept_timeout','purpose':'Auto-accept\x20bound\x20to\x20the\x20AutoAcceptByKeeper\x20edge\x20(delivered->accepted):\x20Clock\x20>=\x20progress.history.time\x20+\x20escrow_release_days\x20(fee_param\x20—\x20the\x20buyer-silence\x20window\x20after\x20delivery,\x20incumbent:\x2014\x20days);\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05);\x20operator\x20is\x20a\x20service-admin\x20permission\x20index\x20(1000)\x20acting\x20as\x20keeper'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Buyer\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20of\x20acceptance\x20(fee_param,\x20incumbent:\x2014),\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20escrow\x20always\x20keeps\x20the\x20unreviewed\x20path\x20accepted\x20->\x20completed.\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_gate','purpose':'Single-shot\x20settlement\x20allocator\x20gate\x20(KLM-C:\x20one-shot\x20per-order\x20escrow\x20settles\x20via\x20the\x20CHAIN-DERIVED\x20protocol-254\x20once\x20key\x20—\x20the\x20old\x20255+history-count\x20key\x20is\x20publicly\x20computable\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20locks\x20the\x20rail,\x20mainnet\x20KL-LIVE-01\x20261014):\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20declared\x20254\x20Address\x20submission\x20slot\x20(once\x20key\x20=\x20bcs(payment_info.for_object),\x20replay\x20aborts\x2016).\x20The\x20kernel\x20injects\x20service_name\x20=\x20the\x20plan\x27s\x20service\x20name;\x20the\x20node\x20leg\x20is\x20a\x20SET:\x20settle_node\x20defaults\x20to\x20\x27completed\x27\x20and\x20settle_node_alt/alt2\x20DEFAULT\x20TO\x20THE\x20SAME\x20VALUE\x20(tautology\x20legs\x20—\x20a\x20default\x20never\x20introduces\x20a\x20new\x20dead\x20literal);\x20fill\x20alt/alt2\x20with\x20THIS\x20machine\x27s\x20post-settlement\x20side\x20nodes\x20(wonder/no_wonder\x20convention)\x20so\x20a\x20praise/complain\x20advance\x20off\x20completed\x20cannot\x20seal\x20the\x20escrow\x20(CAT-C1,\x20upwc-cat-261017\x20live:\x200.5\x20WOW\x20stranded\x20when\x20Praise\x20moved\x20the\x20order\x20off\x20completed\x20before\x20settlement\x20fired)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate\x20(pending\x20judgment):\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool;\x20blocks\x20refund\x20once\x20an\x20award\x20ACTUALLY\x20paid;\x20the\x20paired\x20recover_gate\x20leg\x20keeps\x20the\x20awarded\x20escrow\x20exiting).\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017:\x20the\x20old\x20prose\x20claimed\x20\x27signer\x20==\x20order.owner\x20(anti-hijack\x20R5)\x27\x20but\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter\x20—\x20audit\x20against\x20the\x20encoded\x20THREE\x20legs,\x20never\x20the\x20old\x20text);\x20anti-hijack\x20is\x20STRUCTURAL:\x20the\x20GuardIdentifier(0)\x20order-anchored\x20recipient\x20lands\x20funds\x20ON\x20the\x20Order\x20and\x20only\x20the\x20owner\x20can\x20receive\x20them;\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20(add\x20it\x20inline\x20only\x20if\x20you\x20also\x20declare\x20its\x20slot).\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2\x20—\x20the\x20b9-261015\x20\x27FULL-SET\x20node\x20gate\x27\x20is\x20REMOVED:\x20the\x20encoded\x20legs\x20are\x20claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20ONLY,\x20deliberately\x20NO\x20node\x20equality\x20leg):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding.\x20Why\x20no\x20node\x20gate:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20(upw-mn-261014\x20F-51:\x20a\x20delivered-pinned\x20rail\x20aborted\x207\x20after\x20the\x20auto-accept\x20keeper\x20moved\x20the\x20order\x20on;\x20upwc-cat-261017\x20CAT-C2\x20live:\x20a\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20after\x20the\x20award\x20paid),\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20already\x20carries\x20the\x20mutual\x20exclusion\x20vs\x20refund_gate\x20(exactly\x20one\x20polarity\x20can\x20pass,\x20D-BUG-2)\x20—\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail\x20and\x20strands\x20the\x20escrow.\x20Pays\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','count':0x3,'mode':'rate','refund_track':'order_anchored','description':'On\x20completed:\x20Rate\x2010000\x20to\x20the\x20freelancer\x27s\x20Entity.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20The\x20incumbent\x27s\x2010%\x20catalog\x20fee\x20is\x20the\x20number\x20being\x20displaced,\x20not\x20a\x20parameter\x20to\x20tune.\x20on\x20closed_cancel:\x20full\x20refund\x20Rate\x2010000\x20via\x20order-anchored\x20recipient\x20—\x20the\x20buyer\x20then\x20claims\x20via\x20order\x20receive\x20(two-step\x20refund\x20flow)','rows':[{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'settle_gate','note':'0%\x20commission.\x20The\x20incumbent\x2010%\x20catalog\x20fee\x20is\x20displaced\x20BY\x20DESIGN,\x20not\x20a\x20parameter\x20to\x20tune.\x20Explicit\x20non-empty\x20Entity\x20is\x20mandatory:\x20an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently.\x20Binds\x20the\x20settle_gate\x20guard\x20(auto-filled\x20from\x20tpl_allocator_node_gate_settle_once:\x20node\x20gate\x20+\x20order.service\x20binding\x20+\x20chain-derived\x20254\x20once\x20—\x20KLM-C).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_gate','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20submitted\x20ORDER\x20the\x20settlement\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20settle_gate\x20key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20freelancer\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20100%\x20refund.\x20The\x20refund_gate\x20guard\x20must\x20assert\x20ALL\x20of:\x20order.service\x20binding,\x20progress.current\x20==\x20closed_cancel,\x20claimed_by\x20some\x20==\x20false\x20(signer\x20==\x20order.owner\x20OPTIONAL\x20—\x20trigger-rights\x20only;\x20the\x20GuardIdentifier(0)\x20recipient\x20hard-binds\x20the\x20payee;\x20CAT-B2:\x20not\x20an\x20encoded\x20template\x20leg)\x20(closes\x20the\x20double-recovery\x20path\x20vs\x20arbitration\x20indemnity;\x20blocks\x20only\x20after\x20an\x20award\x20ACTUALLY\x20paid\x20—\x20never\x20gate\x20on\x20dispute\x20count\x20==\x200,\x20that\x20one-way\x20door\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow).\x20The\x20paired\x20recover_gate\x20row\x20is\x20the\x20only\x20other\x20exit\x20once\x20an\x20award\x20paid.'}]},'key_risk':'Buyer\x20never\x20reviews\x20the\x20delivery\x20—\x20the\x2014-day\x20auto-accept\x20path\x20(time\x20Guard\x20+\x20admin/keeper\x20forward)\x20unblocks\x20freelancer\x20payment','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Dual-branch\x20acceptance\x20MUST\x20be\x20two\x20forwards\x20inside\x20ONE\x20pair\x20on\x20\x27accepted\x27\x20(prev_node=delivered):\x20two\x20pairs\x20with\x20the\x20same\x20prev_node\x20abort\x20E_DUPLICATE_NODE_PREV\x20(testnet-verified)','Every\x20Guard\x20consuming\x20a\x20submitted\x20Order\x20address\x20MUST\x20bind\x20it\x20to\x20this\x20project\x20(logic_equal[order.service,\x20<service>])\x20—\x20unbound\x20time-locks\x20are\x20cross-project\x20bypassable\x20(R-C3-05)','Time\x20Guards\x20take\x20an\x20IMMUTABLE\x20duration\x20constant\x20at\x20creation;\x20each\x20window\x20(24h\x20instant-cancel,\x2048h\x20requirements,\x2014-day\x20auto-accept)\x20needs\x20its\x20own\x20Guard\x20+\x20an\x20off-chain\x20keeper\x20submitting\x20the\x20forward\x20after\x20expiry\x20(R9)','The\x20incumbent\x27s\x20fee\x20structure:\x20freelancer\x20pays\x200-15%\x20variable\x20(catalog\x20historically\x2010%);\x20the\x20CLIENT\x20also\x20pays\x20a\x20marketplace\x20fee\x20+\x20one-time\x20initiation\x20fee\x20that\x20order_allocators\x20cannot\x20express\x20—\x20document\x20client-side\x20fees\x20off-chain\x20or\x20via\x20a\x20separate\x20Payment','Arbitration\x20venue\x20readiness\x20(role\x20boundary):\x20the\x20venue\x20is\x20an\x20independent\x20role\x20—\x20its\x20internal\x20permission/voting\x20setup\x20and\x20its\x20unpause\x20belong\x20to\x20the\x20ARBITRATOR\x20on\x20their\x20own\x20objects,\x20never\x20to\x20this\x20build.\x20Your\x20duty\x20is\x20selection:\x20bind\x20only\x20a\x20venue\x20already\x20operational\x20(unpaused,\x20voting\x20armed)\x20—\x20a\x20fresh\x20Arbitration\x20ships\x20paused\x20with\x20zero\x20grants,\x20and\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20filing\x20with\x20E_PAUSED\x20(the\x20MCP\x20pre-publish\x20scan\x20hard-blocks\x20binding\x20a\x20paused\x20venue)','The\x20incumbent\x27s\x2024h\x20instant\x20cancel\x20=\x20buyer-side\x20forward\x20from\x20the\x20entry\x20pair\x20guarded\x20by\x20Clock\x20<=\x20order\x20time\x20+\x2024h\x20(PROJECT-BOUND);\x20after\x2024h\x20the\x20refund-request\x20flow\x20applies','Arbitration\x20indemnity\x20pays\x20from\x20the\x20compensation\x20fund\x20and\x20does\x20NOT\x20claw\x20back\x20settled\x20escrow\x20—\x20bind\x20the\x20settlement\x20allocator\x20to\x20a\x20no-open-dispute\x20condition\x20(pattern.arb_status_escrow_holdback)\x20before\x20publish','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20pairing\x20is\x20DECLARED\x20STRUCTURALLY\x20in\x20the\x20rows\x20—\x20the\x20refund\x20row\x20binds\x20guard_key\x20refund_gate\x20(order.claimed_by\x20some\x20==\x20false,\x20query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20and\x20the\x20recovery\x20row\x20binds\x20guard_key\x20recover_gate\x20(order.claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity),\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits.\x20Both\x20gates\x20arrive\x20PENDING\x20judgment\x20designs:\x20resolve\x20them\x20via\x20guide_confirm.guard_resolutions\x20(the\x20guide\x20lists\x20suggested\x20templates\x20and\x20parameters).\x20Exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','Buyer\x20requirements\x20(customer_required\x20labels)\x20are\x20delivered\x20via\x20the\x20Service\x27s\x20Contact\x20over\x20Messenger;\x20record\x20either\x20the\x20merchant\x27s\x20IM\x20user\x20address\x20(resolved\x20from\x20that\x20Contact,\x20zero\x20cost)\x20or\x20an\x20on-chain\x20WTS\x20Proof\x20address\x20(embeds\x20the\x20IM\x20address\x20+\x20last-message\x20timestamp;\x20costs\x20gas)\x20as\x20order_required_info.\x20Enforcement\x20is\x20yours\x20to\x20add:\x20declaring\x20the\x20labels\x20alone\x20does\x20not\x20block\x20the\x20order\x20(the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20customer_required)\x20—\x20bind\x20pattern.required_info_evidence_gate\x20on\x20the\x20first\x20seller-side\x20forward.\x20QUOTA\x20COUPLING:\x20the\x20buyer\x27s\x20required-info\x20message\x20shares\x20the\x20SINGLE\x20stranger-message\x20quota\x20—\x20if\x20the\x20quota\x20is\x20spent,\x20the\x20info\x20cannot\x20be\x20delivered;\x20make\x20the\x20FIRST\x20pre-order\x20message\x20the\x20required_info,\x20or\x20have\x20the\x20seller\x20respond\x20first\x20to\x20open\x20the\x20conversation','WIP\x20LISTING\x20MECHANICS:\x20tiered\x20sales\x20items\x20share\x20one\x20WIP\x20listing\x20—\x20rebinding\x20has\x20NO\x20per-item\x20op:\x20sales\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend;\x20stock\x20values\x20are\x20ABSOLUTE,\x20not\x20deltas;\x20removal\x20is\x20immediate\x20and\x20irreversible)\x20or\x20op:add\x20creates\x20a\x20NEW\x20SKU;\x20a\x20buyer\x20leaving\x20wip_hash\x20empty\x20auto-fills\x20from\x20the\x20listing\x20at\x20purchase\x20with\x20on-chain\x20verification,\x20while\x20an\x20explicit\x20hash\x20pins\x20the\x20purchase-time\x20file','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'escrow_release_days':0xe,'instant_cancel_hours':0x18,'requirements_timeout_hours':0x30,'review_window_days':0xe,'revision_rounds_max':'unlimited','review_reward_pool':0x64,'reward_claim_window_days':0xe},'trust_mechanisms':['R1\x20dual-track\x20refund:\x20pre-work\x20cancellation\x20Allocator\x20+\x20arbitration-ruled\x20refund','R2\x20independent\x20arbitration\x20Permission\x20(E_ARBITRATION_PERMISSION_CONFLICT\x20enforced)','R3\x20compensation\x20fund\x20for\x20arbitration\x20indemnity\x20(declare\x20a\x20no-open-dispute\x20holdback\x20on\x20settlement)','R4\x20acceptance\x20gate:\x20buyer\x20signature\x20or\x20time-guarded\x20auto-accept\x20—\x20seller\x20can\x20never\x20self-accept','R5\x20order-anchored\x20refund\x20recipient\x20(anti-hijack)\x20with\x20signer==order.owner\x20guard','R6\x20Rate\x20sums\x20=\x2010000\x20on\x20every\x20allocator','R7\x20publish\x20freeze\x20—\x20machine\x20+\x20order_allocators\x20set\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound\x20(customer_required\x20delivery\x20channel)','R9\x20keepers:\x2024h\x20instant-cancel\x20expiry,\x2048h\x20requirements\x20timeout,\x2014-day\x20auto-accept,\x20seller\x20non-response\x20auto-cancel','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration','REVISION\x20CAP\x20IS\x20NOT\x20A\x20CONTRACT\x20MECHANISM:\x20the\x20revision\x20loop\x20carries\x20no\x20counter.\x20progress.move\x20bounds\x20EDGE\x20count\x20(MAX_FORWARD\x20/\x20MAX_NODE_PAIR),\x20never\x20visit\x20count,\x20so\x20a\x20revision\x20cycle\x20can\x20be\x20entered\x20any\x20number\x20of\x20times.\x20If\x20a\x20listing\x20advertises\x20a\x20finite\x20revision\x20cap,\x20the\x20cap\x20must\x20be\x20enforced\x20by\x20a\x20counter-backed\x20Guard\x20or\x20entirely\x20off-chain\x20—\x20writing\x20it\x20in\x20fee_params\x20alone\x20enforces\x20nothing.\x20This\x20template\x20declares\x20\x27unlimited\x27\x20because\x20that\x20is\x20both\x20the\x20real\x20catalog\x27s\x20policy\x20and\x20the\x20only\x20thing\x20the\x20current\x20contract\x20shape\x20can\x20honour.'],'keeper_dependencies':['48h\x20requirements\x20timeout\x20auto-cancel\x20(entry\x20pair,\x20time-guarded)','14-day\x20acceptance\x20timeout\x20auto-advance\x20(delivered\x20->\x20accepted)','seller\x20non-response\x20auto-cancel\x20after\x20a\x20cancel/refund\x20request'],'recommended_role':'supplier','role_rationale':'Freelancers\x20publish\x20catalog\x20listings\x20and\x20fulfill\x20orders;\x20the\x20marketplace-operator\x20variant\x20flips\x20the\x20role\x20to\x20merchant.','differences':['NO\x20milestones\x20—\x20single\x20funded\x20order\x20per\x20catalog\x20purchase\x20(incumbent\x20catalog\x20semantics),\x20unlike\x20the\x20sibling\x20enterprise-talent-market\x20template\x27s\x20milestone-chained\x20Orders','Tiered\x20pricing\x20+\x20add-ons\x20are\x20separate\x20Service\x20sales\x20items\x20sharing\x20one\x20WIP\x20listing;\x20buyer\x20requirements\x20map\x20to\x20customer_required\x20labels','Instant\x20<24h\x20cancel\x20and\x2048h\x20requirements\x20timeout\x20are\x20first-class\x20guarded\x20forwards,\x20not\x20off-chain\x20policy'],'user_inputs':['commission_rate_bps\x20—\x20KEEP\x20AT\x200\x20(the\x20incumbent\x20catalog\x20reference\x20is\x201000,\x20displaced\x20by\x20design).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','escrow_release_days\x20—\x20buyer-silence\x20window\x20after\x20delivery\x20before\x20the\x20keeper\x20auto-accepts\x20(incumbent:\x2014;\x20NOT\x20the\x20review\x20window)','instant_cancel_hours\x20—\x20no-questions-asked\x20cancel\x20window\x20(incumbent:\x2024)','requirements_timeout_hours\x20—\x20auto-cancel\x20when\x20the\x20buyer\x20never\x20submits\x20requirements\x20(incumbent:\x2048)','review_window_days\x20—\x20buyer\x20review\x20window\x20after\x20ACCEPTANCE\x20(incumbent:\x2014;\x20F-54:\x20this\x20knob\x20was\x20previously\x20an\x20inline\x20literal\x20in\x20the\x20review_window\x20guard\x20purpose\x20only)','revision_rounds_max\x20—\x20KEEP\x20AT\x20\x27unlimited\x27.\x20This\x20matches\x20the\x20real\x20catalog\x20(predominantly\x20Unlimited\x20Revisions\x20across\x20all\x20tiers)\x20and,\x20more\x20importantly,\x20it\x20matches\x20what\x20the\x20contract\x20can\x20enforce:\x20the\x20revision\x20loop\x20has\x20no\x20visit\x20counter,\x20so\x20a\x20finite\x20cap\x20here\x20would\x20be\x20a\x20promise\x20the\x20chain\x20cannot\x20keep.\x20Do\x20not\x20lower\x20it\x20unless\x20you\x20ALSO\x20add\x20a\x20counter-backed\x20Guard.'],'time_anchors':{'24h\x20instant\x20cancel':'order.time\x20(PRE-checkout\x20branch:\x20entry\x20pair\x20only)','48h\x20requirements\x20timeout':'order.time\x20(entry\x20pair\x20only)','14-day\x20auto-accept':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last;\x20a\x20redelivery\x20appends\x20a\x20fresh\x20entry\x20and\x20resets\x20the\x20window)','review\x20window':'progress.history.time\x20(id\x201280,\x20next_node=\x27accepted\x27,\x20find=last)\x20acceptance\x20ENTRY\x20timestamp\x20—\x20CLOSING\x20window\x20(upper\x20bound,\x20review_window_days;\x20F-54:\x20this\x20anchor\x20was\x20missing\x20so\x20the\x20review\x20leg\x20had\x20no\x20declared\x20time\x20source);\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','seller\x20non-response\x20auto-cancel':'progress.history.time\x20(id\x201280,\x20next_node=\x27cancel_requested\x27,\x20find=last)'}},{'id':'freelance/creator-zero-commission','industry':'freelance','variant':'creator-zero-commission','product_ref':'contra','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'listed','role':'Entry:\x20service\x20listed\x20(portfolio\x20Repository\x20attached,\x20public\x20URLs\x20only)','semantic_role':'draft','from':['']},{'name':'contacted','role':'Client\x20initiates\x20contact\x20—\x20negotiation\x20happens\x20on-Machine','operator':'order_payer','semantic_role':'draft','from':['listed']},{'name':'ordered','role':'Contract\x20signed\x20and\x20project\x20funds\x20escrowed','semantic_role':'draft','from':['contacted']},{'name':'in_progress','role':'Freelancer\x20accepts\x20(permission\x20slot)\x20and\x20works','semantic_role':'active','from':['ordered']},{'name':'delivered','role':'Deliverable\x20submitted\x20with\x20WIP\x20hash\x20evidence\x20(recommended).\x20TWO\x20inbound\x20NodePairs\x20are\x20MANDATORY\x20for\x20the\x20revision\x20loop:\x20{prev\x20in_progress,\x20forward\x20Deliver}\x20AND\x20{prev\x20revising,\x20forward\x20Deliver}\x20—\x20the\x20chain\x20allows\x20ONE\x20NodePair\x20per\x20(node,\x20prev_node)\x20and\x20machines\x20are\x20immutable\x20after\x20publish\x20(ctra-mn-261019\x20F-02);\x20without\x20the\x20second\x20pair\x20an\x20order\x20sent\x20to\x20revising\x20can\x20never\x20re-deliver\x20and\x20the\x20only\x20exits\x20become\x20full-refund\x20cancel\x20or\x20dispute','semantic_role':'delivered','from':[{'prev':'in_progress','forward':'Deliver'},{'prev':'revising','forward':'Deliver'}]},{'name':'revising','role':'Defect-report\x20remedy\x20node\x20—\x20the\x20client\x20reports\x20a\x20defect\x20within\x20defect_report_window_hours\x20of\x20the\x20LAST\x20delivery\x20ENTRY\x20and\x20the\x20freelancer\x20re-works;\x20the\x20ONLY\x20way\x20out\x20is\x20the\x20re-entry\x20pair\x20on\x20delivered\x20(Deliver\x20from\x20revising).\x20A\x20remedy\x20node\x20needs\x20either\x20an\x20inbound\x20re-entry\x20pair\x20or\x20an\x20outbound\x20path\x20to\x20a\x20settlement\x20terminal\x20—\x20a\x20stranded\x20remedy\x20node\x20bricks\x20the\x20order\x20(ctra-mn-261019\x20F-02)','operator':'order_payer','semantic_role':'active','from':[{'prev':'delivered','forward':'ReportDefect','guard_key':'defect_report_window'}]},{'name':'accepted','role':'Client\x20confirms\x20—\x20manual\x20signature\x20OR\x20acceptance-timeout\x20(acceptance_timeout_hours,\x20dual-branch\x20guard).\x20DISTINCT\x20forward\x20names\x20are\x20MANDATORY:\x20sibling\x20forwards\x20sharing\x20a\x20prev\x20default\x20to\x20the\x20same\x20<prev>_to_<node>\x20name\x20and\x20abort\x20E_DUPLICATE_FORWARD_NAME\x20(6)\x20at\x20publish\x20(audit-261012\x20B1)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'AcceptByBuyer','operator':'order_payer'},{'prev':'delivered','forward':'AutoAcceptByKeeper','permission_index':0x3e8,'guard_key':'accept_timeout'}]},{'name':'reviewed','role':'Client\x20reviews\x20the\x20delivered\x20work\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM\x20—\x20row\x20policy\x20is\x20single-typed,\x20so\x20each\x20review\x20event\x20writes\x20TWO\x20rows\x20keyed\x20to\x20the\x20same\x20order:\x20a\x20U256\x20rating\x20row\x201-5,\x20the\x20range-queryable\x20column\x20via\x20keys_where\x20numeric\x20Range,\x20plus\x20a\x20String\x20comment\x20row,\x20presence-queryable;\x20review\x20text\x20lives\x20on-chain\x20as\x20its\x20own\x20row,\x20never\x20in\x20progress\x20history\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'accepted','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Freelancer\x20withdraws\x20(triple-check\x20withdraw\x20guard)\x20—\x20fixed\x20fee\x20deducted,\x20remainder\x20to\x20freelancer','semantic_role':'final','from':['accepted',{'prev':'reviewed','forward':'CompleteAfterReview'}]},{'name':'closed_cancel','role':'Pre-work\x20cancellation\x20only\x20—\x20refund\x20Allocator\x20to\x20client;\x20post-delivery\x20disputes\x20route\x20to\x20Arbitration\x20(NOT\x20this\x20node)\x20so\x20refund\x20and\x20ruling\x20payouts\x20never\x20double-pay\x20(D-BUG-2)','operator':'order_payer','semantic_role':'cancelled','from':['listed','contacted','ordered']}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20freelancer\x20self-purchase\x20(Passport-gated\x20purchase\x20once\x20set)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle','purpose':'Settlement\x20gate:\x20progress.current\x20in\x20the\x20settle\x20node\x20set\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2:\x20an\x20awarded\x20order\x20exits\x20via\x20the\x20recovery\x20rail,\x20never\x20also\x20settle;\x20ships\x20IN\x20tpl_allocator_node_gate_settle_once\x27s\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20the\x20chain-derived\x20protocol-254\x20once\x20key\x20(resolve\x20with\x20tpl_allocator_node_gate_settle_once\x20—\x20NO\x20signer\x20leg\x20is\x20encodable,\x20CAT-B2/upwc-cat-261017;\x20the\x20254\x20key\x20+\x20order\x20binding\x20carry\x20the\x20safety,\x20the\x20recipient\x20row\x20names\x20the\x20payee\x20Entity)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund','purpose':'Refund\x20allocator\x20gate:\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20—\x20NODE\x20GATE\x20IS\x20MANDATORY\x20(audit-261012\x20B4;\x20NO\x20signer\x20leg\x20is\x20encoded\x20—\x20CAT-B2/upwc-cat-261017:\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter,\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20since\x20the\x20GuardIdentifier(0)\x20recipient\x20hard-binds\x20the\x20payee):\x20allocation.alloc\x20distributes\x20wherever\x20the\x20guard\x20passes\x20and\x20never\x20reads\x20the\x20node,\x20so\x20an\x20identity-only\x20refund\x20guard\x20lets\x20the\x20buyer\x20drain\x20the\x20escrow\x20the\x20moment\x20they\x20buy\x20(order_payer\x20signature\x20alone\x20is\x20not\x20a\x20gate\x20—\x20the\x20same\x20guard\x20verifies\x20at\x20ANY\x20node).\x20AND\x20no\x20compensation-fund\x20payout\x20has\x20landed\x20yet\x20(guard\x20adds\x20logic_equal[order.claimed_by\x20some,\x20false]\x20via\x20query\x20id\x201570\x20(order.claimed_by\x20some\x20—\x20Bool)\x20—\x20ORDER\x20state\x20only,\x20the\x20guard\x20never\x20reads\x20the\x20case\x20object,\x20so\x20the\x20single\x20Order\x20slot\x20stays\x20valid)\x20so\x20an\x20already-compensated\x20order\x20cannot\x20also\x20drain\x20the\x20refund\x20Allocator\x20(D-BUG-2\x20double-spend).\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg.\x20Do\x20NOT\x20substitute\x20dispute\x20count==0\x20(query\x20id\x201564\x20—\x20order.dispute\x20count):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'accept_timeout','purpose':'Acceptance-timeout\x20keeper\x20edge\x20(delivered->accepted,\x20AutoAcceptByKeeper):\x20Clock\x20>=\x20progress.history.time\x20+\x20acceptance_timeout_hours;\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05);\x20operator\x20is\x20a\x20service-admin\x20permission\x20index\x20(1000)\x20acting\x20as\x20keeper.\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20—\x20an\x20unbound\x20GuardSpec\x20is\x20never\x20collected\x20into\x20the\x20build\x20(audit-261012\x20B3)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'defect_report_window','purpose':'Defect-report\x20deadline\x20(bound\x20to\x20the\x20delivered\x20->\x20revising\x20ReportDefect\x20forward,\x20revision\x20loop\x20ctra-mn-261019\x20F-02):\x20revising\x20entry\x20allowed\x20only\x20WITHIN\x20defect_report_window_hours\x20of\x20the\x20LAST\x20delivery\x20ENTRY,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20next_node=\x27delivered\x27,\x20find=last\x20—\x20a\x20re-delivery\x20appends\x20a\x20fresh\x20entry,\x20so\x20every\x20revision\x20round\x20gets\x20a\x20fresh\x20window\x20(the\x20same\x20reset\x20the\x20acceptance\x20timeout\x20rides).\x20Revision\x20ROUND\x20policy\x20is\x20a\x20build-time\x20business\x20decision,\x20not\x20an\x20on-chain\x20cap:\x20the\x20Machine\x20is\x20immutable\x20after\x20publish,\x20so\x20price\x20extra\x20rounds\x20into\x20the\x20fee\x20or\x20gate\x20re-delivery\x20on\x20an\x20off-chain\x20agreement.\x20The\x20revising\x20->\x20delivered\x20re-entry\x20pair\x20(Deliver)\x20is\x20the\x20ONLY\x20loop-back\x20edge\x20—\x20ONE\x20NodePair\x20per\x20(node,\x20prev_node)\x20on\x20chain;\x20the\x20pair\x20SHIPS\x20in\x20machine_shape\x20so\x20the\x20loop\x20can\x20never\x20strand\x20an\x20order\x20at\x20revising'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Client\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20acceptance,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20escrow\x20always\x20keeps\x20the\x20unreviewed\x20path\x20accepted\x20->\x20completed.\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','count':0x4,'mode':'rate','once_per_order':!![],'refund_track':'order_anchored','description':'0%\x20commission\x20plus\x20the\x20ORCHESTRATOR\x27S\x20OWN\x20tiered\x20contract\x20fee\x20(<=\x20$500\x20->\x20$15,\x20>\x20$500\x20->\x20$29;\x20ctra-mn-261019\x20F-04\x20correction:\x20one\x20Amount\x20row\x20cannot\x20switch\x20per\x20order,\x20but\x20tier\x20GUARDS\x20read\x20the\x20order\x20and\x20select\x20among\x20disjoint\x20self-selecting\x20settlement\x20rails\x20—\x20mutual\x20exclusion\x20lives\x20inside\x20the\x20guards,\x20because\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins:\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20every\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20order,\x20against\x20the\x20shrinking\x20pool,\x20so\x20an\x20unguarded\x20second\x20rail\x20double-pays;\x20resolve\x20tpl_allocator_node_gate_settle_tier_small\x20/\x20_large).\x20This\x20fee\x20is\x20the\x20seller\x27s\x20declared\x20price\x20for\x20handling\x20the\x20contract,\x20not\x20a\x20platform\x20extraction\x20—\x20it\x20must\x20be\x20labelled\x20as\x20such\x20so\x20the\x20pre-order\x20ledger\x20reads\x20it\x20as\x20seller\x20revenue.\x20The\x20three\x20settlement\x20legs\x20share\x20guard_key\x20\x27settle\x27,\x20so\x20they\x20compile\x20into\x20ONE\x20allocator:\x20the\x20contract-fee\x20Amount\x20is\x20deducted\x20first,\x20then\x20the\x20freelancer\x20Rate\x2010000\x20takes\x20the\x20entire\x20net\x20remainder\x20on\x20completed,\x20with\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20binding\x20the\x20submitted\x20ORDER\x20to\x20the\x20settlement\x20Guard\x20(once_per_order=true\x20arms\x20the\x20254\x20replay\x20slot\x20—\x20the\x20rail\x20is\x20one-shot\x20per\x20order\x20by\x20flag,\x20not\x20by\x20balance\x20exhaustion)\x20—\x20there\x20is\x20NO\x20platform\x20Surplus\x20leg\x20(a\x20Surplus\x20row\x20would\x20sweep\x20the\x20pool,\x20R-ECON-02,\x20and\x20this\x20template\x27s\x20model\x20is\x200%\x20commission).\x20Full\x20refund\x20to\x20client\x20(Rate\x2010000\x20via\x20order-anchored\x20recipient)\x20ONLY\x20on\x20cancelled\x20(pre-work)\x20—\x20orders\x20with\x20a\x20PAID-OUT\x20arbitration\x20award\x20are\x20excluded\x20from\x20the\x20refund\x20route\x20(guard\x20requires\x20order.claimed_by\x20some\x20==\x20false);\x20the\x20escrow\x20of\x20an\x20awarded\x20order\x20must\x20instead\x20exit\x20via\x20a\x20merchant-recovery\x20allocator\x20PAIRED\x20at\x20build\x20time\x20(opposite\x20polarity,\x20see\x20build\x20notes),\x20so\x20refund\x20and\x20compensation\x20are\x20never\x20both\x20paid\x20(D-BUG-2).\x20Refund\x20of\x20the\x20orchestrator\x27s\x20own\x20contract\x20fee\x20is\x20a\x20configurable\x20business\x20decision\x20(default:\x20deducted\x20at\x20withdrawal,\x20fully\x20on-chain)\x20—\x20never\x20a\x20platform\x20clawback,\x20because\x20there\x20is\x20no\x20platform\x20share\x20to\x20claw\x20back','rows':[{'track':'settlement','recipient':'entity','recipient_key':'orchestrator','mode':'amount','value_from':'contract_fee_small_usd','guard_key':'settle','note':'Orchestrator\x20contract\x20fee,\x20tiered\x20(<=500\x20->\x2015,\x20>500\x20->\x2029).\x20TIER\x20CORRECTION\x20(ctra-mn-261019\x20F-04,\x20mainnet-proven\x20—\x20replaces\x20the\x20old\x20\x27a\x20single\x20Amount\x20row\x20cannot\x20express\x20a\x20tier,\x20so\x20pick\x20at\x20build\x20time\x27\x20teaching):\x20a\x20single\x20Amount\x20row\x20cannot\x20switch\x20per\x20order,\x20but\x20the\x20GUARD\x20reads\x20the\x20order\x20and\x20selects\x20the\x20rail\x20—\x20ship\x20DISJOINT\x20SELF-SELECTING\x20settlement\x20rails\x20(small:\x20order.amount\x20<=\x20tier\x20AND\x20NOT\x20the\x20item\x20flag;\x20large:\x20order.amount\x20>\x20tier;\x20digital:\x20the\x20order\x27s\x20item\x20carries\x20the\x20flag\x20—\x20query\x201551\x20\x27order.item\x20has\x27),\x20each\x20its\x20own\x20guard_key\x20+\x20allocator,\x20resolving\x20the\x20tier\x20guards\x20with\x20tpl_allocator_node_gate_settle_tier_small\x20/\x20tpl_allocator_node_gate_settle_tier_large;\x20both\x20tiers\x20fired\x20live\x20with\x20per-unit\x20reconciliation\x20exact.\x20Mutual\x20exclusion\x20MUST\x20live\x20INSIDE\x20the\x20guards:\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins\x20—\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20—\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS.\x20This\x20row\x20remains\x20the\x20single-rail\x20fallback\x20form\x20for\x20builds\x20that\x20ship\x20one\x20tier.\x20This\x20is\x20seller\x20revenue\x20for\x20handling\x20the\x20contract,\x20NOT\x20platform\x20extraction\x20-\x20label\x20it\x20so\x20the\x20pre-order\x20ledger\x20reads\x20it\x20as\x20such.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01;\x20audit-261012\x20B7):\x20makes\x20the\x20submitted\x20ORDER\x20the\x20settlement\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20release\x20this\x20escrow\x20—\x20without\x20it,\x20an\x20order\x20sharing\x20this\x20Service\x20can\x20authorize\x20a\x20release\x20against\x20ANOTHER\x20order\x27s\x20escrow.\x20Shares\x20the\x20settle\x20key\x20so\x20all\x20three\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'settle','note':'Freelancer\x20remainder\x20on\x20completed:\x20Rate-10000\x20sweeps\x20the\x20balance\x20remaining\x20after\x20the\x20Amount\x20fee\x20leg\x20(execution\x20follows\x20row\x20order,\x20fee\x20first\x20—\x20same\x20net\x20result\x20as\x20Surplus),\x20in\x20the\x20SAME\x20allocator\x20as\x20the\x20fee\x20leg\x20so\x20the\x20split\x20is\x20atomic.\x20Pairs\x20with\x20the\x20Rate-0\x20anchor\x20row\x20so\x20this\x20allocator\x27s\x20Rate\x20legs\x20sum\x20to\x20exactly\x2010000.\x20RATE-SUM\x20SEMANTICS\x20(C8,\x20allocation.move:344-351)\x20have\x20THREE\x20branches:\x20no\x20Surplus\x20leg\x20->\x20Rate\x20legs\x20must\x20sum\x20to\x20EXACTLY\x2010000\x20(ERATE_NOT_10000;\x20a\x20lone\x20Rate-0\x20anchor\x20cannot\x20register);\x20with\x20a\x20Surplus\x20leg\x20->\x20Rate\x20legs\x20must\x20sum\x20to\x20AT\x20MOST\x2010000\x20(ERATE_EXCEEDS_10000\x20—\x20the\x20Surplus\x20sweeps\x20the\x20remainder);\x20RateGross\x20mode\x20->\x20at\x20most\x2010000\x20plus\x20a\x20per-recipient\x20max\x20cap.\x20This\x20allocator\x20has\x20no\x20Surplus,\x20so\x20the\x20exact-10000\x20branch\x20applies.\x200%\x20commission\x20is\x20the\x20standing\x20model\x20—\x20no\x20platform\x20leg\x20exists.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund','note':'Order-anchored\x20100%\x20refund,\x20cancelled\x20only.\x20The\x20guard\x20MUST\x20require\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20so\x20an\x20order\x20whose\x20arbitration\x20award\x20already\x20paid\x20cannot\x20reach\x20the\x20refund\x20rail\x20(D-BUG-2\x20double-spend)\x20—\x20NEVER\x20dispute\x20count\x20==\x200\x20(query\x20id\x201564):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door).\x20The\x20opposite\x20leg\x20is\x20SHIPPED\x20(recover_gate\x20row\x20—\x20the\x20claimed_by\x20some\x20==\x20true\x20polarity\x20twin).\x20Set\x20this\x20allocator\x27s\x20once_per_order=true\x20and\x20register\x20the\x20{identifier:254,\x20b_submission:true}\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016\x20regardless\x20of\x20the\x20submitted\x20bytes.'},{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20freelancer\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle/refund),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'key_risk':'Platform\x20revenue\x20without\x20commission\x20—\x20the\x20tiered\x20contract\x20fee\x20rides\x20on-chain\x20as\x20disjoint\x20self-selecting\x20settlement\x20rails\x20(tier\x20guards\x20read\x20order.amount,\x20ctra-mn-261019\x20F-04),\x20never\x20off-chain;\x20disputed\x20orders\x20must\x20NOT\x20share\x20the\x20refund\x20Allocator\x20with\x20cancellation\x20(double-spend,\x20D-BUG-2)','build_notes':['ONCE\x20SLOT\x20ARMING\x20+\x20SCOPE\x20(v54,\x20audit-261012\x20B7):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20each\x20allocator\x20Guard\x20(settle\x20+\x20refund)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20payment_info.for_object\x20(the\x20bound\x20Order),\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016\x20regardless\x20of\x20submitted\x20bytes.\x20SCOPE\x20(C10,\x20mainnet-verified):\x20the\x20once\x20key\x20is\x20(guard,\x20allocator\x20leg,\x20bcs(for_object))\x20stored\x20ON\x20the\x20Allocation\x20—\x20the\x20slot\x20is\x20once\x20PER\x20ORDER\x20per\x20allocation,\x20NOT\x20once\x20per\x20pool,\x20and\x20equally\x20NOT\x20cross-order:\x20a\x20DIFFERENT\x20order\x20derives\x20a\x20different\x20key\x20and\x20sails\x20past\x20the\x20slot\x20—\x20it\x20is\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20that\x20makes\x20the\x20settlement\x20Guard\x20refuse\x20a\x20sibling\x20order\x27s\x20passport;\x20together\x20the\x20two\x20close\x20CR-01.\x20What\x20the\x20slot\x20stops\x20is\x20a\x20replay\x20of\x20the\x20SAME\x20order\x20(abort\x20code\x2016).','SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Pre-payment\x20funnel\x20(listed\x20->\x20contacted\x20->\x20ordered)\x20is\x20the\x20challenger\x20differentiator\x20—\x20negotiation\x20happens\x20on-Machine\x20(testnet-validated\x20topology)','0%\x20commission\x20is\x20chain-verifiable\x20—\x20the\x20allocator\x20split\x20shows\x20the\x20platform\x20takes\x20only\x20the\x20fixed\x20Amount','Minimum\x20contract\x20size\x20guard:\x20order\x20amount\x20should\x20cover\x20the\x20fixed\x20fee\x20(recommended\x20>=\x202x\x20fee\x20so\x20freelancer\x20earnings\x20>=\x20platform\x20fee)','Arbitration\x20is\x20an\x20add-on\x20(native\x20to\x20WoWok)\x20—\x20independent\x20Permission,\x20near-zero\x20fee\x20for\x20the\x20low-ticket\x20dispute\x20range','Portfolio\x20Repository\x20must\x20use\x20public\x20URLs\x20(testnet\x20lesson:\x20never\x20local\x20addresses)','Disputes\x20route\x20to\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11):\x20Arbitration\x20(compensation_fund)\x20and\x20Allocator\x20(escrow)\x20are\x20independent\x20systems\x20by\x20design;\x20the\x20refund\x20Allocator\x20and\x20the\x20ruling\x20payout\x20must\x20never\x20both\x20fire\x20for\x20one\x20order','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20az-mn-261007\x20T5:\x202.38\x20stranded):\x20every\x20non-terminal\x20node\x20must\x20keep\x20an\x20exit\x20under\x20BOTH\x20polarities\x20of\x20the\x20arbitration\x20payout\x20state.\x20The\x20refund\x20Allocator\x20gates\x20on\x20order.claimed_by\x20some==false\x20(blocks\x20only\x20after\x20an\x20award\x20ACTUALLY\x20paid).\x20The\x20pairing\x20is\x20STRUCTURAL\x20(b9-261015):\x20the\x20allocator\x20rows\x20SHIP\x20the\x20merchant-recovery\x20allocator\x20(recover_gate\x20row\x20—\x20its\x20guard\x20asserts\x20order.claimed_by\x20some==true\x20via\x20query\x20id\x201570\x20(order.claimed_by\x20some\x20—\x20Bool)\x20plus\x20order.service\x20binding,\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW);\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity);\x20the\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20guard\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20the\x20Machine\x20publish.\x20NEVER\x20gate\x20the\x20refund\x20rail\x20on\x20\x27order.dispute\x20count==0\x27\x20(query\x20id\x201564):\x20Order.dispute\x20is\x20append-only\x20(filed\x20cases\x20are\x20never\x20pruned),\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20—\x20the\x20one-way\x20door\x20that\x20froze\x20the\x20mainnet\x20T5\x20order\x20at\x20reviewed','COMPENSATION\x20FUND\x20PROTECTS\x20THE\x20BUYER\x20ONLY:\x20the\x20payout\x20path\x20pays\x20the\x20order\x20owner\x20(the\x20client)\x20—\x20there\x20is\x20no\x20on-chain\x20path\x20to\x20indemnify\x20the\x20freelancer\x20(the\x20recipient\x20is\x20hardcoded\x20at\x20the\x20contract\x20layer).\x20If\x20a\x20ruling\x20favors\x20the\x20freelancer\x20(malicious\x20non-acceptance),\x20the\x20fund\x20cannot\x20pay\x20them;\x20document\x20this\x20limitation\x20to\x20merchants','VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20newly\x20created\x20Arbitration\x20defaults\x20to\x20paused\x20—\x20unpause\x20is\x20the\x20ARBITRATOR\x27s\x20deployment\x20step\x20on\x20their\x20own\x20object,\x20never\x20a\x20duty\x20of\x20this\x20build.\x20Bind\x20only\x20a\x20venue\x20already\x20unpaused\x20by\x20its\x20owner:\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20filing\x20with\x20E_PAUSED\x20and\x20the\x20mounted\x20arbitration\x20is\x20decorative\x20(the\x20MCP\x20pre-publish\x20scan\x20hard-blocks\x20binding\x20a\x20paused\x20venue)','VENUE\x20SELECTION\x20CRITERION:\x20prefer\x20a\x20venue\x20with\x20an\x20explicit\x20voting\x20policy\x20(roster\x20+\x20threshold\x20via\x20its\x20voting_guard)\x20—\x20an\x20empty\x20voting_guard\x20gives\x20every\x20voter\x20EQUAL\x20WEIGHT\x20(1\x20person\x201\x20vote),\x20not\x20permissionless.\x20How\x20the\x20venue\x20configures\x20its\x20voting\x20is\x20the\x20arbitrator\x27s\x20order;\x20you\x20verify\x20it\x20only\x20as\x20a\x20selection\x20criterion','Timeout\x20auto-acceptance\x20and\x20ruling-driven\x20refund\x20execution\x20are\x20100%\x20off-chain\x20keeper\x20duties\x20(machine.move\x20has\x20no\x20timer;\x20arb.move\x20rulings\x20only\x20change\x20case\x20state)\x20—\x20keeper\x20downtime\x20reverts\x20to\x20manual\x20confirmation','RE-ENTRANT\x20REMEDY\x20LOOP\x20(ctra-mn-261019\x20F-02):\x20a\x20Defect\x20Report\x20/\x20revising\x20loop\x20requires\x20the\x20re-delivery\x20node\x20to\x20declare\x20TWO\x20inbound\x20NodePairs\x20—\x20{prev_node:\x27in_progress\x27,\x20forwards:[Deliver]}\x20AND\x20{prev_node:\x27revising\x27,\x20forwards:[Deliver]}\x20—\x20because\x20the\x20chain\x20allows\x20ONE\x20NodePair\x20per\x20(node,\x20prev_node)\x20and\x20machines\x20are\x20immutable\x20after\x20publish.\x20A\x20remedy\x20loop\x20added\x20naively\x20(a\x20single\x20pair\x20into\x20the\x20re-delivery\x20node,\x20or\x20a\x20remedy\x20node\x20with\x20no\x20path\x20out)\x20strands\x20the\x20order\x20at\x20revising\x20forever:\x20the\x20only\x20exits\x20become\x20full-refund\x20cancel\x20or\x20dispute,\x20and\x20the\x20shape\x20cannot\x20be\x20patched\x20post-publish.\x20RULE:\x20a\x20remedy\x20node\x20needs\x20either\x20an\x20inbound\x20re-entry\x20pair\x20or\x20an\x20outbound\x20path\x20to\x20a\x20settlement\x20terminal\x20—\x20a\x20stranded\x20remedy\x20node\x20bricks\x20the\x20order.\x20The\x20revising\x20ENTRY\x20is\x20window-gated\x20(defect_report_window,\x20defect_report_window_hours\x20from\x20the\x20LAST\x20delivery\x20entry;\x20every\x20re-delivery\x20resets\x20it)\x20and\x20the\x20acceptance\x20timeout\x20rides\x20the\x20same\x20entry\x20anchor,\x20so\x20each\x20round\x20restarts\x20both\x20clocks.',ZERO_BALANCE_MASKING_NOTE,'WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'contract_fee_small_usd':0xf,'contract_fee_large_usd':0x1d,'contract_fee_tier_boundary_usd':0x1f4,'defect_report_window_hours':0x78,'digital_product_fee_bps':0x1f4,'digital_product_fee_min_usd':0x3,'digital_product_fee_max_usd':0x1d,'acceptance_timeout_hours':0x30,'min_contract_usd':0x1e,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'acceptance_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20LAST\x20delivery\x20ENTRY\x20timestamp\x20(a\x20re-delivery\x20appends\x20a\x20fresh\x20entry\x20and\x20naturally\x20resets\x20it);\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','defect_report_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20the\x20SAME\x20last-delivery-entry\x20anchor\x20the\x20acceptance\x20timeout\x20rides;\x20every\x20re-delivery\x20starts\x20a\x20fresh\x20defect-report\x20window'},'trust_mechanisms':['R1\x20refund\x20guard\x20restricted\x20to\x20the\x20order\x20owner\x20AND\x20to\x20orders\x20with\x20no\x20paid-out\x20award\x20(order.claimed_by\x20some==false)\x20—\x20cancellation\x20refunds\x20via\x20the\x20Allocator;\x20awarded\x20orders\x20exit\x20via\x20the\x20shipped\x20recover_gate\x20rail\x20(the\x20polarity\x20twin\x20of\x20the\x20refund\x20seal);\x20refund\x20and\x20compensation\x20are\x20never\x20both\x20paid\x20(D-BUG-2)','R2\x20independent\x20arbitration\x20Permission\x20(a\x20testnet\x20shared-Permission\x20critical\x20lesson,\x20contract-enforced)','R3\x20compensation\x20fund\x20optional;\x20when\x20funded,\x20publish\x20requires\x20a\x20mounted\x20UNPAUSED\x20Arbitration\x20with\x20a\x20voting_guard\x20(MCP\x20pre-publish\x20scan:\x20paused\x20=\x20hard\x20block,\x20empty\x20voting_guard\x20=\x20warning)','R4\x20acceptance\x20dual-branch:\x20client\x20signature\x20or\x20timeout\x20—\x20no\x20self-accept','R5\x20order-anchored\x20refund\x20recipient','R6\x20Amount\x20fee\x20deducted\x20first\x20+\x20freelancer\x20Rate\x2010000\x20of\x20the\x20net\x20remainder,\x20both\x20legs\x20in\x20ONE\x20allocator\x20via\x20a\x20shared\x20guard_key\x20(fixed\x20fee\x20is\x20native,\x20no\x20off-chain\x20collection;\x20no\x20Surplus\x20leg\x20—\x200%\x20commission\x20model)','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keeper\x20is\x20a\x20FIRST-CLASS\x20dependency\x20(health\x20check\x20+\x20downtime\x20alert\x20required):\x20acceptance-timeout\x20auto-advance\x20(acceptance_timeout_hours)\x20and\x20ruling-driven\x20refund\x20execution\x20both\x20run\x20off-chain\x20—\x20no\x20keeper\x20means\x20manual-only\x20confirmation\x20(the\x20funds-stuck\x20failure\x20mode\x20returns)','R10\x20contract\x20fee\x20expressed\x20on-chain\x20(tiered:\x20disjoint\x20self-selecting\x20settlement\x20rails\x20—\x20tier\x20guards\x20read\x20order.amount\x20against\x20the\x20boundary;\x20ctra-mn-261019\x20F-04)'],'keeper_dependencies':['acceptance-timeout\x20auto-advance\x20(acceptance_timeout_hours;\x20the\x20accept\x20guard\x27s\x20time\x20branch\x20ALLOWED\x20only\x20—\x20keeper\x20must\x20fire\x20it)','arbitration\x20ruling\x20refund\x20execution\x20(arb\x20ruling\x20only\x20changes\x20case\x20state;\x20the\x20keeper\x20allocates\x20per\x20ruling)'],'recommended_role':'supplier','role_rationale':'Independent\x20freelancers\x20own\x20their\x20funnel\x20and\x20keep\x20100%\x20of\x20project\x20funds;\x20the\x20fixed\x20fee\x20replaces\x20commission\x20—\x20supplier-first\x20economics.','differences':['0%\x20commission\x20+\x20fixed\x20contract\x20fee\x20as\x20an\x20Amount\x20allocator\x20entry\x20—\x20platform\x20revenue\x20decoupled\x20from\x20GMV','Pre-payment\x20funnel\x20(listed\x20->\x20contacted\x20->\x20ordered):\x20negotiation\x20happens\x20on-Machine\x20before\x20any\x20escrow','Arbitration\x20is\x20a\x20WoWok-native\x20add-on\x20rather\x20than\x20an\x20inherited\x20model\x20component'],'user_inputs':['contract_fee_small_usd\x20/\x20contract_fee_large_usd\x20—\x20the\x20tiered\x20per-contract\x20platform\x20fee\x20(Amount\x20allocator\x20entry;\x202026\x20marketplace\x20pricing:\x20<=\x20$500\x20->\x20$15,\x20>\x20$500\x20->\x20$29)','contract_fee_tier_boundary_usd\x20—\x20the\x20order-size\x20boundary\x20between\x20the\x20two\x20fee\x20tiers','acceptance_timeout_hours\x20—\x20client\x20acceptance\x20window\x20before\x20the\x20keeper\x20advances','min_contract_usd\x20—\x20minimum\x20contract\x20size\x20(recommended\x20>=\x202x\x20the\x20small-tier\x20fee)','digital_product_fee_bps\x20—\x20Rate\x20share\x20for\x20digital\x20deliverables\x20(5%\x20=\x20500\x20bps;\x20natively\x20expressible,\x20no\x20tiering\x20needed);\x20digital_product_fee_min_usd\x20/\x20digital_product_fee_max_usd\x20bound\x20the\x20computed\x20share\x20($3-$29)\x20—\x20the\x20orchestration\x20layer\x20clamps\x20the\x20Rate\x20result\x20into\x20[min,\x20max]\x20before\x20writing\x20the\x20Amount\x20leg']},{'id':'freelance/agent-task','industry':'freelance','variant':'agent-task','product_ref':'algora','archetype':'challenger','review_mode':'none','acceptance_mode':'agent','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'funded','role':'Entry:\x20the\x20Client\x20funds\x20the\x20task\x20and\x20the\x20bounty\x20escrows\x20atomically\x20at\x20buy\x20(no\x20unpaid\x20\x27open\x27\x20state\x20exists\x20on\x20chain\x20—\x20the\x20posting\x20itself\x20is\x20an\x20off-Machine\x20WIP\x20listing);\x20Machine\x20starts\x20here','semantic_role':'draft','from':[{'prev':''}]},{'name':'submitted','role':'Provider\x20(human\x20or\x20autonomous\x20agent)\x20submits\x20the\x20deliverable\x20with\x20a\x20WIP-hash\x20evidence\x20row\x20(submit-work\x20semantics);\x20the\x20evaluation\x20clock\x20starts\x20from\x20this\x20ENTRY\x20timestamp','semantic_role':'delivered','from':[{'prev':'funded','forward':'Submit','guard_key':'submit_evidence'}]},{'name':'completed','role':'Evaluator\x20rules\x20ACCEPT,\x20or\x20the\x20evaluation\x20window\x20elapses\x20and\x20the\x20keeper\x20auto-releases\x20(the\x20plan\x27s\x20`expired`\x20terminal,\x20folded\x20here\x20as\x20the\x20timeout\x20leg\x20—\x20INV-A2\x20safe\x20form).\x20Settlement\x20releases\x20the\x20escrow\x20to\x20the\x20Provider.\x20DISTINCT\x20forward\x20names\x20are\x20MANDATORY:\x20two\x20sibling\x20forwards\x20sharing\x20prev\x20\x27submitted\x27\x20default\x20to\x20the\x20same\x20name\x20and\x20abort\x20E_DUPLICATE_FORWARD_NAME\x20(6)\x20at\x20publish','semantic_role':'final','from':[{'prev':'submitted','forward':'EvaluatorAccept','guard_key':'evaluate_accept','permission_index':0x3e9},{'prev':'submitted','forward':'AutoReleaseByKeeper','guard_key':'auto_release','permission_index':0x3e8}]},{'name':'rejected','role':'Evaluator\x20rules\x20REJECT\x20(deliverable\x20does\x20not\x20meet\x20the\x20task\x20terms)\x20—\x20order-anchored\x20full\x20refund\x20to\x20the\x20Client.\x20A\x20deliberate\x20Evaluator\x20action,\x20never\x20a\x20timeout:\x20silence\x20auto-RELEASES\x20to\x20the\x20Provider\x20(completed),\x20it\x20never\x20auto-rejects,\x20so\x20a\x20stalled\x20Evaluator\x20cannot\x20strip\x20a\x20Provider\x20who\x20did\x20the\x20work','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'submitted','forward':'EvaluatorReject','guard_key':'evaluate_reject','permission_index':0x3e9}]},{'name':'closed_cancel','role':'Pre-submission\x20Client\x20cancellation\x20—\x20the\x20task\x20escrowed\x20at\x20buy\x20but\x20the\x20Provider\x20has\x20not\x20yet\x20submitted,\x20so\x20the\x20Client\x20may\x20void\x20and\x20take\x20a\x20full\x20order-anchored\x20refund\x20(R-DRAFT-VOID:\x20an\x20abandoned\x20or\x20ghost\x20order\x20needs\x20a\x20single-hop\x20buyer\x20exit;\x20escrow\x20is\x20funded\x20at\x20order_new,\x20not\x20at\x20first\x20forward).\x20Post-submission\x20outcomes\x20route\x20to\x20the\x20Evaluator\x20(completed/rejected)\x20and\x20disputes\x20to\x20Arbitration,\x20never\x20here,\x20so\x20the\x20refund\x20and\x20a\x20ruling\x20payout\x20never\x20both\x20fire\x20(D-BUG-2)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'funded','forward':'CancelBeforeSubmit'}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20the\x20Provider\x20from\x20self-purchasing\x20their\x20own\x20task\x20(Passport-gated\x20purchase\x20once\x20set)'},{'template_id':'pattern.repository_data_check','host':'machine','key':'submit_evidence','purpose':'Submission\x20evidence\x20gate\x20(funded->submitted):\x20the\x20deliverable\x27s\x20WIP\x20hash\x20must\x20be\x20written\x20to\x20the\x20evidence\x20Repository\x20before\x20the\x20forward\x20passes,\x20so\x20the\x20Evaluator\x20rules\x20against\x20a\x20tamper-evident\x20artifact,\x20not\x20prose.\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20—\x20an\x20unbound\x20GuardSpec\x20is\x20never\x20collected\x20into\x20the\x20build\x20(audit-261012\x20B3)'},{'template_id':'pattern.identity_check_single','host':'machine','key':'evaluate_accept','purpose':'Evaluator\x20ACCEPT\x20ruling\x20(submitted->completed,\x20EvaluatorAccept\x20forward):\x20binds\x20the\x20forward\x20to\x20the\x20single\x20independent\x20Evaluator\x20permission\x20entity\x20(slot\x20index\x201001).\x20The\x20Evaluator\x20is\x20a\x20third\x20party\x20disjoint\x20from\x20both\x20Client\x20and\x20Provider\x20—\x20the\x20payout-owing\x20party\x20never\x20decides\x20the\x20payout\x20(INV-A3).\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05)\x20so\x20a\x20sibling\x20task\x27s\x20passport\x20cannot\x20rule\x20here'},{'template_id':'pattern.identity_check_single','host':'machine','key':'evaluate_reject','purpose':'Evaluator\x20REJECT\x20ruling\x20(submitted->rejected,\x20EvaluatorReject\x20forward):\x20the\x20same\x20independent\x20Evaluator\x20slot\x20(1001).\x20A\x20reject\x20is\x20an\x20explicit\x20ruling,\x20never\x20a\x20default\x20—\x20the\x20timeout\x20path\x20auto-RELEASES\x20(completed),\x20it\x20does\x20not\x20auto-reject,\x20so\x20Provider\x20work\x20is\x20never\x20stripped\x20by\x20Evaluator\x20silence'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'auto_release','purpose':'Evaluation-window\x20auto-release\x20keeper\x20edge\x20(submitted->completed,\x20AutoReleaseByKeeper):\x20Clock\x20>=\x20progress.history.time\x20(id\x201280,\x20next_node=\x27submitted\x27,\x20find=last)\x20+\x20evaluation_window_days,\x20so\x20a\x20stalled\x20Evaluator\x20unblocks\x20the\x20Provider\x27s\x20payment.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05);\x20operator\x20is\x20a\x20service-admin\x20permission\x20index\x20(1000)\x20acting\x20as\x20keeper.\x20This\x20is\x20the\x20plan\x27s\x20`expired`\x20outcome\x20expressed\x20as\x20the\x20dual-branch\x20timeout\x20leg\x20(INV-A2),\x20NOT\x20a\x20sibling\x20node'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_gate','purpose':'Single-shot\x20settlement\x20allocator\x20gate:\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20the\x20chain-derived\x20protocol-254\x20once\x20key\x20(bcs(payment_info.for_object),\x20replay\x20aborts\x2016).\x20settle_node\x20defaults\x20to\x20\x27completed\x27;\x20the\x20kernel\x20injects\x20service_name\x20=\x20the\x20plan\x27s\x20service\x20name'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate:\x20a\x20node\x20gate\x20over\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}\x20resolved\x20from\x20THIS\x20template\x27s\x20machine_shape\x20as\x20ONE\x20top-level\x20n-ary\x20logic_or\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20blocks\x20the\x20refund\x20once\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid).\x20NODE\x20GATE\x20IS\x20MANDATORY\x20(audit-261012\x20B4):\x20an\x20identity-only\x20refund\x20guard\x20lets\x20the\x20Client\x20drain\x20the\x20escrow\x20the\x20moment\x20they\x20buy.\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017\x20—\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter;\x20the\x20old\x20prose\x20claimed\x20\x27signer\x20==\x20order.owner\x20(anti-hijack\x20R5)\x27):\x20anti-hijack\x20is\x20structural\x20(GuardIdentifier(0)\x20recipient),\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening.\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg.\x20NEVER\x20gate\x20on\x20order.dispute\x20count\x20==\x200\x20(query\x20id\x201564):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Provider-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20a\x20node-pinned\x20rail\x20aborts\x207\x20after\x20a\x20keeper\x20moves\x20the\x20order\x20on\x20—\x20F-51\x20—\x20and\x20CAT-C2\x27s\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20live;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion).\x20Pays\x20Rate\x2010000\x20to\x20the\x20Provider\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'}],'allocator':{'recipient':'entity','count':0x3,'mode':'rate','once_per_order':!![],'refund_track':'order_anchored','description':'Agent-task\x20settlement\x20on\x20completed.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(the\x20Client\x20pays\x20gas\x20only),\x20so\x20a\x20single\x20Rate\x2010000\x20leg\x20releases\x20the\x20whole\x20escrow\x20to\x20the\x20Provider\x27s\x20Entity\x20—\x20the\x200%\x20offer\x20is\x20the\x20standing\x20model,\x20not\x20a\x20launch\x20discount.\x20The\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20task\x20Order\x20so\x20a\x20sibling\x20task\x27s\x20passport\x20cannot\x20release\x20this\x20escrow\x20(CR-01);\x20once_per_order\x20arms\x20the\x20chain-derived\x20254\x20replay\x20slot.\x20Full\x20refund\x20to\x20the\x20Client\x20(Rate\x2010000\x20via\x20the\x20order-anchored\x20recipient)\x20on\x20rejected\x20OR\x20a\x20pre-submission\x20closed_cancel\x20(refund_gate\x20node-gates\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}),\x20and\x20only\x20while\x20no\x20arbitration\x20award\x20has\x20paid\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false);\x20an\x20awarded\x20order\x27s\x20escrow\x20instead\x20exits\x20via\x20the\x20paired\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20Provider),\x20so\x20refund\x20and\x20ruling\x20payouts\x20never\x20both\x20fire\x20(D-BUG-2).\x20The\x20Evaluator\x20rules\x20the\x20release\x20but\x20is\x20never\x20a\x20recipient\x20—\x20they\x20hold\x20no\x20stake\x20in\x20the\x20escrow.','rows':[{'track':'settlement','recipient':'entity','recipient_key':'provider','mode':'rate','value':0x2710,'guard_key':'settle_gate','note':'0%\x20platform\x20commission\x20—\x20the\x20standing\x20direct-sales\x20model.\x20Recipient\x20MUST\x20be\x20an\x20explicit\x20non-empty\x20Entity:\x20an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer\x20(the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built),\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently.\x20Binds\x20settle_gate\x20(auto-filled\x20from\x20tpl_allocator_node_gate_settle_once:\x20node\x20gate\x20+\x20order.service\x20binding\x20+\x20chain-derived\x20254\x20once).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_gate','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20submitted\x20task\x20ORDER\x20the\x20settlement\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20task\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20settle_gate\x20key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'provider','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Provider-recovery\x20rail\x20(escrow-exit\x20invariant):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20Provider\x20Entity\x20so\x20an\x20awarded\x20task\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_gate/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20full\x20refund\x20on\x20rejected\x20or\x20pre-submission\x20closed_cancel\x20(refund_gate\x20node-gates\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}).\x20GuardIdentifier(0)\x20resolves\x20to\x20the\x20paying\x20Order\x20and\x20allocation.move\x20ERECIPIENT_NOT_FOR_OBJECT\x20makes\x20redirection\x20structurally\x20impossible;\x20the\x20Client\x20claims\x20via\x20the\x20two-step\x20order\x20receive.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false\x20so\x20an\x20awarded\x20task\x20cannot\x20also\x20drain\x20the\x20refund\x20rail\x20(D-BUG-2).\x20Set\x20this\x20allocator\x27s\x20once_per_order=true\x20and\x20register\x20the\x20{identifier:254,\x20b_submission:true}\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x2016.'}]},'key_risk':'The\x20Evaluator\x20is\x20a\x20single\x20trusted\x20identity:\x20if\x20it\x20stalls\x20the\x20auto-release\x20keeper\x20pays\x20the\x20Provider\x20(silence\x20never\x20auto-rejects);\x20if\x20it\x20rules\x20wrongly\x20the\x20Client\x27s\x20only\x20recourse\x20is\x20Arbitration,\x20since\x20the\x20Machine\x20ruling\x20is\x20final.','build_notes':['ONCE\x20SLOT\x20ARMING\x20+\x20SCOPE\x20(v54,\x20audit-261012\x20B7):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20each\x20allocator\x20Guard\x20(settle_gate\x20+\x20refund_gate)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20payment_info.for_object\x20(the\x20bound\x20Order),\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016\x20regardless\x20of\x20submitted\x20bytes.\x20SCOPE\x20(C10,\x20mainnet-verified):\x20the\x20once\x20key\x20is\x20(guard,\x20allocator\x20leg,\x20bcs(for_object))\x20stored\x20ON\x20the\x20Allocation\x20—\x20once\x20PER\x20ORDER\x20per\x20allocation,\x20NOT\x20once\x20per\x20pool\x20and\x20NOT\x20cross-order;\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20is\x20what\x20makes\x20the\x20settlement\x20Guard\x20refuse\x20a\x20sibling\x20task\x27s\x20passport.','ACCEPTANCE\x20COMPONENT\x20(D12\x20重构\x202,\x20acceptance_mode\x20\x27agent\x27):\x20the\x20release\x20decision\x20is\x20the\x20independent\x20Evaluator\x27s,\x20never\x20the\x20payout-owing\x20Client\x27s\x20(INV-A3\x20—\x20compile\x20hard-blocks\x20a\x20judge-decided\x20mode\x20whose\x20arbitration_mode\x20is\x20not\x20\x27third_party\x27).\x20The\x20Evaluator\x20permission\x20entity\x20MUST\x20be\x20disjoint\x20from\x20both\x20the\x20Client\x20(order\x20payer)\x20and\x20the\x20Provider\x20(service\x20permission);\x20grant\x20it\x20slot\x20index\x201001\x20and\x20bind\x20only\x20an\x20already-operational\x20venue.','INV-A2\x20FOLD\x20(why\x20there\x20is\x20no\x20`expired`\x20node):\x20an\x20accept\x20decision\x20and\x20its\x20timeout\x20complement\x20as\x20two\x20SIBLING\x20outgoing\x20edges\x20of\x20`submitted`\x20race\x20—\x20in\x20a\x20window\x20overlap\x20both\x20fire,\x20in\x20a\x20gap\x20neither\x20does,\x20and\x20with\x20topology\x20frozen\x20at\x20publish\x20the\x20neither-gap\x20is\x20a\x20permanent\x20deadlock\x20(F-REVIEW-BLOCK).\x20The\x20safe\x20form\x20folds\x20them\x20into\x20ONE\x20`completed`\x20node\x20reached\x20by\x20two\x20DISTINCT\x20forwards\x20(EvaluatorAccept\x20OR\x20AutoReleaseByKeeper);\x20the\x20chain\x27s\x20E_DUPLICATE_NODE_PREV\x20merges\x20the\x20same-prev\x20edges\x20into\x20one\x20Pair,\x20and\x20the\x20distinct\x20forward\x20names\x20avoid\x20E_DUPLICATE_FORWARD_NAME\x20(6).','SILENCE\x20FAVORS\x20THE\x20WORKER:\x20the\x20timeout\x20leg\x20auto-RELEASES\x20to\x20the\x20Provider\x20(completed),\x20it\x20never\x20auto-rejects.\x20A\x20reject\x20is\x20always\x20an\x20explicit\x20Evaluator\x20ruling.\x20This\x20mirrors\x20the\x20freelance-market\x20convention\x20of\x20an\x20auto-accept\x20window\x20and\x20is\x20the\x20reason\x20a\x20stalled\x20Evaluator\x20cannot\x20strip\x20a\x20Provider\x20who\x20submitted\x20evidence.','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20az-mn-261007\x20T5):\x20every\x20terminal\x20keeps\x20an\x20exit\x20under\x20BOTH\x20polarities\x20of\x20the\x20arbitration\x20payout\x20state.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20the\x20paired\x20recover_gate\x20row\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20Provider)\x20ships\x20in\x20the\x20allocator\x20so\x20an\x20awarded\x20task\x27s\x20escrow\x20still\x20exits.\x20Resolve\x20both\x20guard\x20designs\x20before\x20the\x20Machine\x20publish.\x20NEVER\x20gate\x20the\x20refund\x20rail\x20on\x20order.dispute\x20count\x20==\x200\x20(append-only\x20vector\x20→\x20one-way\x20door).','COMPENSATION\x20FUND\x20PROTECTS\x20THE\x20CLIENT\x20ONLY:\x20the\x20ruling\x20payout\x20path\x20pays\x20the\x20order\x20owner\x20(the\x20Client)\x20—\x20there\x20is\x20no\x20on-chain\x20path\x20to\x20indemnify\x20the\x20Provider.\x20If\x20a\x20ruling\x20favors\x20the\x20Provider\x20(a\x20malicious\x20Client\x20reject),\x20the\x20fund\x20cannot\x20pay\x20them;\x20document\x20this\x20limitation.','DISPUTES\x20route\x20through\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11):\x20Arbitration\x20(compensation_fund)\x20and\x20Allocator\x20(escrow)\x20are\x20independent\x20systems\x20by\x20design;\x20the\x20refund\x20Allocator\x20and\x20the\x20ruling\x20payout\x20must\x20never\x20both\x20fire\x20for\x20one\x20task.\x20VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20freshly\x20created\x20Arbitration\x20defaults\x20to\x20PAUSED\x20—\x20unpause\x20is\x20the\x20ARBITRATOR\x27s\x20deployment\x20step\x20on\x20their\x20own\x20object,\x20never\x20this\x20build\x27s\x20duty;\x20bind\x20only\x20a\x20venue\x20already\x20unpaused\x20(a\x20paused\x20venue\x20rejects\x20every\x20filing\x20with\x20E_PAUSED).','commission_rate_bps\x20is\x200\x20and\x20is\x20NOT\x20a\x20placeholder:\x20WoWok\x20extracts\x20nothing\x20from\x20an\x20agent\x20task.\x20MERCHANT\x20FREEDOM:\x20an\x20orchestrator\x20that\x20IS\x20the\x20aggregator\x20(a\x20multi-agent\x20task\x20router)\x20may\x20charge\x20its\x20own\x20fee\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20Client\x20can\x20compute\x20pre-task,\x20never\x20an\x20implicit\x20remainder;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity\x20(an\x20empty\x20one\x20never\x20reaches\x20the\x20deployer;\x20on\x20chain\x20a\x20zero-address\x20Entity\x20burns\x20the\x20share);\x20(3)\x20no\x20mandatory\x20transit\x20pool,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20(an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool).','KEEPER\x20IS\x20A\x20FIRST-CLASS\x20DEPENDENCY:\x20the\x20evaluation-window\x20auto-release\x20and\x20any\x20ruling-driven\x20refund\x20execution\x20are\x20100%\x20off-chain\x20(machine.move\x20has\x20no\x20timer;\x20arb.move\x20rulings\x20only\x20change\x20case\x20state).\x20No\x20keeper\x20means\x20manual-only\x20confirmation\x20and\x20the\x20funds-stuck\x20failure\x20mode\x20returns.','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20task\x20posting\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention),\x20or\x20host\x20your\x20own\x20endpoint\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'evaluation_window_days':0x7,'dispute_timeout_days':0x7,'arbitration_fee_usd':0x0},'time_anchors':{'evaluation_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27submitted\x27,\x20find=last)\x20—\x20the\x20submission\x20ENTRY\x20timestamp;\x20the\x20auto-release\x20keeper\x20fires\x20once\x20evaluation_window_days\x20elapses\x20from\x20it.\x20The\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','dispute_timeout':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard,\x20R-M1-11)'},'trust_mechanisms':['R1\x20dual-track\x20refund:\x20an\x20Evaluator\x20reject\x20refunds\x20via\x20the\x20Allocator;\x20an\x20arbitration\x20ruling\x20pays\x20via\x20the\x20compensation\x20fund\x20—\x20never\x20both\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false)','R2\x20independent\x20Evaluator\x20+\x20independent\x20arbitration\x20Permission,\x20both\x20enforced\x20disjoint\x20from\x20the\x20Client\x20and\x20Provider\x20(INV-A3;\x20contract\x20assertion\x20at\x20publish)','R3\x20compensation\x20fund\x20required\x20before\x20publish\x20whenever\x20the\x20fund\x20is\x20non-zero','R4\x20acceptance\x20gate:\x20an\x20explicit\x20Evaluator\x20ruling\x20OR\x20the\x20evaluation-window\x20timeout\x20—\x20the\x20Provider\x20can\x20never\x20self-accept\x20and\x20the\x20Client\x20can\x20never\x20self-reject\x20a\x20submitted\x20deliverable','R5\x20order-anchored\x20refund\x20recipient\x20(anti-hijack)','R6\x20Rate\x20sums\x20=\x2010000\x20on\x20every\x20allocator\x20group','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20evaluation-window\x20auto-release\x20and\x20the\x20dispute\x20timeout','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration\x20(0%\x20commission\x20is\x20machine-checkable)'],'keeper_dependencies':['evaluation-window\x20auto-release\x20(evaluation_window_days;\x20the\x20accept\x20guard\x27s\x20time\x20branch\x20is\x20ALLOWED\x20only\x20—\x20the\x20keeper\x20must\x20fire\x20it)','dispute\x20response\x20timeout\x20(keeper\x20obligation\x20over\x20the\x20Arbitration\x20case)','arbitration\x20ruling\x20execution\x20(a\x20ruling\x20only\x20changes\x20case\x20state;\x20the\x20keeper\x20allocates\x20per\x20ruling)'],'recommended_role':'supplier','role_rationale':'The\x20Provider\x20(human\x20or\x20autonomous\x20agent)\x20fulfils\x20the\x20Client\x27s\x20funded\x20task\x20and\x20is\x20the\x20demand/sub-order\x20taker\x20in\x20WoWok\x20terms;\x20a\x20task-router\x20orchestrator\x20flips\x20the\x20role\x20to\x20merchant.','differences':['acceptance_mode\x20\x27agent\x27:\x20an\x20INDEPENDENT\x20Evaluator\x20permission\x20entity\x20rules\x20the\x20release,\x20not\x20the\x20buyer\x20(the\x20freelance\x20milestone\x20templates\x20let\x20the\x20buyer\x20self-adjudicate)\x20—\x20the\x20agent-native\x20Client/Provider/Evaluator\x20triangle','No\x20bounded\x20revision\x20loop:\x20a\x20reject\x20ends\x20the\x20task\x20and\x20refunds,\x20so\x20INV-A1\x20stays\x20silent\x20by\x20omission\x20(contrast\x20design-contest\x27s\x20counted\x20winner-fix\x20loop)','The\x20plan\x27s\x20`expired`\x20terminal\x20is\x20the\x20timeout\x20LEG\x20of\x20a\x20dual-branch\x20accept\x20forward,\x20not\x20a\x20sibling\x20node\x20(INV-A2\x20fold)\x20—\x20silence\x20auto-releases\x20to\x20the\x20Provider,\x20it\x20never\x20auto-rejects','review_mode\x20\x27none\x27:\x20agent-to-agent\x20tasks\x20carry\x20no\x20human\x20star-review;\x20reputation\x20rides\x20the\x20Evaluator\x27s\x20on-chain\x20ruling\x20record'],'user_inputs':['evaluation_window_days\x20—\x20how\x20long\x20the\x20Evaluator\x20has\x20to\x20rule\x20before\x20the\x20keeper\x20auto-releases\x20to\x20the\x20Provider','dispute_timeout_days\x20—\x20dispute\x20response\x20timeout\x20(keeper-enforced\x20over\x20the\x20Arbitration\x20case)','arbitration_fee_usd\x20—\x20the\x20Arbitration\x20filing\x20fee\x20(default\x20near-zero\x20for\x20the\x20small-task\x20tail)','the\x20Evaluator\x20permission\x20entity\x20—\x20MUST\x20be\x20disjoint\x20from\x20the\x20Client\x20(order\x20payer)\x20and\x20the\x20Provider\x20(service\x20permission);\x20grant\x20it\x20slot\x20index\x201001\x20and\x20bind\x20only\x20an\x20operational\x20venue']},{'id':'freelance/bug-bounty','industry':'freelance','variant':'bug-bounty','product_ref':'hackerone','archetype':'challenger','review_mode':'none','acceptance_mode':'bounty','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'funded','role':'Entry:\x20the\x20sponsoring\x20company\x20(order_payer)\x20opens\x20a\x20bounty\x20intake\x20order\x20and\x20escrows\x20the\x20MAX-TIER\x20bounty\x20atomically\x20at\x20buy\x20—\x20the\x20pool\x20is\x20sized\x20for\x20the\x20worst-case\x20(critical)\x20payout\x20because\x20severity\x20is\x20unknown\x20until\x20triage;\x20the\x20Machine\x20starts\x20here.\x20No\x20unpaid\x20\x27open\x27\x20state\x20exists\x20on\x20chain\x20(the\x20program\x20brief\x20itself\x20is\x20an\x20off-Machine\x20WIP\x20listing)','semantic_role':'draft','from':[{'prev':''}]},{'name':'submitted','role':'Hunter\x20(human\x20researcher\x20or\x20autonomous\x20agent)\x20submits\x20the\x20vulnerability\x20report\x20with\x20a\x20WIP-hash\x20evidence\x20row\x20written\x20to\x20the\x20report\x20Repository\x20(id_from\x20signer\x20—\x20the\x20row\x20is\x20keyed\x20to\x20the\x20hunter,\x20which\x20is\x20what\x20later\x20pins\x20the\x20dynamic\x20Signer\x20payout\x20to\x20the\x20actual\x20reporter);\x20the\x20triage\x20clock\x20starts\x20from\x20this\x20ENTRY\x20timestamp','semantic_role':'delivered','from':[{'prev':'funded','forward':'SubmitReport','guard_key':'submit_evidence'}]},{'name':'settled','role':'Independent\x20triager\x20rules\x20the\x20report\x20VALID\x20and\x20writes\x20its\x20severity\x20band\x20(a\x20U64:\x201=low\x20…\x204=critical)\x20to\x20the\x20triage_decision\x20Repository\x20keyed\x20by\x20the\x20order.\x20Settlement\x20then\x20releases\x20the\x20severity-tiered\x20bounty\x20to\x20the\x20hunter\x20(the\x20dynamic\x20Signer\x20recipient)\x20and\x20sweeps\x20the\x20unfunded\x20remainder\x20back\x20to\x20the\x20company.\x20Bounty\x20pays\x20on\x20VALIDATION,\x20not\x20on\x20the\x20company\x27s\x20internal\x20remediation\x20—\x20the\x20fix\x20is\x20off-Machine','semantic_role':'final','from':[{'prev':'submitted','forward':'TriageValid','guard_key':'triage_valid','permission_index':0x3e9}]},{'name':'rejected','role':'Triager\x20rules\x20the\x20report\x20duplicate\x20/\x20not-applicable\x20/\x20informative\x20/\x20invalid\x20—\x20order-anchored\x20full\x20refund\x20of\x20the\x20escrow\x20to\x20the\x20company\x20(no\x20bounty\x20is\x20owed).\x20A\x20deliberate\x20triager\x20ruling,\x20never\x20a\x20timeout:\x20silence\x20NEVER\x20auto-rejects\x20and\x20NEVER\x20auto-pays,\x20so\x20an\x20unvalidated\x20report\x20cannot\x20drain\x20the\x20pool\x20and\x20a\x20stalled\x20triager\x20cannot\x20strip\x20a\x20hunter\x20who\x20filed\x20real\x20work\x20—\x20the\x20hunter\x27s\x20recourse\x20is\x20Arbitration','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'submitted','forward':'TriageReject','guard_key':'triage_reject','permission_index':0x3e9}]},{'name':'closed_cancel','role':'Pre-submission\x20company\x20cancellation\x20—\x20the\x20intake\x20order\x20escrowed\x20at\x20buy\x20but\x20no\x20hunter\x20has\x20submitted\x20a\x20report\x20yet,\x20so\x20the\x20company\x20may\x20void\x20and\x20take\x20a\x20full\x20order-anchored\x20refund\x20(R-DRAFT-VOID:\x20an\x20abandoned\x20or\x20ghost\x20intake\x20order\x20needs\x20a\x20single-hop\x20payer\x20exit;\x20escrow\x20is\x20funded\x20at\x20order_new,\x20not\x20at\x20first\x20forward).\x20Post-submission\x20outcomes\x20route\x20to\x20the\x20triager\x20(settled/rejected)\x20and\x20disputes\x20to\x20Arbitration,\x20never\x20here,\x20so\x20the\x20refund\x20and\x20a\x20bounty\x20payout\x20never\x20both\x20fire\x20(D-BUG-2)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'funded','forward':'CancelBeforeSubmit'}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20the\x20triager\x20/\x20service\x20staff\x20from\x20self-purchasing\x20a\x20bounty\x20intake\x20order\x20and\x20later\x20self-awarding\x20it\x20(Passport-gated\x20purchase\x20once\x20set)\x20—\x20the\x20funder,\x20the\x20triager\x20and\x20the\x20hunter\x20must\x20be\x20three\x20disjoint\x20identities'},{'template_id':'pattern.repository_data_check','host':'machine','key':'submit_evidence','purpose':'Report-evidence\x20gate\x20(funded->submitted):\x20the\x20vulnerability\x20report\x27s\x20WIP\x20hash\x20must\x20be\x20written\x20to\x20the\x20report\x20Repository\x20BEFORE\x20the\x20forward\x20passes,\x20so\x20the\x20triager\x20rules\x20against\x20a\x20tamper-evident\x20artifact,\x20not\x20prose.\x20The\x20report\x20policy\x20is\x20id_from=signer,\x20which\x20keys\x20the\x20row\x20to\x20the\x20HUNTER\x20—\x20that\x20key\x20is\x20the\x20anchor\x20the\x20settlement\x20Signer-binding\x20leg\x20later\x20reads\x20to\x20prove\x20the\x20claimant\x20IS\x20the\x20reporter.\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20(audit-261012\x20B3)'},{'template_id':'pattern.identity_check_single','host':'machine','key':'triage_valid','purpose':'Triager\x20VALID\x20ruling\x20(submitted->settled,\x20TriageValid\x20forward):\x20binds\x20the\x20forward\x20to\x20the\x20single\x20independent\x20triager\x20permission\x20entity\x20(slot\x20index\x201001),\x20disjoint\x20from\x20both\x20the\x20company\x20(order\x20payer)\x20and\x20the\x20hunter.\x20The\x20triager\x20also\x20writes\x20the\x20severity\x20band\x20(U64\x201..4)\x20to\x20the\x20triage_decision\x20Repository\x20keyed\x20by\x20the\x20order\x20—\x20the\x20value\x20the\x20four\x20settle\x20tier-guards\x20range-scan.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05)\x20so\x20a\x20sibling\x20program\x27s\x20passport\x20cannot\x20rule\x20here'},{'template_id':'pattern.identity_check_single','host':'machine','key':'triage_reject','purpose':'Triager\x20REJECT\x20ruling\x20(submitted->rejected,\x20TriageReject\x20forward):\x20the\x20same\x20independent\x20triager\x20slot\x20(1001).\x20A\x20reject\x20(duplicate\x20/\x20not-applicable\x20/\x20informative\x20/\x20invalid)\x20is\x20an\x20explicit\x20ruling,\x20never\x20a\x20default\x20—\x20there\x20is\x20NO\x20timeout\x20that\x20auto-rejects,\x20so\x20a\x20stalled\x20triager\x20leaves\x20the\x20order\x20at\x20\x27submitted\x27\x20for\x20Arbitration\x20rather\x20than\x20silently\x20stripping\x20the\x20hunter'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_critical','purpose':'CRITICAL-tier\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20progress.current\x20==\x20settled\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20the\x20chain-derived\x20protocol-254\x20once\x20key\x20(replay\x20aborts\x2016),\x20PLUS\x20a\x20severity-band\x20leg\x20(pattern.tiered_amount_ladder\x20over\x20the\x20triage_decision\x20Repository\x20U64:\x20band\x20>=\x204,\x20read\x20via\x20query_repository_data_find_where\x20range-scan\x20pinned\x20to\x20THIS\x20order)\x20and\x20a\x20SIGNER-BINDING\x20leg\x20(context(Signer)\x20==\x20the\x20report\x20Repository\x20row\x27s\x20id_from-signer\x20key,\x20so\x20the\x20dynamic\x20Signer\x20recipient\x20is\x20provably\x20the\x20hunter\x20who\x20filed\x20THIS\x20report\x20—\x20a\x20third\x20party\x20cannot\x20front-run\x20the\x20claim).\x20Bands\x20are\x20DISJOINT:\x20exactly\x20one\x20of\x20settle_critical/high/medium/low\x20can\x20ever\x20pass'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_high','purpose':'HIGH-tier\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20identical\x20shape\x20to\x20settle_critical\x20but\x20the\x20severity\x20band\x20is\x203\x20<=\x20band\x20<\x204\x20(logic_and[greater_or_equal(band,3),\x20lesser(band,4)]\x20over\x20the\x20triage_decision\x20Repository\x20value)\x20+\x20the\x20same\x20order.service,\x20254-once\x20and\x20Signer-binding\x20legs.\x20Disjoint\x20from\x20the\x20other\x20three\x20tiers'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_medium','purpose':'MEDIUM-tier\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20severity\x20band\x202\x20<=\x20band\x20<\x203\x20over\x20the\x20triage_decision\x20Repository\x20value\x20+\x20order.service\x20+\x20254-once\x20+\x20Signer-binding.\x20Disjoint\x20from\x20the\x20other\x20three\x20tiers'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_low','purpose':'LOW-tier\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20severity\x20band\x201\x20<=\x20band\x20<\x202\x20over\x20the\x20triage_decision\x20Repository\x20value\x20+\x20order.service\x20+\x20254-once\x20+\x20Signer-binding.\x20The\x20>=\x201\x20floor\x20excludes\x20band\x200\x20(no\x20severity\x20recorded\x20=\x20not\x20a\x20valid\x20payout).\x20Disjoint\x20from\x20the\x20other\x20three\x20tiers'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate:\x20a\x20node\x20gate\x20over\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}\x20resolved\x20from\x20THIS\x20template\x27s\x20machine_shape\x20as\x20ONE\x20top-level\x20n-ary\x20logic_or\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20blocks\x20the\x20refund\x20once\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid).\x20NODE\x20GATE\x20IS\x20MANDATORY\x20(audit-261012\x20B4):\x20an\x20identity-only\x20refund\x20guard\x20lets\x20the\x20company\x20drain\x20the\x20escrow\x20the\x20moment\x20it\x20opens\x20the\x20intake\x20order.\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017\x20—\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter):\x20anti-hijack\x20is\x20structural\x20(GuardIdentifier(0)\x20recipient),\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening.\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg.\x20NEVER\x20gate\x20on\x20order.dispute\x20count\x20==\x200\x20(query\x20id\x201564):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Company-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20a\x20node-pinned\x20rail\x20aborts\x207\x20after\x20a\x20keeper\x20moves\x20the\x20order\x20on\x20—\x20F-51\x20—\x20and\x20CAT-C2\x27s\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20live;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion).\x20Pays\x20Rate\x2010000\x20to\x20the\x20company\x20(merchant)\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'}],'allocator':{'recipient':'signer','count':0xc,'mode':'rate','once_per_order':!![],'refund_track':'order_anchored','description':'Severity-tiered\x20bounty\x20settlement\x20on\x20\x27settled\x27.\x20INVERTED\x20FUNDING\x20TOPOLOGY:\x20unlike\x20a\x20normal\x20sale\x20(buyer\x20funds,\x20merchant\x20receives),\x20here\x20the\x20sponsoring\x20COMPANY\x20is\x20the\x20order_payer\x20that\x20funds\x20the\x20escrow\x20and\x20the\x20HUNTER\x20is\x20the\x20payee\x20—\x20so\x20the\x20hunter\x20cannot\x20be\x20a\x20build-time-fixed\x20Entity\x20(a\x20program\x20has\x20many\x20hunters\x20across\x20many\x20orders)\x20nor\x20a\x20GuardIdentifier\x20(that\x20resolves\x20to\x20the\x20order\x27s\x20for_object\x20=\x20the\x20order_payer\x20=\x20the\x20company,\x20paying\x20the\x20funder\x20back).\x20The\x20ONLY\x20dynamic\x20per-order\x20payee\x20the\x20chain\x20offers\x20is\x20Recipient::Signer\x20(allocation.move:615-617,\x20tx_context::sender)\x20—\x20the\x20hunter\x20claims\x20by\x20signing\x20the\x20settlement,\x20and\x20the\x20settle\x20guard\x27s\x20Signer-binding\x20leg\x20(signer\x20==\x20the\x20report\x20Repository\x20row\x27s\x20id_from-signer\x20key)\x20pins\x20that\x20claim\x20to\x20the\x20actual\x20reporter\x20so\x20it\x20cannot\x20be\x20front-run.\x20Each\x20severity\x20tier\x20is\x20its\x20OWN\x20allocator\x20(own\x20guard_key)\x20whose\x20Rate\x20legs\x20sum\x20to\x20exactly\x2010000:\x20the\x20hunter\x20takes\x20the\x20tier\x27s\x20bounty\x20Rate\x20and\x20the\x20COMPANY\x20(merchant\x20=\x20the\x20funder)\x20takes\x20the\x20complementary\x20Rate\x20that\x20returns\x20the\x20unawarded\x20remainder\x20—\x20an\x20EXPLICIT,\x20auditable\x20split\x20rather\x20than\x20an\x20uncapped\x20Surplus\x20sweep.\x20A\x20Rate-0\x20GuardIdentifier(0)\x20anchor\x20binds\x20each\x20tier\x20guard\x20to\x20the\x20paying\x20order\x20(CR-01).\x20Tiers\x20are\x20DISJOINT\x20severity\x20bands,\x20so\x20exactly\x20one\x20fires\x20per\x20report.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission.\x20Full\x20escrow\x20refund\x20to\x20the\x20company\x20(Rate\x2010000\x20via\x20the\x20order-anchored\x20recipient)\x20on\x20rejected\x20or\x20a\x20pre-submission\x20closed_cancel,\x20and\x20only\x20while\x20no\x20arbitration\x20award\x20has\x20paid\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false);\x20an\x20awarded\x20order\x27s\x20escrow\x20instead\x20exits\x20via\x20the\x20paired\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20company),\x20so\x20refund\x20and\x20ruling\x20payouts\x20never\x20both\x20fire\x20(D-BUG-2).','rows':[{'track':'settlement','recipient':'signer','recipient_key':'hunter','mode':'rate','value':0x2710,'guard_key':'settle_critical','note':'CRITICAL\x20bounty\x20to\x20the\x20hunter\x20(dynamic\x20Signer,\x20identity-bound\x20to\x20the\x20report\x20submitter):\x20a\x20critical\x20report\x20takes\x20the\x20WHOLE\x20max-tier\x20pool\x20(Rate\x2010000),\x20so\x20there\x20is\x20no\x20company\x20remainder\x20leg\x20on\x20this\x20tier.\x20Recipient::Signer\x20is\x20the\x20only\x20per-order-dynamic\x20payee;\x20the\x20settle_critical\x20guard\x27s\x20Signer-binding\x20leg\x20proves\x20the\x20claimant\x20filed\x20THIS\x20report.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_critical','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20submitted\x20bounty\x20ORDER\x20the\x20settle_critical\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20program\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20guard_key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.\x20hunter\x2010000\x20+\x20anchor\x200\x20=\x2010000\x20(ERATE_NOT_10000\x20satisfied).'},{'track':'settlement','recipient':'signer','recipient_key':'hunter','mode':'rate','value':0x1770,'guard_key':'settle_high','note':'HIGH\x20bounty\x20to\x20the\x20hunter\x20(dynamic\x20Signer):\x206000\x20bps\x20of\x20the\x20max-tier\x20pool.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0xfa0,'guard_key':'settle_high','note':'Company\x20(merchant\x20=\x20the\x20funding\x20order_payer)\x20recovers\x20the\x204000\x20bps\x20the\x20high\x20tier\x20did\x20not\x20award\x20—\x20an\x20EXPLICIT\x20Rate\x20leg,\x20not\x20an\x20uncapped\x20Surplus,\x20so\x20the\x20buyer\x20sees\x20the\x20exact\x20split\x20pre-order.\x20Recipient\x20MUST\x20be\x20a\x20non-empty\x20Entity\x20(a\x20blank\x20one\x20routes\x20the\x20share\x20to\x20the\x20deployer\x20via\x20the\x20SDK\x20resolver).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_high','note':'Rate-0\x20ORDER\x20anchor\x20(CR-01)\x20binding\x20settle_high\x20to\x20the\x20paying\x20bounty\x20order;\x20pays\x20nothing.\x20hunter\x206000\x20+\x20company\x204000\x20+\x20anchor\x200\x20=\x2010000.'},{'track':'settlement','recipient':'signer','recipient_key':'hunter','mode':'rate','value':0xbb8,'guard_key':'settle_medium','note':'MEDIUM\x20bounty\x20to\x20the\x20hunter\x20(dynamic\x20Signer):\x203000\x20bps\x20of\x20the\x20max-tier\x20pool.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x1b58,'guard_key':'settle_medium','note':'Company\x20(merchant/funder)\x20recovers\x20the\x20unawarded\x207000\x20bps\x20on\x20a\x20medium-severity\x20payout\x20via\x20an\x20explicit\x20Rate\x20leg.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_medium','note':'Rate-0\x20ORDER\x20anchor\x20(CR-01)\x20binding\x20settle_medium\x20to\x20the\x20paying\x20bounty\x20order;\x20pays\x20nothing.\x20hunter\x203000\x20+\x20company\x207000\x20+\x20anchor\x200\x20=\x2010000.'},{'track':'settlement','recipient':'signer','recipient_key':'hunter','mode':'rate','value':0x3e8,'guard_key':'settle_low','note':'LOW\x20bounty\x20to\x20the\x20hunter\x20(dynamic\x20Signer):\x201000\x20bps\x20of\x20the\x20max-tier\x20pool\x20—\x20the\x20smallest\x20tier\x20still\x20pays\x20a\x20POSITIVE\x20amount,\x20since\x20a\x20Rate-0\x20hunter\x20leg\x20would\x20leave\x20the\x20tier\x20distributing\x20nothing\x20to\x20the\x20reporter\x20and\x20trip\x20the\x20zero-distribution\x20abort.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2328,'guard_key':'settle_low','note':'Company\x20(merchant/funder)\x20recovers\x20the\x20unawarded\x209000\x20bps\x20on\x20a\x20low-severity\x20payout\x20—\x20the\x20largest\x20company\x20remainder,\x20since\x20low\x20pays\x20the\x20smallest\x20hunter\x20Rate.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_low','note':'Rate-0\x20ORDER\x20anchor\x20(CR-01)\x20binding\x20settle_low\x20to\x20the\x20paying\x20bounty\x20order;\x20pays\x20nothing.\x20hunter\x201000\x20+\x20company\x209000\x20+\x20anchor\x200\x20=\x2010000.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Company-recovery\x20rail\x20(escrow-exit\x20invariant):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20back\x20to\x20the\x20company\x20(merchant/funder)\x20Entity\x20so\x20an\x20awarded\x20intake\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20the\x20settle\x20tiers/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20full\x20refund\x20to\x20the\x20COMPANY\x20on\x20rejected\x20(dup/na/informative/invalid)\x20or\x20pre-submission\x20closed_cancel\x20(refund_gate\x20node-gates\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}).\x20GuardIdentifier(0)\x20resolves\x20to\x20the\x20paying\x20Order\x20and\x20allocation.move\x20ERECIPIENT_NOT_FOR_OBJECT\x20makes\x20redirection\x20structurally\x20impossible;\x20the\x20company\x20claims\x20via\x20the\x20two-step\x20order\x20receive.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false\x20so\x20an\x20awarded\x20order\x20cannot\x20also\x20drain\x20the\x20refund\x20rail\x20(D-BUG-2).\x20Set\x20this\x20allocator\x27s\x20once_per_order=true\x20and\x20register\x20the\x20{identifier:254,\x20b_submission:true}\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x20with\x20the\x20once-triggered\x20code.'}]},'key_risk':'The\x20company\x20funds\x20the\x20escrow\x20AND\x20its\x20independent\x20triager\x20grades\x20severity:\x20a\x20triager\x20that\x20under-grades\x20or\x20a\x20company\x20that\x20stalls\x20leaves\x20the\x20hunter\x27s\x20only\x20recourse\x20in\x20Arbitration,\x20and\x20the\x20compensation\x20fund\x20pays\x20the\x20order\x20owner\x20(the\x20company),\x20so\x20it\x20cannot\x20indemnify\x20the\x20hunter\x20directly.','build_notes':['INVERTED\x20FUNDING\x20TOPOLOGY\x20(the\x20whole\x20design\x20turns\x20on\x20this):\x20in\x20a\x20normal\x20sale\x20the\x20buyer\x20funds\x20and\x20the\x20merchant\x20receives,\x20so\x20the\x20payee\x20is\x20a\x20build-time\x20Entity.\x20A\x20bounty\x20inverts\x20it\x20—\x20the\x20sponsoring\x20COMPANY\x20is\x20the\x20order_payer\x20that\x20funds,\x20and\x20the\x20HUNTER\x20(a\x20different\x20identity\x20on\x20every\x20order)\x20is\x20the\x20payee.\x20Neither\x20Entity\x20(fixed\x20at\x20build;\x20a\x20program\x20has\x20many\x20hunters)\x20nor\x20GuardIdentifier\x20(resolves\x20to\x20for_object\x20=\x20the\x20order\x20=\x20the\x20company,\x20paying\x20the\x20funder\x20back)\x20can\x20express\x20a\x20per-order-dynamic\x20payee.\x20Recipient::Signer\x20(allocation.move:615-617)\x20is\x20the\x20ONLY\x20mechanism:\x20the\x20hunter\x20claims\x20by\x20signing\x20the\x20settlement\x20tx.\x20This\x20is\x20why\x20the\x20settle\x20guards\x20carry\x20a\x20MANDATORY\x20Signer-binding\x20leg\x20(context(Signer)\x20==\x20the\x20report\x20Repository\x20row\x27s\x20id_from-signer\x20key)\x20—\x20without\x20it\x20any\x20party\x20able\x20to\x20satisfy\x20the\x20tier\x20gate\x20could\x20redirect\x20the\x20bounty\x20to\x20itself.','SEVERITY\x20LADDER\x20(pattern.tiered_amount_ladder\x20over\x20a\x20Repository\x20value,\x20NOT\x20over\x20time):\x20Allocation\x20sharing\x20values\x20are\x20STATIC,\x20so\x20a\x20runtime-variable\x20payout\x20is\x20expressed\x20as\x20four\x20static\x20tier\x20allocators\x20selected\x20by\x20an\x20interval\x20guard\x20over\x20the\x20triage_decision\x20Repository\x20U64\x20(1=low\x20…\x204=critical).\x20The\x20bands\x20MUST\x20be\x20disjoint\x20and\x20exhaustive\x20over\x20{1,2,3,4}:\x20an\x20overlap\x20double-pays,\x20a\x20gap\x20leaves\x20that\x20severity\x20with\x20NO\x20payable\x20branch\x20and\x20the\x20escrow\x20waits\x20for\x20manual\x20resolution.\x20Each\x20tier\x20is\x20its\x20own\x20guard_key/allocator\x20whose\x20Rate\x20legs\x20sum\x20to\x20exactly\x2010000\x20on\x20their\x20own\x20(hunter\x20Rate\x20+\x20company\x20Rate\x20+\x20Rate-0\x20order\x20anchor),\x20so\x20the\x20on-chain\x20ERATE_NOT_10000\x20assert\x20is\x20satisfied\x20per\x20tier\x20without\x20relying\x20on\x20a\x20Surplus\x20exemption.','MAX-TIER\x20FUNDING\x20+\x20EXPLICIT\x20COMPANY\x20REMAINDER:\x20severity\x20is\x20unknown\x20at\x20buy,\x20so\x20the\x20company\x20escrows\x20the\x20CRITICAL\x20(max)\x20amount;\x20a\x20lower-severity\x20report\x20pays\x20the\x20hunter\x27s\x20tier\x20Rate\x20and\x20an\x20EXPLICIT\x20complementary\x20company\x20Rate\x20returns\x20the\x20unawarded\x20remainder\x20to\x20the\x20funder.\x20This\x20is\x20deliberately\x20NOT\x20an\x20uncapped\x20Surplus\x20sweep\x20—\x20the\x20split\x20is\x20a\x20fixed,\x20auditable\x20pair\x20of\x20Rate\x20legs\x20the\x20company\x20can\x20read\x20pre-order\x20(critical\x20pays\x20the\x20hunter\x20the\x20whole\x20pool,\x20so\x20it\x20carries\x20no\x20company\x20leg).\x20Keep\x20the\x20company\x20recipient\x20an\x20explicit\x20NON-EMPTY\x20Entity\x20(\x27merchant\x27);\x20a\x20blank\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deployer\x20via\x20the\x20SDK\x20resolver.','ONCE\x20SLOT\x20ARMING\x20+\x20SCOPE\x20(v54,\x20audit-261012\x20B7):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20each\x20allocator\x20Guard\x20(the\x20four\x20settle\x20tiers\x20+\x20refund_gate)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20payment_info.for_object\x20(the\x20bound\x20Order),\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016.\x20SCOPE\x20(C10,\x20mainnet-verified):\x20the\x20once\x20key\x20is\x20(guard,\x20allocator\x20leg,\x20bcs(for_object))\x20stored\x20ON\x20the\x20Allocation\x20—\x20once\x20PER\x20ORDER\x20per\x20allocation;\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20is\x20what\x20makes\x20each\x20tier\x20Guard\x20refuse\x20a\x20sibling\x20program\x27s\x20passport.','ACCEPTANCE\x20COMPONENT\x20(D12\x20重构\x202,\x20acceptance_mode\x20\x27bounty\x27):\x20the\x20validity/severity\x20decision\x20is\x20the\x20independent\x20triager\x27s,\x20never\x20the\x20funding\x20company\x27s\x20alone\x20(INV-A3\x20—\x20compile\x20hard-blocks\x20a\x20judge-decided\x20mode\x20whose\x20arbitration_mode\x20is\x20not\x20\x27third_party\x27).\x20Grant\x20the\x20triager\x20permission\x20entity\x20slot\x20index\x201001,\x20disjoint\x20from\x20BOTH\x20the\x20company\x20(order\x20payer)\x20and\x20the\x20hunter;\x20bind\x20only\x20an\x20already-operational\x20Arbitration\x20venue\x20as\x20the\x20contest\x20channel.','SILENCE\x20NEVER\x20AUTO-PAYS\x20(the\x20deliberate\x20contrast\x20with\x20agent-task):\x20agent-task\x20auto-RELEASES\x20to\x20the\x20worker\x20on\x20timeout\x20because\x20the\x20work\x20is\x20presumptively\x20owed.\x20A\x20bounty\x20is\x20the\x20opposite\x20—\x20an\x20unvalidated\x20report\x20draining\x20the\x20pool\x20is\x20the\x20core\x20risk\x20—\x20so\x20there\x20is\x20NO\x20accept-timeout\x20leg.\x20If\x20the\x20triager\x20stalls,\x20the\x20order\x20simply\x20stays\x20at\x20\x27submitted\x27\x20and\x20the\x20hunter\x27s\x20recourse\x20is\x20Arbitration\x20(a\x20dispute),\x20not\x20a\x20keeper\x20auto-award.\x20This\x20also\x20means\x20INV-A2\x20(accept/timeout\x20sibling\x20race)\x20does\x20not\x20arise:\x20there\x20is\x20no\x20timeout\x20sibling\x20on\x20the\x20accept\x20edge.','NO\x20REVISION\x20LOOP\x20(INV-A1\x20silent\x20by\x20omission):\x20a\x20report\x20is\x20triaged\x20ONCE\x20(valid+severity,\x20or\x20rejected)\x20—\x20there\x20is\x20no\x20bounded\x20resubmission\x20loop,\x20so\x20fee_params\x20declares\x20NO\x20revision_rounds_max\x20and\x20compile\x20raises\x20no\x20ACCEPTANCE_REVISION_UNBOUNDED.\x20Contrast\x20design-contest,\x20which\x20carries\x20a\x20counted\x20winner-fix\x20loop\x20and\x20MUST\x20mount\x20a\x20counter-backed\x20Repository\x20guard.','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20az-mn-261007\x20T5):\x20every\x20terminal\x20keeps\x20an\x20exit\x20under\x20BOTH\x20polarities\x20of\x20the\x20arbitration\x20payout\x20state.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20the\x20paired\x20recover_gate\x20row\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20company)\x20ships\x20in\x20the\x20allocator\x20so\x20an\x20awarded\x20intake\x20order\x27s\x20escrow\x20still\x20exits.\x20Resolve\x20both\x20guard\x20designs\x20before\x20the\x20Machine\x20publish.\x20NEVER\x20gate\x20the\x20refund\x20rail\x20on\x20order.dispute\x20count\x20==\x200\x20(append-only\x20vector\x20->\x20one-way\x20door).','COMPENSATION\x20FUND\x20LIMITATION\x20(honest\x20disclosure):\x20the\x20ruling\x20payout\x20path\x20pays\x20the\x20ORDER\x20OWNER\x20(the\x20company)\x20—\x20there\x20is\x20no\x20on-chain\x20path\x20for\x20the\x20compensation\x20fund\x20to\x20indemnify\x20the\x20HUNTER.\x20If\x20the\x20company\x20wrongly\x20rejects\x20a\x20valid\x20report,\x20the\x20hunter\x27s\x20on-chain\x20recourse\x20is\x20to\x20dispute\x20in\x20Arbitration\x20and\x20have\x20the\x20keeper\x20trigger\x20the\x20matching\x20settle\x20tier\x20from\x20the\x20escrow;\x20the\x20fund\x20itself\x20cannot\x20pay\x20the\x20hunter.\x20Document\x20this\x20asymmetry\x20to\x20hunters\x20pre-submission.','DISPUTES\x20route\x20through\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11):\x20Arbitration\x20(compensation_fund)\x20and\x20Allocator\x20(escrow)\x20are\x20independent\x20systems\x20by\x20design;\x20the\x20refund\x20Allocator\x20and\x20a\x20ruling-driven\x20settle\x20must\x20never\x20both\x20fire\x20for\x20one\x20report.\x20VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20freshly\x20created\x20Arbitration\x20defaults\x20to\x20PAUSED\x20—\x20unpause\x20is\x20the\x20ARBITRATOR\x27s\x20deployment\x20step\x20on\x20their\x20own\x20object,\x20never\x20this\x20build\x27s\x20duty;\x20bind\x20only\x20a\x20venue\x20already\x20unpaused\x20(a\x20paused\x20venue\x20rejects\x20every\x20filing\x20with\x20E_PAUSED).','commission_rate_bps\x20is\x200\x20and\x20is\x20NOT\x20a\x20placeholder:\x20WoWok\x20extracts\x20nothing\x20from\x20a\x20bounty.\x20A\x20program\x20that\x20IS\x20an\x20aggregator\x20(a\x20managed\x20bounty\x20platform)\x20may\x20charge\x20its\x20own\x20fee\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20company\x20can\x20compute\x20pre-program,\x20never\x20an\x20implicit\x20remainder;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity;\x20(3)\x20no\x20mandatory\x20transit\x20pool,\x20and\x20never\x20take\x20the\x20fee\x20by\x20silently\x20shrinking\x20the\x20hunter\x27s\x20Rate\x20leg\x20(the\x20complementary\x20company\x20Rate\x20is\x20the\x20funder\x27s\x20own\x20remainder,\x20not\x20a\x20platform\x20carve-out).','KEEPER\x20IS\x20A\x20FIRST-CLASS\x20DEPENDENCY:\x20triage-window\x20reminders,\x20the\x20ruling-driven\x20settle\x20execution\x20and\x20any\x20dispute-triggered\x20refund\x20are\x20100%\x20off-chain\x20(machine.move\x20has\x20no\x20timer;\x20arb.move\x20rulings\x20only\x20change\x20case\x20state).\x20No\x20keeper\x20means\x20manual-only\x20triage\x20and\x20the\x20funds-stuck\x20failure\x20mode\x20returns.','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20bounty\x20program\x20brief\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention),\x20or\x20host\x20your\x20own\x20endpoint\x20for\x20long-lived\x20mainnet\x20programs.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'triage_window_days':0x5,'dispute_timeout_days':0x7,'arbitration_fee_usd':0x0},'time_anchors':{'triage_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27submitted\x27,\x20find=last)\x20—\x20the\x20report\x20submission\x20ENTRY\x20timestamp;\x20triage_window_days\x20is\x20the\x20SLA\x20after\x20which\x20the\x20hunter\x20may\x20escalate\x20to\x20Arbitration.\x20There\x20is\x20NO\x20auto-release\x20leg\x20on\x20this\x20anchor\x20(silence\x20never\x20auto-pays\x20a\x20bounty).\x20The\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','dispute_timeout':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard,\x20R-M1-11)'},'trust_mechanisms':['R1\x20dual-track\x20payout:\x20a\x20valid\x20report\x20pays\x20via\x20the\x20severity-tier\x20Allocator;\x20an\x20arbitration\x20ruling\x20pays\x20via\x20the\x20compensation\x20fund\x20—\x20never\x20both\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false)','R2\x20independent\x20triager\x20+\x20independent\x20arbitration\x20Permission,\x20both\x20enforced\x20disjoint\x20from\x20the\x20company\x20(order\x20payer)\x20and\x20the\x20hunter\x20(INV-A3;\x20contract\x20assertion\x20at\x20publish)','R3\x20compensation\x20fund\x20required\x20before\x20publish\x20whenever\x20the\x20fund\x20is\x20non-zero\x20(with\x20the\x20honest\x20caveat\x20that\x20it\x20indemnifies\x20the\x20order\x20owner,\x20not\x20the\x20hunter)','R4\x20acceptance\x20gate:\x20an\x20explicit\x20triager\x20ruling\x20(valid+severity,\x20or\x20reject)\x20—\x20the\x20hunter\x20can\x20never\x20self-grade\x20and\x20the\x20company\x20can\x20never\x20silently\x20ignore\x20a\x20filed\x20report\x20without\x20leaving\x20it\x20disputable','R5\x20Signer-binding:\x20the\x20dynamic\x20hunter\x20payout\x20is\x20pinned\x20to\x20the\x20report\x20Repository\x20row\x27s\x20id_from-signer\x20key,\x20so\x20the\x20claimant\x20is\x20provably\x20the\x20reporter\x20(anti-front-run)','R6\x20severity\x20bands\x20disjoint\x20+\x20exhaustive;\x20each\x20tier\x27s\x20Rate\x20legs\x20sum\x20to\x20exactly\x2010000\x20(hunter\x20Rate\x20+\x20explicit\x20complementary\x20company\x20Rate),\x20no\x20uncapped\x20Surplus','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20(tiers,\x20triager,\x20venue)\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound\x20to\x20the\x20program','R9\x20keepers\x20for\x20the\x20triage-window\x20SLA,\x20the\x20ruling-driven\x20settle\x20and\x20the\x20dispute\x20timeout','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration\x20(0%\x20commission,\x20per-tier\x20bps\x20machine-checkable)'],'keeper_dependencies':['triage-window\x20SLA\x20reminder\x20(triage_window_days;\x20NO\x20auto-pay\x20—\x20escalation\x20is\x20the\x20hunter\x27s\x20Arbitration\x20right,\x20not\x20a\x20keeper\x20award)','ruling-driven\x20settlement\x20(a\x20valid\x20triage\x20records\x20severity;\x20the\x20keeper\x20submits\x20the\x20matching\x20tier\x27s\x20settle\x20passport\x20to\x20release\x20the\x20bounty)','dispute\x20response\x20timeout\x20+\x20arbitration\x20ruling\x20execution\x20(a\x20ruling\x20only\x20changes\x20case\x20state;\x20the\x20keeper\x20allocates\x20per\x20ruling)'],'recommended_role':'merchant','role_rationale':'The\x20sponsoring\x20company\x20builds\x20and\x20operates\x20the\x20bounty\x20program\x20Service,\x20funds\x20each\x20intake\x20order\x20as\x20order_payer,\x20and\x20delegates\x20grading\x20to\x20an\x20independent\x20triager\x20permission;\x20the\x20hunter\x20is\x20the\x20dynamic\x20Signer\x20payee,\x20not\x20a\x20permission\x20entity.','differences':['acceptance_mode\x20\x27bounty\x27:\x20an\x20INDEPENDENT\x20triager\x20grades\x20validity\x20+\x20severity\x20(the\x20验收裁判\x20component),\x20and\x20the\x20payout\x20is\x20a\x20severity-tiered\x20ladder\x20over\x20a\x20Repository\x20U64\x20—\x20not\x20a\x20single\x20milestone\x20release','INVERTED\x20funding:\x20the\x20company\x20(order_payer)\x20funds\x20and\x20the\x20hunter\x20is\x20paid\x20as\x20a\x20dynamic\x20Recipient::Signer,\x20identity-bound\x20to\x20the\x20report\x20submitter\x20—\x20the\x20only\x20per-order-dynamic\x20payee\x20the\x20chain\x20offers','No\x20auto-pay\x20timeout:\x20silence\x20NEVER\x20releases\x20an\x20unvalidated\x20bounty\x20(the\x20opposite\x20polarity\x20of\x20agent-task\x27s\x20silence-favors-the-worker\x20auto-release);\x20a\x20stalled\x20triager\x20routes\x20the\x20hunter\x20to\x20Arbitration','No\x20revision\x20loop:\x20a\x20report\x20is\x20graded\x20once,\x20so\x20INV-A1\x20stays\x20silent\x20by\x20omission\x20(contrast\x20design-contest\x27s\x20counted\x20winner-fix\x20loop)','review_mode\x20\x27none\x27:\x20reputation\x20rides\x20the\x20triager\x27s\x20on-chain\x20severity\x20rulings,\x20not\x20a\x20human\x20star-review'],'user_inputs':['the\x20four\x20severity-tier\x20payout\x20splits\x20—\x20each\x20tier\x27s\x20hunter\x20Rate\x20vs\x20the\x20complementary\x20company\x20Rate\x20in\x20the\x20allocator\x20rows\x20(critical\x20pays\x20the\x20hunter\x20the\x20whole\x20pool;\x20high/medium/low\x20default\x206000/3000/1000\x20bps\x20to\x20the\x20hunter).\x20These\x20row\x20Rates\x20are\x20the\x20authoritative\x20money\x20shape,\x20tuned\x20per\x20program','triage_window_days\x20—\x20the\x20triage\x20SLA\x20after\x20which\x20the\x20hunter\x20may\x20escalate\x20to\x20Arbitration\x20(NOT\x20an\x20auto-pay\x20timer)','dispute_timeout_days\x20+\x20arbitration_fee_usd\x20—\x20dispute\x20response\x20window\x20and\x20filing\x20fee\x20(default\x20near-zero\x20for\x20the\x20small-report\x20tail)','the\x20independent\x20triager\x20permission\x20entity\x20—\x20MUST\x20be\x20disjoint\x20from\x20the\x20company\x20(order\x20payer)\x20and\x20the\x20hunter;\x20grant\x20it\x20slot\x20index\x201001\x20and\x20bind\x20only\x20an\x20operational\x20Arbitration\x20venue']},{'id':'freelance/design-contest','industry':'freelance','variant':'design-contest','product_ref':'ninety-nine-designs','archetype':'challenger','review_mode':'none','acceptance_mode':'contest','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'funded','role':'Entry:\x20the\x20sponsoring\x20company\x20(order_payer)\x20opens\x20the\x20contest\x20order\x20and\x20escrows\x20the\x20GUARANTEED\x20prize\x20pool\x20atomically\x20at\x20buy\x20—\x20a\x20design\x20contest\x20is\x20guaranteed-award,\x20so\x20the\x20prize\x20is\x20committed\x20up-front\x20and\x20MUST\x20go\x20to\x20a\x20placed\x20winner;\x20the\x20only\x20no-payout\x20exits\x20are\x20a\x20pre-submission\x20void\x20(closed_cancel)\x20or\x20a\x20judged\x20no-valid-entry\x20(voided).\x20The\x20Machine\x20starts\x20here.\x20No\x20unpaid\x20\x27open\x27\x20state\x20exists\x20on\x20chain\x20(the\x20contest\x20brief\x20itself\x20is\x20an\x20off-Machine\x20WIP\x20listing)','semantic_role':'draft','from':[{'prev':''}]},{'name':'judging','role':'Submissions\x20closed\x20(the\x20submission\x20window\x20elapsed)\x20and\x20the\x20independent\x20jury\x20deliberates.\x20Designers\x20wrote\x20their\x20entries\x20to\x20the\x20entry\x20Repository\x20(id_from\x20signer\x20—\x20each\x20row\x20keyed\x20to\x20its\x20designer)\x20DURING\x20\x27funded\x27;\x20this\x20node\x20is\x20where\x20the\x20judge/jury\x20permission\x20(slot\x201001)\x20ranks\x20them\x20(off-chain\x20tally\x20or\x20via\x20the\x20bound\x20voting\x20venue).\x20Advanced\x20by\x20the\x20submission-window\x20TIME\x20gate,\x20so\x20a\x20keeper\x20can\x20close\x20submissions\x20if\x20the\x20judge\x20stalls','semantic_role':'active','from':[{'prev':'funded','forward':'CloseSubmissions','guard_key':'submission_window'}]},{'name':'placement_provisional','role':'The\x20independent\x20judge\x20(permission\x201001)\x20records\x20the\x20WINNER\x20—\x20writes\x20the\x20winning\x20designer\x27s\x20address\x20to\x20the\x20placement\x20Repository\x20keyed\x20by\x20THIS\x20order\x20—\x20and\x20the\x20provisional\x20result\x20opens\x20the\x20appeal\x20window.\x20Provisional,\x20not\x20final:\x20a\x20losing\x20entrant\x20may\x20contest\x20before\x20the\x20prize\x20commits','semantic_role':'active','from':[{'prev':'judging','forward':'RecordPlacement','guard_key':'record_placement','permission_index':0x3e9}]},{'name':'placement_appealed','role':'A\x20losing\x20entrant\x20(proved\x20a\x20real\x20entrant\x20by\x20their\x20entry\x20Repository\x20row)\x20contests\x20the\x20provisional\x20placement\x20WITHIN\x20the\x20appeal\x20window\x20—\x20the\x20contest\x20runs\x20on\x20the\x20Service\x27s\x20bound\x20Arbitration\x20object\x20(R-M1-11:\x20off-Machine;\x20rulings\x20change\x20Arb\x20case\x20state\x20only).\x20RECORD\x20waypoint,\x20NOT\x20a\x20dispute\x20terminal\x20(same\x20convention\x20as\x20retail\x27s\x20item_lost):\x20the\x20keeper\x20listens\x20for\x20the\x20Arb\x20Finished\x20event\x20and\x20pushes\x20the\x20ruling\x20forward\x20—\x20upheld\x20->\x20placement_final,\x20overturned\x20->\x20back\x20to\x20judging\x20for\x20a\x20re-record','semantic_role':'active','from':[{'prev':'placement_provisional','forward':'AppealPlacement','guard_key':'appeal_filed'}]},{'name':'placement_final','role':'Placement\x20committed:\x20either\x20the\x20appeal\x20window\x20elapsed\x20with\x20no\x20contest\x20(FinalizePlacement,\x20the\x20time\x20gate)\x20or\x20an\x20appealed\x20ruling\x20upheld\x20the\x20placement\x20(PlacementUpheld).\x20The\x20winner\x20now\x20delivers\x20final\x20source\x20files.\x20TWO\x20distinct\x20forwards\x20on\x20TWO\x20distinct\x20prevs\x20—\x20never\x20a\x20same-prev\x20sibling\x20race\x20(INV-A2)','semantic_role':'delivered','from':[{'prev':'placement_provisional','forward':'FinalizePlacement','guard_key':'appeal_window'},{'prev':'placement_appealed','forward':'PlacementUpheld','permission_index':0x3e9}]},{'name':'final_delivery','role':'The\x20winner\x20(dynamic\x20Signer)\x20submits\x20the\x20final\x20source\x20files\x20with\x20a\x20WIP-hash\x20evidence\x20row\x20written\x20to\x20the\x20delivery\x20Repository.\x20The\x20guaranteed\x20prize\x20is\x20now\x20owed;\x20the\x20sponsor\x20may\x20request\x20polish\x20revisions\x20or\x20accept,\x20and\x20a\x20delivery-window\x20keeper\x20auto-accepts\x20if\x20the\x20sponsor\x20goes\x20silent\x20—\x20the\x20prize\x20can\x20never\x20be\x20withheld\x20by\x20sponsor\x20inaction','semantic_role':'delivered','from':[{'prev':'placement_final','forward':'DeliverFinal','guard_key':'final_files'},{'prev':'revision','forward':'Redeliver'}]},{'name':'revision','role':'Sponsor-requested\x20polish\x20round\x20on\x20the\x20final\x20files\x20(the\x20winner-fix\x20loop).\x20UNBOUNDED\x20by\x20design\x20and\x20declared\x20revision_rounds_max\x20\x27unlimited\x27:\x20progress.move\x20caps\x20EDGE\x20count\x20(MAX_NODE_PAIR),\x20never\x20VISIT\x20count,\x20and\x20a\x20Repository\x20tally\x20is\x20an\x20upsert\x20value\x20its\x20own\x20writer\x20can\x20forge,\x20so\x20NO\x20finite\x20cap\x20is\x20chain-enforceable\x20(fix-03\x20ruling,\x20same\x20as\x20catalog-tiers).\x20The\x20loop\x20is\x20a\x20courtesy\x20—\x20it\x20gates\x20NO\x20money\x20(the\x20prize\x20is\x20guaranteed\x20and\x20settles\x20from\x20final_delivery),\x20so\x20a\x20sponsor\x20cannot\x20use\x20it\x20to\x20withhold\x20payment','semantic_role':'active','from':[{'prev':'final_delivery','forward':'RequestRevision','operator':'order_payer'}]},{'name':'settled','role':'Terminal:\x20the\x20sponsor\x20accepts\x20the\x20final\x20files\x20(AcceptDelivery)\x20OR\x20the\x20delivery\x20window\x20elapses\x20and\x20the\x20keeper\x20auto-accepts\x20(AutoAcceptByKeeper)\x20—\x20ONE\x20node\x20reached\x20by\x20TWO\x20distinct\x20forwards\x20sharing\x20prev\x20final_delivery\x20(the\x20INV-A2\x20folded\x20safe\x20form;\x20same-prev\x20siblings\x20merge\x20into\x20one\x20Pair,\x20distinct\x20names\x20avoid\x20E_DUPLICATE_FORWARD_NAME).\x20The\x20winner\x20then\x20claims\x20the\x20guaranteed\x20prize\x20by\x20signing\x20a\x20SEPARATE\x20settlement\x20tx\x20(settle_prize\x20allocator:\x20Rate\x2010000\x20to\x20the\x20dynamic\x20Signer,\x20pinned\x20to\x20the\x20placement\x20Repository\x20winner\x20address)','semantic_role':'final','from':[{'prev':'final_delivery','forward':'AcceptDelivery','operator':'order_payer'},{'prev':'final_delivery','forward':'AutoAcceptByKeeper','guard_key':'delivery_window'}]},{'name':'closed_cancel','role':'Pre-submission\x20sponsor\x20cancellation\x20—\x20the\x20contest\x20escrowed\x20the\x20guaranteed\x20prize\x20at\x20buy\x20but\x20the\x20judge\x20has\x20not\x20yet\x20closed\x20submissions,\x20so\x20the\x20sponsor\x20may\x20void\x20and\x20take\x20a\x20full\x20order-anchored\x20refund\x20(R-DRAFT-VOID:\x20an\x20abandoned\x20or\x20ghost\x20contest\x20order\x20needs\x20a\x20single-hop\x20payer\x20exit;\x20escrow\x20is\x20funded\x20at\x20order_new,\x20not\x20at\x20first\x20forward).\x20Post-close\x20outcomes\x20route\x20to\x20placement/void\x20and\x20disputes\x20to\x20Arbitration,\x20never\x20here,\x20so\x20the\x20refund\x20and\x20a\x20prize\x20payout\x20never\x20both\x20fire\x20(D-BUG-2)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'funded','forward':'CancelBeforeSubmission'}]},{'name':'voided','role':'The\x20independent\x20judge\x20(1001)\x20rules\x20NO\x20VALID\x20ENTRY\x20after\x20submissions\x20close\x20—\x20a\x20guaranteed-award\x20contest\x20still\x20cannot\x20pay\x20for\x20nobody\x27s\x20work,\x20so\x20the\x20prize\x20refunds\x20in\x20full\x20to\x20the\x20sponsor.\x20A\x20deliberate\x20judge\x20ruling,\x20never\x20a\x20timeout:\x20silence\x20never\x20auto-voids\x20(a\x20stalled\x20judge\x20leaves\x20the\x20order\x20at\x20\x27judging\x27\x20for\x20Arbitration\x20rather\x20than\x20silently\x20refunding\x20a\x20contest\x20that\x20had\x20real\x20entries)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'judging','forward':'VoidNoEntry','guard_key':'no_valid_entry','permission_index':0x3e9}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20the\x20judge\x20/\x20jury\x20/\x20service\x20staff\x20from\x20self-purchasing\x20a\x20contest\x20entry\x20order\x20and\x20later\x20self-awarding\x20the\x20prize\x20(Passport-gated\x20purchase\x20once\x20set)\x20—\x20the\x20sponsor\x20(funder),\x20the\x20judge\x20and\x20the\x20winning\x20designer\x20must\x20be\x20three\x20disjoint\x20identities'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'submission_window','purpose':'Submission-close\x20time\x20gate\x20(funded->judging,\x20CloseSubmissions):\x20Clock\x20>=\x20progress.history.time\x20(id\x201280,\x20next_node=\x27funded\x27,\x20find=last)\x20+\x20submission_window_days,\x20so\x20entries\x20stop\x20being\x20accepted\x20objectively\x20and\x20a\x20keeper\x20can\x20close\x20submissions\x20if\x20the\x20judge\x20stalls.\x20Operator\x20left\x20unbound\x20so\x20the\x20keeper\x20submits\x20the\x20timeout\x20path.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05)\x20so\x20a\x20sibling\x20contest\x27s\x20passport\x20cannot\x20close\x20this\x20one'},{'template_id':'pattern.identity_check_single','host':'machine','key':'record_placement','purpose':'Judge\x20placement\x20ruling\x20(judging->placement_provisional,\x20RecordPlacement):\x20binds\x20the\x20forward\x20to\x20the\x20single\x20independent\x20judge/jury\x20permission\x20entity\x20(slot\x201001),\x20disjoint\x20from\x20BOTH\x20the\x20sponsor\x20(order\x20payer)\x20and\x20every\x20entrant\x20—\x20the\x20payout-owing\x20party\x20never\x20decides\x20the\x20payout\x20(INV-A3).\x20The\x20judge\x20also\x20writes\x20the\x20WINNER\x27s\x20address\x20to\x20the\x20placement\x20Repository\x20keyed\x20by\x20THIS\x20order,\x20the\x20value\x20the\x20settle_prize\x20Signer-binding\x20leg\x20reads\x20to\x20pin\x20the\x20dynamic\x20winner\x20payout.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05)\x20so\x20a\x20sibling\x20contest\x27s\x20passport\x20cannot\x20place\x20here'},{'template_id':'pattern.identity_check_single','host':'machine','key':'no_valid_entry','purpose':'Judge\x20NO-VALID-ENTRY\x20ruling\x20(judging->voided,\x20VoidNoEntry):\x20the\x20same\x20independent\x20judge\x20slot\x20(1001).\x20A\x20void\x20is\x20an\x20explicit\x20ruling,\x20never\x20a\x20default\x20—\x20there\x20is\x20NO\x20timeout\x20that\x20auto-voids,\x20so\x20a\x20stalled\x20judge\x20leaves\x20the\x20order\x20at\x20\x27judging\x27\x20for\x20Arbitration\x20rather\x20than\x20silently\x20refunding\x20a\x20contest\x20that\x20had\x20real\x20entries'},{'template_id':'pattern.repository_data_check','host':'machine','key':'appeal_filed','purpose':'Appeal-eligibility\x20gate\x20(placement_provisional->placement_appealed,\x20AppealPlacement):\x20the\x20appellant\x20must\x20have\x20an\x20entry\x20Repository\x20row\x20(id_from\x20signer\x20—\x20proves\x20they\x20are\x20a\x20real\x20entrant,\x20not\x20a\x20bystander\x20griefing\x20the\x20contest)\x20and\x20the\x20appeal\x20must\x20be\x20filed\x20WITHIN\x20appeal_window_days\x20of\x20the\x20provisional\x20placement.\x20The\x20appeal\x20itself\x20runs\x20on\x20the\x20bound\x20Arbitration\x20object\x20(R-M1-11);\x20this\x20gate\x20only\x20admits\x20eligible\x20appellants\x20to\x20the\x20record\x20waypoint'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'appeal_window','purpose':'Appeal-window\x20time\x20gate\x20(placement_provisional->placement_final,\x20FinalizePlacement):\x20Clock\x20>=\x20progress.history.time\x20(id\x201280,\x20next_node=\x27placement_provisional\x27,\x20find=last)\x20+\x20appeal_window_days\x20with\x20no\x20appeal\x20filed,\x20so\x20the\x20placement\x20commits\x20objectively.\x20Mutually\x20exclusive\x20with\x20AppealPlacement\x20by\x20node\x20position\x20+\x20the\x20window\x20(once\x20appealed\x20the\x20order\x20is\x20not\x20at\x20placement_provisional;\x20once\x20the\x20window\x20closes\x20no\x20appeal\x20can\x20fire)\x20—\x20the\x20INV-A2-safe\x20form,\x20never\x20a\x20same-prev\x20sibling\x20race.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]'},{'template_id':'pattern.repository_data_check','host':'machine','key':'final_files','purpose':'Final-files\x20evidence\x20gate\x20(placement_final->final_delivery,\x20DeliverFinal):\x20the\x20winner\x27s\x20final\x20source-file\x20WIP\x20hash\x20must\x20be\x20written\x20to\x20the\x20delivery\x20Repository\x20BEFORE\x20the\x20forward\x20passes,\x20so\x20the\x20sponsor\x20accepts\x20against\x20a\x20tamper-evident\x20artifact,\x20not\x20prose.\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20(audit-261012\x20B3)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'delivery_window','purpose':'Delivery-window\x20auto-accept\x20keeper\x20edge\x20(final_delivery->settled,\x20AutoAcceptByKeeper):\x20Clock\x20>=\x20progress.history.time\x20(id\x201280,\x20next_node=\x27final_delivery\x27,\x20find=last)\x20+\x20delivery_window_days,\x20so\x20a\x20silent\x20sponsor\x20cannot\x20withhold\x20the\x20GUARANTEED\x20prize.\x20This\x20is\x20the\x20timeout\x20complement\x20of\x20AcceptDelivery\x20folded\x20into\x20the\x20SAME\x20settled\x20node\x20(INV-A2\x20safe\x20form),\x20NOT\x20a\x20sibling\x20node.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>];\x20operator\x20unbound\x20so\x20the\x20keeper\x20fires\x20it'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_prize','purpose':'Prize\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20progress.current\x20==\x20settled\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20the\x20chain-derived\x20protocol-254\x20once\x20key\x20(bcs(payment_info.for_object),\x20replay\x20aborts\x2016),\x20PLUS\x20a\x20SIGNER-BINDING\x20leg\x20(context(Signer)\x20==\x20query(1167\x20repository.data(\x27placement\x27,\x20order))\x20—\x20the\x20winner\x20address\x20the\x20judge\x20recorded,\x20so\x20the\x20dynamic\x20Signer\x20recipient\x20is\x20provably\x20the\x20placed\x20winner\x20and\x20a\x20third\x20party\x20cannot\x20front-run\x20the\x20claim).\x20The\x20winner\x20signs\x20a\x20SEPARATE\x20claim\x20tx\x20after\x20the\x20order\x20reaches\x20\x27settled\x27;\x20the\x20forward-advancer\x20(sponsor/keeper)\x20is\x20NOT\x20the\x20payee'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate:\x20a\x20node\x20gate\x20over\x20the\x20FULL\x20refundable\x20set\x20{closed_cancel,\x20voided}\x20resolved\x20from\x20THIS\x20template\x27s\x20machine_shape\x20as\x20ONE\x20top-level\x20n-ary\x20logic_or\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20blocks\x20the\x20refund\x20once\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid).\x20NODE\x20GATE\x20IS\x20MANDATORY\x20(audit-261012\x20B4):\x20an\x20identity-only\x20refund\x20guard\x20lets\x20the\x20sponsor\x20drain\x20the\x20escrow\x20the\x20moment\x20it\x20opens\x20the\x20contest.\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017\x20—\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter):\x20anti-hijack\x20is\x20structural\x20(GuardIdentifier(0)\x20recipient),\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening.\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg.\x20NEVER\x20gate\x20on\x20order.dispute\x20count\x20==\x200\x20(query\x20id\x201564):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Sponsor-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2\x20—\x20NO\x20node\x20equality\x20leg,\x20the\x20b9-261015\x20node-gate\x20teaching\x20is\x20removed):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20Bool)\x20+\x20order.service\x20binding\x20ONLY.\x20Why\x20no\x20node\x20gate:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20(upw-mn-261014\x20F-51:\x20a\x20node-pinned\x20rail\x20aborts\x207\x20after\x20a\x20keeper\x20moves\x20the\x20order\x20on;\x20upwc-cat-261017\x20CAT-C2\x20live:\x20a\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20after\x20the\x20award\x20paid),\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion\x20vs\x20refund_gate\x20(exactly\x20one\x20polarity\x20can\x20pass,\x20D-BUG-2)\x20—\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail.\x20Pays\x20Rate\x2010000\x20to\x20the\x20sponsor\x20(merchant)\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits.\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'}],'allocator':{'recipient':'signer','count':0x3,'mode':'rate','once_per_order':!![],'refund_track':'order_anchored','description':'Guaranteed-prize\x20contest\x20settlement\x20on\x20\x27settled\x27.\x20INVERTED\x20FUNDING\x20TOPOLOGY\x20(shared\x20with\x20bug-bounty):\x20the\x20sponsoring\x20COMPANY\x20is\x20the\x20order_payer\x20that\x20funds\x20the\x20escrow\x20and\x20the\x20WINNING\x20DESIGNER\x20is\x20the\x20payee\x20—\x20so\x20the\x20winner\x20cannot\x20be\x20a\x20build-time-fixed\x20Entity\x20(a\x20contest\x20has\x20many\x20entrants\x20across\x20many\x20orders)\x20nor\x20a\x20GuardIdentifier\x20(that\x20resolves\x20to\x20for_object\x20=\x20the\x20order\x20=\x20the\x20sponsor,\x20paying\x20the\x20funder\x20back).\x20The\x20ONLY\x20dynamic\x20per-order\x20payee\x20the\x20chain\x20offers\x20is\x20Recipient::Signer\x20(allocation.move:615-617,\x20tx_context::sender)\x20—\x20the\x20winner\x20claims\x20by\x20signing\x20the\x20settlement,\x20and\x20settle_prize\x27s\x20Signer-binding\x20leg\x20(context(Signer)\x20==\x20the\x20placement\x20Repository\x20winner\x20address\x20the\x20judge\x20recorded)\x20pins\x20that\x20claim\x20to\x20the\x20placed\x20winner\x20so\x20it\x20cannot\x20be\x20front-run.\x20SINGLE-WINNER-TAKES-PRIZE\x20is\x20a\x20CHAIN\x20CONSTRAINT,\x20not\x20a\x20policy\x20choice:\x20one\x20settlement\x20tx\x20has\x20ONE\x20tx_context::sender,\x20so\x20every\x20Signer\x20leg\x20in\x20one\x20allocator\x20pays\x20the\x20SAME\x20person,\x20and\x20a\x20Rate-10000\x20allocator\x20drains\x20100%\x20of\x20the\x20pool\x20(allocation.move\x20ERATE_NOT_10000)\x20—\x20a\x20runner-up\x20prize\x20to\x20a\x20DIFFERENT\x20dynamic\x20designer\x20is\x20therefore\x20NOT\x20expressible\x20from\x20one\x20contest\x20order\x20(see\x20the\x20MULTI-PLACE\x20LIMITATION\x20build\x20note).\x20The\x20winner\x20takes\x20the\x20whole\x20guaranteed\x20pool\x20(Rate\x2010000);\x20a\x20Rate-0\x20GuardIdentifier(0)\x20anchor\x20binds\x20the\x20settle\x20guard\x20to\x20the\x20paying\x20order\x20(CR-01);\x20once_per_order\x20arms\x20the\x20chain-derived\x20254\x20replay\x20slot.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission.\x20Full\x20escrow\x20refund\x20to\x20the\x20sponsor\x20(Rate\x2010000\x20via\x20the\x20order-anchored\x20recipient)\x20on\x20a\x20pre-submission\x20closed_cancel\x20OR\x20a\x20judged\x20voided\x20(no\x20valid\x20entry),\x20and\x20only\x20while\x20no\x20arbitration\x20award\x20has\x20paid\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false);\x20an\x20awarded\x20order\x27s\x20escrow\x20instead\x20exits\x20via\x20the\x20paired\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20sponsor),\x20so\x20refund\x20and\x20ruling\x20payouts\x20never\x20both\x20fire\x20(D-BUG-2).','rows':[{'track':'settlement','recipient':'signer','recipient_key':'winner','mode':'rate','value':0x2710,'guard_key':'settle_prize','note':'The\x20GUARANTEED\x20prize\x20to\x20the\x20winning\x20designer\x20(dynamic\x20Signer,\x20identity-bound\x20to\x20the\x20placement\x20Repository\x20winner\x20address):\x20a\x20contest\x20pays\x20its\x20placed\x20winner\x20the\x20WHOLE\x20pool\x20(Rate\x2010000),\x20so\x20there\x20is\x20no\x20sponsor\x20remainder\x20leg.\x20Recipient::Signer\x20is\x20the\x20only\x20per-order-dynamic\x20payee;\x20settle_prize\x27s\x20Signer-binding\x20leg\x20proves\x20the\x20claimant\x20IS\x20the\x20recorded\x20winner.\x20The\x20winner\x20signs\x20a\x20SEPARATE\x20claim\x20tx\x20after\x20the\x20order\x20reaches\x20\x27settled\x27\x20—\x20the\x20forward-advancer\x20(sponsor/keeper)\x20never\x20receives.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_prize','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20contest\x20ORDER\x20the\x20settle_prize\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20contest\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20guard_key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.\x20winner\x2010000\x20+\x20anchor\x200\x20=\x2010000\x20(ERATE_NOT_10000\x20satisfied).'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Sponsor-recovery\x20rail\x20(escrow-exit\x20invariant):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20back\x20to\x20the\x20sponsor\x20(merchant/funder)\x20Entity\x20so\x20an\x20awarded\x20contest\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_prize/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.\x20Recipient\x20MUST\x20be\x20a\x20non-empty\x20Entity\x20(a\x20blank\x20one\x20routes\x20the\x20share\x20to\x20the\x20deployer\x20via\x20the\x20SDK\x20resolver).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20full\x20refund\x20to\x20the\x20SPONSOR\x20on\x20a\x20pre-submission\x20closed_cancel\x20OR\x20a\x20judged\x20voided\x20(no\x20valid\x20entry)\x20—\x20refund_gate\x20node-gates\x20the\x20FULL\x20refundable\x20set\x20{closed_cancel,\x20voided}.\x20GuardIdentifier(0)\x20resolves\x20to\x20the\x20paying\x20Order\x20and\x20allocation.move\x20ERECIPIENT_NOT_FOR_OBJECT\x20makes\x20redirection\x20structurally\x20impossible;\x20the\x20sponsor\x20claims\x20via\x20the\x20two-step\x20order\x20receive.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false\x20so\x20an\x20awarded\x20contest\x20cannot\x20also\x20drain\x20the\x20refund\x20rail\x20(D-BUG-2).\x20Set\x20this\x20allocator\x27s\x20once_per_order=true\x20and\x20register\x20the\x20{identifier:254,\x20b_submission:true}\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x20with\x20the\x20once-triggered\x20code.'}]},'key_risk':'The\x20sponsor\x20funds\x20the\x20guaranteed\x20prize\x20and\x20an\x20independent\x20judge\x20places\x20the\x20winner:\x20a\x20mis-placed\x20or\x20stalled\x20contest\x20leaves\x20a\x20losing\x20entrant\x27s\x20recourse\x20in\x20the\x20appeal\x20window\x20then\x20Arbitration,\x20and\x20the\x20compensation\x20fund\x20pays\x20the\x20order\x20owner\x20(the\x20sponsor),\x20not\x20a\x20designer.','build_notes':['INVERTED\x20FUNDING\x20TOPOLOGY\x20(shared\x20with\x20bug-bounty\x20—\x20the\x20whole\x20design\x20turns\x20on\x20it):\x20in\x20a\x20normal\x20sale\x20the\x20buyer\x20funds\x20and\x20the\x20merchant\x20receives,\x20so\x20the\x20payee\x20is\x20a\x20build-time\x20Entity.\x20A\x20contest\x20inverts\x20it\x20—\x20the\x20sponsoring\x20COMPANY\x20is\x20the\x20order_payer\x20that\x20funds\x20the\x20guaranteed\x20prize,\x20and\x20the\x20WINNING\x20DESIGNER\x20(a\x20different\x20identity\x20on\x20every\x20contest)\x20is\x20the\x20payee.\x20Neither\x20Entity\x20(fixed\x20at\x20build;\x20a\x20contest\x20has\x20many\x20entrants)\x20nor\x20GuardIdentifier\x20(resolves\x20to\x20for_object\x20=\x20the\x20order\x20=\x20the\x20sponsor,\x20paying\x20the\x20funder\x20back)\x20can\x20express\x20a\x20per-order-dynamic\x20payee.\x20Recipient::Signer\x20(allocation.move:615-617)\x20is\x20the\x20ONLY\x20mechanism:\x20the\x20winner\x20claims\x20by\x20signing\x20the\x20settlement\x20tx.\x20This\x20is\x20why\x20settle_prize\x20carries\x20a\x20MANDATORY\x20Signer-binding\x20leg\x20(context(Signer)\x20==\x20the\x20placement\x20Repository\x20winner\x20address\x20the\x20judge\x20recorded)\x20—\x20without\x20it\x20any\x20party\x20able\x20to\x20satisfy\x20the\x20settle\x20gate\x20could\x20redirect\x20the\x20prize\x20to\x20itself.','MULTI-PLACE\x20LIMITATION\x20(🔴\x20honest\x20disclosure,\x20chain\x20constraint\x20NOT\x20policy):\x20a\x20contest\x20can\x20pay\x20only\x20ONE\x20dynamic\x20winner\x20per\x20order.\x20One\x20settlement\x20tx\x20has\x20ONE\x20tx_context::sender,\x20so\x20every\x20Recipient::Signer\x20leg\x20in\x20a\x20single\x20allocator\x20pays\x20the\x20SAME\x20person;\x20and\x20separate\x20allocators\x20each\x20summing\x20Rate\x2010000\x20would\x20each\x20try\x20to\x20drain\x20100%\x20of\x20the\x20pool\x20(ERATE_NOT_10000),\x20so\x20the\x20first\x20fire\x20empties\x20it\x20and\x20a\x20runner-up\x20leg\x20gets\x20nothing.\x20A\x20runner-up\x20/\x20multi-tier\x20prize\x20to\x20DIFFERENT\x20dynamic\x20designers\x20is\x20therefore\x20NOT\x20expressible\x20from\x20one\x20contest\x20order\x20with\x20the\x20current\x20primitives.\x20WORKAROUND\x20the\x20sponsor\x20can\x20use\x20today:\x20run\x20one\x20sponsor\x20order\x20per\x20prize\x20level\x20(a\x201st-place\x20order,\x20a\x202nd-place\x20order),\x20each\x20a\x20single-winner\x20contest.\x20A\x20true\x20single-pool\x20multi-payee\x20split\x20is\x20a\x20gap\x20queued\x20for\x20the\x20D12-B6\x20primitive\x20research;\x20never\x20promise\x20runner-up\x20payouts\x20from\x20one\x20order.','GUARANTEED\x20AWARD\x20(the\x20contrast\x20with\x20bug-bounty):\x20a\x20design\x20contest\x20commits\x20the\x20prize\x20at\x20buy\x20and\x20MUST\x20pay\x20a\x20placed\x20winner\x20—\x20the\x20sponsor\x20cannot\x20walk\x20away\x20once\x20entries\x20exist.\x20The\x20only\x20no-payout\x20exits\x20are\x20a\x20PRE-SUBMISSION\x20void\x20(closed_cancel,\x20before\x20the\x20judge\x20closes\x20submissions)\x20or\x20a\x20judged\x20NO-VALID-ENTRY\x20(voided,\x20the\x20judge\x20rules\x20no\x20entry\x20merits\x20the\x20prize).\x20bug-bounty\x20is\x20the\x20opposite\x20polarity:\x20an\x20invalid\x20report\x20refunds\x20the\x20funder\x20and\x20no\x20bounty\x20is\x20owed.\x20This\x20is\x20why\x20the\x20refund\x20track\x20node-gates\x20{closed_cancel,\x20voided}\x20only\x20—\x20a\x20placed\x20winner\x27s\x20order\x20never\x20reaches\x20a\x20refund\x20node.','JURY\x20PLACEMENT\x20+\x20SIGNER-BINDING:\x20the\x20judge/jury\x20permission\x20(slot\x201001)\x20ranks\x20the\x20entries\x20and\x20writes\x20the\x20WINNER\x27s\x20address\x20to\x20the\x20placement\x20Repository\x20keyed\x20by\x20the\x20order\x20(the\x20write\x20is\x20bound\x20to\x20the\x20judge\x20via\x20the\x20policy\x27s\x20write\x20guard,\x20so\x20a\x20designer\x20cannot\x20self-place).\x20settle_prize\x20then\x20reads\x20that\x20row:\x20logic_equal[context(Signer),\x20query(1167\x20repository.data(\x27placement\x27,\x20order))].\x20The\x20vote\x20TALLY\x20itself\x20is\x20off-chain\x20or\x20via\x20the\x20bound\x20voting\x20venue\x20—\x20the\x20chain\x20records\x20the\x20RESULT\x20(one\x20winner\x20address\x20per\x20order),\x20which\x20is\x20all\x20the\x20settlement\x20needs.','APPEAL\x20WINDOW\x20(the\x20contest-specific\x20check\x20on\x20a\x20single\x20judge):\x20placement\x20is\x20PROVISIONAL\x20first.\x20A\x20losing\x20entrant\x20—\x20proved\x20real\x20by\x20their\x20entry\x20Repository\x20row\x20—\x20may\x20contest\x20within\x20appeal_window_days,\x20routing\x20to\x20the\x20Service\x27s\x20bound\x20Arbitration\x20(R-M1-11,\x20off-Machine).\x20The\x20keeper\x20pushes\x20the\x20ruling\x20forward:\x20upheld\x20->\x20placement_final,\x20overturned\x20->\x20back\x20to\x20judging\x20for\x20a\x20re-record.\x20This\x20is\x20the\x20design-contest\x20answer\x20to\x20\x27what\x20if\x20the\x20judge\x20picks\x20wrong\x27,\x20which\x20bug-bounty\x20(grade-once)\x20lacks.','UNBOUNDED\x20REVISION\x20—\x20INV-A1\x20HONEST\x20FORM\x20(this\x20refutes\x20the\x20naive\x20\x27finite\x20cap\x20+\x20counter\x20guard\x27\x20design):\x20the\x20winner-fix\x20loop\x20is\x20declared\x20revision_rounds_max\x20\x27unlimited\x27.\x20A\x20FINITE\x20cap\x20is\x20NOT\x20chain-enforceable:\x20progress.move\x20bounds\x20EDGE\x20count\x20(MAX_FORWARD\x20/\x20MAX_NODE_PAIR),\x20never\x20how\x20many\x20times\x20a\x20node\x20pair\x20is\x20VISITED,\x20and\x20a\x20Repository\x20\x27counter\x27\x20is\x20an\x20upsert\x20value\x20its\x20own\x20writer\x20can\x20forge\x20(no\x20atomic\x20increment,\x20no\x20write-once\x20—\x20see\x20the\x20retracted\x20anti-overwrite\x20idiom),\x20so\x20neither\x20the\x20sponsor\x20(who\x20would\x20under-count\x20to\x20keep\x20demanding\x20fixes)\x20nor\x20the\x20winner\x20(who\x20would\x20over-count\x20to\x20escape)\x20can\x20hold\x20it\x20honestly.\x20fix-03\x20ruled\x20\x27unlimited\x27\x20the\x20only\x20faithful\x20value,\x20and\x20the\x20benchmark\x20product\x27s\x20own\x20default\x20is\x20\x27unlimited\x20revisions\x20until\x20the\x20desired\x20design\x20is\x20achieved\x27.\x20The\x20loop\x20gates\x20NO\x20money\x20(the\x20prize\x20is\x20guaranteed\x20and\x20settles\x20from\x20final_delivery),\x20so\x20an\x20unbounded\x20loop\x20cannot\x20withhold\x20payment.\x20A\x20merchant\x20wanting\x20a\x20hard\x20cap\x20accepts\x20an\x20OFF-CHAIN-honored\x20tally\x20(like\x20enterprise-talent-market\x27s\x20revision_rounds_max\x202\x20\x27counted\x20off-chain\x27)\x20and\x20must\x20say\x20so\x20in\x20the\x20contest\x20terms.','INV-A2\x20FOLD\x20(why\x20there\x20is\x20no\x20separate\x20auto-accept\x20node):\x20AcceptDelivery\x20(sponsor)\x20and\x20its\x20timeout\x20complement\x20AutoAcceptByKeeper\x20(keeper)\x20are\x20TWO\x20DISTINCT\x20forwards\x20into\x20the\x20SAME\x20\x27settled\x27\x20node\x20sharing\x20prev\x20final_delivery\x20—\x20the\x20chain\x27s\x20E_DUPLICATE_NODE_PREV\x20merges\x20them\x20into\x20one\x20Pair\x20and\x20the\x20distinct\x20names\x20avoid\x20E_DUPLICATE_FORWARD_NAME\x20(6).\x20The\x20same\x20fold\x20governs\x20the\x20appeal\x20race:\x20FinalizePlacement\x20(appeal\x20window\x20elapsed)\x20and\x20AppealPlacement\x20(an\x20entrant\x20contests)\x20are\x20mutually\x20exclusive\x20by\x20node\x20position\x20+\x20the\x20window,\x20never\x20same-prev\x20siblings\x20that\x20both\x20fire.','ONCE\x20SLOT\x20ARMING\x20+\x20SCOPE\x20(v54,\x20audit-261012\x20B7):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20each\x20allocator\x20Guard\x20(settle_prize\x20+\x20refund_gate)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20payment_info.for_object\x20(the\x20bound\x20Order),\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016.\x20SCOPE\x20(C10,\x20mainnet-verified):\x20the\x20once\x20key\x20is\x20(guard,\x20allocator\x20leg,\x20bcs(for_object))\x20stored\x20ON\x20the\x20Allocation\x20—\x20once\x20PER\x20ORDER\x20per\x20allocation;\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20is\x20what\x20makes\x20settle_prize\x20refuse\x20a\x20sibling\x20contest\x27s\x20passport.','ACCEPTANCE\x20COMPONENT\x20(D12\x20重构\x202,\x20acceptance_mode\x20\x27contest\x27):\x20the\x20placement\x20decision\x20is\x20the\x20independent\x20judge/jury\x27s,\x20never\x20the\x20funding\x20sponsor\x27s\x20alone\x20(INV-A3\x20—\x20compile\x20hard-blocks\x20a\x20judge-decided\x20mode\x20whose\x20arbitration_mode\x20is\x20not\x20\x27third_party\x27).\x20Grant\x20the\x20judge\x20permission\x20entity\x20slot\x20index\x201001,\x20disjoint\x20from\x20BOTH\x20the\x20sponsor\x20(order\x20payer)\x20and\x20every\x20entrant;\x20bind\x20only\x20an\x20already-operational\x20Arbitration\x20venue\x20as\x20the\x20appeal\x20channel.','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20az-mn-261007\x20T5):\x20every\x20terminal\x20keeps\x20an\x20exit\x20under\x20BOTH\x20polarities\x20of\x20the\x20arbitration\x20payout\x20state.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20the\x20paired\x20recover_gate\x20row\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20sponsor)\x20ships\x20in\x20the\x20allocator\x20so\x20an\x20awarded\x20contest\x20order\x27s\x20escrow\x20still\x20exits.\x20Resolve\x20both\x20guard\x20designs\x20before\x20the\x20Machine\x20publish.\x20NEVER\x20gate\x20the\x20refund\x20rail\x20on\x20order.dispute\x20count\x20==\x200\x20(append-only\x20vector\x20->\x20one-way\x20door).','COMPENSATION\x20FUND\x20LIMITATION\x20(honest\x20disclosure):\x20the\x20ruling\x20payout\x20path\x20pays\x20the\x20ORDER\x20OWNER\x20(the\x20sponsor)\x20—\x20there\x20is\x20no\x20on-chain\x20path\x20for\x20the\x20compensation\x20fund\x20to\x20indemnify\x20a\x20DESIGNER.\x20If\x20the\x20judge\x20wrongly\x20places\x20a\x20contest,\x20a\x20losing\x20entrant\x27s\x20on-chain\x20recourse\x20is\x20to\x20appeal\x20within\x20the\x20window\x20and\x20then\x20dispute\x20in\x20Arbitration;\x20the\x20fund\x20itself\x20cannot\x20pay\x20a\x20designer.\x20Document\x20this\x20asymmetry\x20to\x20entrants\x20pre-submission.','DISPUTES\x20route\x20through\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11):\x20Arbitration\x20(compensation_fund)\x20and\x20Allocator\x20(escrow)\x20are\x20independent\x20systems\x20by\x20design;\x20the\x20refund\x20Allocator\x20and\x20a\x20ruling-driven\x20settle\x20must\x20never\x20both\x20fire\x20for\x20one\x20contest.\x20VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20freshly\x20created\x20Arbitration\x20defaults\x20to\x20PAUSED\x20—\x20unpause\x20is\x20the\x20ARBITRATOR\x27s\x20deployment\x20step\x20on\x20their\x20own\x20object,\x20never\x20this\x20build\x27s\x20duty;\x20bind\x20only\x20a\x20venue\x20already\x20unpaused\x20(a\x20paused\x20venue\x20rejects\x20every\x20filing\x20with\x20E_PAUSED).','commission_rate_bps\x20is\x200\x20and\x20is\x20NOT\x20a\x20placeholder:\x20WoWok\x20extracts\x20nothing\x20from\x20a\x20contest.\x20A\x20contest\x20platform\x20that\x20IS\x20the\x20aggregator\x20(a\x20managed\x20contest\x20host)\x20may\x20charge\x20its\x20own\x20fee\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20sponsor\x20can\x20compute\x20pre-contest,\x20never\x20an\x20implicit\x20remainder;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity;\x20(3)\x20no\x20mandatory\x20transit\x20pool,\x20and\x20never\x20take\x20the\x20fee\x20by\x20silently\x20shrinking\x20the\x20winner\x27s\x20Rate\x20leg\x20(a\x20platform\x20carve-out\x20must\x20be\x20its\x20own\x20explicit\x20leg,\x20not\x20a\x20Surplus\x20sweep\x20of\x20the\x20guaranteed\x20prize).','KEEPER\x20IS\x20A\x20FIRST-CLASS\x20DEPENDENCY:\x20the\x20submission\x20close,\x20the\x20appeal-window\x20finalize,\x20the\x20delivery-window\x20auto-accept\x20and\x20any\x20ruling-driven\x20placement\x20are\x20100%\x20off-chain\x20(machine.move\x20has\x20no\x20timer;\x20arb.move\x20rulings\x20only\x20change\x20case\x20state).\x20No\x20keeper\x20means\x20manual-only\x20advancement\x20and\x20the\x20funds-stuck\x20/\x20withheld-prize\x20failure\x20mode\x20returns.','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20contest\x20brief\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention),\x20or\x20host\x20your\x20own\x20endpoint\x20for\x20long-lived\x20mainnet\x20contests.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'submission_window_days':0xe,'appeal_window_days':0x3,'delivery_window_days':0x7,'revision_rounds_max':'unlimited','dispute_timeout_days':0x7,'arbitration_fee_usd':0x0},'time_anchors':{'submission_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27funded\x27,\x20find=last)\x20—\x20the\x20contest-open\x20ENTRY\x20timestamp;\x20submission_window_days\x20closes\x20entries.\x20The\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','appeal_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27placement_provisional\x27,\x20find=last)\x20—\x20the\x20provisional-placement\x20ENTRY\x20timestamp;\x20appeal_window_days\x20is\x20the\x20contest\x20window','delivery_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27final_delivery\x27,\x20find=last)\x20—\x20the\x20final-files\x20ENTRY\x20timestamp\x20(a\x20re-delivery\x20appends\x20a\x20fresh\x20entry\x20and\x20naturally\x20resets\x20it);\x20delivery_window_days\x20auto-accepts','dispute_timeout':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard,\x20R-M1-11)'},'trust_mechanisms':['R1\x20dual-track\x20payout:\x20the\x20guaranteed\x20prize\x20pays\x20via\x20the\x20settle_prize\x20Allocator;\x20an\x20arbitration\x20ruling\x20pays\x20via\x20the\x20compensation\x20fund\x20—\x20never\x20both\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false)','R2\x20independent\x20judge/jury\x20+\x20independent\x20arbitration\x20Permission,\x20both\x20enforced\x20disjoint\x20from\x20the\x20sponsor\x20(order\x20payer)\x20and\x20every\x20entrant\x20(INV-A3;\x20contract\x20assertion\x20at\x20publish)','R3\x20compensation\x20fund\x20required\x20before\x20publish\x20whenever\x20the\x20fund\x20is\x20non-zero\x20(with\x20the\x20honest\x20caveat\x20that\x20it\x20indemnifies\x20the\x20order\x20owner,\x20not\x20a\x20designer)','R4\x20acceptance\x20gate:\x20an\x20explicit\x20judge\x20placement,\x20then\x20a\x20sponsor\x20accept\x20OR\x20the\x20delivery-window\x20auto-accept\x20—\x20a\x20designer\x20can\x20never\x20self-place\x20and\x20a\x20sponsor\x20can\x20never\x20withhold\x20the\x20guaranteed\x20prize\x20by\x20silence','R5\x20Signer-binding:\x20the\x20dynamic\x20winner\x20payout\x20is\x20pinned\x20to\x20the\x20placement\x20Repository\x20winner\x20address\x20the\x20judge\x20recorded,\x20so\x20the\x20claimant\x20is\x20provably\x20the\x20placed\x20winner\x20(anti-front-run)','R6\x20appeal\x20window:\x20a\x20losing\x20entrant\x20contests\x20the\x20provisional\x20placement\x20before\x20it\x20commits\x20—\x20the\x20contest-specific\x20check\x20on\x20a\x20single\x20judge\x27s\x20ranking','R7\x20Rate\x20sums\x20=\x2010000\x20on\x20every\x20allocator\x20group\x20(single-winner\x20Rate\x2010000\x20+\x20Rate-0\x20order\x20anchor);\x20publish\x20freeze\x20—\x20full\x20configuration\x20(judge,\x20venue,\x20windows)\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound\x20to\x20the\x20contest','R9\x20keepers\x20for\x20the\x20submission\x20close,\x20the\x20appeal/delivery\x20windows\x20and\x20the\x20dispute\x20timeout','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration\x20(0%\x20commission\x20machine-checkable)'],'keeper_dependencies':['submission-window\x20close\x20(submission_window_days;\x20a\x20keeper\x20closes\x20submissions\x20if\x20the\x20judge\x20stalls\x20—\x20the\x20time\x20gate\x20is\x20objective)','appeal-window\x20finalize\x20+\x20delivery-window\x20auto-accept\x20(appeal_window_days\x20/\x20delivery_window_days;\x20the\x20guaranteed\x20prize\x20must\x20not\x20be\x20withholdable\x20by\x20silence)','ruling-driven\x20placement\x20(an\x20appeal\x20ruling\x20only\x20changes\x20Arb\x20case\x20state;\x20the\x20keeper\x20pushes\x20PlacementUpheld/Rejudge\x20and\x20submits\x20the\x20winner\x27s\x20settle\x20claim)','dispute\x20response\x20timeout\x20+\x20arbitration\x20ruling\x20execution\x20(a\x20ruling\x20only\x20changes\x20case\x20state;\x20the\x20keeper\x20allocates\x20per\x20ruling)'],'recommended_role':'merchant','role_rationale':'The\x20sponsoring\x20company\x20builds\x20and\x20operates\x20the\x20contest\x20Service,\x20funds\x20the\x20guaranteed\x20prize\x20as\x20order_payer,\x20and\x20delegates\x20placement\x20to\x20an\x20independent\x20judge/jury\x20permission;\x20the\x20winning\x20designer\x20is\x20the\x20dynamic\x20Signer\x20payee,\x20not\x20a\x20permission\x20entity.','differences':['acceptance_mode\x20\x27contest\x27:\x20an\x20INDEPENDENT\x20judge/jury\x20RANKS\x20many\x20entrants\x20and\x20places\x20ONE\x20winner\x20(the\x20验收裁判\x20component),\x20with\x20an\x20appeal\x20window\x20a\x20losing\x20entrant\x20can\x20contest\x20—\x20not\x20a\x20single\x20triager\x20grading\x20one\x20report\x27s\x20severity\x20(bug-bounty)\x20or\x20one\x20evaluator\x20ruling\x20one\x20deliverable\x20(agent-task)','GUARANTEED\x20AWARD:\x20the\x20prize\x20is\x20committed\x20at\x20buy\x20and\x20MUST\x20go\x20to\x20a\x20placed\x20winner;\x20the\x20only\x20no-payout\x20exits\x20are\x20a\x20pre-submission\x20void\x20or\x20a\x20judged\x20no-valid-entry\x20(contrast\x20bug-bounty,\x20where\x20an\x20invalid\x20report\x20refunds\x20the\x20funder)','SINGLE-WINNER-TAKES-PRIZE\x20is\x20a\x20chain\x20constraint:\x20one\x20settlement\x20has\x20one\x20tx_context::sender\x20and\x20a\x20Rate-10000\x20allocator\x20drains\x20the\x20pool,\x20so\x20a\x20runner-up\x20prize\x20to\x20a\x20different\x20dynamic\x20designer\x20is\x20NOT\x20expressible\x20from\x20one\x20order\x20(a\x20multi-prize\x20contest\x20needs\x20one\x20sponsor\x20order\x20per\x20prize\x20level)','UNBOUNDED\x20winner-fix\x20loop\x20declared\x20revision_rounds_max\x20\x27unlimited\x27\x20(the\x20honest\x20form\x20—\x20no\x20chain-enforceable\x20visit\x20counter\x20exists);\x20bug-bounty\x20grades\x20once\x20with\x20no\x20loop,\x20agent-task\x20has\x20no\x20loop','INVERTED\x20funding\x20shared\x20with\x20bug-bounty:\x20the\x20sponsor\x20(order_payer)\x20funds\x20and\x20the\x20winner\x20is\x20paid\x20as\x20a\x20dynamic\x20Recipient::Signer\x20pinned\x20to\x20the\x20judge\x27s\x20placement\x20record','review_mode\x20\x27none\x27:\x20reputation\x20rides\x20the\x20judge\x27s\x20on-chain\x20placement\x20record\x20(a\x20win),\x20not\x20a\x20human\x20star-review'],'user_inputs':['submission_window_days\x20/\x20appeal_window_days\x20/\x20delivery_window_days\x20—\x20the\x20entry-close,\x20placement-contest\x20and\x20final-files\x20auto-accept\x20windows\x20(all\x20keeper-advanced\x20time\x20gates)','revision_rounds_max\x20—\x20KEEP\x20\x27unlimited\x27\x20(the\x20honest\x20form).\x20A\x20finite\x20cap\x20is\x20NOT\x20chain-enforceable\x20(progress.move\x20bounds\x20edges,\x20not\x20visits;\x20a\x20Repository\x20tally\x20is\x20a\x20forgeable\x20upsert).\x20A\x20merchant\x20wanting\x20a\x20hard\x20cap\x20accepts\x20an\x20off-chain-honored\x20tally\x20and\x20must\x20state\x20it\x20in\x20the\x20contest\x20terms','dispute_timeout_days\x20+\x20arbitration_fee_usd\x20—\x20dispute\x20response\x20window\x20and\x20filing\x20fee\x20(default\x20near-zero\x20so\x20a\x20losing\x20entrant\x20is\x20not\x20priced\x20out\x20of\x20contesting\x20a\x20wrongful\x20placement)','the\x20independent\x20judge/jury\x20permission\x20entity\x20—\x20MUST\x20be\x20disjoint\x20from\x20the\x20sponsor\x20(order\x20payer)\x20and\x20every\x20entrant;\x20grant\x20it\x20slot\x20index\x201001\x20and\x20bind\x20only\x20an\x20operational\x20Arbitration\x20venue\x20as\x20the\x20appeal\x20channel','the\x20placement\x20Repository\x20policy\x20(winner\x20address\x20keyed\x20by\x20order,\x20written\x20only\x20by\x20the\x20judge)\x20and\x20the\x20entry\x20Repository\x20(id_from\x20signer,\x20one\x20row\x20per\x20designer)\x20—\x20settle_prize\x27s\x20Signer-binding\x20reads\x20the\x20placement\x20row']},{'id':'rental/p2p-shortstay','industry':'rental','variant':'p2p-shortstay','product_ref':'airbnb','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'reserved','role':'Entry:\x20booking\x20PAID\x20and\x20escrowed,\x20awaiting\x20host\x20confirmation\x20(request-to-book).\x20buy\x20escrows\x20atomically\x20—\x20there\x20is\x20NO\x20unpaid\x20order\x20state\x20on\x20chain','semantic_role':'draft','from':[{'prev':'','forward':'Book','operator':'order_payer'}]},{'name':'cancelled_unpaid','role':'Request\x20declined\x20by\x20the\x20host,\x20expired\x20unconfirmed\x20past\x20the\x20confirm\x20window,\x20or\x20withdrawn\x20by\x20the\x20guest\x20before\x20host\x20confirmation\x20—\x20full\x20refund\x20Allocator\x20to\x20the\x20guest\x20(sibling\x20forwards\x20share\x20ONE\x20pair:\x20same\x20prev)','semantic_role':'cancelled','from':[{'prev':'reserved','forward':'DeclineRequest','operator':'merchant','permission_index':0x3e8},{'prev':'reserved','forward':'ExpireUnconfirmed','operator':'merchant','permission_index':0x3ea,'guard_key':'confirm_expire'},{'prev':'reserved','forward':'GuestWithdraw','operator':'order_payer'}]},{'name':'paid','role':'Host\x20confirmed\x20the\x20request\x20—\x20cancellation\x20policy\x20tiers\x20now\x20active\x20until\x20check-in','semantic_role':'active','from':[{'prev':'reserved','forward':'ConfirmRequest','operator':'merchant','permission_index':0x3e8}]},{'name':'guest_cancelled','role':'Guest\x20cancels\x20under\x20the\x20mounted\x20policy\x20tier\x20—\x20per-tier\x20refund\x20Allocator\x20(one\x20pair,\x20one\x20forward\x20per\x20tier\x20Guard)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'CancelTier1','operator':'order_payer','guard_key':'cancel_tier_1'},{'prev':'paid','forward':'CancelTier2','operator':'order_payer','guard_key':'cancel_tier_2'},{'prev':'paid','forward':'CancelTier3','operator':'order_payer','guard_key':'cancel_tier_3'},{'prev':'paid','forward':'CancelTier4','operator':'order_payer','guard_key':'cancel_tier_4'},{'prev':'paid','forward':'CancelTier5','operator':'order_payer','guard_key':'cancel_tier_5'},{'prev':'paid','forward':'CancelTier6','operator':'order_payer','guard_key':'cancel_tier_6'}]},{'name':'host_cancelled','role':'Host\x20cancels\x20before\x20check-in\x20—\x20full\x20refund\x20Allocator\x20to\x20guest\x20+\x20off-chain\x20demotion','semantic_role':'cancelled','from':[{'prev':'paid','forward':'HostCancel','operator':'merchant','permission_index':0x3e8,'guard_key':'host_cancel'}]},{'name':'checked_in','role':'Check-in\x20at\x20the\x20date-typed\x20time\x20gate\x20(keeper\x20advances)','semantic_role':'active','from':[{'prev':'paid','forward':'CheckIn','operator':'merchant','permission_index':0x3ea,'guard_key':'checkin_gate'}]},{'name':'checked_out','role':'Check-out\x20at\x20the\x20date-typed\x20time\x20gate;\x20the\x20serial\x20claim\x20window\x20opens\x20next\x20—\x20no\x20release\x20can\x20fire\x20before\x20it\x20closes','semantic_role':'delivered','from':[{'prev':'checked_in','forward':'CheckOut','operator':'merchant','permission_index':0x3ea,'guard_key':'checkout_gate'}]},{'name':'reviewed','role':'Guest\x20reviews\x20the\x20stay\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20stop\x20between\x20checkout\x20and\x20the\x20claim\x20window;\x20the\x20keeper\x20opens\x20the\x20claim\x20window\x20from\x20EITHER\x20prev,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'checked_out','forward':'Review','guard_key':'review_window'}]},{'name':'claim_window','role':'SERIAL\x20CLAIM\x20WINDOW\x20(ABNB2-validated):\x20mandatory\x20waypoint\x20between\x20checkout\x20and\x20payout\x20—\x20the\x20pool\x20stays\x20intact\x20here\x20while\x20claims\x20are\x20filed\x20and\x20adjudicated.\x20Two\x20exits:\x20FileClaim\x20(inside\x20the\x20window)\x20or\x20ReleaseNoClaim\x20(window\x20elapsed,\x20no\x20claim).\x20Re-entered\x20from\x20reviewed\x20so\x20a\x20guest\x20review\x20can\x20never\x20strand\x20the\x20order\x20off\x20the\x20settlement\x20path\x20(R-DEAD-END)','semantic_role':'delivered','from':[{'prev':'checked_out','forward':'OpenClaimWindow','operator':'merchant','permission_index':0x3ea},{'prev':'reviewed','forward':'OpenClaimWindowAfterReview','operator':'merchant','permission_index':0x3ea}]},{'name':'payout_released','role':'Claim\x20window\x20closed\x20with\x20no\x20upheld\x20claim\x20—\x20the\x20intact\x20pool\x20splits\x20host/platform\x20by\x20Rate\x20(sums\x2010000,\x20full\x20drain\x20is\x20SAFE\x20here:\x20no\x20claim\x20can\x20still\x20be\x20open,\x20FACT-ALLOC-03).\x20Reached\x20from\x20claim_window\x20(no\x20claim)\x20or\x20claim_denied','semantic_role':'delivered','from':[{'prev':'claim_window','forward':'ReleaseNoClaim','operator':'merchant','permission_index':0x3ea,'guard_key':'claim_window_closed'},{'prev':'claim_denied','forward':'ReleaseAfterDeny','operator':'merchant','permission_index':0x3ea}]},{'name':'claim_open','role':'Host\x20files\x20a\x20damage\x20claim\x20inside\x20the\x20serial\x20window\x20(pre+post\x20evidence\x20required)\x20—\x20the\x20pool\x20is\x20guaranteed\x20intact\x20because\x20payout\x20can\x20only\x20fire\x20from\x20claim_window\x20after\x20the\x20window\x20elapses.\x20Contestable:\x20the\x20guest\x20holds\x20the\x20AppealClaimToArbitration\x20leg\x20(AB7-T1/F42),\x20so\x20an\x20upheld\x20claim\x20is\x20no\x20longer\x20a\x20unilateral\x20permission-1001\x20decision','semantic_role':'active','from':[{'prev':'claim_window','forward':'FileClaim','operator':'merchant','permission_index':0x3e8,'guard_key':'claim_window_open'}]},{'name':'guest_claim','role':'GUEST-SIDE\x20CLAIM\x20ENTRY\x20(AB7-T1,\x20abnb7-mn-261013\x20F41\x20fix):\x20the\x20order\x20holder\x20files\x20a\x20claim\x20inside\x20the\x20serial\x20window\x20—\x20WTS-anchored\x20evidence\x20(a\x20signed\x20Proof\x20ADDRESS\x20recorded\x20as\x20the\x20repository\x20row\x20value)\x20so\x20the\x20record\x27s\x20authenticity\x20is\x20verifier-checkable.\x20Same\x20intact-pool\x20guarantee\x20as\x20the\x20host\x20track;\x20exits\x20mirror\x20the\x20host\x20rail\x20(deny\x20/\x20pay-guest\x20/\x20appeal)','semantic_role':'active','from':[{'prev':'claim_window','forward':'FileClaimByGuest','operator':'order_payer','guard_key':'guest_claim_window_open'}]},{'name':'claim_appealed','role':'ARBITRATION\x20APPEAL\x20WAYPOINT\x20(AB7-T1,\x20abnb7-mn-261013\x20F42\x20fix):\x20a\x20party\x20contested\x20a\x20claim\x27s\x20outcome\x20—\x20the\x20contested\x20case\x20runs\x20on\x20the\x20Service\x27s\x20bound\x20Arbitration\x20object\x20(R-M1-11:\x20off-Machine;\x20rulings\x20change\x20Arb\x20case\x20state\x20only).\x20The\x20keeper\x20listens\x20for\x20the\x20Arb\x20Finished\x20event\x20and\x20pushes\x20the\x20ruling\x20forward\x20(upheld\x20→\x20the\x20matching\x20paid\x20node,\x20denied\x20→\x20claim_denied).\x20RECORD\x20waypoint,\x20NOT\x20a\x20dispute\x20terminal\x20—\x20same\x20convention\x20as\x20retail\x27s\x20item_lost','semantic_role':'active','from':[{'prev':'claim_open','forward':'AppealClaimToArbitration','operator':'order_payer','guard_key':'claim_appeal'},{'prev':'guest_claim','forward':'AppealGuestClaimToArbitration','operator':'merchant','permission_index':0x3e8}]},{'name':'claim_denied','role':'Claim\x20denied\x20on\x20the\x20evidence\x20chain\x20(or\x20via\x20arbitration)\x20—\x20ReleaseAfterDeny\x20routes\x20the\x20intact\x20pool\x20to\x20the\x20normal\x20payout;\x20NEVER\x20a\x20stop\x20node\x20(ABNB2\x20fix:\x20the\x20old\x20parallel\x20design\x20stranded\x20funds\x20here).\x20Reached\x20from\x20claim_open\x20/\x20guest_claim\x20reviewer\x20denials\x20AND\x20from\x20claim_appealed\x20rulings','semantic_role':'delivered','from':[{'prev':'claim_open','forward':'DenyClaim','operator':'merchant','permission_index':0x3e9,'guard_key':'claim_review'},{'prev':'guest_claim','forward':'DenyGuestClaim','operator':'merchant','permission_index':0x3e9,'guard_key':'claim_review'},{'prev':'claim_appealed','forward':'DenyClaimAfterRuling','operator':'merchant','permission_index':0x3ea},{'prev':'claim_appealed','forward':'DenyGuestClaimAfterRuling','operator':'merchant','permission_index':0x3ea}]},{'name':'claim_paid','role':'Host\x20claim\x20upheld\x20—\x20the\x20intact\x20pool\x20pays\x20the\x20host\x20(claim\x20award\x20=\x20the\x20host\x27s\x20own\x20escrowed\x20stay\x20income;\x20damages\x20BEYOND\x20the\x20pool\x20route\x20to\x20arbitration\x20+\x20compensation\x20fund,\x203x\x20cap).\x20Also\x20reached\x20from\x20claim_appealed\x20when\x20the\x20ruling\x20upholds\x20the\x20host','semantic_role':'delivered','from':[{'prev':'claim_open','forward':'PayClaim','operator':'merchant','permission_index':0x3e9,'guard_key':'claim_review'},{'prev':'claim_appealed','forward':'PayClaimAfterRuling','operator':'merchant','permission_index':0x3ea}]},{'name':'guest_claim_paid','role':'GUEST\x20claim\x20upheld\x20(AB7-T1):\x20the\x20intact\x20pool\x20refunds\x20the\x20guest\x20in\x20full\x20via\x20the\x20slot-254\x20order-anchored\x20rail\x20—\x20the\x20guest-side\x20mirror\x20of\x20claim_paid.\x20Reached\x20from\x20the\x20reviewer\x20(PayGuestClaim)\x20or\x20an\x20upheld\x20appeal\x20ruling\x20(PayGuestClaimAfterRuling)','semantic_role':'cancelled','from':[{'prev':'guest_claim','forward':'PayGuestClaim','operator':'merchant','permission_index':0x3e9,'guard_key':'claim_review'},{'prev':'claim_appealed','forward':'PayGuestClaimAfterRuling','operator':'merchant','permission_index':0x3ea}]},{'name':'completed','role':'Terminal:\x20payout\x20released\x20or\x20a\x20claim\x20paid\x20(host\x20or\x20guest\x20track)\x20—\x20the\x20pool\x20is\x20empty\x20and\x20the\x20review\x20window\x20elapses','semantic_role':'final','from':[{'prev':'payout_released','forward':'Finalize','operator':'merchant','permission_index':0x3ea},{'prev':'claim_paid','forward':'FinalizeAfterClaim','operator':'merchant','permission_index':0x3ea},{'prev':'guest_claim_paid','forward':'FinalizeAfterGuestClaim','operator':'merchant','permission_index':0x3ea}]}],'guards':[{'template_id':'pattern.verifier_evidence_philosophy','host':'service','key':'buy','purpose':'Payment\x20amount\x20equals\x20the\x20sum\x20of\x20sale\x20items\x20(rent\x20+\x20cleaning\x20+\x20service\x20fee)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'confirm_expire','purpose':'Host\x20confirmation\x20window\x20(default\x2024h)\x20anchored\x20on\x20progress.history.time\x20of\x20reserved\x20—\x20expiry\x20routes\x20the\x20order\x20to\x20cancelled_unpaid\x20with\x20a\x20full\x20refund\x20(keeper\x20advances)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_1','purpose':'Tier\x201\x20(flexible):\x20full\x20refund\x20until\x2024h\x20before\x20check-in\x20—\x20mounts\x20via\x20the\x20cancellation_policy\x20selection\x20(M-T7\x20conditional\x20emission)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_2','purpose':'Tier\x202\x20(moderate):\x20full\x20refund\x20until\x205\x20days\x20before\x20check-in'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_3','purpose':'Tier\x203\x20(firm):\x20full\x20refund\x20until\x2014\x20days\x20before\x20check-in'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_4','purpose':'Tier\x204\x20(strict):\x20full\x20refund\x20until\x2030\x20days\x20before\x20check-in'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_5','purpose':'Tier\x205\x20(strict-partial):\x2050%\x20refund\x20at\x207+\x20days\x20before\x20check-in\x20(tier5_guest_bps)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_6','purpose':'Tier\x206\x20(long-stay):\x2028+\x20night\x20stays,\x2030-day\x20window,\x2050%\x20refund\x20(tier6_guest_bps)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'host_cancel','purpose':'Host\x20cancellation\x20before\x20check-in\x20with\x20tiered\x20penalty\x20disclosure\x20(48h/30d\x20boundaries)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'checkin_gate','purpose':'Check-in\x20date-typed\x20time\x20gate\x20(e.g.\x2016:00\x20on\x20arrival\x20day)\x20—\x20ABSOLUTE\x20per-order\x20instance'},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20host\x20declares\x20customer_required\x20(guest\x20identity\x20per\x20house\x20rules):\x20AND\x20into\x20\x27checkin_gate\x27\x20—\x20gate\x20order.required_info\x20some\x20so\x20the\x20guest\x27s\x20recorded\x20credential\x20is\x20on-chain\x20before\x20keys\x20hand\x20over;\x20the\x20host\x20eyeballing\x20the\x20recorded\x20contact\x20in\x20the\x20Messenger\x20conversation\x20(never\x20the\x20recorded\x20address\x20value)\x20is\x20the\x20acceptance\x20basis;\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(testnet\x20HIGH-05),\x20so\x20this\x20Guard\x20is\x20the\x20only\x20enforcement'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'checkout_gate','purpose':'Check-out\x20date-typed\x20time\x20gate\x20(e.g.\x2011:00\x20on\x20departure\x20day)\x20—\x20ABSOLUTE\x20per-order\x20instance'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Guest\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20(14)\x20of\x20checkout,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20post-checkout\x20—\x20checked_out\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20claim\x20window\x20opens\x20from\x20checked_out\x20directly\x20when\x20the\x20guest\x20never\x20reviews;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'claim_window_open','purpose':'Claim\x20filing\x20INSIDE\x20the\x20serial\x20window\x20—\x20a\x20CLOSING\x20window:\x20Clock\x20<=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days;\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20the\x20window\x20is\x20shut\x20while\x20open\x20and\x20stays\x20open\x20after\x20it\x20closed\x20—\x20az3\x20F-03;\x20bkd8\x20BK-04);\x20relies\x20on\x20pre-check-in\x20and\x20post-check-out\x20evidence\x20writes'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'claim_window_closed','purpose':'No-claim\x20release\x20gate:\x20Clock\x20>=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x20—\x20the\x20only\x20forward\x20out\x20of\x20claim_window\x20besides\x20the\x20two\x20filing\x20forwards\x20(FileClaim\x20/\x20FileClaimByGuest),\x20so\x20the\x20pool\x20cannot\x20release\x20while\x20a\x20claim\x20could\x20still\x20be\x20filed\x20(serial\x20design,\x20ABNB2)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'claim_review','purpose':'Claim\x20adjudication:\x20pre+post\x20evidence\x20comparison\x20chain,\x20guest\x20response\x20window\x20(24h),\x20and\x20any\x20arbitration\x20ruling\x20—\x20gates\x20BOTH\x20claim\x20exits;\x20the\x20reviewer\x20permission\x20(1001)\x20is\x20distinct\x20from\x20the\x20filing\x20host\x20(1000)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'guest_claim_window_open','purpose':'Guest\x20claim\x20filing\x20INSIDE\x20the\x20serial\x20window\x20(AB7-T1)\x20—\x20a\x20CLOSING\x20window:\x20Clock\x20<=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days;\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20bkd8\x20BK-04)\x20—\x20the\x20order-holder\x20mirror\x20of\x20claim_window_open;\x20M-T2\x20keeps\x20one\x20key\x20per\x20source\x20decision,\x20so\x20the\x20guest\x27s\x20filing\x20gate\x20is\x20its\x20own\x20Guard\x20instance'},{'template_id':'pattern.repository_data_check','host':'machine','key':'guest_claim_evidence','purpose':'WTS-anchored\x20guest\x20evidence\x20(AB7-T1,\x20abnb7-mn-261013\x20F41):\x20the\x20guest-filed\x20claim\x20requires\x20an\x20evidence\x20row\x20whose\x20value\x20is\x20a\x20signed\x20Proof\x20ADDRESS\x20(proof.signer/proof.about/proof.time\x20verifier-checkable),\x20and\x20the\x20row\x27s\x20write\x20authorization\x20MUST\x20include\x20the\x20order\x20holder\x20—\x20a\x20host-only\x20writer\x20set\x20would\x20brick\x20the\x20guest\x20rail\x20exactly\x20the\x20way\x20the\x20host-only\x20claim_evidence\x20set\x20excluded\x20the\x20guest\x20at\x20F41'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'claim_appeal','purpose':'Order\x20holder\x20contests\x20a\x20claim\x20outcome\x20and\x20freezes\x20the\x20track\x20at\x20claim_appealed\x20—\x20the\x20contested\x20case\x20runs\x20on\x20the\x20Service\x27s\x20bound\x20Arbitration\x20(R-M1-11\x20off-Machine);\x20the\x20keeper\x20advances\x20on\x20the\x20Arb\x20Finished\x20event.\x20AB7-T1/F42:\x20this\x20appeal\x20leg\x20is\x20what\x20ends\x20unilateral\x20claim\x20adjudication\x20(one\x20merchant\x20signature\x20deciding\x20the\x20whole\x20split)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'payout_release_gate','purpose':'Payout\x20allocator\x20gate:\x20progress.current\x20==\x20payout_released\x20+\x20order.service\x20binding\x20—\x20the\x20pool\x20is\x20intact\x20because\x20payout_released\x20is\x20only\x20reachable\x20after\x20the\x20serial\x20claim\x20window\x20closed\x20with\x20no\x20upheld\x20claim'},{'template_id':'pattern.progress_state_check','host':'machine','key':'claim_paid_gate','purpose':'Claim-paid\x20allocator\x20gate:\x20progress.current\x20==\x20claim_paid\x20+\x20order.service\x20binding\x20—\x20pays\x20the\x20host\x20from\x20the\x20intact\x20pool\x20(claim\x20award\x20=\x20the\x20host\x27s\x20escrowed\x20stay\x20income)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'confirm_expire_refund','purpose':'Unconfirmed-refund\x20allocator\x20gate:\x20progress.current\x20==\x20cancelled_unpaid\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20none'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_1_refund','purpose':'Tier-1\x20refund\x20allocator\x20gate:\x20progress.history.time\x20of\x20guest_cancelled\x20inside\x20the\x20tier-1\x20window\x20(measured\x20from\x20order.time)\x20+\x20current\x20==\x20guest_cancelled\x20—\x20keeper\x20trigger\x20timing\x20cannot\x20shift\x20the\x20tier'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_2_refund','purpose':'Tier-2\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_3_refund','purpose':'Tier-3\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_4_refund','purpose':'Tier-4\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_5_refund','purpose':'Tier-5\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_6_refund','purpose':'Tier-6\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'host_cancel_refund','purpose':'Host-cancel\x20refund\x20allocator\x20gate:\x20progress.current\x20==\x20host_cancelled\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'guest_claim_paid_gate','purpose':'Guest-claim\x20refund\x20allocator\x20gate\x20(AB7-T1):\x20progress.current\x20==\x20guest_claim_paid\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20none\x20—\x20the\x20full\x20refund\x20fires\x20once,\x20only\x20from\x20the\x20upheld\x20guest-claim\x20state'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion,\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Covers\x20the\x20AWARDED-GUEST-CLAIM\x20strand:\x20an\x20award\x20that\x20ACTUALLY\x20paid\x20welds\x20the\x20guest_claim_paid_gate\x20rail\x20shut\x20(claimed_by\x20none\x20fails),\x20and\x20the\x20host/platform\x20gates\x20pin\x20OTHER\x20nodes,\x20so\x20the\x20intact\x20pool\x20had\x20no\x20exit\x20once\x20the\x20keeper\x20finalized\x20past\x20guest_claim_paid\x20into\x20completed\x20—\x20this\x20rail\x20sweeps\x20it\x20to\x20the\x20host\x20Entity\x20instead.\x20Exactly\x20one\x20of\x20guest_claim_paid_gate\x20/\x20recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'host','count':0x5,'mode':'rate','refund_track':'order_anchored','rows':[{'track':'settlement','recipient':'entity','recipient_key':'host','mode':'rate','value_from':'host_rate_bps','guard_key':'payout_release_gate','note':'NO-CLAIM\x20/\x20CLAIM-DENIED\x20RELEASE:\x20host\x20share\x20of\x20the\x20intact\x20pool\x20at\x20payout_released\x20—\x20reachable\x20only\x20via\x20ReleaseNoClaim\x20(window\x20elapsed,\x20no\x20claim)\x20or\x20ReleaseAfterDeny\x20(claim\x20denied\x20on\x20the\x20evidence\x20chain).\x20Rate\x20legs\x20sum\x2010000\x20so\x20the\x20pool\x20drains\x20in\x20full;\x20safe\x20BECAUSE\x20serial\x20(no\x20claim\x20can\x20still\x20be\x20open).'},{'track':'settlement','recipient':'entity','recipient_key':'platform','mode':'rate','value_from':'platform_rate_bps','guard_key':'payout_release_gate','note':'Aggregator\x20fee\x20share\x20of\x20the\x20no-claim\x20release\x20—\x20an\x20explicit\x20pre-order-computable\x20number\x20(MERCHANT\x20FREEDOM),\x200\x20under\x20pure\x20direct\x20sales.\x20host+platform\x20MUST\x20sum\x20to\x2010000\x20within\x20the\x20group:\x20no\x20Surplus\x20exists\x20anywhere\x20in\x20this\x20template,\x20so\x20a\x20mis-sum\x20fails\x20the\x20rate\x20invariant.'},{'track':'settlement','recipient':'entity','recipient_key':'host','mode':'rate','value_from':'host_rate_bps','guard_key':'claim_paid_gate','note':'CLAIM\x20UPHELD:\x20host\x20share\x20of\x20the\x20intact\x20pool\x20at\x20claim_paid.\x20The\x20claim\x20award\x20IS\x20the\x20host\x27s\x20escrowed\x20stay\x20income\x20(the\x20pool\x20holds\x20only\x20the\x20booking\x20amount)\x20—\x20damages\x20BEYOND\x20the\x20pool\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(3x\x20cap),\x20never\x20to\x20a\x20bounded\x20Amount\x20leg\x20racing\x20the\x20release.'},{'track':'settlement','recipient':'entity','recipient_key':'platform','mode':'rate','value_from':'platform_rate_bps','guard_key':'claim_paid_gate','note':'Aggregator\x20fee\x20share\x20of\x20the\x20claim-paid\x20release;\x200\x20by\x20default.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'confirm_expire_refund','note':'Unconfirmed/declined\x20request\x20=\x20FULL\x20refund\x20to\x20the\x20paying\x20order\x20(slot-254\x20order\x20anchor).\x20The\x20allocator-side\x20guard\x20anchors\x20progress.current\x20==\x20cancelled_unpaid\x20+\x20order.service\x20binding\x20so\x20keeper\x20timing\x20cannot\x20misfire\x20onto\x20a\x20sibling\x20order.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'cancel_tier_1_refund','note':'Tier\x201:\x20full\x20refund\x20(slot-254\x20order\x20anchor).\x20Tier\x20refund\x20Guards\x20anchor\x20on\x20progress.history.time\x20of\x20guest_cancelled\x20(the\x20cancellation\x20moment),\x20NOT\x20Clock.now()\x20—\x20a\x20keeper\x20triggering\x20the\x20allocator\x20after\x20the\x20window\x20must\x20still\x20satisfy\x20it.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'cancel_tier_2_refund','note':'Tier\x202:\x20full\x20refund\x20(slot-254\x20order\x20anchor).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'cancel_tier_3_refund','note':'Tier\x203:\x20full\x20refund\x20(slot-254\x20order\x20anchor).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'cancel_tier_4_refund','note':'Tier\x204:\x20full\x20refund\x20(slot-254\x20order\x20anchor).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value_from':'tier5_guest_bps','guard_key':'cancel_tier_5_refund','note':'Tier\x205\x20partial:\x20guest\x20share\x20(slot-254\x20order\x20anchor).'},{'track':'refund','recipient':'entity','recipient_key':'host','mode':'rate','value_from':'tier5_host_bps','guard_key':'cancel_tier_5_refund','note':'Tier\x205\x20partial:\x20host\x20cancellation-fee\x20share.\x20guest+host\x20MUST\x20sum\x20to\x2010000\x20within\x20the\x20group\x20(no\x20Surplus).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value_from':'tier6_guest_bps','guard_key':'cancel_tier_6_refund','note':'Tier\x206\x20(long-stay)\x20partial:\x20guest\x20share\x20(slot-254\x20order\x20anchor).'},{'track':'refund','recipient':'entity','recipient_key':'host','mode':'rate','value_from':'tier6_host_bps','guard_key':'cancel_tier_6_refund','note':'Tier\x206\x20(long-stay)\x20partial:\x20host\x20share.\x20guest+host\x20MUST\x20sum\x20to\x2010000.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'host_cancel_refund','note':'Host\x20cancellation\x20=\x20FULL\x20refund\x20to\x20the\x20guest\x20(slot-254\x20order\x20anchor).\x20Host-breach\x20guest\x20compensation\x20(re-booking\x20cost)\x20has\x20no\x20automatic\x20allocator\x20—\x20it\x20is\x20an\x20arbitration\x20counterclaim\x20playbook\x20(guest\x20opens\x20an\x20Arb\x20case;\x20the\x20fund\x20pays\x20the\x20ruling).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'guest_claim_paid_gate','note':'GUEST\x20CLAIM\x20UPHELD\x20(AB7-T1)\x20=\x20FULL\x20refund\x20to\x20the\x20paying\x20order\x20(slot-254\x20order\x20anchor)\x20—\x20the\x20guest-side\x20mirror\x20of\x20the\x20host\x27s\x20claim_paid\x20release.\x20The\x20pool\x20is\x20intact\x20here:\x20guest_claim_paid\x20is\x20reachable\x20only\x20through\x20the\x20serial\x20claim\x20window\x27s\x20adjudication\x20exits\x20(reviewer\x20decision\x20or\x20appeal\x20ruling).'},{'track':'settlement','recipient':'entity','recipient_key':'host','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20host\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20payout_release_gate/claim_paid_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20guest_claim_paid_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'NO\x20PLATFORM\x20TAKE\x20by\x20default\x20(platform_rate_bps\x20ships\x20at\x200,\x20host\x2010000)\x20—\x20WoWok\x20is\x20direct-sales:\x20merchants\x20pay\x20gas\x20only.\x20SERIAL\x20CLAIM\x20WINDOW\x20(v30,\x20ABNB2\x20mainnet-validated):\x20every\x20order\x20passes\x20checked_out\x20→\x20claim_window\x20→\x20payout_released,\x20so\x20a\x20claim\x20is\x20always\x20filed\x20and\x20adjudicated\x20while\x20the\x20pool\x20is\x20intact;\x20the\x20chain\x20has\x20no\x20holdback\x20primitive\x20(FACT-ALLOC-03),\x20and\x20the\x20serial\x20topology\x20is\x20what\x20removes\x20the\x20first-come-first-served\x20race\x20between\x20the\x20payout\x20and\x20a\x20claim.\x20Three\x20release\x20states:\x20payout_released\x20(no\x20claim\x20filed\x20in\x20the\x20window,\x20or\x20a\x20claim\x20denied),\x20claim_paid\x20(host\x20claim\x20upheld\x20—\x20host/platform\x20split),\x20and\x20guest_claim_paid\x20(AB7-T1:\x20guest\x20claim\x20upheld\x20—\x20full\x20order-anchored\x20refund).\x20The\x20first\x20two\x20split\x20the\x20intact\x20pool\x20host/platform\x20by\x20host_rate_bps/platform_rate_bps\x20(Rate\x20legs\x20sum\x2010000\x20per\x20group\x20⇒\x20full\x20drain,\x20safe\x20because\x20no\x20claim\x20can\x20still\x20be\x20open).\x20Damages\x20beyond\x20the\x20booking\x20amount\x20are\x20NOT\x20payable\x20from\x20the\x20pool\x20(it\x20holds\x20only\x20the\x20stay\x20income)\x20and\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(3x\x20cap).\x20Refunds\x20are\x20order-anchored\x20{GuardIdentifier:\x20254}\x20Rate\x20legs\x20on\x20protocol\x20slot\x20254\x20(the\x20task-binding\x20submission\x20auto-written\x20with\x20the\x20paying\x20order\x20id\x20—\x20mainnet-verified\x20executable\x20shape;\x20a\x20static\x20slot\x20aborts\x20at\x20alloc\x20with\x20ERECIPIENT_NOT_FOR_OBJECT)\x20(full\x20for\x20unconfirmed/host-cancel/tiers\x201-4/guest-claim-upheld;\x20tier5/6\x20split\x20guest/host).\x20Surplus\x20deliberately\x20DISABLED\x20template-wide\x20(a\x20withdraw-all\x20leg\x20would\x20sweep\x20money\x20owed\x20to\x20other\x20tracks).\x20MERCHANT\x20FREEDOM:\x20an\x20aggregator\x20merchant\x20may\x20charge\x20its\x20own\x20fee\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity\x20(an\x20EMPTY\x20one\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently);\x20(3)\x20never\x20take\x20the\x20fee\x20via\x20Surplus.'},'key_risk':'Claim\x20evidence\x20—\x20the\x20serial\x20claim\x20window\x20(v30)\x20keeps\x20the\x20pool\x20intact\x20while\x20a\x20claim\x20is\x20open;\x20a\x20damage\x20claim\x20still\x20fails\x20without\x20the\x20pre+post\x20evidence\x20chain,\x20and\x20damages\x20beyond\x20the\x20pool\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(3x\x20cap)','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','PAYOUT\x20MECHANICS\x20(v30,\x20ABNB2\x20mainnet-validated):\x20the\x20chain\x20has\x20NO\x20holdback\x20primitive\x20—\x20fix\x20is\x20the\x20PAID\x20sum\x20of\x20an\x20allocator\x27s\x20Amount\x20legs\x20(allocation.move\x20fix\x20computation)\x20and\x20a\x20pure-Rate\x20plan\x20summing\x2010000\x20drains\x20100%\x20of\x20the\x20pool\x20(FACT-ALLOC-03).\x20The\x20serial\x20claim\x20window\x20is\x20the\x20resolution:\x20checked_out\x20→\x20claim_window\x20is\x20a\x20mandatory\x20waypoint,\x20and\x20the\x20ONLY\x20exits\x20are\x20FileClaim\x20(inside\x20the\x20window)\x20and\x20ReleaseNoClaim\x20(window\x20elapsed).\x20A\x20claim\x20is\x20therefore\x20always\x20adjudicated\x20while\x20the\x20pool\x20is\x20intact.\x20A\x20PROPORTIONAL\x20holdback\x20(e.g.\x20\x27leave\x2010%\x27)\x20remains\x20inexpressible\x20—\x20net-Rate\x20legs\x20must\x20sum\x20to\x2010000\x20and\x20there\x20is\x20no\x20reserve\x20parameter','TWO\x20RELEASE\x20STATES,\x20both\x20pure-Rate\x20splits\x20of\x20the\x20intact\x20pool:\x20payout_released\x20(host+platform,\x20guard\x20payout_release_gate\x20—\x20reached\x20via\x20ReleaseNoClaim\x20after\x20the\x20window\x20or\x20ReleaseAfterDeny\x20after\x20a\x20denial)\x20and\x20claim_paid\x20(host+platform,\x20guard\x20claim_paid_gate).\x20The\x20claim\x20award\x20is\x20the\x20host\x27s\x20own\x20escrowed\x20stay\x20income\x20—\x20the\x20pool\x20holds\x20nothing\x20more;\x20damages\x20BEYOND\x20the\x20booking\x20amount\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(3x\x20cap).\x20THIRD\x20state\x20(AB7-T1):\x20guest_claim_paid\x20—\x20a\x20GUEST\x20claim\x20upheld\x20refunds\x20the\x20order\x20in\x20full\x20via\x20guest_claim_paid_gate','BUYER-SIDE\x20CLAIM\x20PATH\x20+\x20ARBITRATION\x20APPEAL\x20(AB7-T1,\x20abnb7-mn-261013\x20F41/F42):\x20FileClaimByGuest\x20lets\x20the\x20ORDER\x20HOLDER\x20file\x20inside\x20the\x20serial\x20window\x20with\x20WTS-anchored\x20evidence\x20(a\x20signed\x20Proof\x20ADDRESS\x20as\x20the\x20repository\x20row\x20value\x20—\x20authenticity\x20verifier-checkable,\x20not\x20a\x20bare\x20text\x20row),\x20and\x20the\x20guest\x20evidence\x20row\x27s\x20write\x20authorization\x20MUST\x20include\x20the\x20order\x20holder\x20(a\x20host-only\x20writer\x20set\x20re-creates\x20the\x20F41\x20exclusion).\x20Either\x20party\x20can\x20send\x20a\x20contested\x20claim\x20to\x20the\x20Service\x27s\x20bound\x20Arbitration\x20via\x20the\x20claim_appealed\x20waypoint\x20(R-M1-11:\x20the\x20case\x20runs\x20off-Machine,\x20rulings\x20change\x20Arb\x20case\x20state\x20only,\x20and\x20the\x20keeper\x20pushes\x20the\x20final\x20forward\x20on\x20the\x20Arb\x20Finished\x20event\x20—\x20upheld\x20→\x20the\x20matching\x20paid\x20node,\x20denied\x20→\x20claim_denied).\x20No\x20claim\x20outcome\x20is\x20a\x20unilateral\x20permission\x20decision\x20anymore:\x20the\x20counterparty\x20always\x20holds\x20the\x20appeal\x20leg','FUND-TERMS\x20ROWS\x20ARE\x20EFFECTIVELY\x20WRITE-ONCE\x20(AB7-T2,\x20abnb7-mn-261013\x20F25):\x20any\x20repository\x20row\x20a\x20MONEY-MOVING\x20guard\x20reads\x20(cancellation-policy\x20tier\x20rows,\x20check-in\x20timestamps,\x20claim\x20thresholds)\x20is\x20a\x20fund\x20term\x20—\x20if\x20it\x20stays\x20counterparty-overwritable,\x20the\x20host\x20can\x20rewrite\x20the\x20terms\x20after\x20the\x20guest\x20cancels\x20and\x20even\x20zero\x20out\x20the\x20matching\x20rail,\x20with\x20no\x20buyer-visible\x20event\x20(RepositoryDataOverwriteEvent\x20renders\x20as\x20\x27Unknown\x20event\x27).\x20Never\x20route\x20fund\x20terms\x20through\x20a\x20single-party\x20mutable\x20row:\x20pin\x20the\x20term\x20row\x20at\x20booking\x20time\x20(or\x20bind\x20the\x20guard\x20to\x20order-scoped\x20values),\x20and\x20when\x20terms\x20must\x20change,\x20write\x20a\x20NEW\x20row\x20and\x20surface\x20the\x20change\x20in\x20the\x20Messenger\x20thread\x20—\x20a\x20silent\x20overwrite\x20of\x20fund\x20terms\x20is\x20a\x20unilateral\x20contract\x20amendment','Six\x20cancellation\x20tiers\x20=\x20six\x20time-lock\x20Guards;\x20the\x20host\x20picks\x20ONE\x20per\x20listing\x20via\x20the\x20cancellation_policy\x20input\x20(1..6,\x20benchmark\x20default\x201\x20=\x20flexible)\x20and\x20the\x20build\x20kernel\x20emits\x20ONLY\x20that\x20tier\x27s\x20forward\x20+\x20refund\x20rail\x20(M-T7\x20conditional\x20emission\x20—\x20the\x20other\x20five\x20tiers\x20are\x20dropped\x20at\x20compile,\x20so\x20the\x20overlapping-window\x20best-tier\x20pick\x20is\x20structurally\x20impossible).\x20Allocator\x20tier\x20Guards\x20anchor\x20on\x20progress.history.time\x20of\x20guest_cancelled\x20(the\x20cancellation\x20moment),\x20not\x20Clock.now()\x20—\x20keeper\x20trigger\x20timing\x20must\x20not\x20change\x20the\x20refund\x20tier','REQUEST-TO-BOOK\x20RAIL:\x20reserved\x20is\x20entered\x20ALREADY\x20PAID\x20(buy\x20escrows\x20atomically\x20—\x20no\x20unpaid\x20order\x20exists\x20on\x20chain;\x20the\x20incumbent\x27s\x20\x2724h\x20unpaid\x20expiry\x27\x20has\x20no\x20chain\x20equivalent).\x20cancelled_unpaid\x20is\x20the\x20host-decline\x20/\x20confirm-timeout\x20rail:\x20ExpireUnconfirmed\x20fires\x20on\x20the\x20confirm\x20window\x20(progress.history.time\x20of\x20reserved\x20+\x20confirm_window_hours,\x20keeper-advanced),\x20DeclineRequest\x20is\x20the\x20host\x27s\x20manual\x20reject\x20—\x20both\x20refund\x20in\x20full\x20via\x20the\x20confirm_expire\x20allocator','RELATIVE\x20time\x20windows\x20use\x20ONE\x20shared\x20witness-derived\x20Guard\x20each\x20(verified\x20on-chain):\x20anchor\x20=\x20progress.history.time\x20+\x20duration_ms\x20via\x20a\x20convert_witness\x20submission\x20of\x20the\x20OrderProgress\x20—\x20a\x20single\x20Guard\x20then\x20serves\x20EVERY\x20order.\x20Cancellation\x20windows\x20anchor\x20to\x20order.time;\x20POST-CHECKOUT\x20windows\x20(claim_window_open\x20/\x20claim_window_closed)\x20anchor\x20to\x20the\x20claim_window\x20ENTRY\x20(progress.history.time\x201280,\x20next_node=\x27claim_window\x27,\x20find=last)\x20—\x20anchoring\x20a\x20claim\x20window\x20to\x20order.time\x20makes\x20the\x20branch\x20unreachable\x20(order-time\x20+\x20pre-checkout\x20durations\x20>\x20window).\x20Only\x20ABSOLUTE\x20date\x20gates\x20(arrival-day\x2016:00)\x20are\x20per-order\x20instances','Surplus\x20mode\x20is\x20disabled\x20template-wide\x20—\x20a\x20withdraw-all\x20leg\x20would\x20sweep\x20money\x20still\x20owed\x20to\x20other\x20tracks\x20(an\x20uncapped\x20Surplus\x20takes\x20the\x20whole\x20remaining\x20balance,\x20allocation.move\x20withdraw_all\x20semantics)','Coverage-program\x20equivalent\x20=\x20compensation\x20fund:\x20publishing\x20with\x20a\x20funded\x20pool\x20requires\x20a\x20mounted\x20Arbitration','Arbitration\x20awards\x20are\x20capped\x20at\x203x\x20the\x20order\x20amount\x20—\x20excess\x20is\x20covered\x20by\x20the\x20compensation\x20fund\x20(recipient\x20hard-bound\x20to\x20the\x20order\x20owner)','Claim\x20escalation\x20goes\x20to\x20Arbitration\x20off-Machine\x20(R-M1-11)\x20—\x20claim_open/claim_denied/claim_paid\x20are\x20business\x20states,\x20not\x20dispute\x20terminals','Keepers\x20advance:\x20confirm\x20expiry,\x20check-in/out\x20gates,\x20claim-window\x20open\x20(right\x20after\x20checkout),\x20no-claim\x20release\x20(window\x20close),\x20and\x20finalize\x20—\x20time-lock\x20Guards\x20only\x20ALLOW\x20transitions','Platform\x20commission\x20recipient\x20MUST\x20be\x20an\x20explicit\x200x\x20vault\x20Entity\x20—\x20an\x20EMPTY\x20Entity\x20(\x22\x22)\x20silently\x20routes\x20the\x20platform\x20take\x20to\x20the\x20builder\x27s\x20own\x20local\x20account\x20(the\x20take\x20must\x20land\x20in\x20the\x20platform\x20treasury,\x20never\x20the\x20deploying\x20AI/host).\x20Defaults\x20ship\x20platform_rate_bps=0\x20/\x20host_rate_bps=10000\x20(pure\x20direct\x20sales\x20—\x20the\x20template\x27s\x20own\x20default\x20must\x20never\x20trip\x20R-RECIPIENT-03,\x20bkng3\x20live\x20lesson).\x20To\x20charge\x20an\x20aggregator\x20fee:\x20FIRST\x20create\x20the\x20platform\x20vault\x20Entity\x20(a\x20local\x20mark\x20named\x20\x27platform\x27\x20bound\x20to\x20the\x20treasury\x200x\x20address)\x20so\x20recipient_key:\x27platform\x27\x20resolves,\x20THEN\x20raise\x20platform_rate_bps\x20and\x20recompute\x20host_rate_bps\x20so\x20each\x20group\x20still\x20sums\x2010000.\x20An\x20unresolved\x20\x27platform\x27\x20mark\x20is\x20a\x20NON-blocking\x20warning;\x20an\x20EMPTY\x20Entity\x20is\x20a\x20BLOCKING\x20critical','Penalty-class\x20allocators\x20(late-cancel\x20fine,\x20host-cancel\x20penalty)\x20MUST\x20use\x20Rate\x20sharing\x20—\x20a\x20fixed\x20Amount\x20is\x20snapshotted\x20at\x20configuration\x20time\x20and\x20can\x20EXCEED\x20a\x20small\x20order\x27s\x20escrow,\x20aborting\x20the\x20allocation\x20with\x20Insufficient\x20balance\x20and\x20permanently\x20deadlocking\x20that\x20branch\x20(on-chain\x20verified)','Continuous\x20compensation\x20formulas\x20(refund\x20by\x20nights\x20used)\x20are\x20approximated\x20with\x20the\x20tiered\x20ladder\x20—\x20fixed\x20sharing\x20per\x20tier\x20selected\x20by\x20interval\x20Guards\x20(greater/lesser\x20opcodes,\x20on-chain\x20verified):\x20see\x20pattern.tiered_amount_ladder;\x20every\x20fixed\x20Amount\x20tier\x20must\x20stay\x20below\x20the\x20smallest\x20expected\x20order\x20escrow','Host-breach\x20guest\x20compensation\x20(re-booking\x20cost)\x20has\x20NO\x20automatic\x20allocator\x20—\x20host_cancelled\x20only\x20refunds\x20the\x20guest\x20in\x20full;\x20model\x20extra\x20compensation\x20as\x20an\x20arbitration\x20counterclaim\x20playbook\x20(guest\x20opens\x20an\x20Arb\x20case\x20against\x20the\x20host\x20service,\x20fund\x20pays\x20the\x20ruling)','Arbitration\x20rulings\x20change\x20Arb\x20case\x20state\x20only\x20and\x20NEVER\x20advance\x20the\x20Machine\x20—\x20a\x20keeper\x20must\x20listen\x20for\x20Arb\x20Finished\x20events\x20and\x20push\x20the\x20affected\x20Order\x27s\x20terminal\x20forward\x20itself\x20(ruling-payout\x20nodes\x20stay\x20manual\x20otherwise)','DUAL-TRACK\x20WARNING\x20(A-2,\x20mainnet-verified\x204x\x20worst\x20case):\x20the\x20refund\x20allocators\x20and\x20the\x20compensation\x20fund\x20are\x20independent\x20channels\x20—\x20a\x20full\x20refund\x20does\x20NOT\x20bar\x20a\x20later\x20compensation\x20claim\x20(the\x20compensation-claim\x20call\x20has\x20no\x20Guard\x20slot).\x20Refund\x20guards\x20should\x20assert\x20order.claimed_by\x20none\x20(blocks\x20claim-then-refund);\x20refund-then-claim\x20stays\x20open\x20until\x20the\x20contract\x20tracks\x20refunded_amount\x20—\x20size\x20the\x20fund\x20accordingly','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20Enforce\x20it\x20by\x20ANDing\x20the\x20pattern.required_info_evidence_gate\x20Guard\x20into\x20\x27checkin_gate\x27\x20(gate\x20order.required_info\x20some\x20BEFORE\x20keys\x20hand\x20over),\x20not\x20by\x20declaring\x20the\x20list;\x20only\x20the\x20PRESENCE\x20is\x20asserted\x20—\x20the\x20recorded\x20address\x20value\x20is\x20never\x20a\x20guard\x20condition,\x20and\x20acceptance\x20of\x20the\x20delivered\x20info\x20is\x20the\x20host\x27s\x20confirming\x20forward.\x20QUOTA\x20COUPLING:\x20the\x20guest\x27s\x20info\x20message\x20shares\x20the\x20SINGLE\x20stranger-message\x20quota\x20—\x20make\x20it\x20the\x20FIRST\x20pre-order\x20message,\x20or\x20have\x20the\x20host\x20respond\x20first\x20to\x20open\x20the\x20conversation','PRIVACY\x20BOUNDARY\x20(M-T10):\x20the\x20customer-service\x20Contact\x20is\x20a\x20PUBLIC\x20shared\x20object\x20—\x20anyone\x20can\x20read\x20its\x20description/location\x20and\x20the\x20full\x20IM\x20directory\x20(every\x20member\x27s\x20at/status/join_time/description,\x20no\x20permission\x20gate),\x20and\x20each\x20member\x27s\x20status\x20is\x20self-declared\x20(a\x20member\x20can\x20only\x20update\x20their\x20OWN\x20status\x20row\x20—\x20sender-scoped,\x20no\x20owner\x20override).\x20Buyer↔host\x20negotiation\x20is\x20therefore\x20NOT\x20private\x20on\x20chain:\x20message\x20CONTENT\x20stays\x20private\x20only\x20inside\x20end-to-end\x20encrypted\x20Messenger\x20sessions\x20(off-chain),\x20while\x20membership\x20itself\x20and\x20everything\x20on\x20the\x20Contact\x20object\x20is\x20public.\x20Never\x20record\x20personal\x20data\x20(phone,\x20email,\x20exact\x20unit\x20address)\x20in\x20Contact\x20description/location/IM\x20entries\x20—\x20deliver\x20those\x20via\x20Messenger,\x20and\x20keep\x20only\x20city-level\x20location\x20data\x20on\x20chain','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'host_rate_bps':0x2710,'platform_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'claim_window_days':0xe,'review_window_days':0xe,'cancellation_policy':'1','confirm_window_hours':0x18,'tier5_guest_bps':0x1388,'tier5_host_bps':0x1388,'tier6_guest_bps':0x1388,'tier6_host_bps':0x1388,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'conditional_guards':[{'guard_key':'cancel_tier_1','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'1','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_1_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'1','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-1\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_2','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'2','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_2_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'2','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-2\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_3','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'3','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_3_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'3','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-3\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_4','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'4','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_4_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'4','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-4\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_5','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'5','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_5_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'5','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-5\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_6','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'6','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_6_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'6','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-6\x20forward\x20and\x20its\x20refund\x20allocator)'}],'time_anchors':{'confirm_expire':'progress.history.time\x20(id\x201280,\x20next_node=\x27reserved\x27,\x20find=last)','cancellation':'order.time','host_cancellation':'order.time','claim_window_open':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last)','claim_window_closed':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last)','checkin':'absolute_date','checkout':'absolute_date'},'trust_mechanisms':['R1\x20per-tier\x20refund\x20allocators\x20+\x20host-cancel\x20full\x20refund\x20+\x20unconfirmed-request\x20full\x20refund','R2\x20independent\x20arbitration\x20Permission\x20(contract-enforced\x20separation)','R3\x20compensation\x20fund\x20(coverage\x20program)\x20covering\x20award\x20amounts\x20beyond\x20the\x203x\x20cap','R4\x20check-in/out\x20time\x20gates\x20+\x20claim\x20evidence\x20reliance\x20—\x20no\x20self-sign','R5\x20order-anchored\x20payments','R6\x20serial\x20claim\x20window:\x20payout\x20can\x20never\x20fire\x20while\x20a\x20claim\x20is\x20open\x20or\x20the\x20window\x20is\x20still\x20running;\x20pure-Rate\x20legs\x20sum\x2010000\x20per\x20release\x20state;\x20Surplus\x20disabled\x20template-wide','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20confirm\x20expiry,\x20check-in/out\x20gates,\x20claim-window\x20open/close,\x20and\x20finalize','R10\x20cancellation\x20policy\x20parameters\x20embedded\x20as\x20immutable\x20Guard\x20tiers\x20(one\x20mounted\x20per\x20listing)'],'keeper_dependencies':['request\x20confirm\x20expiry\x20(confirm_window_hours)','check-in/check-out\x20time\x20gates','claim-window\x20open\x20(right\x20after\x20checkout)','no-claim\x20release\x20(claim\x20window\x20close)','claim\x20response\x20window\x20expiry'],'recommended_role':'merchant','role_rationale':'Hosts\x20and\x20property\x20operators\x20own\x20the\x20listing\x20Service;\x20the\x20platform\x20variant\x20hosts\x20many\x20hosts\x20under\x20Permission\x20entities\x20with\x20per-listing\x20Guard\x20instances.','differences':['Light\x20platform:\x20hosts\x20own\x20their\x20listing\x20Services;\x20relative\x20time\x20windows\x20are\x20witness-derived\x20shared\x20Guards\x20(progress.history.time\x20+\x20duration);\x20only\x20absolute\x20date\x20gates\x20are\x20per-order\x20instances','Payout\x20timing:\x20the\x20serial\x20claim\x20window\x20sits\x20BETWEEN\x20checkout\x20and\x20payout\x20(v30,\x20ABNB2-validated)\x20—\x20the\x20pool\x20releases\x20only\x20after\x20the\x20window\x20closes\x20with\x20no\x20upheld\x20claim\x20(Rate\x2010000\x20⇒\x20full\x20drain\x20of\x20the\x20INTACT\x20pool;\x20no\x20on-chain\x20holdback\x20exists\x20—\x20FACT-ALLOC-03);\x20damages\x20beyond\x20the\x20booking\x20amount\x20route\x20to\x20arbitration\x20+\x20compensation\x20fund','Request-to-book\x20rail:\x20reserved\x20is\x20paid-and-pending;\x20host\x20decline\x20or\x20confirm\x20timeout\x20refunds\x20in\x20full\x20(the\x20incumbent\x27s\x20unpaid-expiry\x20has\x20no\x20chain\x20equivalent\x20—\x20buy\x20escrows\x20atomically)','Six\x20cancellation\x20policy\x20tiers\x20with\x20per-tier\x20refund\x20allocator\x20splits\x20—\x20the\x20host\x20picks\x20one\x20via\x20the\x20cancellation_policy\x20input\x20and\x20the\x20build\x20kernel\x20mounts\x20ONLY\x20that\x20tier\x27s\x20forward\x20+\x20refund\x20rail\x20(M-T7);\x20partial\x20tiers\x20split\x20guest/host\x20inside\x20ONE\x20allocator\x20group','Damage\x20claims\x20rely\x20on\x20the\x20pre+post\x20evidence\x20comparison\x20chain\x20inside\x20the\x20serial\x20claim\x20window;\x20the\x20claim\x20award\x20is\x20the\x20host\x27s\x20escrowed\x20stay\x20income\x20—\x20damages\x20beyond\x20it\x20route\x20to\x20arbitration\x20+\x20compensation\x20fund','Platform\x20commission\x20recipient\x20must\x20be\x20an\x20explicit\x200x\x20vault\x20Entity\x20—\x20never\x20the\x20empty\x20Entity\x20default'],'user_inputs':['host_rate_bps\x20/\x20platform_rate_bps\x20—\x20the\x20payout\x20split\x20(applied\x20identically\x20to\x20both\x20release\x20states)','claim_window_days\x20/\x20review_window_days\x20—\x20post-checkout\x20windows\x20(the\x20claim\x20window\x20is\x20the\x20ONLY\x20delay\x20between\x20checkout\x20and\x20payout)','confirm_window_hours\x20—\x20host\x20confirmation\x20window\x20before\x20auto-cancel','cancellation_policy\x20—\x20which\x20of\x20the\x20six\x20tier\x20Guards\x20to\x20mount\x20per\x20listing\x20(\x221\x22\x20flexible\x20...\x20\x226\x22\x20long-stay;\x20the\x20benchmark\x20default\x20is\x20\x221\x22;\x20the\x20T5/T6\x20partial-split\x20rows\x20carry\x20value_from\x20tier5_host_bps\x20/\x20tier6_host_bps).\x20The\x20build\x20kernel\x20emits\x20ONLY\x20the\x20selected\x20tier\x27s\x20forward\x20and\x20refund\x20rail\x20(M-T7\x20conditional\x20emission)']},{'id':'rental/institutional-longstay','industry':'rental','variant':'institutional-longstay','product_ref':'ziroom','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'deposit_paid','role':'Entry:\x20deposit\x20+\x2012\x20months\x20rent\x20escrowed\x20in\x20a\x20single\x20Allocation\x20(pre-funded\x20pool)','semantic_role':'draft','from':[{'prev':'','forward':'begin','operator':'order_payer'}]},{'name':'in_use','role':'Handover\x20done\x20(checklist\x20hash\x20written\x20to\x20the\x20evidence\x20Repository);\x20tenancy\x20active,\x20monthly\x20releases\x20run','semantic_role':'active','from':[{'prev':'deposit_paid','forward':'handover','permission_index':0x3e8,'guard_key':'handover'}]},{'name':'returned','role':'Tenant\x20returns\x20keys\x20(>=\x2015\x20days\x20notice\x20or\x20lease\x20end);\x20the\x20operator\x20accepts\x20the\x20return','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'in_use','forward':'return_accept','permission_index':0x3e8,'guard_key':'return_notice'}]},{'name':'inspected','role':'Verifier\x20inspects\x20within\x2024h\x20(pre+post\x20evidence\x20comparison\x20against\x20the\x20natural-wear\x20table)','semantic_role':'delivered','from':[{'prev':'returned','forward':'inspect_start','permission_index':0x3e9}]},{'name':'reviewed','role':'Tenant\x20reviews\x20the\x20stay\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20after\x20the\x20passing\x20inspection\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'inspected','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Lease\x20finalized\x20—\x20deposit\x20refund\x20Allocator\x20to\x20the\x20tenant\x20(3-business-day\x20deadline);\x20on\x20an\x20EARLY\x20return\x20the\x20unearned\x20prepaid\x20rent\x20still\x20in\x20the\x20pool\x20rides\x20the\x20terminal_residual_sweep\x20home\x20to\x20the\x20tenant\x20(the\x20month\x20rails\x20pin\x20in_use\x20and\x20are\x20dead\x20past\x20this\x20node\x20—\x20mn-261019\x20rental\x20report\x20RETURN-STRAND),\x20so\x20the\x20operator\x20must\x20advance\x20completed\x20only\x20after\x20every\x20served\x20month\x20has\x20actually\x20released','semantic_role':'final','from':[{'prev':'inspected','forward':'result_pass','permission_index':0x3e9,'guard_key':'inspect_window'},{'prev':'inspected','forward':'inspect_timeout_pass','operator':'order_payer','guard_key':'inspect_timeout'},{'prev':'returned','forward':'no_inspection_timeout','operator':'order_payer','guard_key':'no_inspect_timeout'},{'prev':'reviewed','forward':'result_pass_after_review','permission_index':0x3e9}]},{'name':'damage_confirmed','role':'Damage\x20confirmed\x20via\x20evidence\x20diff\x20—\x20deposit\x20deduction\x20Allocator\x20(repair\x20cost\x20per\x20public\x20price\x20table)','semantic_role':'final','from':[{'prev':'inspected','forward':'verdict_damage','permission_index':0x3ea,'guard_key':'damage_evidence'}]},{'name':'closed_cancel','role':'No-fault\x20exit\x20within\x203\x20days\x20of\x20signing\x20—\x20full\x20refund\x20Allocator','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'in_use','forward':'nofault_exit','operator':'order_payer','guard_key':'nofault_window'},{'prev':'deposit_paid','forward':'nofault_exit_prehandover','operator':'order_payer','guard_key':'nofault_window'}]},{'name':'early_terminated','role':'Early\x20exit\x20—\x20penalty\x20Allocator\x20(1\x20month\x20rent;\x20halved\x20when\x20re-let)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'in_use','forward':'early_exit','operator':'order_payer','guard_key':'early_exit_window'}]}],'guards':[{'template_id':'pattern.verifier_evidence_philosophy','host':'service','key':'buy','purpose':'Deposit\x20+\x2012\x20months\x20rent\x20escrowed\x20on\x20purchase\x20(one\x20pre-funded\x20pool)'},{'template_id':'pattern.repository_data_check','host':'machine','key':'handover','purpose':'Handover\x20checklist\x20hash\x20written\x20to\x20the\x20evidence\x20Repository\x20at\x20move-in'},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20operator\x20declares\x20customer_required\x20(tenant\x20identity\x20for\x20the\x20lease):\x20AND\x20into\x20\x27handover\x27\x20—\x20gate\x20order.required_info\x20some\x20so\x20the\x20tenant\x27s\x20recorded\x20credential\x20is\x20on-chain\x20before\x20keys\x20hand\x20over;\x20the\x20operator\x20eyeballing\x20the\x20recorded\x20contact\x20in\x20the\x20Messenger\x20conversation\x20(never\x20the\x20recorded\x20address\x20value)\x20is\x20the\x20acceptance\x20basis;\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(testnet\x20HIGH-05),\x20so\x20this\x20Guard\x20is\x20the\x20only\x20enforcement'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'return_notice','purpose':'Return\x20request\x20>=\x20fee_params.return_notice_days\x20(default\x2015)\x20days\x20ahead\x20(or\x20lease\x20end)\x20—\x20the\x20window\x20value\x20comes\x20from\x20the\x20named\x20fee_param,\x20never\x20hand-invented'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'inspect_window','purpose':'Inspection\x20within\x2024h\x20of\x20key\x20return\x20—\x20the\x20verifier\x27s\x20pass\x20window,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound\x20(the\x20inspection\x20action\x20is\x20allowed\x20only\x20INSIDE\x20the\x2024h;\x20the\x20opening-gate\x20twin\x20would\x20forbid\x20it\x20exactly\x20when\x20it\x20is\x20due\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'inspect_timeout','purpose':'Verifier\x20no-show\x20after\x20the\x20inspection\x20window\x20—\x20the\x20tenant\x20self-completes'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'no_inspect_timeout','purpose':'Inspection\x20never\x20started\x20within\x20the\x20deadline\x20after\x20the\x20return\x20—\x20the\x20tenant\x20self-completes'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Tenant\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20the\x20passing\x20inspection,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20deposit\x20rail\x20always\x20keeps\x20the\x20unreviewed\x20path\x20inspected\x20->\x20completed;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'nofault_window','purpose':'No-fault\x20exit\x20within\x203\x20days\x20of\x20signing\x20—\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound\x20(exit\x20is\x20allowed\x20only\x20INSIDE\x20the\x203\x20days;\x20the\x20opening-gate\x20twin\x20would\x20invert\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'early_exit_window','purpose':'Early-exit\x20notice\x20window.\x20DIRECTION\x20CAVEAT\x20(catalog\x20sweep\x202026-10-19):\x20an\x20early\x20exit\x20is\x20typically\x20allowed\x20THROUGHOUT\x20the\x20lease\x20—\x20the\x20penalty\x20allocator\x20carries\x20the\x20economics\x20—\x20so\x20bind\x20a\x20time\x20leg\x20only\x20deliberately:\x20a\x20notice-period-elapsed\x20leg\x20is\x20the\x20OPENING\x20gate\x20(time_lock_progress),\x20an\x20exit-by\x20deadline\x20is\x20the\x20CLOSING\x20window\x20(time_window_upper_bound);\x20never\x20inherit\x20a\x20direction\x20by\x20habit'},{'template_id':'pattern.repository_data_check','host':'machine','key':'damage_evidence','purpose':'Damage\x20verdict\x20relies\x20on\x20pre+post\x20evidence\x20comparison;\x20the\x20natural-wear\x20table\x20excludes\x20normal\x20aging'},{'template_id':'pattern.allocator_order_anchor','host':'service','key':'order_anchor','purpose':'Refund/split\x20allocator\x20anchor:\x20one\x20Rate-0\x20GuardIdentifier(0)\x20row\x20makes\x20the\x20submitted\x20ORDER\x20the\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20built\x20from\x20a\x20sibling\x20order\x27s\x20state\x20cannot\x20satisfy\x20the\x20refund\x20gates\x20(mainnet\x20CR-01)\x20—\x20the\x20anchor\x20row\x20pays\x20nothing.\x20SCOPE\x20(ZR-34):\x20Rate-bearing\x20or\x20mixed\x20(Amount+Rate)\x20groups\x20ONLY\x20—\x20inside\x20a\x20pure-Amount\x20group\x20the\x20Rate-0\x20row\x20flips\x20the\x20group\x20to\x20Rate\x20mode\x20(Rates\x20must\x20then\x20sum\x2010000)\x20and\x20configuration\x20aborts\x20(R-A-1-02);\x20pure-Amount\x20groups\x20anchor\x20via\x20their\x20pinned\x20Amount\x20+\x20GuardIdentifier(0)\x20recipient\x20+\x20the\x20255\x20once\x20slot\x20instead'},{'template_id':'pattern.allocation_staged_release','host':'machine','key':'staged_release','purpose':'TWELVE\x20per-month\x20time-lock\x20Guards\x20(one\x20per\x20rent\x20period)\x20—\x20a\x20single\x20shared\x20Guard\x20would\x20allow\x20same-day\x20double\x20releases'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_1_release','purpose':'Month\x201\x20rent\x20release\x20window\x20(30\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_2_release','purpose':'Month\x202\x20rent\x20release\x20window\x20(60\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_3_release','purpose':'Month\x203\x20rent\x20release\x20window\x20(90\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_4_release','purpose':'Month\x204\x20rent\x20release\x20window\x20(120\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_5_release','purpose':'Month\x205\x20rent\x20release\x20window\x20(150\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_6_release','purpose':'Month\x206\x20rent\x20release\x20window\x20(180\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_7_release','purpose':'Month\x207\x20rent\x20release\x20window\x20(210\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_8_release','purpose':'Month\x208\x20rent\x20release\x20window\x20(240\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_9_release','purpose':'Month\x209\x20rent\x20release\x20window\x20(270\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_10_release','purpose':'Month\x2010\x20rent\x20release\x20window\x20(300\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_11_release','purpose':'Month\x2011\x20rent\x20release\x20window\x20(330\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_12_release','purpose':'Month\x2012\x20rent\x20release\x20window\x20(360\x20days\x20after\x20handover)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'deposit_refund_gate','purpose':'Deposit\x20refund\x20allocator\x20gate:\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'damage_refund_gate','purpose':'Damage\x20settlement\x20allocator\x20gate:\x20progress.current\x20==\x20damage_confirmed\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'early_exit_gate','purpose':'Early-exit\x20settlement\x20allocator\x20gate:\x20progress.current\x20==\x20early_terminated\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'nofault_refund_gate','purpose':'No-fault\x20refund\x20allocator\x20gate:\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion,\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20landlord\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits\x20(a\x20leased\x20order\x20awarded\x20mid-term\x20would\x20otherwise\x20weld\x20SHUT\x20every\x20claimed_by-none\x20rail\x20—\x20the\x20deposit\x20refund\x20above,\x20the\x20damage/early-exit\x20remainders,\x20the\x20no-fault\x20sweep\x20—\x20leaving\x20the\x20residual\x20pool\x20with\x20no\x20exit;\x20the\x20still-valid\x20month\x20Guards\x20keep\x20paying\x20but\x20a\x20pool\x20residual\x20below\x20the\x20next\x20pinned\x20Amount\x20can\x20never\x20leave).\x20Exactly\x20one\x20of\x20the\x20claimed_by-none\x20exit\x20rails\x20/\x20recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_residual_sweep','purpose':'Terminal\x20residual\x20sweep\x20at\x20completed\x20(KLK-P0-2\x20prescription;\x20mn-261019\x20rental\x20report\x20RETURN-STRAND,\x20T1/T6\x20live\x20evidence):\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20welds\x20only\x20after\x20an\x20award\x20has\x20actually\x20paid\x20—\x20the\x20recover_gate\x20rail\x20above\x20is\x20the\x20polarity\x20twin,\x20D-BUG-2)\x20+\x20NO\x20signer\x20leg\x20(keeper-reachable)\x20+\x20NO\x20window\x20leg\x20(always-on)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21)\x20+\x20the\x20identifier-255\x20once\x20slot\x20(per-Allocator\x20once\x20record\x20—\x20a\x20replay\x20aborts\x2016).\x20Rate\x2010000\x20sweeps\x20whatever\x20remains\x20in\x20the\x20pool\x20at\x20fire\x20time\x20to\x20the\x20order\x20anchor\x20(its\x20own\x20allocator\x20group\x20with\x20NO\x20Amount\x20leg,\x20so\x20the\x20base\x20is\x20the\x20current\x20balance):\x20on\x20the\x20golden\x20path\x20the\x20lease\x20ran\x20full\x20term,\x20the\x20pool\x20holds\x20only\x20the\x20deposit\x20—\x20a\x20fire\x20pays\x20it\x20to\x20the\x20same\x20order-anchored\x20recipient\x20the\x20deposit\x20leg\x20pays\x20(no\x20double\x20pay;\x20the\x20loser\x20of\x20the\x20race\x20aborts\x2014\x20EZERO_DISTRIBUTION\x20harmlessly);\x20on\x20an\x20EARLY\x20return\x20the\x20unearned\x20prepaid\x20rent\x20rides\x20the\x20sweep\x20home\x20to\x20the\x20tenant\x20—\x20the\x20earned\x20months\x20already\x20paid\x20via\x20their\x20own\x20month\x20Guards,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund\x20(same\x20shape\x20as\x20mooc-degree\x20terminal_settlement).\x20NEVER\x20widen\x20the\x20node\x20set\x20to\x20{damage_confirmed,\x20early_terminated,\x20closed_cancel}:\x20those\x20terminals\x27\x20remainder\x20rails\x20are\x20already\x20full\x20sweeps\x20—\x20a\x20second\x20Rate-10000\x20allocator\x20there\x20would\x20re-split\x20the\x20residual\x20(E-2)'},{'template_id':'pattern.fund_flow_refund_freeform','host':'machine','key':'early_exit_policy','purpose':'Early-exit\x20penalty\x20=\x20100%\x20of\x20one\x20month\x20rent\x20(halved\x20when\x20re-let);\x20the\x20tenant\x20receives\x20the\x20remainder'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'landlord','refund_track':'order_anchored','count':0xf,'mode':'amount','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_1_release','note':'Month\x201\x20of\x2012.\x20The\x20Amount\x20is\x20pinned\x20at\x20build\x20time\x20—\x20the\x20SKU\x20PRICE\x20LOCK\x20(order\x20price\x20=\x2012\x20x\x20monthly_rent_amount\x20+\x20deposit_amount)\x20proves\x20the\x20pool\x20covers\x20every\x20leg;\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20at\x20EVERY\x20release\x20(allocation.move,\x20EINSUFFICIENT_BALANCE),\x20so\x20a\x20lease\x20priced\x20below\x20the\x20pinned\x20leg\x20deadlocks\x20with\x20no\x20refund\x20path\x20(mainnet\x20CR-02).'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_2_release','note':'Month\x202\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_3_release','note':'Month\x203\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_4_release','note':'Month\x204\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_5_release','note':'Month\x205\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_6_release','note':'Month\x206\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_7_release','note':'Month\x207\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_8_release','note':'Month\x208\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_9_release','note':'Month\x209\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_10_release','note':'Month\x2010\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_11_release','note':'Month\x2011\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_12_release','note':'Month\x2012\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'damage_max_amount','guard_key':'damage_refund_gate','note':'Damage\x20deduction\x20to\x20the\x20landlord,\x20capped\x20at\x20damage_max_amount\x20(public\x20repair\x20price\x20table).\x20HARD\x20INVARIANT:\x20damage_max_amount\x20<=\x20deposit_amount\x20—\x20the\x20deduction\x20is\x20bounded\x20by\x20the\x20deposit.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'damage_refund_gate','note':'Tenant\x20remainder\x20at\x20damage_confirmed:\x20the\x20landlord\x27s\x20deduction\x20is\x20an\x20Amount\x20leg\x20in\x20this\x20same\x20allocator\x20group,\x20and\x20the\x20chain\x20computes\x20fix\x20as\x20the\x20sum\x20of\x20a\x20group\x27s\x20Amount\x20legs\x20(allocation.move\x20fix\x20computation\x20—\x20the\x20Rate\x20base\x20is\x20then\x20balance\x20-\x20fix)\x20—\x20so\x20the\x20tenant\x20leg\x20resolves\x20to\x20(pool\x20-\x20deduction)\x20=\x20deposit\x20+\x20unreleased\x20prepaid\x20rent\x20-\x20deduction\x20with\x20NO\x20template-side\x20fix\x20declaration\x20(v29:\x20fix/fix_from\x20retracted,\x20FACT-ALLOC-03).\x20The\x20lease\x20is\x20over,\x20so\x20the\x20prepaid\x20unused\x20rent\x20correctly\x20returns\x20to\x20the\x20tenant\x20together\x20with\x20the\x20deposit\x20remainder.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'early_exit_penalty_amount','guard_key':'early_exit_gate','note':'Early-exit\x20penalty\x20to\x20the\x20landlord\x20(1\x20month\x20rent;\x20halve\x20early_exit_penalty_amount\x20when\x20re-let).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'early_exit_gate','note':'Tenant\x20remainder\x20at\x20early_terminated:\x20the\x20Rate\x20base\x20is\x20(pool\x20-\x20penalty)\x20because\x20the\x20penalty\x20Amount\x20leg\x20lands\x20in\x20the\x20group\x20fix\x20the\x20chain\x20computes\x20itself\x20(allocation.move\x20fix\x20computation)\x20—\x20deposit\x20+\x20unreleased\x20prepaid\x20rent\x20-\x20penalty\x20(v29:\x20fix_from\x20retracted,\x20FACT-ALLOC-03).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'amount','value_from':'deposit_amount','guard_key':'deposit_refund_gate','note':'T-05\x20FIX:\x20the\x20deposit\x20leg\x20is\x20an\x20Amount\x20pinned\x20to\x20deposit_amount\x20paying\x20the\x20order\x20owner\x20—\x20a\x20Surplus/Rate-10000\x20leg\x20here\x20swept\x20the\x20deposit\x20PLUS\x20all\x20unreleased\x20rent\x20to\x20the\x20tenant\x20on\x20mainnet\x20(585/525\x20in\x20full;\x20the\x20landlord\x20received\x200).\x20On\x20the\x20golden\x20path\x20(full\x20term)\x20every\x20rent\x20release\x20has\x20fired,\x20so\x20the\x20pool\x20holds\x20exactly\x20the\x20deposit;\x20on\x20an\x20EARLY\x20return\x20the\x20pool\x20still\x20holds\x20the\x20unearned\x20prepaid\x20rent\x20—\x20the\x20terminal_residual_sweep\x20row\x20below\x20carries\x20it\x20home\x20to\x20the\x20tenant\x20(the\x20month\x20rails\x20pin\x20in_use\x20and\x20are\x20dead\x20past\x20completed\x20—\x20mn-261019\x20rental\x20report\x20RETURN-STRAND),\x20so\x20advance\x20completed\x20only\x20after\x20every\x20served\x20month\x20has\x20actually\x20released.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'terminal_residual_sweep','note':'Terminal\x20residual\x20sweep\x20at\x20completed\x20(KLK-P0-2\x20prescription;\x20mn-261019\x20rental\x20report\x20RETURN-STRAND):\x20Rate\x2010000\x20of\x20the\x20CURRENT\x20pool\x20balance\x20to\x20the\x20order-anchored\x20recipient\x20—\x20its\x20own\x20allocator\x20group\x20with\x20NO\x20Amount\x20leg,\x20so\x20the\x20base\x20is\x20whatever\x20remains\x20at\x20fire\x20time.\x20DORMANT-by-recipient\x20on\x20the\x20golden\x20path:\x20a\x20full-term\x20lease\x20leaves\x20only\x20the\x20deposit,\x20and\x20a\x20fire\x20pays\x20it\x20to\x20the\x20same\x20order-anchored\x20recipient\x20the\x20deposit\x20leg\x20pays\x20(no\x20double\x20pay;\x20the\x20loser\x20of\x20the\x20race\x20aborts\x2014\x20EZERO_DISTRIBUTION\x20harmlessly).\x20On\x20an\x20EARLY\x20return\x20the\x20unearned\x20prepaid\x20rent\x20(the\x20month\x20rails\x20pin\x20in_use,\x20so\x20months\x204..12\x20can\x20never\x20fire\x20past\x20completed)\x20rides\x20the\x20sweep\x20home\x20to\x20the\x20tenant\x20—\x20the\x20earned\x20months\x20already\x20paid\x20via\x20their\x20own\x20month\x20Guards,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund\x20(same\x20shape\x20as\x20mooc-degree\x20terminal_settlement).\x20Excluded\x20AFTER\x20an\x20award\x20by\x20claimed_by\x20some\x20==\x20false\x20(recover_gate\x20is\x20the\x20polarity\x20twin,\x20D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'nofault_refund_gate','note':'No-fault\x20exit\x20within\x203\x20days\x20of\x20signing:\x20FULL\x20refund\x20of\x20the\x20whole\x20pool\x20(deposit\x20+\x2012\x20months\x20rent)\x20to\x20the\x20order\x20owner\x20—\x20a\x20full\x20sweep\x20is\x20correct\x20on\x20this\x20rail\x20because\x20no\x20rent\x20release\x20can\x20have\x20fired\x20yet\x20(month_1\x20opens\x2030\x20days\x20after\x20handover).'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20landlord\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20the\x20monthly/damage/early-exit\x20rails),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20deposit_refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'Long-term\x20monthly\x20core\x20(single\x20Order\x20+\x20single\x20Allocation\x20pre-funded\x20with\x20deposit\x20+\x2012\x20months\x20rent):\x2012\x20monthly\x20Amount\x20releases\x20to\x20the\x20landlord,\x20each\x20gated\x20by\x20its\x20own\x20month\x20Guard\x20—\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20landlord\x20keeps\x20the\x20whole\x20rent;\x20the\x20traditional\x2010%\x20agency\x20fee\x20is\x20displaced,\x20not\x20reimplemented\x20(an\x20operator\x20charging\x20its\x20own\x20fee\x20needs\x20an\x20explicit\x20pre-order-computable\x20number,\x20an\x20explicit\x20non-empty\x20recipient\x20Entity,\x20and\x20never\x20a\x20Surplus\x20leg).\x20Exit\x20rails\x20settle\x20by\x20node:\x20completed\x20refunds\x20the\x20deposit\x20as\x20an\x20Amount\x20pinned\x20to\x20deposit_amount\x20(T-05\x20fix)\x20and\x20the\x20terminal_residual_sweep\x20carries\x20any\x20EARLY-return\x20residual\x20(unearned\x20prepaid\x20rent)\x20home\x20to\x20the\x20tenant;\x20damage_confirmed\x20pays\x20the\x20landlord\x20a\x20bounded\x20deduction\x20Amount\x20and\x20the\x20order\x20owner\x20the\x20remainder;\x20early_terminated\x20pays\x20the\x20landlord\x20the\x20penalty\x20Amount\x20and\x20the\x20order\x20owner\x20the\x20remainder;\x20closed_cancel\x20refunds\x20the\x20pool\x20in\x20full\x20(a\x20full\x20sweep\x20is\x20correct\x20on\x20this\x20rail\x20because\x20no\x20rent\x20release\x20can\x20have\x20fired\x20yet).\x20Every\x20RATE-BEARING\x20group\x20(damage,\x20early-exit,\x20no-fault,\x20the\x20residual\x20sweep)\x20is\x20order-anchored\x20(pattern.allocator_order_anchor)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order;\x20a\x20Rate-0\x20anchor\x20row\x20may\x20only\x20ride\x20a\x20group\x20that\x20already\x20has\x20a\x20Rate\x20leg\x20—\x20inside\x20a\x20pure-Amount\x20group\x20(the\x20twelve\x20monthly\x20releases,\x20the\x20pinned\x20deposit\x20refund)\x20it\x20flips\x20the\x20group\x20to\x20Rate\x20mode\x20and\x20aborts\x20at\x20configuration\x20(R-A-1-02,\x20ZR-34),\x20so\x20those\x20anchor\x20via\x20the\x20pinned\x20Amount\x20+\x20GuardIdentifier(0)\x20recipient\x20+\x20the\x20255\x20once\x20slot.\x20No\x20Surplus\x20anywhere.'},'key_risk':'Deposit\x20isolation\x20in\x20a\x20shared\x20pre-funded\x20pool\x20—\x20an\x20unbounded\x20refund\x20sweep\x20hands\x20unreleased\x20rent\x20to\x20the\x20tenant\x20(mainnet\x20T-05);\x20Amount-pinned\x20legs,\x20the\x20order\x20anchor,\x20and\x20the\x20255\x20once-slot\x20keep\x20every\x20rail\x20in\x20its\x20own\x20scope','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','threshold\x20=\x20ONE\x20month\x27s\x20rent\x20(not\x20the\x20total)\x20—\x20after\x20the\x2012th\x20release\x20the\x20balance\x20equals\x20exactly\x20one\x20month\x20=\x20threshold,\x20so\x20the\x20final\x20call\x20still\x20passes','T-05\x20DEPOSIT\x20FIX:\x20the\x20deposit\x20refund\x20leg\x20is\x20an\x20Amount\x20pinned\x20to\x20deposit_amount\x20paying\x20the\x20order\x20owner\x20(GuardIdentifier(0)).\x20The\x20old\x20Surplus/Rate-10000\x20shape\x20swept\x20the\x20deposit\x20PLUS\x20the\x20twelve\x20unreleased\x20rent\x20Amounts\x20to\x20the\x20tenant\x20on\x20mainnet\x20(585/525\x20in\x20full;\x20the\x20landlord\x20received\x200)\x20—\x20a\x20full-pool\x20sweep\x20is\x20correct\x20ONLY\x20on\x20the\x20no-fault\x20rail,\x20where\x20no\x20rent\x20release\x20can\x20have\x20fired','CR-01\x20ORDER\x20ANCHOR:\x20every\x20RATE-BEARING\x20refund/split\x20group\x20(damage,\x20early-exit,\x20no-fault)\x20carries\x20the\x20pattern.allocator_order_anchor\x20Guard\x20—\x20one\x20Rate-0\x20{GuardIdentifier:\x200}\x20row\x20makes\x20the\x20submitted\x20Order\x20the\x20binding\x20target\x20(payment_info.for_object),\x20so\x20a\x20passport\x20built\x20from\x20a\x20sibling\x20order\x27s\x20state\x20satisfies\x20nothing\x20here.\x20A\x20zero-amount\x20row\x20still\x20constructs\x20a\x200-value\x20CoinWrapper\x20and\x20pays\x20it\x20to\x20the\x20order\x20owner;\x20budget\x20the\x20gas.\x20SCOPE\x20(ZR-34):\x20a\x20Rate-0\x20anchor\x20row\x20rides\x20Rate-bearing\x20or\x20mixed\x20groups\x20ONLY\x20—\x20in\x20a\x20pure-Amount\x20group\x20(the\x20pinned\x20deposit\x20refund,\x20the\x20monthly\x20releases)\x20it\x20flips\x20the\x20group\x20to\x20Rate\x20mode\x20(Rates\x20must\x20sum\x2010000)\x20and\x20configuration\x20aborts\x20(R-A-1-02);\x20pure-Amount\x20groups\x20anchor\x20via\x20the\x20Amount\x20pin\x20+\x20GuardIdentifier(0)\x20+\x20the\x20255\x20once\x20slot','ONCE-PER-ORDER\x20(F-02,\x20protocol\x20142):\x20every\x20allocator\x20Guard\x20carries\x20the\x20address-typed\x20{\x20identifier:\x20255,\x20b_submission:\x20true\x20}\x20slot\x20pinned\x20to\x20the\x20Order;\x20the\x20trigger\x20Passport\x20submits\x20{\x20identifier:\x20255,\x20value:\x20[1]\x20+\x20bcs(order)\x20},\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016\x20instead\x20of\x20paying\x20twice.\x20The\x20slot\x20is\x20recorded\x20per-Allocation\x20(one\x20pool)\x20—\x20a\x20second\x20Allocation\x20of\x20the\x20same\x20Service\x20starts\x20with\x20no\x20once\x20record,\x20and\x20the\x20order\x20anchor\x20(not\x20the\x20slot)\x20stops\x20cross-order\x20passports.\x20Independent\x20month\x20Guards\x20alone\x20cannot\x20stop\x20a\x20same-month\x20double\x20release\x20—\x20the\x20slot\x20can','NO\x20ENTITY\x20PLACEHOLDERS\x20ON\x20REFUND\x20RAILS\x20(F-03):\x20every\x20refund\x20leg\x20pays\x20GuardIdentifier(0)\x20(the\x20order\x20owner).\x20An\x20Entity(\x27tenant\x27)\x20resolves\x20at\x20configuration\x20time\x20to\x20whatever\x20address\x20the\x20builder\x20supplies\x20—\x20and\x20an\x20EMPTY\x20name\x20silently\x20falls\x20back\x20to\x20the\x20deploying\x20account','SKU\x20PRICE\x20LOCK\x20(CR-02):\x20the\x20order\x20price\x20is\x20EXACTLY\x2012\x20x\x20monthly_rent_amount\x20+\x20deposit_amount,\x20and\x20every\x20Amount\x20leg\x20asserts\x20balance\x20>=\x20fix\x20at\x20release\x20(allocation.move,\x20EINSUFFICIENT_BALANCE).\x20A\x20cheaper\x20SKU\x20(a\x20discounted\x20month,\x20a\x20pilot\x20listing)\x20deadlocks\x20at\x20the\x20first\x20release\x20with\x20no\x20refund\x20path\x20—\x20such\x20listings\x20MUST\x20ship\x20as\x20their\x20own\x20Service\x20with\x20their\x20own\x20pinned\x20legs.\x20min_monthly_rent_usd\x20keeps\x20the\x20floor\x20machine-checkable','DAMAGE\x20INVARIANT:\x20damage_max_amount\x20<=\x20deposit_amount\x20—\x20the\x20deduction\x20is\x20bounded\x20by\x20the\x20deposit;\x20larger\x20losses\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(award\x20cap\x203x\x20order)','DUAL-TRACK\x20WARNING\x20(A-2,\x20mainnet-verified\x204x\x20worst\x20case):\x20the\x20refund\x20allocators\x20and\x20the\x20compensation\x20fund\x20are\x20independent\x20channels\x20—\x20a\x20full\x20refund\x20does\x20NOT\x20bar\x20a\x20later\x20compensation\x20claim\x20(the\x20compensation-claim\x20call\x20has\x20no\x20Guard\x20slot).\x20Every\x20refund\x20gate\x20asserts\x20claimed_by\x20none\x20(blocks\x20claim-then-refund);\x20refund-then-claim\x20stays\x20open\x20—\x20size\x20the\x20fund\x20accordingly','Objections\x20escalate\x20to\x20Arbitration\x20inside\x20the\x2024h\x20objection\x20window\x20(R-M1-11:\x20no\x20dispute\x20nodes)\x20—\x20claim/inspection\x20disputes\x20are\x20business\x20states,\x20never\x20Machine\x20terminals','TIME\x20SEMANTICS:\x20relative\x20windows\x20anchor\x20on\x20the\x20source\x20node\x27s\x20recorded\x20entry\x20time\x20(progress.history.time\x201280,\x20witness-derived,\x20keeper-triggered);\x20cancellation\x20windows\x20anchor\x20on\x20order.time;\x20the\x20chain\x20Clock\x20is\x20the\x20only\x20clock\x20—\x20a\x20keeper\x20triggering\x20late\x20must\x20still\x20satisfy\x20the\x20window\x20assertions','Deposit-free\x20variant:\x20Passport\x20credit\x20credentials\x20replace\x20the\x20deposit\x20(reputation\x20collateral);\x20the\x20credit\x20line\x20itself\x20stays\x20off-chain\x20—\x20the\x20completed\x20rail\x20then\x20has\x20no\x20deposit\x20leg\x20and\x20the\x20damage\x20group\x20pays\x20from\x20the\x20compensation\x20fund\x20instead','No\x20Surplus\x20anywhere\x20in\x20this\x20template\x20—\x20one\x20pre-funded\x20pool\x20holds\x20deposit\x20+\x2012\x20months\x20of\x20rent,\x20and\x20a\x20withdraw-all\x20leg\x20would\x20drain\x20future\x20releases\x20(the\x20rails\x20are\x20path-isolated\x20by\x20Guard,\x20not\x20by\x20pool)','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20Enforce\x20it\x20by\x20ANDing\x20the\x20pattern.required_info_evidence_gate\x20Guard\x20into\x20\x27handover\x27\x20(gate\x20order.required_info\x20some\x20BEFORE\x20keys\x20hand\x20over),\x20not\x20by\x20declaring\x20the\x20list;\x20only\x20the\x20PRESENCE\x20is\x20asserted\x20—\x20the\x20recorded\x20address\x20value\x20is\x20never\x20a\x20guard\x20condition,\x20and\x20acceptance\x20of\x20the\x20delivered\x20info\x20is\x20the\x20operator\x27s\x20confirming\x20forward.\x20QUOTA\x20COUPLING:\x20the\x20guest\x27s\x20info\x20message\x20shares\x20the\x20SINGLE\x20stranger-message\x20quota\x20—\x20make\x20it\x20the\x20FIRST\x20pre-order\x20message,\x20or\x20have\x20the\x20operator\x20respond\x20first\x20to\x20open\x20the\x20conversation','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'service_fee_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'monthly_rent_amount':'45000000000','deposit_amount':'45000000000','damage_max_amount':'10000000000','early_exit_penalty_amount':'45000000000','lease_months':0xc,'monthly_allocators':0xc,'deposit_refund_days':0x3,'inspection_deadline_hours':0x18,'objection_window_hours':0x18,'no_fault_exit_days':0x3,'return_notice_days':0xf,'early_exit_penalty_months':0x1,'min_monthly_rent_usd':'SKU\x20price\x20lock:\x20order\x20price\x20=\x2012\x20x\x20monthly_rent_amount\x20+\x20deposit_amount;\x20a\x20cheaper\x20lease\x20ships\x20as\x20its\x20own\x20Service','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'no_fault_exit':'order.time\x20(pre-start\x20cancellation\x20branch)','early_exit_window':'order.time\x20(pre-checkout\x20cancellation\x20branch)','monthly_releases':'progress.history.time\x20(id\x201280,\x20next_node=\x27in_use\x27,\x20find=last\x20—\x2030-day\x20cadence\x20from\x20handover)','return_notice':'progress.history.time\x20(id\x201280,\x20next_node=\x27in_use\x27,\x20find=last)','inspection_deadline':'progress.history.time\x20(id\x201280,\x20next_node=\x27returned\x27,\x20find=last)','objection_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27inspected\x27,\x20find=last)','deposit_refund_deadline':'progress.history.time\x20(id\x201280,\x20next_node=\x27completed\x27,\x20find=last)'},'trust_mechanisms':['R1\x20deposit\x20refund\x20pinned\x20to\x20an\x20Amount\x20=\x20deposit_amount\x20paying\x20the\x20order\x20owner,\x20with\x20deadline\x20+\x20tenant\x20self-trigger\x20fallback;\x20no-fault\x203-day\x20full\x20refund','R2\x20independent\x20arbitration\x20Permission\x20(admin\x20=\x20arbitration\x20party)','R3\x20compensation\x20fund\x20front-pays\x20deposit\x20disputes\x20(award\x20cap\x203x\x20order)','R4\x20inspection\x20by\x20a\x20dedicated\x20verifier\x20role\x20—\x20not\x20the\x20landlord\x20alone','R5\x20order-anchored\x20escrow:\x20every\x20rate-bearing\x20refund/split\x20group\x20carries\x20the\x20pattern.allocator_order_anchor\x20Guard\x20and\x20GuardIdentifier(0)\x20recipients\x20(pure-Amount\x20groups\x20anchor\x20via\x20the\x20Amount\x20pin\x20+\x20the\x20255\x20once\x20slot\x20—\x20ZR-34)','R6\x20fixed\x20legs\x20covered\x20by\x20the\x20SKU\x20price\x20lock;\x20no\x20Surplus\x20anywhere','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20monthly\x20release\x20triggers\x20and\x20refund\x20deadline','R10\x20rent\x20business\x20parameters\x20embedded\x20as\x20Guard\x20constants\x20—\x20industry-recommended\x20defaults,\x20merchant-configurable'],'keeper_dependencies':['monthly\x20rent\x20release\x20triggers\x20(month_1..12\x20windows)','inspection\x20deadline\x20expiry','deposit\x20refund\x20deadline\x20(tenant\x20self-trigger\x20fallback)','lease\x20end\x20settlement'],'recommended_role':'merchant','role_rationale':'Centralized\x20long-term\x20rental\x20operators\x20own\x20the\x20lease\x20Service\x20with\x20dedicated\x20staff\x20roles\x20(handover/inspection/finance\x20Permission\x20entities).','differences':['Heavy\x20operations:\x20dedicated\x20staff\x20roles\x20(handover/inspection/finance)\x20as\x20Permission\x20entities\x20under\x20one\x20operator-owned\x20lease\x20Service','12\x20monthly\x20Amount\x20releases\x20each\x20gated\x20by\x20its\x20OWN\x20month\x20Guard\x20—\x20a\x20single\x20shared\x20Guard\x20would\x20allow\x20same-day\x20double\x20releases','Deposit\x20variants:\x20cash\x20deposit\x20or\x20Passport\x20credit\x20credentials\x20(deposit-free;\x20the\x20credit\x20line\x20stays\x20off-chain)'],'user_inputs':['monthly_rent_amount\x20/\x20deposit_amount\x20—\x20the\x20pinned\x20money\x20legs;\x20the\x20SKU\x20price\x20is\x20EXACTLY\x2012\x20x\x20monthly_rent_amount\x20+\x20deposit_amount\x20(a\x20discounted\x20or\x20pilot\x20lease\x20ships\x20as\x20its\x20own\x20Service\x20with\x20its\x20own\x20pins)','damage_max_amount\x20(<=\x20deposit_amount)\x20/\x20early_exit_penalty_amount\x20—\x20deduction\x20and\x20penalty\x20pins','lease_months\x20/\x20monthly_allocators\x20—\x20lease\x20length\x20in\x20months\x20(one\x20release\x20Guard\x20per\x20month)','deposit_refund_days\x20/\x20inspection_deadline_hours\x20/\x20objection_window_hours\x20—\x20the\x20exit-flow\x20windows','no_fault_exit_days\x20/\x20early_exit_penalty_months\x20—\x20exit\x20policy\x20parameters','service_fee_rate_bps\x20—\x20KEEP\x20AT\x200\x20(the\x20incumbent\x27s\x2010%\x20agency\x20fee,\x20displaced\x20by\x20design).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.']},{'id':'education/mooc-degree','industry':'education','variant':'mooc-degree','product_ref':'coursera','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'admitted','role':'Entry:\x20enrollment\x20confirmed\x20and\x20tuition\x20escrowed;\x20Machine\x20starts\x20here','semantic_role':'draft','from':['']},{'name':'semester_1','role':'Semester\x201\x20—\x20dual-sign\x20completion\x20(institution\x20certifies\x20+\x20student\x20confirms,\x20threshold=2)','semantic_role':'active','from':['admitted']},{'name':'semester_2','role':'Semester\x202\x20—\x20dual-sign\x20completion','semantic_role':'active','from':['semester_1']},{'name':'semester_3','role':'Representative;\x20expand\x20to\x20the\x20real\x20term\x20count\x20(e.g.\x208\x20semesters)\x20at\x20build\x20time','semantic_role':'active','from':['semester_2']},{'name':'graduation_ready','role':'All\x20terms\x20completed\x20—\x20awaiting\x20degree\x20conferral','semantic_role':'delivered','from':['semester_3']},{'name':'reviewed','role':'Student\x20reviews\x20the\x20program\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20to\x20the\x20conferral\x20record,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'graduation_ready','forward':'Review','guard_key':'review_window'}]},{'name':'graduated','role':'Degree\x20conferred\x20—\x20terminal\x20RECORD:\x20the\x20pool\x20is\x20empty\x20here\x20by\x20design\x20(every\x20term\x27s\x20tuition\x20Amount\x20was\x20already\x20released\x20per\x20term);\x20the\x20terminal_settlement\x20sweep\x20anchors\x20this\x20state\x20as\x20a\x20DORMANT\x20backstop\x20(residue\x20only\x20from\x20a\x20missed\x20release\x20or\x20discount\x20dust),\x20keeping\x20the\x20drained-record\x20statement\x20honest\x20under\x20R-DEAD-END/TERMINAL-NO-RAIL','semantic_role':'final','from':['graduation_ready',{'prev':'reviewed','forward':'ConferralAfterReview'}]},{'name':'withdrawn','role':'Student\x20withdraws\x20—\x20from\x20admission\x20or\x20ANY\x20semester\x20(plain\x20buyer\x20edges,\x20cohort-uniform\x20topology);\x20inside\x20the\x20refund\x20window\x20the\x20refund_gate\x20rail\x20pays\x20the\x20full\x20remaining\x20pool,\x20after\x20it\x20the\x20terminal_settlement\x20residual\x20sweep\x20does\x20(the\x20per-term\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund)\x20(R-M1-11\x20compliant)','operator':'order_payer','semantic_role':'cancelled','from':['admitted','semester_1','semester_2','semester_3']}],'guards':[{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'term_release_gate','purpose':'Per-term\x20tuition\x20release\x20gate,\x20bound\x20to\x20the\x20settlement\x20allocator\x20row\x20(guard_key\x20term_release_gate):\x20the\x20qualifying\x20NODE\x20SET\x20{semester_1,\x20semester_2,\x20semester_3,\x20graduation_ready,\x20graduated}\x20—\x20each\x20completed\x20term\x20releases\x20its\x20Amount,\x20and\x20the\x20conferral\x20states\x20stay\x20admissible\x20as\x20a\x20safety\x20net\x20so\x20a\x20missed\x20term\x20release\x20can\x20still\x20exit\x20at\x20graduation\x20(FUND-EXIT-01:\x20an\x20uncovered\x20terminal\x20strands\x20the\x20escrow\x20permanently,\x20IMMUT-001;\x20graduation\x20is\x20a\x20drained-record\x20terminal\x20ONLY\x20when\x20every\x20term\x20actually\x20released).\x20Institution\x20advances\x20(permission\x20slot)\x20+\x20student\x20triggers\x20via\x20Passport\x20—\x20dual-sign\x20prevents\x20self-sign\x20(R4).\x20Replays\x20are\x20sealed\x20per\x20term\x20by\x20the\x20identifier-255\x20\x27term-<k>\x27\x20once\x20key\x20(see\x20PER-TERM\x20RELEASE\x20KEY),\x20and\x20the\x20term_count\x20max\x20cap\x20bounds\x20the\x20total\x20releasable\x20Amount,\x20so\x20a\x20wide\x20node\x20set\x20cannot\x20over-release'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Pre-start\x20full\x20refund\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate):\x20progress.current\x20==\x20withdrawn\x20(the\x20refund\x20terminal)\x20+\x20the\x20refund\x20window\x20not\x20elapsed\x20(order.time\x20+\x20refund_window_days)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20NO\x20signer\x20leg\x20is\x20encoded\x20—\x20CAT-B2/upwc-cat-261017,\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening)\x20+\x20order.service\x20binding\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20student\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_settlement','purpose':'Terminal\x20residual\x20sweep\x20(FUND-EXIT-01\x20always-on\x20backstop,\x20yfdx-mn-261015\x20A1\x20—\x20live\x20mainnet\x20proof\x20yfdx-g-refund-rest):\x20n-ary\x20logic_or\x20over\x20ALL\x20terminal\x20nodes\x20{graduated,\x20withdrawn}\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20welds\x20only\x20after\x20an\x20award\x20has\x20actually\x20paid,\x20D-BUG-2\x20polarity)\x20+\x20NO\x20signer\x20leg\x20(keeper-reachable\x20—\x20an\x20owner-gone\x20order\x20keeps\x20a\x20fund\x20exit)\x20+\x20NO\x20window\x20leg\x20(always-on\x20—\x20a\x20post-refund-window\x20withdrawal\x20still\x20drains)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20student\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)\x20+\x20the\x20identifier-254\x20submission\x20slot\x20(chain-derived\x20once-per-order\x20key\x20=\x20bcs(payment_info.for_object);\x20a\x20replay\x20aborts\x2016).\x20Rate\x2010000\x20sweeps\x20the\x20RESIDUAL\x20pool\x20to\x20the\x20order\x20anchor:\x20on\x20the\x20golden\x20path\x20the\x20pool\x20is\x20already\x20empty\x20(every\x20per-term\x20Amount\x20released),\x20so\x20the\x20rail\x20rests\x20dormant\x20—\x20a\x20keeper\x20fire\x20on\x20an\x20empty\x20pool\x20aborts\x2014\x20EZERO_DISTRIBUTION\x20harmlessly;\x20residue\x20from\x20a\x20missed\x20term\x20release,\x20a\x20discounted\x20order,\x20or\x20a\x20post-window\x20withdrawal\x20exits\x20to\x20the\x20buyer\x20instead\x20of\x20stranding\x20(IMMUT-001).\x20Earned\x20tuition\x20=\x20whatever\x20the\x20per-term\x20rails\x20actually\x20RELEASED;\x20the\x20sweep\x20pays\x20the\x20unearned\x20remainder\x20home'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_settlement_recover','purpose':'Awarded-order\x20recovery\x20twin\x20of\x20terminal_settlement\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers\x20advance\x20orders\x20past\x20the\x20award\x20state\x20—\x20F-51;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion,\x20a\x20node\x20literal\x20re-seals\x20the\x20rail)\x20+\x20NO\x20signer\x20leg\x20+\x20NO\x20window\x20leg\x20(keeper-reachable\x20—\x20an\x20owner-gone\x20order\x20keeps\x20a\x20fund\x20exit)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20student\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise).\x20Pays\x20Rate\x2010000\x20of\x20the\x20residual\x20pool\x20to\x20the\x20institution\x20Entity:\x20exactly\x20one\x20of\x20terminal_settlement\x20(claimed_by\x20some\x20==\x20false)\x20/\x20terminal_settlement_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.allocation_staged_release','host':'machine','purpose':'Post-start\x20pro-rata\x20refund\x20per\x20completed\x20term\x20—\x20SUPERSEDED\x20(b9-261015,\x20chain-semantics\x20deep\x20read):\x20per-term\x20k/N\x20static\x20Rate\x20segments\x20are\x20NOT\x20expressible\x20(the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot,\x20allocation.move:482-486\x20—\x20runtime-pool\x20rates\x20decay\x20geometrically\x20across\x20fires\x20and\x20strand\x20an\x20integer-division\x20residual;\x20per-term\x20gates\x20cannot\x20bind\x20individual\x20sharing\x20rows).\x20Materialized\x20instead\x20as:\x20withdrawn\x20reachable\x20from\x20every\x20semester\x20+\x20the\x20terminal_settlement\x20residual\x20sweep\x20(per-term\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund)'},{'template_id':'pattern.progress_state_check','host':'machine','purpose':'Certificate\x20claim:\x20assessment\x20passed\x20+\x20identity\x20verified\x20+\x20honor\x20code\x20clean\x20(platform-signed)'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'7-day\x20trial\x20window\x20(subscription\x20side-template)'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'14-day\x20refund\x20window\x20for\x20single-course\x20/\x20annual\x20plans'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'Subscription\x20revenue\x20released\x20at\x20month\x20end\x20(side-template)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Student\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2090\x20days\x20of\x20graduation\x20readiness,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20record,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20conferral\x20always\x20keeps\x20the\x20unreviewed\x20path\x20graduation_ready\x20->\x20graduated;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','refund_track':'order_anchored','count':0x2,'mode':'amount','description':'Degree\x20tuition\x20per\x20term:\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20institution\x20Amount\x20=\x20the\x20FULL\x20per-term\x20tuition\x20(per-term\x20max\x20cap\x20prevents\x20over-release;\x20the\x20incumbent\x27s\x2030%\x20agency\x20share\x20is\x20displaced,\x20not\x20reimplemented\x20—\x20no\x20partner\x20or\x20platform\x20leg\x20exists).\x20Graduation\x20is\x20a\x20fund-empty\x20terminal\x20RECORD:\x20every\x20term\x20already\x20released\x20its\x20Amount.\x20Pre-start\x20refund\x20=\x20full\x20Rate\x2010000\x20to\x20student;\x20post-start\x20pro-rata\x20=\x20the\x20terminal_settlement\x20residual\x20sweep\x20(the\x20per-term\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20unearned\x20remainder\x20IS\x20the\x20sweep\x20—\x20the\x20declared\x20k/8+(8-k)/8\x20static\x20Rate\x20splits\x20are\x20superseded,\x20NOT\x20expressible\x20on\x20the\x20pool-snapshot\x20Rate\x20base).\x20MIXED\x20FORM:\x20income/settlement\x20recipients\x20are\x20Entity/Address\x20rows;\x20the\x20refund\x20track\x20MUST\x20be\x20a\x20separate\x20allocator\x20whose\x20recipient\x20is\x20GuardIdentifier(0)\x20—\x20the\x20passport\x20submits\x20the\x20ORDER\x20address\x20(never\x20the\x20student\x20EOA;\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)\x20and\x20the\x20guard\x20binds\x20identity\x20via\x20order.owner==context(Signer)','rows':[{'track':'settlement','recipient':'entity','recipient_key':'institution','mode':'amount','value_from':'term_price_usd','guard_key':'term_release_gate','note':'Per-term\x20tuition\x20Amount\x20(the\x20FULL\x20term\x20price),\x20released\x20at\x20each\x20completed\x20term\x20via\x20the\x20term_release_gate\x20guard.\x20A\x20per-term\x20cap\x20(term_count\x20/\x20min_term_price_usd)\x20prevents\x20over-release.\x20DISCOUNT\x20DEADLOCK\x20WARNING\x20(crs9-mn-261015\x20F-34\x20family):\x20a\x20fixed\x20Amount\x20demands\x20the\x20FULL\x20list\x20price\x20from\x20THIS\x20Order\x27s\x20pool\x20—\x20a\x20coupon/discounted\x20order\x20(pool\x20<\x20term_price)\x20aborts\x20EINSUFFICIENT_BALANCE\x20at\x20this\x20release\x20and\x20strands\x20the\x20escrow\x20(the\x20proven\x20discount-safe\x20single-release\x20shape\x20is\x20the\x20Rate-10000\x20leg,\x20mooc-single-course\x20v71).\x20ADJUDICATED\x20(b8-261015\x20design\x20verification,\x20chain-semantics\x20deep\x20read)\x20and\x20SUPERSEDED\x20(b9-261015,\x20allocation.move\x20deep\x20read\x20+\x20yfdx\x20mainnet\x20live\x20proof):\x20a\x20per-term\x20Rate\x20swap\x20is\x20NOT\x20expressible\x20on\x20this\x20multi-term\x20rail\x20—\x20sharing\x20rows\x20inside\x20ONE\x20allocator\x20pay\x20together\x20in\x20a\x20single\x20run\x20and\x20the\x20guard\x20binds\x20the\x20ALLOCATOR\x20(never\x20the\x20row),\x20so\x20\x27per-term\x20Rate\x20rows\x20+\x20per-term\x20gates\x27\x20cannot\x20be\x20built;\x20AND\x20the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot\x20(allocation.move:482-486),\x20so\x20per-term\x20runtime-pool\x20rates\x20decay\x20geometrically\x20across\x20fires\x20and\x20strand\x20an\x20integer-division\x20residual,\x20while\x20a\x20pinned\x20base\x20pays\x20the\x20LIST\x20per-term\x20price\x20and\x20overdraws\x20a\x20discounted\x20pool\x20mid-program\x20(EINSUFFICIENT_BALANCE).\x20Equal-per-term\x20and\x20discount-safe\x20are\x20mutually\x20exclusive\x20on\x20current\x20primitives.\x20The\x20Amount\x20leg\x20STAYS;\x20the\x20discount\x20surface\x20is\x20closed\x20at\x20BUY\x20time\x20by\x20ENFORCEMENT,\x20not\x20prose\x20(order.amount\x20>=\x20term_count\x20x\x20term_price\x20—\x20the\x20buy-path\x20fixed-leg\x20gate,\x20error\x20order_below_fixed_leg_sum,\x20b6-11\x20family;\x20a\x20discounted\x20order\x20is\x20rejected\x20before\x20any\x20money\x20moves).\x20The\x20mid-program\x20strand\x20is\x20closed\x20STRUCTURALLY\x20instead\x20of\x20with\x20the\x20declared\x20per-term\x20k/8+(8-k)/8\x20Rate\x20splits\x20(those\x20are\x20superseded,\x20never\x20materialized):\x20withdrawn\x20is\x20now\x20reachable\x20from\x20EVERY\x20semester\x20(plain\x20buyer\x20edges\x20—\x20a\x20term-k\x20abort\x20no\x20longer\x20leaves\x20the\x20remainder\x20with\x20no\x20exit),\x20the\x20earned\x20share\x20is\x20whatever\x20the\x20per-term\x20Amount\x20legs\x20already\x20released,\x20so\x20the\x20unearned\x20remainder\x20IS\x20the\x20residual\x20pool\x20and\x20the\x20terminal_settlement\x20refund\x20row\x20below\x20sweeps\x20it\x20to\x20the\x20order\x20anchor\x20—\x20a\x20full\x20residual\x20sweep\x20IS\x20the\x20pro-rata\x20refund,\x20discount-safe\x20by\x20construction,\x20with\x20no\x20per-term\x20gates\x20and\x20no\x20N-dependent\x20ratios.\x20NO\x20Rate-0\x20anchor\x20leg\x20here\x20BY\x20DESIGN:\x20an\x20Amount-mode\x20allocator\x20with\x20a\x20Rate-0\x20leg\x20sums\x200\x20!=\x2010000\x20and\x20aborts\x20ERATE_NOT_10000\x20(allocation.move:343-347)\x20—\x20the\x20order\x20binding\x20rides\x20the\x20guard\x27s\x20own\x20slot-0\x20submission\x20instead.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20refund\x20inside\x20the\x20published\x20refund_window_days,\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(node\x20withdrawn).\x20The\x20paired\x20guard\x20must\x20assert\x20the\x20window\x20has\x20not\x20elapsed\x20and\x20claimed_by\x20some\x20==\x20false\x20(signer\x20==\x20order.owner\x20OPTIONAL\x20—\x20trigger-rights\x20only;\x20CAT-B2/upwc-cat-261017:\x20not\x20an\x20encoded\x20template\x20leg)\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool).\x20That\x20exclusion\x20is\x20ONE-DIRECTIONAL\x20(v42):\x20it\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid\x20—\x20never\x20the\x20reverse\x20(a\x20refunded\x20buyer\x20can\x20still\x20file\x20and\x20win\x20a\x20case;\x20nothing\x20on\x20chain\x20seals\x20that\x20—\x20only\x20the\x20arbitrator\x27s\x20net\x20ruling\x20does,\x20and\x20the\x20compensation\x20fund\x20stays\x20an\x20independent\x20third\x20channel).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever\x20and\x20strand\x20the\x20escrow\x20(one-way\x20door).\x20The\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20student\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'terminal_settlement','note':'Terminal\x20residual\x20sweep\x20(FUND-EXIT-01\x20always-on\x20backstop,\x20yfdx-mn-261015\x20A1\x20—\x20live-proven\x20shape\x20yfdx-g-refund-rest):\x20Rate\x2010000\x20of\x20the\x20REMAINING\x20pool\x20to\x20the\x20order-anchored\x20recipient,\x20gated\x20by\x20terminal_settlement\x20(n-ary\x20OR\x20over\x20ALL\x20terminal\x20nodes\x20{graduated,\x20withdrawn},\x20keeper-reachable,\x20no\x20signer\x20leg,\x20no\x20window\x20leg,\x20claimed_by\x20some\x20==\x20false,\x20254\x20once\x20per\x20order).\x20DORMANT\x20on\x20the\x20golden\x20path\x20—\x20the\x20pool\x20is\x20already\x20empty\x20(every\x20per-term\x20Amount\x20released)\x20and\x20a\x20keeper\x20fire\x20on\x20an\x20empty\x20pool\x20aborts\x2014\x20harmlessly;\x20backstops\x20residue\x20from\x20a\x20missed\x20term\x20release,\x20a\x20discounted\x20order,\x20or\x20a\x20post-window\x20withdrawal\x20(the\x20per-term\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund\x20—\x20discount-safe\x20by\x20construction).\x20Supersedes\x20the\x20declared\x20per-term\x20k/8+(8-k)/8\x20static\x20Rate\x20splits\x20(b8-261015):\x20the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot\x20(allocation.move:482-486)\x20and\x20sharing\x20rows\x20cannot\x20be\x20row-gated,\x20so\x20those\x20were\x20never\x20expressible.'},{'track':'settlement','recipient':'entity','recipient_key':'institution','mode':'rate','value':0x2710,'guard_key':'terminal_settlement_recover','note':'Awarded-order\x20recovery\x20twin\x20of\x20the\x20terminal_settlement\x20sweep\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20the\x20sweep\x27s\x20claimed_by\x20some\x20==\x20false\x20leg\x20welds\x20shut\x20the\x20moment\x20an\x20award\x20pays,\x20so\x20this\x20rail\x20is\x20what\x20keeps\x20an\x20AWARDED\x20order\x27s\x20residual\x20pool\x20exiting\x20(to\x20the\x20institution\x20Entity)\x20instead\x20of\x20stranding\x20at\x20a\x20terminal.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20term_release_gate/refund_gate/terminal_settlement),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20terminal_settlement\x20(claimed_by\x20some\x20==\x20false)\x20/\x20terminal_settlement_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'key_risk':'Institution\x20self-sign\x20on\x20academic\x20completion\x20—\x20dual-sign\x20threshold=2\x20ensures\x20neither\x20institution\x20nor\x20student\x20can\x20unilaterally\x20release\x20term\x20funds','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','threshold=2\x20dual-sign\x20is\x20the\x20R4\x20adaptation:\x20the\x20institution\x20certifies\x20academics,\x20the\x20student\x20confirms\x20funds\x20—\x20neither\x20side\x20can\x20unilaterally\x20withdraw\x20term\x20payments','Per-term\x20allocators\x20carry\x20a\x20max\x20cap\x20—\x20prevents\x20over-release;\x20graduation\x20is\x20a\x20fund-empty\x20terminal\x20RECORD\x20(each\x20term\x20already\x20released\x20its\x20full\x20Amount\x20—\x20nothing\x20accumulates\x20for\x20a\x20final\x20sweep);\x20the\x20terminal_settlement\x20sweep\x20stays\x20armed\x20as\x20the\x20dormant\x20residue\x20backstop\x20(missed\x20release\x20/\x20discount\x20dust\x20/\x20post-window\x20withdrawal)','VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20fresh\x20Arbitration\x20ships\x20paused\x20with\x20zero\x20grants\x20—\x20unpause\x20and\x20voting\x20configuration\x20are\x20the\x20ARBITRATOR\x27s\x20deployment\x20steps\x20on\x20their\x20own\x20objects,\x20never\x20this\x20build\x27s.\x20Bind\x20only\x20a\x20venue\x20already\x20operational\x20(unpaused,\x20voting\x20armed):\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20with\x20E_PAUSED\x20(the\x20MCP\x20pre-publish\x20scan\x20hard-blocks\x20binding\x20a\x20paused\x20venue)','PER-TERM\x20RELEASE\x20KEY:\x20the\x20per-term\x20rail\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27term-<k>\x27\x20key\x20(the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20the\x20raw\x20submitted\x20bytes),\x20so\x20one\x20term\x20cannot\x20be\x20released\x20twice;\x20DISTINCT\x20keys\x20per\x20term\x20are\x20intentional\x20—\x20per-term\x20releases\x20are\x20legitimate\x20repeats\x20of\x20the\x20SAME\x20allocator\x20across\x20the\x20program,\x20so\x20once_per_order\x20(255\x20keyed\x20on\x20the\x20Order\x20itself)\x20must\x20NOT\x20be\x20used\x20here\x20(it\x20would\x20weld\x20terms\x202..N\x20shut)','Setting\x20lock\x20extended\x20to\x20cover\x20a\x20full\x20term\x20(~120\x20days,\x20add-only)\x20—\x20hedges\x20against\x20unilateral\x20fee-rule\x20changes','Certificate/degree\x20Repository\x20policies\x20freeze\x20on\x20write;\x20refund\x20orchestration\x20must\x20void\x20the\x20certificate\x20BEFORE\x20the\x20refund','Financial\x20aid\x20(scholarships\x20/\x20need-based\x20waivers)\x20=\x20OFF-chain\x20channel:\x20eligibility\x20review\x20and\x20waiver\x20approval\x20stay\x20off-chain;\x20the\x20on-chain\x20Order\x20records\x20only\x20the\x20actually-charged\x20amount\x20—\x20aid\x20never\x20creates\x20zero-amount\x20Orders\x20and\x20does\x20not\x20occupy\x20on-chain\x20objects','Withdrawal\x20refunds\x20route\x20via\x20Allocators\x20(R-M1-11);\x20disputes\x20(refund\x20ratio,\x20grades,\x20certificate\x20revocation)\x20go\x20to\x20Arbitration','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20institution\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','PRICE\x20FLOOR\x20FOR\x20THE\x20PER-TERM\x20AMOUNT\x20LEG:\x20the\x20per-term\x20Amount\x20(term_price_usd)\x20is\x20pinned\x20at\x20build\x20and\x20is\x20a\x20hard\x20subtraction\x20with\x20no\x20on-chain\x20floor;\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20(allocation.move,\x20EINSUFFICIENT_BALANCE),\x20so\x20any\x20term\x20listed\x20below\x20the\x20pinned\x20Amount\x20(a\x20discount,\x20a\x20waiver\x20applied\x20on-chain)\x20can\x20never\x20release\x20that\x20term\x20and\x20strands\x20the\x20escrow\x20(testnet\x20CR-02).\x20Keep\x20min_term_price_usd\x20>=\x20term_price_usd','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'platform_fee_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'term_count':0x8,'tuition_usd':0x6a98,'term_price_usd':0xd53,'institution_share_bps':0x2710,'platform_share_bps':0x0,'setting_lock_days':0x78,'refund_window_days':0xe,'min_term_price_usd':'must\x20cover\x20the\x20per-term\x20Amount\x20leg\x20(term_price_usd)','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'refund_window':'order.time\x20(enrollment\x20—\x20the\x20refund\x20branch\x20exits\x20admitted/early\x20terms)','setting_lock':'service\x20config\x20lock\x20(add-only\x20setting_lock_duration\x20—\x20not\x20a\x20Machine\x20window)'},'trust_mechanisms':['R1\x20pre-start\x20full\x20refund\x20+\x20post-start\x20pro-rata\x20refund\x20allocators','R2\x20independent\x20arbitration\x20Permission\x20(contract\x20assertion)','R3\x20compensation\x20fund\x20~1%\x20of\x20tuition\x20scale\x20(high\x20ticket)','R4\x20dual-sign\x20term\x20completion\x20(threshold=2)\x20—\x20no\x20self-sign','R5\x20order-anchored\x20refund\x20recipient','R6\x20Amount\x20max\x20caps\x20+\x20Rate\x20sums\x2010000\x20(settlement\x20=\x20the\x20per-term\x20Amount\x20leg;\x20graduation\x20is\x20a\x20drained\x20terminal\x20record\x20—\x20no\x20Surplus)','R7\x20publish\x20freeze\x20(course\x20revisions\x20=\x20new\x20WIP\x20versions,\x20not\x20Machine\x20edits)','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20subscription\x20expiry\x20and\x20renewal\x20reminders','R10\x20setting\x20lock\x20>=\x20term\x20duration\x20(recommended:\x20covers\x20a\x20full\x20term\x20so\x20mid-term\x20changes\x20need\x20a\x20new\x20WIP\x20version)'],'keeper_dependencies':['subscription\x20expiry\x20(trial/period\x20end)','monthly\x20subscription\x20release','renewal\x20reminder\x20before\x20period\x20end'],'recommended_role':'merchant','role_rationale':'Partner\x20universities/institutions\x20own\x20the\x20degree\x20Service;\x20platform\x20operations\x20and\x20certificate\x20issuance\x20run\x20under\x20dedicated\x20Permission\x20entities.','differences':['Large-ticket\x20tuition\x20escrowed\x20up\x20front\x20and\x20released\x20PER\x20TERM\x20with\x20dual-sign\x20completion\x20(institution\x20certifies\x20+\x20student\x20confirms,\x20threshold=2)','Per-term\x20allocators\x20carry\x20max\x20caps;\x20graduation\x20is\x20a\x20fund-empty\x20terminal\x20record\x20—\x20each\x20term\x20released\x20its\x20full\x20tuition\x20Amount\x20on\x20completion,\x20nothing\x20accumulates\x20for\x20a\x20final\x20sweep','Certificate/degree\x20Repository\x20freezes\x20on\x20write\x20—\x20refund\x20orchestration\x20must\x20void\x20the\x20certificate\x20BEFORE\x20the\x20refund'],'user_inputs':['term_count\x20—\x20real\x20number\x20of\x20terms\x20(semester_*\x20nodes\x20expand\x20to\x20match)','tuition_usd\x20/\x20term_price_usd\x20—\x20the\x20tuition\x20structure','institution_share_bps\x20—\x20per-term\x20share\x20to\x20the\x20institution\x20(default\x2010000).\x20platform_share_bps\x20—\x20KEEP\x20AT\x200;\x20any\x20remainder\x20stays\x20with\x20the\x20institution\x20until\x20graduation\x20rather\x20than\x20accruing\x20to\x20a\x20platform.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','setting_lock_days\x20—\x20recommended:\x20cover\x20a\x20full\x20term\x20(merchant-configurable)','refund_window_days\x20—\x20single-course\x20/\x20annual\x20plan\x20window']},{'id':'education/live-class-cohort','industry':'education','variant':'live-class-cohort','product_ref':'yuanfudao','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'enrolled','role':'Entry:\x20term\x20paid\x20and\x20escrowed\x20(regular-course\x20Service;\x20the\x20trial\x20funnel\x20is\x20a\x20separate\x20Service)','semantic_role':'draft','from':['']},{'name':'session_1','role':'Session\x201\x20—\x20dual-sign\x20attendance\x20(institution\x20advances\x20+\x20parent\x20signs,\x20threshold=2)','semantic_role':'active','from':['enrolled']},{'name':'session_2','role':'Session\x202\x20—\x20dual-sign\x20attendance','semantic_role':'active','from':['session_1']},{'name':'session_3','role':'Representative;\x20expand\x20to\x20N\x20sessions\x20at\x20build\x20time\x20(merchant\x20sets\x20the\x20real\x20count)','semantic_role':'active','from':['session_2']},{'name':'completed_ready','role':'All\x20sessions\x20attended\x20—\x20awaiting\x20finalization','semantic_role':'delivered','from':['session_3']},{'name':'reviewed','role':'Parent\x20reviews\x20the\x20term\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20to\x20the\x20finalization\x20record,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'completed_ready','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Course\x20finalized\x20(terminal)','semantic_role':'final','from':['completed_ready',{'prev':'reviewed','forward':'FinalizeAfterReview'}]},{'name':'withdrawn','role':'Refund\x20requested\x20—\x20pre-start\x20full\x20refund\x20or\x20post-start\x20pro-rata\x20Allocator\x20(R-M1-11\x20compliant)','operator':'order_payer','semantic_role':'cancelled','from':['enrolled','session_1','session_2','session_3']},{'name':'renewal_window','role':'Renewal\x20window\x20open\x20—\x20terminal\x20RECORD:\x20the\x20pool\x20is\x20empty\x20here\x20(income\x20already\x20released\x20at\x20completed),\x20so\x20nothing\x20can\x20strand;\x20the\x20next\x20term\x20is\x20a\x20new\x20Order\x20(REUSE\x20pattern\x20—\x20a\x20fresh\x20order\x20per\x20term\x20instead\x20of\x20an\x20in-order\x20loop)','semantic_role':'final','from':['completed']}],'guards':[{'template_id':'pattern.verifier_evidence_philosophy','host':'service','key':'buy','purpose':'Buy\x20gate\x20(R10,\x20industry-recommended\x20defaults\x20—\x20merchant-configurable):\x20max\x20prepay\x20amount\x205000\x20/\x20max\x2060\x20sessions\x20/\x20max\x203\x20months\x20—\x20on-chain\x20checks\x20Passport-submitted\x20values'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'session_release_gate','purpose':'Per-session\x20release\x20gate,\x20bound\x20to\x20the\x20settlement\x20allocator\x20row\x20(guard_key\x20session_release_gate):\x20the\x20qualifying\x20NODE\x20SET\x20{session_1,\x20session_2,\x20session_3,\x20completed_ready,\x20completed,\x20renewal_window}\x20—\x20each\x20attended\x20session\x20releases\x20its\x20Amount,\x20and\x20the\x20finalization\x20states\x20stay\x20admissible\x20as\x20a\x20safety\x20net\x20so\x20a\x20missed\x20session\x20release\x20can\x20still\x20exit\x20at\x20the\x20terminal\x20(FUND-EXIT-01:\x20an\x20uncovered\x20terminal\x20strands\x20the\x20escrow\x20permanently,\x20IMMUT-001;\x20renewal_window\x20is\x20a\x20drained-record\x20terminal\x20ONLY\x20when\x20every\x20session\x20actually\x20released).\x20Session\x20release\x20requires\x20the\x20parent\x27s\x20(order\x20owner\x27s)\x20signature\x20—\x20the\x20institution\x20can\x20NOT\x20self-claim;\x20the\x20release-sequence\x20lock\x20(payment\x20vector\x20length\x20check)\x20plus\x20the\x20identifier-255\x20\x27session-<k>\x27\x20once\x20key\x20prevents\x20over-release\x20and\x20double-release'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Pre-start\x20full\x20refund\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate):\x20progress.current\x20==\x20withdrawn\x20(the\x20refund\x20terminal)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20NO\x20signer\x20leg\x20is\x20encoded\x20—\x20CAT-B2/upwc-cat-261017,\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20since\x20the\x20GuardIdentifier(0)\x20recipient\x20hard-binds\x20the\x20payee)\x20+\x20order.service\x20binding\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20parent\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_settlement','purpose':'Terminal\x20residual\x20sweep\x20(FUND-EXIT-01\x20always-on\x20backstop,\x20yfdx-mn-261015\x20A1\x20—\x20live\x20mainnet\x20proof\x20yfdx-g-refund-rest):\x20n-ary\x20logic_or\x20over\x20ALL\x20terminal\x20nodes\x20{completed,\x20renewal_window,\x20withdrawn}\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20welds\x20only\x20after\x20an\x20award\x20has\x20actually\x20paid,\x20D-BUG-2\x20polarity)\x20+\x20NO\x20signer\x20leg\x20(keeper-reachable\x20—\x20a\x20parent-gone\x20order\x20keeps\x20a\x20fund\x20exit)\x20+\x20NO\x20window\x20leg\x20(always-on)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20parent\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)\x20+\x20the\x20identifier-254\x20submission\x20slot\x20(chain-derived\x20once-per-order\x20key\x20=\x20bcs(payment_info.for_object);\x20a\x20replay\x20aborts\x2016).\x20Rate\x2010000\x20sweeps\x20the\x20RESIDUAL\x20pool\x20to\x20the\x20order\x20anchor:\x20on\x20the\x20golden\x20path\x20the\x20pool\x20is\x20already\x20empty\x20(every\x20attended\x20session\x27s\x20Amount\x20released),\x20so\x20the\x20rail\x20rests\x20dormant\x20—\x20a\x20keeper\x20fire\x20on\x20an\x20empty\x20pool\x20aborts\x2014\x20EZERO_DISTRIBUTION\x20harmlessly;\x20residue\x20from\x20a\x20missed\x20session\x20release,\x20a\x20discounted\x20order,\x20or\x20a\x20mid-cohort\x20withdrawal\x20after\x20the\x20release-sequence\x20advanced\x20exits\x20to\x20the\x20buyer\x20instead\x20of\x20stranding\x20(IMMUT-001).\x20Earned\x20tuition\x20=\x20whatever\x20the\x20per-session\x20rails\x20actually\x20RELEASED;\x20the\x20sweep\x20pays\x20the\x20unearned\x20remainder\x20home'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_settlement_recover','purpose':'Awarded-order\x20recovery\x20twin\x20of\x20terminal_settlement\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers\x20advance\x20orders\x20past\x20the\x20award\x20state\x20—\x20F-51;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion,\x20a\x20node\x20literal\x20re-seals\x20the\x20rail)\x20+\x20NO\x20signer\x20leg\x20+\x20NO\x20window\x20leg\x20(keeper-reachable\x20—\x20an\x20owner-gone\x20order\x20keeps\x20a\x20fund\x20exit)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20parent\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise).\x20Pays\x20Rate\x2010000\x20of\x20the\x20residual\x20pool\x20to\x20the\x20institution\x20Entity:\x20exactly\x20one\x20of\x20terminal_settlement\x20(claimed_by\x20some\x20==\x20false)\x20/\x20terminal_settlement_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.allocation_staged_release','host':'machine','purpose':'Post-start\x20pro-rata\x20refund:\x20(N-k)/N\x20converted\x20to\x20static\x20Rate\x20segments\x20—\x20SUPERSEDED\x20(b9-261015,\x20chain-semantics\x20deep\x20read):\x20per-session\x20k/N\x20static\x20Rate\x20segments\x20are\x20NOT\x20expressible\x20(the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot,\x20allocation.move:482-486\x20—\x20runtime-pool\x20rates\x20decay\x20geometrically\x20across\x20fires\x20and\x20strand\x20an\x20integer-division\x20residual;\x20per-session\x20gates\x20cannot\x20bind\x20individual\x20sharing\x20rows).\x20Materialized\x20instead\x20as:\x20withdrawn\x20reachable\x20from\x20every\x20session\x20(already\x20the\x20shape\x20here)\x20+\x20the\x20terminal_settlement\x20residual\x20sweep\x20(per-session\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund)'},{'template_id':'tpl_write_guard_type_check','host':'repository','key':'syllabus_write','purpose':'Syllabus\x20+\x20material\x20hash\x20commitment\x20written\x20BEFORE\x20course\x20start\x20(anti\x20empty-broadcast\x20/\x20silent\x20substitution)','policy':{'name':'syllabus','id_from':'signer','value_type':'String'}},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Parent\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2030\x20days\x20of\x20completion\x20readiness,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20record,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20finalization\x20always\x20keeps\x20the\x20unreviewed\x20path\x20completed_ready\x20->\x20completed;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'institution','count':0x2,'mode':'amount','refund_track':'order_anchored','rows':[{'track':'settlement','recipient':'entity','recipient_key':'institution','mode':'amount','value_from':'per_session_release','guard_key':'session_release_gate','note':'Per-session\x20release\x20=\x20term_price\x20/\x20session_count\x20(fee_params\x20per_session_release),\x20released\x20at\x20each\x20attended\x20session\x20via\x20the\x20session_release_gate\x20guard;\x20keep\x20min_term_price\x20>=\x20session_count\x20*\x20per_session_release\x20(alloc()\x20asserts\x20balance\x20>=\x20fix,\x20allocation.move\x20EINSUFFICIENT_BALANCE).\x20DISCOUNT\x20DEADLOCK\x20WARNING\x20(crs9-mn-261015\x20F-34\x20family):\x20min_term_price\x20floors\x20the\x20LIST\x20price\x20only\x20—\x20a\x20coupon/discounted\x20order\x27s\x20pool\x20can\x20fall\x20below\x20session_count\x20*\x20per_session_release\x20and\x20a\x20mid-sequence\x20session\x20release\x20aborts\x20EINSUFFICIENT_BALANCE,\x20stranding\x20the\x20escrow\x20(the\x20proven\x20discount-safe\x20single-release\x20shape\x20is\x20the\x20Rate-10000\x20leg,\x20mooc-single-course\x20v71;\x20a\x20single\x20Rate-10000\x20leg\x20here\x20would\x20sweep\x20the\x20whole\x20pool\x20at\x20the\x20FIRST\x20session,\x20and\x20per-session\x20Rate\x20rows\x20are\x20NOT\x20expressible\x20—\x20sharing\x20rows\x20inside\x20ONE\x20allocator\x20pay\x20together\x20per\x20run\x20and\x20the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot\x20(allocation.move:482-486),\x20so\x20runtime-pool\x20rates\x20decay\x20geometrically\x20across\x20fires).\x20Residue\x20from\x20a\x20discounted\x20or\x20bricked\x20sequence\x20exits\x20via\x20the\x20terminal_settlement\x20sweep\x20instead\x20of\x20stranding.\x20As\x20on\x20mooc-degree,\x20the\x20discount\x20surface\x20is\x20closed\x20at\x20BUY\x20time\x20by\x20ENFORCEMENT\x20(order.amount\x20>=\x20session_count\x20x\x20per_session_release\x20—\x20the\x20buy-path\x20fixed-leg\x20gate,\x20error\x20order_below_fixed_leg_sum,\x20b6-11\x20family;\x20a\x20discounted\x20order\x20is\x20rejected\x20before\x20any\x20money\x20moves).\x20NO\x20Rate-0\x20anchor\x20leg\x20here\x20BY\x20DESIGN:\x20an\x20Amount-mode\x20allocator\x20with\x20a\x20Rate-0\x20leg\x20sums\x200\x20!=\x2010000\x20and\x20aborts\x20ERATE_NOT_10000\x20(allocation.move:343-347)\x20—\x20the\x20order\x20binding\x20rides\x20the\x20guard\x27s\x20own\x20slot-0\x20submission\x20instead.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Pre-start\x20full\x20refund\x20to\x20the\x20order-anchored\x20recipient\x20(the\x20parent),\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(node\x20withdrawn);\x20post-start\x20withdrawal\x20refunds\x20ride\x20the\x20terminal_settlement\x20residual\x20sweep\x20(the\x20unearned\x20remainder\x20—\x20the\x20earned\x20share\x20already\x20left\x20via\x20the\x20per-session\x20releases).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'terminal_settlement','note':'Terminal\x20residual\x20sweep\x20(FUND-EXIT-01\x20always-on\x20backstop,\x20yfdx-mn-261015\x20A1\x20—\x20live-proven\x20shape\x20yfdx-g-refund-rest):\x20Rate\x2010000\x20of\x20the\x20REMAINING\x20pool\x20to\x20the\x20order-anchored\x20recipient,\x20gated\x20by\x20terminal_settlement\x20(n-ary\x20OR\x20over\x20ALL\x20terminal\x20nodes\x20{completed,\x20renewal_window,\x20withdrawn},\x20keeper-reachable,\x20no\x20signer\x20leg,\x20no\x20window\x20leg,\x20claimed_by\x20some\x20==\x20false,\x20254\x20once\x20per\x20order).\x20DORMANT\x20on\x20the\x20golden\x20path\x20—\x20the\x20pool\x20is\x20already\x20empty\x20(every\x20attended\x20session\x27s\x20Amount\x20released)\x20and\x20a\x20keeper\x20fire\x20on\x20an\x20empty\x20pool\x20aborts\x2014\x20harmlessly;\x20backstops\x20residue\x20from\x20a\x20missed\x20session\x20release,\x20a\x20discounted\x20order,\x20or\x20a\x20mid-cohort\x20withdrawal\x20(the\x20per-session\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund\x20—\x20discount-safe\x20by\x20construction).\x20Supersedes\x20the\x20declared\x20(N-k)/N\x20static\x20Rate\x20segments\x20(b8-261015):\x20the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot\x20(allocation.move:482-486)\x20and\x20sharing\x20rows\x20cannot\x20be\x20row-gated,\x20so\x20those\x20were\x20never\x20expressible.'},{'track':'settlement','recipient':'entity','recipient_key':'institution','mode':'rate','value':0x2710,'guard_key':'terminal_settlement_recover','note':'Awarded-order\x20recovery\x20twin\x20of\x20the\x20terminal_settlement\x20sweep\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20the\x20sweep\x27s\x20claimed_by\x20some\x20==\x20false\x20leg\x20welds\x20shut\x20the\x20moment\x20an\x20award\x20pays,\x20so\x20this\x20rail\x20is\x20what\x20keeps\x20an\x20AWARDED\x20order\x27s\x20residual\x20pool\x20exiting\x20(to\x20the\x20institution\x20Entity)\x20instead\x20of\x20stranding\x20at\x20a\x20terminal.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20term_release_gate/refund_gate/terminal_settlement),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20terminal_settlement\x20(claimed_by\x20some\x20==\x20false)\x20/\x20terminal_settlement_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'Per-session\x20release:\x20institution\x20Amount\x20=\x20term_price\x20/\x20N\x20(e.g.\x205000/20\x20=\x20250)\x20gated\x20by\x20the\x20dual-sign\x20attendance\x20guard\x20with\x20a\x20release-sequence\x20lock;\x20optional\x20platform\x20commission\x20entry;\x20pre-start\x20refund\x20=\x20Rate\x2010000\x20to\x20the\x20order-anchored\x20recipient;\x20post-start\x20pro-rata\x20=\x20the\x20terminal_settlement\x20residual\x20sweep\x20to\x20the\x20order\x20anchor\x20(the\x20per-session\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20unearned\x20remainder\x20IS\x20the\x20sweep\x20—\x20the\x20declared\x20(N-k)/N\x20static\x20Rate\x20splits\x20are\x20superseded,\x20NOT\x20expressible\x20on\x20the\x20pool-snapshot\x20Rate\x20base).\x20No\x20Surplus\x20—\x20an\x20integer-division\x20remainder\x20stays\x20in\x20the\x20pool\x20by\x20design\x20and\x20the\x20terminal\x20sweep\x20collects\x20it'},'key_risk':'Institution\x20self-claiming\x20attendance\x20—\x20release\x20requires\x20the\x20parent\x27s\x20(order\x20owner\x27s)\x20signature;\x20the\x20institution\x20only\x20advances\x20the\x20workflow','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Dual-sign\x20attendance:\x20the\x20institution\x20advances\x20the\x20workflow\x20(permission\x20slot)\x20but\x20fund\x20release\x20requires\x20the\x20parent\x27s\x20signature\x20—\x20fixes\x20the\x20classic\x20self-sign\x20bug','Over-release\x20defense:\x20the\x20attendance\x20Guard\x20family\x20adds\x20a\x20release-sequence\x20lock\x20(payment\x20vector\x20length\x20check)\x20—\x20exactly\x20one\x20trigger\x20per\x20session','Business\x20caps\x20(R10,\x20industry-recommended\x20defaults\x20—\x20merchant-configurable):\x20max\x20prepay\x205000\x20/\x2060\x20sessions\x20/\x203\x20months\x20—\x20the\x20on-chain\x20guard\x20checks\x20Passport-submitted\x20values;\x20Sale\x20structure\x20+\x20quote\x20validation\x20enforce\x20the\x20real\x20bounds','Setting\x20lock\x20extended\x20to\x2090\x20days\x20(add-only\x20function;\x20set\x20once)','Session\x20nodes\x20are\x20representative\x20—\x20expand\x20to\x20N\x20at\x20build\x20time;\x2060\x20sessions\x20is\x20about\x2067\x20nodes\x20(two-thirds\x20of\x20the\x20node\x20cap)','Refund\x20segments\x20are\x20static\x20Rate\x20conversions\x20of\x20(N-k)/N;\x20no\x20Surplus\x20(avoids\x20fractional\x20remainder\x20disputes)','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20institution\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','Trial\x20funnel\x20is\x20a\x20SEPARATE\x20Service\x20(lead\x20product);\x20coupon\x20handoff\x20via\x20a\x20Discount\x20pointing\x20at\x20the\x20main-course\x20Service','PRICE\x20FLOOR\x20FOR\x20THE\x20PER-SESSION\x20Amount\x20LEG:\x20each\x20release\x20pins\x20per_session_release\x20as\x20a\x20fixed\x20Amount\x20and\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20(allocation.move,\x20EINSUFFICIENT_BALANCE),\x20so\x20a\x20term\x20priced\x20below\x20the\x20release\x20unit\x20—\x20or\x20partially\x20refunded\x20down\x20to\x20it\x20—\x20can\x20never\x20release\x20the\x20remaining\x20sessions\x20(testnet\x20CR-02).\x20Keep\x20min_term_price\x20>=\x20session_count\x20*\x20per_session_release','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'prepay_cap':0x1388,'max_sessions':0x3c,'max_months':0x3,'term_price':0x1388,'session_count':0x14,'per_session_release':0xfa,'setting_lock_days':0x5a,'platform_commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'min_term_price':'must\x20be\x20>=\x20session_count\x20*\x20per_session_release','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'setting_lock':'service\x20config\x20lock\x20(add-only\x20setting_lock_duration\x20—\x20not\x20a\x20Machine\x20window)'},'trust_mechanisms':['R1\x20pre-start\x20full\x20refund\x20+\x20post-start\x20pro-rata\x20segment\x20refunds','R2\x20independent\x20arbitration\x20Permission\x20(fee\x20<=\x202%\x20of\x20tuition)','R3\x20compensation\x20fund\x20(10x\x20single\x20order)\x20with\x20a\x2090-day\x20locked\x20withdrawal\x20wait','R4\x20parent-signature\x20attendance\x20release\x20—\x20institution\x20self-sign\x20forbidden','R5\x20order-anchored\x20refund\x20recipient\x20(two-step\x20claim)','R6\x20per-session\x20Amount\x20>=\x20threshold\x200;\x20refund\x20Rate\x20sums\x2010000','R7\x20publish\x20freeze\x20(schedule\x20changes\x20=\x20Repository\x20version\x20evidence,\x20not\x20Machine\x20edits)','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20trial\x20expiry\x20and\x20renewal\x20window','R10\x20business\x20prepay\x20caps\x20embedded\x20as\x20buy-guard\x20constants\x20(industry-recommended\x20defaults,\x20merchant-configurable)'],'keeper_dependencies':['trial\x20lesson\x20expiry','renewal\x20window\x20trigger','arbitration\x20ruling\x20refund\x20execution'],'recommended_role':'merchant','role_rationale':'Tutoring\x20institutions\x20own\x20the\x20course\x20Service;\x20the\x20parent\x20is\x20the\x20order\x20owner\x20whose\x20signature\x20gates\x20every\x20session\x20release.','differences':['Per-session\x201/N\x20progressive\x20release\x20—\x20funds\x20unlock\x20only\x20as\x20sessions\x20are\x20attended\x20(anti-runaway\x20protection)','Parent\x20(order\x20owner)\x20signature\x20gates\x20every\x20session\x20release;\x20the\x20institution\x20only\x20advances\x20the\x20workflow','Prepay\x20caps\x20(max\x20amount\x20/\x20sessions\x20/\x20months\x20—\x20industry-recommended\x20defaults,\x20merchant-configurable)\x20embedded\x20in\x20the\x20buy\x20guard;\x20the\x20trial\x20funnel\x20is\x20a\x20separate\x20lead\x20Service'],'user_inputs':['session_count\x20—\x20real\x20session\x20count\x20(session_*\x20nodes\x20expand\x20to\x20N;\x20merchant\x20sets\x20the\x20count)','term_price\x20/\x20per_session_release\x20—\x20the\x20term\x20price\x20and\x20its\x201/N\x20release\x20unit','prepay_cap\x20/\x20max_sessions\x20/\x20max_months\x20—\x20buy-gate\x20constants\x20(industry-recommended\x20defaults,\x20merchant-configurable)','setting_lock_days\x20—\x20Service\x20config\x20lock\x20window\x20(add-only\x20setting_lock_duration;\x20cover\x20a\x20full\x20term,\x20merchant-configurable)','platform_commission_rate_bps\x20—\x20KEEP\x20AT\x200;\x20the\x20commission\x20entry\x20is\x20removed\x20from\x20the\x20default\x20waterfall\x20(it\x20was\x20\x27optional\x27\x20but\x20present,\x20which\x20is\x20what\x20gets\x20copied).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.']},{'id':'education/mooc-single-course','industry':'education','variant':'mooc-single-course','product_ref':'coursera','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'paid','role':'Entry:\x20course\x20/\x20subscription\x20term\x20paid\x20and\x20escrowed;\x20the\x2014-day\x20refund\x20window\x20opens\x20here\x20and\x20runs\x20from\x20order.time\x20(payment)\x20—\x20learning\x20progress\x20never\x20closes\x20it','semantic_role':'draft','from':['']},{'name':'enrolled','role':'Course\x20access\x20granted\x20—\x20content\x20Repository\x20unlocked;\x20the\x2014-day-from-payment\x20refund\x20window\x20is\x20still\x20open','semantic_role':'active','from':['paid']},{'name':'assessing','role':'Learner\x20submits\x20the\x20final\x20assessment;\x20the\x20institution\x20grades\x20—\x20grading\x20does\x20NOT\x20close\x20the\x20refund\x20window\x20(the\x20order.time\x20+\x2014\x20days\x20clock\x20governs,\x20not\x20the\x20milestone)','semantic_role':'active','from':['enrolled']},{'name':'certified','role':'Assessment\x20passed\x20—\x20certificate\x20payload\x20authorized,\x20pending\x20Repository\x20write','semantic_role':'delivered','from':['assessing']},{'name':'reviewed','role':'Learner\x20reviews\x20the\x20course\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20to\x20the\x20completion\x20record,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'certified','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Certificate\x20written\x20to\x20the\x20Repository;\x20SETTLEMENT\x20terminal\x20—\x20income\x20released\x20via\x20settle_gate\x20(progress.current\x20==\x20completed).\x20For\x20a\x20monthly/annual\x20plan\x20this\x20Order\x27s\x20term\x20ends\x20here;\x20the\x20next\x20term\x20is\x20a\x20NEW\x20Order\x20(REUSE\x20—\x20a\x20fresh\x20order\x20per\x20term,\x20no\x20in-order\x20renewal\x20state)','semantic_role':'final','from':['certified',{'prev':'reviewed','forward':'CompleteAfterReview'}]},{'name':'returned','role':'Refund\x20claimed\x20inside\x20the\x2014-day\x20window\x20—\x20order-anchored\x20full-refund\x20Allocator\x20(R-M1-11\x20compliant).\x20EVERY\x20entry\x20edge\x20carries\x20the\x20return_window\x20guard\x20explicitly\x20—\x20the\x20unkeyed\x20machine\x20guards\x20it\x20used\x20to\x20ride\x20stayed\x20PENDING\x20at\x20generate\x20and\x20left\x20the\x20terminal\x20with\x20no\x20fund\x20exit\x20(audit\x20FUND-EXIT-01,\x20mn-261014)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'claim_return','operator':'order_payer','guard_key':'return_window'},{'prev':'enrolled','forward':'claim_return','operator':'order_payer','guard_key':'return_window'},{'prev':'assessing','forward':'claim_return','operator':'order_payer','guard_key':'return_window'}]}],'guards':[{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'return_window','purpose':'Return-claim\x20EDGE\x20gate\x20on\x20claim_return\x20(paid/enrolled/assessing\x20->\x20returned):\x20Clock\x20<=\x20order.time\x20+\x20refund_window_days\x20—\x20a\x20CLOSING\x20window;\x20the\x20declaration\x20was\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20that\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19),\x20now\x20aligned\x20with\x20the\x20inline\x20resolution\x20this\x20line\x20already\x20prescribed\x20—\x20the\x20anchor\x20is\x20ORDER\x20CREATION\x20(progress.current_time\x20refreshes\x20on\x20every\x20forward\x20and\x20would\x20leave\x20the\x20window\x20perpetually\x20open;\x20matches\x20the\x20degree\x20sibling\x27s\x20v25\x20anchor)\x20—\x20AND\x20signer\x20==\x20order.order\x20owner\x20identity\x20leg\x20AND\x20order.service\x20==\x20<service>\x20project\x20binding\x20(R-C3-05).\x20TASKBIND-01:\x20the\x20table\x20MUST\x20declare\x20the\x20slot-254\x20Address\x20row.\x20Learning\x20progress\x20never\x20closes\x20this\x20window\x20—\x20grading-period\x20returns\x20stay\x20purchasable\x20(the\x20incumbent\x27s\x20real\x20policy).\x20Resolve\x20inline\x20from\x20tpl_time_window_upper\x20+\x20identity\x20+\x20service-binding\x20legs'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_gate','purpose':'Single-shot\x20settlement\x20allocator\x20gate\x20(KLM-C:\x20one-shot\x20per-order\x20escrow\x20settles\x20via\x20the\x20CHAIN-DERIVED\x20protocol-254\x20once\x20key\x20—\x20the\x20old\x20255+history-count\x20key\x20is\x20publicly\x20computable\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20locks\x20the\x20rail,\x20mainnet\x20KL-LIVE-01\x20261014):\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20declared\x20254\x20Address\x20submission\x20slot\x20(once\x20key\x20=\x20bcs(payment_info.for_object),\x20replay\x20aborts\x2016).\x20The\x20kernel\x20injects\x20service_name\x20=\x20the\x20plan\x27s\x20service\x20name;\x20settle_node\x20defaults\x20to\x20\x27completed\x27.\x20SINGLE\x20COURSE\x20pays\x20the\x20fixed\x20Amount\x20here;\x20a\x20plan-term\x20variant\x20that\x20must\x20release\x20at\x20month-end\x20instead\x20adds\x20its\x20own\x20Clock\x20leg\x20via\x20an\x20APPENDED\x20allocator\x20(order_allocators\x20is\x20append-only\x20after\x20publish)\x20—\x20one\x20Machine\x20cannot\x20express\x20both\x20release\x20clocks\x20on\x20one\x20node'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate\x20(pending\x20judgment):\x20progress.current\x20==\x20returned\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool;\x20blocks\x20refund\x20once\x20an\x20award\x20ACTUALLY\x20paid\x20—\x20never\x20gate\x20on\x20dispute\x20count\x20==\x200,\x20the\x20append-only\x20vector\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow).\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017:\x20the\x20old\x20prose\x20claimed\x20\x27signer\x20==\x20order.owner\x20(anti-hijack\x20R5)\x27\x20but\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter);\x20anti-hijack\x20is\x20STRUCTURAL\x20(the\x20GuardIdentifier(0)\x20order-anchored\x20recipient\x20lands\x20funds\x20ON\x20the\x20Order,\x20owner-receive\x20only);\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening.\x20NEVER\x20arm\x20slot\x20254\x20on\x20this\x20rail\x20—\x20254\x20keys\x20on\x20payment_info.for_object\x20(OFN\x20#P-04);\x20once-semantics\x20comes\x20from\x20the\x20terminal-node\x20topology.\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg;\x20the\x20paired\x20recover_gate\x20leg\x20keeps\x20the\x20awarded\x20escrow\x20exiting\x20(D-BUG-2:\x20exactly\x20one\x20polarity\x20can\x20ever\x20pass)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2\x20—\x20the\x20b9-261015\x20\x27FULL-SET\x20node\x20gate\x27\x20is\x20REMOVED:\x20the\x20encoded\x20legs\x20are\x20claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20ONLY,\x20deliberately\x20NO\x20node\x20equality\x20leg):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding.\x20Why\x20no\x20node\x20gate:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20(upw-mn-261014\x20F-51:\x20a\x20delivered-pinned\x20rail\x20aborted\x207\x20after\x20the\x20auto-accept\x20keeper\x20moved\x20the\x20order\x20on;\x20upwc-cat-261017\x20CAT-C2\x20live:\x20a\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20after\x20the\x20award\x20paid),\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20already\x20carries\x20the\x20mutual\x20exclusion\x20vs\x20refund_gate\x20(exactly\x20one\x20polarity\x20can\x20pass,\x20D-BUG-2)\x20—\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail\x20and\x20strands\x20the\x20escrow.\x20Pays\x20Rate\x2010000\x20to\x20the\x20institution\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion.\x20RULED-ZERO\x20CAVEAT\x20(BKN-P1):\x20any\x20claim\x20flips\x20the\x20polarity,\x20including\x20a\x20zero-award\x20ruling'},{'template_id':'tpl_write_guard_type_check','host':'repository','key':'cert_write','purpose':'Certificate\x20Repository\x20write\x20policy:\x20only\x20the\x20institution-signed\x20cert\x20payload\x20passes;\x20cert\x20freezes\x20on\x20write\x20—\x20void\x20BEFORE\x20any\x20refund\x20orchestration','policy':{'name':'certificate','id_from':'signer','value_type':'String'}},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Learner\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2030\x20days\x20of\x20certification,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20record,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20completion\x20always\x20keeps\x20the\x20unreviewed\x20path\x20certified\x20->\x20completed;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','refund_track':'order_anchored','once_per_order':!![],'count':0x3,'mode':'rate','description':'Income\x20track:\x20ONE\x20full\x20release\x20per\x20Order\x20—\x20single\x20course\x20sweeps\x20the\x20ACTUAL\x20paid\x20pool\x20at\x20certification\x20(Rate-10000\x20+\x20inline\x20Rate-0\x20ORDER\x20anchor,\x20discount-safe:\x20crs9-mn-261015\x20F-34),\x20monthly/annual\x20plans\x20are\x20one\x20Order\x20per\x20term\x20with\x20a\x20single\x20release\x20(never\x20recurring\x20within\x20an\x20Order)\x20—\x20the\x20settlement\x20income\x20leg\x20is\x20gated\x20by\x20settle_gate\x20at\x20completed\x20—\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20the\x2050/50\x20benchmark\x20split\x20was\x20the\x20incumbent\x27s,\x20and\x20the\x20partner\x20here\x20IS\x20the\x20merchant.\x20refund\x20track:\x20a\x20SEPARATE\x20allocator\x20whose\x20recipient\x20is\x20GuardIdentifier(0)\x20—\x20the\x20passport\x20submits\x20the\x20ORDER\x20address\x20(never\x20the\x20learner\x20EOA;\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise),\x20guard\x20=\x20refund_gate\x20(AND[signer==order.owner,\x20progress.node==returned,\x20window,\x20claimed_by\x20none]),\x20Rate\x2010000\x20—\x20once-semantics\x20from\x20the\x20terminal\x20topology,\x20NEVER\x20slot\x20254\x20on\x20this\x20rail\x20(OFN\x20#P-04).\x20recovery\x20track:\x20recover_gate\x20pays\x20the\x20escrow\x20principal\x20to\x20the\x20course-partner\x20Entity\x20ONLY\x20after\x20an\x20award\x20actually\x20paid\x20(claimed_by\x20some),\x20the\x20paired\x20exit\x20(D-BUG-2)','rows':[{'track':'settlement','recipient':'entity','recipient_key':'course_partner','mode':'rate','value':0x2710,'guard_key':'settle_gate','note':'Single-course\x20income\x20leg\x20as\x20Rate-10000\x20AT\x20completed\x20(settle_gate\x20node\x20gate\x20+\x20service\x20binding\x20+\x20255-once,\x20kernel\x20auto-filled).\x20RATE\x20MODE\x20IS\x20THE\x20CANONICAL\x20SHAPE\x20(crs9-mn-261015\x20F-34,\x20mainnet-proven):\x20the\x20release\x20sweeps\x20the\x20Order\x27s\x20ACTUAL\x20paid\x20pool,\x20so\x20coupon/discount\x20orders\x20settle\x20in\x20full\x20—\x20the\x20previous\x20Amount\x20leg\x20(value_from:\x20course_price_usd)\x20pinned\x20the\x20LIST\x20price\x20and\x20aborted\x20EINSUFFICIENT_BALANCE\x20on\x20any\x20discounted\x20pool,\x20stranding\x20the\x20escrow.\x20plan\x20terms\x20reuse\x20the\x20same\x20one-release-per-Order\x20shape\x20(a\x20month-end\x20variant\x20needs\x20its\x20own\x20Clock\x20leg\x20via\x20an\x20appended\x20allocator\x20—\x20order_allocators\x20is\x20append-only).\x200%\x20platform\x20commission\x20stands\x20—\x20NO\x20Surplus\x20leg\x20(an\x20uncapped\x20Surplus\x20would\x20sweep\x20the\x20entire\x20remaining\x20pool\x20to\x20the\x20platform\x20Entity).\x20fee_params\x20benchmark\x20prices\x20stay\x20TS-layer\x20generation\x20inputs\x20in\x20smallest\x20units\x20(course_price_usd\x20\x27490000000\x27\x20for\x200.49\x20WOW,\x20NOT\x2049\x20—\x20mn-261013\x20P0).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_gate','note':'Rate-0\x20ORDER\x20anchor\x20LEG\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settle\x20allocator:\x20forces\x20the\x20settle\x20Guard\x20to\x20declare\x20slot\x200\x20(the\x20submitted\x20Order,\x20b_submission\x20Address)\x20and\x20makes\x20a\x20sibling\x20order\x27s\x20passport\x20unable\x20to\x20drive\x20this\x20rail\x20(testnet\x20CR-01\x20drain);\x20pays\x20nothing.\x20Legal\x20here\x20BECAUSE\x20the\x20group\x20carries\x20the\x20Rate-10000\x20companion\x20—\x20chain\x20asserts\x20per-allocator\x20Rate\x20sums\x20to\x20EXACTLY\x2010000\x20(allocation.move:343-347,\x20ERATE_NOT_10000;\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register,\x20crs-mn-261014\x20F-16).'},{'track':'settlement','recipient':'entity','recipient_key':'course_partner','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20at\x20returned\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20course-partner\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20RULED-ZERO\x20CAVEAT:\x20a\x20zero-award\x20ruling\x20also\x20flips\x20the\x20polarity\x20(no\x20amount\x20floor,\x20service.move:506-512)\x20—\x20the\x20guarantee\x20is\x20no-stranding,\x20not\x20no-misallocation.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20refund\x20inside\x20the\x20published\x20refund_window_days:\x20progress.current\x20==\x20returned\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(signer\x20==\x20order.owner\x20OPTIONAL\x20—\x20trigger-rights\x20only;\x20CAT-B2/upwc-cat-261017:\x20not\x20an\x20encoded\x20template\x20leg).\x20The\x20exclusion\x20is\x20ONE-DIRECTIONAL\x20(v42):\x20it\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid\x20—\x20never\x20the\x20reverse\x20(a\x20refunded\x20buyer\x20can\x20still\x20file\x20and\x20win\x20a\x20case;\x20only\x20the\x20arbitrator\x27s\x20net\x20ruling\x20seals\x20that,\x20and\x20the\x20compensation\x20fund\x20stays\x20an\x20independent\x20third\x20channel).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(append-only\x20vector\x20=\x20one-way\x20door,\x20strands\x20the\x20escrow\x20on\x20the\x20first\x20filing).\x20NEVER\x20arm\x20slot\x20254\x20on\x20this\x20rail\x20(OFN\x20#P-04\x20—\x20the\x20terminal-node\x20topology\x20is\x20the\x20once).\x20The\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20learner\x20EOA\x20(for_object\x20anchoring\x20aborts\x2015\x20otherwise).'}]},'key_risk':'Refund-window\x20abuse\x20and\x20double\x20refund\x20—\x20the\x20refund\x20allocator\x20is\x20node-gated\x20to\x20returned\x20(terminal-topology\x20once\x20+\x20claimed_by\x20polarity\x20pair\x20with\x20recover_gate),\x20and\x20the\x20certificate\x20Repository\x20write\x20freezes\x20the\x20credential\x20before\x20any\x20refund\x20orchestration','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20fresh\x20Arbitration\x20ships\x20paused\x20with\x20zero\x20grants\x20—\x20unpause\x20and\x20voting\x20configuration\x20are\x20the\x20ARBITRATOR\x27s\x20deployment\x20steps\x20on\x20their\x20own\x20objects,\x20never\x20this\x20build\x27s.\x20Bind\x20only\x20a\x20venue\x20already\x20operational\x20(unpaused,\x20voting\x20armed):\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20with\x20E_PAUSED\x20(the\x20MCP\x20pre-publish\x20scan\x20hard-blocks\x20binding\x20a\x20paused\x20venue)','REFUND\x20GUARD\x20IS\x20NODE-GATED:\x20AND[signer==order.owner,\x20progress.node==returned]\x20—\x20a\x20signer-only\x20guard\x20would\x20let\x20the\x20holder\x20claim\x20after\x20certification\x20(double-dip)','REFUND\x20RAIL\x20ONCE-SEMANTICS:\x20`returned`\x20is\x20a\x20cancelled\x20TERMINAL\x20—\x20the\x20rail\x20fires\x20at\x20most\x20once\x20per\x20Order\x20by\x20topology\x20(a\x20replay\x20hits\x20the\x20drained\x20pool,\x20EZERO\x2014).\x20NEVER\x20arm\x20slot\x20254\x20on\x20the\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20a\x20renewal/second\x20Order-in-flow\x20never\x20rewrites\x20(OFN\x20#P-04);\x20the\x20settlement\x20rail\x20carries\x20the\x20protocol-255\x20once\x20leg\x20inside\x20settle_gate\x20itself','Entry\x20edge\x20is\x20a\x20PAIR:\x20wire\x20{prev_node:\x27\x27}\x20into\x20paid\x20explicitly\x20—\x20marking\x20it\x20Entry\x20does\x20NOT\x20create\x20the\x20first\x20hop','Certificate\x20Repository\x20policies\x20freeze\x20on\x20write;\x20refund\x20orchestration\x20must\x20void\x20the\x20certificate\x20BEFORE\x20the\x20refund','Subscription\x20plans\x20(monthly\x20/\x20annual)\x20reuse\x20the\x20SAME\x20machine:\x20the\x20term\x27s\x20Order\x20SETTLES\x20and\x20ends\x20at\x20completed;\x20the\x20next\x20term\x20is\x20a\x20new\x20Order\x20(v63:\x20the\x20old\x20\x27renewal_window\x27\x20record\x20terminal\x20was\x20deleted\x20—\x20a\x20terminal\x20with\x20no\x20fund\x20exit\x20failed\x20FUND-EXIT-01\x20and\x20the\x20renewal\x20was\x20never\x20an\x20in-Machine\x20state\x20anyway).\x20The\x20month-end\x20income\x20release\x20for\x20a\x20term\x20is\x20a\x20chain-Clock\x20time\x20guard\x20added\x20via\x20an\x20APPENDED\x20allocator\x20(order_allocators\x20is\x20append-only)\x20—\x20document\x20the\x20time-source\x20choice\x20per\x20the\x20pattern.time_source_repository_oracle\x20tradeoff','Refunds\x20route\x20via\x20Allocators\x20(R-M1-11);\x20disputes\x20(grading,\x20certificate\x20revocation)\x20go\x20to\x20the\x20independent\x20Arbitration','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20course-partner\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'course_price_usd':0x31,'subscription_monthly_usd':0x3b,'annual_plan_usd':0x18f,'partner_share_bps':0x2710,'platform_share_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'refund_window_days':0xe,'month_release_day':0x1c,'min_course_price_usd':0x31,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'trust_mechanisms':['R1\x2014-day\x20refund\x20window:\x20full\x20refund\x20only\x20from\x20returned\x20—\x20node-gated\x20(refund_gate)\x20+\x20terminal-topology\x20once\x20+\x20claimed_by\x20polarity\x20pair\x20(D-BUG-2)','R2\x20independent\x20arbitration\x20Permission\x20(contract\x20assertion;\x20venue\x20readiness\x20check\x20in\x20build_notes)','R3\x20compensation\x20fund\x20NOT\x20funded\x20by\x20default\x20(low\x20ticket)\x20—\x20enable\x20it\x20for\x20professional-certificate\x20lines','R4\x20single-sign\x20acceptable\x20at\x20this\x20price\x20point;\x20the\x20certificate\x20(Repository\x20freeze-on-write)\x20is\x20the\x20tamper\x20anchor','R5\x20order-anchored\x20refund\x20recipient\x20(GuardIdentifier(0)\x20+\x20Order-address\x20submission\x20+\x20two-step\x20claim)','R6\x20Rate\x20sums\x2010000\x20on\x20every\x20Rate-bearing\x20track\x20(settlement\x20income\x20is\x20a\x20PURE-Amount\x20group\x20—\x20no\x20Rate\x20leg,\x20no\x20Rate-0\x20anchor:\x20any\x20Rate\x20leg\x20with\x20no\x20Surplus\x20must\x20sum\x20exactly\x2010000,\x20allocation.move:343-347;\x20refund\x2010000\x20behind\x20refund_gate;\x20recover\x2010000\x20behind\x20recover_gate;\x20no\x20platform\x20leg)','R11\x20PRICE\x20SAFETY\x20(min_course_price_usd\x20floor):\x20the\x20buy\x20price\x20IS\x20the\x20selected\x20fee_param\x20(course_price_usd\x20for\x20the\x20single\x20course,\x20the\x20plan\x20price\x20for\x20a\x20term\x20Order)\x20—\x20the\x20settlement\x20income\x20leg\x20is\x20Rate-10000,\x20so\x20it\x20sweeps\x20the\x20ACTUAL\x20paid\x20pool\x20and\x20can\x20never\x20deadlock\x20a\x20discounted\x20order\x20(the\x20former\x20fixed\x20Amount\x20leg\x20pinned\x20the\x20LIST\x20price\x20and\x20aborted\x20EINSUFFICIENT_BALANCE\x20on\x20every\x20discounted\x20order,\x20crs9-mn-261015\x20F-34);\x20builders\x20must\x20not\x20price\x20below\x20the\x20floor','R7\x20publish\x20freeze\x20(content\x20updates\x20=\x20new\x20WIP\x20versions,\x20not\x20Machine\x20edits)','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers:\x20subscription\x20expiry,\x20month-end\x20release\x20trigger,\x20renewal\x20reminders','R10\x20setting\x20lock\x20covering\x20the\x20refund\x20window\x20(recommended\x2030\x20days,\x20add-only)'],'keeper_dependencies':['subscription\x20expiry\x20/\x20term\x20end','month-end\x20income\x20release\x20trigger','renewal\x20reminder\x20before\x20term\x20end'],'recommended_role':'merchant','role_rationale':'The\x20institution\x20/\x20content\x20partner\x20owns\x20the\x20single-course\x20Service;\x20platform\x20billing\x20runs\x20under\x20a\x20dedicated\x20Permission\x20entity.','differences':['Consumer\x20line\x20vs\x20the\x20degree\x20sibling:\x20single\x20course\x20/\x20subscription\x20/\x20certificate\x20—\x20the\x20incumbent\x27s\x20mainline\x20revenue,\x20not\x20the\x20multi-term\x20degree\x20escrow','Income\x20is\x20ONE\x20full\x20release\x20per\x20Order\x20to\x20the\x20partner\x27s\x20Entity\x20(single\x20course:\x20fixed\x20Amount\x20at\x20certification;\x20monthly/annual:\x20one\x20Order\x20per\x20term\x20with\x20a\x20single\x20month-end\x20release\x20—\x20never\x20recurring\x20within\x20an\x20Order).\x20The\x20degree\x20line\x20releases\x20per\x20term\x20with\x20dual-sign\x20and\x20caps','Primary\x20buyer\x20protection\x20is\x20the\x2014-day\x20refund\x20window\x20(vs\x20the\x20degree\x27s\x20pre-start\x20full\x20+\x20per-term\x20pro-rata\x20refunds)'],'user_inputs':['course_price_usd\x20/\x20subscription_monthly_usd\x20/\x20annual_plan_usd\x20—\x20the\x20pricing\x20structure\x20(pick\x20one\x20per\x20Service)','partner_share_bps\x20—\x20partner\x27s\x20share\x20(default\x2010000).\x20platform_share_bps\x20—\x20KEEP\x20AT\x200;\x20the\x20incumbent\x20benchmark\x205000/5000\x20is\x20the\x20number\x20being\x20displaced.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','refund_window_days\x20—\x20default\x2014','month_release_day\x20—\x20day\x20of\x20month\x20for\x20the\x20subscription\x20income\x20release\x20guard','certificate\x20Repository\x20object\x20+\x20institution\x20signer\x20—\x20the\x20cert\x20write\x20policy'],'time_anchors':{'refund_window':'order.time\x20(order\x20creation\x20—\x20progress.current_time\x20refreshes\x20on\x20every\x20forward,\x20which\x20would\x20leave\x20the\x20window\x20perpetually\x20open)','subscription_term':'order.time'}},{'id':'travel/global-ota','industry':'travel','variant':'global-ota','product_ref':'booking-com','archetype':'leader','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'machine_shape':[{'name':'paid','role':'Entry:\x20booking\x20paid\x20and\x20escrowed.\x20There\x20is\x20NO\x20\x27created\x27\x20node\x20—\x20the\x20first\x20pair\x27s\x20prev_node\x20MUST\x20be\x20the\x20empty\x20string:\x20\x27\x27\x20──pay──→\x20paid\x20IS\x20the\x20starting\x20edge','semantic_role':'draft','from':[{'prev':'','forward':'pay','operator':'order_payer'}]},{'name':'confirmed','role':'Property/supplier\x20confirms\x20(permission\x20slot);\x2048h\x20confirm\x20timeout\x20releases\x20via\x20keeper','semantic_role':'active','from':[{'prev':'paid','forward':'supplier_confirm','permission_index':0x3e9},{'prev':'claim_open','forward':'claim_dismissed_resume','permission_index':0x3e8,'guard_key':'arb_dismissed_resume'}]},{'name':'in_stay','threshold':0x2,'role':'Check-in:\x20property\x20submits\x20redemption\x20WIP\x20+\x20buyer\x20confirms.\x20F41\x20(v70):\x20threshold=2\x20is\x20now\x20a\x20REAL\x20node\x20declaration\x20the\x20compiler\x20forwards\x20onto\x20the\x20Pair\x20—\x20the\x20compile-time\x20hardcode\x20previously\x20dissolved\x20it\x20to\x20\x27whoever\x20advances\x20first\x20wins\x27.\x20Implement\x20as\x20ONE\x20Pair\x20with\x20threshold=2\x20and\x20TWO\x20forwards\x20(check_in_property\x20+\x20check_in_guest)\x20—\x20a\x20single\x20forward\x20cannot\x20express\x20dual\x20confirmation,\x20and\x20two\x20SEPARATE\x20Pairs\x20into\x20in_stay\x20is\x20illegal\x20(E_DUPLICATE_NODE_PREV)','semantic_role':'active','from':[{'prev':'confirmed','forward':'check_in_property','permission_index':0x3e9,'guard_key':'checkin_evidence'},{'prev':'confirmed','forward':'check_in_guest','operator':'order_payer'}]},{'name':'completed','role':'Check-out\x20(buyer\x20confirmation)\x20or\x20no-show\x20charge\x20(property\x20evidence\x20+\x20time\x20gate).\x20NOT\x20the\x20settlement\x20node\x20—\x20the\x20serial\x20claim\x20window\x20comes\x20next\x20(v30),\x20so\x20the\x20pool\x20stays\x20intact\x20while\x20post-stay\x20claims\x20are\x20adjudicated','semantic_role':'delivered','from':[{'prev':'confirmed','forward':'no_show','permission_index':0x3e9,'guard_key':'no_show_evidence'},{'prev':'in_stay','forward':'check_out_guest','operator':'order_payer','guard_key':'checkout_gate'}]},{'name':'claim_window','role':'SERIAL\x20CLAIM\x20WINDOW\x20(v30,\x20ABNB2-validated):\x20mandatory\x20waypoint\x20between\x20completed\x20and\x20payout\x20—\x20the\x20pool\x20cannot\x20release\x20while\x20a\x20post-stay\x20claim\x20could\x20still\x20be\x20filed.\x20Two\x20exits:\x20FileClaim\x20(inside\x20the\x20window)\x20or\x20ReleaseNoClaim\x20(window\x20elapsed).\x20Also\x20re-entered\x20from\x20\x27reviewed\x27\x20so\x20a\x20buyer\x20review\x20can\x20never\x20strand\x20the\x20order\x20off\x20the\x20settlement\x20path\x20(R-DEAD-END)','semantic_role':'delivered','from':[{'prev':'completed','forward':'open_claim_window','permission_index':0x3e8},{'prev':'reviewed','forward':'open_claim_window','permission_index':0x3e8}]},{'name':'poststay_claim','role':'Post-checkout\x20claim\x20inside\x20the\x20serial\x20window\x20(guest\x20or\x20support\x20reports:\x20wrong\x20charge,\x20misrepresented\x20stay).\x20Arbitration\x20decides\x20off-Machine;\x20a\x20guest-favor\x20ruling\x20exits\x20via\x20the\x20arb_refund\x20edge\x20→\x20closed_cancel;\x20a\x20dismissed\x20claim\x20releases\x20via\x20ClaimDismissed\x20→\x20payout_released','operator':'order_payer','semantic_role':'active','from':[{'prev':'claim_window','forward':'file_claim','operator':'order_payer','guard_key':'poststay_claim_window'}]},{'name':'payout_released','role':'THE\x20SETTLEMENT\x20NODE\x20(v30):\x20reachable\x20ONLY\x20from\x20claim_window\x20(no\x20claim)\x20or\x20poststay_claim\x20(dismissed),\x20so\x20the\x20release\x20always\x20fires\x20on\x20an\x20intact,\x20undisputed\x20pool.\x20The\x20release\x20allocator\x20is\x20gated\x20on\x20THIS\x20node\x20—\x20never\x20on\x20completed,\x20otherwise\x20a\x20claim\x20path\x20that\x20skips\x20settlement\x20strands\x20the\x20merchant\x20share','semantic_role':'final','from':[{'prev':'claim_window','forward':'release_no_claim','permission_index':0x3e8,'guard_key':'release_no_claim_clock'},{'prev':'poststay_claim','forward':'claim_dismissed','permission_index':0x3e8,'guard_key':'arb_dismissed_poststay'}]},{'name':'reviewed','role':'Buyer\x20submits\x20review\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM:\x20row\x20policy\x20is\x20single-typed,\x20so\x20the\x20review\x20event\x20writes\x20a\x20U256\x20rating\x20row\x20—\x20the\x20range-queryable\x20column\x20—\x20AND\x20a\x20String\x20comment\x20row\x20keyed\x20to\x20the\x20same\x20order;\x20text\x20rides\x20its\x20own\x20presence-queryable\x20row,\x20never\x20progress\x20history)\x20—\x20Reward\x20window\x2090\x20days.\x20A\x20pure\x20side-branch\x20off\x20completed\x20(review\x20is\x20optional\x20and\x20must\x20never\x20gate\x20money)\x20with\x20an\x20EXIT\x20edge\x20back\x20into\x20the\x20settlement\x20path\x20(reviewed\x20→\x20claim_window\x20via\x20the\x20same\x20open_claim_window\x20forward,\x20R-DEAD-END):\x20an\x20unexited\x20version\x20of\x20this\x20node\x20would\x20strand\x20the\x20order\x20the\x20moment\x20a\x20buyer\x20reviewed,\x20because\x20settlement\x20hangs\x20off\x20claim_window,\x20not\x20completed','operator':'order_payer','semantic_role':'delivered','optional':!![],'from':[{'prev':'completed','forward':'submit_review','operator':'order_payer'}]},{'name':'closed_cancel','role':'Free\x20cancellation\x20or\x20confirm\x20timeout\x20—\x20refund\x20Allocator\x20to\x20buyer;\x20also\x20the\x20arb_refund\x20edge\x20target\x20when\x20a\x20ruling\x20favors\x20the\x20buyer\x20(guard\x20tpl_forward_arb_ruling_won).\x20Both\x20rails\x20out\x20of\x20\x27paid\x27\x20share\x20one\x20prev_node\x20and\x20MUST\x20be\x20merged\x20into\x20ONE\x20Pair\x20with\x20two\x20forwards','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'free_cancel','operator':'order_payer','guard_key':'free_cancel'},{'prev':'paid','forward':'confirm_timeout','permission_index':0x3e8,'guard_key':'confirm_timeout'},{'prev':'poststay_claim','forward':'arb_refund','permission_index':0x3e8,'guard_key':'arb_won_poststay'},{'prev':'claim_open','forward':'arb_refund','permission_index':0x3e8,'guard_key':'arb_won_walk'},{'prev':'disrupted','forward':'refund_after_disruption','operator':'order_payer','guard_key':'disruption_refund_gate'}]},{'name':'claim_open','role':'Oversell/walk\x20claim\x20PRE-STAY\x20—\x20buyer\x20or\x20support\x20reports;\x20arbitration\x20decides\x20off-Machine;\x20a\x20ruling\x20in\x20the\x20buyer\x27s\x20favor\x20exits\x20via\x20the\x20arb_refund\x20edge\x20→\x20closed_cancel\x20(refund\x20Allocator);\x20a\x20ruling\x20for\x20the\x20property\x20exits\x20via\x20ClaimDismissedResume\x20→\x20confirmed\x20(the\x20booking\x20stands)\x20—\x20NEVER\x20a\x20stop\x20node\x20with\x20money','operator':'order_payer','semantic_role':'active','from':[{'prev':'confirmed','forward':'walk_claim','operator':'order_payer'}]},{'name':'disrupted','role':'Supplier\x20disruption\x20—\x20the\x20property\x20cannot\x20honor\x20a\x20confirmed\x20booking\x20(oversold/closed-out/force\x20majeure)\x20and\x20files\x20a\x20disruption\x20record\x20hash\x20into\x20the\x20evidence\x20Repository.\x20RECORD\x20waypoint\x20only\x20(R-M1-11\x20exemption:\x20a\x20business\x20STATE\x20like\x20\x27returned\x27,\x20never\x20a\x20dispute/arb-prefixed\x20naming):\x20it\x20routes\x20into\x20the\x20SAME\x20single\x20refund\x20rail\x20via\x20closed_cancel,\x20so\x20the\x20buyer\x20is\x20paid\x20without\x20filing\x20a\x20claim.\x20A\x20buyer\x20contesting\x20the\x20disruption\x20still\x20goes\x20through\x20claim_open\x20+\x20Arbitration','semantic_role':'active','from':[{'prev':'confirmed','forward':'report_disruption','permission_index':0x3e9,'guard_key':'disruption_evidence'}]}],'guards':[{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'free_cancel','purpose':'Free\x20cancellation\x20INSIDE\x20the\x20buyer\x27s\x20window\x20—\x20a\x20CLOSING\x20window\x20(\x27Clock\x20<=\x20order.time\x20+\x20free_cancel_hours\x27),\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20cancel\x20aborts\x20inside\x20the\x20window\x20and\x20is\x20ADMITTED\x20after\x20it\x20closed,\x20bkd8\x20BK-02).\x20P1-3:\x20the\x20window\x20anchors\x20on\x20order.time\x20(booking\x20time)\x20by\x20default.\x20It\x20is\x20NOT\x20\x27check-in\x20minus\x2072h\x27:\x20no\x20check-in\x20date\x20exists\x20on\x20chain\x20(Order/Sale/Quote\x20carry\x20no\x20date\x20field)\x20—\x20a\x20faithful\x20per-stay\x20deadline\x20rides\x20the\x20stay-date\x20Repository\x20row\x20per\x20the\x20STAY-DATE\x20PRESCRIPTION\x20(see\x20time_anchors.free_cancel;\x20D-01\x20field\x20deferred)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'confirm_timeout','purpose':'Supplier\x20confirm\x20timeout\x20—\x20\x27Clock\x20>=\x20order.time\x20+\x20confirm_timeout_hours\x27;\x20keeper\x20releases\x20the\x20order\x20to\x20the\x20refund\x20rail'},{'template_id':'pattern.repository_data_check','host':'machine','key':'checkin_evidence','purpose':'Redemption\x20evidence\x20hash\x20compared\x20against\x20the\x20listing\x20commitment\x20(order.item.wip_hash);\x20dual\x20confirmation\x20(R4)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'checkout_gate','purpose':'Check-out\x20—\x20buyer\x20confirmation,\x20or\x20a\x20keeper\x20time\x20gate\x20anchored\x20on\x20order.time.\x20P1-3:\x20the\x20DEPARTURE\x20DATE\x20is\x20not\x20on\x20chain,\x20so\x20\x27checkout_date\x27\x20must\x20come\x20from\x20a\x20Repository\x20policy\x20written\x20at\x20buy\x20time,\x20or\x20be\x20approximated\x20as\x20order.time\x20+\x20stay_nights'},{'template_id':'pattern.verifier_evidence_philosophy','host':'machine','key':'no_show_evidence','purpose':'Property\x20evidences\x20no-show\x20+\x20a\x20time\x20floor\x20(\x27Clock\x20>=\x20order.time\x20+\x20no_show_floor_hours\x27)\x20so\x20a\x20charge\x20can\x20never\x20be\x20filed\x20before\x20arrival\x20—\x20triggers\x20the\x20charge\x20allocator'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'poststay_claim_window','purpose':'Post-stay\x20claim\x20filing\x20INSIDE\x20the\x20serial\x20window\x20—\x20a\x20CLOSING\x20window\x20(\x27Clock\x20<=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x27),\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20the\x20window\x20is\x20shut\x20while\x20open\x20and\x20stays\x20open\x20after\x20it\x20closed,\x20bkd8\x20BK-04)\x20—\x20witness-anchored,\x20so\x20keeper\x20timing\x20cannot\x20shift\x20it'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settlement_release','purpose':'Settlement\x20allocator\x20gate\x20(v30,\x20v68\x20pin-vs-prev\x20correction),\x20bound\x20to\x20ALL\x20THREE\x20settlement\x20allocator\x20rows\x20ONLY\x20(guard_key\x20settlement_release\x20—\x20the\x20platform\x20commission\x20leg,\x20the\x20payment-fee\x20leg,\x20and\x20the\x20property\x20Surplus\x20leg\x20share\x20ONE\x20Allocator:\x20chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator,\x20and\x20a\x20standalone\x20Rate-0\x20leg\x20aborts\x20ERATE_NOT_10000,\x20so\x20the\x20legs\x20MUST\x20merge):\x20progress.current\x20==\x20payout_released\x20PLUS\x20\x27Clock\x20>=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x27.\x20Allocator\x20guards\x20evaluate\x20at\x20alloc\x20time,\x20when\x20progress.current\x20is\x20the\x20REACHED\x20node,\x20so\x20the\x20payout_released\x20pin\x20is\x20correct\x20here.\x20NEVER\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20edge:\x20a\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance\x20(progress.current\x20==\x20prev),\x20so\x20the\x20pin\x20would\x20weld\x20the\x20edge\x20shut\x20(bkng\x20F22\x20dead\x20rail).\x20The\x20v25\x20anchor\x20(order.time\x20+\x20payout_delay)\x20was\x20vacuous\x20—\x20booking-time\x20delays\x20always\x20expire\x20before\x20checkout;\x20the\x20serial\x20claim\x20window\x20is\x20the\x20real\x20post-stay\x20protection'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'release_no_claim_clock','purpose':'ReleaseNoClaim\x20FORWARD\x20time\x20gate\x20(v68,\x20split\x20off\x20settlement_release\x20per\x20bkng\x20F22):\x20\x27Clock\x20>=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x27\x20—\x20TIME\x20LEG\x20ONLY.\x20A\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance,\x20so\x20the\x20order\x20still\x20sits\x20at\x20the\x20PREV\x20node\x20(claim_window)\x20and\x20its\x20recorded\x20claim_window\x20ENTRY\x20time\x20(1280,\x20next_node=\x27claim_window\x27,\x20find=last)\x20is\x20the\x20correct\x20anchor;\x20a\x20progress.current\x20pin\x20must\x20NEVER\x20appear\x20here\x20(it\x20would\x20target\x20the\x20destination\x20node\x20and\x20weld\x20the\x20edge\x20shut).\x20The\x20payout_released\x20state\x20pin\x20stays\x20on\x20the\x20settlement\x20allocator\x20rows\x20(settlement_release),\x20which\x20evaluate\x20at\x20alloc\x20time\x20on\x20the\x20reached\x20node\x20—\x20belt\x20and\x20suspenders:\x20the\x20forward\x20cannot\x20fire\x20before\x20the\x20window\x20closes,\x20and\x20the\x20allocator\x20cannot\x20pay\x20outside\x20payout_released'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20execution\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate):\x20progress.current\x20==\x20closed_cancel\x20(the\x20refund\x20terminal\x20—\x20free_cancel,\x20confirm_timeout,\x20arb_refund,\x20and\x20disruption\x20refunds\x20ALL\x20exit\x20through\x20this\x20one\x20node,\x20so\x20one\x20gate\x20covers\x20every\x20rail)\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20one-directional)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20two-slot\x20arb\x20variant\x20declares\x20slot\x201\x20=\x20the\x20Arb\x20address\x20for\x20the\x20ruling\x20legs).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20Order.dispute\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20property\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_won_poststay','purpose':'Arb\x20refund\x20edge\x20gate\x20for\x20the\x20post-stay\x20claim\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order\x20recipient\x20for\x20GuardIdentifier(0),\x20slot\x201\x20=\x20Arb\x20for\x20ruling\x20state):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true\x20(set\x20by\x20the\x20ruling;\x20arb_withdraw\x20sweeps\x20only\x20the\x20fee\x20balance\x20and\x20never\x20touches\x20the\x20indemnity,\x20so\x20a\x20fee\x20withdrawal\x20cannot\x20clear\x20the\x20gate\x20—\x20the\x20one\x20path\x20that\x20DOES\x20clear\x20it\x20is\x20the\x20objection-cycle\x20reset,\x20which\x20fails\x20this\x20gate\x20shut\x20until\x20a\x20fresh\x20ruling).\x20NEVER\x20gate\x20on\x20arb.status\x20—\x20arb_withdraw\x20advances\x20the\x20case\x203→6\x20past\x20the\x2030-day\x20silence\x20window\x20and\x205→6\x20from\x20Finished,\x20and\x20Guard+Machine\x20are\x20immutable\x20after\x20publish\x20(testnet\x20o10\x20stranded\x201.5\x20WOW).\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20poststay_claim\x20->\x20closed_cancel'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_won_walk','purpose':'Arb\x20refund\x20edge\x20gate\x20for\x20the\x20pre-stay\x20walk\x20claim\x20(same\x20TWO-SLOT\x20shape\x20as\x20arb_won_poststay):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20claim_open\x20->\x20closed_cancel'},{'template_id':'tpl_forward_arb_ruling_dismissed','host':'machine','key':'arb_dismissed_poststay','purpose':'Dismissed-ruling\x20edge\x20gate\x20for\x20the\x20post-stay\x20claim\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order,\x20slot\x201\x20=\x20Arb):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200\x20(the\x20ruling\x20favoured\x20the\x20merchant).\x20Fail-closed:\x20the\x20amount\x20query\x20errors\x20on\x20the\x20None\x20field,\x20so\x20the\x20leg\x20passes\x20ONLY\x20when\x20indemnity\x20is\x20Some(0)\x20—\x20indemnity\x20is\x20Some\x20ONLY\x20after\x20a\x20ruling,\x20and\x20a\x20reset\x20clears\x20it,\x20so\x20a\x20voided\x20or\x20never-made\x20ruling\x20can\x20never\x20release\x20the\x20pool.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20poststay_claim\x20->\x20payout_released'},{'template_id':'tpl_forward_arb_ruling_dismissed','host':'machine','key':'arb_dismissed_resume','purpose':'Dismissed-ruling\x20edge\x20gate\x20for\x20the\x20pre-stay\x20walk\x20claim\x20(same\x20shape\x20as\x20arb_dismissed_poststay):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200\x20—\x20the\x20property-favor\x20ruling\x20restores\x20the\x20booking.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20claim_open\x20->\x20confirmed'},{'template_id':'pattern.repository_data_check','host':'machine','key':'disruption_evidence','purpose':'Supplier-side\x20disruption\x20record\x20hash\x20(oversell/closed-out/force-majeure\x20record\x20in\x20the\x20evidence\x20Repository,\x20same\x20writer\x20authorization\x20as\x20the\x20redemption\x20WIP)\x20required\x20to\x20file\x20disrupted'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'disruption_refund_gate','purpose':'Buyer\x20confirms\x20the\x20supplier-filed\x20disruption\x20before\x20the\x20refund\x20rail\x20pays\x20(double\x20confirmation,\x20mirrors\x20retail\x27s\x20RefundAfterLoss):\x20the\x20supplier\x27s\x20own\x20filing\x20never\x20moves\x20money\x20alone'},{'template_id':'pattern.progress_state_check','host':'reward','key':'review_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'property','count':0x4,'mode':'rate','refund_track':'order_anchored','rows':[{'track':'settlement','recipient':'entity','recipient_key':'platform','mode':'rate','value_from':'commission_rate_bps','guard_key':'settlement_release','note':'Platform\x20commission\x20leg;\x200\x20under\x20the\x20direct-sales\x20default.\x20Shares\x20guard_key\x20settlement_release\x20with\x20the\x20fee\x20and\x20Surplus\x20legs\x20—\x20the\x20three\x20legs\x20form\x20ONE\x20Allocator\x20(chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator:\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register),\x20firing\x20once\x20at\x20payout_released.'},{'track':'settlement','recipient':'entity','recipient_key':'payment_fee','mode':'rate','value_from':'payment_fee_bps','guard_key':'settlement_release','note':'Payment-channel\x20fee\x20leg;\x200\x20by\x20default.\x20Shares\x20guard_key\x20settlement_release\x20(same\x20single-Allocator\x20merge\x20as\x20the\x20commission\x20leg).'},{'track':'settlement','recipient':'entity','recipient_key':'property','mode':'surplus','guard_key':'settlement_release','note':'Property\x20net\x20=\x20the\x20remainder\x20after\x20commission\x20and\x20fee\x20—\x20Surplus\x20BY\x20DESIGN\x20so\x20the\x20split\x20can\x20never\x20mis-sum.\x20Shares\x20guard_key\x20settlement_release\x20(Rate\x20legs\x20+\x20the\x20one\x20Surplus\x20form\x20a\x20single\x20legal\x20Allocator:\x20with\x20a\x20Surplus\x20present\x20the\x20Rate\x20sum\x20must\x20be\x20<=\x2010000,\x20allocation.move).\x20This\x20recipient\x20MUST\x20stay\x20distinct\x20from\x20every\x20Rate\x20leg\x20(R-RECIPIENT-04):\x20Booking\x20mainnet\x202026-10-06\x20pointed\x20Surplus\x20at\x20a\x20Rate\x20leg\x27s\x20recipient,\x20the\x20property\x20took\x20100%,\x20the\x20commission/fee\x20legs\x20never\x20existed,\x20and\x20publish\x20froze\x20the\x20misroute.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Refunds\x20pay\x20the\x20order-anchored\x20recipient\x20(R5)\x20via\x20GuardIdentifier(0),\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(node\x20closed_cancel\x20—\x20free_cancel,\x20confirm_timeout,\x20arb,\x20and\x20disruption\x20refunds\x20all\x20exit\x20through\x20that\x20one\x20node).\x20Never\x20Signer,\x20which\x20pays\x20the\x20transaction\x20sender.\x20The\x20guard\x20MUST\x20also\x20require\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool)\x20so\x20an\x20order\x20whose\x20arbitration\x20award\x20already\x20paid\x20cannot\x20reach\x20this\x20rail\x20(D-BUG-2\x20double-spend)\x20—\x20the\x20polarity\x20twin\x20is\x20the\x20shipped\x20recover_gate\x20row.\x20Percentage\x20cancellation\x20policies\x20split\x20platform\x20X\x20/\x20buyer\x20(10000-X)\x20on\x20their\x20own\x20allocators.'},{'track':'settlement','recipient':'entity','recipient_key':'property','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20property\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settlement_release/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'Merchant-mode\x20settlement,\x20TWO\x20recipient\x20shapes\x20in\x20one\x20plan.\x20RELEASE\x20legs\x20are\x20fixed\x20Entity\x20rows\x20(property\x20net\x20+\x20platform\x20commission\x20+\x20payment\x20fee)\x20—\x20Entity\x20is\x20keeper-independent\x20and\x20therefore\x20safe.\x20REFUND\x20legs\x20MUST\x20be\x20a\x20{GuardIdentifier:\x200}\x20row,\x20NOT\x20Signer:\x20allocation.move\x20resolves\x20GuardIdentifier\x20through\x20the\x20Guard\x20submission,\x20which\x20for\x20a\x20Service-created\x20Allocation\x20the\x20contract\x20pins\x20to\x20the\x20PAYING\x20ORDER,\x20so\x20the\x20money\x20lands\x20on\x20the\x20Order\x20and\x20only\x20order.owner\x20can\x20receive\x20it.\x20Recipient::Signer\x20pays\x20the\x20TRANSACTION\x20SENDER,\x20so\x20a\x20keeper-triggered\x20refund\x20would\x20pay\x20the\x20keeper\x20—\x20never\x20use\x20Signer\x20for\x20a\x20refund.\x20Note\x20also:\x20a\x20zero-share\x20GuardIdentifier\x20anchor\x20row\x20is\x20what\x20lets\x20a\x20release\x20Guard\x20read\x20order.*\x20at\x20all,\x20and\x20it\x20materialises\x20a\x200-balance\x20CoinWrapper\x20at\x20the\x20Order\x20(accepted,\x20value-free).\x20DIRECT-SALES\x20default:\x20no\x20platform\x20commission,\x20property\x20Rate\x2010000.\x20free\x20cancellation\x20=\x20full\x20refund\x20to\x20the\x20order-anchored\x20recipient;\x20percentage\x20cancellation\x20policies\x20=\x20platform\x20X\x20/\x20buyer\x20(10000-X)\x20splits;\x20no-show\x20approximates\x20a\x20first-night\x20charge\x20by\x20Rate;\x20arbitration-ruled\x20refunds\x20full\x20or\x20partial'},'key_risk':'Oversell\x20walk\x20—\x20buyer-first\x20claim\x20evidence\x20+\x20arbitration\x20ruling\x20refund.\x20COMPENSATION\x20FUND:\x20DO\x20NOT\x20FUND\x20(user\x20ruling\x202026-10-15)\x20until\x20the\x20arbitration-escrow\x20shared\x20gate\x20lands\x20—\x20an\x20unreserved\x20pool\x20is\x20double-takeable\x20via\x20refund-then-claim;\x20disputes\x20ride\x20the\x20escrow\x20rails\x20only\x20(rationale:\x20A-2\x20note)','compensation_fund_policy':'forbidden','build_notes':['D-1\x20EXPLICIT\x20PAIRS/FORWARDS\x20—\x20the\x20edges\x20below\x20are\x20DECLARED\x20AS\x20DATA\x20on\x20machine_shape\x20(each\x20node\x27s\x20from[]:\x20prev/forward/operator/permission_index/guard_key),\x20and\x20compile\x20turns\x20same-prev\x20siblings\x20into\x20ONE\x20Pair\x20with\x20sibling\x20forwards\x20(E_DUPLICATE_NODE_PREV:\x20ONE\x20Pair\x20per\x20(node,\x20prev_node)\x20—\x20competing\x20rails\x20must\x20share\x20a\x20Pair,\x20never\x20be\x20separate\x20Pairs).\x20The\x20prose\x20map\x20remains\x20the\x20authoritative\x20reading\x20order:\x20\x20\x20\x27\x27\x20─pay(w1)→\x20paid\x20|\x20paid\x20─supplier_confirm(perm1001,w1)→\x20confirmed\x20|\x20paid\x20─{free_cancel(buyer,w1),\x20confirm_timeout(perm1000,w1)}→\x20closed_cancel\x20(ONE\x20Pair,\x20two\x20forwards)\x20|\x20confirmed\x20─{check_in_property(perm1001,w1),\x20check_in_guest(buyer,w1)}→\x20in_stay\x20threshold=2\x20(ONE\x20Pair,\x20dual\x20confirmation)\x20|\x20confirmed\x20─walk_claim(buyer,w1)→\x20claim_open\x20|\x20confirmed\x20─report_disruption(perm1001,w1,\x20disruption-evidence\x20Guard)→\x20disrupted\x20|\x20disrupted\x20─refund_after_disruption(buyer,w1,\x20order-holder\x20Guard)→\x20closed_cancel\x20|\x20confirmed\x20─no_show(perm1001,w1)→\x20completed\x20(no-show\x20charge:\x20property\x20evidence\x20+\x20time\x20floor;\x20NEVER\x20hang\x20this\x20off\x20in_stay\x20—\x20the\x20dual-confirmation\x20gate\x20can\x20never\x20be\x20reached\x20when\x20the\x20buyer\x20is\x20a\x20no-show,\x20so\x20the\x20edge\x20would\x20be\x20dead)\x20|\x20in_stay\x20─check_out_guest(buyer,w1)→\x20completed\x20|\x20completed\x20─open_claim_window(perm1000,w1)→\x20claim_window\x20(SERIAL,\x20mandatory)\x20|\x20completed\x20─submit_review(buyer,w1)→\x20reviewed\x20|\x20reviewed\x20─open_claim_window(perm1000,w1)→\x20claim_window\x20(R-DEAD-END\x20exit:\x20a\x20review\x20can\x20never\x20strand\x20the\x20order\x20off\x20the\x20settlement\x20path)\x20|\x20claim_window\x20─file_claim(buyer,w1,\x20claim-window-open\x20Guard)→\x20poststay_claim\x20|\x20claim_window\x20─release_no_claim(perm1000,w1,\x20claim-window-closed\x20Guard)→\x20payout_released\x20|\x20poststay_claim\x20─claim_dismissed(perm1000,w1,\x20tpl_forward_arb_ruling_dismissed)→\x20payout_released\x20|\x20poststay_claim\x20─arb_refund(perm1000,w1,\x20tpl_forward_arb_ruling_won)→\x20closed_cancel\x20|\x20claim_open\x20─arb_refund(perm1000,w1,\x20tpl_forward_arb_ruling_won)→\x20closed_cancel\x20|\x20claim_open\x20─claim_dismissed_resume(perm1000,w1,\x20tpl_forward_arb_ruling_dismissed)→\x20confirmed\x20(property-favor\x20ruling:\x20the\x20booking\x20stands\x20—\x20NEVER\x20leave\x20claim_open\x20as\x20a\x20stop\x20node\x20with\x20money)','DUAL\x20CONFIRMATION\x20(corrected\x20per\x20booking\x20F-04):\x20threshold=2\x20with\x20two\x20DISTINCT\x20operator-bound\x20forwards\x20is\x20the\x20ONLY\x20way\x20to\x20require\x20two\x20distinct\x20OPERATOR\x20BINDINGS\x20before\x20a\x20transition\x20—\x20it\x20does\x20NOT\x20guarantee\x20two\x20different\x20PEOPLE.\x20Each\x20forward\x20contributes\x20its\x20weight\x20AT\x20MOST\x20ONCE\x20(locked\x20by\x20its\x20first\x20operator),\x20but\x20a\x20single\x20forward\x20with\x20weight=2\x20satisfies\x20the\x20threshold\x20alone,\x20and\x20two\x20permissionIndex\x20forwards\x20do\x20NOT\x20imply\x20two\x20people\x20(permission\x20admins\x20hold\x20EVERY\x20index\x20—\x20one\x20admin\x20can\x20execute\x20both).\x20Bind\x20each\x20forward\x20to\x20a\x20different\x20identity\x20(e.g.\x20namedOperator:\x27\x27\x20—\x20resolving\x20to\x20the\x20order\x20owner\x20or\x20its\x20registered\x20order\x20agents\x20—\x20plus\x20a\x20distinct\x20permissionIndex\x20member,\x20or\x20two\x20different\x20namedOperator\x20addresses)\x20and\x20keep\x20every\x20weight\x20at\x201.\x20A\x20pair\x20whose\x20distinct\x20forward\x20weights\x20sum\x20below\x20its\x20threshold\x20can\x20NEVER\x20migrate.','Merchant\x20mode\x20=\x20funds\x20flow\x20buyer\x20->\x20escrow\x20->\x20property/platform;\x20agent\x20mode\x20(reverse\x20commission)\x20=\x20the\x20commission-DEPOSIT\x20variant:\x20the\x20supplier\x20posts\x20a\x20refundable\x20commission\x20deposit\x20(a\x20separate\x20prepaid\x20Allocation)\x20at\x20onboarding,\x20each\x20order\x20still\x20settles\x20buyer\x20->\x20escrow\x20->\x20supplier\x20net,\x20and\x20the\x20platform\x20draws\x20accrued\x20commission\x20from\x20the\x20deposit\x20pool\x20on\x20the\x20settlement\x20cadence\x20—\x20no\x20reverse-fund-flow\x20primitive\x20needed','P1-3\x20TIME\x20ANCHORS\x20ARE\x20order.time,\x20NOT\x20THE\x20STAY\x20CALENDAR.\x20No\x20check-in\x20/\x20check-out\x20/\x20night\x20field\x20exists\x20anywhere\x20on\x20chain\x20(Order.items\x20=\x20SaleItem{item,price,quantity,wip_hash};\x20Sale\x20=\x20{name,price,stock,suspension,wip,wip_hash}).\x20Every\x20window\x20below\x20is\x20measured\x20from\x20BOOKING\x20time\x20by\x20default.\x20For\x20a\x20real\x20OTA\x20this\x20is\x20a\x20material\x20semantic\x20loss:\x20a\x2072h\x20free-cancellation\x20window\x20anchored\x20on\x20booking\x20is\x20NOT\x20\x2772h\x20before\x20arrival\x27.\x20To\x20honour\x20the\x20business\x20promise,\x20ride\x20the\x20stay-date\x20Repository\x20row\x20—\x20the\x20STAY-DATE\x20PRESCRIPTION\x20(time_anchors.free_cancel\x20of\x20the\x20destination\x20template;\x20D3-A1:\x20order-scoped\x20Repository,\x20batched\x20id_from\x20None(0)\x20\x27stay_date\x27\x20row\x20written\x20at\x20buy\x20time,\x20pattern.repository_data_check\x20leg\x20comparing\x20Clock\x20against\x20row\x20+\x20offset).\x20Booking\x20lead\x20time\x20is\x20typically\x20weeks,\x20so\x20the\x20gap\x20is\x20not\x20cosmetic.\x20Guard\x20windows\x20are\x20frozen\x20at\x20creation\x20and\x20Machine\x20forwards\x20are\x20immutable\x20after\x20publish,\x20so\x20\x270-168h\x20adjustable\x27\x20means\x20one\x20frozen\x20Guard\x20per\x20window\x20value.','NEVER\x20feed\x20a\x20deadline\x20threshold\x20through\x20a\x20passport\x20submission\x20to\x20make\x20a\x20time\x20guard\x20work:\x20the\x20CONSTANT\x20opcode\x20prefers\x20the\x20passport\x20value\x20over\x20the\x20Guard\x27s\x20own\x20table\x20(passport\x20lookup\x20precedes\x20the\x20table),\x20so\x20anyone\x20can\x20forge\x20any\x20timestamp.\x20Derive\x20deadlines\x20from\x20order.time\x20or\x20a\x20Repository\x20instead.','Free-cancellation\x20window\x20(order.time\x20+\x20free_cancel_hours)\x20is\x20a\x20single\x20time-lock\x20Guard\x20—\x20buyer-triggered,\x20and\x20it\x20MUST\x20also\x20bind\x20order.owner\x20(pattern.identity_check_order_holder).\x20An\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive:\x20attaching\x20a\x20Progress\x20to\x20an\x20Order\x20is\x20permissionless\x20and\x20registers\x20ITS\x20CALLER\x20under\x20the\x20init-node\x20name\x20\x27\x27,\x20so\x20without\x20an\x20owner-binding\x20Guard\x20the\x20platform\x20can\x20advance\x20any\x20\x27buyer\x27\x20forward\x20itself\x20(verified\x20live\x20—\x20a\x20forged\x20guest\x20check-in\x20was\x20rejected\x20only\x20because\x20the\x20Guard\x20bound\x20the\x20owner).','Supplier\x20confirm\x20timeout\x20(order.time\x20+\x20confirm_timeout_hours)\x20releases\x20the\x20order\x20via\x20keeper;\x20the\x20property\x20is\x20demoted\x20off-chain','Check-in\x20is\x20dual-confirmation\x20via\x20threshold=2:\x20property\x20submits\x20the\x20redemption\x20WIP\x20+\x20buyer\x20confirms\x20(R4)','Settlement\x20ledger\x20+\x20redemption\x20evidence\x20+\x20walk\x20evidence\x20live\x20in\x20dedicated\x20Repositories\x20with\x20write-guarded\x20policies','Refund\x20recipient\x20is\x20the\x20ORDER\x20via\x20a\x20{GuardIdentifier:\x200}\x20row\x20plus\x20the\x20contract\x27s\x20for_object\x20pin,\x20and\x20the\x20buyer\x20claims\x20via\x20the\x20two-step\x20receive\x20flow\x20(R5).\x20NEVER\x20Recipient::Signer\x20for\x20a\x20refund\x20—\x20Signer\x20pays\x20the\x20TRANSACTION\x20SENDER,\x20so\x20a\x20keeper-triggered\x20refund\x20would\x20pay\x20the\x20keeper.','A-2\x20MUTUALLY\x20EXCLUSIVE\x20EXITS\x20(verified\x20live\x20on\x20testnet\x20+\x20mainnet):\x20the\x20refund\x20allocator\x20and\x20the\x20compensation\x20payout\x20are\x20INDEPENDENT\x20channels,\x20so\x20one\x20guest\x20took\x20a\x20full\x20escrow\x20refund\x20AND\x20a\x203x-order\x20compensation\x20for\x20the\x20SAME\x20order\x20(merchant\x20fund\x20drained\x203.0\x20->\x202.622\x20WOW)\x20—\x20worst\x20case\x20is\x204x\x20(full\x20refund\x201x\x20+\x20award\x20ceiling\x203x),\x20NOT\x203x.\x20The\x20compensation-claim\x20call\x20has\x20NO\x20Guard/Passport\x20slot\x20(service.move:464-483),\x20so\x20the\x20reverse\x20order\x20(full\x20refund\x20first,\x20then\x20claim)\x20is\x20just\x20as\x20open\x20as\x20claim-then-refund\x20—\x20a\x20refund-side\x20Guard\x20checking\x20claimed_by=none\x20only\x20seals\x20one\x20direction.\x20Pick\x20ONE\x20exit\x20per\x20dispute\x20—\x20either\x20run\x20the\x20arb_refund\x20edge\x20and\x20rule\x20indemnity\x20=\x200,\x20or\x20skip\x20the\x20refund\x20rail\x20and\x20pay\x20from\x20the\x20compensation\x20fund.\x20Sizing\x20the\x20fund\x20below\x203x\x20the\x20max\x20order\x20is\x20NOT\x20enough:\x20the\x20multiplier\x20applies\x20ON\x20TOP\x20of\x20the\x20refund.\x20USER\x20RULING\x20(2026-10-15):\x20do\x20NOT\x20fund\x20the\x20compensation\x20fund\x20at\x20all\x20until\x20the\x20arbitration-escrow\x20shared\x20gate\x20lands\x20(move\x20layer\x20bkng\x20A1/A2)\x20—\x20an\x20unreserved\x20shared\x20pool\x20double-takeable\x20through\x20refund-then-claim\x20must\x20not\x20be\x20offered\x20to\x20a\x20migrated\x20store;\x20disputes\x20ride\x20the\x20escrow\x20rails\x20only.','Disputes\x20route\x20to\x20Arbitration\x20with\x20an\x20independent\x20Permission\x20(R-M1-11).\x20The\x20venue\x20MUST\x20be\x20on\x20the\x20Service\x27s\x20arbitration\x20allowlist\x20or\x20the\x20payout\x20aborts\x20(E_ARBITRATION_NOT_ALLOWED);\x20removing\x20a\x20venue\x20while\x20a\x20case\x20it\x20ruled\x20on\x20is\x20still\x20awaiting\x20payout\x20strands\x20that\x20award.','ITEM\x20LOST\x20/\x20DISRUPTION\x20WAYPOINT\x20(R-M1-11\x20EXEMPTION,\x20DECLARED\x20AS\x20DATA):\x20when\x20the\x20supplier\x20cannot\x20honor\x20a\x20confirmed\x20booking,\x20it\x20files\x20disruption\x20evidence\x20on-chain\x20(the\x20\x27disruption_evidence\x27\x20repository_data_check\x20Guard)\x20and\x20advances\x20confirmed\x20─report_disruption→\x20disrupted\x20—\x20a\x20RECORD\x20waypoint\x20named\x20for\x20the\x20business\x20STATE\x20(never\x20a\x20dispute/arb-prefixed\x20name).\x20From\x20there\x20disrupted\x20─refund_after_disruption→\x20closed_cancel\x20(buyer\x20order-holder\x20confirmation,\x20mirroring\x20retail\x27s\x20RefundAfterLoss\x20double\x20confirmation)\x20rides\x20the\x20SAME\x20single\x20refund\x20rail\x20—\x20no\x20second\x20refund\x20allocator.\x20The\x20buyer\x20never\x20has\x20to\x20file\x20a\x20claim\x20to\x20be\x20paid.\x20Loss-liability\x20and\x20contested-disruption\x20disputes\x20still\x20go\x20to\x20the\x20separate\x20Arbitration\x20object\x20(claim_open\x20rail)','RESCHEDULED\x20=\x20REFUND-AND-REBUY,\x20NOT\x20A\x20NODE\x20(deliberate\x20non-coverage):\x20the\x20chain\x20has\x20no\x20calendar\x20primitive\x20(stay\x20dates\x20live\x20in\x20the\x20Repository\x20as\x20records,\x20unverifiable\x20on-chain)\x20and\x20an\x20Order\x20amount\x20is\x20immutable,\x20so\x20a\x20true\x20reschedule\x20node\x20cannot\x20express\x20the\x20rate-difference\x20payment\x20and\x20cannot\x20enforce\x20the\x20new\x20date\x20—\x20a\x20\x27rescheduled\x27\x20waypoint\x20would\x20be\x20a\x20half-true\x20node\x20(structure\x20claiming\x20semantics\x20the\x20primitives\x20cannot\x20carry).\x20Route\x20date\x20changes\x20through\x20the\x20EXISTING\x20rails:\x20close_cancel\x20with\x20a\x20full-refund\x20cancel\x20policy\x20(free_cancel\x27s\x20time-lock\x20+\x20order.owner\x20binding)\x20then\x20a\x20fresh\x20Order\x20carrying\x20the\x20new\x20dates\x20and\x20price.\x20When\x20the\x20Move\x20layer\x20grows\x20a\x20date\x20primitive\x20and\x20an\x20order-amendment\x20path,\x20revisit\x20a\x20real\x20reschedule\x20node;\x20until\x20then\x20do\x20NOT\x20model\x20one','ARB\x20RULING\x20EDGES\x20—\x20BOTH\x20directions\x20need\x20a\x20guard.\x20Refund\x20edge:\x20tpl_forward_arb_ruling_won\x20gating\x20on\x20arb.indemnity\x20some\x20==\x20true\x20(stable\x20ruling\x20signal:\x20arb_withdraw\x20sweeps\x20only\x20the\x20fee\x20balance\x20and\x20never\x20touches\x20the\x20indemnity,\x20so\x20a\x20fee\x20withdrawal\x20cannot\x20clear\x20the\x20gate;\x20but\x20arb_withdraw\x20DOES\x20advance\x20the\x20status\x203→6\x20past\x20the\x2030-day\x20silence\x20window\x20and\x205\x20Finished\x20→\x206\x20Withdrawn\x20from\x20Finished,\x20which\x20is\x20why\x20a\x20status\x20gate\x20remains\x20forbidden\x20—\x20Guard\x20+\x20Machine\x20are\x20immutable\x20after\x20publish,\x20testnet\x20o10:\x201.5\x20WOW\x20locked\x20with\x20no\x20exit).\x20Dismissal\x20edge:\x20tpl_forward_arb_ruling_dismissed\x20gating\x20on\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200\x20(fail-closed\x20on\x20the\x20None\x20field,\x20so\x20the\x20leg\x20passes\x20ONLY\x20when\x20a\x20ruling\x20exists\x20AND\x20favoured\x20the\x20merchant)\x20—\x20NEVER\x20a\x20bare\x20permission\x20edge\x20and\x20NEVER\x20\x27indemnity\x20some\x20==\x20false\x27,\x20which\x20conflates\x20never-ruled,\x20reset,\x20and\x20ruled-zero:\x20any\x20of\x20those\x20lets\x20the\x20platform\x20kill\x20a\x20buyer\x27s\x20claim\x20with\x20zero\x20on-chain\x20ruling\x20evidence','STOP-NODE\x20FUND-EXIT\x20COVERAGE\x20(mandatory\x20pre-publish\x20evaluation,\x20pattern.fund_flow_stop_node_coverage\x20/\x20R-M5-03\x20/\x20R-M5-09):\x20walk\x20EVERY\x20rest\x20state\x20—\x20payout_released\x20(release:\x20property\x20+\x20commission\x20+\x20fee,\x20gated\x20on\x20the\x20serial\x20claim\x20window\x20having\x20closed),\x20closed_cancel\x20(refund:\x20full\x20or\x20policy\x20split;\x20when\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20the\x20merchant-recovery\x20sweep\x20exits\x20the\x20principal\x20instead),\x20claim_open\x20(guest-favor\x20ruling\x20→\x20arb_refund;\x20property-favor\x20ruling\x20→\x20claim_dismissed_resume\x20→\x20confirmed),\x20poststay_claim\x20(guest-favor\x20ruling\x20→\x20arb_refund;\x20dismissed\x20→\x20payout_released),\x20reviewed\x20(Reward\x20claim)\x20—\x20each\x20needs\x20a\x20defined\x20withdrawal\x20AND\x20refund\x20rule,\x20each\x20mapping\x20guard\x20satisfiable\x20in\x20BOTH\x20directions;\x20Machine\x20+\x20Allocator\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001),\x20an\x20uncovered\x20stop\x20node\x20strands\x20escrow\x20permanently','Allocator\x20replay:\x20there\x20is\x20NO\x20executed-once\x20flag.\x20A\x20Rate\x20plan\x20summing\x20to\x2010000\x20self-limits\x20(the\x20pool\x20empties,\x20the\x20next\x20run\x20aborts),\x20but\x20an\x20Amount\x20leg\x20combined\x20with\x20an\x20always-true\x20time\x20Guard\x20can\x20be\x20drained\x20repeatedly\x20by\x20a\x20keeper\x20polling.\x20Every\x20one-shot\x20allocator\x20must\x20hang\x20off\x20a\x20one-shot\x20evidence\x20Guard.','Stock:\x20buy\x20decrements\x20it\x20and\x20NOTHING\x20refunds\x20it\x20—\x20no\x20cancellation,\x20refund\x20or\x20arbitration\x20path\x20restocks,\x20so\x20a\x20cancelled\x20booking\x20permanently\x20burns\x20a\x20room.\x20Put\x20a\x20stock_add\x20call\x20in\x20the\x20keeper\x20flow\x20for\x20every\x20cancellation\x20rail.\x20CAVEAT:\x20on-chain\x20per-item\x20sale\x20ops\x20(stock_add\x20/\x20stock_reduce\x20/\x20price_add\x20/\x20price_reduce\x20/\x20sale_suspension)\x20are\x20SILENT\x20no-ops\x20when\x20sale_name\x20matches\x20nothing\x20(no\x20abort,\x20no\x20event,\x20gas\x20charged)\x20—\x20keeper\x20flows\x20must\x20copy\x20sale_name\x20EXACTLY\x20from\x20the\x20live\x20sales\x20list;\x20the\x20MCP\x20pre-gate\x20refuses\x20unknown\x20names,\x20but\x20generated\x20keeper\x20scripts\x20bypassing\x20it\x20get\x20no\x20signal.\x20MAX_SALE_COUNT\x20is\x2050\x20and\x20is\x20only\x20checked\x20when\x20a\x20NEW\x20sale\x20name\x20appears,\x20so\x20a\x20date-per-sale\x20calendar\x20runs\x20out\x20after\x2050\x20dates.','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20Enforce\x20it\x20with\x20a\x20Guard\x20(pattern.required_info_evidence_gate,\x20gate\x20on\x20order.required_info\x20some\x20before\x20the\x20forward\x20that\x20needs\x20it),\x20not\x20by\x20declaring\x20the\x20list.\x20QUOTA\x20COUPLING:\x20the\x20traveler\x27s\x20info\x20message\x20shares\x20the\x20SINGLE\x20stranger-message\x20quota\x20—\x20make\x20it\x20the\x20FIRST\x20pre-order\x20message,\x20or\x20have\x20the\x20supplier\x20respond\x20first\x20to\x20open\x20the\x20conversation','GROWTH\x20PRINCIPLE:\x20this\x20graph\x20is\x20ONE\x20instantiation\x20of\x20Move-native\x20primitives\x20(nodes/pairs/forwards/guards/allocators)\x20—\x20derive\x20your\x20own\x20stop\x20nodes\x20and\x20fund\x20exits\x20from\x20the\x20business\x20rules;\x20nothing\x20here\x20is\x20a\x20fixed\x20vocabulary\x20to\x20copy','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'property_rate_bps':0x2710,'commission_rate_bps':0x0,'payment_fee_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'free_cancel_hours':0x48,'confirm_timeout_hours':0x30,'no_show_floor_hours':0x18,'claim_window_days':0x7,'review_window_days':0x5a,'preferred_property_rate_bps':0x1fa4,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'free_cancel':'order.time\x20(booking\x20time\x20—\x20the\x20ZERO-addition\x20DEFAULT\x20anchor).\x20'+STAY_DATE_CORE,'confirm_timeout':'order.time\x20(booking\x20time)','no_show_floor':'order.time\x20(booking\x20time\x20—\x20the\x20charge\x20floor\x20runs\x20from\x20the\x20purchase,\x20so\x20a\x20pre-arrival\x20charge\x20can\x20never\x20file;\x20a\x20faithful\x20no-show\x20needs\x20the\x20stay-date\x20row\x20leg,\x20see\x20the\x20STAY-DATE\x20PRESCRIPTION\x20in\x20the\x20free_cancel\x20anchor)','claim_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last\x20—\x20witness-anchored;\x20the\x20ONLY\x20post-stay\x20window)','review_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27completed\x27,\x20find=last\x20—\x20the\x20reviewed\x20side-branch\x20never\x20gates\x20money)'},'trust_mechanisms':['R1\x20three\x20refund\x20paths:\x20free\x20cancellation\x20/\x20cancellation\x20policy\x20/\x20arbitration\x20ruling','R2\x20independent\x20arbitration\x20Permission\x20(contract-enforced)','R3\x20compensation\x20fund\x20sized\x20against\x20the\x203x\x20award\x20ceiling\x20(MAX_INDEMNITY_MULTIPLE,\x20enforced\x20at\x20ruling\x20time)\x20AND\x20additive\x20to\x20any\x20escrow\x20refund\x20already\x20paid\x20—\x20see\x20the\x20A-2\x20build_note','R4\x20check-in\x20dual\x20confirmation\x20—\x20property\x20self-sign\x20forbidden','R5\x20order-anchored\x20escrow\x20+\x20refund\x20recipient\x20as\x20a\x20{GuardIdentifier:\x200}\x20row\x20pinned\x20to\x20the\x20paying\x20Order\x20(never\x20Recipient::Signer,\x20which\x20pays\x20the\x20transaction\x20sender)','R6\x20Rate\x20sums\x20=\x2010000;\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20Contact\x20on\x20Service\x20and\x20Machine','R9\x20keepers\x20for\x20confirm\x20timeout,\x20check-out,\x20and\x20settlement','R10\x20cancellation-policy\x20windows\x20are\x20frozen\x20per\x20Machine\x20instance:\x20one\x20published\x20Machine\x20per\x20distinct\x20window\x20value,\x20because\x20Guards\x20are\x20frozen\x20at\x20creation\x20and\x20forwards\x20are\x20immutable\x20after\x20publish'],'keeper_dependencies':['supplier\x20confirm\x20timeout\x20(48h)','check-out\x20time\x20gate','claim-window\x20open\x20(right\x20after\x20completed)','no-claim\x20release\x20(claim\x20window\x20close)','review\x20window\x20expiry'],'recommended_role':'merchant','role_rationale':'Property\x20operators\x20and\x20hotel\x20merchants\x20own\x20the\x20booking\x20Service;\x20the\x20platform\x20variant\x20hosts\x20properties\x20under\x20Permission\x20entities\x20with\x20per-property\x20settlement\x20ledgers.','differences':['Merchant-mode\x20settlement\x20(buyer\x20->\x20escrow\x20->\x20property/platform);\x20agent\x20mode\x20(reverse\x20commission)\x20=\x20the\x20commission-deposit\x20variant:\x20supplier\x20posts\x20a\x20refundable\x20deposit\x20Allocation\x20at\x20onboarding,\x20the\x20platform\x20draws\x20accrued\x20commission\x20from\x20it\x20on\x20the\x20settlement\x20cadence','Free-cancellation\x20window\x20+\x20supplier\x20confirm\x20timeout\x20(48h\x20keeper\x20release)\x20shape\x20the\x20pre-stay\x20funnel','Check-in\x20is\x20dual-confirmation:\x20property\x20redemption\x20WIP\x20+\x20buyer\x20confirm\x20(R4)'],'user_inputs':['property_rate_bps\x20—\x20property\x27s\x20share\x20(default\x2010000).\x20commission_rate_bps\x20/\x20payment_fee_bps\x20—\x20BOTH\x20KEEP\x20AT\x200.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','free_cancel_hours\x20—\x20free-cancellation\x20window,\x20MEASURED\x20FROM\x20order.time\x20(booking),\x20NOT\x20from\x20arrival\x20—\x20plus\x20the\x20booking\x20lead\x20time\x20(days\x20between\x20booking\x20and\x20arrival),\x20which\x20quantifies\x20how\x20far\x20the\x20chain-enforced\x20window\x20sits\x20from\x20the\x20business\x20promise;\x20if\x20lead\x20time\x20exceeds\x20the\x20window\x20the\x20two\x20diverge\x20and\x20you\x20must\x20move\x20the\x20stay\x20dates\x20into\x20a\x20Repository','confirm_timeout_hours\x20—\x20supplier\x20confirmation\x20timeout','review_window_days\x20—\x20the\x20review\x20Reward\x20window','preferred_property_rate_bps\x20—\x20the\x20incumbent\x27s\x20PREFERRED-partner\x20tier\x20(8100\x20=\x20the\x20visibility-boosted\x20commission\x20bracket\x20being\x20displaced);\x20benchmark\x20disclosure\x20only\x20—\x20under\x20direct\x20sales\x20the\x20property\x20keeps\x20the\x20whole\x20sale,\x20so\x20no\x20allocator\x20row\x20reads\x20it','review_reward_pool\x20—\x20INV-4\x20pool\x20plan\x20for\x20the\x20review_reward\x20incentive\x20(expected\x20orders\x20x\x20per-order\x20reward);\x20funded\x20at\x20build\x20time\x20via\x20the\x20reward_funding\x20input\x20(sale-time\x20planning\x20—\x20the\x20buyer\x20perceives\x20the\x20funded\x20reward\x20at\x20quote/buy)']},{'id':'travel/destination-experience','industry':'travel','variant':'destination-experience','product_ref':'klook','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'machine_shape':[{'name':'paid','role':'Entry:\x20multi-segment\x20trip\x20paid\x20and\x20escrowed;\x20Machine\x20starts\x20here','semantic_role':'draft','from':['']},{'name':'segment_D1','role':'Segment\x201\x20redeemed:\x20supplier\x20submits\x20WIP\x20+\x20buyer\x20confirms\x20(dual\x20confirmation)','semantic_role':'active','from':['paid']},{'name':'segment_D2','role':'Segment\x202\x20redeemed\x20(same\x20dual-confirmation\x20pattern)','semantic_role':'active','from':['segment_D1']},{'name':'segment_D3','role':'Segment\x203\x20redeemed\x20—\x20representative;\x20configure\x20per-segment\x20nodes\x20at\x20build\x20time','semantic_role':'active','from':['segment_D2']},{'name':'completed','role':'All\x20segments\x20redeemed','semantic_role':'delivered','from':['segment_D3']},{'name':'settled','role':'Settlement\x20residual-exit\x20terminal\x20—\x20the\x20layer-1\x20rail\x20here\x20sweeps\x20any\x20residual\x20to\x20the\x20supplier\x20Entity\x20(normally\x20ZERO:\x20the\x20per-segment\x20layer-2\x20Amount\x20legs\x20are\x20pinned\x20to\x20the\x20order\x20total\x20by\x20construction);\x20the\x20primary\x20supplier\x20payouts\x20are\x20per-order\x20layer-2\x20Allocations.\x20TWO\x20inbound\x20edges\x20(KLM-FIX-2,\x20klk-mn-261019\x20T1):\x20the\x20buyer/review-side\x20settle\x20path\x20(default\x20completed_to_settled)\x20AND\x20the\x20AutoSettleNoReview\x20time-lock\x20fallback\x20(guard\x20auto_settle_no_review)\x20—\x20with\x20review\x20as\x20the\x20ONLY\x20inbound\x20edge,\x20a\x20buyer\x20who\x20never\x20reviews\x20locks\x20the\x20merchant\x20out\x20of\x20funds\x20forever\x20(the\x20Progress\x20Session\x20has\x20no\x20TTL/timeout)','semantic_role':'final','from':['completed',{'prev':'completed','forward':'AutoSettleNoReview','guard_key':'auto_settle_no_review'}]},{'name':'closed_cancel','role':'Free\x20cancellation\x20(24h\x20pre-use)\x20or\x20tiered\x20cancellation\x20—\x20refund/charge\x20Allocators;\x20also\x20the\x20arb_refund\x20edge\x20target\x20when\x20a\x20ruling\x20favors\x20the\x20buyer\x20(guard\x20arb_won_claim\x20—\x20disputes\x20are\x20filed\x20OFF-Machine\x20per\x20R-M1-11,\x20so\x20the\x20ruling\x20edge\x20departs\x20completed\x20directly)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'free_cancel','operator':'order_payer','guard_key':'free_cancel'},{'prev':'completed','forward':'arb_refund','permission_index':0x3e8,'guard_key':'arb_won_claim'}]}],'guards':[{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'free_cancel','purpose':'Free-cancellation\x20edge\x20gate\x20(bound\x20to\x20the\x20paid\x20->\x20closed_cancel\x20forward):\x20\x27Clock\x20<=\x20order.time\x20+\x20free_cancel_hours\x27\x20—\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20cancel\x20aborts\x20inside\x20the\x20window\x20and\x20is\x20admitted\x20after\x20it\x20closed\x20—\x20az3\x20F-03;\x20bkd8\x20BK-02;\x20catalog\x20sweep\x202026-10-19).\x20The\x20window\x20anchors\x20on\x20BOOKING\x20time\x20by\x20default\x20(no\x20use-date\x20primitive\x20on\x20chain\x20—\x20order.time\x20is\x20immutable;\x20a\x20faithful\x20\x2724h\x20pre-use\x27\x20window\x20rides\x20the\x20stay-date\x20Repository\x20row\x20per\x20the\x20STAY-DATE\x20PRESCRIPTION\x20in\x20time_anchors.free_cancel)\x20—\x20PLUS\x20an\x20order.owner\x20binding\x20leg\x20(pattern.identity_check_order_holder:\x20without\x20it\x20the\x20platform\x20can\x20advance\x20any\x20\x27buyer\x27\x20forward\x20itself\x20—\x20an\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive,\x20global-ota\x20live-verified)\x20AND\x20order.service\x20binding.\x20Replays\x20are\x20self-limited\x20by\x20the\x20refund\x20Rate\x2010000\x20rail\x20(the\x20pool\x20empties,\x20the\x20next\x20run\x20aborts)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','purpose':'Four\x20cancellation\x20tiers\x20(7d+\x20/\x203-7d\x20/\x201-3d\x20/\x20same-day)\x20charging\x205%\x20/\x2020%\x20/\x2050%\x20/\x2070%\x20—\x20each\x20tier\x20is\x20a\x20BOUNDED\x20window:\x20a\x20closing\x20upper-bound\x20leg\x20(time_window_upper_bound)\x20AND-ed\x20with\x20an\x20opening\x20lower-bound\x20leg\x20(time_lock_progress).\x20NOT\x20MODELED\x20in\x20this\x20template\x27s\x20allocator\x20(mn-261019\x20C-02:\x20no\x20tier\x20rails\x20exist\x20here)\x20—\x20the\x20per-tier\x20allocator\x20rows\x20are\x20a\x20build-time\x20addition;\x20tier\x20boundaries\x20anchor\x20on\x20BOOKING\x20time\x20by\x20default,\x20and\x20a\x20faithful\x20stay-date\x20ladder\x20rides\x20the\x20stay-date\x20Repository\x20row\x20per\x20the\x20STAY-DATE\x20PRESCRIPTION\x20(one\x20repository_data_check\x20leg\x20per\x20tier\x20boundary\x20—\x20a\x20build-time\x20addition,\x20same\x20class\x20as\x20the\x20allocator\x20rows),\x20so\x20the\x20on-chain\x20tiers\x20can\x20otherwise\x20only\x20approximate\x20the\x20source\x20platform\x27s\x20stay-date\x20policy'},{'template_id':'pattern.repository_data_check','host':'machine','purpose':'Per-segment\x20redemption\x20WIP:\x20supplier\x20submits\x20+\x20buyer\x20confirms\x20(T+3\x20time-lock\x20fallback)'},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20operator\x20declares\x20customer_required\x20(traveler\x20names\x20/\x20ID\x20for\x20venue\x20entry):\x20gate\x20the\x20FIRST\x20segment\x20redemption\x20(segment_D1)\x20on\x20order.required_info\x20some\x20so\x20the\x20traveler\x27s\x20recorded\x20credential\x20is\x20on-chain\x20before\x20any\x20segment\x20is\x20redeemed;\x20the\x20supplier\x20eyeballing\x20the\x20recorded\x20contact\x20in\x20the\x20Messenger\x20conversation\x20(never\x20the\x20recorded\x20address\x20value)\x20is\x20the\x20acceptance\x20basis;\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(testnet\x20HIGH-05),\x20so\x20this\x20Guard\x20is\x20the\x20only\x20enforcement'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'Force-majeure\x20evidence\x20window\x2048h\x20—\x20expired\x20claims\x20lose\x20standing'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'auto_settle_no_review','purpose':'Auto-settlement\x20FALLBACK\x20edge\x20gate\x20(bound\x20to\x20the\x20completed\x20->\x20settled\x20AutoSettleNoReview\x20forward;\x20KLM-FIX-2,\x20klk-mn-261019\x20T1\x20steps\x2011-12):\x20Clock\x20>=\x20completed\x20ENTRY\x20time\x20(progress.history.time\x201280,\x20next_node=\x27completed\x27,\x20find=last\x20—\x20the\x20IMMUTABLE\x20anchor;\x201272\x20is\x20rewritten\x20at\x20every\x20migration,\x20ETS-C)\x20+\x20review_window_days\x20x\x2086400000\x20ms.\x20An\x20OPENING\x20time-lock\x20(pattern.time_lock_progress),\x20the\x20exact\x20inverse\x20of\x20a\x20closing\x20review-deadline\x20window\x20(opening\x20gate\x20=\x20tpl_time_lock_progress;\x20closing\x20window\x20=\x20tpl_time_window_upper\x20—\x20az3\x20F-03;\x20bkd8\x20BK-02):\x20the\x20two\x20inbound\x20settled\x20edges\x20are\x20mutually\x20exclusive\x20BY\x20TIME\x20ARITHMETIC\x20—\x20while\x20the\x20review\x20window\x20is\x20open\x20this\x20leg\x20reads\x20false\x20and\x20only\x20the\x20review-side\x20settle\x20path\x20advances;\x20once\x20the\x20window\x20passes,\x20this\x20edge\x20is\x20the\x20one\x20that\x20fires.\x20WHY\x20IT\x20MUST\x20SHIP:\x20with\x20review\x20as\x20the\x20ONLY\x20inbound\x20edge\x20on\x20settled,\x20a\x20buyer\x20who\x20never\x20reviews\x20locks\x20the\x20merchant\x20out\x20of\x20funds\x20forever\x20—\x20the\x20chain\x27s\x20Progress\x20Session\x20has\x20no\x20TTL/timeout.\x20THE\x20SAME\x20settlement\x20funding\x20rail\x20is\x20reused\x20(the\x20settle_gate\x20allocator\x20row)\x20—\x20never\x20add\x20a\x20second\x20allocator\x20row\x20for\x20the\x20fallback.\x20The\x20window\x20duration\x20rides\x20the\x20SHARED\x20fee_param\x20review_window_days\x20—\x20keep\x20the\x20autosettle\x20delay\x20and\x20the\x20review-reward\x20window\x20on\x20ONE\x20declared\x20knob\x20(a\x20prose-named\x20window\x20token\x20must\x20be\x20a\x20declared\x20fee\x20param,\x20inv-fee-param-names-resolve).\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20—\x20an\x20unbound\x20GuardSpec\x20is\x20never\x20collected\x20into\x20the\x20build\x20(audit-261012\x20B3)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_gate','purpose':'Settlement\x20residual-exit\x20gate,\x20bound\x20to\x20the\x20settlement\x20allocator\x20row\x20(guard_key\x20settle_gate):\x20progress.current\x20==\x20settled\x20(the\x20terminal)\x20+\x20order.service\x20binding.\x20Under\x20the\x20two-tier\x20waterfall\x20the\x20per-segment\x20layer-2\x20Amount\x20legs\x20are\x20pinned\x20to\x20the\x20order\x20total\x20BY\x20CONSTRUCTION,\x20so\x20this\x20rail\x20normally\x20sweeps\x20ZERO\x20—\x20it\x20exists\x20so\x20that\x20any\x20residual\x20(a\x20cancelled\x20segment\x20refund,\x20an\x20integer-division\x20remainder,\x20a\x20repriced\x20segment)\x20still\x20has\x20an\x20exit\x20at\x20the\x20terminal\x20instead\x20of\x20stranding\x20(FUND-EXIT-01:\x20an\x20uncovered\x20terminal\x20strands\x20the\x20escrow\x20permanently,\x20IMMUT-001).\x20The\x20primary\x20supplier\x20payouts\x20are\x20per-order\x20layer-2\x20Allocations,\x20never\x20this\x20rail'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_won_claim','purpose':'Arb\x20refund\x20edge\x20gate\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order\x20recipient\x20for\x20GuardIdentifier(0),\x20slot\x201\x20=\x20Arb\x20for\x20ruling\x20state;\x20the\x20example_table\x20carries\x20the\x20254\x20task-binding\x20row\x20—\x20edge-bound\x20guards\x20require\x20it,\x20TASKBIND-01),\x20bound\x20to\x20the\x20completed\x20->\x20closed_cancel\x20forward:\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true\x20(set\x20by\x20the\x20ruling;\x20arb_withdraw\x20sweeps\x20only\x20the\x20fee\x20balance\x20and\x20never\x20touches\x20the\x20indemnity,\x20so\x20a\x20fee\x20withdrawal\x20cannot\x20clear\x20the\x20gate\x20—\x20the\x20one\x20path\x20that\x20DOES\x20clear\x20it\x20is\x20the\x20objection-cycle\x20reset,\x20which\x20fails\x20this\x20gate\x20shut\x20until\x20a\x20fresh\x20ruling).\x20NEVER\x20gate\x20on\x20arb.status\x20—\x20arb_withdraw\x20advances\x20the\x20case\x203→6\x20past\x20the\x2030-day\x20silence\x20window\x20and\x205→6\x20from\x20Finished\x20(Guard+Machine\x20immutable\x20after\x20publish;\x20testnet\x20o10\x20stranded\x201.5\x20WOW);\x20a\x20merchant-favor\x20dismissal\x20edge\x20needs\x20tpl_forward_arb_ruling_dismissed\x20(arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200\x20—\x20fail-closed\x20on\x20the\x20None\x20field),\x20never\x20\x27indemnity\x20some\x20==\x20false\x27.\x20Disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11)\x20—\x20this\x20template\x20has\x20no\x20claim_open\x20node,\x20so\x20the\x20ruling\x20edge\x20departs\x20completed\x20directly;\x20the\x20ruling\x20itself\x20is\x20the\x20evidence,\x20the\x20guard\x20is\x20the\x20proof-of-ruling\x20on\x20the\x20money\x20rail.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20execution\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate):\x20progress.current\x20==\x20closed_cancel\x20(the\x20refund\x20terminal\x20—\x20the\x20free_cancel\x20edge\x20and\x20the\x20arb_refund\x20edge\x20BOTH\x20land\x20here,\x20so\x20one\x20gate\x20covers\x20both\x20entries)\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20one-directional)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20Order.dispute\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20supplier\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'supplier','count':0x2,'mode':'rate','refund_track':'order_anchored','rows':[{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Layer-1\x20free-cancellation\x20full\x20refund\x20to\x20the\x20order\x20anchor\x20via\x20GuardIdentifier(0),\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(node\x20closed_cancel\x20—\x20both\x20the\x20free_cancel\x20edge\x20and\x20the\x20arb_refund\x20edge\x20land\x20there);\x20the\x20four-tier\x20cancellation\x20charges\x20and\x20arbitration\x20refunds\x20are\x20separate\x20allocators\x20created\x20at\x20build\x20time.'},{'track':'settlement','recipient':'entity','recipient_key':'supplier','mode':'surplus','guard_key':'settle_gate','note':'RESIDUAL-EXIT\x20rail,\x20gated\x20by\x20the\x20settle_gate\x20guard\x20(node\x20settled):\x20under\x20the\x20two-tier\x20waterfall\x20the\x20per-segment\x20layer-2\x20Amount\x20legs\x20are\x20pinned\x20to\x20the\x20order\x20total\x20BY\x20CONSTRUCTION,\x20so\x20this\x20rail\x20normally\x20sweeps\x20ZERO\x20—\x20it\x20exists\x20so\x20any\x20residual\x20still\x20exits\x20at\x20the\x20terminal\x20instead\x20of\x20stranding\x20(FUND-EXIT-01\x20/\x20IMMUT-001).\x20NOT\x20an\x20Amount\x20row:\x20layer2_segment_amounts\x20is\x20a\x20per-order\x20plan\x20(a\x20prose\x20fee_param,\x20not\x20a\x20number),\x20and\x20the\x20real\x20per-segment\x20payouts\x20are\x20per-order\x20layer-2\x20Allocations\x20(see\x20build\x20notes);\x20the\x20primary\x20supplier\x20payouts\x20NEVER\x20ride\x20this\x20rail.'},{'track':'settlement','recipient':'entity','recipient_key':'supplier','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20supplier\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_gate/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'DIRECT-SALES\x20REWRITE\x20(this\x20allocator\x20previously\x20routed\x20the\x20FULL\x20order\x20amount\x20through\x20a\x20platform\x20pool\x20and\x20took\x20the\x20remainder\x20via\x20Surplus,\x20which\x20made\x20the\x20take\x20both\x20un-computable\x20pre-order\x20and\x20a\x20mandatory\x20transit\x20point):\x20layer-1\x20(Service-level)\x20refunds\x20free\x20cancellations\x20fully,\x20applies\x20four-tier\x20cancellation\x20charges,\x20and\x20executes\x20arbitration\x20refunds;\x20layer-2\x20(a\x20per-order\x20Allocation\x20created\x20after\x20payment)\x20releases\x20per-segment\x20fixed\x20Amounts\x20to\x20each\x20supplier\x20on\x20redemption.\x20The\x20sum\x20of\x20segment\x20Amounts\x20MUST\x20be\x20pinned\x20to\x20the\x20order\x20total\x20by\x20construction,\x20so\x20there\x20is\x20NO\x20remainder\x20for\x20anyone\x20to\x20take.\x20A\x20supplier\x20fee\x20is\x20modelled\x20as\x20its\x20own\x20explicitly-priced\x20segment\x20order,\x20never\x20as\x20a\x20residual\x20share.\x20Surplus\x20is\x20NOT\x20how\x20a\x20fee\x20is\x20taken\x20—\x20uncapped\x20it\x20sweeps\x20the\x20entire\x20remaining\x20pool.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.'},'key_risk':'Per-segment\x20supplier\x20payout\x20under\x20Service-level\x20static\x20rules\x20—\x20the\x20per-order\x20second-layer\x20Allocation\x20bypasses\x20the\x20Service\x20granularity\x20freeze','build_notes':['Core\x20redesign:\x20a\x20Service-level\x20segment\x20Rate\x20allocator\x20fails\x20contract\x20validation\x20—\x20use\x20a\x20per-order\x20layer-2\x20Allocation\x20(publicly\x20creatable\x20after\x20payment)\x20with\x20per-segment\x20Amount\x20entries','Layer-2\x20Amount\x20entries\x20are\x20exact\x20per-segment\x20figures\x20(per-order\x20customization);\x20sequential\x20execution\x20causes\x20no\x20distortion','Layer-2\x20threshold\x20=\x20ONE\x20segment\x27s\x20Amount\x20(never\x20the\x20order\x20total)\x20—\x20alloc()\x20asserts\x20balance\x20>=\x20threshold\x20before\x20every\x20release\x20(allocation.move\x20EINSUFFICIENT_BALANCE\x20threshold\x20check);\x20a\x20total-sized\x20threshold\x20locks\x20all\x20remaining\x20segments\x20after\x20the\x20first\x20redemption','Per-segment\x20redemption\x20binds\x20its\x20OWN\x20guard\x20instance\x20(supplier\x20WIP\x20+\x20buyer\x20confirm\x20per\x20segment)\x20—\x20a\x20single\x20shared\x20redemption\x20guard\x20could\x20double-fire\x20adjacent\x20segments\x20(no\x20alloc\x20nonce\x20on-chain)','NO\x20PLATFORM\x20TAKE\x20and\x20NO\x20RESIDUAL:\x20under\x20direct\x20sales\x20the\x20merchant\x20keeps\x20the\x20whole\x20booking,\x20so\x20every\x20layer-2\x20leg\x20is\x20an\x20explicitly-priced\x20per-segment\x20Amount\x20and\x20their\x20sum\x20is\x20pinned\x20to\x20the\x20order\x20total\x20BY\x20CONSTRUCTION.\x20Nothing\x20is\x20left\x20over,\x20so\x20there\x20is\x20no\x20remainder\x20for\x20anyone\x20to\x20take\x20—\x20an\x20implicit\x20`order\x20total\x20-\x20segment\x20sums`\x20take\x20was\x20both\x20un-computable\x20before\x20ordering\x20and\x20unbounded\x20(R-ECON-02).\x20If\x20the\x20merchant\x20IS\x20the\x20organizer\x20and\x20charges\x20its\x20own\x20fee,\x20that\x20fee\x20is\x20its\x20own\x20explicitly-priced\x20segment\x20order,\x20not\x20a\x20residual.','SEGMENT-SUM\x20INVARIANT\x20(CR-02\x20family):\x20the\x20layer-2\x20Amount\x20legs\x20are\x20hard\x20subtractions,\x20so\x20sum(per-segment\x20Amounts)\x20must\x20stay\x20at\x20or\x20below\x20the\x20order\x20total\x20—\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20(allocation.move,\x20EINSUFFICIENT_BALANCE)\x20and\x20the\x20Surplus\x20path\x20computes\x20the\x20remainder\x20as\x20u64::safe_sub(max,\x20alloced),\x20both\x20of\x20which\x20abort\x20when\x20the\x20segments\x20were\x20priced\x20above\x20the\x20escrow,\x20stranding\x20the\x20order\x20at\x20a\x20terminal\x20node\x20with\x20no\x20exit.\x20Quote\x20min_booking_amount\x20above\x20the\x20segment\x20sum,\x20or\x20price\x20segments\x20as\x20Rates','Instant-confirmation\x20variant\x20(real-time\x20ticketing):\x20paid\x20->\x20confirmed\x20->\x20redeemed\x20->\x20completed\x20(4\x20nodes)','REVIEW\x20REWARD\x20PLANNED\x20AT\x20SALE\x20TIME\x20(user\x20directive\x202026-10-10):\x20the\x20review\x20Reward\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built,\x20NOT\x20per\x20order\x20—\x20create\x20the\x20Reward\x20object,\x20fund\x20it\x20(fee_param\x20review_reward_pool\x20>=\x20expected\x20orders\x20x\x20per-order\x20amount,\x20INV-4),\x20and\x20bind\x20the\x20claim\x20guard\x20to\x20the\x20Service\x27s\x20reward\x20registry\x20at\x20build\x20time\x20with\x20the\x20standard\x20declared\x20up\x20front:\x20Progress\x20at\x20completed\x20+\x20review\x20content\x20hash,\x20window\x20=\x20review_window_days\x20anchored\x20on\x20order.time,\x20amount\x20=\x20fixed\x20per\x20order;\x20claim\x20policy\x20=\x20once\x20per\x20order\x20(reward_claim_policy,\x20OFN-C1).\x20REPLAY\x20ARMING\x20(SV-2\x20canonical\x20—\x20the\x20authoritative\x20teaching\x20rides\x20the\x20reward_claim\x20guard\x20purpose):\x20the\x20claim\x20guard\x20root\x20MUST\x20include\x20the\x20ORDER-SCOPED\x20record\x20gate\x20logic_not(query_reward_record_exists(object=<reward>,\x20where:{storeFromId:<order\x20slot>}))\x20—\x20entry-stamped\x20+\x20order-scoped\x20where\x20=\x20once\x20per\x20buyer\x20per\x20order\x20(azx7-mn-261014\x20live\x20T8;\x20the\x20old\x20\x27storeFromId\x20filter\x20is\x20inert\x27\x20verdict\x20described\x20UNSTAMPED\x20rewards\x20only);\x20the\x20recipient-only\x20EMPTY\x20where:{}\x20variant\x20is\x20a\x20DELIBERATE\x20once-per-buyer-FOR-LIFE\x20choice\x20and\x20must\x20NEVER\x20back\x20per-order\x20bounty\x20wording\x20(upw\x20F-48);\x20the\x20guard_add\x20ENTRY\x20store_from_id\x20stamp\x20is\x20the\x20DIFFERENT,\x20mandatory\x20field\x20—\x20pin\x20it\x20to\x20the\x20per-order\x20submission\x20slot\x20(slot\x200,\x20the\x20submitted\x20Order)\x20—\x20plus\x20the\x20identity\x20leg\x20Signer\x20==\x20order.owner\x20(the\x20on-chain\x20reward\x20claim\x20entry\x20is\x20permissionless\x20until\x20the\x20chain-side\x20patch,\x20audit-261012\x20B5);\x20the\x20recipient-only\x20gate\x20is\x20once-per-buyer\x20for\x20life;\x20strict\x20once-per-order\x20needs\x20the\x20order-scoped\x20where\x20(SV-2)\x20or\x20the\x20254\x20task-binding\x20Allocation\x20leg;\x20Reward.claim\x20has\x20no\x20protocol-level\x20idempotency\x20and\x20the\x20policy\x20field\x20arms\x20nothing;\x20guard-risk\x20R-X1-14\x20audits\x20the\x20built\x20guard.\x20The\x20FULL\x20terms\x20(node\x20standard\x20+\x20window\x20+\x20amount\x20+\x20remaining\x20pool)\x20MUST\x20be\x20presented\x20to\x20the\x20buyer\x20at\x20quote/buy\x20time\x20—\x20the\x20incentive\x20is\x20marketing\x20and\x20must\x20be\x20perceptible\x20BEFORE\x20the\x20order\x20is\x20placed,\x20never\x20discovered\x20after\x20delivery','Monthly\x20settlement\x20variant:\x20layer-2\x20recipients\x20=\x20one\x20Amount\x20leg\x20per\x20supplier-month,\x20released\x20on\x20that\x20month\x27s\x20guard;\x20batch\x20payout\x20runs\x20as\x20N\x20Amount\x20legs\x20to\x20the\x20SAME\x20named\x20recipients.\x20Do\x20NOT\x20route\x20supplier\x20payouts\x20through\x20an\x20organizer\x20pool\x20—\x20that\x20makes\x20the\x20organizer\x20a\x20mandatory\x20transit\x20waypoint\x20on\x20the\x20merchant\x27s\x20own\x20money\x20(R-ECON-04),\x20and\x20an\x20EMPTY\x20recipient\x20silently\x20pays\x20the\x20deploying\x20AI\x20instead\x20(ts-sdk/packages/wowok/src/w/local/index.ts)','Force-majeure\x20evidence\x20window\x20is\x2048h\x20—\x20expired\x20claims\x20lose\x20standing\x20(prevents\x20retroactive\x20evidence)','TIME\x20PARAMETERS\x20ARE\x20FEE_PARAMS,\x20NEVER\x20HAND-WRITTEN\x20VALUES\x20(KLM-A,\x20R-TIME-PROFILE):\x20every\x20guard\x20time\x20constant\x20(free-cancel\x20window,\x20cancellation\x20tiers,\x20evidence\x20window,\x20ticket\x20validity)\x20MUST\x20be\x20derived\x20from\x20this\x20template\x27s\x20fee_params\x20(free_cancel_hours\x20/\x20evidence_window_hours)\x20at\x20build\x20time\x20—\x20regression/test-compressed\x20values\x20(e.g.\x20a\x202-minute\x20\x27free\x20cancellation\x27\x20or\x20a\x2010-minute\x20\x2790-day\x20ticket\x27)\x20frozen\x20into\x20guards\x20are\x20unfixable\x20after\x20publish\x20(guards\x20freeze,\x20IMMUT-001)\x20and\x20decide\x20real\x20no-show/refund\x20outcomes;\x20the\x20wrap\x20publish\x20gate\x20now\x20BLOCKS\x20a\x20guard\x20whose\x20time\x20constant\x20sits\x20>=100x\x20below\x20the\x20production\x20duration\x20its\x20own\x20description\x20declares\x20(mainnet\x20261014\x20order\x20tests:\x20both\x20compressions\x20shipped\x20live)','Disputes\x20route\x20to\x20Arbitration\x20with\x20an\x20independent\x20Permission\x20(R-M1-11)','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed;\x20run75747\x20F-06):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20The\x20pairing\x20is\x20STRUCTURAL,\x20not\x20prose:\x20the\x20allocator\x20rows\x20SHIP\x20the\x20merchant-recovery\x20allocator\x20(recover_gate\x20row\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20supplier-side\x20Entity).\x20The\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20guard\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20the\x20Machine\x20publish;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','STOP-NODE\x20FUND-EXIT\x20COVERAGE\x20(mandatory\x20pre-publish\x20evaluation,\x20pattern.fund_flow_stop_node_coverage\x20/\x20R-M5-03\x20/\x20R-M5-09):\x20walk\x20EVERY\x20rest\x20state\x20—\x20per-segment\x20redemption\x20(layer-2\x20release,\x20each\x20segment\x20its\x20own\x20guard),\x20settled/completed\x20(any\x20declared\x20residual;\x20with\x20no\x20platform\x20take\x20there\x20is\x20normally\x20none),\x20free-cancel\x20+\x20tiered\x20refunds,\x20claim_open\x20(ruling\x20exit\x20→\x20arb_refund,\x20arb.indemnity-gated)\x20—\x20each\x20needs\x20a\x20defined\x20withdrawal\x20AND\x20refund\x20rule,\x20each\x20mapping\x20guard\x20satisfiable\x20in\x20BOTH\x20directions;\x20Machine\x20+\x20Allocator\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001),\x20an\x20uncovered\x20stop\x20node\x20strands\x20escrow\x20permanently','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20Enforce\x20it\x20with\x20the\x20pattern.required_info_evidence_gate\x20Guard\x20on\x20the\x20FIRST\x20segment\x20redemption\x20(gate\x20order.required_info\x20some\x20BEFORE\x20any\x20segment\x20is\x20redeemed),\x20not\x20by\x20declaring\x20the\x20list;\x20only\x20the\x20PRESENCE\x20is\x20asserted\x20—\x20the\x20recorded\x20address\x20value\x20is\x20never\x20a\x20guard\x20condition,\x20and\x20acceptance\x20of\x20the\x20delivered\x20info\x20is\x20the\x20supplier\x27s\x20confirming\x20forward','GROWTH\x20PRINCIPLE:\x20the\x20two-tier\x20waterfall\x20is\x20ONE\x20instantiation\x20of\x20Move-native\x20primitives\x20for\x20multi-segment\x20fulfillment\x20—\x20derive\x20your\x20own\x20rest\x20states\x20and\x20fund\x20exits\x20from\x20the\x20business\x20rules;\x20nothing\x20here\x20is\x20a\x20fixed\x20vocabulary\x20to\x20copy','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.','AUTOSETTLE\x20FALLBACK\x20EDGE\x20(KLM-FIX-2,\x20klk-mn-261019\x20T1\x20steps\x2011-12):\x20settled\x20carries\x20TWO\x20inbound\x20edges\x20—\x20the\x20buyer/review-side\x20settle\x20path\x20AND\x20the\x20AutoSettleNoReview\x20time-lock\x20fallback\x20(Clock\x20>=\x20completed\x20ENTRY\x20+\x20review_window_days,\x20guard\x20auto_settle_no_review).\x20The\x20two\x20edges\x20are\x20mutually\x20exclusive\x20BY\x20TIME\x20ARITHMETIC:\x20while\x20the\x20review\x20window\x20is\x20open\x20the\x20autosettle\x20leg\x20is\x20false;\x20once\x20the\x20window\x20passes,\x20the\x20fallback\x20is\x20the\x20edge\x20that\x20fires\x20—\x20a\x20buyer\x20who\x20never\x20reviews\x20can\x20no\x20longer\x20lock\x20the\x20merchant\x20out\x20of\x20the\x20settlement\x20rail\x20(the\x20Progress\x20Session\x20has\x20no\x20TTL/timeout).\x20The\x20SAME\x20settlement\x20funding\x20rail\x20is\x20reused\x20(the\x20settle_gate\x20row)\x20—\x20do\x20NOT\x20add\x20a\x20second\x20allocator\x20row\x20for\x20the\x20fallback;\x20the\x20fallback\x20is\x20a\x20second\x20WAY\x20IN\x20to\x20settled,\x20not\x20a\x20second\x20way\x20to\x20pay.\x20Naive-shape\x20lesson\x20from\x20the\x20same\x20run:\x20publishing\x20settled\x20with\x20review\x20as\x20its\x20ONLY\x20inbound\x20edge\x20strands\x20the\x20merchant\x27s\x20payout\x20until\x20the\x20buyer\x20acts,\x20and\x20machines\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001)\x20—\x20the\x20fallback\x20edge\x20cannot\x20be\x20bolted\x20on\x20later.',ZERO_BALANCE_MASKING_NOTE],'fee_params':{'free_cancel_hours':0x18,'cancel_tier_charges_bps':'500/2000/5000/7000','platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'segment_count':0x3,'evidence_window_hours':0x30,'review_window_days':0x7,'layer2_segment_amounts':'resolved\x20per\x20order\x20from\x20the\x20segment\x20plan\x20(pinned\x20to\x20the\x20order\x20total)','min_booking_amount':'must\x20exceed\x20the\x20sum\x20of\x20the\x20per-segment\x20fixed\x20Amounts\x20(layer-2)','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'free_cancel':'order.time\x20(booking\x20time\x20—\x20the\x20ZERO-addition\x20DEFAULT\x20anchor).\x20'+STAY_DATE_CORE,'cancellation_tiers':'order.time\x20(booking\x20time)','force_majeure_evidence':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim\x27,\x20find=last\x20—\x2048h\x20evidence\x20window\x20from\x20the\x20claim,\x20not\x20the\x20incident\x20date)','review_window':'order.time\x20(booking\x20time\x20—\x20the\x20claim\x20window\x20runs\x20review_window_days\x20from\x20the\x20purchase)'},'trust_mechanisms':['R1\x20three\x20refund\x20allocators\x20(free\x20cancellation\x20/\x20tiered\x20balance\x20/\x20arbitration)\x20with\x20order-anchored\x20recipients','R2\x20independent\x20arbitration\x20Permission\x20(structurally\x20eliminates\x20the\x20shared-Permission\x20critical\x20finding)','R3\x20compensation\x20fund\x20>=\x203x\x20max\x20order\x20(guarantee\x20front-pay\x20pool;\x203x\x20=\x20MAX_INDEMNITY_MULTIPLE)','R4\x20per-segment\x20dual\x20confirmation:\x20supplier\x20WIP\x20+\x20buyer\x20confirm\x20or\x20T+3\x20fallback','R5\x20both\x20layers\x20anchor\x20payments\x20to\x20the\x20order','R6\x20layer-1\x20Rate\x20sums\x2010000;\x20layer-2\x20Amount\x20+\x20single\x20Surplus','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20Contact\x20on\x20Service\x20and\x20Machine','R9\x20keepers\x20for\x20layer-2\x20Allocation\x20creation,\x20settlement,\x20and\x20evidence\x20windows','R10\x20tiered\x20cancellation\x20parameters\x20as\x20immutable\x20Guard\x20windows'],'keeper_dependencies':['per-order\x20layer-2\x20Allocation\x20creation\x20after\x20payment','settlement\x20trigger\x20(all\x20segments\x20redeemed\x20or\x20monthly\x20cycle)','T+3\x20redemption\x20confirmation\x20fallback','force-majeure\x20evidence\x20window\x20expiry'],'recommended_role':'both','role_rationale':'Experience\x20suppliers\x20fulfill\x20segments\x20as\x20sub-order\x20takers\x20(supplier\x20path);\x20the\x20merchant/operator\x20runs\x20the\x20two-tier\x20waterfall\x20(merchant\x20path)\x20—\x20and\x20keeps\x20the\x20whole\x20booking,\x20since\x20WoWok\x20extracts\x20nothing.','differences':['Redemption\x20=\x20the\x20only\x20settlement\x20evidence:\x20per-segment\x20supplier\x20WIP\x20+\x20buyer\x20dual\x20confirmation\x20(T+3\x20time-lock\x20fallback)','Two-tier\x20waterfall:\x20Service-level\x20layer-1\x20pool\x20+\x20a\x20per-order\x20layer-2\x20Allocation\x20for\x20per-segment\x20supplier\x20payouts\x20(bypasses\x20the\x20Service\x20granularity\x20freeze)','NO\x20PLATFORM\x20TAKE\x20and\x20NO\x20RESIDUAL:\x20under\x20direct\x20sales\x20the\x20merchant\x20keeps\x20the\x20whole\x20booking,\x20so\x20every\x20layer-2\x20leg\x20is\x20an\x20explicitly-priced\x20per-segment\x20Amount\x20and\x20their\x20sum\x20is\x20pinned\x20to\x20the\x20order\x20total\x20BY\x20CONSTRUCTION.\x20Nothing\x20is\x20left\x20over,\x20so\x20there\x20is\x20no\x20remainder\x20for\x20anyone\x20to\x20take\x20—\x20an\x20implicit\x20`order\x20total\x20-\x20segment\x20sums`\x20take\x20was\x20both\x20un-computable\x20before\x20ordering\x20and\x20unbounded\x20(R-ECON-02).\x20If\x20the\x20merchant\x20IS\x20the\x20organizer\x20and\x20charges\x20its\x20own\x20fee,\x20that\x20fee\x20is\x20its\x20own\x20explicitly-priced\x20segment\x20order,\x20not\x20a\x20residual.'],'user_inputs':['segment_count\x20—\x20per-segment\x20nodes\x20expand\x20to\x20the\x20real\x20trip\x20structure','free_cancel_hours\x20—\x20free-cancellation\x20window\x20before\x20use','cancel_tier_charges_bps\x20—\x20the\x20four\x20tiered\x20cancellation\x20charges','evidence_window_hours\x20—\x20force-majeure\x20evidence\x20window']},{'id':'subscription/creator-membership','industry':'subscription','variant':'creator-membership','product_ref':'patreon','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'subscription','arbitration_mode':'third_party','machine_shape':[{'name':'subscribed','role':'Entry:\x20fan\x20joins;\x20period-1\x20funds\x20are\x20escrowed\x20at\x20buy,\x20so\x20the\x20entry\x20join\x20forwards\x20DIRECTLY\x20to\x20delivering\x20—\x20no\x20period-1\x20charge/confirm_payment\x20spin\x20(OFN\x20J5)','semantic_role':'draft','from':['']},{'name':'charging','role':'RENEWAL\x20LOOP\x20ONLY:\x20fan\x20signs\x20the\x20next-period\x20charge\x20(explicit\x20signature\x20—\x20never\x20auto-charged);\x20period\x201\x20never\x20enters\x20here\x20(already\x20escrowed\x20at\x20buy)','operator':'order_payer','semantic_role':'active','from':['completed']},{'name':'delivering','role':'Payment\x20confirmed\x20(period\x201:\x20escrowed\x20at\x20buy\x20—\x20entry\x20join\x20arrives\x20here\x20directly);\x20creator\x20produces\x20the\x20period\x20content','semantic_role':'active','from':['subscribed','charging']},{'name':'delivered','role':'Period\x20content\x20hash\x20submitted\x20(matches\x20the\x20order\x20item\x20commitment)','semantic_role':'delivered','from':['delivering']},{'name':'reviewed','role':'Fan\x20reviews\x20the\x20creator\x20this\x20period\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed;\x20a\x20fan\x20silent\x20at\x20reviewed\x20still\x20reaches\x20expired\x20via\x20the\x20keeper,\x20so\x20the\x20escrow\x20cannot\x20strand\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'review','guard_key':'review_window'}]},{'name':'completed','role':'Fan\x20confirms\x20receipt\x20—\x20period\x20funds\x20releasable\x20(R4:\x20fan-only\x20confirmation)','operator':'order_payer','semantic_role':'final','from':['delivered',{'prev':'reviewed','forward':'confirm_after_review','operator':'order_payer'}]},{'name':'expired','role':'Period\x20end\x20+\x207-day\x20grace\x20passed\x20without\x20renewal\x20(keeper\x20advances)','semantic_role':'final','from':['delivering','delivered','reviewed']},{'name':'closed_cancel','role':'Fan\x20cancels\x20—\x20next-period\x20effective;\x20pro-rata\x20refund\x20Allocator\x20for\x20unearned\x20periods','operator':'order_payer','semantic_role':'cancelled','from':['subscribed','charging','delivering']}],'guards':[{'template_id':'pattern.identity_check_order_holder','host':'machine','purpose':'Every\x20charge/renewal\x20requires\x20the\x20subscriber\x27s\x20own\x20signature\x20(signer\x20=\x20order\x20owner)\x20—\x20no\x20third\x20party\x20can\x20renew'},{'template_id':'pattern.repository_data_check','host':'machine','purpose':'Per-period\x20content\x20hash\x20required,\x20matching\x20the\x20order\x20item\x20commitment'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_rail','purpose':'Per-period\x20release\x20gate,\x20bound\x20to\x20the\x20settlement\x20allocator\x20rows\x20(guard_key\x20settle_rail):\x20progress.current\x20==\x20completed\x20(fan-only\x20confirmation)\x20+\x20order.service\x20binding\x20—\x20the\x20creator\x20leg\x20and\x20the\x20Rate-0\x20ORDER\x20anchor\x20leg\x20share\x20ONE\x20Allocator\x20(chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator:\x2010000\x20+\x200\x20=\x2010000;\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register).\x20State-based\x20release,\x20not\x20a\x20calendar\x20window'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'refund_gate','purpose':'Refund\x20track\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate).\x20DEFAULT\x20FORM\x20=\x20ONE\x20OR-SUBGUARD\x20over\x20the\x20refundable\x20NODE\x20SET\x20{subscribed,\x20charging,\x20delivering,\x20closed_cancel,\x20expired}\x20—\x20every\x20refundable\x20node\x20AND\x20every\x20terminal\x20without\x20an\x20outgoing\x20edge\x20keeps\x20a\x20fund\x20exit\x20(closed_cancel\x20is\x20MANDATORY:\x20a\x20mid-period\x20cancel\x20with\x20funds\x20still\x20pooled\x20matches\x20no\x20other\x20track\x20and\x20deadlocks\x20the\x20escrow\x20permanently,\x20OFN\x20mainnet\x20#P-02;\x20expired\x20is\x20MANDATORY:\x20omitting\x20it\x20strands\x20every\x20naturally-lapsed\x20escrow)\x20—\x20each\x20leg\x20=\x20AND[signer==order.owner,\x20progress.node==<X>,\x20order.claimed_by\x20some==false\x20(query\x20id\x201570\x20—\x20once\x20a\x20ruling\x20has\x20actually\x20paid,\x20refund\x20is\x20precluded;\x20test/11\x20R2-F1\x20double-dip),\x20order.service\x20binding,\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it)].\x20A\x20signer-only\x20guard\x20lets\x20the\x20subscriber\x20claim\x20even\x20after\x20expiry.\x20The\x20per-node\x20expansion\x20(one\x20dedicated\x20track\x20per\x20node,\x20direct-fan-subscription\x20form)\x20is\x20the\x20EQUIVALENT\x20alternative\x20—\x20resolve\x20the\x20same\x20key\x20per\x20node\x20via\x20guard_resolutions\x20when\x20per-node\x20allocators\x20are\x20wanted;\x20the\x20some==true\x20polarity\x20is\x20the\x20awarded_recover\x20guard'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'awarded_recover','purpose':'Merchant-recovery\x20rail\x20guard,\x20shipped\x20BY\x20DEFAULT\x20(the\x20some==true\x20polarity\x20paired\x20with\x20every\x20refund\x20rail\x27s\x20claimed_by\x20some==false):\x20assert\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20ONLY\x20—\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20so\x20the\x20awarded\x20order\x27s\x20escrow\x20principal\x20still\x20exits,\x20wherever\x20the\x20fan\x20left\x20the\x20order\x20(NEVER\x20completed-only:\x20an\x20awarded\x20order\x20the\x20fan\x20never\x20confirmed\x20sits\x20at\x20delivered\x20and\x20can\x20never\x20reach\x20completed\x20—\x20ptrn-mn-261013\x20T11\x20stranded\x2020\x20WOW\x20that\x20way)\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2,\x20superseding\x20the\x20b9-261015\x20FULL-SET\x20teaching\x20—\x20F-51:\x20keepers\x20advance\x20orders\x20past\x20any\x20pinned\x20node;\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion);\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20awarded_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2;\x20escrow-exit\x20invariant,\x20mainnet\x20az-mn-261007\x20T5)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','purpose':'Fan\x20cancels\x20anytime;\x20effective\x20next\x20period'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'Expiry\x20at\x20period\x20end\x20+\x207-day\x20grace\x20(keeper\x20advances)'},{'template_id':'pattern.allocator_order_anchor','host':'service','purpose':'Per-period\x20settlement\x20anchor:\x20one\x20Rate-0\x20{GuardIdentifier:\x200}\x20row\x20makes\x20the\x20submitted\x20ORDER\x20the\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20from\x20a\x20sibling\x20period\x20order\x20cannot\x20re-release\x20this\x20period\x27s\x20escrow\x20(testnet\x20CR-01)\x20—\x20the\x20anchor\x20row\x20pays\x20nothing'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Fan\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20period\x20delivery,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20confirmation\x20always\x20keeps\x20the\x20unreviewed\x20path\x20delivered\x20->\x20completed,\x20and\x20a\x20fan\x20silent\x20at\x20reviewed\x20still\x20reaches\x20expired\x20via\x20the\x20keeper;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'creator','count':0x3,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'settle_rail','note':'Per-period\x20release\x20to\x20the\x20creator\x20at\x20completed\x20—\x200%\x20platform\x20take\x20—\x20via\x20the\x20settle_rail\x20guard;\x20the\x20anchor\x20leg\x20below\x20shares\x20the\x20same\x20key\x20so\x20both\x20legs\x20form\x20ONE\x20Allocator\x20(chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_rail','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settle_rail\x20allocator\x20(10000\x20+\x200\x20=\x2010000):\x20binds\x20the\x20settlement\x20Guard\x20to\x20this\x20period\x27s\x20own\x20order\x20(slot\x200\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21);\x20pays\x20nothing.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Subscriber\x20refund,\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(one\x20OR-subguard\x20over\x20the\x20refundable\x20NODE\x20SET\x20{subscribed,\x20charging,\x20delivering,\x20closed_cancel,\x20expired}\x20—\x20the\x20per-node\x20dedicated-track\x20expansion\x20is\x20the\x20equivalent\x20alternative\x20via\x20guard_resolutions;\x20the\x20node\x20gate\x20is\x20the\x20requirement;\x20signer==order.owner\x20is\x20optional\x20on\x20an\x20order-anchored\x20rail\x20since\x20the\x20recipient\x20is\x20already\x20hard-bound,\x20and\x20a\x20signer-only\x20track\x20is\x20never\x20sufficient),\x20covering\x20every\x20refundable\x20node\x20AND\x20every\x20terminal\x20without\x20an\x20outgoing\x20edge,\x20replay-protected\x20by\x20the\x20identifier-255\x20\x27period-<N>\x27\x20equality\x20leg\x20(NEVER\x20254\x20on\x20a\x20refund\x20rail\x20—\x20OFN\x20#P-04).\x20Each\x20refund\x20rail\x20arms\x20order.claimed_by\x20some\x20==\x20false\x20BY\x20DEFAULT\x20—\x20once\x20an\x20award\x20has\x20actually\x20paid\x20from\x20the\x20fund,\x20refund\x20is\x20precluded\x20permanently\x20(the\x20some\x20==\x20true\x20polarity\x20is\x20the\x20awarded_recover\x20row\x20below;\x20exactly\x20one\x20leg\x20can\x20ever\x20pass).'},{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'awarded_recover','note':'Merchant-recovery\x20rail,\x20shipped\x20by\x20DEFAULT\x20(paired\x20with\x20the\x20refund\x20rail\x20via\x20the\x20claimed_by\x20none/some\x20split):\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20+\x20node\x20gate\x20EXPANDED\x20PER\x20NODE\x20like\x20the\x20refund\x20family\x20(every\x20node\x20that\x20can\x20host\x20escrow\x20at\x20award\x20time\x20—\x20subscribed/charging/delivering/delivered/reviewed/closed_cancel/expired;\x20binding\x20recovery\x20to\x20completed\x20alone\x20strands\x20every\x20awarded\x20order\x20the\x20fan\x20never\x20confirmed,\x20ptrn-mn-261013\x20T11),\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20—\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20refund/recovery\x20legs\x20can\x20ever\x20pass\x20(escrow-exit\x20invariant,\x20mainnet\x20az-mn-261007).'}],'description':'0%\x20platform\x20take:\x20per-period\x20release\x20Rate\x2010000\x20to\x20the\x20creator\x20at\x20completed,\x20with\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20so\x20the\x20settlement\x20Guard\x20binds\x20the\x20period\x27s\x20own\x20order;\x20refund\x20Rate\x2010000\x20to\x20the\x20subscriber\x20on\x20node-gated\x20tracks\x20(AND[progress.node==<X>]\x20per\x20refundable\x20node\x20—\x20the\x20node\x20gate\x20is\x20the\x20requirement,\x20the\x20signer==order.owner\x20leg\x20is\x20optional\x20since\x20the\x20order-anchored\x20recipient\x20is\x20already\x20hard-bound;\x20coverage\x20=\x20every\x20refundable\x20node\x20AND\x20every\x20terminal\x20without\x20an\x20outgoing\x20edge,\x20expired\x20included);\x20threshold\x20MUST\x20be\x200\x20(a\x20positive\x20threshold\x20locks\x20small\x20residual\x20balances\x20after\x20partial\x20refunds);\x20ONCE\x20SEMANTICS:\x20once\x20=\x20per-rail\x20opt-in\x20legs\x20(254/255)\x20—\x20rails\x20whose\x20guards\x20declare\x20no\x20once\x20leg\x20are\x20REPEATABLE\x20by\x20design\x20(payroll\x20form);\x20the\x20framework\x20has\x20no\x20order-level\x20default.\x20REPLAY\x20PROTECTION\x20(OFN\x20#P-04,\x20mainnet-proven\x20261010):\x20every\x20rail\x20—\x20settlement\x20AND\x20refund\x20—\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count]);\x20NEVER\x20arm\x20254\x20on\x20a\x20refund\x20rail\x20(payment_info.for_object\x20never\x20changes,\x20so\x20the\x20OnceKey\x20repeats\x20every\x20period;\x20a\x20period-2+\x20full-drain\x20retry\x20hits\x20the\x20EMPTIED-POOL\x20abort\x2014\x20FIRST\x20—\x20EZERO\x20at\x20allocation.move:418\x20precedes\x20once\x20bookkeeping\x20—\x20and\x2016\x20only\x20surfaces\x20with\x20a\x20residual\x20balance)'},'key_risk':'Auto-renew\x20trap\x20—\x20every\x20period\x20requires\x20an\x20explicit\x20subscriber\x20signature;\x20keepers\x20may\x20remind\x20and\x20expire\x20but\x20can\x20never\x20charge','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','ENTRY\x20EDGE\x20IS\x20MANDATORY:\x20wire\x20an\x20explicit\x20pair\x20{prev_node:\x22\x22,\x20forwards:[Join]}\x20into\x20\x27subscribed\x27\x20—\x20Progress\x20starts\x20at\x20current=\x22\x22\x20and\x20the\x20first\x20hop\x20only\x20exists\x20if\x20this\x20pair\x20exists\x20(orders\x20arrive\x20dead\x20without\x20it;\x20the\x20publish\x20gate\x20blocks\x20machines\x20without\x20an\x20entry\x20pair)','PERIOD-1\x20SKIPS\x20CHARGING:\x20period-1\x20funds\x20are\x20escrowed\x20at\x20buy,\x20so\x20wire\x20the\x20join\x27s\x20onward\x20edge\x20from\x20\x27subscribed\x27\x20DIRECTLY\x20to\x20\x27delivering\x27\x20—\x20a\x20period-1\x20charge/confirm_payment\x20spin\x20is\x20a\x20dead\x20spin\x20(the\x20payment\x20it\x20would\x20confirm\x20is\x20already\x20in\x20the\x20pool).\x20The\x20\x27charging\x27\x20node\x20is\x20reachable\x20ONLY\x20via\x20the\x20renewal\x20loop','DOUBLE-DIP\x20GUARD:\x20refund\x20tracks\x20must\x20be\x20node-gated\x20(AND[progress.node==<X>],\x20one\x20track\x20per\x20refundable\x20node\x20INCLUDING\x20closed_cancel\x20AND\x20expired\x20—\x20omitting\x20closed_cancel\x20deadlocks\x20the\x20escrow\x20on\x20a\x20mid-period\x20cancel\x20and\x20omitting\x20expired\x20strands\x20every\x20naturally-lapsed\x20escrow,\x20D-30\x20family;\x20the\x20signer==order.owner\x20leg\x20is\x20optional\x20—\x20the\x20order-anchored\x20recipient\x20is\x20already\x20hard-bound)\x20and\x20arm\x20the\x20identifier-255\x20\x27period-<N>\x27\x20equality\x20leg\x20for\x20replay\x20protection\x20(NEVER\x20the\x20identifier-254\x20once-for-object\x20slot\x20on\x20a\x20refund\x20rail);\x20an\x20ungated\x20signer-only\x20refund\x20track\x20lets\x20the\x20subscriber\x20claim\x20escrow\x20after\x20expiry.\x20The\x20claimed_by\x20pairing\x20ships\x20in\x20the\x20rows\x20BY\x20DEFAULT\x20—\x20refund\x20rails\x20carry\x20some==false,\x20the\x20recovery\x20row\x20carries\x20some==true;\x20adjust\x20only\x20if\x20the\x20business\x20model\x20differs\x20(order.move:213-234\x20deliberately\x20ships\x20no\x20receive-gate,\x20so\x20nothing\x20else\x20closes\x20a\x20ruling-paid\x20case)','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass.\x20The\x20alternative\x20closure\x20with\x20the\x20identical\x20guarantee\x20lives\x20on\x20a\x20different\x20axis:\x20a\x20SERIAL\x20claim_window\x20node\x20between\x20delivery\x20and\x20payout\x20(state-based\x20release\x20—\x20payout\x20waits\x20out\x20the\x20dispute\x20window).\x20Pick\x20ONE\x20axis\x20per\x20rail\x20family;\x20both\x20are\x20chain-validated\x20(ptrn2\x20T6/T14)','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20tracks\x20pay\x20GuardIdentifier(0)\x20—\x20funds\x20land\x20ON\x20the\x20Order\x20object,\x20not\x20in\x20the\x20subscriber\x27s\x20wallet;\x20the\x20subscriber\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Order-anchored\x20payout\x20is\x20deliberate\x20(the\x20refund\x20stays\x20bound\x20to\x20the\x20order\x20even\x20across\x20wallet\x20rotation);\x20the\x20second\x20step\x20must\x20be\x20surfaced\x20in\x20the\x20storefront\x20UX','REPLAY\x20PROTECTION\x20(mainnet-proven):\x20every\x20rail\x20—\x20settlement\x20AND\x20refund\x20—\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count];\x20the\x20history\x20count\x20is\x20monotonic\x20and\x20unforgeable,\x20so\x20each\x20period\x20gets\x20a\x20fresh\x20OnceKey).\x20NEVER\x20arm\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20the\x20order\x27s\x20payment\x20intake\x20never\x20rewrites,\x20so\x20the\x20OnceKey\x20is\x20identical\x20in\x20every\x20period\x20and\x20refund\x20period\x202+\x20strands\x20the\x20escrow\x20—\x20the\x20255\x20period-<N>\x20leg\x20above\x20is\x20the\x20PRIMARY\x20protection.\x20OBSERVABILITY\x20(diagnose\x20by\x20this,\x20T9):\x20a\x20full-drain\x20retry\x20shows\x20the\x20EMPTIED-POOL\x20abort\x20(14)\x20FIRST\x20because\x20EZERO\x20(allocation.move:418)\x20precedes\x20once\x20bookkeeping\x20—\x2014\x20on\x20a\x20refund\x20replay\x20IS\x20the\x20254-replay\x20signature;\x2016\x20(E_ONCE_TRIGGERED)\x20only\x20surfaces\x20when\x20a\x20residual\x20balance\x20keeps\x20the\x20pool\x20alive','Per-period\x20signature\x20renewal\x20collapses\x20the\x20bind-card/auto-charge/retry/grace/drop\x20black\x20box\x20into\x20one\x20mechanism:\x20one\x20explicit\x20subscriber\x20signature\x20per\x20period','Renewal\x20=\x20a\x20single\x20subscriber\x20transaction:\x20next-period\x20payment\x20into\x20the\x20Allocation\x20pool\x20+\x20pool\x20recharge\x20+\x20Machine\x20loop\x20back\x20to\x20charging','The\x20renew\x20forward\x20binds\x20the\x20subscriber\x20as\x20operator;\x20the\x20charge\x20guard\x20checks\x20signer\x20=\x20order\x20owner\x20—\x20no\x20third\x20party\x20(creator/keeper)\x20can\x20renew\x20on\x20the\x20subscriber\x27s\x20behalf','The\x20renewal\x20loop\x20edge\x20is\x20legal:\x20the\x20charging\x20node\x20carries\x20two\x20entry\x20pairs\x20(initial\x20+\x20loop);\x20node\x20revisits\x20are\x20unrestricted','RENEWAL\x20MUST\x20RE-FUND:\x20the\x20contract\x20does\x20not\x20verify\x20new\x20escrow\x20on\x20a\x20loop\x20back-edge\x20—\x20use\x20the\x20order\x20call\x27s\x20`order_renew`\x20field,\x20ONE\x20PTB\x20that\x20pays\x20the\x20period\x20amount\x20into\x20the\x20Allocation\x20and\x20advances\x20the\x20renew\x20forward\x20atomically\x20(fund\x20+\x20record\x20+\x20advance\x20in\x20a\x20single\x20step,\x20no\x20unfunded-advance\x20window);\x20a\x20renewal\x20loop\x20without\x20a\x20fund\x20gate\x20lets\x20zero-value\x20periods\x20cycle\x20forever)','threshold\x20must\x20be\x200\x20—\x20small\x20subscription\x20amounts\x20+\x20partial\x20refunds\x20would\x20otherwise\x20lock\x20the\x20residual\x20below\x20a\x20positive\x20threshold','Long\x20subscriptions\x20(>\x2024\x20periods):\x20prefer\x20per-period\x20new\x20Orders\x20to\x20bound\x20progress-history\x20growth','Disputes\x20route\x20to\x20Arbitration\x20(default\x20open\x20voting)\x20—\x20award\x20cap\x20is\x203x\x20the\x20period\x20amount;\x20multi-period\x20disputes\x20split\x20per\x20period\x20(R-M1-11)','EXPIRED\x20DUAL\x20EXIT:\x20expired\x20is\x20terminal\x20with\x20TWO\x20inbound\x20edges\x20(delivering\x20/\x20delivered)\x20and\x20the\x20default\x20refund\x20rail\x20above\x20covers\x20it\x20(subscriber-protective:\x20no\x20renewal\x20=\x20no\x20entitlement).\x20If\x20the\x20business\x20must\x20pay\x20the\x20CREATOR\x20for\x20delivered-but-not-renewed\x20periods,\x20do\x20NOT\x20try\x20to\x20gate\x20one\x20node\x20two\x20ways\x20—\x20split\x20it\x20into\x20lapsed_unpaid\x20(from\x20delivering,\x20refund\x20rail)\x20and\x20lapsed_delivered\x20(from\x20delivered,\x20settle\x20rail)\x20exactly\x20as\x20the\x20localnet\x20T6\x20dual-terminal\x20design;\x20one\x20node\x20+\x20one\x20rail\x20can\x20only\x20serve\x20one\x20payee','ARBITRATION\x20READINESS\x20(two\x20sides\x20of\x20the\x20role\x20boundary\x20—\x20a\x20dispute\x20deadlocks\x20on\x20first\x20use\x20unless\x20both\x20hold):\x20(1)\x20MACHINE\x20side\x20(yours)\x20—\x20grant\x20the\x20arbitrator\x27s\x20address\x20the\x20Machine\x27s\x20arbitration\x20permission\x20index\x20(1003-family)\x20on\x20the\x20SERVICE\x27s\x20Permission;\x20without\x20it\x20the\x20arbitrator\x20cannot\x20advance\x20award\x20forwards\x20(permission::E_PERMISSION_DENIED,\x20T4).\x20(2)\x20VENUE\x20side\x20(the\x20arbitrator\x27s)\x20—\x20the\x20venue\x27s\x20vote/rule/confirm\x20permissions\x20and\x20its\x20unpause\x20live\x20on\x20the\x20ARBITRATOR\x27s\x20own\x20Arbitration\x20Permission;\x20the\x20Service\x20owner\x20has\x20no\x20admin\x20there\x20(builder\x20isolation,\x20T5),\x20so\x20your\x20duty\x20is\x20SELECTION,\x20not\x20configuration:\x20verify\x20the\x20venue\x20is\x20operational\x20(unpaused,\x20voting\x20armed)\x20before\x20binding.\x20Single-arbitrator\x20default\x20=\x20trusting\x20that\x20one\x20address\x20for\x20both\x20execution\x20and\x20verdict;\x20prefer\x20a\x20roster\x20+\x20threshold\x20for\x20a\x20neutral\x20bench','Honor-tier\x20Rewards:\x20claim\x20guard\x20=\x20historical\x20period\x20count\x20>=\x20N\x20—\x20AND\x20a\x20PAID-STATE\x20leg\x20on\x20any\x20bounty-style\x20reward\x20(good-review\x20bounty\x20double-dip,\x20ptrn2\x20A1:\x20a\x20FULLY\x20refunded\x20order\x20still\x20rides\x20delivered/reviewed,\x20so\x20rating\x20\x275\x27\x20+\x20bounty\x20claim\x20both\x20succeed\x20unless\x20a\x20guard\x20reads\x20settlement\x20evidence):\x20pair\x20every\x20reward\x20claim\x20with\x20the\x20settle\x20rail\x27s\x20evidence\x20—\x20a\x20repository\x20settle-evidence\x20row\x20written\x20at\x20completed,\x20or\x20an\x20allocation-payment\x20witness\x20—\x20so\x20refunded\x20orders\x20can\x20never\x20claim.\x20Pin\x20store_from_id\x20on\x20any\x20record-consuming\x20claim\x20leg\x20(unstamped\x20records\x20match\x20NO\x20store_from_id\x20predicate\x20—\x20the\x20replay\x20gate\x20is\x20silently\x20dead;\x20slot-less\x20guards\x20can\x20only\x20dedup\x20lifetime-once\x20via\x20an\x20empty-where\x20record\x20count/exists\x20leg,\x20and\x20re-adding\x20the\x20SAME\x20guard\x20overwrites\x20its\x20slot\x20in\x20place,\x20so\x20a\x20legacy\x20pool\x20is\x20repaired\x20by\x20re-adding\x20the\x20guard\x20with\x20the\x20stamp\x20pinned,\x20no\x20new\x20guard\x20needed).\x20PER-ORDER\x20ENTITLEMENT\x20ROW\x20(WINDOW-1\x20tier-predicate\x20half):\x20a\x20tier-scoped\x20promise\x20(\x27tier\x20X\x20enjoys\x20Y\x27)\x20becomes\x20constructive\x20by\x20writing\x20a\x20per-order\x20entitlement\x20row\x20at\x20settle\x20time\x20—\x20key\x20=\x20order\x20id,\x20value\x20=\x20U256\x20tier\x20id,\x20riding\x20the\x20SAME\x20settle-evidence\x20write\x20—\x20and\x20adding\x20a\x20keys_where\x20presence\x20leg\x20on\x20that\x20row\x20to\x20the\x20tier\x27s\x20claim\x20guard;\x20the\x20honor\x20guard\x27s\x20historical\x20period\x20count\x20is\x20tier-agnostic\x20by\x20construction,\x20so\x20this\x20row\x20is\x20the\x20ONLY\x20tier\x20evidence\x20a\x20guard\x20predicate\x20can\x20read\x20—\x20upgrade\x20the\x20tier\x20wording\x20to\x20constructive\x20exactly\x20when\x20the\x20row\x20+\x20leg\x20exist,\x20else\x20drop\x20the\x20wording.\x20Word\x20promises\x20to\x20match\x20the\x20guard:\x20Reward\x20objects\x20are\x20Service-level\x20and\x20sales\x20rows\x20carry\x20no\x20reward\x20field,\x20so\x20a\x20tier-scoped\x20promise\x20(\x27tier\x20X\x20earns\x20Y\x27)\x20without\x20a\x20guard\x20leg\x20reading\x20per-order\x20repository\x20evidence\x20is\x20unenforceable\x20decoration\x20—\x20either\x20add\x20the\x20predicate\x20or\x20drop\x20the\x20wording.\x20MIGRATION\x20DISCLOSURE:\x20guards\x20freeze\x20at\x20publish\x20—\x20reward\x20pools\x20armed\x20before\x20this\x20pairing\x20lack\x20the\x20leg\x20and\x20are\x20NOT\x20retro-patched;\x20audit\x20and\x20re-arm\x20existing\x20bounty\x20pools\x20(re-add\x20the\x20same\x20guard\x20with\x20the\x20slot\x20pinned)','Anti-dark-pattern\x20selling\x20point:\x20\x27explicit\x20signature\x20every\x20period\x20—\x20no\x20silent\x20auto-renewal,\x20no\x20card-on-file\x20black\x20box\x27\x20is\x20a\x20trust\x20differentiator;\x20surface\x20it\x20in\x20the\x20listing\x20WIP\x20promise\x20and\x20onboarding\x20copy','FREE\x20TIER\x20RECIPE:\x20a\x20$0\x20membership\x20is\x20a\x20100%-waiver\x20coupon\x20(RATES\x2010000)\x20on\x20a\x20positively-priced\x20sale\x20—\x20FIRST\x20PERIOD\x20ONLY:\x20coupons\x20are\x20SINGLE-USE\x20(burned\x20at\x20buy)\x20and\x20the\x20renewal\x20path\x20has\x20NO\x20discount\x20hook\x20(the\x20renew\x20PTB\x20pays\x20payment-create\x20full\x20price;\x20the\x20order\x27s\x20discount\x20field\x20is\x20fixed\x20at\x20buy\x20and\x20never\x20re-read),\x20so\x20a\x20per-period\x20100%-coupon\x20renew\x20is\x20IMPOSSIBLE\x20by\x20design\x20(F-RENEW-NO-COUPON)\x20—\x20disclose\x20the\x20free\x20tier\x20as\x20first-period-only.\x20A\x20zero-value\x20order\x20still\x20walks\x20the\x20full\x20machine\x20lifecycle\x20(localnet\x20T8),\x20and\x20settlement\x20on\x20an\x20unfunded/emptied\x20pool\x20ABORTS\x20EZERO-14\x20(MoveAbort\x2014)\x20with\x20FULL\x20rollback\x20—\x20pool\x20untouched,\x20once-key\x20unconsumed;\x20it\x20is\x20NOT\x20a\x20silent\x20no-op.\x20To\x20re-settle\x20a\x20refunded/emptied\x20period,\x20fund\x20the\x20Allocation\x20via\x20payment\x20create\x20for_object=<order>\x20(abort-then-recover\x20leaves\x20an\x20immutable\x20two-payment\x20audit\x20trail)','DISCOUNT\x20RENEWAL\x20DISCLOSURE\x20(obligation):\x20a\x20coupon\x20discounts\x20only\x20the\x20buy\x20it\x20is\x20redeemed\x20at\x20—\x20every\x20renewal\x20re-prices\x20from\x20the\x20SKU\x20price\x20(no\x20discount\x20hook\x20exists\x20on\x20the\x20renew\x20path),\x20so\x20\x27first\x20period\x20X%\x20off,\x20then\x20standard\x27\x20MUST\x20be\x20disclosed\x20in\x20the\x20listing/WIP\x20promise\x20BEFORE\x20purchase\x20(anti-dark-pattern).\x20Standing\x20renewal\x20discounts\x20are\x20NOT\x20constructible\x20on-chain\x20—\x20never\x20promise\x20one','RAIL\x20SNAPSHOT\x20AT\x20BUY\x20(append\x20mechanics):\x20fund\x20rails\x20snapshot\x20at\x20buy\x20—\x20an\x20order\x27s\x20plan\x20is\x20frozen\x20from\x20the\x20allocator\x20state\x20at\x20purchase;\x20later\x20allocator\x20edits\x20never\x20touch\x20existing\x20orders\x20(buyer\x20protection)\x20and\x20CANNOT\x20add\x20a\x20relief\x20rail\x20to\x20live\x20orders\x20(remedies\x20for\x20existing\x20orders\x20ride\x20compensation/arbitration,\x20never\x20an\x20append).\x20Appending\x20is\x20a\x20pure-extension\x20prefix:\x20every\x20appended\x20allocator\x20requires\x20a\x20description,\x20and\x20with\x20no\x20Surplus\x20row\x20the\x20appended\x20Rates\x20must\x20sum\x20to\x20exactly\x2010000\x20(the\x20chain\x20rejects\x20otherwise)','WIP\x20PROMISE\x20FILE\x20MECHANICS:\x20the\x20listing\x20WIP\x20is\x20the\x20binding\x20commitment\x20file\x20—\x20rebinding\x20has\x20NO\x20per-item\x20op:\x20sales\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend;\x20stock\x20values\x20are\x20ABSOLUTE,\x20not\x20deltas;\x20removal\x20is\x20immediate\x20and\x20irreversible)\x20or\x20op:add\x20creates\x20a\x20NEW\x20SKU;\x20a\x20buyer\x20leaving\x20wip_hash\x20empty\x20auto-fills\x20from\x20the\x20listing\x20at\x20purchase\x20with\x20on-chain\x20verification,\x20while\x20an\x20explicit\x20hash\x20pins\x20the\x20purchase-time\x20file\x20(later\x20swaps\x20cannot\x20retroactively\x20change\x20a\x20pinned\x20order).\x20Schedule\x20promise\x20updates\x20as\x20op:set\x20full\x20rewrites,\x20never\x20in-place\x20edits','EVIDENCE\x20TIERING\x20BY\x20NETWORK:\x20ciphertext\x20→\x20sealed\x20transcript\x20→\x20signature\x20→\x20on-chain\x20proof\x20anchor\x20runs\x20on\x20any\x20network,\x20but\x20guard-verified\x20messages\x20are\x20MAINNET-only,\x20and\x20the\x20official\x20key\x20history\x20is\x20PARTITIONED\x20by\x20network\x20—\x20each\x20server\x20key\x20belongs\x20to\x20its\x20home\x20partition\x20(mainnet/testnet/localnet)\x20and\x20officialness\x20is\x20scored\x20in\x20that\x20partition\x20only\x20(serverKeysOfficialNetwork\x20names\x20it);\x20on\x20testnet/localnet\x20treat\x20the\x20chain\x20as\x20rehearsal,\x20and\x20for\x20a\x20MAINNET\x20case\x20the\x20ONLY\x20network-level\x20truth\x20is\x20an\x20on-chain\x20Proof\x20anchor\x20(proof_message\x20re-anchored\x20on\x20mainnet)\x20—\x20a\x20file-level\x20verdict\x20from\x20a\x20non-mainnet\x20partition\x20never\x20grounds\x20a\x20mainnet\x20ruling','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'evidence_refs':['test/11\x20R1-F1\x20—\x20orders\x20arrive\x20dead\x20when\x20the\x20entry\x20pair\x20is\x20missing','OFN\x20J5\x20—\x20period-1\x20is\x20already\x20escrowed\x20at\x20buy;\x20a\x20charge/confirm\x20spin\x20is\x20dead','OFN\x20#P-02\x20—\x20a\x20mid-period\x20cancel\x20deadlocks\x20the\x20escrow\x20without\x20the\x20closed_cancel\x20refund\x20rail','test/11\x20R2-F1\x20—\x20double-dip:\x20an\x20ungated\x20signer-only\x20refund\x20track\x20claims\x20escrow\x20after\x20a\x20ruling\x20paid','az-mn-261007\x20T5\x20—\x202.38\x20escrow\x20stranded\x20at\x20reviewed\x20without\x20the\x20merchant-recovery\x20rail','OFN\x20#P-03\x20—\x20two-step\x20refund\x20payout:\x20funds\x20land\x20on\x20the\x20Order\x20object','OFN\x20#P-04\x20—\x20arming\x20254\x20on\x20a\x20refund\x20rail\x20aborts\x20period\x202+\x20(E_ONCE_TRIGGERED\x2016)','test/11\x20R2-F3\x20—\x20zero-value\x20periods\x20cycle\x20on\x20an\x20unfunded\x20renewal\x20loop'],'fee_params':{'platform_take_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'grace_days':0x7,'dispute_window_days':0xe,'renewal_reminder_days':0x3,'threshold':0x0,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'grace_expiry':'progress.history.time\x20(id\x201280,\x20next_node=\x27charging\x27,\x20find=last\x20—\x20expiry\x20at\x20period\x20end\x20+\x20grace)','dispute_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20delivery\x20ENTRY\x20timestamp\x20of\x20the\x20period\x20—\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','renewal_reminder':'off-chain\x20keeper\x20reminder\x20(no\x20on-chain\x20timestamp\x20anchor)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20(Rate\x2010000\x20to\x20subscriber,\x20signer-locked)','R2\x20independent\x20arbitration\x20Permission\x20(contract-enforced\x20separation).\x20Venue\x20SLA\x20expectation\x20(a\x20SELECTION\x20criterion\x20—\x20the\x20dispute\x20window\x20is\x20the\x20arbitrator\x27s\x20order,\x20not\x20a\x20guard\x20this\x20build\x20mounts):\x20prefer\x20venues\x20opening\x20cases\x20within\x2014\x20days\x20of\x20delivery','R3\x20compensation\x20fund\x20with\x20award\x20recipient\x20hard-bound\x20to\x20the\x20order\x20owner','R4\x20receipt\x20confirmation\x20by\x20the\x20subscriber\x20only\x20—\x20creator\x20self-sign\x20forbidden','R5\x20period\x20payments\x20anchored\x20to\x20the\x20order\x20Allocation','R6\x20Rate\x20=\x2010000\x20single\x20recipient;\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20renewal\x20reminders\x20+\x20expiry\x20ONLY\x20(no\x20charge\x20authority)','R10\x20period\x20price\x20embedded\x20in\x20the\x20Sale;\x20no\x20silent\x20auto-charge\x20parameter\x20exists'],'keeper_dependencies':['renewal\x20reminder\x20(period\x20end\x20-\x203\x20days)','expiry\x20trigger\x20(period\x20end\x20+\x20grace)','NO\x20auto-charge\x20authority\x20by\x20design'],'recommended_role':'merchant','role_rationale':'Creators\x20own\x20the\x20subscription\x20Service\x20and\x20keep\x20100%\x20of\x20period\x20funds\x20(0%\x20take);\x20honor\x20tiers\x20are\x20Reward\x20objects\x20on\x20the\x20same\x20Service.','differences':['Tiered\x20membership:\x20honor-tier\x20Reward\x20objects\x20(claim\x20guard\x20=\x20historical\x20period\x20count\x20>=\x20N)\x20layer\x20on\x20top\x20of\x20the\x20base\x20subscription','0%\x20platform\x20take\x20on\x20the\x20base\x20template\x20—\x20revenue\x20extension\x20points\x20are\x20Reward/discount\x20add-ons\x20rather\x20than\x20a\x20take\x20rate','Per-period\x20explicit-signature\x20renewal;\x20keepers\x20remind\x20and\x20expire\x20but\x20can\x20never\x20charge'],'user_inputs':['Period\x20price\x20(embedded\x20in\x20the\x20Sale\x20structure)','grace_days\x20—\x20renewal\x20grace\x20window\x20before\x20expiry','dispute_window_days\x20—\x20dispute\x20opening\x20window\x20after\x20delivery','renewal_reminder_days\x20—\x20keeper\x20reminder\x20lead\x20time','Honor-tier\x20count\x20and\x20per-tier\x20claim\x20thresholds']},{'id':'subscription/direct-fan-subscription','industry':'subscription','variant':'direct-fan-subscription','product_ref':'onlyfans','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'subscription','arbitration_mode':'third_party','machine_shape':[{'name':'subscribed','role':'Entry:\x20fan\x20joins\x20(age-verified\x20via\x20Passport);\x20period-1\x20funds\x20are\x20escrowed\x20at\x20buy,\x20so\x20the\x20entry\x20join\x20forwards\x20DIRECTLY\x20to\x20delivering\x20—\x20no\x20period-1\x20charge/confirm_payment\x20spin\x20(OFN\x20J5)','semantic_role':'draft','from':['']},{'name':'charging','role':'RENEWAL\x20LOOP\x20ONLY:\x20fan\x20signs\x20the\x20next-period\x20charge\x20(explicit\x20signature\x20—\x20never\x20auto-charged);\x20period\x201\x20never\x20enters\x20here\x20(already\x20escrowed\x20at\x20buy)','operator':'order_payer','semantic_role':'active','from':[{'prev':'completed','forward':'renew','operator':'order_payer','guard_key':'period_charge'}]},{'name':'delivering','role':'Payment\x20confirmed\x20(period\x201:\x20escrowed\x20at\x20buy\x20—\x20entry\x20join\x20arrives\x20here\x20directly);\x20creator\x20produces\x20the\x20period\x20content\x20/\x20response\x20record','semantic_role':'active','from':['subscribed','charging']},{'name':'delivered','role':'Period\x20content\x20hash\x20submitted\x20(matches\x20the\x20order\x20item\x20commitment)','semantic_role':'delivered','from':[{'prev':'delivering','forward':'submit_content','permission_index':0x3e8,'guard_key':'content_hash'}]},{'name':'reviewed','role':'Fan\x20reviews\x20the\x20creator\x20this\x20period\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM\x20—\x20row\x20policy\x20is\x20single-typed,\x20so\x20each\x20review\x20event\x20writes\x20TWO\x20rows\x20keyed\x20to\x20the\x20same\x20order:\x20a\x20U256\x20rating\x20row\x201-5,\x20the\x20range-queryable\x20column\x20via\x20keys_where\x20numeric\x20Range,\x20plus\x20a\x20String\x20comment\x20row,\x20presence-queryable;\x20review\x20text\x20lives\x20on-chain\x20as\x20its\x20own\x20row,\x20never\x20in\x20progress\x20history\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed;\x20a\x20fan\x20silent\x20at\x20reviewed\x20still\x20reaches\x20expired\x20via\x20the\x20keeper\x20(review\x20implies\x20delivered\x20—\x20the\x20undelivered\x20exclusion\x20below\x20is\x20preserved),\x20so\x20the\x20escrow\x20cannot\x20strand\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'review','guard_key':'review_window'}]},{'name':'completed','role':'Fan\x20confirms\x20receipt\x20—\x20state-machine\x20release\x20replaces\x20the\x20calendar\x20freeze\x20(R4:\x20fan-only\x20confirmation)','operator':'order_payer','semantic_role':'final','from':[{'prev':'delivered','forward':'confirm','operator':'order_payer','guard_key':'release_state'},{'prev':'reviewed','forward':'confirm_after_review','operator':'order_payer','guard_key':'release_after_review'}]},{'name':'expired','role':'Period\x20delivered\x20but\x20end\x20+\x207-day\x20grace\x20passed\x20without\x20renewal\x20(keeper\x20advances,\x20permission\x201002);\x20the\x20lapsed\x20period\x20settles\x20to\x20the\x20creator\x20via\x20the\x20expired_settle\x20rail','semantic_role':'final','from':[{'prev':'delivered','forward':'expire','permission_index':0x3ea,'guard_key':'period_expiry'},{'prev':'reviewed','forward':'expire_after_review','permission_index':0x3ea,'guard_key':'period_expiry'}]},{'name':'closed_cancel','role':'Fan\x20cancels\x20—\x20next-period\x20effective;\x20per-node\x20refund\x20Allocator\x20rails','operator':'order_payer','semantic_role':'cancelled','from':['subscribed','charging','delivering']}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Age-verification\x20buy\x20gate\x20(R10):\x20purchase\x20requires\x20a\x20Passport\x20with\x20qualifying\x20age\x20credentials\x20(practically:\x20the\x20buyer\x20allowlist\x20—\x20the\x20chain\x20has\x20no\x20credential*\x20query,\x20only\x20has_verified).\x20compare\x20against\x20context(Signer):\x20the\x20Order\x20does\x20not\x20exist\x20at\x20buy\x20time,\x20so\x20order.*\x20legs\x20are\x20unusable\x20here\x20(ofshop\x20F-08)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'period_charge','purpose':'Every\x20charge/renewal\x20requires\x20the\x20subscriber\x27s\x20own\x20signature\x20(signer\x20==\x20order\x20owner);\x20bound\x20on\x20the\x20completed->charging\x20renew\x20forward'},{'template_id':'pattern.repository_data_check','host':'machine','key':'content_hash','purpose':'Per-period\x20content/response-record\x20hash\x20required,\x20matching\x20the\x20order\x20item\x20commitment;\x20bound\x20on\x20the\x20delivering->delivered\x20submit\x20forward'},{'template_id':'pattern.progress_state_check','host':'machine','key':'release_state','purpose':'Release\x20gated\x20by\x20the\x20delivery-confirmed\x20state\x20(current\x20==\x20delivered\x20when\x20the\x20fan\x20confirms)\x20—\x20replaces\x20the\x207/21-day\x20calendar\x20freeze;\x20bound\x20on\x20the\x20delivered->completed\x20confirm\x20forward'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_rail','purpose':'Settlement\x20rail\x20guard:\x20current\x20==\x20completed\x20+\x20order.service\x20binding\x20—\x20shared\x20by\x20the\x20settlement\x20row\x20and\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20(they\x20merge\x20into\x20ONE\x20allocator)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_subscribed','purpose':'Refund\x20rail\x20node\x20gate\x20(subscribed):\x20one\x20allocator\x20track\x20per\x20refundable\x20node\x20is\x20the\x20DEFAULT\x20form\x20(a\x20node\x20set\x20is\x20also\x20expressible\x20via\x20the\x20relies\x20two-level\x20tree\x20—\x20OR-subguard\x20per\x20node\x20under\x20an\x20AND\x20parent\x20—\x20when\x20one\x20shared\x20rail\x20is\x20preferred);\x20add\x20an\x20order.claimed_by\x20some==false\x20leg\x20where\x20a\x20ruling\x20must\x20preclude\x20refund\x20(test/11\x20R2-F1\x20double-dip);\x20the\x20signer==order.owner\x20leg\x20is\x20optional\x20on\x20an\x20order-anchored\x20rail\x20since\x20the\x20recipient\x20is\x20already\x20hard-bound'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_charging','purpose':'Refund\x20rail\x20node\x20gate\x20(charging)\x20—\x20same\x20shape\x20as\x20refund_subscribed'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_delivering','purpose':'Refund\x20rail\x20node\x20gate\x20(delivering)\x20—\x20the\x20mid-period\x20cancel\x20state;\x20same\x20shape\x20as\x20refund_subscribed'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_cancelled','purpose':'Refund\x20rail\x20node\x20gate\x20(closed_cancel)\x20—\x20MANDATORY:\x20a\x20mid-period\x20cancel\x20with\x20funds\x20still\x20pooled\x20matches\x20no\x20other\x20track\x20and\x20deadlocks\x20the\x20escrow\x20permanently\x20(OFN\x20mainnet\x20#P-02)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'period_expiry','purpose':'Expiry\x20gate\x20on\x20the\x20delivered->expired\x20keeper\x20forward:\x20period\x20clock\x20passed\x20end\x20+\x20grace_days\x20(Clock\x20>=\x20charging-entry\x20anchor\x20+\x20grace)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Fan\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20period\x20delivery,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20confirmation\x20always\x20keeps\x20the\x20unreviewed\x20path\x20delivered\x20->\x20completed,\x20and\x20a\x20fan\x20silent\x20at\x20reviewed\x20still\x20reaches\x20expired\x20via\x20the\x20keeper;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review\x20rows\x20are\x20overwritable\x20by\x20their\x20author\x20until\x20a\x20chain-side\x20write-guard\x20post-state\x20fix\x20lands\x20(protocol\x20decision\x20list).\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'release_after_review','purpose':'Fan\x20confirmation\x20from\x20the\x20reviewed\x20side-stop:\x20current\x20==\x20reviewed\x20+\x20order.service\x20binding\x20—\x20mirrors\x20release_state\x20so\x20a\x20confirm\x20that\x20rides\x20the\x20review\x20exit\x20cannot\x20fire\x20from\x20any\x20other\x20node'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'expired_settle','purpose':'Expired-period\x20settlement\x20rail\x20(D-30\x20fix:\x20expired\x20previously\x20had\x20NO\x20fund\x20exit\x20and\x20stranded\x20every\x20naturally-lapsed\x20escrow):\x20at\x20expired\x20with\x20the\x20clock\x20past\x20grace\x20the\x20creator\x20keeps\x20the\x20lapsed\x20period\x20—\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20(mature\x20subscription-market\x20semantics:\x20delivered\x20content\x20is\x20payable,\x20silence\x20is\x20churn\x20not\x20a\x20refund\x20claim)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'awarded_recover','purpose':'Merchant-recovery\x20rail\x20shipped\x20BY\x20DEFAULT\x20(the\x20some\x20==\x20true\x20polarity\x20paired\x20with\x20every\x20refund\x20rail\x27s\x20claimed_by\x20some\x20==\x20false):\x20assert\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20ONLY\x20—\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity,\x20wherever\x20the\x20fan\x20left\x20the\x20order\x20(NEVER\x20completed-only\x20—\x20an\x20awarded\x20order\x20the\x20fan\x20never\x20confirmed\x20sits\x20at\x20delivered\x20and\x20can\x20never\x20reach\x20completed,\x20ptrn-mn-261013\x20T11\x20stranded\x2020\x20that\x20way)\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2,\x20superseding\x20the\x20b9-261015\x20FULL-SET\x20teaching\x20—\x20F-51:\x20keepers\x20advance\x20orders\x20past\x20any\x20pinned\x20node;\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion);\x20exactly\x20one\x20of\x20the\x20refund\x20legs\x20(claimed_by\x20some\x20==\x20false)\x20/\x20awarded_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2;\x20escrow-exit\x20invariant,\x20az-mn-261007)'},{'template_id':'pattern.allocator_order_anchor','host':'service','purpose':'Per-period\x20settlement\x20anchor:\x20one\x20Rate-0\x20{GuardIdentifier:\x200}\x20row\x20(guard_key:\x20settle_rail,\x20merged\x20into\x20the\x20settlement\x20allocator)\x20makes\x20the\x20submitted\x20ORDER\x20the\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20from\x20a\x20sibling\x20period\x20order\x20cannot\x20re-release\x20this\x20period\x27s\x20escrow\x20(testnet\x20CR-01)\x20—\x20the\x20anchor\x20row\x20pays\x20nothing'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'creator','count':0x4,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'settle_rail','note':'Per-period\x20release\x20to\x20the\x20creator\x20at\x20completed\x20—\x200%\x20platform\x20take\x20(the\x20flip\x20of\x20the\x20incumbent\x27s\x2020%).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_rail','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor):\x20binds\x20the\x20settlement\x20Guard\x20to\x20this\x20period\x27s\x20own\x20order;\x20pays\x20nothing.\x20Shares\x20the\x20settle_rail\x20guard\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_subscribed','note':'Subscriber\x20refund,\x20node\x20gate\x20subscribed\x20(per-node\x20rails:\x20refund_subscribed/refund_charging/refund_delivering/refund_cancelled).\x20Each\x20refund\x20rail\x20arms\x20order.claimed_by\x20some\x20==\x20false\x20BY\x20DEFAULT\x20—\x20a\x20paid\x20award\x20precludes\x20refund\x20permanently\x20(the\x20some\x20==\x20true\x20polarity\x20is\x20the\x20awarded_recover\x20row).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_charging','note':'Subscriber\x20refund,\x20node\x20gate\x20charging\x20(claimed_by\x20some\x20==\x20false\x20armed\x20by\x20default,\x20paired\x20with\x20awarded_recover).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_delivering','note':'Subscriber\x20refund,\x20node\x20gate\x20delivering\x20—\x20the\x20mid-period\x20cancel\x20state\x20(claimed_by\x20some\x20==\x20false\x20armed\x20by\x20default,\x20paired\x20with\x20awarded_recover).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_cancelled','note':'Subscriber\x20refund,\x20node\x20gate\x20closed_cancel\x20(OFN\x20#P-02:\x20omitting\x20it\x20deadlocks\x20the\x20escrow\x20on\x20a\x20mid-period\x20cancel;\x20claimed_by\x20some\x20==\x20false\x20armed\x20by\x20default,\x20paired\x20with\x20awarded_recover).'},{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'expired_settle','note':'Lapsed-period\x20settlement\x20to\x20the\x20creator\x20at\x20expired\x20(D-30\x20fix\x20—\x20this\x20rail\x27s\x20absence\x20stranded\x20every\x20naturally-lapsed\x20escrow).'},{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'awarded_recover','note':'Merchant-recovery\x20rail:\x20escrow\x20principal\x20exits\x20when\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20true);\x20node\x20gate\x20EXPANDED\x20PER\x20NODE\x20like\x20the\x20refund\x20family\x20—\x20completed-only\x20strands\x20every\x20awarded\x20order\x20the\x20fan\x20never\x20confirmed\x20(ptrn-mn-261013\x20T11);\x20exactly\x20one\x20of\x20refund/awarded\x20legs\x20can\x20pass\x20(escrow-exit\x20invariant,\x20az-mn-261007).'}],'description':'0%\x20platform\x20take\x20(the\x20flip\x20of\x20the\x20incumbent\x27s\x2020%):\x20per-period\x20release\x20Rate\x2010000\x20to\x20the\x20creator\x20at\x20completed\x20(guard\x20settle_rail,\x20with\x20the\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20from\x20pattern.allocator_order_anchor\x20so\x20the\x20settlement\x20Guard\x20binds\x20the\x20period\x27s\x20own\x20order);\x20refund\x20Rate\x2010000\x20to\x20the\x20subscriber\x20on\x20FOUR\x20node-gated\x20rails\x20(subscribed/charging/delivering/closed_cancel\x20—\x20per-node\x20rails\x20are\x20the\x20default\x20form;\x20a\x20node\x20set\x20is\x20also\x20expressible\x20via\x20the\x20relies\x20two-level\x20tree;\x20closed_cancel\x20is\x20mandatory,\x20OFN\x20#P-02);\x20lapsed-period\x20settlement\x20Rate\x2010000\x20to\x20the\x20creator\x20at\x20expired\x20(expired_settle);\x20merchant-recovery\x20rail\x20on\x20claimed_by\x20(awarded_recover);\x20threshold\x20MUST\x20be\x200\x20for\x20small\x20per-period\x20amounts;\x20REPLAY\x20PROTECTION\x20(OFN\x20#P-04,\x20mainnet-proven\x20261010):\x20every\x20rail\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count]\x20—\x20the\x20history\x20count\x20is\x20monotonic,\x20unforgeable\x20and\x20cannot\x20jump).\x20NEVER\x20arm\x20254\x20on\x20refund\x20rails:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20the\x20order\x27s\x20payment\x20intake\x20never\x20rewrites,\x20so\x20the\x20OnceKey\x20is\x20identical\x20every\x20period;\x20a\x20period-2+\x20full-drain\x20retry\x20shows\x20the\x20EMPTIED-POOL\x20abort\x20(14)\x20FIRST\x20(EZERO\x20at\x20allocation.move:418\x20precedes\x20once\x20bookkeeping)\x20and\x2016\x20only\x20surfaces\x20with\x20a\x20residual\x20balance;\x20tips\x20bypass\x20the\x20Machine\x20entirely\x20(direct\x20payments\x20with\x20no\x20allocation\x20semantics)'},'key_risk':'Chargeback-funded\x20freeze\x20replaced\x20by\x20state-machine\x20release\x20—\x20funds\x20unlock\x20at\x20delivery\x20confirmation,\x20not\x20after\x20a\x20calendar\x20window','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','ENTRY\x20EDGE\x20IS\x20MANDATORY:\x20wire\x20an\x20explicit\x20pair\x20{prev_node:\x22\x22,\x20forwards:[Join]}\x20into\x20\x27subscribed\x27\x20—\x20Progress\x20starts\x20at\x20current=\x22\x22\x20and\x20the\x20first\x20hop\x20only\x20exists\x20if\x20this\x20pair\x20exists\x20(orders\x20arrive\x20dead\x20without\x20it;\x20the\x20publish\x20gate\x20blocks\x20machines\x20without\x20an\x20entry\x20pair)','PERIOD-1\x20SKIPS\x20CHARGING:\x20period-1\x20funds\x20are\x20escrowed\x20at\x20buy,\x20so\x20wire\x20the\x20join\x27s\x20onward\x20edge\x20from\x20\x27subscribed\x27\x20DIRECTLY\x20to\x20\x27delivering\x27\x20—\x20a\x20period-1\x20charge/confirm_payment\x20spin\x20is\x20a\x20dead\x20spin\x20(the\x20payment\x20it\x20would\x20confirm\x20is\x20already\x20in\x20the\x20pool).\x20The\x20\x27charging\x27\x20node\x20is\x20reachable\x20ONLY\x20via\x20the\x20renewal\x20loop','DOUBLE-DIP\x20GUARD:\x20refund\x20tracks\x20must\x20be\x20node-gated\x20(AND[progress.node==<X>],\x20one\x20track\x20per\x20refundable\x20node\x20INCLUDING\x20closed_cancel\x20AND\x20expired\x20—\x20omitting\x20closed_cancel\x20deadlocks\x20the\x20escrow\x20on\x20a\x20mid-period\x20cancel\x20and\x20omitting\x20expired\x20strands\x20every\x20naturally-lapsed\x20escrow,\x20D-30\x20family;\x20the\x20signer==order.owner\x20leg\x20is\x20optional\x20—\x20the\x20order-anchored\x20recipient\x20is\x20already\x20hard-bound)\x20and\x20arm\x20the\x20identifier-255\x20\x27period-<N>\x27\x20equality\x20leg\x20for\x20replay\x20protection\x20(NEVER\x20the\x20identifier-254\x20once-for-object\x20slot\x20on\x20a\x20refund\x20rail);\x20an\x20ungated\x20signer-only\x20refund\x20track\x20lets\x20the\x20subscriber\x20claim\x20escrow\x20after\x20expiry.\x20The\x20claimed_by\x20pairing\x20ships\x20in\x20the\x20rows\x20BY\x20DEFAULT\x20—\x20refund\x20rails\x20carry\x20some==false,\x20the\x20recovery\x20row\x20carries\x20some==true;\x20adjust\x20only\x20if\x20the\x20business\x20model\x20differs\x20(order.move:213-234\x20deliberately\x20ships\x20no\x20receive-gate,\x20so\x20nothing\x20else\x20closes\x20a\x20ruling-paid\x20case)','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass.\x20The\x20alternative\x20closure\x20with\x20the\x20identical\x20guarantee\x20lives\x20on\x20a\x20different\x20axis:\x20a\x20SERIAL\x20claim_window\x20node\x20between\x20delivery\x20and\x20payout\x20(state-based\x20release\x20—\x20payout\x20waits\x20out\x20the\x20dispute\x20window).\x20Pick\x20ONE\x20axis\x20per\x20rail\x20family;\x20both\x20are\x20chain-validated\x20(ptrn2\x20T6/T14)','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20tracks\x20pay\x20GuardIdentifier(0)\x20—\x20funds\x20land\x20ON\x20the\x20Order\x20object,\x20not\x20in\x20the\x20subscriber\x27s\x20wallet;\x20the\x20subscriber\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Order-anchored\x20payout\x20is\x20deliberate\x20(the\x20refund\x20stays\x20bound\x20to\x20the\x20order\x20even\x20across\x20wallet\x20rotation);\x20the\x20second\x20step\x20must\x20be\x20surfaced\x20in\x20the\x20storefront\x20UX','REPLAY\x20PROTECTION\x20(mainnet-proven):\x20every\x20rail\x20—\x20settlement\x20AND\x20refund\x20—\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count];\x20the\x20history\x20count\x20is\x20monotonic\x20and\x20unforgeable,\x20so\x20each\x20period\x20gets\x20a\x20fresh\x20OnceKey).\x20NEVER\x20arm\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20the\x20order\x27s\x20payment\x20intake\x20never\x20rewrites,\x20so\x20the\x20OnceKey\x20is\x20identical\x20in\x20every\x20period\x20and\x20refund\x20period\x202+\x20strands\x20the\x20escrow\x20—\x20the\x20255\x20period-<N>\x20leg\x20above\x20is\x20the\x20PRIMARY\x20protection.\x20OBSERVABILITY\x20(diagnose\x20by\x20this,\x20T9):\x20a\x20full-drain\x20retry\x20shows\x20the\x20EMPTIED-POOL\x20abort\x20(14)\x20FIRST\x20because\x20EZERO\x20(allocation.move:418)\x20precedes\x20once\x20bookkeeping\x20—\x2014\x20on\x20a\x20refund\x20replay\x20IS\x20the\x20254-replay\x20signature;\x2016\x20(E_ONCE_TRIGGERED)\x20only\x20surfaces\x20when\x20a\x20residual\x20balance\x20keeps\x20the\x20pool\x20alive','RENEWAL\x20=\x20ONE\x20PTB:\x20use\x20the\x20order\x20call\x27s\x20`order_renew`\x20field\x20—\x20it\x20pays\x20the\x20period\x20amount\x20into\x20the\x20Allocation\x20and\x20advances\x20the\x20renew\x20forward\x20atomically\x20(fund\x20+\x20record\x20+\x20advance\x20in\x20a\x20single\x20step);\x20the\x20legacy\x203-transaction\x20split\x20left\x20a\x20window\x20where\x20the\x20loop\x20could\x20advance\x20without\x20funding','State\x20replaces\x20time:\x20release\x20is\x20gated\x20by\x20the\x20delivery-confirmed\x20state,\x20not\x20a\x207/21-day\x20calendar\x20freeze;\x20signature\x20payments\x20eliminate\x20the\x20chargeback\x20category\x20entirely','Age\x20verification\x20(R10):\x20the\x20buy\x20guard\x20requires\x20a\x20Passport\x20with\x20qualifying\x20age\x20credentials;\x20the\x20credential\x20issuer\x20(KYC\x20provider)\x20is\x20off-chain\x20—\x20the\x20only\x20non-on-chain-able\x20link','Creator\x20onboarding\x20=\x20identity\x20Passport\x20+\x20permission\x20grant\x20(verification\x20standards\x20declared\x20in\x20the\x20deployment\x20checklist)','Three\x20sub-templates:\x20pay-per-view\x20(5\x20nodes,\x20its\x20own\x20Service\x20—\x20single\x20Machine\x20binding\x20per\x20Service),\x20paid\x20messaging\x20(subscription\x20skeleton\x20with\x20response-record\x20delivery),\x20tips\x20(direct\x20payment,\x20no\x20Machine)','Paid-messaging\x20response\x20obligations\x20are\x20SOFT\x20clauses:\x20response-time\x20promises\x20are\x20not\x20deterministic,\x20so\x20encode\x20them\x20as\x20written\x20promises\x20in\x20the\x20listing\x20WIP\x20(never\x20as\x20Guards);\x20a\x20missed\x20response\x20is\x20an\x20ordinary\x20dispute\x20and\x20routes\x20to\x20Arbitration','Content\x20compliance\x20boundary:\x20only\x20hashes\x20on-chain;\x20content\x20bodies\x20live\x20off-chain\x20—\x20content\x20governance\x20is\x20structurally\x20out\x20of\x20scope\x20for\x20on-chain\x20objects','Disputes\x20route\x20to\x20Arbitration\x20(open\x20voting\x20default);\x20multi-period\x20disputes\x20split\x20per\x20period\x20(award\x20cap\x203x\x20period\x20amount)','Anti-dark-pattern\x20selling\x20point:\x20every\x20renewal\x20requires\x20the\x20subscriber\x27s\x20explicit\x20signature\x20—\x20surface\x20\x27no\x20silent\x20auto-renewal\x27\x20in\x20the\x20listing\x20WIP\x20promise','FREE\x20TIER\x20RECIPE:\x20a\x20$0\x20tier\x20is\x20a\x20100%-waiver\x20coupon\x20(RATES\x2010000)\x20on\x20a\x20positively-priced\x20sale\x20—\x20FIRST\x20PERIOD\x20ONLY:\x20coupons\x20are\x20SINGLE-USE\x20(burned\x20at\x20buy)\x20and\x20the\x20renewal\x20path\x20has\x20NO\x20discount\x20hook\x20(the\x20renew\x20PTB\x20pays\x20payment-create\x20full\x20price;\x20the\x20order\x27s\x20discount\x20field\x20is\x20fixed\x20at\x20buy\x20and\x20never\x20re-read),\x20so\x20a\x20per-period\x20100%-coupon\x20renew\x20is\x20IMPOSSIBLE\x20by\x20design\x20(F-RENEW-NO-COUPON)\x20—\x20disclose\x20the\x20free\x20tier\x20as\x20first-period-only.\x20A\x20zero-value\x20order\x20still\x20walks\x20the\x20full\x20machine\x20lifecycle\x20(localnet\x20T8),\x20and\x20settlement\x20on\x20an\x20unfunded/emptied\x20pool\x20ABORTS\x20EZERO-14\x20(MoveAbort\x2014)\x20with\x20FULL\x20rollback\x20—\x20pool\x20untouched,\x20once-key\x20unconsumed;\x20it\x20is\x20NOT\x20a\x20silent\x20no-op.\x20To\x20re-settle\x20a\x20refunded/emptied\x20period,\x20fund\x20the\x20Allocation\x20via\x20payment\x20create\x20for_object=<order>\x20(abort-then-recover\x20leaves\x20an\x20immutable\x20two-payment\x20audit\x20trail)','DISCOUNT\x20RENEWAL\x20DISCLOSURE\x20(obligation):\x20a\x20coupon\x20discounts\x20only\x20the\x20buy\x20it\x20is\x20redeemed\x20at\x20—\x20every\x20renewal\x20re-prices\x20from\x20the\x20SKU\x20price\x20(no\x20discount\x20hook\x20exists\x20on\x20the\x20renew\x20path),\x20so\x20\x27first\x20period\x20X%\x20off,\x20then\x20standard\x27\x20MUST\x20be\x20disclosed\x20in\x20the\x20listing/WIP\x20promise\x20BEFORE\x20purchase\x20(anti-dark-pattern).\x20Standing\x20renewal\x20discounts\x20are\x20NOT\x20constructible\x20on-chain\x20—\x20never\x20promise\x20one','RAIL\x20SNAPSHOT\x20AT\x20BUY\x20(append\x20mechanics):\x20fund\x20rails\x20snapshot\x20at\x20buy\x20—\x20an\x20order\x27s\x20plan\x20is\x20frozen\x20from\x20the\x20allocator\x20state\x20at\x20purchase;\x20later\x20allocator\x20edits\x20never\x20touch\x20existing\x20orders\x20(buyer\x20protection)\x20and\x20CANNOT\x20add\x20a\x20relief\x20rail\x20to\x20live\x20orders\x20(remedies\x20for\x20existing\x20orders\x20ride\x20compensation/arbitration,\x20never\x20an\x20append).\x20Appending\x20is\x20a\x20pure-extension\x20prefix:\x20every\x20appended\x20allocator\x20requires\x20a\x20description,\x20and\x20with\x20no\x20Surplus\x20row\x20the\x20appended\x20Rates\x20must\x20sum\x20to\x20exactly\x2010000\x20(the\x20chain\x20rejects\x20otherwise)','WIP\x20PROMISE\x20FILE\x20MECHANICS:\x20the\x20listing\x20WIP\x20is\x20the\x20binding\x20commitment\x20file\x20—\x20rebinding\x20has\x20NO\x20per-item\x20op:\x20sales\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend;\x20stock\x20values\x20are\x20ABSOLUTE,\x20not\x20deltas;\x20removal\x20is\x20immediate\x20and\x20irreversible)\x20or\x20op:add\x20creates\x20a\x20NEW\x20SKU;\x20a\x20buyer\x20leaving\x20wip_hash\x20empty\x20auto-fills\x20from\x20the\x20listing\x20at\x20purchase\x20with\x20on-chain\x20verification,\x20while\x20an\x20explicit\x20hash\x20pins\x20the\x20purchase-time\x20file\x20(later\x20swaps\x20cannot\x20retroactively\x20change\x20a\x20pinned\x20order).\x20Schedule\x20promise\x20updates\x20as\x20op:set\x20full\x20rewrites,\x20never\x20in-place\x20edits','EVIDENCE\x20TIERING\x20BY\x20NETWORK:\x20ciphertext\x20→\x20sealed\x20transcript\x20→\x20signature\x20→\x20on-chain\x20proof\x20anchor\x20runs\x20on\x20any\x20network,\x20but\x20guard-verified\x20messages\x20are\x20MAINNET-only,\x20and\x20the\x20official\x20key\x20history\x20is\x20PARTITIONED\x20by\x20network\x20—\x20each\x20server\x20key\x20belongs\x20to\x20its\x20home\x20partition\x20(mainnet/testnet/localnet)\x20and\x20officialness\x20is\x20scored\x20in\x20that\x20partition\x20only\x20(serverKeysOfficialNetwork\x20names\x20it);\x20on\x20testnet/localnet\x20treat\x20the\x20chain\x20as\x20rehearsal,\x20and\x20for\x20a\x20MAINNET\x20case\x20the\x20ONLY\x20network-level\x20truth\x20is\x20an\x20on-chain\x20Proof\x20anchor\x20(proof_message\x20re-anchored\x20on\x20mainnet)\x20—\x20a\x20file-level\x20verdict\x20from\x20a\x20non-mainnet\x20partition\x20never\x20grounds\x20a\x20mainnet\x20ruling','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'evidence_refs':['test/11\x20R1-F1\x20—\x20orders\x20arrive\x20dead\x20when\x20the\x20entry\x20pair\x20is\x20missing','OFN\x20J5\x20—\x20period-1\x20is\x20already\x20escrowed\x20at\x20buy;\x20a\x20charge/confirm\x20spin\x20is\x20dead','OFN\x20#P-02\x20—\x20a\x20mid-period\x20cancel\x20deadlocks\x20the\x20escrow\x20without\x20the\x20closed_cancel\x20refund\x20rail','test/11\x20R2-F1\x20—\x20double-dip:\x20an\x20ungated\x20signer-only\x20refund\x20track\x20claims\x20escrow\x20after\x20a\x20ruling\x20paid','az-mn-261007\x20T5\x20—\x202.38\x20escrow\x20stranded\x20at\x20reviewed\x20without\x20the\x20merchant-recovery\x20rail','OFN\x20#P-03\x20—\x20two-step\x20refund\x20payout:\x20funds\x20land\x20on\x20the\x20Order\x20object','OFN\x20#P-04\x20—\x20arming\x20254\x20on\x20a\x20refund\x20rail\x20aborts\x20period\x202+\x20(E_ONCE_TRIGGERED\x2016)','OFN\x20J3\x20—\x20the\x20legacy\x203-transaction\x20renewal\x20split\x20left\x20an\x20unfunded-advance\x20window'],'fee_params':{'platform_take_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'incumbent_take_bps':0x7d0,'dispute_window_days':0xe,'grace_days':0x7,'threshold':0x0,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'grace_expiry':'progress.history.time\x20(id\x201280,\x20next_node=\x27charging\x27,\x20find=last\x20—\x20expiry\x20at\x20period\x20end\x20+\x20grace)','dispute_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20delivery\x20ENTRY\x20timestamp\x20of\x20the\x20period\x20—\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20—\x20the\x20platform-level\x20answer\x20to\x20\x27no\x20refund\x20policy\x20+\x20chargeback\x20pass-through\x27','R2\x20independent\x20arbitration\x20Permission\x20(testnet\x20lesson\x20hardened\x20into\x20the\x20contract).\x20Venue\x20SLA\x20expectation\x20(a\x20SELECTION\x20criterion\x20—\x20the\x20dispute\x20window\x20is\x20the\x20arbitrator\x27s\x20order,\x20not\x20a\x20lever\x20this\x20build\x20tunes):\x20prefer\x20venues\x20with\x20an\x20explicit\x2014-day\x20default\x20window','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner','R4\x20receipt\x20confirmation\x20by\x20the\x20subscriber\x20only\x20—\x20creator\x20self-sign\x20forbidden','R5\x20period\x20payments\x20anchored\x20to\x20the\x20order\x20Allocation','R6\x20Rate\x20=\x2010000;\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20reminders/expiry\x20only\x20(no\x20charge\x20authority)','R10\x20age-verification\x20buy\x20guard\x20(Passport\x20credentials)'],'keeper_dependencies':['renewal\x20reminder\x20(period\x20end\x20-\x203\x20days)','expiry\x20trigger\x20(period\x20end\x20+\x20grace)','NO\x20auto-charge\x20authority\x20by\x20design'],'recommended_role':'merchant','role_rationale':'Creators\x20own\x20the\x20subscription\x20Service\x20with\x200%\x20take;\x20age-verification\x20credentials\x20gate\x20purchases\x20via\x20Passport.','differences':['State-machine\x20release\x20replaces\x20the\x20calendar\x20freeze:\x20funds\x20unlock\x20at\x20delivery\x20confirmation,\x20not\x20after\x20a\x20window;\x20signature\x20payments\x20eliminate\x20the\x20chargeback\x20category','Age-verification\x20buy\x20gate\x20via\x20Passport\x20credentials\x20(R10)\x20—\x20the\x20credential\x20issuer\x20is\x20the\x20only\x20off-chain\x20link','Interaction\x20monetization\x20sub-templates:\x20pay-per-view\x20(own\x20Service),\x20paid\x20messaging\x20(response-record\x20delivery),\x20tips\x20(direct\x20payment,\x20no\x20Machine)'],'user_inputs':['dispute_window_days\x20—\x20extendable\x20for\x20new\x20creators\x20as\x20a\x20risk\x20lever','grace_days\x20—\x20renewal\x20grace\x20window\x20before\x20expiry','incumbent_take_bps\x20—\x20the\x20displaced\x20platform\x27s\x2020%\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_take_bps\x20(KEEP\x20AT\x200),\x20no\x20allocator\x20row\x20reads\x20the\x20benchmark','Age-credential\x20issuer\x20selection\x20(KYC\x20provider,\x20off-chain)','Sub-template\x20selection:\x20pay-per-view\x20/\x20paid\x20messaging\x20/\x20tips']},{'id':'licensing/royalty-stream-auction','industry':'licensing','variant':'royalty-stream-auction','product_ref':'royalty-exchange','archetype':'leader','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','review_mode':'none','machine_shape':[{'name':'escrowed','role':'Entry:\x20the\x20off-chain-resolved\x20auction\x20WINNER\x20buys\x20the\x20royalty\x20share\x20at\x20the\x20winning\x20price;\x20the\x20purchase\x20funds\x20are\x20escrowed\x20atomically\x20at\x20buy\x20(Order.amount\x20=\x20winning\x20bid).\x20🔴\x20AUCTION\x20GAP\x20—\x20the\x20chain\x20has\x20NO\x20bid\x20ledger\x20/\x20highest-bidder\x20primitive,\x20so\x20there\x20is\x20NO\x20on-chain\x20bidding\x20state\x20and\x20NO\x20unpaid-reservation\x20node:\x20the\x20winner\x20is\x20resolved\x20OFF-chain,\x20added\x20to\x20the\x20buy\x20allowlist,\x20then\x20buys\x20in\x20ONE\x20PTB.\x20The\x20royalty\x20share\x20is\x20held\x20in\x20escrow\x20pending\x20the\x20inspection\x20window.','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'terms_delivered','role':'Rights-holder\x20delivers\x20the\x20license-grant\x20artifact:\x20the\x20signed\x20license\x20terms\x20+\x20the\x20royalty-share\x20certificate\x20hash,\x20written\x20to\x20the\x20evidence\x20Repository\x20and\x20anchored\x20as\x20the\x20listing\x20WIP.\x20This\x20is\x20WHAT\x20was\x20sold\x20—\x20the\x20buyer\x20inspects\x20it\x20against\x20the\x20representation\x20before\x20the\x20price\x20releases.','semantic_role':'active','from':[{'prev':'escrowed','forward':'DeliverTerms','operator':'merchant','permission_index':0x3e8,'guard_key':'grant_artifact'}]},{'name':'granted','role':'Settlement\x20terminal:\x20the\x20buyer\x20accepts\x20the\x20grant\x20(rights\x20are\x20as\x20represented)\x20OR\x20the\x20inspection_window_days\x20time-lock\x20auto-accepts\x20(a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow).\x20The\x20settlement\x20Allocator\x20releases\x20the\x20escrowed\x20purchase\x20price\x20and\x20SPLITS\x20it\x20among\x20the\x20rights-holder\x20Entities\x20per\x20the\x20Rate\x20plan\x20(primary_holder_bps\x20+\x20co_holder_bps\x20==\x2010000).','semantic_role':'final','from':[{'prev':'terms_delivered','forward':'AcceptGrant','operator':'order_payer','guard_key':'accept_grant'},{'prev':'terms_delivered','forward':'AutoAcceptGrant','operator':'merchant','permission_index':0x3ea,'guard_key':'inspection_timeout'}]},{'name':'license_cancelled','role':'Refund\x20terminal:\x20the\x20buyer\x20cancels\x20before\x20delivery,\x20REJECTS\x20the\x20grant\x20within\x20the\x20inspection\x20window\x20(rights\x20not\x20as\x20represented),\x20or\x20a\x20third-party\x20Arbitration\x20ruling\x20awards\x20a\x20refund.\x20The\x20whole\x20escrowed\x20purchase\x20price\x20refunds\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x20254).\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20without\x20the\x20guard\x20chain\x20(R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'escrowed','forward':'CancelBeforeDelivery','operator':'order_payer','guard_key':'cancel_escrowed'},{'prev':'terms_delivered','forward':'RejectGrant','operator':'order_payer','guard_key':'reject_grant'},{'prev':'terms_delivered','forward':'ArbRefund','operator':'merchant','permission_index':0x3ea,'guard_key':'arb_refund'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Auction-winner\x20/\x20qualified-licensee\x20buy\x20gate:\x20the\x20AUCTION\x20is\x20resolved\x20OFF-CHAIN\x20(🔴\x20GAP\x20—\x20no\x20on-chain\x20bid\x20ledger),\x20so\x20the\x20winning\x20bidder\x20is\x20added\x20to\x20this\x20allowlist\x20(Address-vector\x20table\x20constant)\x20and\x20ONLY\x20they\x20can\x20buy\x20at\x20the\x20winning\x20price.\x20Optionally\x20a\x20territory/qualification\x20Passport.\x20This\x20is\x20a\x20POST-auction\x20purchase\x20gate,\x20never\x20an\x20on-chain\x20ascending\x20auction\x20—\x20do\x20not\x20represent\x20it\x20as\x20a\x20live\x20bid\x20market.\x20An\x20open\x20listing\x20drops\x20the\x20allowlist\x20via\x20guard_resolutions.'},{'template_id':'pattern.repository_data_check','host':'machine','key':'grant_artifact','purpose':'License-grant\x20artifact\x20required\x20to\x20deliver\x20terms\x20(escrowed→terms_delivered):\x20the\x20signed\x20license\x20+\x20royalty-share\x20certificate\x20hash\x20written\x20to\x20the\x20evidence\x20Repository.\x20Anchors\x20WHAT\x20rights\x20were\x20sold\x20so\x20the\x20buyer\x20can\x20inspect\x20against\x20the\x20representation\x20and\x20a\x20later\x20dispute\x20has\x20an\x20on-chain\x20artifact\x20to\x20read.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'accept_grant','purpose':'Buyer\x20accepts\x20the\x20grant\x20within\x20the\x20inspection\x20window\x20(signer\x20==\x20order\x20owner)\x20→\x20granted;\x20the\x20settlement\x20release\x20fires.\x20Bound\x20on\x20the\x20terms_delivered→granted\x20AcceptGrant\x20forward.\x20Distinct\x20key\x20from\x20reject_grant\x20(one\x20approved\x20assertion\x20authorizes\x20exactly\x20one\x20business\x20decision,\x20M-T2).'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'inspection_timeout','purpose':'Inspection-window\x20auto-accept\x20(keeper):\x20Clock\x20>=\x20terms_delivered\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27terms_delivered\x27,\x20find=last)\x20+\x20inspection_window_days\x20—\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow;\x20the\x20rights\x20are\x20deemed\x20accepted\x20and\x20settlement\x20fires.\x20OPENING\x20gate\x20(time_lock_progress),\x20anchored\x20on\x20the\x20immutable\x20terms_delivered\x20entry\x20record\x20(1272\x20current_time\x20drifts\x20every\x20migration,\x20ETS-C).'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'reject_grant','purpose':'Buyer\x20REJECTS\x20the\x20grant\x20within\x20the\x20inspection\x20window\x20(rights\x20not\x20as\x20represented):\x20signer\x20==\x20order\x20owner\x20+\x20node\x20==\x20terms_delivered\x20→\x20license_cancelled,\x20the\x20refund\x20rail\x20fires.\x20The\x20buyer\x20is\x20never\x20obliged\x20to\x20accept\x20a\x20misrepresented\x20share.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_escrowed','purpose':'Buyer\x20cancels\x20BEFORE\x20terms\x20delivery\x20(escrowed→license_cancelled):\x20signer\x20==\x20order\x20owner\x20+\x20node\x20==\x20escrowed\x20→\x20full\x20refund.\x20The\x20pre-delivery\x20walk-away.'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_refund','purpose':'Arbitration\x20awards\x20the\x20buyer\x20a\x20refund\x20(rights\x20misrepresentation\x20proven),\x20bound\x20to\x20the\x20terms_delivered→license_cancelled\x20ArbRefund\x20forward:\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order\x20recipient,\x20slot\x201\x20=\x20Arb\x20ruling\x20state;\x20the\x20example_table\x20carries\x20the\x20254\x20task-binding\x20row\x20—\x20edge-bound\x20guards\x20require\x20it,\x20TASKBIND-01).\x20NEVER\x20gate\x20on\x20arb.status\x20(arb_withdraw\x20advances\x20the\x20case\x20past\x20the\x2030-day\x20silence\x20window;\x20Guard+Machine\x20immutable\x20after\x20publish).\x20Disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11)\x20—\x20no\x20claim\x20node;\x20the\x20ruling\x20edge\x20departs\x20terms_delivered\x20directly.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE.'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','policy':{'name':'evidence','id_from':'signer','value_type':'String'},'purpose':'Evidence\x20Repository\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20(rights-holder\x20Signer,\x20Permission\x20staff\x20index,\x20or\x20the\x20Order\x20holder/agent):\x20repository.move\x20only\x20asserts\x20the\x20write_guard\x20LIST\x20is\x20non-empty\x20(E_POLICY_WRITE_GUARD_REQUIRED=22),\x20never\x20what\x20a\x20listed\x20guard\x20proves,\x20so\x20a\x20placeholder\x20that\x20returns\x20true\x20is\x20an\x20OPEN\x20write\x20—\x20a\x20counterparty\x20could\x20pre-write\x20the\x20grant-artifact\x20row\x20and\x20satisfy\x20the\x20delivery\x20gate.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_grant','purpose':'Settlement\x20allocator\x20gate,\x20bound\x20to\x20the\x20settlement\x20rows\x20(guard_key\x20settle_grant):\x20progress.current\x20==\x20granted\x20(the\x20terminal)\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false.\x20SPLITS\x20the\x20escrowed\x20purchase\x20price\x20among\x20the\x20rights-holder\x20Entities\x20(primary_holder_bps\x20+\x20co_holder_bps\x20==\x2010000).\x20One-shot\x20release\x20—\x20resolve\x20tpl_allocator_node_gate_settle_once\x20(protocol\x20254).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'license_refund','purpose':'Refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20license_refund):\x20progress.current\x20==\x20license_cancelled\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20purchase\x20price\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x20254).\x20The\x20buyer-reject,\x20pre-delivery-cancel\x20and\x20arb-awarded\x20forwards\x20ALL\x20land\x20on\x20license_cancelled,\x20so\x20ONE\x20node-gated\x20refund\x20rail\x20serves\x20them.\x20Resolve\x20tpl_allocator_node_gate_refund.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(Order.dispute\x20is\x20append-only\x20—\x20a\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands,\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20primary_holder\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20license_refund\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion.'}],'allocator':{'recipient':'entity','recipient_key':'primary_holder','count':0x4,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'primary_holder','mode':'rate','value_from':'primary_holder_bps','guard_key':'settle_grant','note':'Primary\x20rights-holder\x20share\x20of\x20the\x20escrowed\x20purchase\x20price\x20at\x20granted\x20(primary_holder_bps,\x20default\x207000).\x20An\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deploying\x20AI;\x20a\x20zero-address\x20Entity\x20burns\x20it).'},{'track':'settlement','recipient':'entity','recipient_key':'co_holder','mode':'rate','value_from':'co_holder_bps','guard_key':'settle_grant','note':'Co-holder\x20/\x20publisher\x20/\x20co-writer\x20share\x20(co_holder_bps,\x20default\x203000).\x20primary_holder_bps\x20+\x20co_holder_bps\x20MUST\x20sum\x2010000\x20(allocation.move\x20ERATE_NOT_10000\x20—\x20Rates\x20sum\x20EXACTLY\x2010000\x20with\x20no\x20Surplus\x20leg).\x20Add\x20further\x20co-holders\x20by\x20appending\x20Rate\x20legs\x20that\x20keep\x20the\x20group\x20at\x2010000.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_grant','note':'Rate-0\x20ORDER\x20anchor\x20leg\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.\x20Rate\x20sums\x20are\x20per-Allocator,\x20so\x20the\x20anchor\x20shares\x20settle_grant.'},{'track':'settlement','recipient':'entity','recipient_key':'primary_holder','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20leg:\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20(claimed_by\x20some\x20==\x20true)\x20exits\x20to\x20the\x20primary_holder\x20Entity.\x20The\x20polarity\x20twin\x20of\x20license_refund\x20—\x20exactly\x20one\x20can\x20pass\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'license_refund','note':'Full\x20refund\x20of\x20the\x20escrowed\x20purchase\x20price\x20to\x20the\x20order-anchored\x20buyer\x20at\x20license_cancelled\x20(slot\x20254,\x20the\x20task-binding\x20order\x20anchor\x20—\x20mainnet-verified\x20executable;\x20a\x20STATIC\x20slot\x20aborts\x20ERECIPIENT_NOT_FOR_OBJECT).\x20claimed_by\x20some\x20==\x20false;\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).\x20once_per_order\x20stops\x20a\x20replay.'}],'description':'ESCROWED\x20lump-sum\x20purchase\x20+\x20multi-holder\x20ROYALTY\x20SPLIT\x20release.\x20The\x20pool\x20holds\x20the\x20winning\x20bid\x20at\x20buy\x20and\x20releases\x20at\x20`granted`\x20(buyer\x20accept\x20or\x20inspection_window_days\x20auto-accept),\x20SPLIT\x20among\x20rights-holder\x20Entities\x20(primary_holder_bps\x20+\x20co_holder_bps\x20==\x2010000,\x20Rate\x20plan\x20—\x20allocation.move\x20ERATE_NOT_10000).\x20DIRECT-SALES:\x20platform_commission_bps\x20and\x20merchant_service_fee_bps\x20default\x200\x20(WoWok\x20takes\x20no\x20platform\x20commission;\x20the\x20rights-holders\x20keep\x20the\x20whole\x20sale,\x20split\x20between\x20themselves),\x20so\x20the\x20threshold\x20stays\x200\x20and\x20no\x20platform\x20Entity\x20is\x20required.\x20An\x20aggregator\x20(a\x20label/publisher\x20reselling\x20several\x20rights-holders)\x20may\x20charge\x20its\x20own\x20explicit,\x20disclosed\x20fee\x20to\x20a\x20NON-EMPTY\x20Entity\x20—\x20never\x20via\x20Surplus\x20(Surplus\x20calls\x20balance::withdraw_all\x20and\x20doubles\x20as\x20draining\x20the\x20pool).\x20Every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(a\x20Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20the\x20slot-254\x20refund\x20leg)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01).\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot,\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20of\x20the\x20grant-release\x20aborts\x20code\x2016.\x20TWO\x20refund\x20rails:\x20the\x20license-cancel\x20refund\x20(license_refund,\x20claimed_by\x20some\x20==\x20false)\x20and\x20the\x20merchant-recovery\x20sweep\x20(recover_gate,\x20claimed_by\x20some\x20==\x20true)\x20—\x20exactly\x20one\x20can\x20ever\x20pass\x20(escrow-exit\x20invariant,\x20D-BUG-2).\x20🔴\x20RECURRING\x20ROYALTY\x20DISTRIBUTION\x20is\x20a\x20SEPARATE\x20per-build\x20periodic\x20allocator\x20(the\x20pool\x20topped\x20up\x20via\x20the\x20renewal\x20receive\x20per\x20reporting\x20period\x20+\x20a\x20period-<N>\x20identifier-255\x20once-key),\x20NOT\x20shipped\x20in\x20this\x20one-shot\x20purchase\x20rail.'},'key_risk':'Off-chain-resolved\x20auction\x20(🔴\x20no\x20on-chain\x20bid\x20ledger)\x20settled\x20into\x20an\x20escrowed\x20purchase;\x20the\x20inspection-window\x20time-lock\x20and\x20the\x20multi-holder\x20Rate\x20split\x20protect\x20the\x20buyer\x20from\x20misrepresented\x20rights\x20before\x20the\x20price\x20releases.','build_notes':['🔴\x20OFF-CHAIN\x20AUCTION\x20RESOLUTION\x20(chain\x20GAP\x20—\x20verified\x20against\x20the\x20Move\x20source:\x20NO\x20bid\x20ledger\x20/\x20highest-bidder\x20/\x20ascending-auction\x20primitive\x20exists):\x20run\x20the\x20auction\x20OFF-chain\x20(bids\x20collected\x20in\x20the\x20listing\x27s\x20own\x20channel\x20/\x20Messenger),\x20the\x20rights-holder\x20resolves\x20the\x20winner,\x20then\x20ADD\x20the\x20winner\x20to\x20the\x20buy\x20allowlist\x20(Address-vector\x20table\x20constant)\x20so\x20ONLY\x20they\x20can\x20buy\x20at\x20the\x20winning\x20price.\x20This\x20is\x20a\x20post-auction\x20escrowed\x20purchase,\x20NOT\x20an\x20on-chain\x20auction\x20—\x20never\x20represent\x20it\x20as\x20a\x20live\x20bid\x20market.\x20An\x20on-chain\x20bid\x20primitive\x20would\x20be\x20a\x20chain\x20extension\x20(out\x20of\x20scope;\x20zero-chain-change\x20discipline).','MULTI-HOLDER\x20ROYALTY\x20SPLIT\x20(LIVE):\x20the\x20release\x20at\x20`granted`\x20splits\x20the\x20escrowed\x20purchase\x20price\x20among\x20rights-holder\x20Entities\x20via\x20the\x20Allocation\x20Rate\x20plan\x20(primary_holder_bps\x20+\x20co_holder_bps\x20==\x2010000;\x20allocation.move\x20ERATE_NOT_10000\x20—\x20Rates\x20sum\x20EXACTLY\x2010000\x20with\x20no\x20Surplus\x20leg).\x20Each\x20recipient\x20is\x20an\x20explicit\x20NON-EMPTY\x20Entity\x20(an\x20empty\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deploying\x20AI;\x20a\x20zero-address\x20Entity\x20burns\x20it).\x20Add\x20co-holders\x20by\x20appending\x20Rate\x20legs\x20that\x20keep\x20the\x20group\x20sum\x20at\x2010000.','INSPECTION-WINDOW\x20ESCROW\x20(LIVE):\x20the\x20purchase\x20price\x20is\x20escrowed\x20at\x20buy\x20and\x20releases\x20ONLY\x20after\x20the\x20buyer\x20accepts\x20the\x20grant\x20or\x20the\x20inspection_window_days\x20time-lock\x20auto-accepts\x20(tpl_time_lock_progress:\x20Clock\x20>=\x20terms_delivered\x20ENTRY\x20(progress.history.time\x201280,\x20find=last)\x20+\x20inspection_window_days).\x20The\x20buyer\x20can\x20reject\x20within\x20the\x20window\x20(rights\x20not\x20as\x20represented)\x20→\x20full\x20refund.\x20This\x20is\x20the\x20core\x20buyer\x20protection\x20against\x20a\x20misrepresented\x20royalty\x20share.','TERRITORY\x20/\x20QUALIFICATION\x20GATE\x20(LIVE):\x20the\x20buy_guard\x20allowlist\x20(pattern.identity_check_allowlist)\x20restricts\x20purchase\x20to\x20licensees\x20cleared\x20for\x20the\x20licensed\x20territory\x20/\x20qualification\x20set\x20—\x20an\x20Address-vector\x20table\x20constant\x20resolved\x20at\x20buy.\x20An\x20open\x20listing\x20drops\x20the\x20allowlist\x20via\x20guard_resolutions.','🔴\x20RECURRING\x20ROYALTY\x20DISTRIBUTION\x20(LIVE\x20mechanism,\x20mounted\x20per-build\x20—\x20NOT\x20shipped\x20in\x20this\x20one-shot\x20rail):\x20the\x20lump-sum\x20purchase\x20releases\x20at\x20`granted`;\x20ONGOING\x20royalty\x20distributions\x20to\x20the\x20buyer\x20ride\x20a\x20SEPARATE\x20periodic\x20allocator\x20—\x20the\x20pool\x20is\x20topped\x20up\x20per\x20reporting\x20period\x20via\x20the\x20renewal\x20receive\x20path\x20(balance::join)\x20and\x20distributed\x20under\x20a\x20period-<N>\x20identifier-255\x20once-key\x20(the\x20history\x20count\x20is\x20monotonic/unforgeable).\x20A\x20distribution\x20is\x20a\x20top-up\x20on\x20the\x20SAME\x20order\x27s\x20Allocation,\x20never\x20a\x20new\x20Machine\x20node\x20and\x20never\x20a\x20second\x20entry\x20edge.\x20Declare\x20it\x20only\x20when\x20the\x20shop\x20elects\x20ongoing\x20royalty\x20payouts;\x20the\x20off-chain\x20royalty\x20statement\x20stays\x20the\x20source\x20of\x20truth\x20for\x20the\x20amount.','ESCROW\x20EXIT\x20INVARIANT\x20(az-mn-261007,\x20D-BUG-2,\x20catalog-wide):\x20the\x20refund\x20rail\x20(license_refund)\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20PAIR\x20it\x20with\x20the\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20NO\x20node\x20equality\x20leg\x20—\x20UPWC-K1/CAT-B1+CAT-C2)\x20paying\x20Rate\x2010000\x20to\x20primary_holder\x20so\x20an\x20AWARDED\x20order\x27s\x20residual\x20principal\x20still\x20exits.\x20Exactly\x20one\x20of\x20the\x20two\x20can\x20ever\x20pass.','REPLAY\x20PROTECTION:\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot\x20on\x20the\x20settlement\x20allocator\x20(the\x20chain\x20derives\x20the\x20once-key\x20from\x20payment_info.for_object),\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20of\x20the\x20grant-release\x20aborts\x20code\x2016\x20(E_ONCE_TRIGGERED).\x20Refund\x20rails\x20pay\x20the\x20order-anchored\x20buyer\x20via\x20protocol\x20slot\x20254\x20(mainnet-verified\x20executable;\x20a\x20STATIC\x20slot\x20aborts\x20ERECIPIENT_NOT_FOR_OBJECT).','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20rows\x20pay\x20GuardIdentifier(254)\x20—\x20funds\x20land\x20ON\x20the\x20Order\x20object,\x20not\x20in\x20the\x20buyer\x27s\x20wallet;\x20the\x20buyer\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Surface\x20the\x20second\x20step\x20in\x20the\x20storefront\x20UX.','LICENSE\x20TERMS\x20=\x20WIP\x20ARTIFACT:\x20the\x20binding\x20license\x20terms\x20+\x20royalty-share\x20certificate\x20are\x20anchored\x20as\x20the\x20listing\x20WIP\x20hash\x20and\x20the\x20grant_artifact\x20Repository\x20row\x20(terms_delivered).\x20Rebinding\x20has\x20NO\x20per-item\x20op:\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend),\x20op:add\x20creates\x20a\x20NEW\x20SKU.\x20Pin\x20the\x20purchase-time\x20hash\x20so\x20a\x20later\x20swap\x20cannot\x20retroactively\x20change\x20a\x20granted\x20license.','COMPLIANCE\x20(L-01):\x20a\x20royalty-stream\x20listing\x20must\x20NEVER\x20promise\x20investment\x20returns\x20or\x20promote\x20coin/token\x20price\x20—\x20it\x20sells\x20a\x20CONTRACTUAL\x20share\x20of\x20CONTRACTUAL\x20royalties.\x20Disclose\x20the\x20reporting\x20honesty:\x20off-chain\x20royalty\x20statements\x20are\x20the\x20source\x20of\x20truth\x20for\x20the\x20amount;\x20the\x20on-chain\x20split\x20executes\x20the\x20agreed\x20bps,\x20it\x20does\x20NOT\x20verify\x20the\x20underlying\x20revenue.\x20Copy\x20must\x20carry\x20\x27不构成投资建议或收益承诺\x20/\x20not\x20investment\x20advice\x20or\x20a\x20yield\x20promise\x27.','REPUTATION\x20RAIL\x20(optional):\x20review_mode\x20defaults\x20to\x20none;\x20a\x20rights-holder\x20reputation\x20review\x20rail\x20is\x20addable\x20per-build\x20via\x20inputs.review_mode=\x27review\x27\x20(an\x20OPTIONAL\x20`reviewed`\x20side-stop\x20off\x20terms_delivered\x20that\x20exits\x20back\x20to\x20the\x20settlement\x20rail\x20—\x20never\x20a\x20settlement\x20gateway,\x20R-DEAD-END).','DISPUTES\x20route\x20to\x20a\x20THIRD-PARTY\x20Arbitration\x20venue\x20(arbitration_mode\x20third_party,\x20an\x20independent\x20Permission\x20—\x20R2\x20/\x20E_ARBITRATION_PERMISSION_CONFLICT=33);\x20the\x20arb_refund\x20ruling\x20edge\x20(tpl_forward_arb_ruling_won)\x20refunds\x20the\x20buyer;\x20disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11,\x20no\x20claim\x20node).\x20Un-pause\x20the\x20Arbitration\x20after\x20deploy\x20(new\x20Arbitrations\x20default\x20bPaused=true;\x20pause:false\x20via\x20permission\x20356).','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20listing\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net),\x20or\x20self-hosted\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20site)\x20for\x20long-lived\x20mainnet\x20listings;\x20an\x20empty\x20wip\x20on\x20mainnet\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'primary_holder_bps':0x1b58,'co_holder_bps':0xbb8,'inspection_window_days':0x7,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'threshold':0x0,'incumbent_take_bps':0x5dc},'time_anchors':{'inspection_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27terms_delivered\x27,\x20find=last)\x20—\x20the\x20immutable\x20terms-delivered\x20ENTRY\x20timestamp;\x20inspection_window_days\x20auto-accept\x20fires\x20from\x20it\x20(1272\x20current_time\x20drifts\x20every\x20migration,\x20ETS-C)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20—\x20the\x20escrowed\x20purchase\x20price\x20refunds\x20in\x20full\x20on\x20buyer\x20reject\x20/\x20pre-delivery\x20cancel\x20/\x20arb\x20ruling\x20(license_refund,\x20slot-254\x20order-anchored)','R2\x20independent\x20THIRD-PARTY\x20arbitration\x20Permission\x20(arbitration_mode\x20third_party;\x20E_ARBITRATION_PERMISSION_CONFLICT=33)\x20—\x20rights-misrepresentation\x20disputes\x20resolve\x20at\x20a\x20venue\x20neither\x20party\x20controls','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner','R4\x20grant\x20acceptance\x20by\x20the\x20buyer\x20only\x20(accept_grant,\x20signer\x20==\x20order\x20owner)\x20—\x20rights-holder\x20self-confirm\x20forbidden;\x20the\x20inspection_window_days\x20time-lock\x20is\x20the\x20keeper\x20complement,\x20never\x20a\x20self-release','R5\x20the\x20purchase\x20price\x20and\x20every\x20royalty-split\x20leg\x20anchored\x20to\x20the\x20order\x20Allocation\x20(the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order)','R6\x20Rate\x20plan\x20sums\x2010000\x20(primary_holder_bps\x20+\x20co_holder_bps);\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20the\x20license\x20terms\x20(WIP),\x20the\x20split\x20plan\x20and\x20the\x20allowlist\x20are\x20fully\x20configured\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20inspection-window\x20auto-accept\x20and\x20the\x20arb-ruling\x20advance\x20only\x20(no\x20charge\x20authority)','R10\x20territory\x20/\x20qualification\x20buy\x20gate\x20via\x20the\x20allowlist\x20(optionally\x20a\x20Passport)','R11\x20license\x20terms\x20+\x20royalty-share\x20certificate\x20anchored\x20as\x20the\x20WIP\x20artifact\x20and\x20the\x20grant_artifact\x20Repository\x20row\x20(immutable\x20provenance\x20of\x20WHAT\x20was\x20sold)'],'keeper_dependencies':['inspection-window\x20auto-accept\x20(terms_delivered\x20entry\x20+\x20inspection_window_days)','arbitration-ruling\x20advance\x20(push\x20terms_delivered→license_cancelled\x20on\x20a\x20buyer-won\x20ruling)','NO\x20auto-charge\x20authority\x20by\x20design'],'recommended_role':'merchant','role_rationale':'The\x20rights-holder\x20(or\x20their\x20label/publisher)\x20owns\x20the\x20licensing\x20Service,\x20resolves\x20the\x20off-chain\x20auction,\x20and\x20configures\x20the\x20multi-holder\x20royalty\x20split;\x20buyers\x20are\x20licensees.','differences':['Auction-SETTLED\x20lump-sum\x20purchase\x20of\x20a\x20royalty\x20SHARE\x20(vs\x20the\x20sibling\x27s\x20fixed-tier\x20direct\x20license\x20sale):\x20the\x20winner\x20is\x20resolved\x20OFF-chain\x20(🔴\x20no\x20on-chain\x20bid\x20ledger)\x20and\x20buys\x20at\x20the\x20winning\x20price\x20through\x20the\x20allowlist\x20gate','MULTI-HOLDER\x20royalty\x20split\x20at\x20release\x20(primary_holder_bps\x20+\x20co_holder_bps\x20Rate\x20plan)\x20—\x20the\x20sibling\x20splits\x20producer/publisher\x20on\x20a\x20single-tier\x20sale','An\x20INSPECTION-WINDOW\x20time-lock\x20gates\x20release\x20(the\x20buyer\x20verifies\x20the\x20rights\x20before\x20the\x20price\x20releases);\x20recurring\x20royalty\x20distributions\x20ride\x20a\x20separate\x20per-build\x20periodic\x20allocator'],'user_inputs':['primary_holder_bps\x20/\x20co_holder_bps\x20—\x20the\x20royalty\x20split\x20among\x20rights-holders\x20(MUST\x20sum\x2010000)','inspection_window_days\x20—\x20the\x20buyer\x27s\x20window\x20to\x20verify\x20the\x20rights\x20before\x20auto-accept','incumbent_take_bps\x20—\x20the\x20displaced\x20royalty-exchange/marketplace\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_commission_bps\x20(KEEP\x20AT\x200),\x20no\x20allocator\x20row\x20reads\x20the\x20benchmark','The\x20winning\x20bidder\x27s\x20address\x20(added\x20to\x20the\x20buy\x20allowlist\x20after\x20the\x20off-chain\x20auction\x20resolves)','The\x20license\x20terms\x20+\x20royalty-share\x20certificate\x20WIP\x20artifact\x20(anchored\x20at\x20buy)','Territory\x20/\x20qualification\x20set\x20for\x20the\x20allowlist\x20gate\x20(optional)','Third-party\x20Arbitration\x20venue\x20selection\x20(independent\x20Permission)']},{'id':'licensing/asset-license-metered','industry':'licensing','variant':'asset-license-metered','product_ref':'beatstars','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','review_mode':'none','machine_shape':[{'name':'licensed','role':'Entry:\x20the\x20buyer\x20purchases\x20a\x20license\x20TIER\x20(basic/premium/unlimited/exclusive\x20—\x20a\x20WIP\x20SKU)\x20for\x20the\x20digital\x20asset;\x20the\x20tier\x20price\x20is\x20escrowed\x20atomically\x20at\x20buy\x20(Order.amount\x20=\x20the\x20selected\x20tier\x20price).\x20The\x20tier\x20selects\x20the\x20PRICE\x20and\x20the\x20terms\x20artifact,\x20NOT\x20the\x20machine\x20shape\x20(one\x20Machine\x20serves\x20all\x20tiers).','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'grant_delivered','role':'The\x20producer/publisher\x20delivers\x20the\x20license\x20grant:\x20the\x20tier\x20terms\x20artifact\x20+\x20the\x20asset\x20files\x20/\x20download-credential\x20hash,\x20written\x20to\x20the\x20evidence\x20Repository.\x20🔴\x20METERED-CAPS\x20GAP\x20—\x20any\x20usage\x20cap\x20in\x20the\x20tier\x20(streams/units/monetization\x20ceiling)\x20is\x20NOT\x20self-executing\x20on\x20chain;\x20it\x20is\x20an\x20attested-counter\x20+\x20arbitration-evidence\x20obligation,\x20disclosed\x20in\x20the\x20terms.','semantic_role':'active','from':[{'prev':'licensed','forward':'DeliverGrant','operator':'merchant','permission_index':0x3e8,'guard_key':'grant_artifact'}]},{'name':'granted','role':'Settlement\x20terminal:\x20the\x20buyer\x20confirms\x20receipt\x20of\x20the\x20grant\x20OR\x20the\x20delivery_window_days\x20time-lock\x20auto-accepts\x20(a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow).\x20The\x20settlement\x20Allocator\x20releases\x20the\x20escrowed\x20tier\x20price\x20and\x20SPLITS\x20it\x20producer/publisher\x20(producer_bps\x20+\x20publisher_bps\x20==\x2010000).','semantic_role':'final','from':[{'prev':'grant_delivered','forward':'AcceptGrant','operator':'order_payer','guard_key':'accept_grant'},{'prev':'grant_delivered','forward':'AutoAcceptGrant','operator':'merchant','permission_index':0x3ea,'guard_key':'delivery_timeout'}]},{'name':'license_cancelled','role':'Refund\x20terminal:\x20the\x20buyer\x20cancels\x20before\x20delivery,\x20rejects\x20the\x20grant\x20(wrong\x20tier\x20/\x20asset\x20not\x20as\x20described),\x20or\x20a\x20third-party\x20Arbitration\x20ruling\x20awards\x20a\x20refund.\x20The\x20whole\x20escrowed\x20tier\x20price\x20refunds\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x20254).\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27,\x20R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'licensed','forward':'CancelBeforeDelivery','operator':'order_payer','guard_key':'cancel_licensed'},{'prev':'grant_delivered','forward':'RejectGrant','operator':'order_payer','guard_key':'reject_grant'},{'prev':'grant_delivered','forward':'ArbRefund','operator':'merchant','permission_index':0x3ea,'guard_key':'arb_refund'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Territory\x20/\x20qualification\x20buy\x20gate\x20(LIVE\x20territory-allowlist\x20primitive):\x20restricts\x20purchase\x20to\x20licensees\x20cleared\x20for\x20the\x20licensed\x20territory\x20or\x20qualification\x20set\x20(Address-vector\x20table\x20constant\x20resolved\x20at\x20buy).\x20An\x20OPEN\x20store\x20(anyone\x20can\x20buy\x20a\x20tier)\x20drops\x20the\x20allowlist\x20via\x20guard_resolutions\x20—\x20the\x20benchmark\x20beat-store\x20default\x20is\x20open.'},{'template_id':'pattern.repository_data_check','host':'machine','key':'grant_artifact','purpose':'License-grant\x20artifact\x20required\x20to\x20deliver\x20(licensed→grant_delivered):\x20the\x20tier\x20terms\x20+\x20asset-files\x20/\x20download-credential\x20hash\x20written\x20to\x20the\x20evidence\x20Repository.\x20Anchors\x20WHAT\x20was\x20licensed\x20(the\x20tier\x20and\x20its\x20usage\x20terms)\x20so\x20a\x20cap\x20dispute\x20has\x20an\x20on-chain\x20artifact\x20to\x20read.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'accept_grant','purpose':'Buyer\x20confirms\x20receipt\x20of\x20the\x20grant\x20(signer\x20==\x20order\x20owner)\x20→\x20granted;\x20the\x20settlement\x20release\x20fires.\x20Bound\x20on\x20the\x20grant_delivered→granted\x20AcceptGrant\x20forward.\x20Distinct\x20key\x20from\x20reject_grant\x20(M-T2).'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'delivery_timeout','purpose':'Delivery-window\x20auto-accept\x20(keeper):\x20Clock\x20>=\x20grant_delivered\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27grant_delivered\x27,\x20find=last)\x20+\x20delivery_window_days\x20—\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow.\x20OPENING\x20gate\x20(time_lock_progress),\x20anchored\x20on\x20the\x20immutable\x20grant_delivered\x20entry\x20record\x20(1272\x20current_time\x20drifts,\x20ETS-C).'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'reject_grant','purpose':'Buyer\x20REJECTS\x20the\x20grant\x20(wrong\x20tier\x20/\x20asset\x20not\x20as\x20described):\x20signer\x20==\x20order\x20owner\x20+\x20node\x20==\x20grant_delivered\x20→\x20license_cancelled,\x20the\x20refund\x20rail\x20fires.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_licensed','purpose':'Buyer\x20cancels\x20BEFORE\x20grant\x20delivery\x20(licensed→license_cancelled):\x20signer\x20==\x20order\x20owner\x20+\x20node\x20==\x20licensed\x20→\x20full\x20refund.\x20The\x20pre-delivery\x20walk-away.'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_refund','purpose':'Arbitration\x20awards\x20the\x20buyer\x20a\x20refund\x20(a\x20usage-cap\x20breach\x20or\x20misdescription\x20proven,\x20with\x20the\x20attested\x20counter\x20as\x20evidence),\x20bound\x20to\x20the\x20grant_delivered→license_cancelled\x20ArbRefund\x20forward:\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order,\x20slot\x201\x20=\x20Arb;\x20the\x20example_table\x20carries\x20the\x20254\x20task-binding\x20row,\x20TASKBIND-01).\x20NEVER\x20gate\x20on\x20arb.status.\x20Disputes\x20filed\x20OFF-Machine\x20(R-M1-11).\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE.'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'usage_attestation_write','policy':{'name':'usage','id_from':'signer','value_type':'String'},'purpose':'🔴\x20METERED-CAPS\x20GAP\x20—\x20the\x20usage-attestation\x20Repository\x20write_guard.\x20A\x20tier\x27s\x20usage\x20cap\x20(streams/units/monetization\x20ceiling)\x20has\x20NO\x20on-chain\x20oracle:\x20the\x20licensee/reporter\x20writes\x20periodic\x20usage\x20rows\x20HERE\x20under\x20a\x20bound\x20write_guard,\x20and\x20a\x20guard\x20reads\x20them\x20via\x20repository.data\x20count-where\x20(query\x201173)\x20as\x20EVIDENCE\x20for\x20a\x20cap-breach\x20dispute.\x20This\x20is\x20only\x20as\x20trustworthy\x20as\x20its\x20write-guard\x20and\x20the\x20off-chain\x20reporter\x20—\x20NEVER\x20a\x20chain-native\x20meter,\x20never\x20an\x20automatic\x20deduction.\x20The\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20(repository.move\x20only\x20asserts\x20the\x20list\x20is\x20non-empty,\x20E_POLICY_WRITE_GUARD_REQUIRED=22\x20—\x20a\x20placeholder\x20is\x20an\x20OPEN\x20write\x20a\x20counterparty\x20could\x20forge\x20a\x20usage\x20row\x20through).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_grant','purpose':'Settlement\x20allocator\x20gate,\x20bound\x20to\x20the\x20settlement\x20rows\x20(guard_key\x20settle_grant):\x20progress.current\x20==\x20granted\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false.\x20SPLITS\x20the\x20escrowed\x20tier\x20price\x20producer/publisher\x20(producer_bps\x20+\x20publisher_bps\x20==\x2010000).\x20One-shot\x20release\x20—\x20resolve\x20tpl_allocator_node_gate_settle_once\x20(protocol\x20254).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'license_refund','purpose':'Refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20license_refund):\x20progress.current\x20==\x20license_cancelled\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20the\x20WHOLE\x20escrowed\x20tier\x20price\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x20254).\x20The\x20cancel/reject/arb\x20forwards\x20ALL\x20land\x20on\x20license_cancelled,\x20so\x20ONE\x20node-gated\x20rail\x20serves\x20them.\x20Resolve\x20tpl_allocator_node_gate_refund.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(append-only\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-B1+CAT-C2).\x20Pays\x20Rate\x2010000\x20to\x20the\x20producer\x20Entity\x20so\x20an\x20AWARDED\x20order\x27s\x20escrow\x20principal\x20still\x20exits:\x20exactly\x20one\x20of\x20license_refund\x20(some\x20==\x20false)\x20/\x20recover_gate\x20(some\x20==\x20true)\x20can\x20pass\x20(D-BUG-2).\x20Resolve\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot.'}],'allocator':{'recipient':'entity','recipient_key':'producer','count':0x4,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'producer','mode':'rate','value_from':'producer_bps','guard_key':'settle_grant','note':'Producer\x20share\x20of\x20the\x20escrowed\x20tier\x20price\x20at\x20granted\x20(producer_bps,\x20default\x208000).\x20An\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deploying\x20AI;\x20a\x20zero-address\x20Entity\x20burns\x20it).'},{'track':'settlement','recipient':'entity','recipient_key':'publisher','mode':'rate','value_from':'publisher_bps','guard_key':'settle_grant','note':'Publisher\x20/\x20label\x20share\x20(publisher_bps,\x20default\x202000).\x20producer_bps\x20+\x20publisher_bps\x20MUST\x20sum\x2010000\x20(allocation.move\x20ERATE_NOT_10000).\x20A\x20sole-producer\x20store\x20sets\x20producer_bps\x2010000\x20/\x20publisher_bps\x200\x20(keep\x20the\x20publisher\x20leg\x20at\x200\x20to\x20an\x20explicit\x20Entity,\x20or\x20drop\x20it\x20and\x20re-pin\x20the\x20producer\x20leg\x20to\x2010000).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_grant','note':'Rate-0\x20ORDER\x20anchor\x20leg\x20(pattern.allocator_order_anchor):\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.\x20Rate\x20sums\x20are\x20per-Allocator,\x20so\x20the\x20anchor\x20shares\x20settle_grant.'},{'track':'settlement','recipient':'entity','recipient_key':'producer','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20leg:\x20an\x20AWARDED\x20order\x27s\x20escrow\x20principal\x20(claimed_by\x20some\x20==\x20true)\x20exits\x20to\x20the\x20producer\x20Entity.\x20The\x20polarity\x20twin\x20of\x20license_refund\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'license_refund','note':'Full\x20refund\x20of\x20the\x20escrowed\x20tier\x20price\x20to\x20the\x20order-anchored\x20buyer\x20at\x20license_cancelled\x20(slot\x20254,\x20the\x20task-binding\x20order\x20anchor\x20—\x20mainnet-verified\x20executable;\x20a\x20STATIC\x20slot\x20aborts\x20ERECIPIENT_NOT_FOR_OBJECT).\x20claimed_by\x20some\x20==\x20false;\x20once_per_order\x20stops\x20a\x20replay.'}],'description':'ESCROWED\x20tier-price\x20purchase\x20+\x20producer/publisher\x20SPLIT\x20release.\x20The\x20pool\x20holds\x20the\x20selected\x20license-tier\x20price\x20at\x20buy\x20and\x20releases\x20at\x20`granted`\x20(buyer\x20confirm\x20or\x20delivery_window_days\x20auto-accept),\x20SPLIT\x20producer/publisher\x20(producer_bps\x20+\x20publisher_bps\x20==\x2010000,\x20Rate\x20plan\x20—\x20allocation.move\x20ERATE_NOT_10000).\x20DIRECT-SALES:\x20platform_commission_bps\x20and\x20merchant_service_fee_bps\x20default\x200\x20(WoWok\x20takes\x20no\x20commission;\x20the\x20producer/publisher\x20keep\x20the\x20whole\x20sale),\x20so\x20the\x20threshold\x20stays\x200.\x20An\x20aggregator\x20(a\x20label\x20reselling\x20several\x20producers)\x20may\x20charge\x20its\x20own\x20explicit,\x20disclosed\x20fee\x20to\x20a\x20NON-EMPTY\x20Entity\x20—\x20never\x20via\x20Surplus\x20(Surplus\x20calls\x20balance::withdraw_all\x20and\x20doubles\x20as\x20draining\x20the\x20pool).\x20Every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(a\x20Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20the\x20slot-254\x20refund\x20leg)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(CR-01).\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot,\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20aborts\x20code\x2016.\x20TWO\x20refund\x20rails:\x20license_refund\x20(claimed_by\x20some\x20==\x20false)\x20and\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20—\x20exactly\x20one\x20can\x20ever\x20pass\x20(escrow-exit\x20invariant,\x20D-BUG-2).\x20🔴\x20METERED\x20USAGE\x20CAPS\x20are\x20NOT\x20chain-enforced:\x20they\x20ride\x20the\x20attested\x20usage\x20Repository\x20(usage_attestation_write)\x20+\x20count-where\x20evidence\x20(query\x201173)\x20into\x20Arbitration,\x20never\x20an\x20automatic\x20deduction.'},'key_risk':'Fixed-tier\x20license\x20SKUs\x20sold\x20direct;\x20🔴\x20usage\x20caps\x20(streams/units/ceiling)\x20have\x20NO\x20on-chain\x20meter\x20—\x20they\x20are\x20attested-counter\x20+\x20arbitration\x20evidence,\x20never\x20self-executing,\x20and\x20must\x20be\x20disclosed\x20as\x20such.','build_notes':['🔴\x20USAGE-CAP\x20METERING\x20(chain\x20GAP\x20—\x20verified\x20against\x20the\x20Move\x20source:\x20NO\x20usage\x20oracle\x20exists\x20on\x20chain):\x20a\x20license\x20tier\x27s\x20usage\x20caps\x20(streams,\x20units,\x20monetization\x20ceiling,\x20territory)\x20are\x20NOT\x20self-executing.\x20The\x20honest\x20mechanism\x20is\x20an\x20ATTESTED\x20Repository\x20counter\x20—\x20the\x20licensee/reporter\x20writes\x20periodic\x20usage\x20rows\x20under\x20a\x20bound\x20write_guard\x20(usage_attestation_write),\x20and\x20a\x20guard\x20reads\x20them\x20via\x20repository.data\x20count-where\x20(query\x201173)\x20as\x20EVIDENCE.\x20This\x20is\x20only\x20as\x20trustworthy\x20as\x20its\x20write-guard\x20and\x20the\x20off-chain\x20reporter;\x20it\x20is\x20NEVER\x20a\x20chain-native\x20meter.\x20A\x20cap\x20breach\x20is\x20a\x20DISPUTE\x20that\x20routes\x20to\x20Arbitration\x20with\x20the\x20attested\x20counter\x20as\x20evidence\x20—\x20never\x20an\x20automatic\x20on-chain\x20deduction.\x20Do\x20not\x20represent\x20caps\x20as\x20chain-enforced.','TIERED\x20LICENSE\x20SKUs:\x20basic/premium/unlimited/exclusive\x20are\x20WIP\x20products\x20(SKUs)\x20priced\x20at\x20buy\x20—\x20the\x20tier\x20selects\x20the\x20PRICE\x20and\x20the\x20terms\x20artifact,\x20NOT\x20the\x20machine\x20shape\x20(one\x20Machine\x20serves\x20all\x20tiers).\x20The\x20producer/publisher\x20split\x20(producer_bps\x20+\x20publisher_bps\x20==\x2010000)\x20applies\x20to\x20whichever\x20tier\x20price\x20is\x20escrowed.\x20A\x20sole-producer\x20store\x20sets\x20producer_bps\x2010000\x20/\x20publisher_bps\x200.','GRANT\x20DELIVERY:\x20the\x20license\x20grant\x20(tier\x20terms\x20+\x20asset\x20files\x20/\x20download-credential\x20hash)\x20is\x20delivered\x20as\x20the\x20grant_artifact\x20Repository\x20row\x20at\x20grant_delivered;\x20the\x20buyer\x20accepts\x20(or\x20the\x20delivery_window_days\x20time-lock\x20auto-accepts)\x20→\x20settlement\x20releases\x20and\x20splits\x20producer/publisher.','EVIDENCE\x20WRITE\x20GATE\x20(HOST-GRAPH-01):\x20the\x20usage-attestation\x20and\x20grant-artifact\x20Repositories\x20MUST\x20carry\x20a\x20bound\x20write_guard\x20—\x20repository.move\x20only\x20asserts\x20the\x20write_guard\x20LIST\x20is\x20non-empty\x20(E_POLICY_WRITE_GUARD_REQUIRED=22),\x20never\x20what\x20a\x20listed\x20guard\x20proves,\x20so\x20a\x20placeholder\x20is\x20an\x20OPEN\x20write\x20a\x20counterparty\x20could\x20pre-write\x20to\x20forge\x20a\x20usage\x20row\x20or\x20a\x20grant.\x20Bind\x20the\x20writer\x20(signer\x20/\x20Permission\x20staff\x20/\x20Order\x20holder).','ESCROW\x20EXIT\x20INVARIANT\x20(az-mn-261007,\x20D-BUG-2,\x20catalog-wide):\x20the\x20refund\x20rail\x20(license_refund)\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20PAIR\x20it\x20with\x20the\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20NO\x20node\x20equality\x20leg\x20—\x20UPWC-K1/CAT-B1+CAT-C2)\x20paying\x20Rate\x2010000\x20to\x20the\x20producer\x20so\x20an\x20AWARDED\x20order\x27s\x20residual\x20principal\x20still\x20exits.\x20Exactly\x20one\x20of\x20the\x20two\x20can\x20ever\x20pass.','REPLAY\x20PROTECTION:\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot\x20on\x20the\x20settlement\x20allocator\x20(the\x20chain\x20derives\x20the\x20once-key\x20from\x20payment_info.for_object),\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20of\x20the\x20grant-release\x20aborts\x20code\x2016\x20(E_ONCE_TRIGGERED).\x20Refund\x20rails\x20pay\x20the\x20order-anchored\x20buyer\x20via\x20protocol\x20slot\x20254\x20(a\x20STATIC\x20slot\x20aborts\x20ERECIPIENT_NOT_FOR_OBJECT).','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20rows\x20pay\x20GuardIdentifier(254)\x20—\x20funds\x20land\x20ON\x20the\x20Order\x20object;\x20the\x20buyer\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Surface\x20the\x20second\x20step\x20in\x20the\x20storefront\x20UX.','TERRITORY\x20/\x20QUALIFICATION\x20GATE\x20(LIVE):\x20the\x20buy_guard\x20allowlist\x20(pattern.identity_check_allowlist)\x20restricts\x20purchase\x20to\x20licensees\x20cleared\x20for\x20a\x20territory/qualification\x20set.\x20The\x20benchmark\x20beat-store\x20default\x20is\x20OPEN\x20—\x20drop\x20the\x20allowlist\x20via\x20guard_resolutions\x20for\x20an\x20open\x20store.','DIRECT-SALES\x20ECONOMICS:\x20platform_commission_bps\x20/\x20merchant_service_fee_bps\x20default\x200\x20—\x20the\x20producer/publisher\x20keep\x20the\x20whole\x20sale\x20(split\x20between\x20themselves).\x20An\x20aggregator\x20(a\x20label/publisher\x20reselling\x20several\x20producers)\x20may\x20charge\x20its\x20own\x20explicit,\x20disclosed\x20fee\x20to\x20a\x20NON-EMPTY\x20Entity,\x20never\x20via\x20Surplus\x20(Surplus\x20calls\x20balance::withdraw_all\x20and\x20doubles\x20as\x20draining\x20the\x20pool).','COMPLIANCE\x20(L-01):\x20a\x20license\x20tier\x20is\x20a\x20USAGE\x20GRANT,\x20never\x20a\x20security\x20or\x20an\x20investment\x20—\x20copy\x20must\x20NOT\x20promise\x20returns\x20or\x20promote\x20coin/token\x20price\x20(\x27不构成投资建议或收益承诺\x20/\x20not\x20investment\x20advice\x20or\x20a\x20yield\x20promise\x27).\x20Disclose\x20the\x20caps\x20as\x20attested-counter\x20obligations,\x20not\x20chain-enforced\x20limits.','REPUTATION\x20RAIL\x20(optional):\x20review_mode\x20defaults\x20to\x20none;\x20a\x20producer/publisher\x20reputation\x20review\x20rail\x20is\x20addable\x20per-build\x20via\x20inputs.review_mode=\x27review\x27\x20(an\x20OPTIONAL\x20`reviewed`\x20side-stop\x20off\x20grant_delivered\x20that\x20exits\x20back\x20to\x20the\x20settlement\x20rail\x20—\x20never\x20a\x20settlement\x20gateway,\x20R-DEAD-END).','DISPUTES\x20route\x20to\x20a\x20THIRD-PARTY\x20Arbitration\x20venue\x20(arbitration_mode\x20third_party,\x20an\x20independent\x20Permission\x20—\x20R2\x20/\x20E_ARBITRATION_PERMISSION_CONFLICT=33);\x20the\x20arb_refund\x20ruling\x20edge\x20(tpl_forward_arb_ruling_won)\x20refunds\x20the\x20buyer;\x20disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11,\x20no\x20claim\x20node).\x20Un-pause\x20the\x20Arbitration\x20after\x20deploy\x20(new\x20Arbitrations\x20default\x20bPaused=true;\x20pause:false\x20via\x20permission\x20356).','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20license\x20tier\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net),\x20or\x20self-hosted;\x20an\x20empty\x20wip\x20on\x20mainnet\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'producer_bps':0x1f40,'publisher_bps':0x7d0,'delivery_window_days':0x3,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'threshold':0x0,'incumbent_take_bps':0xbb8},'time_anchors':{'delivery_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27grant_delivered\x27,\x20find=last)\x20—\x20the\x20immutable\x20grant-delivered\x20ENTRY\x20timestamp;\x20delivery_window_days\x20auto-accept\x20fires\x20from\x20it\x20(1272\x20current_time\x20drifts,\x20ETS-C)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20—\x20the\x20escrowed\x20tier\x20price\x20refunds\x20in\x20full\x20on\x20buyer\x20reject\x20/\x20pre-delivery\x20cancel\x20/\x20arb\x20ruling\x20(license_refund,\x20slot-254\x20order-anchored)','R2\x20independent\x20THIRD-PARTY\x20arbitration\x20Permission\x20(arbitration_mode\x20third_party;\x20E_ARBITRATION_PERMISSION_CONFLICT=33)\x20—\x20cap-breach\x20/\x20misdescription\x20disputes\x20resolve\x20at\x20a\x20neutral\x20venue,\x20with\x20the\x20attested\x20usage\x20counter\x20as\x20evidence','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner','R4\x20grant\x20acceptance\x20by\x20the\x20buyer\x20only\x20(accept_grant,\x20signer\x20==\x20order\x20owner)\x20—\x20producer\x20self-confirm\x20forbidden;\x20the\x20delivery_window_days\x20time-lock\x20is\x20the\x20keeper\x20complement,\x20never\x20a\x20self-release','R5\x20the\x20tier\x20price\x20and\x20both\x20split\x20legs\x20anchored\x20to\x20the\x20order\x20Allocation\x20(the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order)','R6\x20Rate\x20plan\x20sums\x2010000\x20(producer_bps\x20+\x20publisher_bps);\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20the\x20tier\x20SKUs,\x20the\x20split\x20plan\x20and\x20the\x20usage\x20terms\x20are\x20fully\x20configured\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20delivery-window\x20auto-accept\x20and\x20the\x20arb-ruling\x20advance\x20only\x20(no\x20charge\x20authority)','R10\x20territory\x20/\x20qualification\x20buy\x20gate\x20via\x20the\x20allowlist\x20(open-store\x20default\x20drops\x20it)','R11\x20tier\x20terms\x20+\x20asset\x20grant\x20anchored\x20as\x20the\x20WIP\x20artifact\x20and\x20the\x20grant_artifact\x20Repository\x20row;\x20🔴\x20usage\x20caps\x20attested\x20to\x20the\x20usage\x20Repository\x20(write-guarded),\x20read\x20as\x20arbitration\x20evidence\x20(query\x201173),\x20never\x20an\x20oracle'],'keeper_dependencies':['delivery-window\x20auto-accept\x20(grant_delivered\x20entry\x20+\x20delivery_window_days)','arbitration-ruling\x20advance\x20(push\x20grant_delivered→license_cancelled\x20on\x20a\x20buyer-won\x20ruling)','NO\x20auto-charge\x20authority\x20by\x20design;\x20NO\x20on-chain\x20usage\x20metering\x20(attestation\x20is\x20off-chain\x20reporter-driven)'],'recommended_role':'merchant','role_rationale':'The\x20producer/publisher\x20owns\x20the\x20licensing\x20Service,\x20mints\x20the\x20tier\x20SKUs\x20and\x20delivers\x20the\x20grant\x20artifact;\x20buyers\x20are\x20licensees.\x20Usage\x20caps\x20are\x20attested\x20off-chain\x20and\x20enforced\x20through\x20Arbitration,\x20not\x20a\x20chain\x20meter.','differences':['Fixed-TIER\x20direct\x20license\x20sale\x20(basic/premium/unlimited/exclusive\x20WIP\x20SKUs)\x20vs\x20the\x20sibling\x27s\x20off-chain-resolved\x20auction\x20of\x20a\x20royalty\x20share','Producer/publisher\x20split\x20on\x20a\x20single-tier\x20price\x20(vs\x20the\x20sibling\x27s\x20multi-holder\x20royalty-share\x20split)','🔴\x20Usage\x20caps\x20are\x20an\x20attested-counter\x20+\x20arbitration-evidence\x20obligation\x20(no\x20on-chain\x20metering\x20oracle)\x20—\x20the\x20sibling\x20sells\x20a\x20share\x20of\x20ACTUAL\x20royalties\x20and\x20has\x20no\x20per-use\x20cap'],'user_inputs':['producer_bps\x20/\x20publisher_bps\x20—\x20the\x20producer/publisher\x20split\x20(MUST\x20sum\x2010000;\x20a\x20sole\x20producer\x20sets\x2010000/0)','delivery_window_days\x20—\x20the\x20buyer\x27s\x20window\x20to\x20confirm\x20the\x20grant\x20before\x20auto-accept','incumbent_take_bps\x20—\x20the\x20displaced\x20beat/asset-market\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_commission_bps\x20(KEEP\x20AT\x200),\x20no\x20allocator\x20row\x20reads\x20the\x20benchmark','The\x20license\x20tiers\x20and\x20their\x20prices\x20(WIP\x20SKUs:\x20basic/premium/unlimited/exclusive)','The\x20per-tier\x20usage\x20caps\x20+\x20the\x20usage-attestation\x20reporter\x20(🔴\x20off-chain;\x20the\x20on-chain\x20counter\x20is\x20attested\x20evidence,\x20never\x20an\x20oracle)','The\x20grant\x20artifact\x20(tier\x20terms\x20+\x20asset-files\x20/\x20download-credential\x20hash)','Third-party\x20Arbitration\x20venue\x20selection\x20(independent\x20Permission)']},{'id':'crowdfunding/all-or-nothing-threshold','industry':'crowdfunding','variant':'all-or-nothing-threshold','product_ref':'kickstarter','archetype':'leader','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','crowdfunding_mode':'threshold','review_mode':'none','machine_shape':[{'name':'pledged','role':'Entry:\x20a\x20backer\x20contributes.\x20The\x20contribution\x20is\x20escrowed\x20in\x20THIS\x20order\x27s\x20OWN\x20Allocation\x20(payment_info.for_object\x20=\x20this\x20Order,\x20NEVER\x20balance-joined\x20into\x20a\x20shared\x20pot\x20—\x20so\x20attribution\x20survives\x20and\x20the\x20contribution\x20is\x20refundable\x20to\x20THIS\x20backer)\x20and\x20recorded\x20as\x20a\x20writer-bound\x20row\x20in\x20the\x20shared\x20campaign\x20Repository\x20(id_from\x20signer,\x20value\x20=\x20the\x20contribution\x20amount,\x20write_guard\x20binds\x20order.owner\x20==\x20Signer).\x20Order.amount\x20=\x20the\x20contribution.\x20A\x20backer\x20MAY\x20withdraw\x20the\x20pledge\x20at\x20any\x20time\x20BEFORE\x20the\x20campaign\x20deadline\x20(order_payer\x20→\x20withdrawn):\x20withdrawal\x20REMOVES\x20their\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20—\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it)\x20so\x20the\x20sum-where\x20(1174)\x20aggregate\x20stops\x20counting\x20it,\x20and\x20refunds\x20the\x20contribution\x20in\x20full.\x20AFTER\x20the\x20deadline\x20the\x20contribution\x20is\x20committed\x20to\x20the\x20threshold\x20outcome\x20(release\x20XOR\x20missed-refund)\x20—\x20no\x20post-deadline\x20withdrawal.','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'funded_released','role':'Settlement\x20terminal\x20(GOAL\x20MET):\x20at\x20the\x20campaign\x20deadline\x20the\x20on-chain\x20aggregate\x20raise\x20(repository.data\x20sum-where,\x20query\x201174\x20→\x20U256,\x20over\x20the\x20keeper-enumerated\x20writer-bound\x20contribution\x20rows)\x20>=\x20funding_threshold,\x20so\x20a\x20keeper\x20advances\x20this\x20order\x20and\x20the\x20settlement\x20Allocator\x20RELEASES\x20the\x20escrowed\x20contribution\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000\x20—\x20WoWok\x20takes\x20no\x20platform\x20commission;\x20the\x20project\x20keeps\x20the\x20whole\x20raise).','semantic_role':'final','from':[{'prev':'pledged','forward':'ReleaseOnFunded','operator':'merchant','permission_index':0x3ea,'guard_key':'threshold_release'}]},{'name':'missed_refunded','role':'Refund\x20terminal\x20(GOAL\x20MISSED):\x20at\x20the\x20deadline\x20the\x20aggregate\x20<\x20funding_threshold,\x20so\x20a\x20keeper\x20BATCH-advances\x20every\x20backer\x27s\x20order\x20(enumerating\x20the\x20contributor\x20row\x20ids\x20via\x20find-where\x201176\x20/\x20keys-where\x201177)\x20and\x20the\x20refund\x20Allocator\x20returns\x20each\x20contribution\x20IN\x20FULL\x20to\x20its\x20OWN\x20backer\x20(for_object\x20slot\x20254\x20—\x20funds\x20land\x20on\x20the\x20backer\x27s\x20Order,\x20extracted\x20with\x20a\x20separate\x20owner_receive).\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20without\x20the\x20guard\x20chain\x20(R-M1-11).','semantic_role':'cancelled','from':[{'prev':'pledged','forward':'RefundOnMissed','operator':'merchant','permission_index':0x3ea,'guard_key':'threshold_refund'}]},{'name':'withdrawn','role':'Buyer-withdrawal\x20terminal\x20(PRE-DEADLINE):\x20a\x20backer\x20cancels\x20their\x20pledge\x20while\x20the\x20campaign\x20is\x20still\x20live.\x20The\x20withdrawal\x20REMOVES\x20their\x20writer-bound\x20contribution\x20row\x20from\x20the\x20campaign\x20Repository\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20—\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it,\x20and\x20the\x20sum-where\x201174\x20aggregate\x20stops\x20counting\x20the\x20withdrawn\x20pledge\x20—\x20a\x20backer\x20can\x20never\x20inflate\x20a\x20\x27goal\x20met\x27\x20then\x20pull\x20their\x20money)\x20and\x20the\x20refund\x20Allocator\x20returns\x20the\x20contribution\x20IN\x20FULL\x20to\x20the\x20backer\x27s\x20own\x20order\x20(slot\x20254,\x20extracted\x20with\x20a\x20separate\x20owner_receive).\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20(R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'pledged','forward':'WithdrawPledge','operator':'order_payer','guard_key':'pre_deadline_withdraw'}]}],'guards':[{'template_id':'tpl_crowdfunding_threshold_gate','host':'machine','key':'threshold_release','purpose':'RELEASE\x20polarity\x20of\x20the\x20funding-threshold\x20gate,\x20bound\x20to\x20the\x20pledged→funded_released\x20forward:\x20logic_and[\x20sum-where(1174\x20over\x20the\x20campaign\x20contribution\x20rows)\x20>=\x20funding_threshold,\x20Clock\x20>=\x20campaign_deadline_ms\x20].\x20The\x20aggregate\x20is\x20a\x20READ-ONLY\x20sum\x20over\x20keeper-enumerated\x20writer-bound\x20rows\x20(max\x20100\x20candidate\x20ids),\x20never\x20a\x20re-computation\x20of\x20every\x20escrow\x20balance\x20—\x20disclose\x20the\x20boundary\x20(L-04).\x20The\x20deadline\x20is\x20an\x20ABSOLUTE\x20campaign\x20timestamp\x20shared\x20by\x20every\x20backer\x20(pattern.time_lock_absolute),\x20NOT\x20a\x20per-order\x20entry+duration\x20lock.'},{'template_id':'tpl_crowdfunding_threshold_gate','host':'machine','key':'threshold_refund','purpose':'REFUND\x20polarity\x20of\x20the\x20SAME\x20gate,\x20bound\x20to\x20the\x20pledged→missed_refunded\x20forward:\x20logic_and[\x20sum-where(1174)\x20<\x20funding_threshold,\x20Clock\x20>=\x20campaign_deadline_ms\x20]\x20(swap\x20the\x20aggregate\x20leaf\x20to\x20logic_as_u256_lesser).\x20Mutually\x20exclusive\x20with\x20threshold_release\x20on\x20the\x20same\x20aggregate,\x20so\x20exactly\x20one\x20forward\x20is\x20satisfiable\x20once\x20the\x20deadline\x20passes\x20—\x20the\x20D-BUG-2\x20escrow-exit\x20polarity\x20specialized\x20to\x20a\x20funding\x20campaign.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'pre_deadline_withdraw','purpose':'Pre-deadline\x20withdrawal\x20gate,\x20bound\x20to\x20the\x20pledged→withdrawn\x20forward:\x20logic_as_u256_lesser_or_equal[context(Clock),\x20identifier[N](campaign_deadline_ms)]\x20—\x20the\x20CLOSING-window\x20direction\x20(a\x20backer\x20may\x20withdraw\x20only\x20WHILE\x20the\x20campaign\x20is\x20live).\x20ANCHOR\x20IS\x20THE\x20ABSOLUTE\x20shared\x20campaign\x20deadline\x20(the\x20SAME\x20campaign_deadline_ms\x20identifier\x20the\x20threshold\x20gate\x20reads\x20via\x20pattern.time_lock_absolute),\x20NOT\x20a\x20per-order\x20entry+duration:\x20every\x20backer\x20faces\x20ONE\x20deadline.\x20After\x20the\x20deadline\x20this\x20forward\x20aborts,\x20so\x20a\x20withdrawal\x20can\x20never\x20defund\x20a\x20campaign\x20whose\x20goal\x20was\x20already\x20met\x20—\x20the\x20buyer-withdrawal\x20exit\x20and\x20the\x20keeper\x20deadline\x20settlement\x20are\x20mutually\x20exclusive\x20IN\x20TIME\x20(D-BUG-2:\x20this\x20is\x20the\x20claimed_by-false\x20buyer-side\x20twin\x20of\x20the\x20deadline\x20rails).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'funded_release','purpose':'Settlement\x20allocator\x20gate,\x20bound\x20to\x20the\x20release\x20row\x20(guard_key\x20funded_release):\x20progress.current\x20==\x20funded_released\x20(the\x20terminal)\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false.\x20Releases\x20the\x20escrowed\x20contribution\x20(Rate\x2010000)\x20to\x20the\x20project\x20Entity.\x20One-shot\x20—\x20resolve\x20tpl_allocator_node_gate_settle_once\x20(protocol\x20254).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'missed_refund','purpose':'Refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20missed_refund):\x20progress.current\x20==\x20missed_refunded\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20contribution\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x20254).\x20Resolve\x20tpl_allocator_node_gate_refund.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(Order.dispute\x20is\x20append-only\x20—\x20a\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'withdraw_refund','purpose':'Withdrawal-refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20withdraw_refund):\x20progress.current\x20==\x20withdrawn\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20contribution\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x20254).\x20Distinct\x20from\x20missed_refund\x20by\x20the\x20node\x20it\x20reads\x20(withdrawn\x20vs\x20missed_refunded),\x20so\x20the\x20two\x20buyer-refund\x20rails\x20never\x20overlap;\x20once_per_order\x20arms\x20slot\x20254\x20once.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Project-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-B1+CAT-C2:\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion).\x20Pays\x20Rate\x2010000\x20to\x20the\x20project\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20ARBITRATION-AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20missed_refund\x20/\x20withdraw_refund\x20(claimed_by\x20some\x20==\x20false)\x20and\x20recover_gate\x20(some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion.'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','policy':{'name':'contribution','id_from':'signer','value_type':'U64'},'purpose':'Campaign\x20Repository\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20to\x20the\x20contributing\x20backer\x20(identity\x20leaf:\x20logic_or[query(1562\x20order.owner)==Signer,\x20query(1567\x20order.agent\x20has,\x20Signer)]):\x20repository.move\x20only\x20asserts\x20the\x20write_guard\x20LIST\x20is\x20non-empty\x20(E_POLICY_WRITE_GUARD_REQUIRED=22),\x20never\x20what\x20a\x20listed\x20guard\x20proves,\x20so\x20a\x20placeholder\x20that\x20returns\x20true\x20is\x20an\x20OPEN\x20write\x20—\x20anyone\x20could\x20inflate\x20the\x20aggregate\x20and\x20forge\x20a\x20\x27goal\x20met\x27.\x20id_from\x20signer\x20keys\x20each\x20row\x20to\x20the\x20backer\x27s\x20own\x20address\x20(one\x20row\x20per\x20funder);\x20the\x20value\x20is\x20the\x20contribution\x20amount\x20the\x20sum-where\x20(1174)\x20totals.\x20The\x20SAME\x20writer-binding\x20is\x20what\x20makes\x20withdrawal\x20safe:\x20the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20derives\x20the\x20row\x20id\x20from\x20the\x20signer,\x20so\x20a\x20backer\x20can\x20remove\x20ONLY\x20their\x20own\x20contribution\x20row.\x20EXISTENCE-IS-NOT-TRUST\x20(R-X1-17).'}],'allocator':{'recipient':'entity','recipient_key':'project','count':0x3,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'funded_release','note':'Release\x20the\x20escrowed\x20contribution\x20(Rate\x2010000\x20=\x20the\x20whole\x20raise)\x20to\x20the\x20project\x20Entity\x20at\x20funded_released.\x20An\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deploying\x20AI;\x20a\x20zero-address\x20Entity\x20burns\x20it).\x20WoWok\x20takes\x20no\x20platform\x20commission,\x20so\x20there\x20is\x20no\x20platform\x20Rate\x20leg\x20—\x20the\x20project\x20keeps\x20100%.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'funded_release','note':'Rate-0\x20ORDER\x20anchor\x20leg\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Project-recovery\x20leg:\x20the\x20escrow\x20principal\x20of\x20an\x20ARBITRATION-AWARDED\x20order\x20(claimed_by\x20some\x20==\x20true)\x20exits\x20to\x20the\x20project\x20Entity\x20(the\x20backer\x20was\x20already\x20made\x20whole\x20from\x20the\x20compensation\x20fund).\x20The\x20polarity\x20twin\x20of\x20missed_refund\x20—\x20exactly\x20one\x20can\x20pass\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'missed_refund','note':'Full\x20per-contributor\x20refund\x20of\x20the\x20escrowed\x20contribution\x20to\x20the\x20order-anchored\x20backer\x20at\x20missed_refunded\x20(slot\x20254,\x20the\x20task-binding\x20order\x20anchor\x20—\x20mainnet-verified\x20executable;\x20a\x20STATIC\x20slot\x20aborts\x20ERECIPIENT_NOT_FOR_OBJECT).\x20claimed_by\x20some\x20==\x20false;\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).\x20once_per_order\x20stops\x20a\x20replay.\x20Because\x20each\x20order\x27s\x20Allocation\x20is\x20for_object-bound\x20to\x20ITS\x20OWN\x20order\x20and\x20never\x20pooled,\x20this\x20leg\x20refunds\x20THIS\x20backer\x20THEIR\x20OWN\x20contribution\x20—\x20attribution\x20is\x20preserved\x20by\x20not\x20pooling.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'withdraw_refund','note':'Pre-deadline\x20pledge-WITHDRAWAL\x20refund:\x20returns\x20the\x20escrowed\x20contribution\x20IN\x20FULL\x20to\x20the\x20order-anchored\x20backer\x20(slot\x20254)\x20when\x20they\x20withdraw\x20while\x20the\x20campaign\x20is\x20still\x20live\x20(progress.current\x20==\x20withdrawn,\x20claimed_by\x20some\x20==\x20false).\x20The\x20withdrawal\x20ALSO\x20removes\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal,\x20id_from\x20signer\x20→\x20only\x20the\x20row\x27s\x20own\x20writer)\x20so\x20the\x20aggregate\x20sum-where\x20(1174)\x20stops\x20counting\x20it\x20—\x20a\x20withdrawn\x20pledge\x20can\x20never\x20inflate\x20a\x20\x27goal\x20met\x27\x20then\x20pull\x20its\x20money.\x20Distinct\x20from\x20missed_refund\x20by\x20the\x20node\x20it\x20reads;\x20once_per_order\x20arms\x20slot\x20254\x20once\x20so\x20the\x20two\x20buyer-refund\x20rails\x20cannot\x20both\x20pay.'}],'description':'ALL-OR-NOTHING\x20THRESHOLD\x20ESCROW\x20+\x20per-contributor\x20release/refund.\x20Each\x20backer\x27s\x20contribution\x20is\x20escrowed\x20in\x20its\x20OWN\x20unpooled\x20Allocation\x20(for_object\x20=\x20the\x20backer\x27s\x20Order)\x20—\x20the\x20money\x20is\x20NEVER\x20balance-joined\x20into\x20a\x20shared\x20pot,\x20so\x20attribution\x20survives\x20and\x20a\x20missed\x20campaign\x20refunds\x20every\x20backer\x20their\x20own\x20contribution.\x20At\x20the\x20campaign\x20deadline\x20a\x20settlement\x20Guard\x20reads\x20the\x20on-chain\x20aggregate\x20raise\x20(repository.data\x20sum-where,\x20query\x201174\x20→\x20U256,\x20over\x20the\x20keeper-enumerated\x20writer-bound\x20contribution\x20rows)\x20and\x20decides:\x20aggregate\x20>=\x20funding_threshold\x20→\x20RELEASE\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000);\x20aggregate\x20<\x20funding_threshold\x20→\x20REFUND\x20each\x20contribution\x20to\x20its\x20own\x20backer\x20(slot\x20254).\x20The\x20two\x20legs\x20are\x20mutually\x20exclusive\x20on\x20the\x20same\x20aggregate\x20(D-BUG-2\x20escrow-exit\x20polarity).\x20DIRECT-SALES:\x20platform_commission_bps\x20and\x20merchant_service_fee_bps\x20default\x200\x20(WoWok\x20takes\x20no\x20platform\x20commission;\x20the\x20project\x20keeps\x20the\x20whole\x20raise),\x20so\x20the\x20ALLOCATOR\x20threshold\x20(fee_params.threshold)\x20stays\x200\x20—\x20it\x20is\x20the\x20Allocation.minimum-balance\x20gate\x20and\x20is\x20DISTINCT\x20from\x20funding_threshold\x20(the\x20campaign\x20aggregate\x20goal\x20read\x20by\x20the\x20sum-where\x20gate);\x20keep\x20fee_params.threshold\x20<=\x20the\x20smallest\x20contribution\x20or\x20the\x20release/refund\x20strands.\x20Every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(a\x20Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20the\x20slot-254\x20refund\x20leg)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01).\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot,\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20aborts\x20code\x2016.\x20TWO\x20refund\x20rails:\x20the\x20missed-campaign\x20refund\x20(missed_refund,\x20claimed_by\x20some\x20==\x20false)\x20and\x20the\x20project-recovery\x20sweep\x20(recover_gate,\x20claimed_by\x20some\x20==\x20true)\x20—\x20exactly\x20one\x20can\x20ever\x20pass.\x20🔴\x20The\x20aggregate\x20is\x20a\x20read\x20over\x20an\x20ATTESTED\x20roster\x20(keeper-supplied\x20candidate\x20ids,\x20max\x20100),\x20NOT\x20a\x20chain-verified\x20total-custody\x20proof\x20—\x20a\x20campaign\x20with\x20>100\x20contributors\x20splits\x20the\x20roster\x20across\x20settlements.'},'key_risk':'All-or-nothing\x20raise:\x20each\x20contribution\x20is\x20escrowed\x20UNPOOLED\x20so\x20a\x20missed\x20goal\x20auto-refunds\x20every\x20backer.\x20The\x20threshold\x20total\x20is\x20a\x20keeper-attested\x20aggregate,\x20not\x20a\x20custody\x20proof,\x20and\x20post-raise\x20delivery\x20is\x20backed\x20only\x20by\x20compensation\x20+\x20arbitration.','build_notes':['UNPOOLED\x20PER-CONTRIBUTOR\x20ESCROW\x20(the\x20whole\x20point,\x20LIVE):\x20every\x20backer\x27s\x20contribution\x20sits\x20in\x20its\x20OWN\x20Allocation\x20with\x20payment_info.for_object\x20bound\x20to\x20that\x20backer\x27s\x20Order.\x20The\x20money\x20is\x20NEVER\x20balance::join-ed\x20into\x20a\x20shared\x20pot\x20(allocation.move:810/824\x20would\x20merge\x20it\x20and\x20lose\x20attribution)\x20—\x20so\x20the\x20chain\x20can\x20always\x20answer\x20\x27whose\x20money\x20is\x20this\x27\x20and\x20refund\x20it\x20to\x20the\x20right\x20backer.\x20A\x20for_object-bound\x20Allocation\x20forces\x20every\x20recipient\x20leg\x20to\x20the\x20bound\x20address\x20(allocation.move:523-524,\x20ERECIPIENT_NOT_FOR_OBJECT=15),\x20which\x20is\x20exactly\x20what\x20the\x20slot-254\x20refund\x20leg\x20wants.','THRESHOLD\x20GATE\x20=\x20ON-CHAIN\x20AGGREGATE\x20(LIVE,\x20zero\x20chain\x20change):\x20the\x20settlement\x20Guard\x20reads\x20repository.data\x20sum-where\x20(query\x201174\x20→\x20U256,\x20checked_add\x20overflow-safe)\x20over\x20the\x20campaign\x27s\x20contribution\x20rows\x20and\x20compares\x20against\x20funding_threshold\x20(tpl_crowdfunding_threshold_gate).\x20No\x20crowdfunding\x20primitive\x20exists\x20or\x20is\x20needed\x20—\x20the\x20aggregate\x20is\x20a\x20read-only\x20view;\x20the\x20money\x20stays\x20SEPARATE\x20in\x20each\x20order\x27s\x20Allocation.','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17,\x20existence-is-not-trust):\x20each\x20contribution\x20row\x20is\x20written\x20under\x20pattern.repository_write_authorization\x20with\x20an\x20identity\x20leaf\x20(order.owner\x20==\x20Signer\x20/\x20order.agent\x20has\x20Signer)\x20and\x20id_from\x20signer,\x20so\x20a\x20backer\x20can\x20only\x20record\x20their\x20OWN\x20contribution.\x20An\x20unbound\x20write_guard\x20makes\x20the\x20aggregate\x20forgeable\x20—\x20anyone\x20could\x20inflate\x20the\x20total\x20and\x20fake\x20a\x20\x27goal\x20met\x27.','ABSOLUTE\x20SHARED\x20DEADLINE\x20(LIVE):\x20settlement\x20opens\x20only\x20at\x20Clock\x20>=\x20campaign_deadline_ms\x20—\x20ONE\x20absolute\x20timestamp\x20shared\x20by\x20every\x20backer\x20(pattern.time_lock_absolute),\x20NOT\x20a\x20per-order\x20entry+duration\x20lock\x20(which\x20would\x20give\x20each\x20backer\x20a\x20different\x20deadline).\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20pattern.time_source_repository_oracle\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20calendar\x20date,\x20and\x20document\x20the\x20time\x20source.','TWO-LEG\x20ESCROW\x20EXIT\x20(D-BUG-2,\x20catalog-wide):\x20the\x20release\x20leg\x20(funded_release,\x20claimed_by\x20some\x20==\x20false\x20→\x20project)\x20and\x20the\x20refund\x20leg\x20(missed_refund,\x20claimed_by\x20some\x20==\x20false\x20→\x20backer\x20slot\x20254)\x20are\x20gated\x20on\x20MUTUALLY\x20EXCLUSIVE\x20aggregate\x20comparisons\x20(>=\x20vs\x20<),\x20so\x20exactly\x20one\x20fires\x20at\x20deadline.\x20PAIR\x20the\x20refund\x20with\x20the\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true\x20→\x20project,\x20NO\x20node\x20equality\x20leg)\x20so\x20an\x20arbitration-awarded\x20order\x27s\x20residual\x20principal\x20still\x20exits.','KEEPER\x20BATCH\x20SETTLEMENT\x20(LIVE,\x20ops\x20efficiency):\x20on\x20a\x20missed\x20campaign\x20a\x20keeper\x20enumerates\x20every\x20contributor\x20row\x20id\x20via\x20repository.data\x20find-where\x20(1176\x20→\x20VectorAddress)\x20/\x20keys-where\x20(1177\x20→\x20VectorString)\x20and\x20advances\x20each\x20backer\x27s\x20refund\x20leg\x20in\x20one\x20PTB\x20(or\x20N\x20PTBs).\x20🔴\x20The\x20candidate-id\x20set\x20is\x20capped\x20at\x20100\x20per\x20sum-where\x20—\x20a\x20campaign\x20with\x20>100\x20contributors\x20splits\x20the\x20roster\x20across\x20settlements.\x20This\x20batch\x20atomicity\x20is\x20an\x20OPS\x20convenience,\x20not\x20a\x20chain\x20capability\x20(the\x20per-contributor\x20refund\x20works\x20without\x20it).','🔴\x20AGGREGATE\x20TRUST\x20BOUNDARY\x20(L-04,\x20MUST\x20disclose):\x20the\x20funding\x20total\x20is\x20a\x20read-only\x20sum\x20over\x20keeper-supplied,\x20writer-bound\x20contribution\x20rows\x20—\x20it\x20is\x20NOT\x20an\x20independent\x20re-computation\x20of\x20every\x20escrow\x20balance,\x20and\x20roster\x20completeness\x20is\x20keeper-attested.\x20Never\x20present\x20the\x20threshold\x20as\x20a\x20chain-verified\x20total-custody\x20proof.\x20State\x20plainly:\x20\x27达标判定依据链上共享账本的聚合募资额（每笔出资记录已绑定写入方），聚合值是对已记录出资行的只读求和，非对每一笔托管余额的独立重算。\x27','🔴\x20WITHDRAWABLE\x20BEFORE\x20THE\x20DEADLINE,\x20COMMITTED\x20AFTER\x20(L-04,\x20MUST\x20disclose):\x20a\x20backer\x20may\x20withdraw\x20their\x20pledge\x20at\x20any\x20time\x20BEFORE\x20the\x20campaign\x20deadline\x20(order_payer\x20→\x20withdrawn,\x20gated\x20by\x20pattern.time_window_upper_bound\x20on\x20the\x20ABSOLUTE\x20campaign_deadline_ms).\x20Withdrawal\x20REMOVES\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20—\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it)\x20so\x20the\x20sum-where\x20(1174)\x20aggregate\x20STOPS\x20counting\x20the\x20withdrawn\x20pledge\x20—\x20a\x20backer\x20can\x20never\x20inflate\x20a\x20\x27goal\x20met\x27\x20and\x20then\x20pull\x20their\x20money\x20—\x20and\x20refunds\x20the\x20contribution\x20in\x20full\x20to\x20their\x20own\x20order\x20(slot\x20254).\x20AFTER\x20the\x20deadline\x20the\x20contribution\x20is\x20committed\x20to\x20the\x20threshold\x20outcome\x20(release\x20XOR\x20missed-refund);\x20the\x20withdrawal\x20forward\x20aborts,\x20so\x20it\x20can\x20never\x20defund\x20an\x20already-met\x20goal.\x20State\x20plainly:\x20\x27截止前可随时撤回出资（撤回即从链上募资聚合中剔除该笔并原路全额退回）；截止后出资锁定，仅按达标结果释放给项目方或原路退回。\x27','🔴\x20NON-INVESTMENT\x20(L-01,\x20MUST\x20disclose):\x20crowdfunding\x20copy\x20must\x20NEVER\x20promise\x20investment\x20returns,\x20yield,\x20or\x20token-price\x20appreciation\x20—\x20it\x20is\x20a\x20threshold\x20purchase/presale/donation,\x20not\x20a\x20security.\x20Carry\x20\x27不构成投资建议或收益承诺\x20/\x20not\x20investment\x20advice\x20or\x20a\x20yield\x20promise\x27.','🔴\x20KYC/AML\x20(L-05,\x20MUST\x20flag):\x20pooled\x20fundraising\x20is\x20HIGH\x20regulatory\x20intensity\x20—\x20cross-border\x20funds\x20and\x20reward\x20tiers\x20may\x20trigger\x20securities\x20/\x20money-transmission\x20/\x20KYC-AML\x20rules.\x20Flag\x20for\x20compliance;\x20do\x20not\x20automate\x20around\x20them.','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20rows\x20pay\x20GuardIdentifier(254)\x20—\x20funds\x20land\x20ON\x20the\x20backer\x27s\x20Order\x20object,\x20not\x20in\x20their\x20wallet;\x20the\x20backer\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Surface\x20the\x20second\x20step\x20in\x20the\x20storefront\x20UX.','REPLAY\x20PROTECTION:\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot\x20on\x20the\x20settlement\x20allocator\x20(the\x20chain\x20derives\x20the\x20once-key\x20from\x20payment_info.for_object),\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20of\x20the\x20release\x20aborts\x20code\x2016\x20(E_ONCE_TRIGGERED).','CAMPAIGN\x20TERMS\x20=\x20WIP\x20ARTIFACT:\x20the\x20funding\x20goal,\x20deadline\x20and\x20reward\x20tiers\x20are\x20anchored\x20as\x20the\x20listing\x20WIP\x20hash\x20before\x20launch.\x20Rebinding\x20has\x20NO\x20per-item\x20op:\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend),\x20op:add\x20creates\x20a\x20NEW\x20SKU.\x20Pin\x20the\x20launch-time\x20hash\x20so\x20a\x20later\x20edit\x20cannot\x20retroactively\x20change\x20the\x20goal\x20a\x20backer\x20funded\x20against.','DISPUTES\x20route\x20to\x20a\x20THIRD-PARTY\x20Arbitration\x20venue\x20(arbitration_mode\x20third_party,\x20an\x20independent\x20Permission\x20—\x20R2\x20/\x20E_ARBITRATION_PERMISSION_CONFLICT=33);\x20disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11,\x20no\x20claim\x20node).\x20Un-pause\x20the\x20Arbitration\x20after\x20deploy\x20(new\x20Arbitrations\x20default\x20bPaused=true;\x20pause:false\x20via\x20permission\x20356).','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20campaign\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net),\x20or\x20self-hosted\x20for\x20long-lived\x20mainnet\x20campaigns;\x20an\x20empty\x20wip\x20on\x20mainnet\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'funding_threshold':0x2710,'campaign_duration_days':0x1e,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'threshold':0x0,'incumbent_take_bps':0x1f4},'time_anchors':{'campaign_deadline':'context\x20Clock\x20>=\x20campaign_deadline_ms\x20(an\x20ABSOLUTE\x20epoch-ms\x20timestamp,\x20pattern.time_lock_absolute)\x20—\x20ONE\x20shared\x20campaign\x20deadline\x20for\x20every\x20backer,\x20NOT\x20a\x20per-order\x20entry+duration\x20lock;\x20bind\x20pattern.time_source_repository_oracle\x20for\x20a\x20real-world\x20calendar\x20date\x20(chain\x20Clock\x20is\x20block-driven)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20—\x20a\x20missed\x20campaign\x20refunds\x20every\x20contribution\x20IN\x20FULL\x20to\x20its\x20own\x20backer\x20(missed_refund,\x20slot-254\x20order-anchored,\x20for_object-bound\x20unpooled\x20escrow)','R2\x20independent\x20THIRD-PARTY\x20arbitration\x20Permission\x20(arbitration_mode\x20third_party;\x20E_ARBITRATION_PERMISSION_CONFLICT=33)\x20—\x20delivery/non-delivery\x20disputes\x20resolve\x20at\x20a\x20venue\x20neither\x20party\x20controls','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner\x20(the\x20post-raise\x20delivery\x20backstop)','R4\x20the\x20funding\x20threshold\x20is\x20an\x20on-chain\x20aggregate\x20read\x20(sum-where\x201174)\x20over\x20writer-bound\x20rows\x20—\x20the\x20goal\x20is\x20provable,\x20not\x20the\x20project\x27s\x20say-so','R5\x20every\x20contribution\x20anchored\x20to\x20its\x20OWN\x20order\x20Allocation\x20(the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order;\x20for_object\x20preserves\x20attribution)','R6\x20Rate\x20plan:\x20project\x20keeps\x20100%\x20(Rate\x2010000);\x20allocator\x20threshold\x200;\x20funding_threshold\x20is\x20the\x20distinct\x20campaign\x20goal','R7\x20publish\x20freeze\x20—\x20the\x20campaign\x20terms\x20(WIP),\x20the\x20funding\x20goal,\x20the\x20deadline\x20and\x20the\x20writer-bound\x20contribution\x20policy\x20are\x20fully\x20configured\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20deadline\x20settlement\x20advance\x20and\x20the\x20missed-campaign\x20batch\x20refund\x20only\x20(no\x20charge\x20authority)','R10\x20contribution-row\x20write_guard\x20binds\x20the\x20writer\x20to\x20the\x20backer\x20(order.owner\x20==\x20Signer)\x20so\x20the\x20aggregate\x20cannot\x20be\x20forged','R11\x20campaign\x20terms\x20+\x20funding\x20goal\x20+\x20deadline\x20anchored\x20as\x20the\x20WIP\x20artifact\x20(immutable\x20provenance\x20of\x20WHAT\x20was\x20raised\x20against)','R12\x20pre-deadline\x20pledge\x20withdrawal\x20(order_payer\x20→\x20withdrawn)\x20removes\x20the\x20backer\x27s\x20OWN\x20writer-bound\x20contribution\x20row\x20so\x20the\x20sum-where\x20aggregate\x20stops\x20counting\x20it,\x20then\x20refunds\x20in\x20full\x20—\x20a\x20withdrawn\x20pledge\x20can\x20never\x20inflate\x20a\x20\x27goal\x20met\x27'],'keeper_dependencies':['deadline\x20settlement\x20advance\x20(pledged→funded_released\x20on\x20the\x20release-polarity\x20gate\x20once\x20Clock\x20>=\x20deadline\x20and\x20the\x20aggregate\x20>=\x20goal)','missed-campaign\x20batch\x20refund\x20(enumerate\x20contributor\x20ids\x20via\x20find-where\x201176\x20/\x20keys-where\x201177,\x20advance\x20each\x20pledged→missed_refunded\x20on\x20the\x20refund-polarity\x20gate)','NO\x20auto-charge\x20authority\x20by\x20design;\x20the\x20pre-deadline\x20pledge\x20withdrawal\x20is\x20buyer\x20self-service\x20(order_payer),\x20needs\x20no\x20keeper'],'recommended_role':'merchant','role_rationale':'The\x20project\x20owner\x20(creator)\x20owns\x20the\x20crowdfunding\x20Service,\x20sets\x20the\x20funding\x20goal\x20+\x20deadline,\x20and\x20receives\x20the\x20release\x20on\x20a\x20successful\x20raise;\x20backers\x20are\x20the\x20funders,\x20each\x20escrowing\x20an\x20unpooled,\x20refundable\x20contribution.','differences':['ALL-OR-NOTHING:\x20a\x20funding_threshold\x20aggregate\x20gate\x20decides\x20release\x20XOR\x20per-contributor\x20refund\x20at\x20the\x20deadline\x20(vs\x20the\x20sibling\x27s\x20flexible\x20keep-it-all,\x20which\x20releases\x20every\x20contribution\x20with\x20NO\x20goal\x20and\x20NO\x20missed-campaign\x20refund)','Per-contributor\x20UNPOOLED\x20escrow\x20with\x20an\x20automatic\x20missed-campaign\x20refund\x20(the\x20sibling\x20has\x20no\x20missed-refund\x20leg\x20—\x20its\x20contributions\x20are\x20non-refundable\x20after\x20the\x20deadline;\x20BOTH\x20allow\x20a\x20pre-deadline\x20pledge\x20withdrawal)','The\x20release/refund\x20decision\x20is\x20an\x20on-chain\x20sum-where\x20(1174)\x20aggregate\x20read\x20ANDed\x20with\x20an\x20absolute\x20campaign\x20deadline;\x20the\x20sibling\x27s\x20release\x20leg\x20carries\x20no\x20aggregate\x20gate'],'user_inputs':['funding_threshold\x20—\x20the\x20aggregate\x20campaign\x20goal\x20the\x20sum-where\x20(1174)\x20total\x20is\x20compared\x20against\x20(U256\x20semantics;\x20DISTINCT\x20from\x20the\x20allocator\x27s\x20fee_params.threshold\x20which\x20stays\x200)','campaign_deadline_ms\x20—\x20the\x20ABSOLUTE\x20shared\x20deadline\x20(epoch\x20ms)\x20settlement\x20opens\x20at;\x20one\x20deadline\x20for\x20every\x20backer','campaign_duration_days\x20—\x20display\x20helper\x20for\x20the\x20deadline\x20(the\x20gate\x20reads\x20campaign_deadline_ms)','The\x20campaign\x20terms\x20+\x20funding\x20goal\x20+\x20reward\x20tiers\x20WIP\x20artifact\x20(anchored\x20at\x20launch)','The\x20project\x20Entity\x20that\x20receives\x20the\x20release\x20on\x20a\x20successful\x20raise\x20(NON-EMPTY)','incumbent_take_bps\x20—\x20the\x20displaced\x20crowdfunding\x20platform\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_commission_bps\x20(KEEP\x20AT\x200),\x20no\x20allocator\x20row\x20reads\x20the\x20benchmark','Third-party\x20Arbitration\x20venue\x20selection\x20(independent\x20Permission)']},{'id':'crowdfunding/flexible-keep-it-all','industry':'crowdfunding','variant':'flexible-keep-it-all','product_ref':'gofundme','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','crowdfunding_mode':'flexible','review_mode':'none','machine_shape':[{'name':'pledged','role':'Entry:\x20a\x20backer\x20contributes.\x20The\x20contribution\x20is\x20escrowed\x20in\x20THIS\x20order\x27s\x20OWN\x20Allocation\x20(for_object\x20=\x20this\x20Order)\x20and\x20recorded\x20as\x20a\x20writer-bound\x20row\x20in\x20the\x20campaign\x20Repository.\x20🔴\x20FLEXIBLE\x20KEEP-IT-ALL:\x20there\x20is\x20NO\x20funding\x20goal\x20and\x20NO\x20missed-campaign\x20refund\x20—\x20the\x20project\x20keeps\x20whatever\x20it\x20raises.\x20A\x20backer\x20MAY\x20withdraw\x20the\x20pledge\x20BEFORE\x20the\x20deadline\x20(order_payer\x20→\x20withdrawn,\x20removing\x20their\x20contribution\x20row\x20and\x20refunding\x20in\x20full);\x20a\x20contribution\x20is\x20NON-REFUNDABLE\x20once\x20the\x20deadline\x20passes\x20—\x20disclose\x20this\x20up\x20front,\x20never\x20blur\x20it\x20with\x20the\x20all-or-nothing\x20model.','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'released','role':'Settlement\x20terminal:\x20at\x20the\x20campaign\x20deadline\x20a\x20keeper\x20advances\x20this\x20order\x20and\x20the\x20settlement\x20Allocator\x20releases\x20the\x20escrowed\x20contribution\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000)\x20REGARDLESS\x20of\x20any\x20aggregate\x20total\x20—\x20there\x20is\x20NO\x20threshold\x20gate\x20on\x20this\x20leg\x20(the\x20defining\x20contrast\x20to\x20the\x20all-or-nothing\x20leader).','semantic_role':'final','from':[{'prev':'pledged','forward':'ReleaseAtDeadline','operator':'merchant','permission_index':0x3ea,'guard_key':'deadline_release'}]},{'name':'withdrawn','role':'Buyer-withdrawal\x20terminal\x20(PRE-DEADLINE):\x20a\x20backer\x20cancels\x20their\x20pledge\x20while\x20the\x20campaign\x20is\x20still\x20live.\x20The\x20withdrawal\x20REMOVES\x20their\x20writer-bound\x20contribution\x20row\x20(via\x20the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20—\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it,\x20and\x20the\x20public\x20raise\x20total\x20stops\x20counting\x20it)\x20and\x20the\x20refund\x20Allocator\x20returns\x20the\x20contribution\x20IN\x20FULL\x20to\x20the\x20backer\x27s\x20own\x20order\x20(slot\x20254).\x20This\x20is\x20the\x20ONLY\x20money-back\x20path\x20in\x20the\x20flexible\x20model\x20—\x20after\x20the\x20deadline\x20the\x20keep-it-all\x20posture\x20is\x20non-refundable.\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20(R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'pledged','forward':'WithdrawPledge','operator':'order_payer','guard_key':'pre_deadline_withdraw'}]}],'guards':[{'template_id':'pattern.time_lock_progress','host':'machine','key':'deadline_release','purpose':'Deadline\x20release\x20gate,\x20bound\x20to\x20the\x20pledged→released\x20forward:\x20Clock\x20>=\x20the\x20campaign\x20deadline.\x20FLEXIBLE\x20polarity\x20carries\x20NO\x20aggregate\x20sum-where\x20leg\x20—\x20the\x20contribution\x20releases\x20at\x20the\x20deadline\x20whatever\x20the\x20total.\x20Use\x20an\x20ABSOLUTE\x20shared\x20campaign\x20deadline\x20(pattern.time_lock_absolute\x20shape\x20/\x20a\x20repository\x20time-oracle\x20for\x20a\x20real-world\x20date),\x20NOT\x20a\x20per-order\x20entry+duration\x20that\x20would\x20give\x20each\x20backer\x20a\x20different\x20deadline.\x20OPENING\x20gate\x20(greater_or_equal).'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'pre_deadline_withdraw','purpose':'Pre-deadline\x20withdrawal\x20gate,\x20bound\x20to\x20the\x20pledged→withdrawn\x20forward:\x20logic_as_u256_lesser_or_equal[context(Clock),\x20identifier[N](campaign_deadline_ms)]\x20—\x20the\x20CLOSING-window\x20direction\x20(a\x20backer\x20may\x20withdraw\x20only\x20WHILE\x20the\x20campaign\x20is\x20live).\x20ANCHOR\x20IS\x20THE\x20ABSOLUTE\x20shared\x20campaign\x20deadline\x20(the\x20SAME\x20campaign_deadline_ms\x20the\x20release\x20gate\x20reads),\x20NOT\x20a\x20per-order\x20entry+duration.\x20After\x20the\x20deadline\x20this\x20forward\x20aborts,\x20so\x20the\x20keep-it-all\x20release\x20and\x20the\x20buyer\x20withdrawal\x20are\x20mutually\x20exclusive\x20IN\x20TIME\x20(D-BUG-2:\x20this\x20is\x20the\x20claimed_by-false\x20buyer-side\x20twin\x20of\x20the\x20release/recover\x20rails).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'withdraw_refund','purpose':'Withdrawal-refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20withdraw_refund):\x20progress.current\x20==\x20withdrawn\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20contribution\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x20254).\x20This\x20is\x20the\x20flexible\x20model\x27s\x20ONLY\x20buyer\x20refund\x20rail\x20(pre-deadline\x20withdrawal);\x20once_per_order\x20arms\x20slot\x20254\x20once.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'project_release','purpose':'Settlement\x20allocator\x20gate,\x20bound\x20to\x20the\x20release\x20row\x20(guard_key\x20project_release):\x20progress.current\x20==\x20released\x20(the\x20terminal)\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false.\x20Releases\x20the\x20escrowed\x20contribution\x20(Rate\x2010000)\x20to\x20the\x20project\x20Entity.\x20One-shot\x20—\x20resolve\x20tpl_allocator_node_gate_settle_once\x20(protocol\x20254).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Project-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding,\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-B1+CAT-C2:\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion).\x20Pays\x20Rate\x2010000\x20to\x20the\x20project\x20Entity\x20so\x20an\x20ARBITRATION-AWARDED\x20order\x27s\x20escrow\x20principal\x20still\x20exits\x20(the\x20backer\x20was\x20made\x20whole\x20from\x20the\x20compensation\x20fund).\x20Exactly\x20one\x20of\x20withdraw_refund\x20(claimed_by\x20some\x20==\x20false\x20→\x20backer)\x20and\x20recover_gate\x20(some\x20==\x20true\x20→\x20project)\x20can\x20ever\x20pass\x20—\x20the\x20D-BUG-2\x20escrow-exit\x20polarity:\x20in\x20the\x20flexible\x20model\x20BOTH\x20the\x20deadline\x20release\x20and\x20the\x20arbitration\x20recovery\x20exit\x20to\x20the\x20project,\x20and\x20the\x20only\x20buyer-side\x20money-back\x20leg\x20is\x20the\x20pre-deadline\x20withdrawal.\x20Resolve\x20tpl_allocator_node_gate_recover.'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','policy':{'name':'contribution','id_from':'signer','value_type':'U64'},'purpose':'Campaign\x20Repository\x20write_guard\x20binds\x20the\x20writer\x20to\x20the\x20contributing\x20backer\x20(order.owner\x20==\x20Signer\x20/\x20order.agent\x20has\x20Signer),\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20value\x20=\x20the\x20contribution\x20amount.\x20Even\x20though\x20the\x20flexible\x20model\x20has\x20NO\x20aggregate\x20gate,\x20the\x20contribution\x20ledger\x20is\x20still\x20writer-bound\x20so\x20the\x20public\x20raise\x20total\x20is\x20honest,\x20a\x20backer\x20cannot\x20misrecord\x20another\x27s\x20contribution\x20(R-X1-17),\x20and\x20—\x20as\x20in\x20the\x20leader\x20—\x20the\x20same\x20binding\x20lets\x20a\x20backer\x20remove\x20ONLY\x20their\x20own\x20row\x20on\x20withdrawal.'}],'allocator':{'recipient':'entity','recipient_key':'project','count':0x3,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'project_release','note':'Release\x20the\x20escrowed\x20contribution\x20(Rate\x2010000\x20=\x20the\x20whole\x20raise)\x20to\x20the\x20project\x20Entity\x20at\x20the\x20deadline,\x20regardless\x20of\x20any\x20aggregate\x20total.\x20An\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory.\x20WoWok\x20takes\x20no\x20platform\x20commission.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'project_release','note':'Rate-0\x20ORDER\x20anchor\x20leg\x20(pattern.allocator_order_anchor):\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Project-recovery\x20leg\x20for\x20an\x20ARBITRATION-AWARDED\x20order\x20(claimed_by\x20some\x20==\x20true)\x20—\x20the\x20escrow\x20principal\x20exits\x20to\x20the\x20project\x20Entity.\x20The\x20D-BUG-2\x20polarity\x20twin\x20of\x20the\x20pre-deadline\x20withdraw_refund\x20leg\x20(claimed_by\x20some\x20==\x20false\x20→\x20backer);\x20after\x20the\x20deadline\x20there\x20is\x20NO\x20missed-campaign\x20refund\x20—\x20keep-it-all\x20is\x20non-refundable\x20by\x20design\x20(disclosed,\x20L-04).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'254','mode':'rate','value':0x2710,'guard_key':'withdraw_refund','note':'Pre-deadline\x20pledge-WITHDRAWAL\x20refund\x20—\x20the\x20flexible\x20model\x27s\x20ONLY\x20buyer\x20money-back\x20rail:\x20returns\x20the\x20escrowed\x20contribution\x20IN\x20FULL\x20to\x20the\x20order-anchored\x20backer\x20(slot\x20254)\x20when\x20they\x20withdraw\x20while\x20the\x20campaign\x20is\x20live\x20(progress.current\x20==\x20withdrawn,\x20claimed_by\x20some\x20==\x20false).\x20The\x20withdrawal\x20ALSO\x20removes\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20so\x20the\x20public\x20raise\x20total\x20stops\x20counting\x20it.\x20once_per_order\x20arms\x20slot\x20254\x20once.\x20After\x20the\x20deadline\x20this\x20rail\x20is\x20unreachable\x20—\x20keep-it-all\x20is\x20non-refundable\x20(L-04).'}],'description':'FLEXIBLE\x20KEEP-IT-ALL\x20ESCROW.\x20Each\x20backer\x27s\x20contribution\x20is\x20escrowed\x20in\x20its\x20OWN\x20unpooled\x20Allocation\x20(for_object\x20=\x20the\x20backer\x27s\x20Order)\x20and\x20released\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000)\x20at\x20the\x20campaign\x20deadline\x20REGARDLESS\x20of\x20the\x20aggregate\x20total\x20—\x20there\x20is\x20NO\x20funding_threshold\x20gate\x20and\x20NO\x20missed-campaign\x20refund\x20leg.\x20This\x20is\x20the\x20disclosed\x20contrast\x20to\x20the\x20all-or-nothing\x20leader:\x20🔴\x20a\x20flexible\x20contribution\x20is\x20NON-REFUNDABLE\x20once\x20the\x20deadline\x20passes\x20(the\x20project\x20keeps\x20whatever\x20it\x20raises),\x20which\x20MUST\x20be\x20stated\x20up\x20front\x20and\x20never\x20blurred\x20with\x20the\x20all-or-nothing\x20model.\x20The\x20ONE\x20buyer\x20money-back\x20path\x20is\x20a\x20PRE-DEADLINE\x20pledge\x20withdrawal\x20(order_payer\x20→\x20withdrawn):\x20it\x20removes\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal,\x20id_from\x20signer\x20→\x20only\x20the\x20row\x27s\x20own\x20writer)\x20so\x20the\x20public\x20raise\x20total\x20stops\x20counting\x20it,\x20and\x20refunds\x20the\x20contribution\x20in\x20full\x20to\x20the\x20backer\x27s\x20order\x20(slot\x20254,\x20order_anchored\x20refund_track).\x20DIRECT-SALES:\x20platform_commission_bps\x20and\x20merchant_service_fee_bps\x20default\x200;\x20the\x20allocator\x20threshold\x20(fee_params.threshold)\x20stays\x200.\x20Every\x20settlement\x20allocator\x20carries\x20the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor\x20(anti\x20cross-order\x20hijack,\x20CR-01);\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x20code\x2016.\x20The\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true\x20→\x20project)\x20is\x20the\x20escrow-exit\x20for\x20an\x20arbitration-awarded\x20order;\x20the\x20withdraw_refund\x20rail\x20(claimed_by\x20some\x20==\x20false\x20→\x20backer,\x20pre-deadline\x20only)\x20is\x20its\x20D-BUG-2\x20polarity\x20twin,\x20and\x20after\x20the\x20deadline\x20both\x20claimed_by\x20polarities\x20exit\x20to\x20the\x20project.'},'key_risk':'Flexible\x20keep-it-all\x20raise:\x20contributions\x20release\x20to\x20the\x20project\x20at\x20the\x20deadline\x20with\x20NO\x20goal\x20and\x20NO\x20missed-campaign\x20refund.\x20The\x20defining\x20risk\x20is\x20a\x20backer\x20mistaking\x20it\x20for\x20all-or-nothing,\x20so\x20the\x20non-refundable-after-deadline\x20posture\x20must\x20be\x20disclosed\x20up\x20front\x20(L-04).','build_notes':['🔴\x20NO-REFUND-AFTER-DEADLINE\x20POSTURE\x20(L-04,\x20MUST\x20disclose\x20up\x20front):\x20this\x20is\x20FLEXIBLE\x20keep-it-all\x20—\x20the\x20project\x20keeps\x20whatever\x20it\x20raises\x20and\x20a\x20contribution\x20is\x20NON-REFUNDABLE\x20once\x20the\x20deadline\x20passes.\x20There\x20is\x20NO\x20funding\x20goal\x20and\x20NO\x20missed-campaign\x20refund\x20leg.\x20The\x20ONLY\x20money-back\x20path\x20is\x20a\x20PRE-DEADLINE\x20pledge\x20withdrawal\x20(below).\x20Never\x20present\x20this\x20as\x20an\x20all-or-nothing\x20campaign;\x20state\x20plainly:\x20\x27本活动为灵活众筹（keep-it-all），截止前可撤回出资，截止后出资即释放给项目方、不设达标门槛、不提供退款。\x27','🔴\x20PRE-DEADLINE\x20WITHDRAWAL\x20(the\x20one\x20buyer\x20exit,\x20LIVE):\x20while\x20the\x20campaign\x20is\x20live\x20a\x20backer\x20may\x20withdraw\x20(order_payer\x20→\x20withdrawn,\x20gated\x20by\x20pattern.time_window_upper_bound\x20on\x20the\x20ABSOLUTE\x20campaign_deadline_ms\x20—\x20the\x20CLOSING-window\x20direction).\x20Withdrawal\x20REMOVES\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal;\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it)\x20so\x20the\x20public\x20raise\x20total\x20stops\x20counting\x20it,\x20and\x20refunds\x20the\x20contribution\x20in\x20full\x20to\x20their\x20own\x20order\x20(slot\x20254).\x20After\x20the\x20deadline\x20the\x20withdrawal\x20forward\x20aborts\x20—\x20the\x20release\x20and\x20the\x20withdrawal\x20are\x20mutually\x20exclusive\x20in\x20time\x20(D-BUG-2).','UNPOOLED\x20PER-CONTRIBUTOR\x20ESCROW\x20(LIVE):\x20each\x20contribution\x20still\x20sits\x20in\x20its\x20OWN\x20Allocation\x20(for_object\x20=\x20the\x20backer\x27s\x20Order),\x20never\x20balance-joined\x20—\x20so\x20the\x20public\x20raise\x20total\x20is\x20attributable\x20and\x20an\x20arbitration-awarded\x20backer\x20can\x20be\x20made\x20whole\x20from\x20the\x20compensation\x20fund.\x20The\x20unpooled\x20shape\x20is\x20shared\x20with\x20the\x20leader;\x20the\x20difference\x20is\x20the\x20absent\x20threshold\x20gate\x20+\x20missed-refund\x20leg.','NO\x20AGGREGATE\x20GATE\x20(the\x20defining\x20contrast):\x20the\x20release\x20leg\x20carries\x20NO\x20sum-where\x20(1174)\x20comparison\x20—\x20it\x20fires\x20at\x20the\x20deadline\x20whatever\x20the\x20total.\x20The\x20contribution\x20Repository\x20ledger\x20is\x20still\x20writer-bound\x20(order.owner\x20==\x20Signer)\x20so\x20the\x20displayed\x20raise\x20total\x20is\x20honest,\x20but\x20nothing\x20gates\x20on\x20it.','ABSOLUTE\x20SHARED\x20DEADLINE\x20(LIVE):\x20release\x20opens\x20at\x20Clock\x20>=\x20campaign_deadline_ms\x20—\x20ONE\x20absolute\x20timestamp\x20shared\x20by\x20every\x20backer\x20(pattern.time_lock_absolute\x20/\x20a\x20repository\x20time-oracle\x20for\x20a\x20real-world\x20date),\x20NOT\x20a\x20per-order\x20entry+duration\x20lock.\x20The\x20withdrawal\x20window\x20closes\x20on\x20the\x20SAME\x20absolute\x20timestamp.','ESCROW\x20EXIT\x20(catalog-wide,\x20D-BUG-2):\x20the\x20withdraw_refund\x20leg\x20(claimed_by\x20some\x20==\x20false\x20→\x20backer,\x20pre-deadline)\x20and\x20the\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true\x20→\x20project)\x20are\x20the\x20claimed_by\x20polarity\x20pair;\x20the\x20deadline\x20release\x20(project_release\x20→\x20project)\x20is\x20the\x20normal\x20terminal.\x20Because\x20keep-it-all\x20has\x20no\x20missed-campaign\x20refund,\x20after\x20the\x20deadline\x20both\x20claimed_by\x20polarities\x20exit\x20to\x20the\x20project\x20Entity.','🔴\x20NON-INVESTMENT\x20(L-01,\x20MUST\x20disclose):\x20never\x20promise\x20investment\x20returns,\x20yield,\x20or\x20token-price\x20appreciation\x20—\x20a\x20flexible\x20raise\x20is\x20a\x20donation/presale,\x20not\x20a\x20security.\x20Carry\x20\x27不构成投资建议或收益承诺\x27.','🔴\x20KYC/AML\x20(L-05,\x20MUST\x20flag):\x20pooled\x20cross-border\x20fundraising\x20may\x20trigger\x20securities\x20/\x20money-transmission\x20/\x20KYC-AML\x20rules\x20—\x20flag\x20for\x20compliance.','TWO-STEP\x20PAYOUT:\x20release/recovery\x20rows\x20pay\x20the\x20project\x20Entity;\x20the\x20withdrawal\x20refund\x20and\x20any\x20arbitration\x20compensation\x20to\x20a\x20backer\x20land\x20on\x20the\x20Order\x20(slot\x20254)\x20and\x20are\x20extracted\x20with\x20a\x20separate\x20owner_receive\x20call.','CAMPAIGN\x20TERMS\x20=\x20WIP\x20ARTIFACT:\x20the\x20deadline\x20and\x20the\x20explicit\x20no-refund-after-deadline/keep-it-all\x20terms\x20are\x20anchored\x20as\x20the\x20listing\x20WIP\x20hash\x20before\x20launch;\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP,\x20op:add\x20creates\x20a\x20NEW\x20SKU.','DISPUTES\x20route\x20to\x20a\x20THIRD-PARTY\x20Arbitration\x20venue\x20(arbitration_mode\x20third_party;\x20R-M1-11,\x20no\x20claim\x20node).\x20Un-pause\x20the\x20Arbitration\x20after\x20deploy\x20(bPaused=true\x20default;\x20pause:false\x20via\x20permission\x20356).'],'fee_params':{'campaign_duration_days':0x1e,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'threshold':0x0,'incumbent_take_bps':0x122},'time_anchors':{'campaign_deadline':'context\x20Clock\x20>=\x20campaign_deadline_ms\x20(an\x20ABSOLUTE\x20epoch-ms\x20timestamp,\x20pattern.time_lock_absolute)\x20—\x20ONE\x20shared\x20campaign\x20deadline\x20for\x20every\x20backer;\x20bind\x20pattern.time_source_repository_oracle\x20for\x20a\x20real-world\x20calendar\x20date'},'trust_mechanisms':['R1\x20unpooled\x20per-contributor\x20escrow\x20(for_object\x20=\x20the\x20backer\x27s\x20Order)\x20—\x20attributable,\x20never\x20merged','R2\x20independent\x20THIRD-PARTY\x20arbitration\x20Permission\x20(arbitration_mode\x20third_party;\x20E_ARBITRATION_PERMISSION_CONFLICT=33)','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner\x20(the\x20post-raise\x20delivery\x20backstop)','R4\x20writer-bound\x20contribution\x20ledger\x20(order.owner\x20==\x20Signer)\x20so\x20the\x20public\x20raise\x20total\x20is\x20honest','R5\x20every\x20contribution\x20anchored\x20to\x20its\x20OWN\x20order\x20Allocation\x20(Rate-0\x20GuardIdentifier(0)\x20order\x20anchor)','R6\x20Rate\x20plan:\x20project\x20keeps\x20100%\x20(Rate\x2010000);\x20allocator\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20the\x20campaign\x20terms\x20(WIP),\x20the\x20deadline\x20and\x20the\x20explicit\x20no-refund-after-deadline\x20posture\x20are\x20configured\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20deadline\x20release\x20advance\x20only\x20(no\x20charge\x20authority)','R10\x20🔴\x20the\x20no-refund-after-deadline\x20keep-it-all\x20posture\x20is\x20disclosed\x20up\x20front,\x20never\x20blurred\x20with\x20all-or-nothing\x20(L-04)','R11\x20pre-deadline\x20pledge\x20withdrawal\x20(order_payer\x20→\x20withdrawn)\x20removes\x20the\x20backer\x27s\x20own\x20writer-bound\x20contribution\x20row\x20and\x20refunds\x20in\x20full\x20—\x20the\x20flexible\x20model\x27s\x20single\x20buyer\x20money-back\x20rail'],'keeper_dependencies':['deadline\x20release\x20advance\x20(pledged→released\x20once\x20Clock\x20>=\x20the\x20campaign\x20deadline)','NO\x20missed-campaign\x20refund\x20keeper\x20(the\x20flexible\x20model\x20has\x20no\x20missed-refund\x20leg;\x20the\x20only\x20buyer\x20refund\x20is\x20the\x20self-service\x20PRE-DEADLINE\x20withdrawal,\x20which\x20needs\x20no\x20keeper)','NO\x20auto-charge\x20authority\x20by\x20design'],'recommended_role':'merchant','role_rationale':'The\x20project\x20owner\x20(creator/cause)\x20owns\x20the\x20flexible\x20crowdfunding\x20Service\x20and\x20keeps\x20whatever\x20it\x20raises\x20at\x20the\x20deadline;\x20backers\x20are\x20donors/purchasers\x20accepting\x20a\x20non-refundable-after-deadline\x20posture\x20(withdrawable\x20only\x20while\x20the\x20campaign\x20is\x20live).','differences':['FLEXIBLE\x20KEEP-IT-ALL:\x20NO\x20funding_threshold\x20gate\x20and\x20NO\x20missed-campaign\x20refund\x20leg\x20—\x20every\x20contribution\x20releases\x20to\x20the\x20project\x20at\x20the\x20deadline\x20(vs\x20the\x20leader\x27s\x20all-or-nothing\x20release\x20XOR\x20per-contributor\x20refund)','🔴\x20Contributions\x20are\x20NON-REFUNDABLE\x20once\x20the\x20deadline\x20passes\x20(disclosed\x20up\x20front);\x20the\x20leader\x20refunds\x20every\x20backer\x20automatically\x20on\x20a\x20missed\x20goal.\x20Both\x20models\x20allow\x20a\x20PRE-DEADLINE\x20pledge\x20withdrawal.','Shares\x20the\x20unpooled\x20per-contributor\x20escrow\x20+\x20writer-bound\x20ledger\x20+\x20absolute\x20deadline\x20+\x20pre-deadline\x20withdrawal\x20rail\x20with\x20the\x20leader,\x20but\x20the\x20release\x20leg\x20carries\x20no\x20aggregate\x20sum-where\x20comparison'],'user_inputs':['campaign_deadline_ms\x20—\x20the\x20ABSOLUTE\x20shared\x20deadline\x20(epoch\x20ms)\x20the\x20release\x20opens\x20at','campaign_duration_days\x20—\x20display\x20helper\x20for\x20the\x20deadline','The\x20campaign\x20terms\x20+\x20the\x20explicit\x20no-refund/keep-it-all\x20disclosure\x20WIP\x20artifact\x20(anchored\x20at\x20launch)','The\x20project\x20Entity\x20that\x20receives\x20the\x20release\x20(NON-EMPTY)','incumbent_take_bps\x20—\x20the\x20displaced\x20donation-crowdfunding\x20processing\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_commission_bps\x20(KEEP\x20AT\x200)','Third-party\x20Arbitration\x20venue\x20selection\x20(independent\x20Permission)']}];export const TEMPLATE_KEYWORDS={'retail/scale-marketplace':['marketplace','fulfillment','reserve','third-party\x20seller','scale\x20marketplace','a-to-z\x20guarantee'],'retail/vertical-handmade':['handmade','artisan','vintage','craft','custom\x20order','offsite\x20ads','attribution'],'retail/preorder-deposit':['preorder','pre-order','deposit','down\x20payment','balance\x20payment','pay\x20later','installment','layaway','crowdfunding','crowd\x20purchase','kickstarter','gamefound','reserved\x20slot','limited\x20drop','two-phase\x20payment'],'freelance/enterprise-talent-market':['freelance\x20marketplace','talent\x20market','escrow\x20release','revision','acceptance\x20timeout','milestone'],'freelance/catalog-tiers':['project\x20catalog','gig\x20tiers','fixed-price\x20listing','buyer\x20requirements','add-ons','revisions','instant\x20cancel','catalog\x20gig'],'freelance/creator-zero-commission':['0%\x20commission','zero\x20commission','no\x20commission','fixed\x20contract\x20fee','portfolio\x20funnel'],'freelance/agent-task':['agent\x20task','ai\x20agent','agent-to-agent','autonomous\x20task','machine\x20task','agent\x20marketplace','evaluator'],'freelance/bug-bounty':['bug\x20bounty','vulnerability','security\x20bounty','triage','severity','white\x20hat','bounty\x20program'],'freelance/design-contest':['design\x20contest','crowdsourced\x20design','logo\x20contest','design\x20competition','creative\x20contest','prize\x20pool','jury'],'rental/p2p-shortstay':['short-term\x20rental','homestay','host','cancellation\x20policy','damage\x20claim','check-in'],'rental/institutional-longstay':['long-term\x20rental','monthly\x20rent','lease','deposit\x20refund','property\x20management'],'education/mooc-degree':['degree','semester','university','certificate','mooc','tuition'],'education/mooc-single-course':['single\x20course','one\x20course','self-paced','course\x20certificate','mooc','enroll'],'education/live-class-cohort':['tutoring','k12','session','attendance','prepay\x20cap','trial\x20lesson','live\x20class'],'travel/global-ota':['hotel','room','no-show','walk','merchant\x20mode','accommodation','ota'],'travel/destination-experience':['experience','ticket','multi-segment','redeem','supplier\x20payout','instant\x20confirmation'],'subscription/creator-membership':['creator','membership','per-period','honor\x20tier','fan\x20subscription'],'subscription/direct-fan-subscription':['age\x20verification','pay-per-view','ppv','tip','content\x20subscription'],'licensing/royalty-stream-auction':['royalty','royalties','royalty\x20stream','royalty\x20share','music\x20rights','ip\x20licensing','intellectual\x20property','auction','rights\x20holder','sync\x20licensing','catalog\x20sale','royalty\x20split'],'licensing/asset-license-metered':['beat\x20license','beats','sample\x20pack','asset\x20license','tiered\x20license','exclusive\x20license','non-exclusive','stock\x20license','font\x20license','template\x20license','usage\x20cap','metered\x20license','digital\x20asset'],'crowdfunding/all-or-nothing-threshold':['crowdfunding','crowd\x20funding','all-or-nothing','threshold','funding\x20goal','campaign','backer','pledge','kickstarter','reward\x20tier','refund\x20if\x20unmet','aggregate\x20goal'],'crowdfunding/flexible-keep-it-all':['crowdfunding','keep\x20it\x20all','flexible\x20funding','donation','fundraiser','campaign','no\x20refund','gofundme','tip\x20jar','creator\x20funding']};export const TEMPLATE_TAGS={'retail/scale-marketplace':['marketplace','scale','fulfillment','escrow','third-party-seller'],'retail/vertical-handmade':['marketplace','handmade','artisan','craft','escrow'],'retail/preorder-deposit':['retail','preorder','deposit','installment','layaway','two-phase','escrow'],'freelance/enterprise-talent-market':['freelance','talent','escrow-milestone','b2b','acceptance'],'freelance/catalog-tiers':['freelance','gig','catalog','fixed-price','escrow-milestone'],'freelance/creator-zero-commission':['freelance','creator','zero-commission','portfolio'],'freelance/agent-task':['freelance','agent','agent-to-agent','task','evaluator','escrow'],'freelance/bug-bounty':['freelance','bounty','bug-bounty','security','triage','escrow'],'freelance/design-contest':['freelance','contest','design-contest','crowdsourced','prize','escrow'],'rental/p2p-shortstay':['rental','shortstay','host','p2p','escrow'],'rental/institutional-longstay':['rental','longstay','lease','institutional','deposit'],'education/mooc-degree':['education','mooc','degree','certificate','university'],'education/mooc-single-course':['education','mooc','course','certificate','self-paced'],'education/live-class-cohort':['education','cohort','tutoring','live-class','k12'],'travel/global-ota':['travel','ota','hotel','accommodation','booking'],'travel/destination-experience':['travel','experience','tour','ticket','activity'],'subscription/creator-membership':['subscription','membership','creator','recurring','tier'],'subscription/direct-fan-subscription':['subscription','fan','ppv','recurring','age-gated'],'licensing/royalty-stream-auction':['licensing','royalty','auction','ip','royalty-split','escrow'],'licensing/asset-license-metered':['licensing','asset-license','tiered','beat','metered','escrow'],'crowdfunding/all-or-nothing-threshold':['crowdfunding','all-or-nothing','threshold','campaign','backer','escrow','refund'],'crowdfunding/flexible-keep-it-all':['crowdfunding','keep-it-all','flexible','campaign','donation','escrow']};export function getBuiltinTemplate(a){return BUILTIN_TEMPLATES['find'](b=>b['id']===a);}export function listBuiltinTemplates(){return BUILTIN_TEMPLATES;}export function validateBuiltinTemplateCatalog(a=BUILTIN_TEMPLATES){for(const b of a){const d=validateAllocatorRows(b);if(d['length']>0x0)throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20fails\x20allocator-row\x20validation:\x20'+d['join'](';\x20')+'\x0a'+'Fix\x20the\x20entry\x20—\x20BUILTIN_TEMPLATES\x20is\x20the\x20seed\x20source\x20for\x20the\x20on-disk\x20template\x20tree.');const f=new Set(b['machine_shape']['map'](l=>l['name']));if(f['size']!==b['machine_shape']['length'])throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20has\x20duplicate\x20machine\x20node\x20names');const h=new Set();for(const l of b['guards']){if(l['key']===undefined)continue;if(h['has'](l['key']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20declares\x20guard\x20key\x20\x27'+l['key']+'\x27\x20more\x20than\x20once');h['add'](l['key']);}let i=0x0;for(const m of b['machine_shape']){for(const o of m['from']??[]){if(typeof o==='string'){if(o==='')i++;else{if(!f['has'](o))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20edge\x20\x27'+o+'\x27\x20->\x20'+m['name']+'\x20references\x20unknown\x20source\x20node\x20\x27'+o+'\x27');}continue;}if(o['prev']==='')i++;else{if(!f['has'](o['prev']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20edge\x20'+o['prev']+'\x20->\x20'+m['name']+'\x20references\x20unknown\x20source\x20node\x20\x27'+o['prev']+'\x27');}if(o['guard_key']!==undefined&&!h['has'](o['guard_key']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20edge\x20'+o['prev']+'\x20->\x20'+m['name']+'\x20references\x20unresolved\x20guard_key\x20\x27'+o['guard_key']+'\x27\x20(no\x20guards[]\x20entry\x20carries\x20that\x20key)');}}if(i!==0x1)throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20must\x20declare\x20exactly\x20ONE\x20entry\x20edge\x20(prev\x20\x22\x22),\x20found\x20'+i+'\x20—\x20without\x20it\x20orders\x20strand\x20at\x20current=\x22\x22');for(const p of b['allocator']['rows']??[]){if(p['guard_key']!==undefined&&!h['has'](p['guard_key']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20allocator\x20row\x20\x27'+p['track']+'/'+(p['recipient_key']??'?')+'\x27\x20references\x20unresolved\x20guard_key\x20\x27'+p['guard_key']+'\x27');}const j=b['conditional_guards']??[],k=new Map();for(const q of j){k['set'](q['param'],(k['get'](q['param'])??0x0)+0x1);}for(const s of j){if(!h['has'](s['guard_key']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20entry\x20references\x20unresolved\x20guard_key\x20\x27'+s['guard_key']+'\x27');if(!s['values']['includes'](s['emit_value']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20param\x20\x27'+s['param']+'\x27:\x20emit_value\x20\x27'+s['emit_value']+'\x27\x20is\x20not\x20in\x20the\x20declared\x20values\x20set');const u=b['fee_params'][s['param']];if(typeof u!=='string'||!s['values']['includes'](u))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20param\x20\x27'+s['param']+'\x27\x20must\x20be\x20a\x20declared\x20string\x20fee_param\x20within\x20the\x20values\x20set\x20(found:\x20'+(JSON['stringify'](u)??'undefined')+')');const w=(k['get'](s['param'])??0x0)>0x1;if(!w&&u===s['emit_value'])throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20param\x20\x27'+s['param']+'\x27:\x20the\x20declared\x20default\x20\x27'+u+'\x27\x20equals\x20emit_value\x20—\x20the\x20condition\x20would\x20always\x20fire;\x20the\x20default\x20must\x20be\x20the\x20DROPPED\x20side');}for(const [x,y]of k){if(y<=0x1)continue;const z=j['filter'](B=>B['param']===x),A=JSON['stringify'](z[0x0]['values']);for(const B of z){if(JSON['stringify'](B['values'])!==A)throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20selector\x20param\x20\x27'+x+'\x27:\x20entries\x20declare\x20different\x20value\x20sets\x20('+A+'\x20vs\x20'+JSON['stringify'](B['values'])+')\x20—\x20the\x20wizard\x20question\x20and\x20the\x20boundary\x20validation\x20must\x20see\x20ONE\x20enum');}for(const C of z[0x0]['values']){if(!z['some'](D=>D['emit_value']===C))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20selector\x20param\x20\x27'+x+'\x27:\x20value\x20\x27'+C+'\x27\x20has\x20no\x20emit\x20variant\x20—\x20answering\x20it\x20would\x20mount\x20zero\x20variants\x20and\x20strand\x20the\x20selector\x20node\x20without\x20an\x20edge');}}}}validateBuiltinTemplateCatalog();
+import{SV2_REPLAY_GATE_CLAUSE}from'./protocol-facts.js';import{validateAllocatorRows}from'./template-validation.js';export const BUILTIN_TEMPLATES_VERSION=0x66;const REWARD_CLAIM_PURPOSE='Review\x20claim\x20condition:\x20progress\x20in\x20the\x20claim-allowed\x20NODE\x20SET\x20resolved\x20from\x20THIS\x20template\x27s\x20machine_shape.\x20ANCHOR\x20VARIANTS\x20(klk15\x20A-01/A-02\x20lead,\x202026-10-23\x20—\x20read\x20THIS\x20machine_shape\x20FIRST:\x20a\x20shape\x20may\x20ship\x20NO\x20review\x20node\x20BY\x20DESIGN\x20and\x20still\x20carry\x20this\x20reward\x20—\x20destination-experience\x20anchors\x20the\x20claim\x20on\x20the\x20delivered\x20settlement\x20terminal\x20+\x20review\x20evidence\x20hash,\x20the\x20INV-4\x20second\x20legal\x20variant):\x20(a)\x20the\x20review\x20node\x20PLUS\x20EVERY\x20settlement\x20terminal\x20(semantic_role\x20final\x20—\x20a\x20shape\x20can\x20carry\x20MORE\x20THAN\x20ONE,\x20e.g.\x20the\x20subscription\x20pair\x27s\x20completed\x20AND\x20expired;\x20omitting\x20any\x20final\x20node\x20welds\x20the\x20bounty\x20shut\x20for\x20orders\x20that\x20ended\x20in\x20it:\x20ofn5\x20O3\x20period-2,\x20a\x20hand-built\x20{reviewed,\x20completed}\x20set\x20died\x20at\x20expired)\x20PLUS\x20any\x20optional\x20post-settlement\x20feedback\x20side\x20nodes\x20THIS\x20shape\x20declares\x20(wonder/no_wonder\x20convention\x20—\x20UPWC-K3/CAT-D1:\x20praising\x20after\x20settlement\x20must\x20not\x20void\x20the\x20bounty).\x20NEVER\x20hardcode\x20a\x20node-name\x20set\x20copied\x20from\x20another\x20template\x20(0\x20builtin\x20templates\x20have\x20a\x20\x27closed\x27\x20node\x20—\x20a\x20stale\x20copied\x20set\x20like\x20{reviewed,\x20closed}\x20welds\x20the\x20rail\x20shut),\x20and\x20NEVER\x20a\x20single\x20transient\x20node\x20—\x20the\x20merchant\x27s\x20settlement\x20advance\x20past\x20the\x20review\x20node\x20makes\x20a\x20reviewed-only\x20leg\x20permanently\x20false\x20and\x20the\x20reward\x20unclaimable:\x20mainnet\x20261014\x20order\x20tests,\x200.5\x20WOW\x20evaporations;\x20the\x20settlement\x20terminal\x20must\x20stay\x20claim-admissible,\x20or\x20anchor\x20\x27was\x20ever\x20at\x27\x20via\x20progress.history.find\x20id\x201274\x20+\x20signer\x20==\x20order.owner\x20(identity\x20leg\x20MANDATORY\x20—\x20the\x20on-chain\x20reward\x20claim\x20entry\x20is\x20permissionless\x20until\x20the\x20chain-side\x20patch,\x20audit-261012\x20B5)\x20+\x20review\x20content\x20hash;\x20'+SV2_REPLAY_GATE_CLAUSE+'\x20QUOTE\x20DISCLOSURE\x20(crs-mn-261014\x20F-28):\x20state\x20the\x20claim\x20scope\x20in\x20buyer\x20language\x20in\x20the\x20quote/reward\x20terms\x20—\x20a\x20quote\x20promising\x20per-order\x20rewards\x20over\x20a\x20recipient-only\x20gate\x20breaks\x20at\x20claim\x20time.\x20Do\x20NOT\x20gate\x20on\x20repository.data\x20record\x20counts\x20(F-02).\x20For\x20strict\x20once-per-order\x20semantics\x20the\x20order-scoped\x20gate\x20above\x20IS\x20the\x20primary\x20form\x20(SV-2);\x20route\x20the\x20incentive\x20through\x20an\x20Allocation\x20leg\x20gated\x20on\x20protocol\x20slot\x20254\x20instead\x20only\x20when\x20you\x20want\x20the\x20per-order\x20once\x20enforced\x20by\x20the\x20chain\x20itself,\x20immune\x20to\x20guard-tree\x20mistakes.\x20reward_claim_policy\x20is\x20documentation\x20and\x20arms\x20nothing.\x20POSITIVE-AMOUNT\x20LEG\x20(BKN-P2,\x20v55):\x20the\x20resolved\x20claim\x20root\x20MUST\x20carry\x20logic_as_u256_greater_or_equal[query(order.amount),\x20>=1]\x20—\x20a\x20zero-total\x20order\x20(zeroing-coupon\x20buy)\x20holds\x20an\x20EMPTY\x20escrow\x20and\x20must\x20never\x20claim\x20(R-REWARD-ZERO-ORDER\x20audits\x20this).\x20CLAIM-WINDOW\x20TIME\x20LEG\x20(v75,\x20bkm4/yfdx\x20ruling\x20-\x20reward\x20timing):\x20the\x20claim\x20root\x20ALSO\x20carries\x20logic_as_u256_greater_or_equal[{\x22type\x22:\x22context\x22,\x22context\x22:\x22Clock\x22},\x20calc_number_add[query(1280\x20progress.history.time,\x20next_node=<review-node>,\x20find=last,\x20witness=OrderProgress),\x20identifier[N](reward_claim_window_days\x20x\x2086400000\x20ms)]]\x20-\x20the\x20incentive\x20pays\x20only\x20AFTER\x20the\x20post-review\x20claim\x20window\x20has\x20CLOSED\x20(anchor\x20=\x20the\x20review\x20node\x27s\x20ENTRY\x20timestamp\x20via\x20the\x20IMMUTABLE\x201280\x20history\x20query;\x201272\x20is\x20rewritten\x20at\x20every\x20node\x20migration\x20so\x20the\x20base\x20drifts,\x20ETS-C),\x20so\x20a\x20reviewer\x20cannot\x20cash\x20the\x20reward\x20while\x20a\x20dispute\x20on\x20the\x20order\x20it\x20reviews\x20can\x20still\x20overturn\x20that\x20settlement;\x20fee_params.reward_claim_window_days\x20sizes\x20the\x20window\x20(default\x2014).\x20When\x20the\x20template\x27s\x20rail\x20anchors\x20ONLY\x20on\x20a\x20settlement\x20terminal\x20(no\x20review\x20node\x20exists),\x20anchor\x20the\x20time\x20leg\x20on\x20that\x20terminal\x27s\x20entry\x20instead.\x20On\x20an\x20execution\x20layer\x20older\x20than\x20the\x201280\x20release,\x20fall\x20back\x20to\x20the\x20repository-oracle\x20time\x20source\x20(pattern.time_source_repository_oracle),\x20never\x20to\x201272.\x20RECIPIENT\x20(crs-mn-261015\x20F-12,\x20live\x20mainnet):\x20the\x20reward\x20guard_add\x20ENTRY\x20recipient\x20MUST\x20be\x20{Signer:\x27signer\x27}\x20—\x20the\x20claim\x20entry\x20requires\x20recipient\x20==\x20tx_context::sender\x20(E_CLAIM_RECIPIENT_NOT_SIGNER),\x20and\x20a\x20{GuardIdentifier}\x20recipient\x20resolves\x20from\x20the\x20passport\x20submission\x20(conventionally\x20the\x20submitted\x20Order\x20address)\x20which\x20can\x20never\x20be\x20the\x20signer:\x20the\x20pool\x20behind\x20it\x20is\x20structurally\x20unpayable\x20(a\x20live\x20funded\x20pool\x20aborted\x20E_CLAIM_RECIPIENT_NOT_SIGNER\x20on\x20every\x20claim).\x20The\x20Allocation\x20anchor\x20idiom\x20(a\x20GuardIdentifier\x20recipient\x20row\x20pinned\x20to\x20the\x20paying\x20Order,\x20money\x20landing\x20ON\x20it)\x20is\x20a\x20push\x20rail\x20—\x20NEVER\x20copy\x20it\x20onto\x20the\x20reward\x20pull\x20rail;\x20an\x20{Entity}\x20recipient\x20passes\x20(the\x20SDK\x20replaces\x20it\x20with\x20the\x20claimant\x27s\x20local\x20account\x20at\x20claim\x20time);\x20the\x20MCP\x20guard_add\x20recipient\x20gate\x20rejects\x20the\x20GuardIdentifier\x20form.\x20SETTLEMENT-DRAINED\x20LEG\x20—\x20DELIBERATE\x20OPTION\x20(crs-mn-261015\x20F-16):\x20a\x20bounty\x20meant\x20as\x20the\x20follow-on\x20to\x20a\x20COMPLETED\x20purchase\x20adds\x20logic_as_u256_lesser[query(\x27allocation.balance\x27,\x20object:{identifier:0,\x20convert_witness:\x27OrderAllocation\x27}),\x20query(\x27order.amount\x27,\x20object:{identifier:0})]\x20—\x20the\x20escrow\x20must\x20be\x20at\x20least\x20partially\x20drained\x20(query\x201051\x20+\x20witness\x20109)\x20before\x20the\x20bounty\x20pays\x20(no\x20release,\x20no\x20incentive\x20—\x20closes\x20the\x20stalling-merchant\x20hole\x20and\x20the\x20unknown-commit\x20race);\x20do\x20NOT\x20add\x20it\x20for\x20a\x20review-nudge\x20bounty\x20claimed\x20at\x20the\x20review\x20node\x20(the\x20adjudicated\x20review->claim->complete\x20ordering\x20deliberately\x20PRECEDES\x20settlement,\x20upwc-mn-261013\x20(3))\x20—\x20choose\x20per\x20business\x20intent\x20and\x20state\x20the\x20choice\x20in\x20the\x20quote\x27s\x20reward\x20terms.\x20RATING-FLOOR\x20LEG\x20(upw-mn-261016\x20F-01\x20—\x20a\x20minimum-rating\x20reward\x20is\x20ENFORCEABLE\x20by\x20THIS\x20guard,\x20never\x20by\x20a\x20repository\x20write\x20policy):\x20to\x20pay\x20only\x20above\x20a\x20rating\x20floor,\x20add\x20logic_as_u256_greater_or_equal[nodes]\x20with\x20one\x20query-1167\x20leg\x20(repository.data:\x20policy-name\x20string\x20row\x20+\x20order\x20Address\x20row\x20—\x20the\x20review\x20row\x20keyed\x20by\x20the\x20order)\x20against\x20the\x20floor\x20constant\x20row,\x20or\x20a\x20query-1177\x20keys-where\x20membership\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row)\x20—\x20the\x20candidate\x20id\x20IS\x20the\x20order\x20itself,\x20so\x20the\x20id\x20set\x20cannot\x20be\x20pumped\x20(structurally\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular.\x20State\x20the\x20floor\x20in\x20the\x20quote\x27s\x20reward\x20terms\x20either\x20way.\x20THE\x20ROW\x20KEY\x20IS\x20THE\x20ORDER,\x20ALWAYS\x20(upwk-mn-261017\x20F-62):\x20the\x20floor\x20leg\x20reads\x20the\x20ORDER-keyed\x20U64\x20rating\x20row\x20(id\x20=\x20the\x20order\x20address,\x20under\x20the\x20compile-emitted\x20\x27rating\x27\x20policy\x20written\x20by\x20the\x20buyer\x20at\x20review\x20time)\x20—\x20the\x20Signer-keyed\x20review\x20TEXT\x20row\x20is\x20display-only\x20and\x20NEVER\x20keys\x20the\x20leg:\x20without\x20the\x20order-keyed\x20numeric\x20row\x20emitted\x20at\x20review\x20time\x20the\x20leg\x20has\x20nothing\x20to\x20read\x20and\x20the\x20bounty\x20dead-locks\x20fail-closed,\x20so\x20emit\x20the\x20ROW\x20(compile\x20review\x20component)\x20and\x20the\x20LEG\x20(tpl_reward_one_time_claim)\x20as\x20a\x20PAIR\x20or\x20ship\x20neither;\x20if\x20the\x20rating\x20policy\x20is\x20quote-guard-protected\x20the\x20claim\x20passport\x20must\x20carry\x20it\x20(1167\x20fails\x20closed\x20otherwise).\x20tpl_reward_one_time_claim\x20v1.14.0\x20carries\x20the\x20canonical\x20leg',STAY_DATE_CORE='STAY-DATE\x20PRESCRIPTION\x20(D3-A1,\x20batch-19\x20ruling):\x20the\x20chain\x20has\x20no\x20use-date\x20primitive\x20'+'(order.time\x20is\x20the\x20BOOKING\x20moment\x20—\x20written\x20once\x20at\x20creation,\x20immutable)\x20and\x20the\x20use-date\x20'+'field\x20proposal\x20is\x20DEFERRED\x20(D-01,\x20architecture\x20backlog),\x20so\x20a\x20window\x20RELATIVE\x20TO\x20THE\x20'+'STAY/USE\x20(\x2748h\x20before\x20arrival\x27,\x20tiered\x20ladders,\x20no-show\x20floor,\x20voucher\x20validity)\x20rides\x20a\x20'+'repository\x20stay-date\x20row:\x20(1)\x20ROW\x20—\x20one\x20batched\x20row\x20in\x20the\x20buyer\x27s\x20order-scoped\x20Repository\x20'+'at\x20buy\x20time,\x20id_from\x20None(0),\x20item\x20name\x20\x27stay_date\x27,\x20data\x20=\x20stay/use\x20start\x20as\x20u64\x20epoch-ms\x20'+'(name-stable\x20key\x20so\x20guard\x20legs\x20find\x20it);\x20(2)\x20WRITE\x20—\x20buy-time\x20compile-emitted\x20buyer\x20step;\x20'+'for\x20tamper-critical\x20venues\x20gate\x20the\x20write\x20(write_guard)\x20or\x20pair\x20it\x20with\x20the\x20merchant\x27s\x20'+'accept\x20so\x20a\x20changed\x20date\x20is\x20a\x20renegotiation,\x20not\x20a\x20silent\x20rewrite;\x20(3)\x20LEG\x20—\x20the\x20guard\x20root\x20'+'ANDs\x20a\x20pattern.repository_data_check\x20leg\x20that\x20finds\x20the\x20\x27stay_date\x27\x20row\x20and\x20compares\x20Clock\x20'+'against\x20row\x20value\x20+\x20window\x20offset,\x20CLOSING\x20direction\x20(<=)\x20for\x20pre-use\x20windows.\x20A\x20booking-time\x20'+'anchor\x20stays\x20the\x20ZERO-addition\x20default\x20—\x20honest\x20ONLY\x20while\x20the\x20buyer-facing\x20copy\x20says\x20'+'\x27from\x20booking\x27,\x20never\x20\x27before\x20arrival\x27',ZERO_BALANCE_MASKING_NOTE='Zero-balance\x20masking\x20(KLM-FIND-13,\x20klk-mn-261019):\x20once\x20an\x20order\x27s\x20Allocation\x20is\x20fully\x20distributed,\x20ANY\x20further\x20rail\x20trigger\x20returns\x20the\x20zero-value\x20abort\x20and\x20the\x20guard\x20verdict\x20is\x20never\x20evaluated\x20—\x20a\x20settled\x20order\x20cannot\x20negative-test\x20other\x20rails;\x20probe\x20with\x20a\x20fresh\x20funded\x20order.';export const BUILTIN_TEMPLATES=[{'id':'retail/scale-marketplace','industry':'retail','variant':'scale-marketplace','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'after_sales_mode':'return','product_ref':'amazon','archetype':'leader','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'paid','role':'Entry:\x20order\x20created\x20and\x20fully\x20escrowed\x20via\x20the\x20on-chain\x20buy\x20flow;\x20Machine\x20starts\x20here','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'shipped','role':'Seller/fulfiller\x20ships\x20goods\x20with\x20tracking\x20evidence\x20(fulfiller\x20permission\x20slot)','semantic_role':'active','from':[{'prev':'paid','forward':'Ship','guard_key':'ship'},{'prev':'paid','forward':'Ship','guard_key':'ship_enforced'}]},{'name':'delivered','role':'Carrier\x20or\x20buyer\x20confirms\x20delivery\x20—\x20buyer-first\x20confirmation;\x20buyer\x20silence\x20cannot\x20strand\x20the\x20escrow:\x20the\x20keeper\x20auto-confirms\x20auto_confirm_days\x20after\x20shipment\x20and\x20the\x20buyer\x20keeps\x20every\x20remedy\x20(return\x20window,\x20the\x20Arbitration\x20case\x20window)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'shipped','forward':'ConfirmDelivery','guard_key':'deliver_confirm'},{'prev':'shipped','forward':'AutoConfirmDelivery','operator':'merchant','permission_index':0x3ea,'guard_key':'deliver_confirm_timeout'},{'prev':'claim_filed','forward':'ResumeAfterDismissal','operator':'merchant','permission_index':0x3ea,'guard_key':'arb_dismissed_resume'}]},{'name':'reviewed','role':'Buyer\x20reviews\x20within\x20the\x2014-day\x20review\x20window','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'Review','guard_key':'review_window'}]},{'name':'claim_window','role':'SERIAL\x20CLAIM\x20WINDOW\x20(TPL-09,\x20ABNB2-validated):\x20mandatory\x20waypoint\x20between\x20delivery\x20confirmation\x20and\x20settlement\x20—\x20the\x20pool\x20cannot\x20release\x20while\x20a\x20post-delivery\x20dispute\x20could\x20still\x20be\x20filed\x20(FACT-ALLOC-03:\x20no\x20on-chain\x20holdback\x20primitive;\x20a\x20Rate-10000\x20settlement\x20racing\x20an\x20open\x20claim\x20leaves\x20the\x20loser\x20an\x20empty\x20pool).\x20Exactly\x20two\x20sanctioned\x20exits,\x20declared\x20on\x20the\x20target\x20nodes:\x20FileDispute\x20(the\x20buyer\x20files\x20INSIDE\x20the\x20window\x20—\x20the\x20claim_filed\x20guard\x20closes\x20at\x20window\x20entry\x20+\x20claim_window_days)\x20or\x20the\x20settlement\x20forwards\x20(window\x20elapsed\x20with\x20no\x20claim\x20—\x20settle_window\x20opens\x20at\x20window\x20entry\x20+\x20the\x20merged\x20duration).\x20Opened\x20by\x20the\x20keeper\x20as\x20a\x20declared\x20duty\x20—\x20an\x20unopened\x20window\x20holds\x20the\x20pool\x20at\x20delivered/reviewed\x20by\x20design\x20(the\x20serial\x20hold).\x20Re-entered\x20from\x20reviewed\x20so\x20a\x20review\x20can\x20never\x20strand\x20the\x20order\x20off\x20the\x20settlement\x20path\x20(R-DEAD-END);\x20a\x20dismissed\x20claim\x20resumes\x20to\x20delivered\x20(arb_dismissed_resume)\x20and\x20the\x20buyer\x20re-enters\x20a\x20fresh\x20window','operator':'merchant','semantic_role':'delivered','from':[{'prev':'delivered','forward':'OpenClaimWindow','permission_index':0x3ea},{'prev':'reviewed','forward':'OpenClaimWindow','permission_index':0x3ea}]},{'name':'completed','role':'Settlement\x20point:\x20the\x20SERIAL\x20claim\x20window\x20has\x20elapsed\x20(TPL-09\x20—\x20the\x20settlement\x20forward\x20departs\x20claim_window,\x20so\x20no\x20release\x20can\x20fire\x20while\x20a\x20dispute\x20could\x20still\x20be\x20filed;\x20FACT-ALLOC-03:\x20the\x20chain\x20has\x20no\x20holdback,\x20the\x20serial\x20ordering\x20IS\x20the\x20protection).\x20Open\x20disputes\x20never\x20block\x20this\x20node\x20as\x20a\x20GUARD\x20leg:\x20disputes\x20live\x20on\x20the\x20separate\x20Arbitration\x20object,\x20and\x20a\x20\x27no\x20open\x20claims\x27\x20precondition\x20is\x20UNSATISFIABLE\x20by\x20design\x20(Order.dispute\x20is\x20append-only\x20—\x20a\x20one-way\x20door;\x20azq9-mn-261019\x20P0-6:\x20teaching\x20builders\x20to\x20wait\x20for\x20claims\x20to\x20clear\x20or\x20to\x20encode\x20a\x20claims-cleared\x20leg\x20welds\x20the\x20settlement\x20rail\x20shut\x20forever)\x20—\x20the\x20serial\x20window\x20makes\x20the\x20payout/claim\x20FCFS\x20race\x20unreachable\x20BY\x20STRUCTURE\x20instead','semantic_role':'final','from':[{'prev':'claim_window','forward':'SettleAfterWindow','operator':'merchant','permission_index':0x3ea,'guard_key':'settle_window'}]},{'name':'return_requested','role':'Buyer\x20requests\x20return\x20within\x20the\x2030-day\x20return\x20window','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'shipped','forward':'RequestReturnBeforeDelivery','guard_key':'return_request_pre_delivery'},{'prev':'delivered','forward':'RequestReturn','guard_key':'return_window'}]},{'name':'return_in_transit','role':'Buyer\x20has\x20shipped\x20the\x20return\x20parcel\x20back\x20—\x20RECORD\x20waypoint\x20for\x20the\x20in-transit\x20leg\x20(TPL-10):\x20the\x20buyer\x27s\x20own\x20declaration\x20advances\x20it;\x20carrier\x20tracking\x20of\x20the\x20RETURN\x20leg\x20lives\x20in\x20the\x20evidence\x20Repository,\x20not\x20asserted\x20here','operator':'order_payer','semantic_role':'active','from':[{'prev':'return_requested','forward':'ShipReturn','guard_key':'return_shipped'}]},{'name':'returned','role':'Return\x20receipt\x20evidenced\x20(RMA\x20row\x20in\x20the\x20evidence\x20Repository)\x20—\x20ARMS\x20the\x20refund\x20Allocator\x20to\x20buyer\x20(TPL-10:\x20the\x20refund\x20fact\x20gets\x20its\x20own\x20terminal\x20below)','semantic_role':'active','from':[{'prev':'return_in_transit','forward':'ReturnReceived','permission_index':0x3e8,'guard_key':'return_received'}]},{'name':'refunded','role':'Refund\x20EXECUTED\x20—\x20terminal\x20record\x20waypoint\x20(TPL-10):\x20the\x20refund\x20Allocator\x20(refund_execute\x20rail)\x20has\x20paid\x20the\x20buyer\x20and\x20the\x20keeper\x20advances\x20this\x20edge\x20to\x20record\x20the\x20completed\x20remedy.\x20Money\x20never\x20moves\x20THROUGH\x20this\x20node\x20—\x20the\x20allocation\x20rail\x20pays;\x20this\x20edge\x20is\x20the\x20machine-side\x20receipt\x20that\x20makes\x20the\x20refund\x20fact\x20queryable\x20in\x20the\x20machine\x20graph.\x20FUND-EXIT-01\x20PROOF:\x20the\x20refund_execute\x20rail\x27s\x20accepted-node\x20set\x20includes\x20this\x20terminal\x20—\x20the\x20rail\x20stays\x20triggerable\x20here\x20and\x20re-fires\x20as\x20a\x20balance-exhausted\x20no-op\x20(the\x20pool\x20already\x20drained),\x20which\x20is\x20the\x20on-chain\x20fund\x20exit\x20this\x20terminal\x20rests\x20on','operator':'merchant','semantic_role':'cancelled','from':[{'prev':'returned','forward':'RefundExecuted','permission_index':0x3ea,'guard_key':'refund_executed'}]},{'name':'item_lost','role':'Carrier\x20lost\x20the\x20parcel\x20—\x20RECORD\x20waypoint\x20only:\x20the\x20fulfiller\x20files\x20the\x20carrier\x27s\x20lost-package\x20record\x20hash\x20into\x20the\x20evidence\x20Repository.\x20Not\x20a\x20terminal\x20and\x20NOT\x20a\x20dispute\x20node\x20(R-M1-11\x20exemption:\x20\x27lost\x27\x20is\x20a\x20business\x20STATE\x20like\x20\x27returned\x27,\x20not\x20an\x20outcome\x20naming);\x20disputes\x20over\x20who\x20bears\x20the\x20loss\x20still\x20go\x20to\x20the\x20separate\x20Arbitration\x20object','semantic_role':'active','from':[{'prev':'shipped','forward':'RecordLost','permission_index':0x3e8,'guard_key':'lost_evidence'}]},{'name':'claim_filed','role':'DISPUTE\x20WAYPOINT\x20(TPL-09):\x20the\x20buyer\x20filed\x20a\x20third-party\x20Arbitration\x20case\x20on\x20this\x20order\x20INSIDE\x20the\x20serial\x20claim\x20window.\x20RECORD\x20waypoint\x20ONLY\x20—\x20the\x20ruling\x20lives\x20on\x20the\x20Arb\x20object\x20and\x20is\x20NEVER\x20judged\x20in\x20the\x20machine\x20(R-M1-11);\x20this\x20node\x20gives\x20the\x20order\x20graph\x20a\x20queryable\x20\x27case\x20open\x27\x20state\x20with\x20three\x20sanctioned\x20exits\x20(declared\x20on\x20the\x20target\x20nodes):\x20buyer-won\x20(arb_refund,\x20tpl_forward_arb_ruling_won)\x20into\x20the\x20closed_cancel\x20refund\x20rail,\x20dismissed\x20(arb_dismissed_resume,\x20tpl_forward_arb_ruling_dismissed)\x20back\x20to\x20delivered,\x20and\x20the\x20buyer\x27s\x20own\x20WITHDRAW\x20(withdraw_claim,\x20order_payer\x20—\x20no\x20ruling\x20=\x20claimed_by\x20none\x20=\x20the\x20refund\x20rail\x20stays\x20open,\x20full\x20escrow\x20back;\x20also\x20the\x20single-hop\x20void\x20escape).\x20The\x20serial\x20window\x20guarantees\x20the\x20pool\x20is\x20INTACT\x20for\x20every\x20exit:\x20settlement\x20cannot\x20fire\x20before\x20the\x20window\x20elapsed,\x20so\x20the\x20FCFS\x20race\x20is\x20unreachable\x20(D2/FACT-ALLOC-03).\x20NO\x20direction\x20interlock\x20is\x20expressed\x20(OFN5-05:\x20order-side\x20shape\x20only;\x20the\x20compensation-vs-escrow\x20independence\x20stays\x20the\x20merchant\x27s\x20commercial\x20choice,\x20disclosed\x20MCP-side\x20by\x20the\x20amz9\x20A-1\x20dual-payout\x20gate)','operator':'order_payer','semantic_role':'active','from':[{'prev':'claim_window','forward':'FileDispute','guard_key':'claim_filed'}]},{'name':'closed_cancel','role':'Cancellation\x20/\x20ruled-refund\x20terminal\x20—\x20pre-delivery\x20buyer\x20cancel,\x20return-window\x20exits,\x20the\x20lost-parcel\x20remedy,\x20and\x20the\x20claim-rail\x20exits\x20from\x20claim_filed\x20(buyer\x20WITHDRAW\x20or\x20buyer-won\x20ruling)\x20—\x20triggers\x20the\x20refund\x20Allocator\x20to\x20buyer','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'CancelBeforePayment','guard_key':'cancel_from_paid'},{'prev':'shipped','forward':'CancelBeforeShipment','guard_key':'cancel_from_shipped'},{'prev':'return_requested','forward':'CancelOrder','guard_key':'cancel_from_return'},{'prev':'item_lost','forward':'RefundAfterLoss','guard_key':'lost_refund'},{'prev':'claim_filed','forward':'WithdrawClaim','operator':'order_payer','guard_key':'withdraw_claim'},{'prev':'claim_filed','forward':'ArbRefund','operator':'merchant','permission_index':0x3ea,'guard_key':'arb_refund'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Buyer\x20region\x20eligibility\x20and\x20optional\x20buyer\x20Passport\x20gate\x20on\x20purchase'},{'template_id':'pattern.repository_data_check','host':'machine','key':'ship','purpose':'Shipping\x20evidence\x20(tracking\x20hash)\x20required\x20to\x20ship'},{'template_id':'pattern.repository_data_check','host':'machine','key':'ship_enforced','purpose':'TPL-11\x20ENFORCED\x20ship\x20variant\x20(required_info_enforcement\x20\x27on\x27\x20—\x20physical-goods\x20shops\x20that\x20cannot\x20ship\x20without\x20a\x20delivery\x20address).\x20COMPOSITE\x20DESIGN,\x20resolve\x20as\x20ONE\x20inline\x20conjunction:\x20(a)\x20the\x20tracking\x20leg\x20—\x20repository\x20evidence\x20row\x20for\x20THIS\x20order\x20keyed\x20by\x20the\x20order\x20address\x20(P16\x20service-name\x20reference,\x20same\x20writer\x20authorization\x20as\x20the\x20plain\x20\x27ship\x27\x20design),\x20AND\x20(b)\x20the\x20required-info\x20presence\x20leg\x20—\x20order.required_info\x20some\x20(query\x201572,\x20tpl_required_info_present\x20root,\x20slot\x20254\x20task-binding).\x20NEVER\x20mount\x20tpl_required_info_present\x20as\x20a\x20SECOND\x20design\x20on\x20this\x20edge\x20(M-T2:\x20one\x20design\x20per\x20key)\x20—\x20the\x20conjunction\x20is\x20the\x20sanctioned\x20enforced\x20form\x20(amz9\x20A-4);\x20the\x20unenforced\x20\x27off\x27\x20variant\x20keeps\x20the\x20plain\x20tracking-only\x20\x27ship\x27\x20design'},{'template_id':'pattern.repository_data_check','host':'machine','key':'return_received','purpose':'Return\x20receipt\x20evidence\x20(RMA\x20row\x20in\x20the\x20evidence\x20Repository)\x20required\x20to\x20advance\x20return_requested\x20->\x20returned'},{'template_id':'pattern.repository_data_check','host':'machine','key':'lost_evidence','purpose':'Carrier\x20lost-package\x20record\x20hash\x20(evidence\x20Repository\x20row,\x20same\x20writer\x20authorization\x20as\x20tracking\x20rows)\x20required\x20to\x20file\x20item_lost'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'return_shipped','purpose':'TPL-10:\x20the\x20buyer\x20declares\x20the\x20return\x20parcel\x20shipped\x20back\x20(source\x20node\x20return_requested,\x20forward\x20ShipReturn)\x20—\x20signer\x20==\x20order\x20owner;\x20the\x20in-transit\x20leg\x20is\x20a\x20buyer\x20declaration,\x20the\x20RMA\x20evidence\x20check\x20stays\x20on\x20the\x20NEXT\x20edge\x20(return_received)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'claim_filed','purpose':'TPL-09:\x20dispute\x20filing\x20INSIDE\x20the\x20serial\x20claim\x20window\x20—\x20a\x20CLOSING\x20window:\x20Clock\x20<=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days;\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20bkd8\x20BK-04).\x20Witness-anchored\x20on\x20the\x20window\x20ENTRY\x20so\x20a\x20keeper\x27s\x20lazy\x20window-open\x20delays\x20filing\x20and\x20settlement\x20TOGETHER\x20and\x20can\x20never\x20re-open\x20the\x20FCFS\x20race\x20(D2/FACT-ALLOC-03).\x20The\x20buyer\x20identity\x20leg\x20rides\x20the\x20edge\x27s\x20order_payer\x20operator\x20(guard-is-additive,\x20AZ3-T1)\x20—\x20this\x20node\x20pins\x20operator\x20order_payer,\x20never\x20an\x20empty\x20namedOperator\x20(bkg15\x20F05:\x20an\x20empty\x20one\x20is\x20NOT\x20buyer-exclusive)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'withdraw_claim','purpose':'TPL-09:\x20the\x20buyer\x20WITHDRAWS\x20the\x20filed\x20dispute\x20(source\x20node\x20claim_filed,\x20forward\x20WithdrawClaim)\x20—\x20signer\x20==\x20order\x20owner;\x20no\x20ruling\x20=\x20arb.claimed_by\x20none\x20=\x20the\x20refund\x20rail\x20(claimed_by\x20some\x20==\x20false,\x20query\x20id\x201570)\x20stays\x20open\x20and\x20the\x20full\x20escrow\x20returns\x20via\x20closed_cancel;\x20also\x20the\x20claim\x20waypoint\x27s\x20single-hop\x20void\x20escape\x20(R-DRAFT-VOID)'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_refund','purpose':'TPL-09:\x20the\x20buyer-won\x20ruling\x20re-routes\x20the\x20disputed\x20order\x20into\x20the\x20closed_cancel\x20refund\x20rail\x20(claim_filed\x20->\x20closed_cancel,\x20forward\x20ArbRefund,\x20merchant/keeper\x20slot\x201002):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true\x20AND\x20indemnity.amount\x20!=\x200\x20(canonical\x20two-slot\x20root,\x20zero-award\x20exclusion\x20leg\x20included\x20—\x20a\x20dismissed\x20claim\x20can\x20NEVER\x20fire\x20this\x20edge).\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE\x20(M-T2)'},{'template_id':'tpl_forward_arb_ruling_dismissed','host':'machine','key':'arb_dismissed_resume','purpose':'TPL-09:\x20a\x20merchant-favor\x20(zero-indemnity)\x20ruling\x20resumes\x20the\x20disputed\x20order\x20back\x20to\x20delivered\x20(claim_filed\x20->\x20delivered,\x20forward\x20ResumeAfterDismissal,\x20merchant/keeper\x20slot\x201002):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200\x20—\x20the\x20dismissed\x20buyer\x20keeps\x20the\x20normal\x20review/settlement/return\x20rights;\x20re-entry\x20appends\x20a\x20fresh\x20delivered\x20entry\x20and\x20re-anchors\x20the\x20windows\x20(find=last)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_executed','purpose':'TPL-10:\x20the\x20refund\x20has\x20ACTUALLY\x20paid\x20(refund\x20Allocator\x20refund_execute\x20rail\x20satisfied)\x20—\x20the\x20keeper\x20advances\x20returned\x20->\x20refunded\x20(forward\x20RefundExecuted,\x20slot\x201002)\x20to\x20record\x20the\x20completed\x20remedy:\x20progress.current\x20==\x20returned\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool\x20—\x20the\x20escrow-exit\x20polarity\x20of\x20the\x20paid\x20award).\x20RECORD\x20edge\x20only:\x20the\x20money\x20authority\x20is\x20the\x20allocation\x20rail\x20(OFN5-05),\x20this\x20edge\x20is\x20the\x20machine-side\x20receipt'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','purpose':'Evidence\x20Repository\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20(merchant\x20Signer,\x20Permission\x20staff\x20index,\x20or\x20the\x20Order\x20holder/agent):\x20the\x20chain\x20only\x20asserts\x20the\x20guard\x20list\x20is\x20non-empty\x20(repository.move,\x20E_POLICY_WRITE_GUARD_REQUIRED=22),\x20so\x20a\x20placeholder\x20that\x20returns\x20true\x20is\x20an\x20OPEN\x20write\x20—\x20a\x20counterparty\x20can\x20pre-write\x20the\x20tracking/return-receipt\x20row\x20and\x20satisfy\x20the\x20ship/deliver\x20evidence\x20gate\x20(testnet\x20HIGH-04,\x20tx\x20BLA7F62r)','policy':{'name':'evidence','id_from':'none','value_type':'String'}},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20shop\x20declares\x20customer_required\x20(personalised\x20goods,\x20import\x20VAT/ID):\x20order.required_info\x20some\x20before\x20fulfilment.\x20DESIGN-ONLY\x20here,\x20and\x20the\x20reason\x20is\x20FUND-SAFETY\x20not\x20omission\x20(amz9-ln-261023\x20A-4):\x20customer_required\x20is\x20DECLARATIVE\x20—\x20the\x20purchase\x20entry\x20never\x20reads\x20it\x20(service.move:399-419)\x20and\x20order.required_info\x20is\x20an\x20Option\x20the\x20buyer\x20may\x20leave\x20EMPTY\x20—\x20so\x20an\x20unconditional\x20presence\x20gate\x20on\x20the\x20ship\x20path\x20bricks\x20EVERY\x20order\x20of\x20an\x20info-free\x20shop.\x20The\x20ENFORCED\x20form\x20for\x20a\x20physical-goods\x20shop\x20resolves\x20key\x20\x27ship\x27\x20via\x20guard_resolutions\x20with\x20an\x20inline\x20composition\x20(tracking-evidence\x20root\x20AND-ed\x20with\x20the\x20tpl_required_info_present\x20presence\x20root\x20—\x20query\x201572\x20presence,\x201573\x20aborts\x20while\x20the\x20Option\x20is\x20empty);\x20do\x20NOT\x20mount\x20the\x20tpl\x20standalone\x20on\x20a\x20dedicated\x20unconditional\x20forward.\x20The\x20acceptance-rail\x20archetype\x20(retail/vertical-handmade)\x20ships\x20the\x20tpl\x20ENFORCED\x20on\x20its\x20accept\x20forward\x20because\x20that\x20flow\x20always\x20has\x20a\x20spec\x20to\x20accept\x20—\x20a\x20per-shop\x20opt-in\x20knob\x20that\x20would\x20make\x20enforcement\x20the\x20marketplace\x20default\x20is\x20queued\x20for\x20protocol\x20review'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'deliver_confirm','purpose':'Delivery\x20confirmed\x20by\x20buyer-first;\x20carrier\x20only\x20auxiliary\x20evidence\x20—\x20seller\x20can\x20never\x20self-confirm'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_from_paid','purpose':'Buyer\x20cancels\x20the\x20fully-escrowed\x20order\x20before\x20shipment\x20(source\x20node\x20paid).\x20A\x20dedicated\x20key\x20per\x20source\x20node:\x20one\x20approved\x20order-holder\x20assertion\x20authorizes\x20exactly\x20one\x20business\x20decision\x20—\x20the\x20pre-M-T2\x20single\x20\x27deliver\x27\x20key\x20made\x20a\x20delivery-confirmation\x20assertion\x20stand\x20in\x20for\x20four\x20cancel/refund\x20semantics'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_from_shipped','purpose':'Buyer\x20cancels\x20after\x20shipment\x20but\x20before\x20delivery\x20confirmation\x20(source\x20node\x20shipped);\x20refunds\x20ride\x20the\x20same\x20single\x20refund\x20rail\x20via\x20closed_cancel'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_from_return','purpose':'Buyer\x20abandons\x20the\x20return\x20flow\x20and\x20takes\x20the\x20direct\x20refund\x20exit\x20(source\x20node\x20return_requested)\x20—\x20the\x20return-receipt\x20evidence\x20path\x20and\x20this\x20instant\x20path\x20are\x20alternatives,\x20never\x20both'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'lost_refund','purpose':'Buyer\x20order-holder\x20confirmation\x20advancing\x20the\x20lost-parcel\x20refund\x20into\x20closed_cancel\x20(source\x20node\x20item_lost,\x20after\x20the\x20fulfiller\x20filed\x20the\x20carrier\x20loss\x20evidence)\x20—\x20mirrors\x20the\x20disruption-refund\x20buyer\x20double-confirmation\x20convention'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Review\x20DEADLINE\x20window\x20(az3-mn-261013\x20F-03\x20direction\x20fix):\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20(14)\x20of\x20delivery\x20—\x20a\x20CLOSING\x20window\x20(<=\x20anchor+duration),\x20so\x20the\x20correct\x20anchor\x20pattern\x20is\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20made\x20\x27first\x2014\x20days\x20forbidden,\x20forever\x20open\x20after\x27\x20—\x20direction\x20inversion\x20is\x20a\x20business\x20accident,\x20pattern.deadline_window\x20notes).\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settle_window','purpose':'Settlement\x20OPENING\x20gate,\x20SERIAL\x20(TPL-09,\x20ABNB2-validated):\x20Clock\x20>=\x20claim_window\x20ENTRY\x20+\x20merged\x20duration\x20—\x20the\x20settlement\x20forwards\x20DEPART\x20claim_window,\x20so\x20no\x20release\x20can\x20fire\x20while\x20a\x20dispute\x20could\x20still\x20be\x20filed:\x20filing\x20closes\x20at\x20window\x20entry\x20+\x20claim_window_days\x20and\x20the\x20release\x20opens\x20at\x20window\x20entry\x20+\x20the\x20merged\x20duration,\x20so\x20the\x20constraint\x20merged\x20>=\x20claim_window_days\x20keeps\x20the\x20window\x20shut\x20before\x20every\x20release\x20(assert\x20at\x20generation;\x20FACT-ALLOC-03:\x20the\x20chain\x20has\x20no\x20holdback,\x20the\x20serial\x20ordering\x20is\x20the\x20protection).\x20Deliberately\x20NO\x20dispute/claim\x20precondition\x20leg\x20(Order.dispute\x20is\x20append-only:\x20encoding\x20\x27no\x20open\x20claims\x27\x20as\x20a\x20settlement\x20leg\x20welds\x20the\x20rail\x20shut\x20forever\x20once\x20any\x20case\x20was\x20ever\x20filed\x20—\x20azq9-mn-261019\x20P0-6;\x20open\x20disputes\x20ride\x20the\x20separate\x20Arbitration\x20object\x20and\x20the\x20refund/recover\x20claimed_by\x20polarity\x20pair\x20—\x20the\x20serial\x20window\x20carries\x20the\x20exclusion\x20BY\x20STRUCTURE\x20instead).\x20ETM-T1\x20ANCHOR\x20CONSTRAINT:\x20the\x20window\x20entry\x20is\x20never\x20EARLIER\x20than\x20the\x20delivered\x20entry,\x20so\x20merged\x20>=\x20return_window_days\x20still\x20guarantees\x20settlement\x20can\x20never\x20fire\x20before\x20the\x20return\x20window\x20closes\x20(source-platform\x20return\x20rights\x20survive\x20settlement);\x20generation\x20asserts\x20settle\x20>=\x20return\x20when\x20both\x20knobs\x20are\x20set'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'deliver_confirm_timeout','purpose':'Buyer-silence\x20auto-confirm:\x20Clock\x20>=\x20shipped\x20entry\x20+\x20auto_confirm_days\x20—\x20the\x20keeper\x20advances\x20delivery\x20when\x20the\x20buyer\x20never\x20confirms,\x20so\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow\x20at\x20shipped\x20(T-04);\x20anchored\x20on\x20the\x20shipped\x20node\x20entry\x20(carrier\x20transit\x20counts\x20from\x20shipment)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'return_request_pre_delivery','purpose':'Buyer\x20requests\x20a\x20return/refund\x20while\x20the\x20order\x20is\x20IN\x20TRANSIT\x20(source\x20node\x20shipped,\x20delivery\x20not\x20yet\x20confirmed)\x20—\x20F-TPL-01\x20(amzn2-ln-261016):\x20this\x20rail\x20previously\x20shared\x20return_window\x20with\x20the\x20delivered-side\x20edge,\x20but\x20return_window\x20anchors\x20the\x20DELIVERED\x20entry\x20time\x20(id\x201280,\x20next_node=\x27delivered\x27),\x20which\x20an\x20in-transit\x20order\x20has\x20never\x20written:\x20the\x20history\x20query\x20aborts\x20W_FIELD_NOT_FOUND\x20and\x20logic\x20nodes\x20evaluate\x20ALL\x20operands\x20before\x20merging\x20(no\x20short-circuit),\x20killing\x20the\x20entire\x20guard\x20—\x20the\x20pre-delivery\x20return\x20rail\x20was\x20chain-unreachable\x20forever.\x20Identity-only\x20BY\x20DESIGN\x20(no\x20time\x20window):\x20transit\x20is\x20naturally\x20bounded\x20by\x20the\x20auto-confirm\x20(deliver_confirm_timeout);\x20after\x20delivery\x20the\x2030-day\x20return_window\x20governs\x20the\x20delivered→RequestReturn\x20leg.\x20ONE\x20business\x20decision\x20per\x20key,\x20per\x20M-T2'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'return_window','purpose':'Return-request\x20DEADLINE\x20window\x20(az3-mn-261013\x20F-03\x20direction\x20fix):\x20return\x20allowed\x20only\x20WITHIN\x20return_window_days\x20(fee_param,\x20default\x2030)\x20of\x20delivery\x20—\x20a\x20CLOSING\x20window,\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20encoded\x20\x27no\x20returns\x20for\x2030\x20days,\x20unlimited\x20returns\x20after\x27\x20—\x20the\x20exact\x20inverse\x20of\x20the\x20source\x20platform\x27s\x20policy);\x20ETM-T1:\x20the\x20knob\x20is\x20return_window_days\x20and\x20settlement\x20(settle_window)\x20is\x20constrained\x20to\x20open\x20no\x20earlier\x20than\x20this\x20window\x27s\x20end.\x20F-TPL-01\x20SCOPE\x20RULE\x20(amzn2-ln-261016):\x20bind\x20this\x20key\x20ONLY\x20to\x20entry\x20edges\x20whose\x20prev\x20node\x20can\x20REACH\x20the\x20anchor\x20node\x20—\x20the\x20anchor\x20reads\x20the\x20delivered\x20history\x20row\x20(id\x201280\x20next_node=\x27delivered\x27,\x20fail-hard\x20W_FIELD_NOT_FOUND\x20when\x20absent,\x20no\x20logic\x20short-circuit),\x20so\x20an\x20edge\x20departing\x20shipped\x20(an\x20order\x20still\x20in\x20transit\x20has\x20no\x20delivered\x20row)\x20must\x20NEVER\x20ride\x20this\x20key;\x20give\x20pre-delivery\x20rails\x20their\x20own\x20identity-based\x20key\x20(return_request_pre_delivery)\x20—\x20a\x20shared\x20key\x20across\x20semantically\x20different\x20edges\x20was\x20the\x20root\x20cause'},{'template_id':'pattern.identity_check_service_provider_dynamic','host':'machine','key':'refund_execute','purpose':'Refund\x20execution\x20requires\x20the\x20refund-executor\x20permission\x20slot\x20or\x20an\x20arbiter;\x20the\x20paired\x20machine\x20face\x20is\x20the\x20\x27refunded\x27\x20terminal\x20record\x20waypoint\x20(TPL-10)\x20—\x20this\x20guard/allocator\x20pair\x20MOVES\x20the\x20funds,\x20the\x20refunded\x20node\x20only\x20records\x20the\x20completed\x20remedy.\x20Recommended\x20accepted-node\x20set\x20{returned,\x20refunded,\x20closed_cancel}:\x20the\x20rail\x20pays\x20at\x20returned\x20(RMA\x20evidenced)\x20and\x20stays\x20TRIGGERABLE\x20at\x20the\x20refunded\x20record\x20terminal\x20(a\x20balance-exhausted\x20no-op\x20after\x20the\x20Rate-10000\x20drain\x20—\x20that\x20triggerable\x20shape\x20is\x20the\x20FUND-EXIT-01\x20proof\x20that\x20the\x20refunded\x20terminal\x20keeps\x20a\x20fund\x20exit)\x20and\x20at\x20closed_cancel'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20run75747\x20F-06:\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_execute\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.allocator_order_anchor','host':'service','key':'order_anchor','purpose':'Settlement\x20anchor\x20DESIGN\x20(no\x20standalone\x20binding\x20site):\x20the\x20builtin\x20carries\x20the\x20Rate-0\x20{GuardIdentifier:\x200}\x20anchor\x20leg\x20INLINE\x20inside\x20the\x20settlement\x20allocator\x20(guard_key\x20settle_window)\x20because\x20chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator\x20—\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register.\x20The\x20pattern\x20stays\x20for\x20builders\x20who\x20re-derive\x20the\x20shape;\x20the\x20effect\x20is\x20that\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20settlement\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20built\x20from\x20a\x20sibling\x20order\x27s\x20settled\x20state\x20can\x20no\x20longer\x20satisfy\x20the\x20settlement\x20Guard\x20(testnet\x20CR-01\x20drain);\x20the\x20anchor\x20leg\x20pays\x20nothing'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'conditional_guards':[{'guard_key':'ship','param':'required_info_enforcement','values':['off','on'],'emit_value':'off','question':'Should\x20the\x20shop\x20REQUIRE\x20the\x20buyer\x20to\x20record\x20delivery/contact\x20credentials\x20before\x20shipping?\x20off\x20=\x20no\x20requirement\x20(digital/info\x20goods\x20—\x20orders\x20ship\x20with\x20tracking\x20evidence\x20only);\x20on\x20=\x20require\x20it\x20(physical\x20goods\x20—\x20shipping\x20gates\x20on\x20the\x20recorded\x20credential\x20AND\x20the\x20tracking\x20evidence)'},{'guard_key':'ship_enforced','param':'required_info_enforcement','values':['off','on'],'emit_value':'on','question':'Required-info\x20enforcement\x20variant\x20(mounts\x20with\x20\x27on\x27\x20in\x20place\x20of\x20the\x20plain\x20tracking\x20gate)'}],'allocator':{'recipient':'entity','refund_track':'order_anchored','count':0x3,'mode':'rate','once_per_order':!![],'description':'Full\x20escrow\x20+\x20single-point\x20settlement.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20A\x20single\x20Rate\x2010000\x20leg\x20to\x20the\x20seller\x27s\x20own\x20Entity\x20at\x20the\x20settlement\x20point;\x20any\x20fulfilment\x20cost\x20the\x20seller\x20recovers\x20is\x20its\x20own\x20pricing\x20and\x20must\x20be\x20declared\x20as\x20an\x20explicit\x20non-zero\x20leg\x20with\x20a\x20non-empty\x20recipient.\x20every\x20settlement/refund\x20allocator\x20carries\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order;\x20full\x20refund\x20to\x20buyer\x20(Rate\x2010000,\x20order-anchored)\x20on\x20returned/cancelled;\x20an\x20AWARDED\x20order\x27s\x20escrow\x20principal\x20exits\x20via\x20the\x20shipped\x20merchant-recovery\x20allocator\x20(recover_gate,\x20claimed_by\x20some\x20==\x20true\x20—\x20the\x20polarity\x20twin\x20of\x20the\x20refund\x20seal);\x20post-settlement\x20claims\x20paid\x20from\x20the\x20compensation\x20fund','rows':[{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'settle_window','note':'0%\x20commission.\x20Explicit\x20non-empty\x20Entity\x20is\x20mandatory:\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently\x20(ts-sdk/packages/wowok/src/w/local/index.ts\x20is\x20the\x20SDK-side\x20substitution).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_window','note':'Rate-0\x20ORDER\x20anchor\x20LEG\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20it\x20forces\x20the\x20settlement\x20Guard\x20to\x20declare\x20slot\x200\x20(the\x20submitted\x20Order,\x20b_submission\x20Address)\x20and\x20makes\x20a\x20sibling\x20order\x27s\x20passport\x20unable\x20to\x20drive\x20this\x20rail\x20(testnet\x20CR-01\x20drain);\x20pays\x20nothing.\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator\x20on\x20chain\x20(a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register),\x20so\x20the\x20anchor\x20shares\x20the\x20settlement\x20guard_key\x20—\x20N-T10/N-K21:\x20this\x20leg\x20is\x20the\x20templated\x20carrier\x20of\x20the\x20slot-0=order-address\x20semantics\x20the\x20publish\x20gate\x20enforces.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_execute','note':'Order-anchored\x20full\x20return.\x20The\x20paired\x20guard\x20must\x20assert\x20order.service\x20binding,\x20the\x20qualifying\x20node,\x20and\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20so\x20it\x20cannot\x20run\x20twice\x20or\x20after\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid;\x20signer\x20==\x20order.owner\x20is\x20OPTIONAL\x20(trigger-rights\x20only\x20—\x20the\x20GuardIdentifier\x20recipient\x20already\x20hard-binds\x20the\x20payee\x20to\x20the\x20order,\x20so\x20the\x20signer\x20leg\x20adds\x20no\x20fund\x20safety).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20Order.dispute\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever\x20and\x20strand\x20the\x20escrow\x20(one-way\x20door).\x20Accepted-node\x20set\x20{returned,\x20refunded,\x20closed_cancel}:\x20pays\x20at\x20returned\x20(RMA\x20evidenced);\x20at\x20the\x20refunded\x20record\x20terminal\x20it\x20re-fires\x20as\x20a\x20balance-exhausted\x20no-op\x20(the\x20pool\x20already\x20drained)\x20—\x20that\x20triggerable-here\x20shape\x20is\x20the\x20FUND-EXIT-01\x20proof\x20for\x20the\x20refunded\x20terminal;\x20at\x20closed_cancel\x20it\x20is\x20the\x20claimed_by-false\x20twin\x20of\x20recover_gate'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20merchant\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits\x20(the\x20mainnet\x202.38-at-reviewed\x20stranding).\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_window/refund_execute),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000\x20on\x20chain;\x20exactly\x20one\x20of\x20refund_execute\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'key_risk':'Settlement\x20uncertainty\x20—\x20sellers\x20need\x20a\x20deterministic\x20release\x20point\x20after\x20reserve\x20+\x20cycle\x20+\x20return\x20window','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Full\x20escrow\x20+\x20single-point\x20settlement:\x20funds\x20stay\x20100%\x20in\x20the\x20pool\x20until\x20the\x20settlement\x20time-lock\x20fires','Reserve\x20(7d)\x20+\x20settlement\x20cycle\x20(14d)\x20+\x20return\x20window\x20(30d)\x20merge\x20into\x20ONE\x20settlement\x20time-lock\x20Guard','Disputes\x20go\x20to\x20an\x20independent\x20Arbitration\x20object\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11)','ITEM\x20LOST\x20WAYPOINT:\x20\x27item_lost\x27\x20is\x20a\x20RECORD\x20waypoint,\x20not\x20a\x20terminal\x20and\x20not\x20a\x20dispute\x20node\x20—\x20the\x20fulfiller\x20files\x20the\x20carrier\x27s\x20lost-package\x20evidence\x20(guard\x20\x27lost_evidence\x27,\x20same\x20Repository\x20writer\x20authorization\x20as\x20tracking\x20rows),\x20then\x20\x27RefundAfterLoss\x27\x20advances\x20into\x20closed_cancel\x20so\x20the\x20SAME\x20single\x20refund\x20rail\x20pays\x20the\x20buyer\x20(no\x20second\x20refund\x20allocator).\x20R-M1-11\x20EXEMPTION:\x20\x27lost\x27\x20is\x20a\x20business\x20STATE\x20like\x20\x27returned\x27,\x20not\x20a\x20dispute-OUTCOME\x20naming\x20—\x20never\x20express\x20it\x20as\x20a\x20dispute/arb-prefixed\x20node,\x20and\x20route\x20loss-liability\x20disputes\x20to\x20the\x20separate\x20Arbitration\x20object','STRANDED-AT-CREATION\x20REMEDY\x20(AZ3-T5,\x20az3-mn-261013\x20T10/T11,\x20mainnet-proven):\x20the\x20machine\x20keeps\x20ONE\x20entry\x20edge\x20by\x20design\x20—\x20a\x20second\x20prev:\x22\x22\x20edge\x20would\x20make\x20the\x20automatic\x20entry-forward\x20application\x20ambiguous,\x20so\x20it\x20is\x20never\x20added.\x20An\x20order\x20stranded\x20at\x20the\x20creation\x20sentinel\x20(current\x20\x22\x22,\x20e.g.\x20created\x20by\x20an\x20older\x20build\x20that\x20did\x20not\x20apply\x20the\x20entry\x20forward)\x20is\x20recovered\x20by\x20the\x20merchant:\x20advance\x20it\x20into\x20\x27paid\x27\x20with\x20the\x20entry\x20forward\x20(chain\x20name\x20\x22Enter\x22\x20—\x20azq9-mn-261019\x20TPL-C:\x20a\x20keeper\x20following\x20a\x20\x27ConfirmPaid\x27\x20instruction\x20finds\x20no\x20such\x20forward\x20and\x20stalls),\x20then\x20ride\x20the\x20EXISTING\x20pre-shipment\x20cancel\x20rail\x20(paid\x20->\x20closed_cancel,\x20key\x20cancel_from_paid)\x20—\x20the\x20full\x20refund\x20pays\x20through\x20the\x20normal\x20rail.\x20A\x20zero-escrow\x20strander\x20needs\x20no\x20recovery;\x20it\x20only\x20pollutes\x20pending\x20counts','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed;\x20run75747\x20F-06):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20The\x20pairing\x20is\x20now\x20STRUCTURAL,\x20not\x20prose:\x20the\x20allocator\x20rows\x20SHIP\x20the\x20merchant-recovery\x20allocator\x20(recover_gate\x20row\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity).\x20The\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20guard\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20the\x20Machine\x20publish;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','Service\x20Permission\x20and\x20Arbitration\x20Permission\x20must\x20be\x20two\x20separate\x20objects\x20(contract-enforced)','Allocator\x20threshold\x20=\x20minimum\x20payout\x20unit\x20(maps\x20to\x20the\x20$1\x20payout\x20threshold)','Repository\x20evidence\x20chain:\x20tracking\x20hash,\x20delivery\x20scan,\x20WTS\x20message\x20proof,\x20authenticity\x20proof,\x20return\x20receipt','EVIDENCE\x20WRITE\x20GATE\x20(testnet\x20HIGH-04):\x20the\x20evidence\x20Repository\x20runs\x20under\x20id_from=None\x20(the\x20caller\x20supplies\x20the\x20ORDER\x20address\x20as\x20the\x20data\x20key),\x20which\x20is\x20the\x20ONLY\x20routing\x20the\x20ship/return\x20evidence\x20design\x20can\x20use\x20—\x20and\x20the\x20chain\x20merely\x20asserts\x20a\x20NON-EMPTY\x20write_guard\x20list\x20(repository.move,\x20E_POLICY_WRITE_GUARD_REQUIRED=22);\x20it\x20never\x20checks\x20what\x20the\x20guard\x20proves.\x20A\x20tautology\x20guard\x20therefore\x20publishes\x20as\x20\x27guarded\x27\x20while\x20letting\x20ANY\x20address\x20write\x20or\x20overwrite\x20any\x20row\x20(buyer1\x20forged\x20order5\x27s\x20tracking\x20row,\x20tx\x20BLA7F62r;\x20the\x20merchant\x27s\x20real\x20write\x20upserted\x20over\x20it,\x20tx\x20DaZaPn6o\x20—\x20no\x20lock,\x20but\x20zero\x20provenance).\x20Generate\x20the\x20write_guard\x20from\x20pattern.repository_write_authorization\x20(identity\x20leaf\x20mandatory),\x20make\x20the\x20row\x20write-once\x20with\x20the\x20POLICY\x20flag\x20write_once:true\x20(a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20—\x20NEVER\x20the\x20logic_not(repository.data\x20has)\x20idiom,\x20whose\x20write-guard\x20is\x20evaluated\x20before\x20the\x20row\x20exists\x20and\x20always\x20aborts\x20the\x20first\x20write;\x20amz9-ln-261023\x20TPL-07\x20un-contradicted\x20this\x20build_note),\x20and\x20store\x20a\x20signed\x20WTS\x20Proof\x20ADDRESS\x20as\x20the\x20value\x20for\x20anything\x20an\x20arbitrator\x20must\x20trust\x20(proof.signer/proof.about/proof.time)\x20—\x20existence-only\x20gates\x20(1166)\x20are\x20satisfied\x20by\x20forged\x20rows','Category-differentiated\x20commission\x20/\x20per-order\x20return\x20policy:\x20every\x20order\x20gets\x20its\x20OWN\x20Allocation\x20(order_allocators\x20is\x20only\x20the\x20template),\x20so\x20add\x20ONE\x20allocator\x20entry\x20per\x20category\x20—\x20each\x20with\x20a\x20category\x20Guard\x20whose\x20relies\x20reference\x20a\x20Repository\x20holding\x20the\x20category\x20rules\x20(commission\x20rate\x20or\x20fixed\x20amount,\x20return\x20window);\x20the\x20Guard\x20validates\x20the\x20differentiated\x20supply\x20(amount\x20or\x20rate)\x20at\x20runtime.\x20No\x20contract\x20change\x20needed','OPERATIONAL:\x20allocator\x20guards\x20within\x20one\x20Allocation\x20must\x20be\x20mutually\x20distinct\x20and\x20one-shot\x20—\x20rate\x20mode\x20splits\x20the\x20balance\x20at\x20execution\x20time,\x20so\x20a\x20second\x20firing\x20of\x20the\x20same\x20guard\x20re-splits\x20the\x20remaining\x20balance\x20(no\x20on-chain\x20idempotence;\x20E-2)','OPERATIONAL\x20E-2:\x20trigger\x20protection\x20is\x20BALANCE-EXHAUSTION\x20ONLY\x20—\x20the\x20chain\x20records\x20no\x20\x27already\x20triggered\x27\x20flag\x20on\x20a\x20guard.\x20Pure-Rate\x20sums\x20==\x2010000\x20are\x20single-shot\x20by\x20construction;\x20but\x20a\x20partial\x20allocator\x20(Rate\x20sum\x20<\x2010000\x20with\x20NO\x20Surplus\x20recipient)\x20leaves\x20residual\x20balance\x20claimable\x20REPEATEDLY\x20by\x20anyone\x20who\x20passes\x20the\x20same\x20guard.\x20Always\x20either\x20sum\x20Rates\x20to\x2010000\x20or\x20pair\x20partial\x20Rates\x20with\x20a\x20Surplus\x20recipient;\x20run\x20the\x20guard-design\x20REPLAY\x20TEST\x20before\x20publish','ONCE-PER-ORDER\x20(E-2(b),\x20DEFAULT\x20ON\x20for\x20this\x20archetype):\x20this\x20allocator\x20sets\x20once_per_order=true.\x20Generation\x20must\x20(a)\x20add\x20a\x20submission\x20entry\x20to\x20each\x20allocator\x20Guard\x20—\x20identifier\x20254\x20(ONCE-FOR-OBJECT)\x20for\x20one-shot\x20rails\x20(refund,\x20single\x20settlement),\x20identifier\x20255\x20(byte-keyed)\x20for\x20rails\x20that\x20run\x20once\x20PER\x20PERIOD\x20with\x20a\x20\x27period-<N>\x27\x20key\x20—\x20and\x20(b)\x20submit\x20the\x20matching\x20identifier\x20in\x20the\x20trigger\x20Passport.\x20A\x20replay\x20then\x20aborts\x20with\x20code\x2016\x20instead\x20of\x20silently\x20re-splitting\x20residual\x20balance.\x20254\x20derives\x20its\x20slot\x20key\x20on-chain\x20from\x20payment_info.for_object\x20(the\x20submitted\x20bytes\x20are\x20ignored),\x20so\x20it\x20cannot\x20be\x20widened\x20by\x20a\x20varying\x20submission\x20—\x20prefer\x20it\x20whenever\x20the\x20rail\x20is\x20one-shot\x20per\x20bound\x20order','SCOPE\x20OF\x20THE\x20255\x20SLOT:\x20it\x20is\x20stored\x20per\x20Allocation\x20(one\x20pool)\x20—\x20(guard,\x20allocator,\x20submission)\x20is\x20recorded\x20on\x20THAT\x20Allocation,\x20so\x20a\x20second\x20Allocation\x20of\x20the\x20same\x20Service\x20starts\x20with\x20no\x20once\x20record.\x20255\x20alone\x20does\x20NOT\x20stop\x20a\x20cross-order\x20passport;\x20the\x20order\x20anchor\x20(pattern.allocator_order_anchor)\x20is\x20what\x20binds\x20a\x20Guard\x20to\x20its\x20own\x20order\x20(testnet\x20CR-01:\x20a\x20settled\x20order1\x20passport\x20drained\x20order2\x27s\x20pool\x20while\x20every\x20recipient\x20was\x20an\x20Entity)','PRICE\x20FLOOR\x20FOR\x20THE\x20FIXED\x20LEG:\x20the\x20Amount\x20fulfillment\x20fee\x20is\x20a\x20hard\x20subtraction\x20—\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20(allocation.move,\x20EINSUFFICIENT_BALANCE)\x20and\x20offers\x20no\x20floor,\x20so\x20ANY\x20order\x20escrowed\x20below\x20it\x20can\x20never\x20settle\x20nor\x20refund\x20(testnet\x20CR-02,\x20deadlocked\x20permanently\x20at\x20a\x20terminal\x20node).\x20Every\x20catalog\x20category\x20must\x20keep\x20min_sku_price\x20above\x20the\x20fixed\x20leg,\x20or\x20model\x20the\x20per-order\x20fee\x20as\x20Rate/RateGross','OPERATIONAL:\x20fee_params\x20values\x20(settlement/reserve/return/dispute\x20windows)\x20are\x20TS-layer\x20generation\x20parameters,\x20NOT\x20on-chain\x20guarantees\x20—\x20they\x20bind\x20only\x20when\x20embedded\x20into\x20Guard\x20data\x20and\x20enforced\x20by\x20keeper\x20scheduling','customer_required\x20IS\x20DECLARATIVE\x20(testnet\x20HIGH-05):\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(service.move:399-419),\x20so\x20an\x20order\x20missing\x20every\x20required\x20field\x20still\x20creates\x20successfully.\x20TPL-11\x20KNOB\x20(amz9\x20A-4):\x20enforcement\x20is\x20now\x20a\x20per-shop\x20OPT-IN\x20—\x20fee_param\x20required_info_enforcement\x20defaults\x20\x27off\x27\x20(the\x20design-only\x20posture:\x20digital/info\x20goods\x20shops\x20ship\x20on\x20tracking\x20evidence\x20alone\x20and\x20are\x20NEVER\x20bricked\x20by\x20a\x20presence\x20gate);\x20a\x20physical-goods\x20shop\x20answers\x20\x27on\x27\x20and\x20the\x20composite\x20ship_enforced\x20design\x20mounts\x20on\x20paid→shipped\x20(tracking\x20row\x20AND\x20required_info\x20presence,\x20query\x201572\x20—\x20the\x20Option<address>\x20the\x20buyer\x20sets\x20via\x20order_required_info_update\x20to\x20either\x20the\x20merchant\x27s\x20IM\x20user\x20address\x20or\x20an\x20on-chain\x20WTS\x20Proof\x20address;\x201573\x20aborts\x20while\x20the\x20Option\x20is\x20empty\x20and\x20the\x20value\x20is\x20unvalidated\x20input:\x20pin\x20it\x20to\x20a\x20merchant-issued\x20Proof\x20when\x20the\x20CONTENT\x20matters).\x20The\x20acceptance-rail\x20archetype\x20(retail/vertical-handmade)\x20stays\x20the\x20always-enforced\x20twin\x20(tpl_required_info_present\x20on\x20its\x20accept\x20forward).','DISPUTE\x20WAYPOINT\x20+\x20SERIAL\x20CLAIM\x20WINDOW\x20(TPL-09,\x20amz9\x20A-4a;\x20D2-SERIAL-CLAIM-WINDOW\x20/\x20FACT-ALLOC-03):\x20the\x20machine\x20inserts\x20a\x20SERIAL\x20claim_window\x20between\x20delivery\x20confirmation\x20and\x20settlement\x20—\x20the\x20keeper\x20OPENS\x20it\x20(declared\x20duty;\x20an\x20unopened\x20window\x20holds\x20the\x20pool\x20at\x20delivered/reviewed\x20—\x20the\x20serial\x20hold),\x20the\x20buyer\x20files\x20INSIDE\x20it\x20(claim_filed\x20guard\x20closes\x20at\x20window\x20entry\x20+\x20claim_window_days),\x20and\x20the\x20settlement\x20forwards\x20DEPART\x20it\x20(settle_window\x20opens\x20at\x20window\x20entry\x20+\x20the\x20merged\x20duration,\x20same\x20witness\x20anchor)\x20—\x20the\x20chain\x20has\x20no\x20holdback\x20primitive,\x20so\x20this\x20serial\x20ordering,\x20NOT\x20a\x20\x27no\x20open\x20claims\x27\x20precondition\x20(Order.dispute\x20is\x20append-only,\x20azq9\x20P0-6),\x20is\x20what\x20keeps\x20a\x20Rate-10000\x20settlement\x20from\x20racing\x20an\x20open\x20claim\x20onto\x20an\x20empty\x20pool.\x20The\x20claim_filed\x20node\x20records\x20that\x20a\x20third-party\x20Arbitration\x20case\x20is\x20open;\x20the\x20ruling\x20is\x20NEVER\x20judged\x20in\x20the\x20machine\x20(R-M1-11\x20unchanged).\x20Three\x20sanctioned\x20exits:\x20buyer-won\x20(arb_refund,\x20tpl_forward_arb_ruling_won\x20—\x20canonical\x20two-slot\x20root\x20with\x20the\x20zero-award\x20exclusion\x20leg)\x20re-routes\x20into\x20the\x20shared\x20closed_cancel\x20refund\x20rail;\x20dismissed\x20(arb_dismissed_resume,\x20tpl_forward_arb_ruling_dismissed)\x20resumes\x20at\x20delivered\x20and\x20re-anchors\x20the\x20windows;\x20buyer\x20WITHDRAW\x20(withdraw_claim)\x20returns\x20the\x20full\x20escrow\x20(no\x20ruling\x20=\x20claimed_by\x20none\x20=\x20the\x20refund\x20rail\x20stays\x20open).\x20OFN5-05\x20boundary:\x20order-side\x20shape\x20only\x20—\x20no\x20compensation-vs-escrow\x20direction\x20interlock\x20(that\x20independence\x20is\x20the\x20merchant\x27s\x20commercial\x20choice;\x20the\x20MCP-side\x20amz9\x20A-1\x20dual-payout\x20gate\x20is\x20the\x20disclosure\x20half).','RETURN\x20LEG\x20GRANULARITY\x20(TPL-10,\x20amz9\x20A-4b):\x20the\x20return\x20path\x20is\x20now\x20return_requested\x20→\x20return_in_transit\x20(buyer\x20declares\x20the\x20parcel\x20shipped\x20back\x20—\x20identity-only\x20declaration)\x20→\x20returned\x20(RMA\x20evidence,\x20unchanged)\x20→\x20refunded\x20(terminal\x20RECORD\x20waypoint:\x20the\x20keeper\x20advances\x20it\x20after\x20the\x20refund_execute\x20allocator\x20rail\x20has\x20actually\x20paid;\x20the\x20money\x20authority\x20stays\x20the\x20allocation\x20rail\x20—\x20this\x20edge\x20is\x20the\x20machine-side\x20receipt\x20that\x20makes\x20the\x20refund\x20fact\x20queryable\x20in\x20the\x20graph).','COMMISSION\x20IS\x20DISCLOSURE-ONLY\x20(TPL-04,\x20amz9\x20A-4c):\x20the\x20shipped\x20allocator\x20rows\x20are\x20DIRECT-SALES\x20—\x20commission_rate_bps\x20/\x20platform_commission_bps\x20create\x20NO\x20platform\x20split\x20leg;\x20setting\x20them\x20>\x200\x20changes\x20NOTHING\x20on\x20chain.\x20To\x20collect\x20a\x20commission,\x20add\x20an\x20explicit\x20platform\x20Entity\x20settlement\x20row\x20(rate\x20=\x20the\x20bps)\x20and\x20rebalance\x20the\x20merchant\x20leg\x20to\x2010000\x20−\x20bps\x20at\x20build\x20time\x20—\x20an\x20aggregator\x20using\x20merchant_service_fee_bps\x20must\x20follow\x20the\x20same\x20explicit-number\x20+\x20non-empty-Entity\x20+\x20no-Surplus\x20constraints\x20in\x20the\x20user_inputs\x20note.','DISCOUNT\x20CREATION\x20STEP:\x20when\x20the\x20merchant\x20wants\x20promotions,\x20create\x20a\x20Discount\x20object\x20through\x20the\x20Service\x20data\x20operation\x20`discount`\x20(MCP:\x20onchain_operations\x20service\x20data;\x20SDK:\x20Service\x20data.discount\x20—\x20the\x20mint\x20delivers\x20to\x20the\x20discount\x27s\x20recipients\x20directly)\x20pointing\x20at\x20this\x20Service\x27s\x20address.\x20TIMING\x20(T9\x20az3-mn-261013,\x20mainnet-verified):\x20the\x20discount\x20registry\x20is\x20NOT\x20frozen\x20by\x20publish\x20—\x20coupons\x20can\x20be\x20minted\x20or\x20destroyed\x20at\x20any\x20time,\x20BEFORE\x20or\x20AFTER\x20publish\x20(the\x20T9\x20probe\x20coupon\x20was\x20minted\x20post-publish\x20and\x20delivered\x20to\x20its\x20recipients\x20successfully).\x20Pre-publish\x20minting\x20is\x20a\x20timing\x20preference\x20only\x20(the\x20promotion\x20is\x20visible\x20to\x20buyers\x20at\x20quote\x20time);\x20there\x20is\x20no\x20freeze\x20deadline\x20to\x20beat.\x20Idempotence\x20warning:\x20the\x20chain\x20does\x20NOT\x20dedupe\x20discounts\x20by\x20name\x20—\x20every\x20`discount`\x20op\x20mints\x20a\x20NEW\x20object\x20with\x20its\x20own\x20UID\x20(duplicate-name\x20same-value\x20coupons\x20are\x20independently\x20redeemable\x20real\x20leaks,\x20mainnet\x20M-K1),\x20so\x20reuse\x20an\x20existing\x20coupon\x20or\x20merge\x20the\x20budget\x20into\x20max_uses\x20instead\x20of\x20re-minting.\x20The\x20Discount\x20carries:\x20type\x20(percentage/fixed),\x20value,\x20max_uses,\x20and\x20optionally\x20a\x20Guard\x20for\x20eligibility\x20(e.g.\x20first-time\x20buyer,\x20whitelist).\x20Discounts\x20are\x20BURNED\x20on\x20use\x20—\x20each\x20redemption\x20decrements\x20the\x20remaining\x20budget\x20permanently;\x20a\x20used\x20discount\x20is\x20never\x20refunded\x20or\x20restocked.\x20Budget\x20formula:\x20max_uses\x20*\x20discount_value\x20=\x20total\x20exposure.','WIP\x20CUSTODY\x20NOTE:\x20this\x20template\x27s\x20machine_shape\x20has\x20NO\x20WIP\x20(work-in-progress)\x20mode\x20—\x20the\x20chain\x20does\x20not\x20support\x20WIP\x20nodes\x20in\x20Machine\x20v1.\x20Work-in-progress\x20tracking\x20(partial\x20fulfilment,\x20drafts,\x20revision\x20cycles)\x20must\x20live\x20OFF-CHAIN\x20in\x20the\x20Messenger\x20conversation\x20(WTS\x20evidence)\x20or\x20in\x20a\x20separate\x20Repository\x20the\x20merchant\x20manages.\x20The\x20Machine\x27s\x20spine\x20is\x20paid\x20→\x20shipped\x20→\x20delivered\x20→\x20(reviewed)\x20→\x20claim_window\x20→\x20completed,\x20plus\x20the\x20return\x20leg\x20(return_requested\x20→\x20return_in_transit\x20→\x20returned\x20→\x20refunded),\x20the\x20cancel/loss\x20exits\x20into\x20closed_cancel,\x20and\x20the\x20claim\x20waypoint\x20claim_filed.\x20Any\x20intermediate\x20WIP\x20state\x20is\x20a\x20Keeper\x20obligation,\x20not\x20a\x20Machine\x20node.','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'required_info_enforcement':'off','settlement_days':0xe,'reserve_days':0x7,'claim_window_days':0xe,'return_window_days':0x1e,'dispute_window_days':0x5a,'seller_contact_hours':0x30,'auto_confirm_days':0x7,'review_window_days':0xe,'min_sku_price':'must\x20exceed\x20the\x20per-order\x20fixed\x20fulfillment\x20fee\x20for\x20every\x20listed\x20category','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'settlement':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last)\x20—\x20SERIAL\x20(TPL-09):\x20the\x20merged\x20settlement/reserve/return\x20time-lock\x20measures\x20from\x20the\x20CLAIM-WINDOW\x20ENTRY\x20timestamp,\x20the\x20SAME\x20witness\x20anchor\x20as\x20the\x20filing\x20window\x20—\x20filing\x20closes\x20at\x20entry\x20+\x20claim_window_days\x20and\x20the\x20release\x20opens\x20at\x20entry\x20+\x20the\x20merged\x20duration,\x20so\x20a\x20keeper\x27s\x20lazy\x20window-open\x20delays\x20both\x20TOGETHER\x20and\x20can\x20never\x20re-open\x20the\x20FCFS\x20race;\x20next_node=<X>\x20reads\x20the\x20ENTER\x20moment\x20of\x20X\x20(node=<X>\x20would\x20read\x20the\x20LEAVE\x20moment\x20—\x20the\x20run-75747\x20F-17\x20double-wrong\x20form\x20—\x20and\x201274\x20returns\x20the\x20entry\x20INDEX,\x20not\x20a\x20time);\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20progress.current_time\x20is\x20REWRITTEN\x20at\x20every\x20node\x20migration\x20(ETS-C\x20drift)\x20—\x20never\x20anchor\x20a\x20window\x20on\x20current_time;\x20ETM-T1:\x20window\x20entry\x20>=\x20delivered\x20entry,\x20so\x20merged\x20duration\x20>=\x20return_window_days\x20still\x20guarantees\x20settlement\x20never\x20before\x20the\x20return\x20window\x20closes','claim_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last\x20—\x20witness-anchored)\x20—\x20the\x20serial\x20window\x20ENTRY\x20timestamp;\x20BOTH\x20serial\x20legs\x20anchor\x20here:\x20filing\x20closes\x20at\x20entry\x20+\x20claim_window_days\x20(CLOSING\x20window,\x20pattern.time_window_upper_bound)\x20and\x20settlement\x20opens\x20at\x20entry\x20+\x20the\x20merged\x20duration','return_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20delivery\x20ENTRY\x20timestamp\x20—\x20CLOSING\x20window\x20(upper\x20bound,\x20pattern.time_window_upper_bound;\x20az3\x20F-03\x20direction\x20fix);\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','deliver_confirm_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27shipped\x27,\x20find=last)\x20shipment\x20ENTRY\x20timestamp\x20—\x20carrier\x20transit\x20counts\x20from\x20shipment;\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','dispute_window':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard)','seller_contact':'seller_contact_hours\x20—\x20off-chain\x20service-level\x20response\x20obligation\x20(keeper-monitored;\x20no\x20on-chain\x20timestamp\x20anchor)'},'trust_mechanisms':['R1\x20refund\x20path:\x20refund\x20Guard\x20+\x20buyer\x20Rate\x2010000\x20Allocator\x20+\x20dispute\x20compensation\x20channel','R3\x20compensation\x20fund\x20>=\x203x\x20the\x20order\x20amount\x20(MAX_INDEMNITY_MULTIPLE\x20caps\x20any\x20award\x20at\x203x\x20escrow\x20at\x20arbitration\x20time,\x20arb.move);\x20fund\x20below\x20that\x20only\x20under-covers,\x20it\x20does\x20not\x20block\x20the\x20award','R2\x20independent\x20Arbitration\x20with\x20its\x20own\x20Permission\x20(admin\x20=\x20arbitration\x20team)','R4\x20buyer-first\x20delivery\x20confirmation\x20—\x20seller\x20self-sign\x20forbidden','R5\x20every\x20settlement/refund\x20allocator\x20carries\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01)','R6\x20settlement\x20allocator\x20=\x20Entity\x20Rate\x2010000\x20(0%\x20commission,\x20explicit\x20non-empty\x20Entity\x20—\x20NO\x20Surplus\x20leg)\x20+\x20an\x20inline\x20Rate-0\x20ORDER\x20anchor\x20leg\x20sharing\x20the\x20settle\x20guard_key\x20(per-allocator\x20Rate\x20sums\x20must\x20be\x20exactly\x2010000\x20on\x20chain);\x20refund\x20allocator\x20=\x20single\x20order-anchored\x20Rate\x2010000;\x20recovery\x20allocator\x20=\x20merchant\x20Entity\x20Rate\x2010000\x20gated\x20on\x20claimed_by\x20some\x20==\x20true\x20(polarity\x20twin\x20of\x20the\x20refund\x20seal)','R7\x20all\x20nodes/forwards/Guards\x20configured\x20before\x20publish\x20(publish\x20freezes)','R8\x20customer-service\x20Contact\x20bound\x20to\x20Service\x20and\x20Machine','R9\x20keeper\x20declared\x20for\x20settlement\x20trigger,\x20claim-window\x20open,\x20absence\x20timeout,\x20and\x20window\x20expiry','R10\x20business\x20parameters\x20(claim\x20cap,\x20return\x20window,\x20settlement\x20cycle)\x20embedded\x20as\x20Guard\x20parameters\x20—\x20industry-recommended\x20defaults,\x20merchant-configurable\x20at\x20build\x20time'],'keeper_dependencies':['settlement\x20trigger\x20at\x20the\x20single\x20release\x20point','claim-window\x20open\x20after\x20delivery\x20confirmation\x20(TPL-09\x20serial\x20hold\x20—\x20an\x20unopened\x20window\x20parks\x20the\x20order\x20at\x20delivered/reviewed)','delivery\x20auto-confirm\x20(auto_confirm_days\x20after\x20shipment\x20—\x20AutoConfirmDelivery\x20advances\x20a\x20silent\x20buyer\x27s\x20order)','48h\x20absence\x20auto-loss\x20in\x20arbitration','90-day\x20dispute\x20window\x20expiry','return\x20window\x20expiry'],'recommended_role':'merchant','role_rationale':'Marketplace\x20operator\x20owns\x20the\x20Service\x20and\x20hosts\x20third-party\x20sellers\x20as\x20Permission\x20entities;\x20individual\x20sellers\x20join\x20under\x20the\x20operator\x27s\x20permission\x20slots.','differences':['Scale-first\x20general\x20marketplace:\x20third-party\x20sellers\x20are\x20hosted\x20under\x20the\x20operator\x27s\x20Permission\x20entities,\x20unlike\x20the\x20vertical\x20variant\x20where\x20makers\x20self-fulfill\x20their\x20own\x20storefront\x20Services','Single-point\x20settlement\x20merges\x20reserve\x20+\x20settlement\x20cycle\x20+\x20return\x20window\x20into\x20ONE\x20settlement\x20time-lock\x20(14-day\x20cycle\x20vs\x20the\x20vertical\x20variant\x27s\x200-3\x20day\x20fast\x20settlement)','Post-settlement\x20claims\x20are\x20paid\x20from\x20a\x20compensation\x20fund\x20instead\x20of\x20per-order\x20holds'],'user_inputs':['commission_rate_bps\x20—\x20KEEP\x20AT\x200.\x20WoWok\x20takes\x20no\x20platform\x20commission;\x20a\x20merchant\x20may\x20price\x20its\x20own\x20service\x20into\x20an\x20explicit\x20non-empty\x20Entity\x20(merchant_service_fee_bps).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.\x20TPL-04\x20TRUTH\x20(amz9\x20A-4c):\x20as\x20shipped,\x20this\x20template\x27s\x20allocator\x20rows\x20are\x20DIRECT-SALES\x20—\x20commission_rate_bps\x20/\x20platform_commission_bps\x20are\x20DISCLOSURE-ONLY\x20parameters\x20and\x20do\x20NOT\x20create\x20a\x20platform\x20split\x20leg;\x20setting\x20them\x20>\x200\x20without\x20adding\x20an\x20explicit\x20platform\x20Entity\x20settlement\x20row\x20changes\x20NOTHING\x20on\x20chain\x20(the\x2010000-rate\x20merchant\x20leg\x20keeps\x20the\x20whole\x20sale).\x20To\x20actually\x20collect\x20a\x20commission,\x20add\x20a\x20platform\x20Entity\x20settlement\x20row\x20(rate\x20=\x20the\x20bps)\x20at\x20build\x20time\x20and\x20rebalance\x20the\x20merchant\x20leg\x20to\x2010000\x20−\x20bps.','settlement_days\x20/\x20reserve_days\x20/\x20return_window_days\x20—\x20the\x20three\x20windows\x20merged\x20into\x20the\x20settlement\x20time-lock\x20(anchored\x20on\x20the\x20claim_window\x20entry,\x20TPL-09)','claim_window_days\x20—\x20the\x20serial\x20dispute-filing\x20window\x20(TPL-09):\x20filing\x20closes\x20at\x20window\x20entry\x20+\x20claim_window_days\x20and\x20the\x20settlement\x20lock\x20opens\x20at\x20entry\x20+\x20the\x20merged\x20duration,\x20so\x20the\x20merged\x20duration\x20must\x20stay\x20>=\x20claim_window_days\x20(the\x20window\x20always\x20shuts\x20before\x20the\x20release)','dispute_window_days\x20—\x20post-settlement\x20claim\x20window','fixed\x20fulfillment\x20fee\x20+\x20min_sku_price\x20—\x20the\x20fixed\x20leg\x20MUST\x20be\x20below\x20the\x20cheapest\x20listed\x20SKU\x20(a\x20sub-fee\x20order\x20cannot\x20settle\x20or\x20refund)','Compensation\x20fund\x20size\x20(>=\x203x\x20the\x20order\x20amount\x20—\x20the\x20on-chain\x20indemnity\x20hard\x20cap\x20in\x20arbitration.compensate)','Discount\x20(optional)\x20—\x20create\x20a\x20Discount\x20object\x20pointing\x20at\x20this\x20Service\x20to\x20run\x20promotions\x20(percentage\x20or\x20fixed-amount\x20off).\x20The\x20discount\x20is\x20burned\x20on\x20use:\x20once\x20a\x20buyer\x20redeems\x20it\x20against\x20an\x20order,\x20the\x20Discount\x20object\x27s\x20balance\x20decrements\x20permanently\x20and\x20CANNOT\x20be\x20reverted\x20—\x20no\x20restock,\x20no\x20refund\x20of\x20the\x20discount\x20itself.\x20Plan\x20the\x20total\x20discount\x20budget\x20(max_uses\x20*\x20discount_value)\x20before\x20publishing\x20the\x20Discount.']},{'id':'retail/vertical-handmade','industry':'retail','variant':'vertical-handmade','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'after_sales_mode':'return','product_ref':'etsy','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'paid','role':'Entry:\x20order\x20created\x20and\x20fully\x20escrowed;\x20Machine\x20starts\x20here','semantic_role':'draft','from':[{'prev':'','forward':'pay','operator':'order_payer'}]},{'name':'confirmed','role':'Seller\x20accepts\x20the\x20handmade/custom\x20order\x20before\x20crafting','semantic_role':'active','from':[{'prev':'paid','forward':'accept_order','permission_index':0x3e8,'guard_key':'required_info'}]},{'name':'shipped','role':'Seller\x20ships\x20within\x20processing\x20time\x20with\x20tracking\x20evidence','semantic_role':'active','from':[{'prev':'confirmed','forward':'ship','permission_index':0x3e8}]},{'name':'delivered','role':'Carrier\x20or\x20buyer\x20confirms\x20delivery\x20—\x20buyer-first\x20confirmation;\x20buyer\x20silence\x20cannot\x20strand\x20the\x20escrow:\x20the\x20keeper\x20auto-confirms\x20auto_confirm_days\x20after\x20shipment\x20and\x20the\x20buyer\x20keeps\x20every\x20remedy\x20(cancel/return\x20rails,\x20the\x20Arbitration\x20case\x20window)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'shipped','forward':'confirm_delivery','operator':'order_payer'},{'prev':'shipped','forward':'AutoConfirmDelivery','operator':'merchant','permission_index':0x3ea,'guard_key':'deliver_confirm_timeout'}]},{'name':'reviewed','role':'Buyer\x20reviews\x20within\x20the\x20case\x20window\x20—\x20optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20the\x20settlement\x20rail\x20(reviewed\x20→\x20completed\x20rides\x20the\x20same\x20settle\x20forward),\x20so\x20a\x20review\x20can\x20never\x20strand\x20the\x20escrow\x20(the\x20unexited\x20version\x20of\x20this\x20node\x20stranded\x20a\x20live\x20mainnet\x20escrow,\x20az-mn-261007\x20T5;\x20R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','optional':!![],'from':[{'prev':'delivered','forward':'submit_review','operator':'order_payer','guard_key':'review_window'}]},{'name':'completed','role':'Settlement:\x20fast\x20challenger\x20settlement\x20—\x20the\x20Allocator\x20releases\x20settlement_delay_days\x20after\x20delivery\x20confirmation\x20(the\x200-3\x20day\x20lever\x20vs\x20the\x2014-day\x20marketplace\x20cycle).\x20The\x20machine\x20return/refund\x20rail\x20is\x20reachable\x20only\x20PRE-settlement;\x20post-settlement\x20buyer\x20remedy\x20is\x20the\x2030-day\x20case\x20window\x20on\x20the\x20independent\x20Arbitration\x20+\x20compensation\x20fund\x20(purchase\x20protection),\x20never\x20a\x20second\x20machine\x20refund\x20path','semantic_role':'final','from':[{'prev':'delivered','forward':'settle','permission_index':0x3e8,'guard_key':'settle_clock'},{'prev':'reviewed','forward':'settle','permission_index':0x3e8,'guard_key':'settle_clock'}]},{'name':'return_requested','role':'Return\x20request\x20within\x20the\x20seller\x27s\x20policy\x20window\x20—\x20PRE-settlement\x20rail\x20only:\x20once\x20the\x20settlement\x20Allocator\x20has\x20drained\x20the\x20escrow\x20this\x20edge\x20is\x20topologically\x20dead,\x20and\x20post-settlement\x20remedies\x20ride\x20the\x20Arbitration\x20case\x20window','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'request_return','operator':'order_payer','guard_key':'return_window'}]},{'name':'returned','role':'Return\x20received\x20or\x20returnless\x20approval\x20—\x20triggers\x20refund\x20Allocator\x20to\x20buyer','semantic_role':'cancelled','from':[{'prev':'return_requested','forward':'return_received','permission_index':0x3e8}]},{'name':'closed_cancel','role':'Cancellation\x20exit\x20—\x20pre-ship\x20buyer\x20cancel,\x20in-processing-window\x20buyer\x20cancel,\x20or\x20keeper\x20ship-deadline\x20timeout\x20—\x20triggers\x20refund\x20Allocator\x20to\x20buyer','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'cancel','operator':'order_payer'},{'prev':'confirmed','forward':'cancel','operator':'order_payer','guard_key':'cancel_window'},{'prev':'confirmed','forward':'CancelUnshipped','operator':'merchant','permission_index':0x3ea,'guard_key':'ship_timeout'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Private-allowlist\x20storefronts\x20ONLY:\x20product\x20policy\x20gate\x20(handmade/vintage/craft/digital\x20categories)\x20+\x20seller\x20verification\x20proof\x20—\x20buyer\x20identity\x20must\x20be\x20in\x20the\x20shop\x27s\x20allowlist\x20before\x20purchase.\x20A\x20public\x20storefront\x20(the\x20benchmark\x20default)\x20ships\x20NO\x20buy\x20gate:\x20anyone\x20may\x20buy'},{'template_id':'pattern.time_window_upper_bound','host':'machine','purpose':'Ship-by\x20DEADLINE\x20—\x20shipping\x20allowed\x20only\x20WITHIN\x20processing_time_days\x20(a\x20CLOSING\x20window,\x20anchored\x20time_window_upper_bound;\x20the\x20enforcement\x20twin\x20is\x20the\x20ship_timeout\x20keeper\x20force-cancel)\x20AND\x20tracking\x20hash\x20non-empty\x20(logic_and\x20with\x20a\x20repository_data_check\x20on\x20the\x20tracking-hash\x20commitment)'},{'template_id':'tpl_required_info_present','host':'machine','key':'required_info','purpose':'Auto-filled\x20default\x20(the\x20tpl\x20of\x20pattern.required_info_evidence_gate):\x20gate\x20\x27confirmed\x27\x20(seller\x20acceptance)\x20on\x20order.required_info\x20some\x20so\x20the\x20buyer\x27s\x20recorded\x20credential\x20is\x20on-chain\x20BEFORE\x20crafting\x20starts\x20—\x20the\x20maker\x20eyeballs\x20the\x20recorded\x20spec/contact\x20in\x20the\x20Messenger\x20conversation,\x20and\x20that\x20accepting\x20forward\x20(never\x20the\x20recorded\x20address\x20value)\x20is\x20the\x20acceptance\x20basis;\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(testnet\x20HIGH-05),\x20so\x20this\x20Guard\x20is\x20the\x20only\x20enforcement.\x20MERCHANT\x20OVERRIDE:\x20resolve\x20key\x20\x27required_info\x27\x20via\x20guard_resolutions\x20(inline\x20table+root,\x20or\x20another\x20tpl_*)\x20when\x20the\x20shop\x27s\x20flow\x20needs\x20a\x20different\x20gate'},{'template_id':'pattern.identity_check_order_holder','host':'machine','purpose':'Delivery\x20confirmed\x20by\x20buyer-first;\x20seller/carrier\x20only\x20auxiliary\x20evidence'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'return_window','purpose':'Return-request\x20DEADLINE\x20window\x20—\x20returns\x20allowed\x20only\x20WITHIN\x20the\x20seller\x27s\x20return\x20policy\x20window\x20(a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20—\x20the\x20opening-gate\x20twin\x20encodes\x20\x27no\x20returns\x20now,\x20unlimited\x20returns\x20forever\x20after\x27,\x20the\x20exact\x20inverse;\x20az3\x20F-03,\x20catalog\x20sweep\x202026-10-19)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'cancel_window','purpose':'In-processing-window\x20buyer\x20cancellation:\x20Clock\x20<=\x20order.time\x20+\x20processing_time_days\x20—\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20cancel\x20forbidden\x20inside\x20the\x20window,\x20allowed\x20forever\x20after\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19).\x20The\x20SAME\x20deadline\x20the\x20ship\x20guard\x20enforces,\x20so\x20either\x20the\x20seller\x20ships\x20on\x20time\x20or\x20the\x20buyer\x20keeps\x20a\x20self-service\x20exit\x20(anchored\x20on\x20order.time,\x20not\x20on\x20the\x20confirm\x20forward)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'ship_timeout','purpose':'Ship-deadline\x20timeout:\x20Clock\x20>=\x20order.time\x20+\x20processing_time_days\x20while\x20the\x20machine\x20is\x20still\x20at\x20\x27confirmed\x27\x20(arrival\x20past\x20the\x20deadline\x20is\x20itself\x20the\x20unshipped\x20proof)\x20—\x20the\x20keeper\x20permission\x20slot\x20(1002)\x20force-cancels\x20with\x20a\x20full\x20buyer\x20refund'},{'template_id':'pattern.identity_check_service_provider_dynamic','host':'machine','key':'refund_execute','purpose':'Refund\x20execution\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_execute):\x20the\x20qualifying\x20NODE\x20SET\x20{returned,\x20closed_cancel}\x20covers\x20BOTH\x20refund\x20terminals\x20(FUND-EXIT-01\x20—\x20an\x20uncovered\x20terminal\x20strands\x20the\x20escrow\x20permanently,\x20IMMUT-001),\x20plus\x20order.service\x20binding,\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20one-directional),\x20and\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it);\x20signer\x20==\x20order.owner\x20is\x20optional\x20(the\x20recipient\x20is\x20already\x20hard-bound\x20to\x20the\x20paying\x20order).\x20Refund\x20execution\x20may\x20ALSO\x20require\x20the\x20refund-executor\x20permission\x20slot\x20(protection\x20program\x20executor)\x20when\x20the\x20shop\x20routes\x20payouts\x20through\x20its\x20program'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_execute\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settle_window','purpose':'Settlement\x20allocator\x20gate\x20(v68\x20pin-vs-prev\x20correction),\x20bound\x20to\x20the\x20settlement\x20allocator\x20rows\x20ONLY\x20(guard_key\x20settle_window):\x20progress.current\x20==\x20completed\x20PLUS\x20the\x20window\x20=\x20settlement_delay_days\x20after\x20delivery\x20confirmation\x20(0-3\x20day\x20challenger\x20lever\x20vs\x20the\x2014-day\x20scale-marketplace\x20cycle);\x20the\x20Rate-0\x20ORDER\x20anchor\x20leg\x20rides\x20the\x20same\x20key\x20so\x20the\x20anchor\x20and\x20the\x20merchant\x20leg\x20share\x20one\x20Allocator\x20(chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator\x20—\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register).\x20Allocator\x20guards\x20evaluate\x20at\x20alloc\x20time,\x20when\x20progress.current\x20is\x20the\x20REACHED\x20node,\x20so\x20the\x20completed\x20pin\x20is\x20correct\x20here.\x20NEVER\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20edge:\x20a\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance\x20(progress.current\x20==\x20prev),\x20so\x20the\x20pin\x20would\x20weld\x20the\x20edge\x20shut\x20(bkng\x20F22\x20dead\x20rail)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settle_clock','purpose':'Settle\x20FORWARD\x20time\x20gate\x20(v68,\x20split\x20off\x20settle_window\x20per\x20bkng\x20F22):\x20\x27Clock\x20>=\x20delivered\x20entry\x20+\x20settlement_delay_days\x27\x20—\x20TIME\x20LEG\x20ONLY,\x20anchored\x20on\x20the\x20PREV\x20node\x27s\x20entry\x20(progress.current\x20reads\x20as\x20prev\x20on\x20a\x20forward,\x20so\x20the\x20delivered-entry\x20anchor\x20is\x20correct\x20from\x20both\x20delivered\x20and\x20reviewed\x20prevs\x20—\x20reviewed\x20is\x20reachable\x20only\x20through\x20delivered,\x20so\x20its\x20entry\x20is\x20strictly\x20later\x20and\x20the\x20window\x20still\x20holds).\x20A\x20progress.current\x20pin\x20must\x20NEVER\x20appear\x20here\x20(it\x20would\x20target\x20the\x20destination\x20node\x20completed\x20and\x20weld\x20the\x20edge\x20shut);\x20the\x20completed\x20state\x20pin\x20stays\x20on\x20the\x20settlement\x20allocator\x20rows\x20(settle_window),\x20which\x20evaluate\x20at\x20alloc\x20time\x20on\x20the\x20reached\x20node'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'deliver_confirm_timeout','purpose':'Buyer-silence\x20auto-confirm:\x20Clock\x20>=\x20shipped\x20entry\x20+\x20auto_confirm_days\x20—\x20the\x20keeper\x20advances\x20delivery\x20when\x20the\x20buyer\x20never\x20confirms,\x20so\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow\x20at\x20shipped\x20(T-04);\x20anchored\x20on\x20the\x20shipped\x20node\x20entry\x20(carrier\x20transit\x20counts\x20from\x20shipment)'},{'template_id':'pattern.allocator_order_anchor','host':'service','purpose':'Settlement\x20+\x20refund\x20allocator\x20anchor:\x20one\x20Rate-0\x20{GuardIdentifier:\x200}\x20row\x20makes\x20the\x20submitted\x20ORDER\x20the\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20from\x20an\x20already-settled\x20sibling\x20order\x20cannot\x20re-release\x20this\x20order\x27s\x20escrow\x20(testnet\x20CR-01)\x20—\x20the\x20anchor\x20row\x20pays\x20nothing'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Buyer\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20of\x20delivery\x20confirmation,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20RATING-FLOOR\x20REALITY\x20(upw-mn-261016\x20F-01\x20unification\x20—\x20corrects\x20this\x20line\x27s\x20earlier\x20\x27enforceable\x20via\x20write\x20policy\x27\x20claim):\x20a\x20Repository\x20write\x20policy\x20canNOT\x20compare\x20VALUES\x20(the\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20observation\x20was\x20a\x20U8\x20type-tag\x20mismatch,\x20not\x20a\x20numeric\x20floor);\x20the\x20enforceable\x20path\x20is\x20a\x20GUARD\x20leg\x20—\x20logic_as_u256_greater_or_equal\x20over\x20query\x201167\x20repository.data,\x20or\x20the\x20query\x201177\x20keys-where\x20Range-gte\x20probe\x20whose\x20candidate\x20id\x20is\x20the\x20order\x20itself\x20(full\x20form\x20in\x20the\x20layered\x20ruling\x20on\x20the\x20freelance\x20review_window\x20lines).\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20escrow\x20always\x20keeps\x20the\x20unreviewed\x20path\x20delivered\x20->\x20completed.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'}],'allocator':{'recipient':'entity','refund_track':'order_anchored','count':0x3,'mode':'rate','description':'Attribution-first\x20ordering\x20is\x20a\x20SELLER-SIDE\x20priority,\x20never\x20a\x20pricing\x20penalty:\x20under\x20direct\x20sales\x20the\x20seller\x20keeps\x20the\x20whole\x20sale\x20on\x20every\x20order\x20regardless\x20of\x20how\x20it\x20was\x20attributed,\x20so\x20a\x20cheap\x20acquisition\x20channel\x20(KOC\x20/\x20social\x20/\x20repeat\x20buyer)\x20must\x20never\x20be\x20charged\x20extra.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20Default\x20=\x20Rate\x2010000\x20to\x20the\x20seller\x27s\x20Entity\x20on\x20every\x20order.\x20full\x20refund\x20to\x20buyer\x20(Rate\x2010000)\x20on\x20returned/cancelled;\x20every\x20settlement/refund\x20allocator\x20carries\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order;\x20small\x20claims\x20(<=\x20$250)\x20absorbed\x20by\x20the\x20compensation\x20fund','rows':[{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'settle_window','note':'0%\x20commission.\x20Attribution\x20is\x20a\x20SELLER-SIDE\x20priority,\x20never\x20a\x20pricing\x20penalty:\x20under\x20direct\x20sales\x20the\x20seller\x20keeps\x20the\x20whole\x20sale\x20however\x20it\x20was\x20attributed.\x20Explicit\x20non-empty\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20one\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20building,\x20while\x20on\x20chain\x20a\x20zero-address\x20recipient\x20burns\x20the\x20share\x20permanently).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_window','note':'Rate-0\x20ORDER\x20anchor\x20LEG\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator\x20(a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register),\x20so\x20the\x20anchor\x20shares\x20the\x20settlement\x20guard_key\x20settle_window\x20(10000\x20+\x200\x20=\x2010000)\x20—\x20it\x20forces\x20the\x20settlement\x20Guard\x27s\x20slot\x200\x20to\x20be\x20the\x20submitted\x20Order\x20address\x20(N-K21)\x20and\x20makes\x20a\x20sibling\x20order\x27s\x20passport\x20unable\x20to\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_execute','note':'Order-anchored\x20full\x20return,\x20gated\x20by\x20the\x20refund_execute\x20guard\x20(node\x20set\x20{returned,\x20closed_cancel}).\x20The\x20paired\x20guard\x20must\x20assert\x20order.service\x20binding,\x20the\x20qualifying\x20node,\x20and\x20claimed_by\x20some\x20==\x20false\x20(signer\x20==\x20order.owner\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20—\x20the\x20GuardIdentifier\x20recipient\x20already\x20hard-binds\x20the\x20payee\x20to\x20the\x20order;\x20CAT-B2:\x20do\x20not\x20list\x20it\x20as\x20an\x20encoded\x20leg,\x20the\x20resolution\x20template\x20cannot\x20produce\x20it)\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool).\x20That\x20exclusion\x20is\x20ONE-DIRECTIONAL\x20(v42):\x20it\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid\x20—\x20never\x20the\x20reverse\x20(a\x20refunded\x20buyer\x20can\x20still\x20file\x20and\x20win\x20a\x20case;\x20nothing\x20on\x20chain\x20seals\x20that\x20—\x20only\x20the\x20arbitrator\x27s\x20net\x20ruling\x20does,\x20and\x20the\x20compensation\x20fund\x20stays\x20an\x20independent\x20third\x20channel).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20Order.dispute\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever\x20and\x20strand\x20the\x20escrow\x20(one-way\x20door).'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20merchant\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_window/refund_execute),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_execute\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'key_risk':'Attribution\x20stays\x20off-chain\x20evidence\x20and\x20never\x20gates\x20a\x20money\x20split\x20—\x20under\x20direct\x20sales\x20the\x20seller\x20keeps\x20the\x20whole\x20sale\x20on\x20every\x20order\x20regardless\x20of\x20channel;\x20buyer-first\x20delivery\x20confirmation\x20and\x20order-anchored\x20refunds\x20carry\x20the\x20fund\x20safety','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Extra\x20\x27confirmed\x27\x20node\x20vs\x20the\x20scale-marketplace\x20template\x20—\x20handmade/custom\x20orders\x20need\x20seller\x20acceptance\x20before\x20crafting','No\x20independent\x20fulfiller\x20role\x20—\x20sellers\x20self-fulfill','Buyer-side\x20forwards\x20(delivered\x20/\x20reviewed\x20/\x20return_requested\x20/\x20cancelled)\x20MUST\x20bind\x20an\x20EMPTY\x20namedOperator\x20(\x27\x27),\x20NOT\x20a\x20merchant\x20permission\x20index\x20—\x20the\x20on-chain\x20check\x20resolves\x20an\x20empty\x20name\x20on\x20an\x20order-bound\x20forward\x20to\x20the\x20order\x20owner\x20or\x20its\x20registered\x20order\x20agents,\x20so\x20the\x20buyer\x20side\x20can\x20advance\x20their\x20own\x20order;\x20a\x20merchant-only\x20permission\x20slot\x20aborts\x20E_PERMISSION_DENIED\x20for\x20the\x20buyer','Allocator\x20paths\x20are\x20selected\x20by\x20the\x20SUBMITTED\x20guard,\x20not\x20by\x20list\x20position\x20(the\x20allocation.move\x20dispatch\x20fires\x20every\x20allocator\x20bound\x20to\x20the\x20submitted\x20guard,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20—\x20E_ALLOCATOR_NOT_MATCHED\x20when\x20none\x20matches)\x20—\x20different\x20business\x20paths\x20must\x20bind\x20different\x20guards,\x20and\x20mutual\x20exclusion\x20belongs\x20inside\x20the\x20guard\x20conditions','Fast\x20settlement\x20(0-3\x20days)\x20is\x20the\x20challenger\x20lever\x20against\x20the\x20scale\x20marketplace\x27s\x2014-day\x20cycle','Settlement\x20is\x20NOT\x20automatic\x20on\x20reaching\x20\x27completed\x27\x20—\x20an\x20explicit\x20alloc_by_guard\x20call\x20(keeper\x20or\x20merchant)\x20triggers\x20the\x20settlement\x20Allocator;\x20declare\x20the\x20node->allocator\x20trigger\x20so\x20the\x20migration\x20plan\x20includes\x20the\x20settlement\x20step','Every\x20settlement/refund\x20Allocator\x20carries\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor):\x20recipients\x20are\x20otherwise\x20resolved\x20without\x20the\x20passport\x20ever\x20naming\x20the\x20paying\x20Order,\x20and\x20the\x20identifier-255\x20once-slot\x20is\x20per-Allocation,\x20so\x20a\x20settled\x20sibling\x20order\x27s\x20passport\x20can\x20re-split\x20this\x20pool\x20(testnet\x20CR-01)','Star-seller\x20tiering\x20goes\x20through\x20Passport,\x20not\x20the\x20Permission\x20entity\x20table\x20(entity\x20capacity\x20is\x20limited)','Disputes\x20go\x20to\x20an\x20independent\x20Arbitration\x20(case\x20mediators)\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11)','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed;\x20run75747\x20F-06):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20The\x20pairing\x20is\x20STRUCTURAL,\x20not\x20prose:\x20the\x20allocator\x20rows\x20SHIP\x20the\x20merchant-recovery\x20allocator\x20(recover_gate\x20row\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity).\x20The\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20guard\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20the\x20Machine\x20publish;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20The\x20template\x20SHIPS\x20the\x20enforcement:\x20key\x20\x27required_info\x27\x20auto-fills\x20tpl_required_info_present\x20(order.required_info\x20some\x20on\x20\x27confirmed\x27,\x20BEFORE\x20crafting\x20starts)\x20—\x20only\x20the\x20PRESENCE\x20is\x20asserted,\x20the\x20recorded\x20address\x20value\x20is\x20never\x20a\x20guard\x20condition,\x20and\x20acceptance\x20of\x20the\x20delivered\x20info\x20is\x20the\x20seller\x27s\x20confirming\x20forward.\x20A\x20shop\x20needing\x20a\x20different\x20gate\x20resolves\x20\x27required_info\x27\x20via\x20guard_resolutions\x20(inline\x20or\x20another\x20tpl_*)','Post-confirmation\x20cancellation\x20refunds\x20the\x20buyer\x20in\x20FULL\x20on-chain\x20(in-window\x20cancel\x20and\x20ship-timeout\x20alike)\x20—\x20a\x20handmade\x20maker\x20who\x20has\x20started\x20crafting\x20absorbs\x20real\x20material\x20cost.\x20Compensation\x20for\x20work-in-progress\x20is\x20a\x20DISCLOSURE,\x20not\x20an\x20on-chain\x20rail:\x20publish\x20it\x20in\x20the\x20shop\x20policy,\x20negotiate\x20specifics\x20in\x20Messenger,\x20and\x20route\x20contested\x20post-start\x20costs\x20through\x20the\x20independent\x20Arbitration\x20(partial-refund\x20settlement)\x20—\x20never\x20by\x20splitting\x20the\x20refund\x20allocator\x20(one\x20escrow,\x20one\x20refund\x20rail;\x20a\x20second\x20partial-refund\x20path\x20invites\x20double-pay)','The\x20ship-timeout\x20forward\x20rides\x20permission_index\x201002\x20—\x20the\x20keeper/automation\x20slot\x20(same\x20idiom\x20as\x20p2p-shortstay\x20and\x20booking);\x20R9\x20keeper\x20gains\x20a\x20fourth\x20duty:\x20advance\x20confirmed\x20->\x20closed_cancel\x20(CancelUnshipped)\x20when\x20processing_time_days\x20lapses\x20unshipped','The\x20buy\x20gate\x20is\x20CONDITIONAL\x20on\x20storefront_mode\x20(v42,\x20one\x20kernel\x20emission\x20mechanism\x20—\x20conditional_guards\x20->\x20compile,\x20never\x20per-template\x20prose):\x20public\x20storefronts\x20(the\x20benchmark\x20default)\x20ship\x20NO\x20purchase\x20gate,\x20the\x20marketplace\x20is\x20open\x20to\x20every\x20buyer;\x20private-allowlist\x20storefronts\x20(wholesale,\x20invite-only,\x20verified\x20drops)\x20mount\x20the\x20allowlist\x20buy\x20guard\x20keyed\x20\x27buy\x27\x20with\x20the\x20buyer\x20allowlist\x20as\x20a\x20Guard\x20table\x20constant','TIME-ANCHOR\x20DISCIPLINE\x20(261010\x20template\x20audit\x20T-09):\x20the\x20time_anchors\x20block\x20is\x20the\x20DESIGN\x20contract\x20a\x20guard\x20resolution\x20must\x20implement.\x20pattern.time_lock_progress\x27s\x20reference\x20recipe\x20anchors\x20node-entry\x20(Clock\x20vs\x20progress.history.time\x201280,\x20next_node=<node>,\x20find=last),\x20so\x20an\x20inline\x20resolution\x20honoring\x20the\x20declared\x20\x27order.time\x27\x20anchor\x20needs\x20the\x20order-creation\x20query\x20—\x20a\x20node-entry\x20shortcut\x20silently\x20shifts\x20the\x20window\x20base\x20(audit\x20rule\x20TIME-ANCHOR-01)\x20and\x20must\x20be\x20disclosed\x20in\x20the\x20build\x20report,\x20not\x20shipped\x20silently','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'base_commission_rate_bps':0x0,'offsite_ads_rate_bps':0x0,'attributed_commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'settlement_delay_days':0x1,'protection_cap_usd':0xfa,'processing_time_days':0x3,'auto_confirm_days':0x7,'storefront_mode':'public_storefront','review_reward_pool':0x64,'review_window_days':0xe,'reward_claim_window_days':0xe},'conditional_guards':[{'guard_key':'buy','param':'storefront_mode','values':['public_storefront','private-allowlist'],'emit_value':'private-allowlist','question':'Who\x20may\x20buy\x20from\x20this\x20shop\x20—\x20open\x20to\x20everyone\x20(public\x20marketplace),\x20or\x20restricted\x20to\x20an\x20allowlist\x20of\x20verified\x20buyers\x20(private/wholesale)?'}],'time_anchors':{'processing_time':'order.time\x20(paid\x20is\x20the\x20entry\x20node;\x20the\x20ship-within\x20window,\x20the\x20in-window\x20buyer\x20cancel\x20and\x20the\x20keeper\x20ship-timeout\x20all\x20open\x20at\x20purchase\x20and\x20share\x20the\x20SAME\x20processing_time_days\x20deadline)','settlement_delay':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20delivery\x20ENTRY\x20timestamp\x20—\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','deliver_confirm_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27shipped\x27,\x20find=last)\x20shipment\x20ENTRY\x20timestamp\x20—\x20carrier\x20transit\x20counts\x20from\x20shipment;\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(ETS-C)'},'trust_mechanisms':['R1\x20refund\x20path:\x20refund\x20Guard\x20+\x20buyer\x20Rate\x2010000\x20Allocator\x20+\x20purchase-protection\x20payout\x20channel','R2\x20independent\x20Arbitration\x20Permission\x20(a\x20testnet\x20shared-Permission\x20lesson\x20hardened\x20into\x20a\x20contract\x20assertion).\x20Venue\x20SLA\x20expectation\x20(a\x20SELECTION\x20criterion\x20—\x20the\x20case\x20window\x20is\x20the\x20arbitrator\x27s\x20order,\x20not\x20a\x20guard\x20this\x20build\x20mounts):\x20prefer\x20venues\x20opening\x20cases\x20within\x2030\x20days\x20of\x20expected\x20delivery\x20and\x20only\x20after\x2048h\x20of\x20unresolved\x20help\x20contact;\x20purchase-protection\x20claims\x20are\x20absorbed\x20by\x20the\x20compensation\x20fund\x20up\x20to\x20protection_cap_usd','R3\x20compensation\x20fund\x20sized\x20so\x20every\x20order\x20you\x20SELL\x20is\x20covered:\x20per-order\x20coverage\x20is\x20enforced\x20at\x20BUY\x20time\x20(each\x20order\x20needs\x20the\x20fund\x20>=\x203x\x20ITS\x20OWN\x20amount,\x20MAX_INDEMNITY_MULTIPLE)\x20—\x20size\x20for\x20the\x20typical\x20single\x20order,\x20no\x203x-highest-SKU\x20parking','R4\x20buyer-first\x20delivery\x20confirmation\x20—\x20self-sign/self-verify\x20forbidden','R5\x20escrow\x20payment\x20anchored\x20to\x20the\x20order\x20object','R6\x20settlement\x20allocators\x20carry\x20Surplus\x20so\x20Rates\x20<=\x2010000;\x20refund\x20Allocator\x20Rate\x20=\x2010000','R7\x20all\x20configuration\x20before\x20publish\x20(publish\x20freezes;\x20return\x20policy\x20cannot\x20vary\x20per\x20listing\x20after\x20publish)','R8\x20customer-service\x20Contact\x20bound\x20to\x20Service\x20and\x20Machine','R9\x20keeper\x20for\x2048h\x20help-request\x20escalation,\x20settlement\x20trigger\x20and\x20ship-deadline\x20timeout','R10\x20category\x20policy\x20embedded\x20in\x20the\x20buy\x20guard\x20as\x20immutable\x20parameters\x20—\x20the\x20gate\x20mounts\x20only\x20for\x20private-allowlist\x20storefronts\x20(v42);\x20a\x20public\x20storefront\x20ships\x20no\x20purchase\x20restriction'],'keeper_dependencies':['48h\x20help\x20request\x20escalation','settlement\x20trigger\x20after\x20delivery\x20confirmation\x20(0-3\x20day\x20delay)','case\x20window\x20expiry','ship-deadline\x20timeout\x20(processing\x20window\x20lapsed,\x20machine\x20still\x20at\x20confirmed\x20—\x20CancelUnshipped\x20force-cancel)','delivery\x20auto-confirm\x20(auto_confirm_days\x20after\x20shipment\x20—\x20AutoConfirmDelivery\x20advances\x20a\x20silent\x20buyer\x27s\x20order)'],'recommended_role':'merchant','role_rationale':'Artisans\x20and\x20vintage\x20sellers\x20run\x20their\x20own\x20storefront\x20Service\x20directly;\x20the\x20vertical-platform\x20variant\x20hosts\x20makers\x20under\x20Permission\x20entities.','differences':['Makers\x20self-fulfill\x20—\x20no\x20independent\x20fulfiller\x20role;\x20a\x20\x27confirmed\x27\x20node\x20lets\x20the\x20seller\x20accept\x20handmade/custom\x20orders\x20before\x20crafting','Marketplace-faithful\x20buyer\x20exit\x20(v42):\x20cancellation\x20stays\x20open\x20through\x20the\x20whole\x20processing\x20window\x20—\x20buyer\x20self-cancel\x20until\x20the\x20ship\x20deadline,\x20keeper\x20force-cancel\x20after\x20it\x20—\x20where\x20the\x20pre-v42\x20topology\x20left\x20a\x20confirmed\x20order\x20without\x20any\x20self-service\x20exit\x20until\x20shipped','Fast\x20settlement\x20(0-3\x20days\x20after\x20delivery\x20confirmation)\x20is\x20the\x20challenger\x20lever\x20against\x20the\x20scale\x20marketplace\x27s\x2014-day\x20cycle','Off-site\x20attribution\x20is\x20recorded\x20off-chain\x20as\x20plain\x20evidence\x20(no\x20Machine\x20guard,\x20no\x20fee\x20differential)\x20—\x20direct\x20sales\x20means\x20the\x20seller\x20keeps\x20the\x20whole\x20sale\x20however\x20the\x20order\x20was\x20attributed'],'user_inputs':['storefront_mode\x20—\x20\x27public_storefront\x27\x20(benchmark\x20default:\x20anyone\x20may\x20buy,\x20NO\x20purchase\x20gate\x20mounts)\x20or\x20\x27private-allowlist\x27\x20(wholesale\x20/\x20invite-only\x20shops:\x20the\x20allowlist\x20buy\x20guard\x20keyed\x20\x27buy\x27\x20mounts\x20with\x20the\x20buyer\x20allowlist\x20as\x20a\x20Guard\x20table\x20constant\x20+\x20seller\x20verification\x20conditions).\x20Answered\x20in\x20the\x20migration\x20wizard;\x20passed\x20as\x20fee_overrides.storefront_mode\x20at\x20generation','base_commission_rate_bps\x20/\x20offsite_ads_rate_bps\x20/\x20attributed_commission_rate_bps\x20—\x20ALL\x20KEEP\x20AT\x200.\x20Attribution\x20must\x20not\x20raise\x20the\x20seller\x27s\x20take\x20(audit\x20R-ECON-05\x20warns\x20on\x20attributed\x20>\x20base).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','processing_time_days\x20—\x20ONE\x20knob\x20with\x20three\x20readers:\x20the\x20seller\x27s\x20ship-within\x20deadline,\x20the\x20buyer\x27s\x20in-window\x20cancellation\x20deadline,\x20and\x20the\x20keeper\x20ship-timeout\x20trigger\x20(all\x20anchored\x20on\x20order.time)','protection_cap_usd\x20—\x20purchase-protection\x20cap\x20absorbed\x20by\x20the\x20compensation\x20fund','Seller\x20return-policy\x20window\x20(return_auth_guard_timelock\x20parameter)']},{'id':'retail/preorder-deposit','industry':'retail','variant':'preorder-deposit','installment_mode':'deposit_balance','review_mode':'review','product_ref':'gamefound','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'deposit_paid','role':'Entry:\x20preorder\x20placed\x20and\x20the\x20DEPOSIT\x20escrowed\x20atomically\x20at\x20buy\x20(Order.amount\x20=\x20deposit_amount;\x20Allocation.balance\x20=\x20deposit_amount).\x20buy()\x20escrows\x20in\x20ONE\x20PTB\x20—\x20there\x20is\x20NO\x20unpaid-reservation\x20state\x20on\x20chain,\x20so\x20the\x20plan\x27s\x20reserved→deposit_paid\x20two-node\x20entry\x20collapses\x20to\x20THIS\x20single\x20deposit-held\x20node\x20(a\x20free\x20waitlist\x20slot\x20before\x20the\x20deposit\x20is\x20an\x20off-chain\x20Keeper\x20concern,\x20not\x20a\x20Machine\x20node).\x20The\x20preorder\x20slot\x20is\x20held;\x20the\x20buyer\x20can\x20still\x20walk\x20away\x20(deposit-exit).','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'balance_due','role':'Merchant\x20opens\x20the\x20balance-capture\x20window\x20(production/release\x20imminent):\x20the\x20buyer\x20now\x20owes\x20the\x20BALANCE\x20(full_price\x20−\x20deposit_amount).\x20DEPOSIT-HELD\x20state\x20—\x20INV-B2\x20mandates\x20a\x20deposit-exit\x20rail\x20from\x20here\x20(the\x20buyer\x20is\x20NEVER\x20obliged\x20to\x20pay\x20the\x20balance,\x20H1).','semantic_role':'active','from':[{'prev':'deposit_paid','forward':'OpenBalanceWindow','operator':'merchant','permission_index':0x3e8,'guard_key':'balance_window_open'}]},{'name':'balance_paid','role':'Buyer\x20captured\x20the\x20BALANCE\x20—\x20gated\x20by\x20the\x20balance_capture\x20fund\x20gate\x20(allocation.balance\x20query\x201051\x20>=\x20full_price).\x20PRE-STATE\x20CONSTRAINT\x20(esound-mn-261021\x20B-1,\x20mainnet-verified):\x20the\x20gate\x20reads\x20the\x20COMMITTED\x20pre-transaction\x20balance,\x20so\x20the\x20balance\x20funds\x20MUST\x20be\x20committed\x20in\x20a\x20PRIOR\x20transaction\x20—\x20the\x20one-PTB\x20order_renew\x20payment\x20is\x20INVISIBLE\x20to\x20this\x20gate\x20and\x20a\x20same-PTB\x20capture\x20ALWAYS\x20aborts.\x20Executable\x20shape:\x20TX1\x20commits\x20the\x20balance\x20(allocation\x20top-up\x20primitive\x20—\x20pending),\x20TX2\x20advances\x20this\x20forward\x20past\x20the\x20gate;\x20until\x20that\x20primitive\x20ships,\x20the\x20only\x20executable\x20funding\x20shape\x20is\x20prepaid-full\x20at\x20buy\x20(staged-release\x20semantics).\x20A\x20bare\x20advance\x20without\x20committed\x20funds\x20ABORTS\x20at\x20the\x20gate\x20(INV-B1,\x20never\x20a\x20zero-value\x20advance\x20H4).','semantic_role':'active','from':[{'prev':'balance_due','forward':'PayBalance','operator':'order_payer','guard_key':'balance_capture'}]},{'name':'shipped','role':'Merchant\x20ships\x20the\x20goods\x20with\x20tracking\x20evidence\x20(fulfiller\x20permission\x20slot)\x20—\x20reachable\x20ONLY\x20through\x20balance_paid,\x20so\x20the\x20release\x20can\x20never\x20fire\x20on\x20an\x20unfunded\x20order.','semantic_role':'active','from':[{'prev':'balance_paid','forward':'Ship','operator':'merchant','permission_index':0x3e8,'guard_key':'ship'}]},{'name':'delivered','role':'Carrier\x20or\x20buyer\x20confirms\x20delivery\x20—\x20buyer-first;\x20buyer\x20silence\x20cannot\x20strand\x20the\x20escrow\x20(the\x20keeper\x20auto-confirms\x20auto_confirm_days\x20after\x20shipment\x20and\x20the\x20buyer\x20keeps\x20every\x20remedy).','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'shipped','forward':'ConfirmDelivery','guard_key':'deliver_confirm'},{'prev':'shipped','forward':'AutoConfirmDelivery','operator':'merchant','permission_index':0x3ea,'guard_key':'deliver_confirm_timeout'}]},{'name':'reviewed','role':'Buyer\x20reviews\x20within\x20the\x20review\x20window\x20—\x20OPTIONAL\x20reputation\x20side-stop,\x20NEVER\x20a\x20settlement\x20gateway\x20(a\x20silent\x20reviewer\x20keeps\x20the\x20delivered→completed\x20path,\x20R-DEAD-END).','operator':'order_payer','semantic_role':'delivered','optional':!![],'from':[{'prev':'delivered','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Settlement\x20terminal:\x20goods\x20delivered\x20and\x20the\x20settlement\x20time-lock\x20elapsed\x20—\x20the\x20settlement\x20Allocator\x20releases\x20the\x20FULL\x20pool\x20(deposit\x20+\x20balance)\x20to\x20the\x20merchant.\x20Reachable\x20only\x20through\x20balance_paid,\x20so\x20an\x20unfunded\x20order\x20never\x20settles.','semantic_role':'final','from':[{'prev':'delivered','forward':'Settle','operator':'merchant','permission_index':0x3ea,'guard_key':'settle_window'},{'prev':'reviewed','forward':'SettleAfterReview','operator':'merchant','permission_index':0x3ea,'guard_key':'settle_window'}]},{'name':'reservation_cancelled','role':'DEPOSIT-EXIT\x20terminal\x20(pre-balance\x20walk-away):\x20the\x20buyer\x20cancelled\x20at\x20deposit_paid,\x20or\x20declined/timed-out\x20at\x20balance_due\x20WITHOUT\x20paying\x20the\x20balance.\x20Money\x20per\x20the\x20deposit_exit_policy\x20SELECTOR\x20—\x20\x27refund\x27\x20returns\x20the\x20deposit\x20to\x20the\x20buyer;\x20\x27kill_fee\x27\x20forfeits\x20kill_fee_bps\x20of\x20it\x20to\x20the\x20merchant\x20as\x20reserved-slot/production\x20compensation.\x20INV-B2:\x20this\x20rail\x20is\x20WHY\x20the\x20deposit\x20can\x20never\x20strand\x20(H1).\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20without\x20the\x20guard\x20chain\x20(R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'deposit_paid','forward':'CancelReservation','guard_key':'deposit_exit'},{'prev':'balance_due','forward':'DeclineBalance','guard_key':'deposit_exit'},{'prev':'balance_due','forward':'BalanceWindowTimeout','operator':'merchant','permission_index':0x3ea,'guard_key':'balance_deadline'}]},{'name':'closed_cancel','role':'POST-BALANCE\x20full-refund\x20cancel:\x20the\x20buyer\x20paid\x20the\x20BALANCE\x20in\x20full,\x20then\x20cancelled\x20BEFORE\x20shipment\x20—\x20the\x20WHOLE\x20pool\x20(deposit\x20+\x20balance)\x20refunds\x20to\x20the\x20buyer,\x20NEVER\x20a\x20kill-fee\x20(a\x20paid-in-full\x20buyer\x20is\x20made\x20whole).\x20A\x20DISTINCT\x20terminal\x20from\x20reservation_cancelled\x20so\x20the\x20deposit-forfeit\x20selector\x20can\x20never\x20eat\x20a\x20paid-in-full\x20order.','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'balance_paid','forward':'CancelBeforeShipment','guard_key':'cancel_before_ship'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Preorder\x20eligibility\x20gate\x20on\x20the\x20DEPOSIT\x20purchase\x20—\x20a\x20limited-drop\x20allowlist\x20/\x20buyer\x20region\x20/\x20optional\x20buyer\x20Passport.\x20The\x20buy\x20total_pay\x20IS\x20deposit_amount\x20(the\x20deposit),\x20NOT\x20full_price;\x20the\x20balance\x20is\x20captured\x20later\x20via\x20order_renew.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'balance_window_open','purpose':'Merchant\x20opens\x20the\x20balance-capture\x20window:\x20Clock\x20>=\x20deposit_paid\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27deposit_paid\x27,\x20find=last)\x20+\x20production_lead_days\x20—\x20the\x20buyer\x20is\x20not\x20asked\x20for\x20the\x20balance\x20until\x20production/release\x20is\x20actually\x20imminent.\x20OPENING\x20gate\x20(time_lock_progress),\x20anchored\x20on\x20the\x20immutable\x20deposit_paid\x20entry\x20record\x20(1272\x20current_time\x20drifts\x20every\x20migration,\x20ETS-C).'},{'template_id':'tpl_forward_fund_gate','host':'machine','key':'balance_capture','purpose':'INV-B1\x20FUND\x20GATE\x20(the\x20teeth\x20of\x20the\x20two-phase\x20capture):\x20allocation.balance\x20(query\x201051,\x20witness\x20TypeOrderAllocation\x20109,\x20resolved\x20from\x20the\x20submitted\x20Order)\x20>=\x20full_price\x20BEFORE\x20balance_due→balance_paid\x20advances.\x20Resolve\x20min_balance\x20=\x20full_price\x20(smallest\x20units).\x20The\x20runtime\x20routes\x20this\x20forward\x20through\x20order_renew\x20—\x20ONE\x20PTB:\x20create\x20the\x20payment\x20receipt\x20→\x20fund\x20the\x20same\x20order\x27s\x20Allocation\x20→\x20issue\x20the\x20payment\x20→\x20forward\x20—\x20so\x20the\x20capture\x20FUNDS\x20the\x20same\x20order\x27s\x20Allocation\x20and\x20advances\x20ATOMICALLY;\x20a\x20bare\x20data.progress\x20advance\x20without\x20the\x20balance\x20landing\x20ABORTS\x20here\x20(never\x20a\x20zero-value\x20advance,\x20H4).\x20The\x20gate\x20is\x20a\x20STATE\x20READ,\x20not\x20a\x20once\x20(H5):\x20pair\x20it\x20with\x20the\x20once_per_order\x20release\x20allocator\x20+\x20the\x20Rate-0\x20order\x20anchor\x20so\x20a\x20permissionless\x20top-up\x20/\x20overpay\x20(H2\x20—\x20Allocation.receive\x20is\x20permissionless)\x20cannot\x20trigger\x20a\x20DOUBLE\x20release.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'deposit_exit','purpose':'Buyer\x20order-holder\x20decision\x20to\x20WALK\x20AWAY\x20pre-balance\x20—\x20binds\x20BOTH\x20deposit_paid→reservation_cancelled\x20(CancelReservation)\x20and\x20balance_due→reservation_cancelled\x20(DeclineBalance).\x20Identity-only\x20(signer\x20==\x20order.owner),\x20node-agnostic:\x20one\x20approved\x20assertion\x20authorizes\x20the\x20single\x20\x27abandon\x20the\x20preorder,\x20take\x20the\x20deposit-exit\x27\x20decision\x20(M-T2).\x20The\x20money\x20outcome\x20(refund\x20vs\x20kill-fee)\x20is\x20the\x20deposit_exit_policy\x20SELECTOR\x20on\x20the\x20reservation_cancelled-terminal\x20allocator,\x20NOT\x20this\x20forward\x20guard.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'balance_deadline','purpose':'Balance-window\x20TIMEOUT\x20(keeper):\x20Clock\x20>=\x20balance_due\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27balance_due\x27,\x20find=last)\x20+\x20balance_window_days\x20—\x20the\x20buyer\x20never\x20paid\x20the\x20balance,\x20so\x20the\x20keeper\x20advances\x20balance_due→reservation_cancelled\x20and\x20the\x20deposit-exit\x20fires.\x20The\x20INV-B2\x20mandatory\x20rail:\x20without\x20it\x20a\x20buyer\x20who\x20goes\x20silent\x20freezes\x20the\x20deposit\x20forever\x20(H1).'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_before_ship','purpose':'Buyer\x20order-holder\x20cancel\x20AFTER\x20paying\x20the\x20balance\x20in\x20full\x20but\x20BEFORE\x20shipment\x20(balance_paid→closed_cancel)\x20—\x20the\x20whole\x20pool\x20refunds,\x20NEVER\x20a\x20kill-fee.\x20Distinct\x20key\x20from\x20deposit_exit\x20(M-T2):\x20a\x20paid-in-full\x20cancel\x20is\x20a\x20different\x20business\x20decision\x20with\x20a\x20different\x20money\x20outcome\x20(closed_cancel,\x20not\x20reservation_cancelled).'},{'template_id':'pattern.repository_data_check','host':'machine','key':'ship','purpose':'Shipping\x20evidence\x20(tracking\x20hash\x20in\x20the\x20evidence\x20Repository)\x20required\x20to\x20ship\x20(balance_paid→shipped).'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','purpose':'Evidence\x20Repository\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20(merchant\x20Signer,\x20Permission\x20staff\x20index,\x20or\x20the\x20Order\x20holder/agent):\x20the\x20chain\x20only\x20asserts\x20the\x20guard\x20list\x20is\x20non-empty\x20(repository.move,\x20E_POLICY_WRITE_GUARD_REQUIRED=22),\x20so\x20a\x20placeholder\x20that\x20returns\x20true\x20is\x20an\x20OPEN\x20write\x20—\x20a\x20counterparty\x20could\x20pre-write\x20the\x20tracking\x20row\x20and\x20satisfy\x20the\x20ship\x20evidence\x20gate.\x20Rows\x20are\x20ORDER-keyed\x20(id_from\x20none,\x20azq9-mn-261019\x20TPL-B\x20family\x20fix):\x20a\x20Signer-keyed\x20policy\x20collides\x20every\x20order\x27s\x20evidence\x20rows\x20into\x20one\x20writer-keyed\x20row\x20and\x20the\x20ship\x20rail\x20can\x20never\x20pass.','policy':{'name':'evidence','id_from':'none','value_type':'String'}},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20shop\x20declares\x20customer_required\x20(personalised/import\x20goods):\x20order.required_info\x20some\x20before\x20fulfilment.\x20DESIGN-ONLY\x20here\x20—\x20the\x20preorder\x20topology\x20has\x20no\x20forward\x20that\x20needs\x20buyer\x20credentials\x20before\x20shipping\x20(the\x20ship\x20rail\x20gates\x20tracking\x20evidence,\x20not\x20identity),\x20so\x20nothing\x20binds\x20this\x20key\x20and\x20no\x20Guard\x20is\x20created;\x20a\x20shop\x20whose\x20flow\x20needs\x20presence\x20enforcement\x20resolves\x20key\x20\x27ship\x27\x20with\x20the\x20tracking\x20check\x20AND-ed\x20with\x20the\x20presence\x20root\x20(tpl_required_info_present)\x20or\x20mounts\x20a\x20dedicated\x20gate\x20forward\x20via\x20guard_resolutions.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'deliver_confirm','purpose':'Delivery\x20confirmed\x20buyer-first;\x20the\x20seller\x20can\x20never\x20self-confirm.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'deliver_confirm_timeout','purpose':'Buyer-silence\x20auto-confirm:\x20Clock\x20>=\x20shipped\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27shipped\x27,\x20find=last)\x20+\x20auto_confirm_days\x20—\x20the\x20keeper\x20advances\x20delivery\x20so\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow\x20at\x20shipped.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Review\x20DEADLINE\x20window:\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20of\x20delivery\x20—\x20a\x20CLOSING\x20window\x20(<=\x20delivered\x20ENTRY\x20+\x20duration),\x20anchored\x20time_window_upper_bound\x20(progress.history.time\x20id\x201280,\x20next_node=\x27delivered\x27,\x20find=last),\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy,\x20az3\x20F-03).\x20OPTIONAL\x20side\x20action\x20—\x20NEVER\x20a\x20settlement\x20gate.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settle_window','purpose':'Settlement\x20OPENING\x20gate\x20(forward\x20+\x20allocator):\x20Clock\x20>=\x20delivered\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20+\x20settlement_days.\x20Time-based\x20(NO\x20node-equality\x20leg),\x20so\x20the\x20SAME\x20design\x20serves\x20the\x20delivered/reviewed→completed\x20forwards\x20AND\x20the\x20settlement\x20allocator\x20rows.\x20The\x20release\x20pays\x20the\x20FULL\x20pool\x20(deposit\x20+\x20balance)\x20and\x20is\x20reachable\x20only\x20through\x20balance_paid,\x20so\x20an\x20unfunded\x20order\x20can\x20never\x20settle.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'deposit_refund','purpose':'DEPOSIT-EXIT\x20REFUND\x20allocator\x20gate\x20(deposit_exit_policy\x20\x27refund\x27,\x20the\x20default):\x20progress.current\x20==\x20reservation_cancelled\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20—\x20pays\x20the\x20WHOLE\x20current\x20pool\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x200\x20—\x20the\x20submitted\x20Order;\x20slot\x20254\x20on\x20a\x20refund\x20rail\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20Refunds\x20read\x20BALANCE,\x20not\x20Order.amount\x20(H3):\x20at\x20reservation_cancelled\x20the\x20pool\x20holds\x20exactly\x20what\x20was\x20captured\x20(deposit\x20only,\x20or\x20deposit\x20+\x20any\x20partial\x20top-up),\x20so\x20the\x20buyer\x20is\x20made\x20whole.\x20Resolve\x20tpl_allocator_node_gate_refund.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(Order.dispute\x20is\x20append-only\x20—\x20a\x20one-way\x20door).\x20SELECTOR:\x20mounts\x20only\x20when\x20deposit_exit_policy\x20==\x20\x27refund\x27;\x20the\x20kill_fee\x20variant\x20drops\x20this\x20row\x20+\x20guard.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'deposit_forfeit','purpose':'DEPOSIT-EXIT\x20KILL-FEE\x20allocator\x20gate\x20(deposit_exit_policy\x20\x27kill_fee\x27):\x20progress.current\x20==\x20reservation_cancelled\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20—\x20forfeits\x20kill_fee_bps\x20of\x20the\x20deposit\x20to\x20the\x20merchant\x20Entity\x20as\x20reserved-slot\x20/\x20production-start\x20compensation\x20(the\x20buyer\x20keeps\x20kill_fee_buyer_bps;\x20the\x20two\x20Rate\x20legs\x20sum\x2010000,\x20a\x20full\x20forfeit\x20is\x2010000/0).\x20BOTH\x20legs\x20ride\x20the\x20REFUND\x20track\x20(one\x20guard_key\x20group)\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x2010000.\x20NEVER\x20fires\x20from\x20closed_cancel\x20(a\x20paid-in-full\x20buyer\x20always\x20refunds\x20whole).\x20SELECTOR:\x20mounts\x20only\x20when\x20deposit_exit_policy\x20==\x20\x27kill_fee\x27.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'full_refund','purpose':'POST-BALANCE\x20full-refund\x20allocator\x20gate:\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20—\x20returns\x20the\x20WHOLE\x20pool\x20(deposit\x20+\x20balance,\x20Rate\x2010000)\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x200\x20—\x20the\x20submitted\x20Order;\x20slot\x20254\x20on\x20a\x20refund\x20rail\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20Resolve\x20tpl_allocator_node_gate_refund.\x20A\x20DISTINCT\x20node\x20from\x20reservation_cancelled\x20so\x20the\x20kill-fee\x20selector\x20never\x20touches\x20a\x20paid-in-full\x20order.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20v74\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands,\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20merchant\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20the\x20refund\x20rails\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion.'}],'allocator':{'recipient':'entity','recipient_key':'merchant','refund_track':'order_anchored','count':0x3,'mode':'rate','once_per_order':!![],'description':'TWO-PHASE\x20escrow\x20+\x20single-point\x20release.\x20The\x20pool\x20holds\x20the\x20DEPOSIT\x20at\x20buy\x20and\x20grows\x20to\x20full_price\x20at\x20the\x20balance\x20capture\x20(order_renew\x20funds\x20the\x20SAME\x20Allocation,\x20balance::join).\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission,\x20so\x20the\x20release\x20gives\x20the\x20merchant\x20the\x20whole\x20pool\x20(Rate\x2010000\x20→\x20an\x20explicit\x20non-empty\x20merchant\x20Entity)\x20at\x20completed,\x20reachable\x20ONLY\x20through\x20the\x20fund-gated\x20balance_paid.\x20every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(a\x20Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20slot-0\x20refund\x20legs)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01).\x20THREE\x20refund\x20rails:\x20the\x20deposit-exit\x20at\x20cancelled\x20(refund\x20OR\x20kill_fee\x20per\x20the\x20deposit_exit_policy\x20SELECTOR\x20—\x20exactly\x20one\x20mounts),\x20the\x20post-balance\x20full\x20refund\x20at\x20closed_cancel,\x20and\x20the\x20merchant-recovery\x20sweep\x20(recover_gate,\x20claimed_by\x20some\x20==\x20true\x20—\x20the\x20polarity\x20twin\x20of\x20the\x20refund\x20seals).\x20once_per_order\x20+\x20the\x20order\x20anchor\x20make\x20a\x20permissionless\x20top-up\x20/\x20overpay\x20(H2)\x20unable\x20to\x20double-release\x20(INV-B3).\x20THRESHOLD:\x20the\x20Allocation\x20threshold\x20is\x20POOL-GLOBAL\x20and\x20gates\x20EVERY\x20alloc\x20(allocation.move\x20EINSUFFICIENT_BALANCE)\x20—\x20it\x20MUST\x20stay\x20<=\x20deposit_amount,\x20or\x20the\x20deposit-exit\x20refund\x20would\x20be\x20blocked\x20while\x20the\x20pool\x20holds\x20only\x20the\x20deposit\x20(INV-B2\x20stranding);\x20the\x20release\x20fund-gate\x20lives\x20in\x20the\x20balance_capture\x20forward\x20guard,\x20NOT\x20the\x20threshold.','rows':[{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'settle_window','note':'Release\x20the\x20FULL\x20pool\x20(deposit\x20+\x20balance)\x20to\x20the\x20merchant\x20at\x20completed.\x200%\x20commission\x20direct\x20sales;\x20an\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer\x20—\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20—\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20burns\x20the\x20share).\x20Reachable\x20only\x20through\x20balance_paid,\x20so\x20an\x20unfunded\x20order\x20never\x20settles.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_window','note':'Rate-0\x20ORDER\x20anchor\x20LEG\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.\x20Rate\x20sums\x20are\x20per-Allocator,\x20so\x20the\x20anchor\x20shares\x20settle_window.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'deposit_refund','note':'DEPOSIT-EXIT\x20refund\x20(SELECTOR\x20\x27refund\x27,\x20the\x20default):\x20the\x20whole\x20current\x20pool\x20back\x20to\x20the\x20order-anchored\x20buyer\x20at\x20cancelled\x20(slot\x200\x20—\x20the\x20submitted\x20Order,\x20payment_info.for_object;\x20mainnet-verified\x20executable\x20three\x20times\x20in\x20this\x20shape.\x20NEVER\x20slot\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes,\x20so\x20period\x202+\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20Refunds\x20read\x20BALANCE\x20(H3)\x20so\x20a\x20deposit-only\x20pool\x20refunds\x20the\x20deposit.\x20claimed_by\x20some\x20==\x20false;\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).\x20once_per_order\x20stops\x20a\x20replay.'},{'track':'refund','recipient':'entity','recipient_key':'merchant','mode':'rate','value_from':'kill_fee_bps','guard_key':'deposit_forfeit','note':'DEPOSIT-EXIT\x20kill-fee\x20(SELECTOR\x20\x27kill_fee\x27):\x20the\x20forfeited\x20share\x20of\x20the\x20deposit\x20to\x20the\x20merchant\x20Entity\x20at\x20cancelled\x20(reserved-slot\x20/\x20production\x20compensation).\x20Pairs\x20with\x20the\x20buyer-remainder\x20leg\x20below\x20so\x20the\x20refund/deposit_forfeit\x20group\x20sums\x2010000.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value_from':'kill_fee_buyer_bps','guard_key':'deposit_forfeit','note':'DEPOSIT-EXIT\x20kill-fee\x20buyer\x20remainder\x20(SELECTOR\x20\x27kill_fee\x27):\x20the\x20non-forfeited\x20share\x20of\x20the\x20deposit\x20back\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x200\x20—\x20the\x20submitted\x20Order).\x20kill_fee_bps\x20+\x20kill_fee_buyer_bps\x20==\x2010000\x20(a\x20full\x20forfeit\x20is\x2010000/0).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'full_refund','note':'POST-BALANCE\x20full\x20refund\x20at\x20closed_cancel:\x20the\x20whole\x20pool\x20(deposit\x20+\x20balance)\x20back\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x200\x20—\x20the\x20submitted\x20Order).\x20A\x20paid-in-full\x20buyer\x20is\x20ALWAYS\x20made\x20whole\x20—\x20the\x20kill-fee\x20selector\x20never\x20reaches\x20this\x20node.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20v74\x20catalog\x20sweep):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20true)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20merchant\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(distinct\x20guard_key)\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x2010000;\x20exactly\x20one\x20of\x20the\x20refund\x20rails\x20/\x20recover_gate\x20can\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'conditional_guards':[{'guard_key':'deposit_refund','param':'deposit_exit_policy','values':['refund','kill_fee'],'emit_value':'refund','question':'Deposit-exit\x20policy:\x20when\x20the\x20buyer\x20walks\x20away\x20BEFORE\x20paying\x20the\x20balance\x20(cancel\x20at\x20deposit_paid,\x20or\x20decline/timeout\x20at\x20balance_due),\x20what\x20happens\x20to\x20the\x20deposit?\x20\x27refund\x27\x20returns\x20the\x20whole\x20deposit\x20to\x20the\x20buyer\x20(buyer-friendly\x20default);\x20\x27kill_fee\x27\x20forfeits\x20kill_fee_bps\x20of\x20it\x20to\x20the\x20merchant\x20as\x20reserved-slot\x20/\x20production-start\x20compensation\x20(the\x20rest\x20refunds\x20to\x20the\x20buyer).\x20A\x20buyer\x20who\x20already\x20paid\x20the\x20BALANCE\x20in\x20full\x20and\x20cancels\x20before\x20shipment\x20ALWAYS\x20refunds\x20whole\x20via\x20closed_cancel\x20—\x20this\x20selector\x20never\x20touches\x20a\x20paid-in-full\x20order.'},{'guard_key':'deposit_forfeit','param':'deposit_exit_policy','values':['refund','kill_fee'],'emit_value':'kill_fee','question':'Deposit-exit\x20policy\x20(kill_fee\x20variant):\x20mounts\x20the\x20forfeit\x20allocator\x20(merchant\x20kill_fee_bps\x20+\x20buyer\x20remainder,\x20summing\x2010000)\x20instead\x20of\x20the\x20full\x20deposit\x20refund.'}],'key_risk':'Two-phase\x20funding\x20—\x20the\x20buyer\x20is\x20never\x20obliged\x20to\x20pay\x20the\x20balance,\x20so\x20the\x20deposit\x20must\x20have\x20an\x20exit,\x20and\x20the\x20balance\x20capture\x20must\x20fund\x20atomically\x20or\x20a\x20bare\x20advance\x20ships\x20an\x20unfunded\x20order.','build_notes':['TWO-PHASE\x20CAPTURE\x20(installment_mode\x20deposit_balance,\x20§11.0\x20G6\x20RESOLVED):\x20buy()\x20escrows\x20the\x20DEPOSIT\x20(Order.amount\x20=\x20deposit_amount,\x20total_pay\x20=\x20deposit_amount);\x20the\x20BALANCE\x20is\x20captured\x20later\x20by\x20funding\x20the\x20SAME\x20order\x27s\x20Allocation.\x20SOLE\x20TRUTH\x20(allocation.move\x20/\x20order.move\x20/\x20payment.move,\x20all\x20stable):\x20Order.amount\x20is\x20IMMUTABLE\x20(set\x20at\x20new(),\x20never\x20reassigned)\x20but\x20Allocation.balance\x20is\x20MUTABLE\x20via\x20the\x20renewal\x20receive\x20path\x20(balance::join),\x20so\x20the\x20later\x20capture\x20lands\x20without\x20a\x20chain\x20change\x20—\x20the\x20very\x20primitive\x20subscription\x20renewal\x20uses.','INV-B1\x20ATOMIC\x20FUNDING\x20(H4):\x20the\x20balance_due→balance_paid\x20forward\x20binds\x20the\x20balance_capture\x20fund\x20gate\x20(tpl_forward_fund_gate:\x20allocation.balance\x20query\x201051\x20via\x20witness\x20TypeOrderAllocation\x20109\x20>=\x20full_price).\x20The\x20runtime\x20MUST\x20route\x20it\x20through\x20order_renew\x20—\x20ONE\x20PTB:\x20create\x20the\x20payment\x20receipt\x20→\x20fund\x20the\x20Allocation\x20→\x20issue\x20the\x20payment\x20→\x20forward\x20—\x20so\x20the\x20capture\x20funds\x20the\x20Allocation\x20and\x20advances\x20ATOMICALLY.\x20A\x20BARE\x20data.progress\x20advance\x20without\x20the\x20capture\x20landing\x20ABORTS\x20at\x20the\x20gate\x20(never\x20a\x20zero-value\x20advance).\x20radar-core\x20routes\x20an\x20order-holder\x20advance\x20on\x20a\x20due→paid\x20edge\x20to\x20data.order_renew\x20automatically.','INV-B2\x20DEPOSIT\x20NEVER\x20STRANDED\x20(H1):\x20there\x20is\x20NO\x20on-chain\x20obligation\x20to\x20pay\x20the\x20balance,\x20so\x20EVERY\x20deposit-held\x20state\x20(deposit_paid,\x20balance_due)\x20carries\x20a\x20deposit-exit\x20rail\x20into\x20reservation_cancelled\x20—\x20the\x20buyer\x27s\x20own\x20abandon\x20(deposit_exit,\x20identity-only)\x20AND\x20the\x20keeper\x27s\x20balance-window\x20timeout\x20(balance_deadline).\x20The\x20deposit_exit_policy\x20SELECTOR\x20decides\x20the\x20money:\x20\x27refund\x27\x20returns\x20the\x20whole\x20deposit;\x20\x27kill_fee\x27\x20forfeits\x20kill_fee_bps\x20to\x20the\x20merchant\x20(reserved-slot\x20/\x20production\x20compensation)\x20and\x20refunds\x20the\x20rest.\x20compile\x20blocks\x20a\x20deposit-held\x20state\x20with\x20no\x20exit\x20(INSTALLMENT_DEPOSIT_STRANDED).','POST-BALANCE\x20CANCEL\x20IS\x20A\x20DISTINCT\x20TERMINAL:\x20a\x20buyer\x20who\x20paid\x20the\x20BALANCE\x20in\x20full\x20and\x20cancels\x20before\x20shipment\x20exits\x20via\x20closed_cancel\x20(full_refund,\x20Rate\x2010000\x20to\x20the\x20buyer),\x20NEVER\x20reservation_cancelled\x20—\x20so\x20the\x20kill-fee\x20selector\x20can\x20never\x20eat\x20a\x20paid-in-full\x20order.\x20Two\x20cancel\x20terminals,\x20two\x20money\x20outcomes,\x20both\x20claimed_by-gated.','INV-B3\x20RELEASE\x20IS\x20ONCE\x20+\x20ORDER-ANCHORED\x20(H2/H5):\x20Allocation.receive\x20is\x20PERMISSIONLESS\x20(anyone\x20with\x20a\x20valid\x20Payment\x20+\x20wrapper\x20can\x20top\x20up),\x20so\x20the\x20pool\x20can\x20be\x20over-paid\x20(balance\x20>\x20full_price).\x20The\x20fund\x20gate\x20is\x20a\x20STATE\x20READ\x20(>=\x20full_price),\x20true\x20forever\x20once\x20satisfied\x20—\x20NOT\x20a\x20once.\x20The\x20release\x20allocator\x20therefore\x20sets\x20once_per_order=true\x20(protocol\x20slot\x20254,\x20chain-derived\x20from\x20payment_info.for_object)\x20+\x20the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor,\x20so\x20a\x20replay\x20or\x20a\x20sibling-order\x20passport\x20aborts\x20code\x2016\x20instead\x20of\x20double-releasing.\x20The\x20over-pay\x20residual\x20is\x20swept\x20by\x20the\x20same\x20Rate-10000\x20release\x20(it\x20drains\x20the\x20whole\x20pool).\x20SCOPE:\x20the\x20identifier-255/254\x20once-slot\x20is\x20keyed\x20(guard,\x20allocator,\x20submission)\x20ON\x20ONE\x20Allocation\x20—\x20it\x20is\x20PER-ALLOCATION\x20(per-pool),\x20NOT\x20cross-order\x20idempotency;\x20a\x20second\x20Allocation\x20of\x20the\x20same\x20Service\x20starts\x20with\x20no\x20record,\x20so\x20the\x20once\x20flag\x20is\x20always\x20paired\x20with\x20the\x20order\x20anchor\x20(R-ANCHOR-01)\x20for\x20cross-order\x20safety.','H3\x20amount≠balance\x20DISCLOSURE:\x20Order.amount\x20stays\x20frozen\x20at\x20the\x20DEPOSIT\x20while\x20Allocation.balance\x20grows\x20to\x20full_price\x20at\x20capture.\x20Refunds\x20read\x20BALANCE\x20(always\x20safe\x20—\x20the\x20buyer\x20is\x20made\x20whole),\x20but\x20any\x20reporting\x20anchored\x20on\x20Order.amount\x20UNDER-represents\x20the\x20captured\x20total.\x20Declared,\x20never\x20hidden:\x20the\x20buy\x20total_pay\x20is\x20deposit_amount\x20and\x20full_price\x20is\x20a\x20SEPARATELY\x20declared\x20fee_param\x20the\x20fund\x20gate\x20reads.','THRESHOLD\x20IS\x20POOL-GLOBAL\x20(the\x20INV-B2\x20trap):\x20alloc()\x20asserts\x20balance\x20>=\x20self.allocators.threshold\x20UNCONDITIONALLY\x20at\x20the\x20start,\x20BEFORE\x20any\x20allocator\x20runs\x20(allocation.move\x20EINSUFFICIENT_BALANCE),\x20and\x20the\x20threshold\x20is\x20shared\x20by\x20EVERY\x20alloc\x20—\x20release\x20AND\x20refund.\x20Setting\x20it\x20to\x20full_price\x20would\x20BLOCK\x20the\x20deposit-exit\x20refund\x20while\x20the\x20pool\x20holds\x20only\x20the\x20deposit,\x20stranding\x20it.\x20The\x20threshold\x20MUST\x20be\x20<=\x20deposit_amount;\x20the\x20release\x20fund-gate\x20lives\x20in\x20the\x20balance_capture\x20forward\x20guard\x20+\x20the\x20topology\x20(completed\x20reachable\x20only\x20via\x20balance_paid),\x20NOT\x20the\x20threshold.','ALLOCATOR\x20THRESHOLD\x20vs\x20FIXED\x20LEG:\x20this\x20template\x20uses\x20pure-Rate\x20legs\x20(no\x20fixed\x20Amount),\x20so\x20the\x20R-DEADLOCK-01\x20\x27fixed\x20leg\x20exceeds\x20a\x20small\x20escrow\x27\x20hazard\x20does\x20not\x20apply\x20—\x20a\x20Rate\x20split\x20scales\x20to\x20whatever\x20the\x20pool\x20holds.\x20Keep\x20the\x20threshold\x20at\x20the\x20minimum\x20payout\x20unit.','STOP-NODE\x20FUND-EXIT\x20COVERAGE:\x20every\x20resting\x20state\x20has\x20both\x20a\x20release\x20and\x20a\x20refund\x20rail\x20evaluated\x20—\x20deposit_paid/balance_due\x20→\x20reservation_cancelled\x20(deposit-exit),\x20balance_paid\x20→\x20closed_cancel\x20(full\x20refund)\x20or\x20shipped,\x20delivered/reviewed\x20→\x20completed\x20(release),\x20and\x20the\x20recover_gate\x20sweep\x20backstops\x20an\x20awarded\x20order\x20at\x20ANY\x20node\x20(claimed_by\x20some\x20==\x20true,\x20no\x20node\x20leg).\x20Machine\x20+\x20Allocator\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001)\x20—\x20an\x20uncovered\x20stop\x20node\x20strands\x20funds\x20permanently.','ESCROW\x20EXIT\x20INVARIANT\x20(az-mn-261007,\x20D-BUG-2):\x20the\x20refund\x20rails\x20block\x20once\x20an\x20award\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false),\x20and\x20the\x20recover_gate\x20row\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20→\x20merchant)\x20is\x20the\x20structural\x20polarity\x20twin\x20so\x20an\x20awarded\x20order\x27s\x20principal\x20still\x20exits.\x20The\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20publish;\x20exactly\x20one\x20of\x20the\x20two\x20can\x20ever\x20pass.','EVIDENCE\x20WRITE\x20GATE\x20(testnet\x20HIGH-04):\x20the\x20evidence\x20Repository\x20runs\x20under\x20id_from=None\x20and\x20the\x20chain\x20merely\x20asserts\x20a\x20NON-EMPTY\x20write_guard\x20list\x20(repository.move\x20E_POLICY_WRITE_GUARD_REQUIRED=22),\x20never\x20what\x20it\x20proves.\x20Generate\x20the\x20write_guard\x20from\x20pattern.repository_write_authorization\x20(identity\x20leaf\x20mandatory)\x20so\x20a\x20counterparty\x20cannot\x20forge\x20the\x20tracking\x20row;\x20store\x20a\x20signed\x20WTS\x20Proof\x20ADDRESS\x20as\x20the\x20value\x20for\x20anything\x20an\x20arbitrator\x20must\x20trust.','DISCOUNT\x20FLOOR:\x20a\x20coupon\x20that\x20zeroes\x20the\x20DEPOSIT\x20would\x20make\x20Order.amount\x200\x20(an\x20empty\x20escrow)\x20and\x20the\x20fund\x20gate\x27s\x20full_price\x20comparison\x20would\x20still\x20expect\x20the\x20balance\x20—\x20floor\x20coupons\x20at\x20issuance\x20so\x20the\x20deposit\x20stays\x20positive\x20(discount-threshold.ts\x20checkDiscountFloorBeforeIssue).\x20The\x20discount\x20registry\x20is\x20mutable\x20after\x20publish\x20(SERVICE_DISCOUNT\x20permission\x20312);\x20the\x20chain\x20does\x20NOT\x20dedupe\x20by\x20name,\x20so\x20reuse\x20a\x20coupon\x20or\x20merge\x20budget\x20into\x20max_uses\x20instead\x20of\x20re-minting.','OPERATIONAL\x20E-2:\x20trigger\x20protection\x20is\x20BALANCE-EXHAUSTION\x20+\x20the\x20once\x20slot.\x20Pure-Rate\x20sums\x20==\x2010000\x20are\x20single-shot\x20by\x20construction;\x20once_per_order=true\x20arms\x20slot\x20254\x20so\x20a\x20replay\x20aborts\x20code\x2016.\x20Run\x20the\x20guard-design\x20REPLAY\x20TEST\x20before\x20publish.','ONCE-SLOT\x20ARMING\x20(R-ONCE-ARM\x20—\x20once_per_order\x20has\x20NO\x20automatic\x20on-chain\x20wiring):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20each\x20SETTLEMENT\x20allocator\x20Guard\x20ONLY\x20(settle_window\x20—\x20NOT\x20the\x20refund\x20rails\x20deposit_refund\x20/\x20deposit_forfeit\x20/\x20full_refund\x20/\x20recover_gate:\x20a\x20refund\x20pays\x20the\x20submitted\x20Order\x20through\x20user\x20slot\x200,\x20and\x20a\x20refund\x20node\x20re-entered\x20in\x20a\x20later\x20period\x20would\x20abort\x20E_ONCE_TRIGGERED(16)\x20forever,\x20OFN\x20#P-04)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20254\x20ONCE-FOR-OBJECT\x20slot\x20is\x20keyed\x20on\x20payment_info.for_object,\x20so\x20it\x20doubles\x20as\x20the\x20order\x20anchor\x20AND\x20the\x20once-per-order\x20replay\x20gate\x20(a\x20replay\x20aborts\x20code\x2016).\x20Settlement\x20rails\x20that\x20legitimately\x20repeat\x20would\x20arm\x20identifier\x20255\x20with\x20a\x20per-period\x20key\x20instead;\x20here\x20the\x20settlement\x20rail\x20is\x20single-shot\x20per\x20order,\x20so\x20254\x20is\x20correct\x20on\x20it\x20—\x20refund\x20rails\x20carry\x20NO\x20once\x20slot\x20(once-ness\x20comes\x20from\x20the\x20terminal\x20topology).\x20Without\x20this\x20declaration\x20the\x20advertised\x20replay\x20protection\x20does\x20not\x20exist\x20on\x20chain.','fee_params\x20values\x20(windows,\x20deposit,\x20full\x20price,\x20kill-fee\x20share)\x20are\x20TS-layer\x20generation\x20parameters,\x20NOT\x20on-chain\x20guarantees\x20—\x20they\x20bind\x20only\x20when\x20embedded\x20into\x20Guard\x20data\x20and\x20enforced\x20by\x20keeper\x20scheduling.\x20The\x20deposit/full_price/balance_amount\x20values\x20are\x20product-specific\x20build\x20INPUTS\x20(smallest\x20units).','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20preorder\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention),\x20or\x20self-host\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'deposit_amount':'the\x20per-unit\x20DEPOSIT\x20captured\x20at\x20buy\x20(smallest\x20units)\x20—\x20this\x20IS\x20Order.amount\x20and\x20the\x20buy\x20total_pay,\x20immutable\x20after\x20buy\x20(H3)','full_price':'the\x20TOTAL\x20order\x20price\x20(smallest\x20units),\x20declared\x20SEPARATELY\x20from\x20deposit_amount\x20because\x20Order.amount\x20is\x20frozen\x20at\x20the\x20deposit\x20—\x20the\x20balance_capture\x20fund\x20gate\x20reads\x20THIS\x20(min_balance\x20=\x20full_price)','balance_amount':'the\x20BALANCE\x20captured\x20at\x20balance_due→balance_paid\x20via\x20order_renew\x20(smallest\x20units)\x20=\x20full_price\x20−\x20deposit_amount','production_lead_days':0x1e,'balance_window_days':0xe,'auto_confirm_days':0x7,'settlement_days':0x7,'review_window_days':0xe,'deposit_exit_policy':'refund','kill_fee_bps':0x2710,'kill_fee_buyer_bps':0x0,'allocator_threshold':'MUST\x20be\x20<=\x20deposit_amount\x20(the\x20minimum\x20payout\x20unit).\x20The\x20threshold\x20gates\x20EVERY\x20alloc\x20(allocation.move\x20EINSUFFICIENT_BALANCE),\x20release\x20AND\x20refund\x20alike\x20—\x20never\x20set\x20it\x20to\x20full_price\x20or\x20the\x20deposit-exit\x20refund\x20is\x20blocked\x20while\x20the\x20pool\x20holds\x20only\x20the\x20deposit.\x20The\x20release\x20fund-gate\x20lives\x20in\x20the\x20balance_capture\x20forward\x20guard,\x20NOT\x20here.'},'time_anchors':{'balance_window_open':'progress.history.time\x20(id\x201280,\x20next_node=\x27deposit_paid\x27,\x20find=last)\x20—\x20the\x20balance-capture\x20window\x20opens\x20production_lead_days\x20after\x20the\x20DEPOSIT\x20entry\x20(immutable\x20entry\x20record;\x201272\x20current_time\x20drifts\x20every\x20migration,\x20ETS-C)','balance_deadline':'progress.history.time\x20(id\x201280,\x20next_node=\x27balance_due\x27,\x20find=last)\x20—\x20the\x20buyer\x20must\x20pay\x20the\x20balance\x20WITHIN\x20balance_window_days\x20of\x20the\x20balance_due\x20ENTRY;\x20on\x20timeout\x20the\x20keeper\x20fires\x20the\x20deposit-exit\x20(INV-B2)','deliver_confirm_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27shipped\x27,\x20find=last)\x20—\x20carrier\x20transit\x20counts\x20from\x20shipment','settlement':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20the\x20release\x20time-lock\x20measures\x20from\x20the\x20DELIVERY\x20entry','review_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20CLOSING\x20review\x20window\x20from\x20delivery\x20(time_window_upper_bound)'},'trust_mechanisms':['R1\x20refund\x20path:\x20TWO\x20deposit-exit\x20rails\x20—\x20the\x20pre-balance\x20deposit\x20refund/kill-fee\x20(reservation_cancelled)\x20and\x20the\x20post-balance\x20full\x20refund\x20(closed_cancel)\x20—\x20plus\x20the\x20dispute\x20compensation\x20channel;\x20every\x20refund\x20is\x20order-anchored\x20(slot\x200)\x20and\x20claimed_by-gated','R2\x20independent\x20Arbitration\x20with\x20its\x20own\x20Permission\x20(arbitration_mode\x20third_party);\x20disputes\x20flow\x20off-Machine\x20(R-M1-11)','R3\x20compensation\x20fund\x20>=\x203x\x20the\x20order\x20amount\x20(MAX_INDEMNITY_MULTIPLE\x20caps\x20any\x20award\x20at\x203x\x20escrow,\x20arb.move)','R4\x20buyer-first\x20delivery\x20confirmation\x20—\x20seller\x20self-sign\x20forbidden;\x20buyer\x20silence\x20auto-confirms\x20via\x20the\x20keeper\x20(deliver_confirm_timeout)','R5\x20every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20slot-0\x20refund\x20legs)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01)','R6\x20settlement\x20allocator\x20=\x20merchant\x20Entity\x20Rate\x2010000\x20(0%\x20commission,\x20explicit\x20non-empty\x20Entity)\x20+\x20inline\x20Rate-0\x20ORDER\x20anchor;\x20the\x20release\x20pays\x20the\x20FULL\x20pool\x20(deposit\x20+\x20balance)\x20and\x20is\x20reachable\x20ONLY\x20through\x20balance_paid\x20(the\x20fund-gated\x20capture),\x20so\x20an\x20unfunded\x20order\x20can\x20never\x20settle','R7\x20all\x20nodes/forwards/Guards\x20configured\x20before\x20publish\x20(publish\x20freezes;\x20IMMUT-001)','R8\x20customer-service\x20Contact\x20bound\x20to\x20Service\x20and\x20Machine','R9\x20keeper\x20declared\x20for\x20the\x20balance-window\x20open,\x20the\x20balance-deadline\x20deposit-exit,\x20delivery\x20auto-confirm,\x20and\x20the\x20settlement\x20trigger','R10\x20business\x20parameters\x20(deposit,\x20full\x20price,\x20windows,\x20kill-fee\x20share)\x20embedded\x20as\x20Guard\x20parameters\x20—\x20industry-recommended\x20defaults,\x20merchant-configurable\x20at\x20build\x20time','R11\x20TWO-PHASE\x20FUND\x20SAFETY\x20(installment_mode\x20deposit_balance):\x20the\x20balance\x20capture\x20can\x20never\x20zero-value-advance\x20(gated\x20by\x20allocation.balance\x20>=\x20full_price\x20—\x20INV-B1;\x20PRE-STATE\x20CONSTRAINT\x20esound-mn-261021\x20B-1:\x20the\x20gate\x20reads\x20the\x20COMMITTED\x20pre-transaction\x20balance,\x20so\x20the\x20capture\x20funds\x20must\x20be\x20committed\x20in\x20a\x20PRIOR\x20transaction\x20—\x20a\x20same-PTB\x20order_renew\x20payment\x20is\x20invisible\x20to\x20the\x20gate\x20and\x20the\x20capture\x20aborts);\x20the\x20deposit\x20is\x20NEVER\x20stranded\x20(a\x20deposit-exit\x20rail\x20from\x20every\x20deposit-held\x20state\x20—\x20INV-B2);\x20the\x20release\x20is\x20once_per_order\x20+\x20order-anchored\x20so\x20a\x20permissionless\x20top-up\x20/\x20overpay\x20cannot\x20double-release\x20(INV-B3)'],'keeper_dependencies':['balance-window\x20open\x20(production_lead_days\x20after\x20the\x20deposit\x20—\x20OpenBalanceWindow\x20advances\x20deposit_paid\x20→\x20balance_due)','balance-deadline\x20deposit-exit\x20(balance_window_days\x20after\x20balance_due\x20—\x20BalanceWindowTimeout\x20advances\x20a\x20silent\x20buyer\x27s\x20order\x20to\x20reservation_cancelled\x20so\x20the\x20deposit\x20never\x20strands,\x20INV-B2)','delivery\x20auto-confirm\x20(auto_confirm_days\x20after\x20shipment\x20—\x20AutoConfirmDelivery\x20advances\x20a\x20silent\x20buyer\x27s\x20order)','settlement\x20trigger\x20at\x20the\x20release\x20point\x20(settlement_days\x20after\x20delivery)','48h\x20absence\x20auto-loss\x20in\x20arbitration'],'recommended_role':'merchant','role_rationale':'A\x20preorder\x20/\x20crowd-purchase\x20operator\x20(a\x20maker\x20funding\x20a\x20production\x20run,\x20a\x20limited-drop\x20seller)\x20owns\x20the\x20Service,\x20sets\x20the\x20deposit\x20and\x20full\x20price,\x20and\x20drives\x20the\x20balance\x20window\x20+\x20fulfilment;\x20buyers\x20fund\x20the\x20two-phase\x20escrow.','differences':['TWO-PHASE\x20funding\x20(installment_mode\x20deposit_balance)\x20vs\x20the\x20sibling\x20retail\x20archetypes\x27\x20single\x20full\x20escrow\x20at\x20buy:\x20the\x20buyer\x20pays\x20a\x20DEPOSIT\x20to\x20reserve\x20a\x20preorder\x20slot\x20and\x20the\x20BALANCE\x20later\x20(before\x20shipment),\x20landing\x20in\x20the\x20SAME\x20order\x27s\x20Allocation\x20(balance::join\x20—\x20the\x20chain\x20primitive\x20subscription\x20renewal\x20uses,\x20zero\x20chain\x20change).\x20PRE-STATE\x20CONSTRAINT\x20(esound-mn-261021\x20B-1):\x20the\x20balance_capture\x20fund\x20gate\x20reads\x20the\x20COMMITTED\x20pre-transaction\x20balance,\x20so\x20the\x20gated\x20capture\x20needs\x20the\x20balance\x20committed\x20in\x20a\x20PRIOR\x20transaction\x20(allocation\x20top-up\x20primitive\x20—\x20pending;\x20until\x20then\x20prepaid-full\x20at\x20buy\x20is\x20the\x20only\x20executable\x20gated\x20shape)','Order.amount\x20is\x20frozen\x20at\x20the\x20DEPOSIT\x20while\x20Allocation.balance\x20grows\x20to\x20full_price\x20at\x20capture\x20(H3):\x20refunds\x20read\x20BALANCE\x20(always\x20safe),\x20but\x20reporting\x20anchored\x20on\x20Order.amount\x20under-represents\x20the\x20captured\x20total\x20—\x20declared,\x20never\x20hidden','A\x20DEPOSIT-EXIT\x20rail\x20(refund\x20or\x20merchant\x20kill-fee\x20via\x20the\x20deposit_exit_policy\x20selector)\x20replaces\x20the\x20sibling\x20archetypes\x27\x20pre-shipment\x20cancel:\x20there\x20is\x20NO\x20on-chain\x20obligation\x20to\x20pay\x20the\x20balance\x20(H1),\x20so\x20a\x20buyer\x20who\x20walks\x20away\x20must\x20still\x20release\x20the\x20deposit','The\x20plan\x27s\x20reserved→deposit_paid\x20two-node\x20entry\x20collapses\x20to\x20ONE\x20deposit_paid\x20entry\x20node:\x20buy()\x20escrows\x20the\x20deposit\x20atomically\x20(no\x20unpaid-reservation\x20state\x20exists\x20on\x20chain),\x20so\x20a\x20free\x20waitlist\x20slot\x20before\x20the\x20deposit\x20is\x20an\x20off-chain\x20Keeper\x20concern,\x20not\x20a\x20Machine\x20node'],'user_inputs':['deposit_amount\x20—\x20the\x20per-unit\x20deposit\x20captured\x20at\x20buy\x20(smallest\x20units);\x20this\x20IS\x20Order.amount\x20and\x20the\x20buy\x20total_pay,\x20immutable\x20after\x20buy','full_price\x20—\x20the\x20total\x20order\x20price\x20(smallest\x20units),\x20declared\x20SEPARATELY\x20from\x20the\x20deposit;\x20the\x20balance_capture\x20fund\x20gate\x20reads\x20it\x20(min_balance\x20=\x20full_price)\x20and\x20the\x20balance\x20capture\x20commits\x20balance_amount\x20=\x20full_price\x20−\x20deposit_amount\x20(PRE-STATE\x20CONSTRAINT\x20esound-mn-261021\x20B-1:\x20the\x20gate\x20sees\x20only\x20pre-transaction\x20balance,\x20so\x20the\x20capture\x20funds\x20must\x20land\x20in\x20a\x20PRIOR\x20transaction)','production_lead_days\x20/\x20balance_window_days\x20—\x20when\x20the\x20balance\x20window\x20opens\x20(production/release\x20imminent)\x20and\x20how\x20long\x20the\x20buyer\x20has\x20to\x20pay\x20before\x20the\x20deposit-exit\x20fires','deposit_exit_policy\x20—\x20\x27refund\x27\x20(default:\x20the\x20whole\x20deposit\x20returns\x20to\x20a\x20buyer\x20who\x20walks\x20away\x20pre-balance)\x20or\x20\x27kill_fee\x27\x20(forfeit\x20kill_fee_bps\x20of\x20the\x20deposit\x20to\x20the\x20merchant\x20as\x20reserved-slot/production\x20compensation);\x20a\x20paid-in-full\x20buyer\x20always\x20refunds\x20whole\x20via\x20closed_cancel\x20regardless','kill_fee_bps\x20/\x20kill_fee_buyer_bps\x20—\x20the\x20deposit-forfeit\x20split\x20when\x20deposit_exit_policy\x20is\x20\x27kill_fee\x27\x20(must\x20sum\x2010000;\x20a\x20full\x20forfeit\x20is\x2010000/0)','settlement_days\x20/\x20auto_confirm_days\x20/\x20review_window_days\x20—\x20the\x20release\x20time-lock,\x20the\x20buyer-silence\x20auto-confirm,\x20and\x20the\x20review\x20window','allocator_threshold\x20—\x20MUST\x20be\x20<=\x20deposit_amount:\x20the\x20threshold\x20is\x20POOL-GLOBAL\x20and\x20gates\x20EVERY\x20alloc\x20(release\x20AND\x20refund),\x20so\x20a\x20threshold\x20above\x20the\x20deposit\x20would\x20block\x20the\x20deposit-exit\x20refund\x20when\x20the\x20pool\x20holds\x20only\x20the\x20deposit\x20(INV-B2\x20stranding).\x20The\x20release\x20is\x20gated\x20by\x20topology\x20+\x20the\x20balance_capture\x20fund\x20gate,\x20NOT\x20the\x20threshold','Compensation\x20fund\x20size\x20(>=\x203x\x20the\x20order\x20amount\x20—\x20the\x20on-chain\x20indemnity\x20hard\x20cap,\x20arbitration.compensate)','Discount\x20(optional)\x20—\x20a\x20Discount\x20object\x20pointing\x20at\x20this\x20Service;\x20floor\x20coupons\x20at\x20issuance\x20so\x20a\x20zeroing\x20coupon\x20cannot\x20make\x20the\x20DEPOSIT\x200\x20(an\x20empty\x20escrow)']},{'id':'freelance/enterprise-talent-market','industry':'freelance','variant':'enterprise-talent-market','product_ref':'upwork','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'paid','role':'Entry:\x20fixed-price\x20contract\x20signed\x20and\x20fully\x20escrowed;\x20Machine\x20starts\x20here','semantic_role':'draft','from':[{'prev':''}]},{'name':'in_progress','role':'Freelancer\x20accepts\x20(permission\x20slot)\x20and\x20works;\x20revision\x20loop\x20returns\x20here\x20(max\x202\x20rounds,\x20counted\x20off-chain)','semantic_role':'active','from':[{'prev':'paid'}]},{'name':'delivered','role':'Deliverable\x20submitted\x20with\x20WIP\x20hash\x20evidence\x20(submit-work\x20semantics)','semantic_role':'delivered','from':[{'prev':'in_progress'}]},{'name':'accepted','role':'Client\x20confirms\x20acceptance\x20—\x20manual\x20signature\x20OR\x2014-day\x20timeout\x20(dual-branch\x20guard)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered'}]},{'name':'reviewed','role':'Client\x20reviews\x20the\x20delivered\x20work\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM\x20—\x20row\x20policy\x20is\x20single-typed,\x20so\x20each\x20review\x20event\x20writes\x20TWO\x20rows\x20keyed\x20to\x20the\x20same\x20order:\x20a\x20U256\x20rating\x20row\x201-5,\x20the\x20range-queryable\x20column\x20via\x20keys_where\x20numeric\x20Range,\x20plus\x20a\x20String\x20comment\x20row,\x20presence-queryable;\x20review\x20text\x20lives\x20on-chain\x20as\x20its\x20own\x20row,\x20never\x20in\x20progress\x20history\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'accepted','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Freelancer\x20withdraws\x20released\x20funds\x20(triple-check\x20withdraw\x20guard)','semantic_role':'final','from':[{'prev':'accepted'},{'prev':'reviewed','forward':'CompleteAfterReview'}]},{'name':'wonder','role':'Post-settlement\x20POSITIVE\x20feedback\x20(wonder\x20convention,\x20v70\x20adoption\x20of\x20upw-mn-261014):\x20buyer-only\x20advance\x20off\x20the\x20settled\x20terminal\x20—\x20the\x20pool\x20is\x20empty\x20here\x20(the\x20settlement\x20Allocator\x20drained\x20the\x20full\x20escrow\x20at\x20completed),\x20so\x20the\x20review-credential\x20ordering\x20trap\x20(F-40:\x20press-forward-first\x20kills\x20the\x20pre-settlement\x20write\x20credential)\x20structurally\x20cannot\x20strand\x20feedback.\x20First-wins\x20competing\x20pair\x20with\x20no_wonder:\x20one\x20rating\x20per\x20order.\x20Optional\x20pure\x20side\x20action\x20—\x20completion\x20never\x20routes\x20through\x20it\x20and\x20it\x20gates\x20no\x20money.\x20Praise-gated\x20bounties\x20may\x20anchor\x20a\x20claim\x20guard\x20on\x20progress.current\x20==\x20\x27wonder\x27\x20(NAMING\x20CONVENTION\x20—\x20no\x20chain\x20primitive;\x20queryable\x20via\x20Progress.current\x20and\x20Progress.history)','operator':'order_payer','optional':!![],'semantic_role':'delivered','from':[{'prev':'completed','forward':'Praise'}]},{'name':'no_wonder','role':'Post-settlement\x20NEGATIVE\x20feedback\x20(wonder\x20convention):\x20buyer\x20signals\x20dissatisfaction;\x20the\x20node\x20transition\x20itself\x20is\x20the\x20on-chain\x20negative\x20signal,\x20queryable\x20in\x20Progress.history\x20(F-50\x20structural\x20fix\x20—\x20a\x20suppressed\x20low\x20rating\x20still\x20leaves\x20a\x20reachable\x20record).\x20First-wins\x20with\x20Praise:\x20one\x20rating\x20per\x20order.\x20Optional\x20pure\x20side\x20action\x20—\x20gates\x20no\x20money\x20(pool\x20is\x20empty:\x20the\x20settlement\x20rail\x20drained\x20the\x20full\x20escrow\x20at\x20completed\x20before\x20any\x20advance\x20off\x20it)','operator':'order_payer','optional':!![],'semantic_role':'delivered','from':[{'prev':'completed','forward':'Complain'}]},{'name':'closed_cancel','role':'Pre-work\x20cancellation\x20—\x20triggers\x20full\x20refund\x20Allocator\x20to\x20client','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid'}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20freelancer\x20self-purchase\x20of\x20their\x20own\x20service\x20(Passport-gated\x20purchase\x20once\x20set)'},{'template_id':'pattern.repository_data_check','host':'machine','purpose':'WIP\x20hash\x20required\x20on\x20every\x20submission\x20(submit-work\x20evidence)'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'Dual-branch\x20acceptance:\x20client\x20signature\x20OR\x2014-day\x20timeout\x20—\x20forward\x20operator\x20left\x20unbound\x20so\x20the\x20keeper\x20can\x20submit\x20the\x20timeout\x20path'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_gate','purpose':'Single-shot\x20settlement\x20allocator\x20gate\x20(KLM-C:\x20one-shot\x20per-order\x20escrow\x20settles\x20via\x20the\x20CHAIN-DERIVED\x20protocol-254\x20once\x20key\x20—\x20the\x20old\x20255+history-count\x20key\x20is\x20publicly\x20computable\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20locks\x20the\x20rail,\x20mainnet\x20KL-LIVE-01\x20261014):\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20declared\x20254\x20Address\x20submission\x20slot\x20(once\x20key\x20=\x20bcs(payment_info.for_object),\x20replay\x20aborts\x2016).\x20The\x20kernel\x20injects\x20service_name\x20=\x20the\x20plan\x27s\x20service\x20name;\x20the\x20node\x20leg\x20is\x20a\x20SET:\x20settle_node\x20defaults\x20to\x20\x27completed\x27\x20and\x20settle_node_alt/alt2\x20DEFAULT\x20TO\x20THE\x20SAME\x20VALUE\x20(tautology\x20legs\x20—\x20a\x20default\x20never\x20introduces\x20a\x20new\x20dead\x20literal);\x20fill\x20alt/alt2\x20with\x20THIS\x20machine\x27s\x20post-settlement\x20side\x20nodes\x20(wonder/no_wonder\x20convention)\x20so\x20a\x20praise/complain\x20advance\x20off\x20completed\x20cannot\x20seal\x20the\x20escrow\x20(CAT-C1,\x20upwc-cat-261017\x20live:\x200.5\x20WOW\x20stranded\x20when\x20Praise\x20moved\x20the\x20order\x20off\x20completed\x20before\x20settlement\x20fired)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate\x20(pending\x20judgment):\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool;\x20blocks\x20refund\x20once\x20an\x20award\x20ACTUALLY\x20paid;\x20the\x20paired\x20recover_gate\x20leg\x20keeps\x20the\x20awarded\x20escrow\x20exiting).\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017:\x20the\x20old\x20prose\x20claimed\x20\x27signer\x20==\x20order.owner\x20(anti-hijack\x20R5)\x27\x20but\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter\x20—\x20audit\x20against\x20the\x20encoded\x20THREE\x20legs,\x20never\x20the\x20old\x20text);\x20anti-hijack\x20is\x20STRUCTURAL:\x20the\x20GuardIdentifier(0)\x20order-anchored\x20recipient\x20lands\x20funds\x20ON\x20the\x20Order\x20and\x20only\x20the\x20owner\x20can\x20receive\x20them;\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20(add\x20it\x20inline\x20only\x20if\x20you\x20also\x20declare\x20its\x20slot).\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2\x20—\x20the\x20b9-261015\x20\x27FULL-SET\x20node\x20gate\x27\x20is\x20REMOVED:\x20the\x20encoded\x20legs\x20are\x20claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20ONLY,\x20deliberately\x20NO\x20node\x20equality\x20leg):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding.\x20Why\x20no\x20node\x20gate:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20(upw-mn-261014\x20F-51:\x20a\x20delivered-pinned\x20rail\x20aborted\x207\x20after\x20the\x20auto-accept\x20keeper\x20moved\x20the\x20order\x20on;\x20upwc-cat-261017\x20CAT-C2\x20live:\x20a\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20after\x20the\x20award\x20paid),\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20already\x20carries\x20the\x20mutual\x20exclusion\x20vs\x20refund_gate\x20(exactly\x20one\x20polarity\x20can\x20pass,\x20D-BUG-2)\x20—\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail\x20and\x20strands\x20the\x20escrow.\x20Pays\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Client\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20acceptance,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20escrow\x20always\x20keeps\x20the\x20unreviewed\x20path\x20accepted\x20->\x20completed;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','count':0x3,'mode':'rate','refund_track':'order_anchored','description':'Fixed-price\x20settlement\x20on\x20completed.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20A\x20single\x20Rate\x2010000\x20leg\x20to\x20the\x20freelancer\x27s\x20Entity;\x20the\x200%\x20offer\x20is\x20not\x20a\x20launch\x20discount,\x20it\x20is\x20the\x20standing\x20model.\x20full\x20refund\x20to\x20client\x20(Rate\x2010000\x20via\x20order-anchored\x20recipient)\x20on\x20cancelled;\x20multi-milestone\x20=\x20chained\x20Orders\x20each\x20with\x20its\x20own\x20Allocation','rows':[{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'settle_gate','note':'0%\x20platform\x20commission\x20—\x20the\x20standing\x20direct-sales\x20model.\x20Recipient\x20MUST\x20be\x20an\x20explicit\x20non-empty\x20Entity:\x20an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently.\x20Binds\x20the\x20settle_gate\x20guard\x20(auto-filled\x20from\x20tpl_allocator_node_gate_settle_once:\x20node\x20gate\x20+\x20order.service\x20binding\x20+\x20chain-derived\x20254\x20once\x20—\x20KLM-C).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_gate','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20submitted\x20ORDER\x20the\x20settlement\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20settle_gate\x20key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20freelancer\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20full\x20refund.\x20GuardIdentifier(0)\x20resolves\x20to\x20the\x20paying\x20Order,\x20and\x20allocation.move\x20ERECIPIENT_NOT_FOR_OBJECT\x20then\x20makes\x20redirection\x20structurally\x20impossible;\x20the\x20buyer\x20claims\x20via\x20order\x20receive.\x20The\x20refund_gate\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20—\x20the\x20paired\x20recover_gate\x20leg\x20is\x20the\x20only\x20other\x20exit\x20once\x20an\x20award\x20paid.'}]},'key_risk':'Client\x20never\x20accepts\x20delivery\x20—\x20the\x2014-day\x20timeout\x20keeper\x20auto-advances\x20acceptance\x20to\x20unblock\x20freelancer\x20payment','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','The\x20acceptance\x20forward\x20must\x20NOT\x20bind\x20the\x20client\x20as\x20operator\x20—\x20the\x20dual-branch\x20guard\x20carries\x20both\x20the\x20manual\x20(client\x20signature)\x20and\x20timeout\x20(keeper)\x20paths','Every\x20return\x20to\x20delivered\x20refreshes\x20the\x20progress\x20clock\x20—\x20the\x2014-day\x20window\x20resets\x20naturally\x20on\x20re-submission','Refund\x20recipient\x20is\x20the\x20order\x20object\x20(anchored)\x20—\x20the\x20client\x20then\x20claims\x20via\x20the\x20two-step\x20receive\x20flow','IN-PROGRESS\x20CANCELLATION\x20REALITY\x20(ctra2-mn-261020\x20E7,\x20live\x20mainnet\x20probe):\x20a\x20buyer\x20can\x20unilaterally\x20cancel\x20a\x20RUNNING\x20order\x20from\x20in_progress\x20(the\x20chain\x27s\x20cancel-from-in-progress\x20primitive\x20needs\x20NO\x20seller\x20consent\x20and\x20bypasses\x20the\x20declared\x20paid-only\x20closed_cancel\x20edge)\x20and\x20the\x20order-anchored\x20refund\x20rail\x20pays\x20back\x20the\x20FULL\x20escrow\x20—\x20the\x20freelancer\x20has\x20ZERO\x20on-chain\x20protection\x20for\x20work\x20already\x20spent,\x20and\x20no\x20guard/keeper\x20in\x20this\x20template\x27s\x20rails\x20can\x20block\x20it.\x20This\x20is\x20180°\x20opposite\x20to\x20a\x20prepaid\x20non-refundable\x20policy\x20(the\x20ctra2-mn-261020\x20G12\x20finding);\x20the\x20template\x20is\x20client-friendly\x20BY\x20DESIGN.\x20Mitigation\x20is\x20structural,\x20not\x20configurational:\x20split\x20large\x20contracts\x20into\x20chained\x20milestone\x20Orders\x20(caps\x20per-order\x20exposure),\x20keep\x20pre-delivery\x20stages\x20short,\x20and\x20advance\x20the\x20machine\x20promptly.\x20A\x20cancellation\x20fee\x20or\x20non-refundable\x20prepay\x20is\x20NOT\x20expressible\x20with\x20these\x20rails\x20—\x20it\x20needs\x20a\x20custom\x20allocator/machine\x20build;\x20never\x20promise\x20one\x20from\x20this\x20template.','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20pairing\x20is\x20DECLARED\x20STRUCTURALLY\x20in\x20the\x20rows\x20—\x20the\x20refund\x20row\x20binds\x20guard_key\x20refund_gate\x20(order.claimed_by\x20some\x20==\x20false,\x20query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20and\x20the\x20recovery\x20row\x20binds\x20guard_key\x20recover_gate\x20(order.claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity),\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits.\x20Both\x20gates\x20arrive\x20PENDING\x20judgment\x20designs:\x20resolve\x20them\x20via\x20guide_confirm.guard_resolutions\x20(the\x20guide\x20lists\x20suggested\x20templates\x20and\x20parameters).\x20Exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','Milestones\x20=\x20multiple\x20chained\x20Orders,\x20each\x20with\x20an\x20independent\x20Allocation;\x20leftover\x20balance\x20can\x20be\x20recharged\x20into\x20the\x20next\x20Order\x20pool','Arbitration:\x20independent\x20Permission\x20(arbiter\x20slot),\x20fee\x20near-zero\x20to\x20cover\x20the\x20small-dispute\x20tail\x20the\x20incumbent\x20abandoned.\x20VENUE\x20READINESS\x20(role\x20boundary):\x20the\x20venue\x27s\x20internal\x20permission/voting\x20setup\x20and\x20its\x20unpause\x20belong\x20to\x20the\x20ARBITRATOR\x20on\x20their\x20own\x20objects\x20—\x20an\x20empty\x20voting_guard\x20on\x20the\x20venue\x20means\x20equal\x20vote\x20weight\x20(1\x20person\x201\x20vote),\x20not\x20permissionless,\x20but\x20configuring\x20it\x20is\x20never\x20this\x20build\x27s\x20duty.\x20Your\x20duty\x20is\x20selection:\x20bind\x20only\x20a\x20venue\x20already\x20operational\x20(unpaused,\x20voting\x20armed)\x20—\x20a\x20fresh\x20Arbitration\x20ships\x20paused\x20with\x20zero\x20grants,\x20and\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20with\x20E_PAUSED','Disputes\x20flow\x20through\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11);\x20the\x207-day\x20dispute\x20response\x20timeout\x20is\x20a\x20KEEPER\x20obligation\x20over\x20the\x20Arbitration\x20case\x20(see\x20keeper_dependencies),\x20not\x20a\x20Machine\x20guard','Every\x20Guard\x20that\x20consumes\x20a\x20caller-submitted\x20Order\x20address\x20MUST\x20bind\x20it\x20to\x20this\x20project\x20(logic_equal[order.service,\x20<this\x20service>])\x20—\x20otherwise\x20a\x20cross-project\x20Order\x20passes\x20the\x20time-lock\x20for\x20a\x20fresh\x20order\x20(R-C3-05;\x20verified\x20by\x20guard-advice\x20HIGH\x20on\x20the\x20unbound\x20pattern)','commission_rate_bps\x20is\x200\x20and\x20is\x20NOT\x20a\x20placeholder\x20to\x20be\x20filled\x20in:\x20WoWok\x20extracts\x20nothing.\x20For\x20reference\x20only,\x20the\x20incumbent\x20marketplace\x27s\x20freelancer\x20Service\x20Fee\x20is\x200-15%\x20variable\x20per\x20contract\x20(its\x20catalog\x20historically\x2010%)\x20and\x20the\x20client\x20additionally\x20pays\x20a\x20marketplace\x20fee\x20(up\x20to\x207.99%)\x20plus\x20a\x20one-time\x20contract\x20initiation\x20fee\x20that\x20WoWok\x20order_allocators\x20cannot\x20express\x20(order-fund\x20splits\x20only)\x20—\x20those\x20are\x20the\x20numbers\x20this\x20template\x20exists\x20to\x20eliminate.\x20If\x20the\x20talent\x20agency\x20itself\x20wants\x20a\x20placement\x20fee,\x20price\x20it\x20as\x20its\x20own\x20product\x20line\x20(an\x20explicit\x20order),\x20not\x20as\x20a\x20silent\x20share\x20of\x20a\x20candidate\x27s\x20rate.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','The\x20incumbent\x27s\x20catalog\x20orders\x20have\x20NO\x20milestones\x20—\x20this\x20template\x20models\x20the\x20incumbent\x27s\x20fixed-price\x20CONTRACTS.\x20For\x20catalog-style\x20listings\x20(tiers\x20+\x20add-ons\x20+\x20buyer\x20requirements\x20+\x20single\x20funded\x20order)\x20use\x20the\x20freelance/catalog-tiers\x20template\x20instead','fee_params\x20keep\x20the\x20incumbent\x27s\x20benchmark\x20values\x20(commission\x201540\x20bps,\x20arbitration\x20fee\x20$337.5)\x20as\x20the\x20replication\x20reference;\x20the\x20wowok-recommended\x20defaults\x20are\x200%\x20commission\x20and\x20a\x20near-zero\x20arbitration\x20fee\x20—\x20set\x20both\x20at\x20generation\x20time\x20via\x20fee_overrides','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'escrow_release_days':0xe,'dispute_timeout_days':0x7,'arbitration_fee_usd':337.5,'revision_rounds_max':0x2,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'acceptance_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20LAST\x20delivery\x20ENTRY\x20timestamp\x20(a\x20re-delivery\x20appends\x20a\x20fresh\x20entry\x20and\x20naturally\x20resets\x20it);\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','dispute_timeout':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard)'},'trust_mechanisms':['R1\x20dual-track\x20refund:\x20pre-work\x20cancellation\x20Allocator\x20+\x20arbitration-ruled\x20refund','R2\x20independent\x20arbitration\x20Permission\x20enforced\x20by\x20contract\x20assertion','R3\x20compensation\x20fund\x20required\x20before\x20publish\x20whenever\x20the\x20fund\x20is\x20non-zero','R4\x20acceptance\x20gate:\x20client\x20signature\x20or\x20timeout\x20—\x20freelancer\x20can\x20never\x20self-accept','R5\x20order-anchored\x20refund\x20recipient\x20(anti-hijack)','R6\x20Rate\x20sums\x20=\x2010000\x20on\x20every\x20allocator','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x2014-day\x20auto-accept\x20and\x207-day\x20dispute\x20timeout','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration'],'keeper_dependencies':['14-day\x20acceptance\x20timeout\x20auto-advance','7-day\x20dispute\x20response\x20timeout','arbitration\x20ruling\x20execution\x20(refund\x20path)'],'recommended_role':'supplier','role_rationale':'Freelancers\x20fulfill\x20client\x20demand\x20(demand/sub-order\x20takers\x20in\x20WoWok\x20terms);\x20the\x20marketplace-operator\x20variant\x20flips\x20the\x20role\x20to\x20merchant.','differences':['Commission-based\x20revenue\x20(floating\x20take,\x20capped\x20at\x201540\x20bps)\x20versus\x20the\x20zero-commission\x20variant\x27s\x20fixed\x20contract\x20fee','14-day\x20acceptance\x20timeout\x20keeper\x20unblocks\x20freelancer\x20payment\x20when\x20the\x20client\x20never\x20accepts','Milestones\x20=\x20chained\x20Orders\x20each\x20with\x20an\x20independent\x20Allocation;\x20leftover\x20balance\x20recharges\x20into\x20the\x20next\x20Order\x20pool'],'user_inputs':['commission_rate_bps\x20—\x20KEEP\x20AT\x200.\x20The\x20incumbent\x27s\x2015.4%\x20take\x20is\x20the\x20benchmark\x20being\x20displaced,\x20not\x20a\x20default.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','escrow_release_days\x20—\x20the\x20acceptance\x20timeout\x20window','dispute_timeout_days\x20—\x20dispute\x20response\x20timeout\x20(keeper-enforced\x20over\x20the\x20Arbitration\x20case)','revision_rounds_max\x20—\x20revision\x20loop\x20cap\x20(counted\x20off-chain)','arbitration_fee_usd\x20—\x20the\x20Arbitration\x20filing\x20fee\x20(benchmark\x20$337.5\x20=\x20incumbent\x27s\x20real\x20fee;\x20wowok\x20recommends\x20near-zero\x20to\x20cover\x20the\x20small-dispute\x20tail)']},{'id':'freelance/catalog-tiers','industry':'freelance','variant':'catalog-tiers','product_ref':'upwork-catalog','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'in_progress','role':'Entry\x20pair:\x20buyer\x20submits\x20requirement\x20answers\x20(incumbent:\x20delivery\x20clock\x20starts\x20at\x20requirement\x20submission);\x20also\x20revision\x20restart\x20and\x20decline-refund\x20return\x20target','semantic_role':'active','from':[{'prev':''},{'prev':'revision_requested'},{'prev':'refund_requested'},{'prev':'cancel_requested'}]},{'name':'delivered','role':'Submit\x20Work\x20—\x20deliverable\x20WIP\x20hash\x20retained\x20into\x20progress\x20history\x20as\x20evidence','semantic_role':'delivered','from':[{'prev':'in_progress','guard_key':'deliver_work'},{'prev':'refund_requested'}]},{'name':'accepted','role':'Approve\x20&\x20Pay\x20(buyer\x20signature)\x20OR\x2014-day\x20auto-accept\x20timeout\x20—\x20competing\x20forwards\x20within\x20ONE\x20pair\x20(same\x20prev_node\x20pairs\x20abort\x20E_DUPLICATE_NODE_PREV).\x20DISTINCT\x20forward\x20names\x20are\x20MANDATORY:\x20sibling\x20forwards\x20sharing\x20a\x20prev\x20default\x20to\x20the\x20same\x20<prev>_to_<node>\x20name\x20and\x20abort\x20E_DUPLICATE_FORWARD_NAME\x20(6)\x20at\x20publish\x20(audit-261012\x20B1)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'AcceptByBuyer','operator':'order_payer'},{'prev':'delivered','forward':'AutoAcceptByKeeper','permission_index':0x3e8,'guard_key':'accept_timeout'}]},{'name':'reviewed','role':'Buyer\x20reviews\x20the\x20delivered\x20tier\x20work\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM\x20—\x20row\x20policy\x20is\x20single-typed,\x20so\x20each\x20review\x20event\x20writes\x20TWO\x20rows\x20keyed\x20to\x20the\x20same\x20order:\x20a\x20U256\x20rating\x20row\x201-5,\x20the\x20range-queryable\x20column\x20via\x20keys_where\x20numeric\x20Range,\x20plus\x20a\x20String\x20comment\x20row,\x20presence-queryable;\x20review\x20text\x20lives\x20on-chain\x20as\x20its\x20own\x20row,\x20never\x20in\x20progress\x20history\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'accepted','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Final:\x20seller\x20withdraws;\x20settlement\x20Allocator\x20splits\x20payout\x20(platform\x20fee\x20as\x20a\x20Rate\x20row)','semantic_role':'final','from':[{'prev':'accepted'},{'prev':'reviewed','forward':'CompleteAfterReview'}]},{'name':'wonder','role':'Post-settlement\x20POSITIVE\x20feedback\x20(wonder\x20convention,\x20v70\x20adoption\x20of\x20upw-mn-261014):\x20buyer-only\x20advance\x20off\x20the\x20settled\x20terminal\x20—\x20the\x20pool\x20is\x20empty\x20here\x20(the\x20settlement\x20Allocator\x20drained\x20the\x20full\x20escrow\x20at\x20completed),\x20so\x20the\x20review-credential\x20ordering\x20trap\x20(F-40:\x20press-forward-first\x20kills\x20the\x20pre-settlement\x20write\x20credential)\x20structurally\x20cannot\x20strand\x20feedback.\x20First-wins\x20competing\x20pair\x20with\x20no_wonder:\x20one\x20rating\x20per\x20order.\x20Optional\x20pure\x20side\x20action\x20—\x20completion\x20never\x20routes\x20through\x20it\x20and\x20it\x20gates\x20no\x20money.\x20Praise-gated\x20bounties\x20may\x20anchor\x20a\x20claim\x20guard\x20on\x20progress.current\x20==\x20\x27wonder\x27\x20(NAMING\x20CONVENTION\x20—\x20no\x20chain\x20primitive;\x20queryable\x20via\x20Progress.current\x20and\x20Progress.history)','operator':'order_payer','optional':!![],'semantic_role':'delivered','from':[{'prev':'completed','forward':'Praise'}]},{'name':'no_wonder','role':'Post-settlement\x20NEGATIVE\x20feedback\x20(wonder\x20convention):\x20buyer\x20signals\x20dissatisfaction;\x20the\x20node\x20transition\x20itself\x20is\x20the\x20on-chain\x20negative\x20signal,\x20queryable\x20in\x20Progress.history\x20(F-50\x20structural\x20fix\x20—\x20a\x20suppressed\x20low\x20rating\x20still\x20leaves\x20a\x20reachable\x20record).\x20First-wins\x20with\x20Praise:\x20one\x20rating\x20per\x20order.\x20Optional\x20pure\x20side\x20action\x20—\x20gates\x20no\x20money\x20(pool\x20is\x20empty:\x20the\x20settlement\x20rail\x20drained\x20the\x20full\x20escrow\x20at\x20completed\x20before\x20any\x20advance\x20off\x20it)','operator':'order_payer','optional':!![],'semantic_role':'delivered','from':[{'prev':'completed','forward':'Complain'}]},{'name':'revision_requested','role':'Buyer\x20requests\x20revision\x20—\x20blocks\x20payment\x20until\x20redelivery;\x20each\x20redelivery\x20restarts\x20the\x20review\x20window','operator':'order_payer','semantic_role':'active','from':[{'prev':'delivered','operator':'order_payer'}]},{'name':'refund_requested','role':'Buyer\x20refund\x20request\x20(post-delivery\x20or\x20in-progress)\x20—\x20seller\x20grants\x20(closed_cancel)\x20or\x20declines\x20(back\x20to\x20delivered/in_progress)','operator':'order_payer','semantic_role':'draft','from':[{'prev':'in_progress','operator':'order_payer'},{'prev':'delivered','operator':'order_payer'}]},{'name':'cancel_requested','role':'Buyer\x20cancel\x20request\x20while\x20in\x20progress\x20—\x20seller\x20approves\x20/\x20declines\x20/\x20ignores\x20(timeout)','operator':'order_payer','semantic_role':'draft','from':[{'prev':'in_progress','operator':'order_payer'}]},{'name':'closed_cancel','role':'Terminal\x20for\x20ALL\x20refund\x20routes\x20(instant\x20<24h\x20cancel,\x20seller\x20grant,\x20auto-cancel\x20timeouts,\x20seller-initiated\x20cancel)\x20—\x20100%\x20order-anchored\x20refund\x20Allocator.\x20The\x20two\x20in_progress\x20entries\x20are\x20DISTINCT\x20forwards:\x20buyer\x20InstantCancel\x20(inside\x20the\x2024h\x20window)\x20and\x20keeper\x20RequirementsTimeout\x20(after\x2048h)\x20—\x20sibling\x20forwards\x20sharing\x20a\x20prev\x20MUST\x20carry\x20distinct\x20explicit\x20forward\x20names\x20(E_DUPLICATE_FORWARD_NAME,\x20audit-261012\x20B1)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'in_progress','forward':'InstantCancel','operator':'order_payer','guard_key':'instant_cancel_24h'},{'prev':'in_progress','forward':'RequirementsTimeout','permission_index':0x3e8,'guard_key':'requirements_timeout_48h'},{'prev':'refund_requested'},{'prev':'cancel_requested'}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20self-purchase\x20/\x20self-review\x20farming\x20(Passport-gated\x20purchase\x20once\x20set)\x20—\x20without\x20it\x20the\x20merchant\x20can\x20buy\x20their\x20own\x20listing,\x20review\x20it,\x20and\x20claim\x20the\x20review\x20reward\x20pool\x20(audit-261012\x20B2)'},{'template_id':'pattern.repository_data_check','host':'machine','key':'deliver_work','purpose':'deliver_work\x20guard\x20bound\x20to\x20the\x20in_progress->delivered\x20edge:\x20submitted\x20deliverable\x20WIP\x20hash\x20must\x20be\x20non-empty;\x20retained_submission\x20persists\x20it\x20into\x20progress\x20history\x20(submit-work\x20evidence\x20for\x20disputes).\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20—\x20a\x20GuardSpec\x20without\x20an\x20edge\x20guard_key\x20is\x20never\x20collected\x20into\x20the\x20build\x20(audit-261012\x20B3)'},{'template_id':'pattern.deadline_window','host':'machine','key':'instant_cancel_24h','purpose':'InstantCancel\x20buyer\x20edge\x20(in_progress->closed_cancel):\x20Clock\x20<=\x20order.time\x20+\x2024h\x20(UPPER-BOUND\x20deadline\x20window,\x20project-bound\x20via\x20order.service\x20==\x20<service>)\x20—\x20the\x20no-questions-asked\x20cancel\x20window;\x20after\x2024h\x20the\x20refund-request\x20flow\x20applies'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'requirements_timeout_48h','purpose':'RequirementsTimeout\x20keeper\x20edge\x20(in_progress->closed_cancel):\x20Clock\x20>=\x20order.time\x20+\x20requirements_timeout_hours\x20auto-cancel\x20(fee_param,\x20incumbent:\x2048h)\x20+\x20full\x20refund\x20when\x20the\x20buyer\x20never\x20submits\x20requirements;\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05);\x20operator\x20is\x20a\x20service-admin\x20permission\x20index\x20(1000)\x20acting\x20as\x20keeper'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'accept_timeout','purpose':'Auto-accept\x20bound\x20to\x20the\x20AutoAcceptByKeeper\x20edge\x20(delivered->accepted):\x20Clock\x20>=\x20progress.history.time\x20+\x20escrow_release_days\x20(fee_param\x20—\x20the\x20buyer-silence\x20window\x20after\x20delivery,\x20incumbent:\x2014\x20days);\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05);\x20operator\x20is\x20a\x20service-admin\x20permission\x20index\x20(1000)\x20acting\x20as\x20keeper'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Buyer\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20of\x20acceptance\x20(fee_param,\x20incumbent:\x2014),\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20escrow\x20always\x20keeps\x20the\x20unreviewed\x20path\x20accepted\x20->\x20completed.\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_gate','purpose':'Single-shot\x20settlement\x20allocator\x20gate\x20(KLM-C:\x20one-shot\x20per-order\x20escrow\x20settles\x20via\x20the\x20CHAIN-DERIVED\x20protocol-254\x20once\x20key\x20—\x20the\x20old\x20255+history-count\x20key\x20is\x20publicly\x20computable\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20locks\x20the\x20rail,\x20mainnet\x20KL-LIVE-01\x20261014):\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20declared\x20254\x20Address\x20submission\x20slot\x20(once\x20key\x20=\x20bcs(payment_info.for_object),\x20replay\x20aborts\x2016).\x20The\x20kernel\x20injects\x20service_name\x20=\x20the\x20plan\x27s\x20service\x20name;\x20the\x20node\x20leg\x20is\x20a\x20SET:\x20settle_node\x20defaults\x20to\x20\x27completed\x27\x20and\x20settle_node_alt/alt2\x20DEFAULT\x20TO\x20THE\x20SAME\x20VALUE\x20(tautology\x20legs\x20—\x20a\x20default\x20never\x20introduces\x20a\x20new\x20dead\x20literal);\x20fill\x20alt/alt2\x20with\x20THIS\x20machine\x27s\x20post-settlement\x20side\x20nodes\x20(wonder/no_wonder\x20convention)\x20so\x20a\x20praise/complain\x20advance\x20off\x20completed\x20cannot\x20seal\x20the\x20escrow\x20(CAT-C1,\x20upwc-cat-261017\x20live:\x200.5\x20WOW\x20stranded\x20when\x20Praise\x20moved\x20the\x20order\x20off\x20completed\x20before\x20settlement\x20fired)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate\x20(pending\x20judgment):\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool;\x20blocks\x20refund\x20once\x20an\x20award\x20ACTUALLY\x20paid;\x20the\x20paired\x20recover_gate\x20leg\x20keeps\x20the\x20awarded\x20escrow\x20exiting).\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017:\x20the\x20old\x20prose\x20claimed\x20\x27signer\x20==\x20order.owner\x20(anti-hijack\x20R5)\x27\x20but\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter\x20—\x20audit\x20against\x20the\x20encoded\x20THREE\x20legs,\x20never\x20the\x20old\x20text);\x20anti-hijack\x20is\x20STRUCTURAL:\x20the\x20GuardIdentifier(0)\x20order-anchored\x20recipient\x20lands\x20funds\x20ON\x20the\x20Order\x20and\x20only\x20the\x20owner\x20can\x20receive\x20them;\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20(add\x20it\x20inline\x20only\x20if\x20you\x20also\x20declare\x20its\x20slot).\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2\x20—\x20the\x20b9-261015\x20\x27FULL-SET\x20node\x20gate\x27\x20is\x20REMOVED:\x20the\x20encoded\x20legs\x20are\x20claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20ONLY,\x20deliberately\x20NO\x20node\x20equality\x20leg):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding.\x20Why\x20no\x20node\x20gate:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20(upw-mn-261014\x20F-51:\x20a\x20delivered-pinned\x20rail\x20aborted\x207\x20after\x20the\x20auto-accept\x20keeper\x20moved\x20the\x20order\x20on;\x20upwc-cat-261017\x20CAT-C2\x20live:\x20a\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20after\x20the\x20award\x20paid),\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20already\x20carries\x20the\x20mutual\x20exclusion\x20vs\x20refund_gate\x20(exactly\x20one\x20polarity\x20can\x20pass,\x20D-BUG-2)\x20—\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail\x20and\x20strands\x20the\x20escrow.\x20Pays\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','count':0x3,'mode':'rate','refund_track':'order_anchored','description':'On\x20completed:\x20Rate\x2010000\x20to\x20the\x20freelancer\x27s\x20Entity.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20The\x20incumbent\x27s\x2010%\x20catalog\x20fee\x20is\x20the\x20number\x20being\x20displaced,\x20not\x20a\x20parameter\x20to\x20tune.\x20on\x20closed_cancel:\x20full\x20refund\x20Rate\x2010000\x20via\x20order-anchored\x20recipient\x20—\x20the\x20buyer\x20then\x20claims\x20via\x20order\x20receive\x20(two-step\x20refund\x20flow)','rows':[{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'settle_gate','note':'0%\x20commission.\x20The\x20incumbent\x2010%\x20catalog\x20fee\x20is\x20displaced\x20BY\x20DESIGN,\x20not\x20a\x20parameter\x20to\x20tune.\x20Explicit\x20non-empty\x20Entity\x20is\x20mandatory:\x20an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently.\x20Binds\x20the\x20settle_gate\x20guard\x20(auto-filled\x20from\x20tpl_allocator_node_gate_settle_once:\x20node\x20gate\x20+\x20order.service\x20binding\x20+\x20chain-derived\x20254\x20once\x20—\x20KLM-C).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_gate','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20submitted\x20ORDER\x20the\x20settlement\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20settle_gate\x20key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20freelancer\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20100%\x20refund.\x20The\x20refund_gate\x20guard\x20must\x20assert\x20ALL\x20of:\x20order.service\x20binding,\x20progress.current\x20==\x20closed_cancel,\x20claimed_by\x20some\x20==\x20false\x20(signer\x20==\x20order.owner\x20OPTIONAL\x20—\x20trigger-rights\x20only;\x20the\x20GuardIdentifier(0)\x20recipient\x20hard-binds\x20the\x20payee;\x20CAT-B2:\x20not\x20an\x20encoded\x20template\x20leg)\x20(closes\x20the\x20double-recovery\x20path\x20vs\x20arbitration\x20indemnity;\x20blocks\x20only\x20after\x20an\x20award\x20ACTUALLY\x20paid\x20—\x20never\x20gate\x20on\x20dispute\x20count\x20==\x200,\x20that\x20one-way\x20door\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow).\x20The\x20paired\x20recover_gate\x20row\x20is\x20the\x20only\x20other\x20exit\x20once\x20an\x20award\x20paid.'}]},'key_risk':'Buyer\x20never\x20reviews\x20the\x20delivery\x20—\x20the\x2014-day\x20auto-accept\x20path\x20(time\x20Guard\x20+\x20admin/keeper\x20forward)\x20unblocks\x20freelancer\x20payment','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Dual-branch\x20acceptance\x20MUST\x20be\x20two\x20forwards\x20inside\x20ONE\x20pair\x20on\x20\x27accepted\x27\x20(prev_node=delivered):\x20two\x20pairs\x20with\x20the\x20same\x20prev_node\x20abort\x20E_DUPLICATE_NODE_PREV\x20(testnet-verified)','Every\x20Guard\x20consuming\x20a\x20submitted\x20Order\x20address\x20MUST\x20bind\x20it\x20to\x20this\x20project\x20(logic_equal[order.service,\x20<service>])\x20—\x20unbound\x20time-locks\x20are\x20cross-project\x20bypassable\x20(R-C3-05)','Time\x20Guards\x20take\x20an\x20IMMUTABLE\x20duration\x20constant\x20at\x20creation;\x20each\x20window\x20(24h\x20instant-cancel,\x2048h\x20requirements,\x2014-day\x20auto-accept)\x20needs\x20its\x20own\x20Guard\x20+\x20an\x20off-chain\x20keeper\x20submitting\x20the\x20forward\x20after\x20expiry\x20(R9)','The\x20incumbent\x27s\x20fee\x20structure:\x20freelancer\x20pays\x200-15%\x20variable\x20(catalog\x20historically\x2010%);\x20the\x20CLIENT\x20also\x20pays\x20a\x20marketplace\x20fee\x20+\x20one-time\x20initiation\x20fee\x20that\x20order_allocators\x20cannot\x20express\x20—\x20document\x20client-side\x20fees\x20off-chain\x20or\x20via\x20a\x20separate\x20Payment','Arbitration\x20venue\x20readiness\x20(role\x20boundary):\x20the\x20venue\x20is\x20an\x20independent\x20role\x20—\x20its\x20internal\x20permission/voting\x20setup\x20and\x20its\x20unpause\x20belong\x20to\x20the\x20ARBITRATOR\x20on\x20their\x20own\x20objects,\x20never\x20to\x20this\x20build.\x20Your\x20duty\x20is\x20selection:\x20bind\x20only\x20a\x20venue\x20already\x20operational\x20(unpaused,\x20voting\x20armed)\x20—\x20a\x20fresh\x20Arbitration\x20ships\x20paused\x20with\x20zero\x20grants,\x20and\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20filing\x20with\x20E_PAUSED\x20(the\x20MCP\x20pre-publish\x20scan\x20hard-blocks\x20binding\x20a\x20paused\x20venue)','The\x20incumbent\x27s\x2024h\x20instant\x20cancel\x20=\x20buyer-side\x20forward\x20from\x20the\x20entry\x20pair\x20guarded\x20by\x20Clock\x20<=\x20order\x20time\x20+\x2024h\x20(PROJECT-BOUND);\x20after\x2024h\x20the\x20refund-request\x20flow\x20applies','Arbitration\x20indemnity\x20pays\x20from\x20the\x20compensation\x20fund\x20and\x20does\x20NOT\x20claw\x20back\x20settled\x20escrow\x20—\x20bind\x20the\x20settlement\x20allocator\x20to\x20a\x20no-open-dispute\x20condition\x20(pattern.arb_status_escrow_holdback)\x20before\x20publish','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20pairing\x20is\x20DECLARED\x20STRUCTURALLY\x20in\x20the\x20rows\x20—\x20the\x20refund\x20row\x20binds\x20guard_key\x20refund_gate\x20(order.claimed_by\x20some\x20==\x20false,\x20query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20and\x20the\x20recovery\x20row\x20binds\x20guard_key\x20recover_gate\x20(order.claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity),\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits.\x20Both\x20gates\x20arrive\x20PENDING\x20judgment\x20designs:\x20resolve\x20them\x20via\x20guide_confirm.guard_resolutions\x20(the\x20guide\x20lists\x20suggested\x20templates\x20and\x20parameters).\x20Exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','Buyer\x20requirements\x20(customer_required\x20labels)\x20are\x20delivered\x20via\x20the\x20Service\x27s\x20Contact\x20over\x20Messenger;\x20record\x20either\x20the\x20merchant\x27s\x20IM\x20user\x20address\x20(resolved\x20from\x20that\x20Contact,\x20zero\x20cost)\x20or\x20an\x20on-chain\x20WTS\x20Proof\x20address\x20(embeds\x20the\x20IM\x20address\x20+\x20last-message\x20timestamp;\x20costs\x20gas)\x20as\x20order_required_info.\x20Enforcement\x20is\x20yours\x20to\x20add:\x20declaring\x20the\x20labels\x20alone\x20does\x20not\x20block\x20the\x20order\x20(the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20customer_required)\x20—\x20bind\x20pattern.required_info_evidence_gate\x20on\x20the\x20first\x20seller-side\x20forward.\x20QUOTA\x20COUPLING:\x20the\x20buyer\x27s\x20required-info\x20message\x20shares\x20the\x20SINGLE\x20stranger-message\x20quota\x20—\x20if\x20the\x20quota\x20is\x20spent,\x20the\x20info\x20cannot\x20be\x20delivered;\x20make\x20the\x20FIRST\x20pre-order\x20message\x20the\x20required_info,\x20or\x20have\x20the\x20seller\x20respond\x20first\x20to\x20open\x20the\x20conversation','WIP\x20LISTING\x20MECHANICS:\x20tiered\x20sales\x20items\x20share\x20one\x20WIP\x20listing\x20—\x20rebinding\x20has\x20NO\x20per-item\x20op:\x20sales\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend;\x20stock\x20values\x20are\x20ABSOLUTE,\x20not\x20deltas;\x20removal\x20is\x20immediate\x20and\x20irreversible)\x20or\x20op:add\x20creates\x20a\x20NEW\x20SKU;\x20a\x20buyer\x20leaving\x20wip_hash\x20empty\x20auto-fills\x20from\x20the\x20listing\x20at\x20purchase\x20with\x20on-chain\x20verification,\x20while\x20an\x20explicit\x20hash\x20pins\x20the\x20purchase-time\x20file','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'escrow_release_days':0xe,'instant_cancel_hours':0x18,'requirements_timeout_hours':0x30,'review_window_days':0xe,'revision_rounds_max':'unlimited','review_reward_pool':0x64,'reward_claim_window_days':0xe},'trust_mechanisms':['R1\x20dual-track\x20refund:\x20pre-work\x20cancellation\x20Allocator\x20+\x20arbitration-ruled\x20refund','R2\x20independent\x20arbitration\x20Permission\x20(E_ARBITRATION_PERMISSION_CONFLICT\x20enforced)','R3\x20compensation\x20fund\x20for\x20arbitration\x20indemnity\x20(declare\x20a\x20no-open-dispute\x20holdback\x20on\x20settlement)','R4\x20acceptance\x20gate:\x20buyer\x20signature\x20or\x20time-guarded\x20auto-accept\x20—\x20seller\x20can\x20never\x20self-accept','R5\x20order-anchored\x20refund\x20recipient\x20(anti-hijack)\x20with\x20signer==order.owner\x20guard','R6\x20Rate\x20sums\x20=\x2010000\x20on\x20every\x20allocator','R7\x20publish\x20freeze\x20—\x20machine\x20+\x20order_allocators\x20set\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound\x20(customer_required\x20delivery\x20channel)','R9\x20keepers:\x2024h\x20instant-cancel\x20expiry,\x2048h\x20requirements\x20timeout,\x2014-day\x20auto-accept,\x20seller\x20non-response\x20auto-cancel','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration','REVISION\x20CAP\x20IS\x20NOT\x20A\x20CONTRACT\x20MECHANISM:\x20the\x20revision\x20loop\x20carries\x20no\x20counter.\x20progress.move\x20bounds\x20EDGE\x20count\x20(MAX_FORWARD\x20/\x20MAX_NODE_PAIR),\x20never\x20visit\x20count,\x20so\x20a\x20revision\x20cycle\x20can\x20be\x20entered\x20any\x20number\x20of\x20times.\x20If\x20a\x20listing\x20advertises\x20a\x20finite\x20revision\x20cap,\x20the\x20cap\x20must\x20be\x20enforced\x20by\x20a\x20counter-backed\x20Guard\x20or\x20entirely\x20off-chain\x20—\x20writing\x20it\x20in\x20fee_params\x20alone\x20enforces\x20nothing.\x20This\x20template\x20declares\x20\x27unlimited\x27\x20because\x20that\x20is\x20both\x20the\x20real\x20catalog\x27s\x20policy\x20and\x20the\x20only\x20thing\x20the\x20current\x20contract\x20shape\x20can\x20honour.'],'keeper_dependencies':['48h\x20requirements\x20timeout\x20auto-cancel\x20(entry\x20pair,\x20time-guarded)','14-day\x20acceptance\x20timeout\x20auto-advance\x20(delivered\x20->\x20accepted)','seller\x20non-response\x20auto-cancel\x20after\x20a\x20cancel/refund\x20request'],'recommended_role':'supplier','role_rationale':'Freelancers\x20publish\x20catalog\x20listings\x20and\x20fulfill\x20orders;\x20the\x20marketplace-operator\x20variant\x20flips\x20the\x20role\x20to\x20merchant.','differences':['NO\x20milestones\x20—\x20single\x20funded\x20order\x20per\x20catalog\x20purchase\x20(incumbent\x20catalog\x20semantics),\x20unlike\x20the\x20sibling\x20enterprise-talent-market\x20template\x27s\x20milestone-chained\x20Orders','Tiered\x20pricing\x20+\x20add-ons\x20are\x20separate\x20Service\x20sales\x20items\x20sharing\x20one\x20WIP\x20listing;\x20buyer\x20requirements\x20map\x20to\x20customer_required\x20labels','Instant\x20<24h\x20cancel\x20and\x2048h\x20requirements\x20timeout\x20are\x20first-class\x20guarded\x20forwards,\x20not\x20off-chain\x20policy'],'user_inputs':['commission_rate_bps\x20—\x20KEEP\x20AT\x200\x20(the\x20incumbent\x20catalog\x20reference\x20is\x201000,\x20displaced\x20by\x20design).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','escrow_release_days\x20—\x20buyer-silence\x20window\x20after\x20delivery\x20before\x20the\x20keeper\x20auto-accepts\x20(incumbent:\x2014;\x20NOT\x20the\x20review\x20window)','instant_cancel_hours\x20—\x20no-questions-asked\x20cancel\x20window\x20(incumbent:\x2024)','requirements_timeout_hours\x20—\x20auto-cancel\x20when\x20the\x20buyer\x20never\x20submits\x20requirements\x20(incumbent:\x2048)','review_window_days\x20—\x20buyer\x20review\x20window\x20after\x20ACCEPTANCE\x20(incumbent:\x2014;\x20F-54:\x20this\x20knob\x20was\x20previously\x20an\x20inline\x20literal\x20in\x20the\x20review_window\x20guard\x20purpose\x20only)','revision_rounds_max\x20—\x20KEEP\x20AT\x20\x27unlimited\x27.\x20This\x20matches\x20the\x20real\x20catalog\x20(predominantly\x20Unlimited\x20Revisions\x20across\x20all\x20tiers)\x20and,\x20more\x20importantly,\x20it\x20matches\x20what\x20the\x20contract\x20can\x20enforce:\x20the\x20revision\x20loop\x20has\x20no\x20visit\x20counter,\x20so\x20a\x20finite\x20cap\x20here\x20would\x20be\x20a\x20promise\x20the\x20chain\x20cannot\x20keep.\x20Do\x20not\x20lower\x20it\x20unless\x20you\x20ALSO\x20add\x20a\x20counter-backed\x20Guard.'],'time_anchors':{'24h\x20instant\x20cancel':'order.time\x20(PRE-checkout\x20branch:\x20entry\x20pair\x20only)','48h\x20requirements\x20timeout':'order.time\x20(entry\x20pair\x20only)','14-day\x20auto-accept':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last;\x20a\x20redelivery\x20appends\x20a\x20fresh\x20entry\x20and\x20resets\x20the\x20window)','review\x20window':'progress.history.time\x20(id\x201280,\x20next_node=\x27accepted\x27,\x20find=last)\x20acceptance\x20ENTRY\x20timestamp\x20—\x20CLOSING\x20window\x20(upper\x20bound,\x20review_window_days;\x20F-54:\x20this\x20anchor\x20was\x20missing\x20so\x20the\x20review\x20leg\x20had\x20no\x20declared\x20time\x20source);\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','seller\x20non-response\x20auto-cancel':'progress.history.time\x20(id\x201280,\x20next_node=\x27cancel_requested\x27,\x20find=last)'}},{'id':'freelance/creator-zero-commission','industry':'freelance','variant':'creator-zero-commission','product_ref':'contra','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'listed','role':'Entry:\x20service\x20listed\x20(portfolio\x20Repository\x20attached,\x20public\x20URLs\x20only)','semantic_role':'draft','from':['']},{'name':'contacted','role':'Client\x20initiates\x20contact\x20—\x20negotiation\x20happens\x20on-Machine','operator':'order_payer','semantic_role':'draft','from':['listed']},{'name':'ordered','role':'Contract\x20signed\x20and\x20project\x20funds\x20escrowed','semantic_role':'draft','from':['contacted']},{'name':'in_progress','role':'Freelancer\x20accepts\x20(permission\x20slot)\x20and\x20works','semantic_role':'active','from':['ordered']},{'name':'delivered','role':'Deliverable\x20submitted\x20with\x20WIP\x20hash\x20evidence\x20(recommended).\x20TWO\x20inbound\x20NodePairs\x20are\x20MANDATORY\x20for\x20the\x20revision\x20loop:\x20{prev\x20in_progress,\x20forward\x20Deliver}\x20AND\x20{prev\x20revising,\x20forward\x20Deliver}\x20—\x20the\x20chain\x20allows\x20ONE\x20NodePair\x20per\x20(node,\x20prev_node)\x20and\x20machines\x20are\x20immutable\x20after\x20publish\x20(ctra-mn-261019\x20F-02);\x20without\x20the\x20second\x20pair\x20an\x20order\x20sent\x20to\x20revising\x20can\x20never\x20re-deliver\x20and\x20the\x20only\x20exits\x20become\x20full-refund\x20cancel\x20or\x20dispute','semantic_role':'delivered','from':[{'prev':'in_progress','forward':'Deliver'},{'prev':'revising','forward':'Deliver'}]},{'name':'revising','role':'Defect-report\x20remedy\x20node\x20—\x20the\x20client\x20reports\x20a\x20defect\x20within\x20defect_report_window_hours\x20of\x20the\x20LAST\x20delivery\x20ENTRY\x20and\x20the\x20freelancer\x20re-works;\x20the\x20ONLY\x20way\x20out\x20is\x20the\x20re-entry\x20pair\x20on\x20delivered\x20(Deliver\x20from\x20revising).\x20A\x20remedy\x20node\x20needs\x20either\x20an\x20inbound\x20re-entry\x20pair\x20or\x20an\x20outbound\x20path\x20to\x20a\x20settlement\x20terminal\x20—\x20a\x20stranded\x20remedy\x20node\x20bricks\x20the\x20order\x20(ctra-mn-261019\x20F-02)','operator':'order_payer','semantic_role':'active','from':[{'prev':'delivered','forward':'ReportDefect','guard_key':'defect_report_window'}]},{'name':'accepted','role':'Client\x20confirms\x20—\x20manual\x20signature\x20OR\x20acceptance-timeout\x20(acceptance_timeout_hours,\x20dual-branch\x20guard).\x20DISTINCT\x20forward\x20names\x20are\x20MANDATORY:\x20sibling\x20forwards\x20sharing\x20a\x20prev\x20default\x20to\x20the\x20same\x20<prev>_to_<node>\x20name\x20and\x20abort\x20E_DUPLICATE_FORWARD_NAME\x20(6)\x20at\x20publish\x20(audit-261012\x20B1)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'AcceptByBuyer','operator':'order_payer'},{'prev':'delivered','forward':'AutoAcceptByKeeper','permission_index':0x3e8,'guard_key':'accept_timeout'}]},{'name':'reviewed','role':'Client\x20reviews\x20the\x20delivered\x20work\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM\x20—\x20row\x20policy\x20is\x20single-typed,\x20so\x20each\x20review\x20event\x20writes\x20TWO\x20rows\x20keyed\x20to\x20the\x20same\x20order:\x20a\x20U256\x20rating\x20row\x201-5,\x20the\x20range-queryable\x20column\x20via\x20keys_where\x20numeric\x20Range,\x20plus\x20a\x20String\x20comment\x20row,\x20presence-queryable;\x20review\x20text\x20lives\x20on-chain\x20as\x20its\x20own\x20row,\x20never\x20in\x20progress\x20history\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'accepted','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Freelancer\x20withdraws\x20(triple-check\x20withdraw\x20guard)\x20—\x20fixed\x20fee\x20deducted,\x20remainder\x20to\x20freelancer','semantic_role':'final','from':['accepted',{'prev':'reviewed','forward':'CompleteAfterReview'}]},{'name':'closed_cancel','role':'Pre-work\x20cancellation\x20only\x20—\x20refund\x20Allocator\x20to\x20client;\x20post-delivery\x20disputes\x20route\x20to\x20Arbitration\x20(NOT\x20this\x20node)\x20so\x20refund\x20and\x20ruling\x20payouts\x20never\x20double-pay\x20(D-BUG-2)','operator':'order_payer','semantic_role':'cancelled','from':['listed','contacted','ordered']}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20freelancer\x20self-purchase\x20(Passport-gated\x20purchase\x20once\x20set)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle','purpose':'Settlement\x20gate:\x20progress.current\x20in\x20the\x20settle\x20node\x20set\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2:\x20an\x20awarded\x20order\x20exits\x20via\x20the\x20recovery\x20rail,\x20never\x20also\x20settle;\x20ships\x20IN\x20tpl_allocator_node_gate_settle_once\x27s\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20the\x20chain-derived\x20protocol-254\x20once\x20key\x20(resolve\x20with\x20tpl_allocator_node_gate_settle_once\x20—\x20NO\x20signer\x20leg\x20is\x20encodable,\x20CAT-B2/upwc-cat-261017;\x20the\x20254\x20key\x20+\x20order\x20binding\x20carry\x20the\x20safety,\x20the\x20recipient\x20row\x20names\x20the\x20payee\x20Entity)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund','purpose':'Refund\x20allocator\x20gate:\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20—\x20NODE\x20GATE\x20IS\x20MANDATORY\x20(audit-261012\x20B4;\x20NO\x20signer\x20leg\x20is\x20encoded\x20—\x20CAT-B2/upwc-cat-261017:\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter,\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20since\x20the\x20GuardIdentifier(0)\x20recipient\x20hard-binds\x20the\x20payee):\x20allocation.alloc\x20distributes\x20wherever\x20the\x20guard\x20passes\x20and\x20never\x20reads\x20the\x20node,\x20so\x20an\x20identity-only\x20refund\x20guard\x20lets\x20the\x20buyer\x20drain\x20the\x20escrow\x20the\x20moment\x20they\x20buy\x20(order_payer\x20signature\x20alone\x20is\x20not\x20a\x20gate\x20—\x20the\x20same\x20guard\x20verifies\x20at\x20ANY\x20node).\x20AND\x20no\x20compensation-fund\x20payout\x20has\x20landed\x20yet\x20(guard\x20adds\x20logic_equal[order.claimed_by\x20some,\x20false]\x20via\x20query\x20id\x201570\x20(order.claimed_by\x20some\x20—\x20Bool)\x20—\x20ORDER\x20state\x20only,\x20the\x20guard\x20never\x20reads\x20the\x20case\x20object,\x20so\x20the\x20single\x20Order\x20slot\x20stays\x20valid)\x20so\x20an\x20already-compensated\x20order\x20cannot\x20also\x20drain\x20the\x20refund\x20Allocator\x20(D-BUG-2\x20double-spend).\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg.\x20Do\x20NOT\x20substitute\x20dispute\x20count==0\x20(query\x20id\x201564\x20—\x20order.dispute\x20count):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'accept_timeout','purpose':'Acceptance-timeout\x20keeper\x20edge\x20(delivered->accepted,\x20AutoAcceptByKeeper):\x20Clock\x20>=\x20progress.history.time\x20+\x20acceptance_timeout_hours;\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05);\x20operator\x20is\x20a\x20service-admin\x20permission\x20index\x20(1000)\x20acting\x20as\x20keeper.\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20—\x20an\x20unbound\x20GuardSpec\x20is\x20never\x20collected\x20into\x20the\x20build\x20(audit-261012\x20B3)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'defect_report_window','purpose':'Defect-report\x20deadline\x20(bound\x20to\x20the\x20delivered\x20->\x20revising\x20ReportDefect\x20forward,\x20revision\x20loop\x20ctra-mn-261019\x20F-02):\x20revising\x20entry\x20allowed\x20only\x20WITHIN\x20defect_report_window_hours\x20of\x20the\x20LAST\x20delivery\x20ENTRY,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20next_node=\x27delivered\x27,\x20find=last\x20—\x20a\x20re-delivery\x20appends\x20a\x20fresh\x20entry,\x20so\x20every\x20revision\x20round\x20gets\x20a\x20fresh\x20window\x20(the\x20same\x20reset\x20the\x20acceptance\x20timeout\x20rides).\x20Revision\x20ROUND\x20policy\x20is\x20a\x20build-time\x20business\x20decision,\x20not\x20an\x20on-chain\x20cap:\x20the\x20Machine\x20is\x20immutable\x20after\x20publish,\x20so\x20price\x20extra\x20rounds\x20into\x20the\x20fee\x20or\x20gate\x20re-delivery\x20on\x20an\x20off-chain\x20agreement.\x20The\x20revising\x20->\x20delivered\x20re-entry\x20pair\x20(Deliver)\x20is\x20the\x20ONLY\x20loop-back\x20edge\x20—\x20ONE\x20NodePair\x20per\x20(node,\x20prev_node)\x20on\x20chain;\x20the\x20pair\x20SHIPS\x20in\x20machine_shape\x20so\x20the\x20loop\x20can\x20never\x20strand\x20an\x20order\x20at\x20revising'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Client\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20acceptance,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20escrow\x20always\x20keeps\x20the\x20unreviewed\x20path\x20accepted\x20->\x20completed.\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','count':0x4,'mode':'rate','once_per_order':!![],'refund_track':'order_anchored','description':'0%\x20commission\x20plus\x20the\x20ORCHESTRATOR\x27S\x20OWN\x20tiered\x20contract\x20fee\x20(<=\x20$500\x20->\x20$15,\x20>\x20$500\x20->\x20$29;\x20ctra-mn-261019\x20F-04\x20correction:\x20one\x20Amount\x20row\x20cannot\x20switch\x20per\x20order,\x20but\x20tier\x20GUARDS\x20read\x20the\x20order\x20and\x20select\x20among\x20disjoint\x20self-selecting\x20settlement\x20rails\x20—\x20mutual\x20exclusion\x20lives\x20inside\x20the\x20guards,\x20because\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins:\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20every\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20order,\x20against\x20the\x20shrinking\x20pool,\x20so\x20an\x20unguarded\x20second\x20rail\x20double-pays;\x20resolve\x20tpl_allocator_node_gate_settle_tier_small\x20/\x20_large).\x20This\x20fee\x20is\x20the\x20seller\x27s\x20declared\x20price\x20for\x20handling\x20the\x20contract,\x20not\x20a\x20platform\x20extraction\x20—\x20it\x20must\x20be\x20labelled\x20as\x20such\x20so\x20the\x20pre-order\x20ledger\x20reads\x20it\x20as\x20seller\x20revenue.\x20The\x20three\x20settlement\x20legs\x20share\x20guard_key\x20\x27settle\x27,\x20so\x20they\x20compile\x20into\x20ONE\x20allocator:\x20the\x20contract-fee\x20Amount\x20is\x20deducted\x20first,\x20then\x20the\x20freelancer\x20Rate\x2010000\x20takes\x20the\x20entire\x20net\x20remainder\x20on\x20completed,\x20with\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20binding\x20the\x20submitted\x20ORDER\x20to\x20the\x20settlement\x20Guard\x20(once_per_order=true\x20arms\x20the\x20254\x20replay\x20slot\x20—\x20the\x20rail\x20is\x20one-shot\x20per\x20order\x20by\x20flag,\x20not\x20by\x20balance\x20exhaustion)\x20—\x20there\x20is\x20NO\x20platform\x20Surplus\x20leg\x20(a\x20Surplus\x20row\x20would\x20sweep\x20the\x20pool,\x20R-ECON-02,\x20and\x20this\x20template\x27s\x20model\x20is\x200%\x20commission).\x20Full\x20refund\x20to\x20client\x20(Rate\x2010000\x20via\x20order-anchored\x20recipient)\x20ONLY\x20on\x20cancelled\x20(pre-work)\x20—\x20orders\x20with\x20a\x20PAID-OUT\x20arbitration\x20award\x20are\x20excluded\x20from\x20the\x20refund\x20route\x20(guard\x20requires\x20order.claimed_by\x20some\x20==\x20false);\x20the\x20escrow\x20of\x20an\x20awarded\x20order\x20must\x20instead\x20exit\x20via\x20a\x20merchant-recovery\x20allocator\x20PAIRED\x20at\x20build\x20time\x20(opposite\x20polarity,\x20see\x20build\x20notes),\x20so\x20refund\x20and\x20compensation\x20are\x20never\x20both\x20paid\x20(D-BUG-2).\x20Refund\x20of\x20the\x20orchestrator\x27s\x20own\x20contract\x20fee\x20is\x20a\x20configurable\x20business\x20decision\x20(default:\x20deducted\x20at\x20withdrawal,\x20fully\x20on-chain)\x20—\x20never\x20a\x20platform\x20clawback,\x20because\x20there\x20is\x20no\x20platform\x20share\x20to\x20claw\x20back.\x20DIGITAL\x20PRODUCT\x20FEE\x20LANDING\x20(N-21):\x20digital_product_fee_bps\x20lands\x20as\x20a\x20separate\x20Amount\x20leg\x20on\x20its\x20own\x20disjoint\x20digital\x20settlement\x20rail\x20(selected\x20by\x20the\x20tier\x20guard\x20reading\x20the\x20order\x20item\x27s\x20digital\x20flag,\x20query\x201551\x20\x27order.item\x20has\x27)\x20with\x20recipient:\x20the\x20orchestrator\x27s\x20Entity\x20—\x20explicit,\x20NON-EMPTY,\x20visible\x20to\x20the\x20buyer\x20pre-order\x20—\x20the\x20computed\x20share\x20clamped\x20into\x20[digital_product_fee_min_usd,\x20digital_product_fee_max_usd]\x20before\x20the\x20leg\x20is\x20written;\x20like\x20the\x20contract\x20fee\x20it\x20is\x20the\x20orchestrator\x27s\x20own\x20seller\x20revenue,\x20never\x20an\x20unnamed\x20share','rows':[{'track':'settlement','recipient':'entity','recipient_key':'orchestrator','mode':'amount','value_from':'contract_fee_small_usd','guard_key':'settle','note':'Orchestrator\x20contract\x20fee,\x20tiered\x20(<=500\x20->\x2015,\x20>500\x20->\x2029).\x20TIER\x20CORRECTION\x20(ctra-mn-261019\x20F-04,\x20mainnet-proven\x20—\x20replaces\x20the\x20old\x20\x27a\x20single\x20Amount\x20row\x20cannot\x20express\x20a\x20tier,\x20so\x20pick\x20at\x20build\x20time\x27\x20teaching):\x20a\x20single\x20Amount\x20row\x20cannot\x20switch\x20per\x20order,\x20but\x20the\x20GUARD\x20reads\x20the\x20order\x20and\x20selects\x20the\x20rail\x20—\x20ship\x20DISJOINT\x20SELF-SELECTING\x20settlement\x20rails\x20(small:\x20order.amount\x20<=\x20tier\x20AND\x20NOT\x20the\x20item\x20flag;\x20large:\x20order.amount\x20>\x20tier;\x20digital:\x20the\x20order\x27s\x20item\x20carries\x20the\x20flag\x20—\x20query\x201551\x20\x27order.item\x20has\x27),\x20each\x20its\x20own\x20guard_key\x20+\x20allocator,\x20resolving\x20the\x20tier\x20guards\x20with\x20tpl_allocator_node_gate_settle_tier_small\x20/\x20tpl_allocator_node_gate_settle_tier_large;\x20both\x20tiers\x20fired\x20live\x20with\x20per-unit\x20reconciliation\x20exact.\x20Mutual\x20exclusion\x20MUST\x20live\x20INSIDE\x20the\x20guards:\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins\x20—\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20—\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS.\x20This\x20row\x20remains\x20the\x20single-rail\x20fallback\x20form\x20for\x20builds\x20that\x20ship\x20one\x20tier.\x20This\x20is\x20seller\x20revenue\x20for\x20handling\x20the\x20contract,\x20NOT\x20platform\x20extraction\x20-\x20label\x20it\x20so\x20the\x20pre-order\x20ledger\x20reads\x20it\x20as\x20such.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01;\x20audit-261012\x20B7):\x20makes\x20the\x20submitted\x20ORDER\x20the\x20settlement\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20release\x20this\x20escrow\x20—\x20without\x20it,\x20an\x20order\x20sharing\x20this\x20Service\x20can\x20authorize\x20a\x20release\x20against\x20ANOTHER\x20order\x27s\x20escrow.\x20Shares\x20the\x20settle\x20key\x20so\x20all\x20three\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'settle','note':'Freelancer\x20remainder\x20on\x20completed:\x20Rate-10000\x20sweeps\x20the\x20balance\x20remaining\x20after\x20the\x20Amount\x20fee\x20leg\x20(execution\x20follows\x20row\x20order,\x20fee\x20first\x20—\x20same\x20net\x20result\x20as\x20Surplus),\x20in\x20the\x20SAME\x20allocator\x20as\x20the\x20fee\x20leg\x20so\x20the\x20split\x20is\x20atomic.\x20Pairs\x20with\x20the\x20Rate-0\x20anchor\x20row\x20so\x20this\x20allocator\x27s\x20Rate\x20legs\x20sum\x20to\x20exactly\x2010000.\x20RATE-SUM\x20SEMANTICS\x20(C8,\x20allocation.move:344-351)\x20have\x20THREE\x20branches:\x20no\x20Surplus\x20leg\x20->\x20Rate\x20legs\x20must\x20sum\x20to\x20EXACTLY\x2010000\x20(ERATE_NOT_10000;\x20a\x20lone\x20Rate-0\x20anchor\x20cannot\x20register);\x20with\x20a\x20Surplus\x20leg\x20->\x20Rate\x20legs\x20must\x20sum\x20to\x20AT\x20MOST\x2010000\x20(ERATE_EXCEEDS_10000\x20—\x20the\x20Surplus\x20sweeps\x20the\x20remainder);\x20RateGross\x20mode\x20->\x20at\x20most\x2010000\x20plus\x20a\x20per-recipient\x20max\x20cap.\x20This\x20allocator\x20has\x20no\x20Surplus,\x20so\x20the\x20exact-10000\x20branch\x20applies.\x200%\x20commission\x20is\x20the\x20standing\x20model\x20—\x20no\x20platform\x20leg\x20exists.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund','note':'Order-anchored\x20100%\x20refund,\x20cancelled\x20only.\x20The\x20guard\x20MUST\x20require\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20so\x20an\x20order\x20whose\x20arbitration\x20award\x20already\x20paid\x20cannot\x20reach\x20the\x20refund\x20rail\x20(D-BUG-2\x20double-spend)\x20—\x20NEVER\x20dispute\x20count\x20==\x200\x20(query\x20id\x201564):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door).\x20The\x20opposite\x20leg\x20is\x20SHIPPED\x20(recover_gate\x20row\x20—\x20the\x20claimed_by\x20some\x20==\x20true\x20polarity\x20twin).\x20Set\x20this\x20allocator\x27s\x20once_per_order=true\x20and\x20register\x20the\x20{identifier:254,\x20b_submission:true}\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016\x20regardless\x20of\x20the\x20submitted\x20bytes.\x20This\x20refund\x20fires\x20once\x20per\x20order,\x20so\x20the\x20arming\x20is\x20safe\x20here;\x20NEVER\x20carry\x20it\x20onto\x20a\x20refund\x20rail\x20that\x20can\x20re-enter\x20its\x20refund\x20node\x20in\x20a\x20later\x20period\x20—\x20254\x20keys\x20on\x20payment_info.for_object\x20and\x20would\x20abort\x2016\x20forever\x20(OFN\x20#P-04).'},{'track':'settlement','recipient':'entity','recipient_key':'freelancer','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20freelancer\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle/refund),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'key_risk':'Platform\x20revenue\x20without\x20commission\x20—\x20the\x20tiered\x20contract\x20fee\x20rides\x20on-chain\x20as\x20disjoint\x20self-selecting\x20settlement\x20rails\x20(tier\x20guards\x20read\x20order.amount,\x20ctra-mn-261019\x20F-04),\x20never\x20off-chain;\x20disputed\x20orders\x20must\x20NOT\x20share\x20the\x20refund\x20Allocator\x20with\x20cancellation\x20(double-spend,\x20D-BUG-2)','build_notes':['ONCE\x20SLOT\x20ARMING\x20+\x20SCOPE\x20(v54,\x20audit-261012\x20B7):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20each\x20SETTLEMENT\x20allocator\x20Guard\x20(settle;\x20the\x20refund\x20guard\x20here\x20is\x20one-shot\x20per\x20order,\x20so\x20arming\x20254\x20is\x20harmless\x20—\x20never\x20carry\x20it\x20to\x20a\x20refund\x20rail\x20that\x20can\x20re-enter\x20its\x20refund\x20node\x20in\x20a\x20later\x20period,\x2016\x20forever,\x20OFN\x20#P-04)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20payment_info.for_object\x20(the\x20bound\x20Order),\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016\x20regardless\x20of\x20submitted\x20bytes.\x20SCOPE\x20(C10,\x20mainnet-verified):\x20the\x20once\x20key\x20is\x20(guard,\x20allocator\x20leg,\x20bcs(for_object))\x20stored\x20ON\x20the\x20Allocation\x20—\x20the\x20slot\x20is\x20once\x20PER\x20ORDER\x20per\x20allocation,\x20NOT\x20once\x20per\x20pool,\x20and\x20equally\x20NOT\x20cross-order:\x20a\x20DIFFERENT\x20order\x20derives\x20a\x20different\x20key\x20and\x20sails\x20past\x20the\x20slot\x20—\x20it\x20is\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20that\x20makes\x20the\x20settlement\x20Guard\x20refuse\x20a\x20sibling\x20order\x27s\x20passport;\x20together\x20the\x20two\x20close\x20CR-01.\x20What\x20the\x20slot\x20stops\x20is\x20a\x20replay\x20of\x20the\x20SAME\x20order\x20(abort\x20code\x2016).','SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Pre-payment\x20funnel\x20(listed\x20->\x20contacted\x20->\x20ordered)\x20is\x20the\x20challenger\x20differentiator\x20—\x20negotiation\x20happens\x20on-Machine\x20(testnet-validated\x20topology)','0%\x20commission\x20is\x20chain-verifiable\x20—\x20the\x20allocator\x20split\x20shows\x20the\x20platform\x20takes\x20only\x20the\x20fixed\x20Amount','Minimum\x20contract\x20size\x20guard:\x20order\x20amount\x20should\x20cover\x20the\x20fixed\x20fee\x20(recommended\x20>=\x202x\x20fee\x20so\x20freelancer\x20earnings\x20>=\x20platform\x20fee)','Arbitration\x20is\x20an\x20add-on\x20(native\x20to\x20WoWok)\x20—\x20independent\x20Permission,\x20near-zero\x20fee\x20for\x20the\x20low-ticket\x20dispute\x20range','Portfolio\x20Repository\x20must\x20use\x20public\x20URLs\x20(testnet\x20lesson:\x20never\x20local\x20addresses)','Disputes\x20route\x20to\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11):\x20Arbitration\x20(compensation_fund)\x20and\x20Allocator\x20(escrow)\x20are\x20independent\x20systems\x20by\x20design;\x20the\x20refund\x20Allocator\x20and\x20the\x20ruling\x20payout\x20must\x20never\x20both\x20fire\x20for\x20one\x20order','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20az-mn-261007\x20T5:\x202.38\x20stranded):\x20every\x20non-terminal\x20node\x20must\x20keep\x20an\x20exit\x20under\x20BOTH\x20polarities\x20of\x20the\x20arbitration\x20payout\x20state.\x20The\x20refund\x20Allocator\x20gates\x20on\x20order.claimed_by\x20some==false\x20(blocks\x20only\x20after\x20an\x20award\x20ACTUALLY\x20paid).\x20The\x20pairing\x20is\x20STRUCTURAL\x20(b9-261015):\x20the\x20allocator\x20rows\x20SHIP\x20the\x20merchant-recovery\x20allocator\x20(recover_gate\x20row\x20—\x20its\x20guard\x20asserts\x20order.claimed_by\x20some==true\x20via\x20query\x20id\x201570\x20(order.claimed_by\x20some\x20—\x20Bool)\x20plus\x20order.service\x20binding,\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW);\x20Rate\x2010000\x20to\x20the\x20freelancer\x20Entity);\x20the\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20guard\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20the\x20Machine\x20publish.\x20NEVER\x20gate\x20the\x20refund\x20rail\x20on\x20\x27order.dispute\x20count==0\x27\x20(query\x20id\x201564):\x20Order.dispute\x20is\x20append-only\x20(filed\x20cases\x20are\x20never\x20pruned),\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20—\x20the\x20one-way\x20door\x20that\x20froze\x20the\x20mainnet\x20T5\x20order\x20at\x20reviewed','COMPENSATION\x20FUND\x20PROTECTS\x20THE\x20BUYER\x20ONLY:\x20the\x20payout\x20path\x20pays\x20the\x20order\x20owner\x20(the\x20client)\x20—\x20there\x20is\x20no\x20on-chain\x20path\x20to\x20indemnify\x20the\x20freelancer\x20(the\x20recipient\x20is\x20hardcoded\x20at\x20the\x20contract\x20layer).\x20If\x20a\x20ruling\x20favors\x20the\x20freelancer\x20(malicious\x20non-acceptance),\x20the\x20fund\x20cannot\x20pay\x20them;\x20document\x20this\x20limitation\x20to\x20merchants','VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20newly\x20created\x20Arbitration\x20defaults\x20to\x20paused\x20—\x20unpause\x20is\x20the\x20ARBITRATOR\x27s\x20deployment\x20step\x20on\x20their\x20own\x20object,\x20never\x20a\x20duty\x20of\x20this\x20build.\x20Bind\x20only\x20a\x20venue\x20already\x20unpaused\x20by\x20its\x20owner:\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20filing\x20with\x20E_PAUSED\x20and\x20the\x20mounted\x20arbitration\x20is\x20decorative\x20(the\x20MCP\x20pre-publish\x20scan\x20hard-blocks\x20binding\x20a\x20paused\x20venue)','VENUE\x20SELECTION\x20CRITERION:\x20prefer\x20a\x20venue\x20with\x20an\x20explicit\x20voting\x20policy\x20(roster\x20+\x20threshold\x20via\x20its\x20voting_guard)\x20—\x20an\x20empty\x20voting_guard\x20gives\x20every\x20voter\x20EQUAL\x20WEIGHT\x20(1\x20person\x201\x20vote),\x20not\x20permissionless.\x20How\x20the\x20venue\x20configures\x20its\x20voting\x20is\x20the\x20arbitrator\x27s\x20order;\x20you\x20verify\x20it\x20only\x20as\x20a\x20selection\x20criterion','Timeout\x20auto-acceptance\x20and\x20ruling-driven\x20refund\x20execution\x20are\x20100%\x20off-chain\x20keeper\x20duties\x20(machine.move\x20has\x20no\x20timer;\x20arb.move\x20rulings\x20only\x20change\x20case\x20state)\x20—\x20keeper\x20downtime\x20reverts\x20to\x20manual\x20confirmation','RE-ENTRANT\x20REMEDY\x20LOOP\x20(ctra-mn-261019\x20F-02):\x20a\x20Defect\x20Report\x20/\x20revising\x20loop\x20requires\x20the\x20re-delivery\x20node\x20to\x20declare\x20TWO\x20inbound\x20NodePairs\x20—\x20{prev_node:\x27in_progress\x27,\x20forwards:[Deliver]}\x20AND\x20{prev_node:\x27revising\x27,\x20forwards:[Deliver]}\x20—\x20because\x20the\x20chain\x20allows\x20ONE\x20NodePair\x20per\x20(node,\x20prev_node)\x20and\x20machines\x20are\x20immutable\x20after\x20publish.\x20A\x20remedy\x20loop\x20added\x20naively\x20(a\x20single\x20pair\x20into\x20the\x20re-delivery\x20node,\x20or\x20a\x20remedy\x20node\x20with\x20no\x20path\x20out)\x20strands\x20the\x20order\x20at\x20revising\x20forever:\x20the\x20only\x20exits\x20become\x20full-refund\x20cancel\x20or\x20dispute,\x20and\x20the\x20shape\x20cannot\x20be\x20patched\x20post-publish.\x20RULE:\x20a\x20remedy\x20node\x20needs\x20either\x20an\x20inbound\x20re-entry\x20pair\x20or\x20an\x20outbound\x20path\x20to\x20a\x20settlement\x20terminal\x20—\x20a\x20stranded\x20remedy\x20node\x20bricks\x20the\x20order.\x20The\x20revising\x20ENTRY\x20is\x20window-gated\x20(defect_report_window,\x20defect_report_window_hours\x20from\x20the\x20LAST\x20delivery\x20entry;\x20every\x20re-delivery\x20resets\x20it)\x20and\x20the\x20acceptance\x20timeout\x20rides\x20the\x20same\x20entry\x20anchor,\x20so\x20each\x20round\x20restarts\x20both\x20clocks.',ZERO_BALANCE_MASKING_NOTE,'WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'contract_fee_small_usd':0xf,'contract_fee_large_usd':0x1d,'contract_fee_tier_boundary_usd':0x1f4,'defect_report_window_hours':0x78,'digital_product_fee_bps':0x1f4,'digital_product_fee_min_usd':0x3,'digital_product_fee_max_usd':0x1d,'acceptance_timeout_hours':0x30,'min_contract_usd':0x1e,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'acceptance_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20LAST\x20delivery\x20ENTRY\x20timestamp\x20(a\x20re-delivery\x20appends\x20a\x20fresh\x20entry\x20and\x20naturally\x20resets\x20it);\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','defect_report_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20—\x20the\x20SAME\x20last-delivery-entry\x20anchor\x20the\x20acceptance\x20timeout\x20rides;\x20every\x20re-delivery\x20starts\x20a\x20fresh\x20defect-report\x20window'},'trust_mechanisms':['R1\x20refund\x20guard\x20restricted\x20to\x20the\x20order\x20owner\x20AND\x20to\x20orders\x20with\x20no\x20paid-out\x20award\x20(order.claimed_by\x20some==false)\x20—\x20cancellation\x20refunds\x20via\x20the\x20Allocator;\x20awarded\x20orders\x20exit\x20via\x20the\x20shipped\x20recover_gate\x20rail\x20(the\x20polarity\x20twin\x20of\x20the\x20refund\x20seal);\x20refund\x20and\x20compensation\x20are\x20never\x20both\x20paid\x20(D-BUG-2)','R2\x20independent\x20arbitration\x20Permission\x20(a\x20testnet\x20shared-Permission\x20critical\x20lesson,\x20contract-enforced)','R3\x20compensation\x20fund\x20optional;\x20when\x20funded,\x20publish\x20requires\x20a\x20mounted\x20UNPAUSED\x20Arbitration\x20with\x20a\x20voting_guard\x20(MCP\x20pre-publish\x20scan:\x20paused\x20=\x20hard\x20block,\x20empty\x20voting_guard\x20=\x20warning)','R4\x20acceptance\x20dual-branch:\x20client\x20signature\x20or\x20timeout\x20—\x20no\x20self-accept','R5\x20order-anchored\x20refund\x20recipient','R6\x20Amount\x20fee\x20deducted\x20first\x20+\x20freelancer\x20Rate\x2010000\x20of\x20the\x20net\x20remainder,\x20both\x20legs\x20in\x20ONE\x20allocator\x20via\x20a\x20shared\x20guard_key\x20(fixed\x20fee\x20is\x20native,\x20no\x20off-chain\x20collection;\x20no\x20Surplus\x20leg\x20—\x200%\x20commission\x20model)','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keeper\x20is\x20a\x20FIRST-CLASS\x20dependency\x20(health\x20check\x20+\x20downtime\x20alert\x20required):\x20acceptance-timeout\x20auto-advance\x20(acceptance_timeout_hours)\x20and\x20ruling-driven\x20refund\x20execution\x20both\x20run\x20off-chain\x20—\x20no\x20keeper\x20means\x20manual-only\x20confirmation\x20(the\x20funds-stuck\x20failure\x20mode\x20returns)','R10\x20contract\x20fee\x20expressed\x20on-chain\x20(tiered:\x20disjoint\x20self-selecting\x20settlement\x20rails\x20—\x20tier\x20guards\x20read\x20order.amount\x20against\x20the\x20boundary;\x20ctra-mn-261019\x20F-04)'],'keeper_dependencies':['acceptance-timeout\x20auto-advance\x20(acceptance_timeout_hours;\x20the\x20accept\x20guard\x27s\x20time\x20branch\x20ALLOWED\x20only\x20—\x20keeper\x20must\x20fire\x20it)','arbitration\x20ruling\x20refund\x20execution\x20(arb\x20ruling\x20only\x20changes\x20case\x20state;\x20the\x20keeper\x20allocates\x20per\x20ruling)'],'recommended_role':'supplier','role_rationale':'Independent\x20freelancers\x20own\x20their\x20funnel\x20and\x20keep\x20100%\x20of\x20project\x20funds;\x20the\x20fixed\x20fee\x20replaces\x20commission\x20—\x20supplier-first\x20economics.','differences':['0%\x20commission\x20+\x20fixed\x20contract\x20fee\x20as\x20an\x20Amount\x20allocator\x20entry\x20—\x20platform\x20revenue\x20decoupled\x20from\x20GMV','Pre-payment\x20funnel\x20(listed\x20->\x20contacted\x20->\x20ordered):\x20negotiation\x20happens\x20on-Machine\x20before\x20any\x20escrow','Arbitration\x20is\x20a\x20WoWok-native\x20add-on\x20rather\x20than\x20an\x20inherited\x20model\x20component'],'user_inputs':['contract_fee_small_usd\x20/\x20contract_fee_large_usd\x20—\x20the\x20tiered\x20per-contract\x20platform\x20fee\x20(Amount\x20allocator\x20entry;\x202026\x20marketplace\x20pricing:\x20<=\x20$500\x20->\x20$15,\x20>\x20$500\x20->\x20$29)','contract_fee_tier_boundary_usd\x20—\x20the\x20order-size\x20boundary\x20between\x20the\x20two\x20fee\x20tiers','acceptance_timeout_hours\x20—\x20client\x20acceptance\x20window\x20before\x20the\x20keeper\x20advances','min_contract_usd\x20—\x20minimum\x20contract\x20size\x20(recommended\x20>=\x202x\x20the\x20small-tier\x20fee)','digital_product_fee_bps\x20—\x20Rate\x20share\x20for\x20digital\x20deliverables\x20(5%\x20=\x20500\x20bps;\x20natively\x20expressible,\x20no\x20tiering\x20needed);\x20digital_product_fee_min_usd\x20/\x20digital_product_fee_max_usd\x20bound\x20the\x20computed\x20share\x20($3-$29)\x20—\x20the\x20orchestration\x20layer\x20clamps\x20the\x20Rate\x20result\x20into\x20[min,\x20max]\x20before\x20writing\x20the\x20Amount\x20leg']},{'id':'freelance/agent-task','industry':'freelance','variant':'agent-task','product_ref':'algora','archetype':'challenger','review_mode':'none','acceptance_mode':'agent','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'funded','role':'Entry:\x20the\x20Client\x20funds\x20the\x20task\x20and\x20the\x20bounty\x20escrows\x20atomically\x20at\x20buy\x20(no\x20unpaid\x20\x27open\x27\x20state\x20exists\x20on\x20chain\x20—\x20the\x20posting\x20itself\x20is\x20an\x20off-Machine\x20WIP\x20listing);\x20Machine\x20starts\x20here','semantic_role':'draft','from':[{'prev':''}]},{'name':'submitted','role':'Provider\x20(human\x20or\x20autonomous\x20agent)\x20submits\x20the\x20deliverable\x20with\x20a\x20WIP-hash\x20evidence\x20row\x20(submit-work\x20semantics);\x20the\x20evaluation\x20clock\x20starts\x20from\x20this\x20ENTRY\x20timestamp','semantic_role':'delivered','from':[{'prev':'funded','forward':'Submit','guard_key':'submit_evidence'}]},{'name':'completed','role':'Evaluator\x20rules\x20ACCEPT,\x20or\x20the\x20evaluation\x20window\x20elapses\x20and\x20the\x20keeper\x20auto-releases\x20(the\x20plan\x27s\x20`expired`\x20terminal,\x20folded\x20here\x20as\x20the\x20timeout\x20leg\x20—\x20INV-A2\x20safe\x20form).\x20Settlement\x20releases\x20the\x20escrow\x20to\x20the\x20Provider.\x20DISTINCT\x20forward\x20names\x20are\x20MANDATORY:\x20two\x20sibling\x20forwards\x20sharing\x20prev\x20\x27submitted\x27\x20default\x20to\x20the\x20same\x20name\x20and\x20abort\x20E_DUPLICATE_FORWARD_NAME\x20(6)\x20at\x20publish','semantic_role':'final','from':[{'prev':'submitted','forward':'EvaluatorAccept','guard_key':'evaluate_accept','permission_index':0x3e9},{'prev':'submitted','forward':'AutoReleaseByKeeper','guard_key':'auto_release','permission_index':0x3e8}]},{'name':'rejected','role':'Evaluator\x20rules\x20REJECT\x20(deliverable\x20does\x20not\x20meet\x20the\x20task\x20terms)\x20—\x20order-anchored\x20full\x20refund\x20to\x20the\x20Client.\x20A\x20deliberate\x20Evaluator\x20action,\x20never\x20a\x20timeout:\x20silence\x20auto-RELEASES\x20to\x20the\x20Provider\x20(completed),\x20it\x20never\x20auto-rejects,\x20so\x20a\x20stalled\x20Evaluator\x20cannot\x20strip\x20a\x20Provider\x20who\x20did\x20the\x20work','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'submitted','forward':'EvaluatorReject','guard_key':'evaluate_reject','permission_index':0x3e9}]},{'name':'closed_cancel','role':'Pre-submission\x20Client\x20cancellation\x20—\x20the\x20task\x20escrowed\x20at\x20buy\x20but\x20the\x20Provider\x20has\x20not\x20yet\x20submitted,\x20so\x20the\x20Client\x20may\x20void\x20and\x20take\x20a\x20full\x20order-anchored\x20refund\x20(R-DRAFT-VOID:\x20an\x20abandoned\x20or\x20ghost\x20order\x20needs\x20a\x20single-hop\x20buyer\x20exit;\x20escrow\x20is\x20funded\x20at\x20order_new,\x20not\x20at\x20first\x20forward).\x20Post-submission\x20outcomes\x20route\x20to\x20the\x20Evaluator\x20(completed/rejected)\x20and\x20disputes\x20to\x20Arbitration,\x20never\x20here,\x20so\x20the\x20refund\x20and\x20a\x20ruling\x20payout\x20never\x20both\x20fire\x20(D-BUG-2)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'funded','forward':'CancelBeforeSubmit'}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20the\x20Provider\x20from\x20self-purchasing\x20their\x20own\x20task\x20(Passport-gated\x20purchase\x20once\x20set)'},{'template_id':'pattern.repository_data_check','host':'machine','key':'submit_evidence','purpose':'Submission\x20evidence\x20gate\x20(funded->submitted):\x20the\x20deliverable\x27s\x20WIP\x20hash\x20must\x20be\x20written\x20to\x20the\x20evidence\x20Repository\x20before\x20the\x20forward\x20passes,\x20so\x20the\x20Evaluator\x20rules\x20against\x20a\x20tamper-evident\x20artifact,\x20not\x20prose.\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20—\x20an\x20unbound\x20GuardSpec\x20is\x20never\x20collected\x20into\x20the\x20build\x20(audit-261012\x20B3)'},{'template_id':'pattern.identity_check_single','host':'machine','key':'evaluate_accept','purpose':'Evaluator\x20ACCEPT\x20ruling\x20(submitted->completed,\x20EvaluatorAccept\x20forward):\x20binds\x20the\x20forward\x20to\x20the\x20single\x20independent\x20Evaluator\x20permission\x20entity\x20(slot\x20index\x201001).\x20The\x20Evaluator\x20is\x20a\x20third\x20party\x20disjoint\x20from\x20both\x20Client\x20and\x20Provider\x20—\x20the\x20payout-owing\x20party\x20never\x20decides\x20the\x20payout\x20(INV-A3).\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05)\x20so\x20a\x20sibling\x20task\x27s\x20passport\x20cannot\x20rule\x20here'},{'template_id':'pattern.identity_check_single','host':'machine','key':'evaluate_reject','purpose':'Evaluator\x20REJECT\x20ruling\x20(submitted->rejected,\x20EvaluatorReject\x20forward):\x20the\x20same\x20independent\x20Evaluator\x20slot\x20(1001).\x20A\x20reject\x20is\x20an\x20explicit\x20ruling,\x20never\x20a\x20default\x20—\x20the\x20timeout\x20path\x20auto-RELEASES\x20(completed),\x20it\x20does\x20not\x20auto-reject,\x20so\x20Provider\x20work\x20is\x20never\x20stripped\x20by\x20Evaluator\x20silence'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'auto_release','purpose':'Evaluation-window\x20auto-release\x20keeper\x20edge\x20(submitted->completed,\x20AutoReleaseByKeeper):\x20Clock\x20>=\x20progress.history.time\x20(id\x201280,\x20next_node=\x27submitted\x27,\x20find=last)\x20+\x20evaluation_window_days,\x20so\x20a\x20stalled\x20Evaluator\x20unblocks\x20the\x20Provider\x27s\x20payment.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05);\x20operator\x20is\x20a\x20service-admin\x20permission\x20index\x20(1000)\x20acting\x20as\x20keeper.\x20This\x20is\x20the\x20plan\x27s\x20`expired`\x20outcome\x20expressed\x20as\x20the\x20dual-branch\x20timeout\x20leg\x20(INV-A2),\x20NOT\x20a\x20sibling\x20node'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_gate','purpose':'Single-shot\x20settlement\x20allocator\x20gate:\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20the\x20chain-derived\x20protocol-254\x20once\x20key\x20(bcs(payment_info.for_object),\x20replay\x20aborts\x2016).\x20settle_node\x20defaults\x20to\x20\x27completed\x27;\x20the\x20kernel\x20injects\x20service_name\x20=\x20the\x20plan\x27s\x20service\x20name'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate:\x20a\x20node\x20gate\x20over\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}\x20resolved\x20from\x20THIS\x20template\x27s\x20machine_shape\x20as\x20ONE\x20top-level\x20n-ary\x20logic_or\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20blocks\x20the\x20refund\x20once\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid).\x20NODE\x20GATE\x20IS\x20MANDATORY\x20(audit-261012\x20B4):\x20an\x20identity-only\x20refund\x20guard\x20lets\x20the\x20Client\x20drain\x20the\x20escrow\x20the\x20moment\x20they\x20buy.\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017\x20—\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter;\x20the\x20old\x20prose\x20claimed\x20\x27signer\x20==\x20order.owner\x20(anti-hijack\x20R5)\x27):\x20anti-hijack\x20is\x20structural\x20(GuardIdentifier(0)\x20recipient),\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening.\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg.\x20NEVER\x20gate\x20on\x20order.dispute\x20count\x20==\x200\x20(query\x20id\x201564):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Provider-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20a\x20node-pinned\x20rail\x20aborts\x207\x20after\x20a\x20keeper\x20moves\x20the\x20order\x20on\x20—\x20F-51\x20—\x20and\x20CAT-C2\x27s\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20live;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion).\x20Pays\x20Rate\x2010000\x20to\x20the\x20Provider\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'}],'allocator':{'recipient':'entity','count':0x3,'mode':'rate','once_per_order':!![],'refund_track':'order_anchored','description':'Agent-task\x20settlement\x20on\x20completed.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(the\x20Client\x20pays\x20gas\x20only),\x20so\x20a\x20single\x20Rate\x2010000\x20leg\x20releases\x20the\x20whole\x20escrow\x20to\x20the\x20Provider\x27s\x20Entity\x20—\x20the\x200%\x20offer\x20is\x20the\x20standing\x20model,\x20not\x20a\x20launch\x20discount.\x20The\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20task\x20Order\x20so\x20a\x20sibling\x20task\x27s\x20passport\x20cannot\x20release\x20this\x20escrow\x20(CR-01);\x20once_per_order\x20arms\x20the\x20chain-derived\x20254\x20replay\x20slot.\x20Full\x20refund\x20to\x20the\x20Client\x20(Rate\x2010000\x20via\x20the\x20order-anchored\x20recipient)\x20on\x20rejected\x20OR\x20a\x20pre-submission\x20closed_cancel\x20(refund_gate\x20node-gates\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}),\x20and\x20only\x20while\x20no\x20arbitration\x20award\x20has\x20paid\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false);\x20an\x20awarded\x20order\x27s\x20escrow\x20instead\x20exits\x20via\x20the\x20paired\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20Provider),\x20so\x20refund\x20and\x20ruling\x20payouts\x20never\x20both\x20fire\x20(D-BUG-2).\x20The\x20Evaluator\x20rules\x20the\x20release\x20but\x20is\x20never\x20a\x20recipient\x20—\x20they\x20hold\x20no\x20stake\x20in\x20the\x20escrow.','rows':[{'track':'settlement','recipient':'entity','recipient_key':'provider','mode':'rate','value':0x2710,'guard_key':'settle_gate','note':'0%\x20platform\x20commission\x20—\x20the\x20standing\x20direct-sales\x20model.\x20Recipient\x20MUST\x20be\x20an\x20explicit\x20non-empty\x20Entity:\x20an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer\x20(the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built),\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently.\x20Binds\x20settle_gate\x20(auto-filled\x20from\x20tpl_allocator_node_gate_settle_once:\x20node\x20gate\x20+\x20order.service\x20binding\x20+\x20chain-derived\x20254\x20once).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_gate','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20submitted\x20task\x20ORDER\x20the\x20settlement\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20task\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20settle_gate\x20key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'provider','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Provider-recovery\x20rail\x20(escrow-exit\x20invariant):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20Provider\x20Entity\x20so\x20an\x20awarded\x20task\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_gate/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20full\x20refund\x20on\x20rejected\x20or\x20pre-submission\x20closed_cancel\x20(refund_gate\x20node-gates\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}).\x20GuardIdentifier(0)\x20resolves\x20to\x20the\x20paying\x20Order\x20and\x20allocation.move\x20ERECIPIENT_NOT_FOR_OBJECT\x20makes\x20redirection\x20structurally\x20impossible;\x20the\x20Client\x20claims\x20via\x20the\x20two-step\x20order\x20receive.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false\x20so\x20an\x20awarded\x20task\x20cannot\x20also\x20drain\x20the\x20refund\x20rail\x20(D-BUG-2).\x20Set\x20this\x20allocator\x27s\x20once_per_order=true\x20and\x20register\x20the\x20{identifier:254,\x20b_submission:true}\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x2016.\x20This\x20refund\x20fires\x20once\x20per\x20order,\x20so\x20the\x20arming\x20is\x20safe\x20here;\x20NEVER\x20carry\x20it\x20onto\x20a\x20refund\x20rail\x20that\x20can\x20re-enter\x20its\x20refund\x20node\x20in\x20a\x20later\x20period\x20—\x20254\x20keys\x20on\x20payment_info.for_object\x20and\x20would\x20abort\x2016\x20forever\x20(OFN\x20#P-04).'}]},'key_risk':'The\x20Evaluator\x20is\x20a\x20single\x20trusted\x20identity:\x20if\x20it\x20stalls\x20the\x20auto-release\x20keeper\x20pays\x20the\x20Provider\x20(silence\x20never\x20auto-rejects);\x20if\x20it\x20rules\x20wrongly\x20the\x20Client\x27s\x20only\x20recourse\x20is\x20Arbitration,\x20since\x20the\x20Machine\x20ruling\x20is\x20final.','build_notes':['ONCE\x20SLOT\x20ARMING\x20+\x20SCOPE\x20(v54,\x20audit-261012\x20B7):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20each\x20SETTLEMENT\x20allocator\x20Guard\x20(settle_gate;\x20the\x20refund\x20guard\x20here\x20is\x20one-shot\x20per\x20order,\x20so\x20arming\x20254\x20is\x20harmless\x20—\x20never\x20carry\x20it\x20to\x20a\x20refund\x20rail\x20that\x20can\x20re-enter\x20its\x20refund\x20node\x20in\x20a\x20later\x20period,\x2016\x20forever,\x20OFN\x20#P-04)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20payment_info.for_object\x20(the\x20bound\x20Order),\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016\x20regardless\x20of\x20submitted\x20bytes.\x20SCOPE\x20(C10,\x20mainnet-verified):\x20the\x20once\x20key\x20is\x20(guard,\x20allocator\x20leg,\x20bcs(for_object))\x20stored\x20ON\x20the\x20Allocation\x20—\x20once\x20PER\x20ORDER\x20per\x20allocation,\x20NOT\x20once\x20per\x20pool\x20and\x20NOT\x20cross-order;\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20is\x20what\x20makes\x20the\x20settlement\x20Guard\x20refuse\x20a\x20sibling\x20task\x27s\x20passport.','ACCEPTANCE\x20COMPONENT\x20(D12\x20重构\x202,\x20acceptance_mode\x20\x27agent\x27):\x20the\x20release\x20decision\x20is\x20the\x20independent\x20Evaluator\x27s,\x20never\x20the\x20payout-owing\x20Client\x27s\x20(INV-A3\x20—\x20compile\x20hard-blocks\x20a\x20judge-decided\x20mode\x20whose\x20arbitration_mode\x20is\x20not\x20\x27third_party\x27).\x20The\x20Evaluator\x20permission\x20entity\x20MUST\x20be\x20disjoint\x20from\x20both\x20the\x20Client\x20(order\x20payer)\x20and\x20the\x20Provider\x20(service\x20permission);\x20grant\x20it\x20slot\x20index\x201001\x20and\x20bind\x20only\x20an\x20already-operational\x20venue.','INV-A2\x20FOLD\x20(why\x20there\x20is\x20no\x20`expired`\x20node):\x20an\x20accept\x20decision\x20and\x20its\x20timeout\x20complement\x20as\x20two\x20SIBLING\x20outgoing\x20edges\x20of\x20`submitted`\x20race\x20—\x20in\x20a\x20window\x20overlap\x20both\x20fire,\x20in\x20a\x20gap\x20neither\x20does,\x20and\x20with\x20topology\x20frozen\x20at\x20publish\x20the\x20neither-gap\x20is\x20a\x20permanent\x20deadlock\x20(F-REVIEW-BLOCK).\x20The\x20safe\x20form\x20folds\x20them\x20into\x20ONE\x20`completed`\x20node\x20reached\x20by\x20two\x20DISTINCT\x20forwards\x20(EvaluatorAccept\x20OR\x20AutoReleaseByKeeper);\x20the\x20chain\x27s\x20E_DUPLICATE_NODE_PREV\x20merges\x20the\x20same-prev\x20edges\x20into\x20one\x20Pair,\x20and\x20the\x20distinct\x20forward\x20names\x20avoid\x20E_DUPLICATE_FORWARD_NAME\x20(6).','SILENCE\x20FAVORS\x20THE\x20WORKER:\x20the\x20timeout\x20leg\x20auto-RELEASES\x20to\x20the\x20Provider\x20(completed),\x20it\x20never\x20auto-rejects.\x20A\x20reject\x20is\x20always\x20an\x20explicit\x20Evaluator\x20ruling.\x20This\x20mirrors\x20the\x20freelance-market\x20convention\x20of\x20an\x20auto-accept\x20window\x20and\x20is\x20the\x20reason\x20a\x20stalled\x20Evaluator\x20cannot\x20strip\x20a\x20Provider\x20who\x20submitted\x20evidence.','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20az-mn-261007\x20T5):\x20every\x20terminal\x20keeps\x20an\x20exit\x20under\x20BOTH\x20polarities\x20of\x20the\x20arbitration\x20payout\x20state.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20the\x20paired\x20recover_gate\x20row\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20Provider)\x20ships\x20in\x20the\x20allocator\x20so\x20an\x20awarded\x20task\x27s\x20escrow\x20still\x20exits.\x20Resolve\x20both\x20guard\x20designs\x20before\x20the\x20Machine\x20publish.\x20NEVER\x20gate\x20the\x20refund\x20rail\x20on\x20order.dispute\x20count\x20==\x200\x20(append-only\x20vector\x20→\x20one-way\x20door).','COMPENSATION\x20FUND\x20PROTECTS\x20THE\x20CLIENT\x20ONLY:\x20the\x20ruling\x20payout\x20path\x20pays\x20the\x20order\x20owner\x20(the\x20Client)\x20—\x20there\x20is\x20no\x20on-chain\x20path\x20to\x20indemnify\x20the\x20Provider.\x20If\x20a\x20ruling\x20favors\x20the\x20Provider\x20(a\x20malicious\x20Client\x20reject),\x20the\x20fund\x20cannot\x20pay\x20them;\x20document\x20this\x20limitation.','DISPUTES\x20route\x20through\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11):\x20Arbitration\x20(compensation_fund)\x20and\x20Allocator\x20(escrow)\x20are\x20independent\x20systems\x20by\x20design;\x20the\x20refund\x20Allocator\x20and\x20the\x20ruling\x20payout\x20must\x20never\x20both\x20fire\x20for\x20one\x20task.\x20VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20freshly\x20created\x20Arbitration\x20defaults\x20to\x20PAUSED\x20—\x20unpause\x20is\x20the\x20ARBITRATOR\x27s\x20deployment\x20step\x20on\x20their\x20own\x20object,\x20never\x20this\x20build\x27s\x20duty;\x20bind\x20only\x20a\x20venue\x20already\x20unpaused\x20(a\x20paused\x20venue\x20rejects\x20every\x20filing\x20with\x20E_PAUSED).','commission_rate_bps\x20is\x200\x20and\x20is\x20NOT\x20a\x20placeholder:\x20WoWok\x20extracts\x20nothing\x20from\x20an\x20agent\x20task.\x20MERCHANT\x20FREEDOM:\x20an\x20orchestrator\x20that\x20IS\x20the\x20aggregator\x20(a\x20multi-agent\x20task\x20router)\x20may\x20charge\x20its\x20own\x20fee\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20Client\x20can\x20compute\x20pre-task,\x20never\x20an\x20implicit\x20remainder;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity\x20(an\x20empty\x20one\x20never\x20reaches\x20the\x20deployer;\x20on\x20chain\x20a\x20zero-address\x20Entity\x20burns\x20the\x20share);\x20(3)\x20no\x20mandatory\x20transit\x20pool,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20(an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool).','KEEPER\x20IS\x20A\x20FIRST-CLASS\x20DEPENDENCY:\x20the\x20evaluation-window\x20auto-release\x20and\x20any\x20ruling-driven\x20refund\x20execution\x20are\x20100%\x20off-chain\x20(machine.move\x20has\x20no\x20timer;\x20arb.move\x20rulings\x20only\x20change\x20case\x20state).\x20No\x20keeper\x20means\x20manual-only\x20confirmation\x20and\x20the\x20funds-stuck\x20failure\x20mode\x20returns.','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20task\x20posting\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention),\x20or\x20host\x20your\x20own\x20endpoint\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'evaluation_window_days':0x7,'dispute_timeout_days':0x7,'arbitration_fee_usd':0x0},'time_anchors':{'evaluation_timeout':'progress.history.time\x20(id\x201280,\x20next_node=\x27submitted\x27,\x20find=last)\x20—\x20the\x20submission\x20ENTRY\x20timestamp;\x20the\x20auto-release\x20keeper\x20fires\x20once\x20evaluation_window_days\x20elapses\x20from\x20it.\x20The\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','dispute_timeout':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard,\x20R-M1-11)'},'trust_mechanisms':['R1\x20dual-track\x20refund:\x20an\x20Evaluator\x20reject\x20refunds\x20via\x20the\x20Allocator;\x20an\x20arbitration\x20ruling\x20pays\x20via\x20the\x20compensation\x20fund\x20—\x20never\x20both\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false)','R2\x20independent\x20Evaluator\x20+\x20independent\x20arbitration\x20Permission,\x20both\x20enforced\x20disjoint\x20from\x20the\x20Client\x20and\x20Provider\x20(INV-A3;\x20contract\x20assertion\x20at\x20publish)','R3\x20compensation\x20fund\x20required\x20before\x20publish\x20whenever\x20the\x20fund\x20is\x20non-zero','R4\x20acceptance\x20gate:\x20an\x20explicit\x20Evaluator\x20ruling\x20OR\x20the\x20evaluation-window\x20timeout\x20—\x20the\x20Provider\x20can\x20never\x20self-accept\x20and\x20the\x20Client\x20can\x20never\x20self-reject\x20a\x20submitted\x20deliverable','R5\x20order-anchored\x20refund\x20recipient\x20(anti-hijack)','R6\x20Rate\x20sums\x20=\x2010000\x20on\x20every\x20allocator\x20group','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20evaluation-window\x20auto-release\x20and\x20the\x20dispute\x20timeout','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration\x20(0%\x20commission\x20is\x20machine-checkable)'],'keeper_dependencies':['evaluation-window\x20auto-release\x20(evaluation_window_days;\x20the\x20accept\x20guard\x27s\x20time\x20branch\x20is\x20ALLOWED\x20only\x20—\x20the\x20keeper\x20must\x20fire\x20it)','dispute\x20response\x20timeout\x20(keeper\x20obligation\x20over\x20the\x20Arbitration\x20case)','arbitration\x20ruling\x20execution\x20(a\x20ruling\x20only\x20changes\x20case\x20state;\x20the\x20keeper\x20allocates\x20per\x20ruling)'],'recommended_role':'supplier','role_rationale':'The\x20Provider\x20(human\x20or\x20autonomous\x20agent)\x20fulfils\x20the\x20Client\x27s\x20funded\x20task\x20and\x20is\x20the\x20demand/sub-order\x20taker\x20in\x20WoWok\x20terms;\x20a\x20task-router\x20orchestrator\x20flips\x20the\x20role\x20to\x20merchant.','differences':['acceptance_mode\x20\x27agent\x27:\x20an\x20INDEPENDENT\x20Evaluator\x20permission\x20entity\x20rules\x20the\x20release,\x20not\x20the\x20buyer\x20(the\x20freelance\x20milestone\x20templates\x20let\x20the\x20buyer\x20self-adjudicate)\x20—\x20the\x20agent-native\x20Client/Provider/Evaluator\x20triangle','No\x20bounded\x20revision\x20loop:\x20a\x20reject\x20ends\x20the\x20task\x20and\x20refunds,\x20so\x20INV-A1\x20stays\x20silent\x20by\x20omission\x20(contrast\x20design-contest\x27s\x20counted\x20winner-fix\x20loop)','The\x20plan\x27s\x20`expired`\x20terminal\x20is\x20the\x20timeout\x20LEG\x20of\x20a\x20dual-branch\x20accept\x20forward,\x20not\x20a\x20sibling\x20node\x20(INV-A2\x20fold)\x20—\x20silence\x20auto-releases\x20to\x20the\x20Provider,\x20it\x20never\x20auto-rejects','review_mode\x20\x27none\x27:\x20agent-to-agent\x20tasks\x20carry\x20no\x20human\x20star-review;\x20reputation\x20rides\x20the\x20Evaluator\x27s\x20on-chain\x20ruling\x20record'],'user_inputs':['evaluation_window_days\x20—\x20how\x20long\x20the\x20Evaluator\x20has\x20to\x20rule\x20before\x20the\x20keeper\x20auto-releases\x20to\x20the\x20Provider','dispute_timeout_days\x20—\x20dispute\x20response\x20timeout\x20(keeper-enforced\x20over\x20the\x20Arbitration\x20case)','arbitration_fee_usd\x20—\x20the\x20Arbitration\x20filing\x20fee\x20(default\x20near-zero\x20for\x20the\x20small-task\x20tail)','the\x20Evaluator\x20permission\x20entity\x20—\x20MUST\x20be\x20disjoint\x20from\x20the\x20Client\x20(order\x20payer)\x20and\x20the\x20Provider\x20(service\x20permission);\x20grant\x20it\x20slot\x20index\x201001\x20and\x20bind\x20only\x20an\x20operational\x20venue']},{'id':'freelance/bug-bounty','industry':'freelance','variant':'bug-bounty','product_ref':'hackerone','archetype':'challenger','review_mode':'none','acceptance_mode':'bounty','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'funded','role':'Entry:\x20the\x20sponsoring\x20company\x20(order_payer)\x20opens\x20a\x20bounty\x20intake\x20order\x20and\x20escrows\x20the\x20MAX-TIER\x20bounty\x20atomically\x20at\x20buy\x20—\x20the\x20pool\x20is\x20sized\x20for\x20the\x20worst-case\x20(critical)\x20payout\x20because\x20severity\x20is\x20unknown\x20until\x20triage;\x20the\x20Machine\x20starts\x20here.\x20No\x20unpaid\x20\x27open\x27\x20state\x20exists\x20on\x20chain\x20(the\x20program\x20brief\x20itself\x20is\x20an\x20off-Machine\x20WIP\x20listing)','semantic_role':'draft','from':[{'prev':''}]},{'name':'submitted','role':'Hunter\x20(human\x20researcher\x20or\x20autonomous\x20agent)\x20submits\x20the\x20vulnerability\x20report\x20with\x20a\x20WIP-hash\x20evidence\x20row\x20written\x20to\x20the\x20report\x20Repository\x20(id_from\x20signer\x20—\x20the\x20row\x20is\x20keyed\x20to\x20the\x20hunter,\x20which\x20is\x20what\x20later\x20pins\x20the\x20dynamic\x20Signer\x20payout\x20to\x20the\x20actual\x20reporter);\x20the\x20triage\x20clock\x20starts\x20from\x20this\x20ENTRY\x20timestamp','semantic_role':'delivered','from':[{'prev':'funded','forward':'SubmitReport','guard_key':'submit_evidence'}]},{'name':'settled','role':'Independent\x20triager\x20rules\x20the\x20report\x20VALID\x20and\x20writes\x20its\x20severity\x20band\x20(a\x20U64:\x201=low\x20…\x204=critical)\x20to\x20the\x20triage_decision\x20Repository\x20keyed\x20by\x20the\x20order.\x20Settlement\x20then\x20releases\x20the\x20severity-tiered\x20bounty\x20to\x20the\x20hunter\x20(the\x20dynamic\x20Signer\x20recipient)\x20and\x20sweeps\x20the\x20unfunded\x20remainder\x20back\x20to\x20the\x20company.\x20Bounty\x20pays\x20on\x20VALIDATION,\x20not\x20on\x20the\x20company\x27s\x20internal\x20remediation\x20—\x20the\x20fix\x20is\x20off-Machine','semantic_role':'final','from':[{'prev':'submitted','forward':'TriageValid','guard_key':'triage_valid','permission_index':0x3e9}]},{'name':'rejected','role':'Triager\x20rules\x20the\x20report\x20duplicate\x20/\x20not-applicable\x20/\x20informative\x20/\x20invalid\x20—\x20order-anchored\x20full\x20refund\x20of\x20the\x20escrow\x20to\x20the\x20company\x20(no\x20bounty\x20is\x20owed).\x20A\x20deliberate\x20triager\x20ruling,\x20never\x20a\x20timeout:\x20silence\x20NEVER\x20auto-rejects\x20and\x20NEVER\x20auto-pays,\x20so\x20an\x20unvalidated\x20report\x20cannot\x20drain\x20the\x20pool\x20and\x20a\x20stalled\x20triager\x20cannot\x20strip\x20a\x20hunter\x20who\x20filed\x20real\x20work\x20—\x20the\x20hunter\x27s\x20recourse\x20is\x20Arbitration','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'submitted','forward':'TriageReject','guard_key':'triage_reject','permission_index':0x3e9}]},{'name':'closed_cancel','role':'Pre-submission\x20company\x20cancellation\x20—\x20the\x20intake\x20order\x20escrowed\x20at\x20buy\x20but\x20no\x20hunter\x20has\x20submitted\x20a\x20report\x20yet,\x20so\x20the\x20company\x20may\x20void\x20and\x20take\x20a\x20full\x20order-anchored\x20refund\x20(R-DRAFT-VOID:\x20an\x20abandoned\x20or\x20ghost\x20intake\x20order\x20needs\x20a\x20single-hop\x20payer\x20exit;\x20escrow\x20is\x20funded\x20at\x20order_new,\x20not\x20at\x20first\x20forward).\x20Post-submission\x20outcomes\x20route\x20to\x20the\x20triager\x20(settled/rejected)\x20and\x20disputes\x20to\x20Arbitration,\x20never\x20here,\x20so\x20the\x20refund\x20and\x20a\x20bounty\x20payout\x20never\x20both\x20fire\x20(D-BUG-2)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'funded','forward':'CancelBeforeSubmit'}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20the\x20triager\x20/\x20service\x20staff\x20from\x20self-purchasing\x20a\x20bounty\x20intake\x20order\x20and\x20later\x20self-awarding\x20it\x20(Passport-gated\x20purchase\x20once\x20set)\x20—\x20the\x20funder,\x20the\x20triager\x20and\x20the\x20hunter\x20must\x20be\x20three\x20disjoint\x20identities'},{'template_id':'pattern.repository_data_check','host':'machine','key':'submit_evidence','purpose':'Report-evidence\x20gate\x20(funded->submitted):\x20the\x20vulnerability\x20report\x27s\x20WIP\x20hash\x20must\x20be\x20written\x20to\x20the\x20report\x20Repository\x20BEFORE\x20the\x20forward\x20passes,\x20so\x20the\x20triager\x20rules\x20against\x20a\x20tamper-evident\x20artifact,\x20not\x20prose.\x20The\x20report\x20policy\x20is\x20id_from=signer,\x20which\x20keys\x20the\x20row\x20to\x20the\x20HUNTER\x20—\x20that\x20key\x20is\x20the\x20anchor\x20the\x20settlement\x20Signer-binding\x20leg\x20later\x20reads\x20to\x20prove\x20the\x20claimant\x20IS\x20the\x20reporter.\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20(audit-261012\x20B3)'},{'template_id':'pattern.identity_check_single','host':'machine','key':'triage_valid','purpose':'Triager\x20VALID\x20ruling\x20(submitted->settled,\x20TriageValid\x20forward):\x20binds\x20the\x20forward\x20to\x20the\x20single\x20independent\x20triager\x20permission\x20entity\x20(slot\x20index\x201001),\x20disjoint\x20from\x20both\x20the\x20company\x20(order\x20payer)\x20and\x20the\x20hunter.\x20The\x20triager\x20also\x20writes\x20the\x20severity\x20band\x20(U64\x201..4)\x20to\x20the\x20triage_decision\x20Repository\x20keyed\x20by\x20the\x20order\x20—\x20the\x20value\x20the\x20four\x20settle\x20tier-guards\x20range-scan.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05)\x20so\x20a\x20sibling\x20program\x27s\x20passport\x20cannot\x20rule\x20here'},{'template_id':'pattern.identity_check_single','host':'machine','key':'triage_reject','purpose':'Triager\x20REJECT\x20ruling\x20(submitted->rejected,\x20TriageReject\x20forward):\x20the\x20same\x20independent\x20triager\x20slot\x20(1001).\x20A\x20reject\x20(duplicate\x20/\x20not-applicable\x20/\x20informative\x20/\x20invalid)\x20is\x20an\x20explicit\x20ruling,\x20never\x20a\x20default\x20—\x20there\x20is\x20NO\x20timeout\x20that\x20auto-rejects,\x20so\x20a\x20stalled\x20triager\x20leaves\x20the\x20order\x20at\x20\x27submitted\x27\x20for\x20Arbitration\x20rather\x20than\x20silently\x20stripping\x20the\x20hunter'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_critical','purpose':'CRITICAL-tier\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20progress.current\x20==\x20settled\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20the\x20chain-derived\x20protocol-254\x20once\x20key\x20(replay\x20aborts\x2016),\x20PLUS\x20a\x20severity-band\x20leg\x20(pattern.tiered_amount_ladder\x20over\x20the\x20triage_decision\x20Repository\x20U64:\x20band\x20>=\x204,\x20read\x20via\x20query_repository_data_find_where\x20range-scan\x20pinned\x20to\x20THIS\x20order)\x20and\x20a\x20SIGNER-BINDING\x20leg\x20(context(Signer)\x20==\x20the\x20report\x20Repository\x20row\x27s\x20id_from-signer\x20key,\x20so\x20the\x20dynamic\x20Signer\x20recipient\x20is\x20provably\x20the\x20hunter\x20who\x20filed\x20THIS\x20report\x20—\x20a\x20third\x20party\x20cannot\x20front-run\x20the\x20claim).\x20Bands\x20are\x20DISJOINT:\x20exactly\x20one\x20of\x20settle_critical/high/medium/low\x20can\x20ever\x20pass'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_high','purpose':'HIGH-tier\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20identical\x20shape\x20to\x20settle_critical\x20but\x20the\x20severity\x20band\x20is\x203\x20<=\x20band\x20<\x204\x20(logic_and[greater_or_equal(band,3),\x20lesser(band,4)]\x20over\x20the\x20triage_decision\x20Repository\x20value)\x20+\x20the\x20same\x20order.service,\x20254-once\x20and\x20Signer-binding\x20legs.\x20Disjoint\x20from\x20the\x20other\x20three\x20tiers'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_medium','purpose':'MEDIUM-tier\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20severity\x20band\x202\x20<=\x20band\x20<\x203\x20over\x20the\x20triage_decision\x20Repository\x20value\x20+\x20order.service\x20+\x20254-once\x20+\x20Signer-binding.\x20Disjoint\x20from\x20the\x20other\x20three\x20tiers'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_low','purpose':'LOW-tier\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20severity\x20band\x201\x20<=\x20band\x20<\x202\x20over\x20the\x20triage_decision\x20Repository\x20value\x20+\x20order.service\x20+\x20254-once\x20+\x20Signer-binding.\x20The\x20>=\x201\x20floor\x20excludes\x20band\x200\x20(no\x20severity\x20recorded\x20=\x20not\x20a\x20valid\x20payout).\x20Disjoint\x20from\x20the\x20other\x20three\x20tiers'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate:\x20a\x20node\x20gate\x20over\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}\x20resolved\x20from\x20THIS\x20template\x27s\x20machine_shape\x20as\x20ONE\x20top-level\x20n-ary\x20logic_or\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20blocks\x20the\x20refund\x20once\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid).\x20NODE\x20GATE\x20IS\x20MANDATORY\x20(audit-261012\x20B4):\x20an\x20identity-only\x20refund\x20guard\x20lets\x20the\x20company\x20drain\x20the\x20escrow\x20the\x20moment\x20it\x20opens\x20the\x20intake\x20order.\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017\x20—\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter):\x20anti-hijack\x20is\x20structural\x20(GuardIdentifier(0)\x20recipient),\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening.\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg.\x20NEVER\x20gate\x20on\x20order.dispute\x20count\x20==\x200\x20(query\x20id\x201564):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Company-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20a\x20node-pinned\x20rail\x20aborts\x207\x20after\x20a\x20keeper\x20moves\x20the\x20order\x20on\x20—\x20F-51\x20—\x20and\x20CAT-C2\x27s\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20live;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion).\x20Pays\x20Rate\x2010000\x20to\x20the\x20company\x20(merchant)\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'}],'allocator':{'recipient':'signer','count':0xc,'mode':'rate','once_per_order':!![],'refund_track':'order_anchored','description':'Severity-tiered\x20bounty\x20settlement\x20on\x20\x27settled\x27.\x20INVERTED\x20FUNDING\x20TOPOLOGY:\x20unlike\x20a\x20normal\x20sale\x20(buyer\x20funds,\x20merchant\x20receives),\x20here\x20the\x20sponsoring\x20COMPANY\x20is\x20the\x20order_payer\x20that\x20funds\x20the\x20escrow\x20and\x20the\x20HUNTER\x20is\x20the\x20payee\x20—\x20so\x20the\x20hunter\x20cannot\x20be\x20a\x20build-time-fixed\x20Entity\x20(a\x20program\x20has\x20many\x20hunters\x20across\x20many\x20orders)\x20nor\x20a\x20GuardIdentifier\x20(that\x20resolves\x20to\x20the\x20order\x27s\x20for_object\x20=\x20the\x20order_payer\x20=\x20the\x20company,\x20paying\x20the\x20funder\x20back).\x20The\x20ONLY\x20dynamic\x20per-order\x20payee\x20the\x20chain\x20offers\x20is\x20Recipient::Signer\x20(allocation.move:615-617,\x20tx_context::sender)\x20—\x20the\x20hunter\x20claims\x20by\x20signing\x20the\x20settlement,\x20and\x20the\x20settle\x20guard\x27s\x20Signer-binding\x20leg\x20(signer\x20==\x20the\x20report\x20Repository\x20row\x27s\x20id_from-signer\x20key)\x20pins\x20that\x20claim\x20to\x20the\x20actual\x20reporter\x20so\x20it\x20cannot\x20be\x20front-run.\x20Each\x20severity\x20tier\x20is\x20its\x20OWN\x20allocator\x20(own\x20guard_key)\x20whose\x20Rate\x20legs\x20sum\x20to\x20exactly\x2010000:\x20the\x20hunter\x20takes\x20the\x20tier\x27s\x20bounty\x20Rate\x20and\x20the\x20COMPANY\x20(merchant\x20=\x20the\x20funder)\x20takes\x20the\x20complementary\x20Rate\x20that\x20returns\x20the\x20unawarded\x20remainder\x20—\x20an\x20EXPLICIT,\x20auditable\x20split\x20rather\x20than\x20an\x20uncapped\x20Surplus\x20sweep.\x20A\x20Rate-0\x20GuardIdentifier(0)\x20anchor\x20binds\x20each\x20tier\x20guard\x20to\x20the\x20paying\x20order\x20(CR-01).\x20Tiers\x20are\x20DISJOINT\x20severity\x20bands,\x20so\x20exactly\x20one\x20fires\x20per\x20report.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission.\x20Full\x20escrow\x20refund\x20to\x20the\x20company\x20(Rate\x2010000\x20via\x20the\x20order-anchored\x20recipient)\x20on\x20rejected\x20or\x20a\x20pre-submission\x20closed_cancel,\x20and\x20only\x20while\x20no\x20arbitration\x20award\x20has\x20paid\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false);\x20an\x20awarded\x20order\x27s\x20escrow\x20instead\x20exits\x20via\x20the\x20paired\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20company),\x20so\x20refund\x20and\x20ruling\x20payouts\x20never\x20both\x20fire\x20(D-BUG-2).','rows':[{'track':'settlement','recipient':'signer','recipient_key':'hunter','mode':'rate','value':0x2710,'guard_key':'settle_critical','note':'CRITICAL\x20bounty\x20to\x20the\x20hunter\x20(dynamic\x20Signer,\x20identity-bound\x20to\x20the\x20report\x20submitter):\x20a\x20critical\x20report\x20takes\x20the\x20WHOLE\x20max-tier\x20pool\x20(Rate\x2010000),\x20so\x20there\x20is\x20no\x20company\x20remainder\x20leg\x20on\x20this\x20tier.\x20Recipient::Signer\x20is\x20the\x20only\x20per-order-dynamic\x20payee;\x20the\x20settle_critical\x20guard\x27s\x20Signer-binding\x20leg\x20proves\x20the\x20claimant\x20filed\x20THIS\x20report.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_critical','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20submitted\x20bounty\x20ORDER\x20the\x20settle_critical\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20program\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20guard_key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.\x20hunter\x2010000\x20+\x20anchor\x200\x20=\x2010000\x20(ERATE_NOT_10000\x20satisfied).'},{'track':'settlement','recipient':'signer','recipient_key':'hunter','mode':'rate','value':0x1770,'guard_key':'settle_high','note':'HIGH\x20bounty\x20to\x20the\x20hunter\x20(dynamic\x20Signer):\x206000\x20bps\x20of\x20the\x20max-tier\x20pool.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0xfa0,'guard_key':'settle_high','note':'Company\x20(merchant\x20=\x20the\x20funding\x20order_payer)\x20recovers\x20the\x204000\x20bps\x20the\x20high\x20tier\x20did\x20not\x20award\x20—\x20an\x20EXPLICIT\x20Rate\x20leg,\x20not\x20an\x20uncapped\x20Surplus,\x20so\x20the\x20buyer\x20sees\x20the\x20exact\x20split\x20pre-order.\x20Recipient\x20MUST\x20be\x20a\x20non-empty\x20Entity\x20(a\x20blank\x20one\x20routes\x20the\x20share\x20to\x20the\x20deployer\x20via\x20the\x20SDK\x20resolver).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_high','note':'Rate-0\x20ORDER\x20anchor\x20(CR-01)\x20binding\x20settle_high\x20to\x20the\x20paying\x20bounty\x20order;\x20pays\x20nothing.\x20hunter\x206000\x20+\x20company\x204000\x20+\x20anchor\x200\x20=\x2010000.'},{'track':'settlement','recipient':'signer','recipient_key':'hunter','mode':'rate','value':0xbb8,'guard_key':'settle_medium','note':'MEDIUM\x20bounty\x20to\x20the\x20hunter\x20(dynamic\x20Signer):\x203000\x20bps\x20of\x20the\x20max-tier\x20pool.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x1b58,'guard_key':'settle_medium','note':'Company\x20(merchant/funder)\x20recovers\x20the\x20unawarded\x207000\x20bps\x20on\x20a\x20medium-severity\x20payout\x20via\x20an\x20explicit\x20Rate\x20leg.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_medium','note':'Rate-0\x20ORDER\x20anchor\x20(CR-01)\x20binding\x20settle_medium\x20to\x20the\x20paying\x20bounty\x20order;\x20pays\x20nothing.\x20hunter\x203000\x20+\x20company\x207000\x20+\x20anchor\x200\x20=\x2010000.'},{'track':'settlement','recipient':'signer','recipient_key':'hunter','mode':'rate','value':0x3e8,'guard_key':'settle_low','note':'LOW\x20bounty\x20to\x20the\x20hunter\x20(dynamic\x20Signer):\x201000\x20bps\x20of\x20the\x20max-tier\x20pool\x20—\x20the\x20smallest\x20tier\x20still\x20pays\x20a\x20POSITIVE\x20amount,\x20since\x20a\x20Rate-0\x20hunter\x20leg\x20would\x20leave\x20the\x20tier\x20distributing\x20nothing\x20to\x20the\x20reporter\x20and\x20trip\x20the\x20zero-distribution\x20abort.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2328,'guard_key':'settle_low','note':'Company\x20(merchant/funder)\x20recovers\x20the\x20unawarded\x209000\x20bps\x20on\x20a\x20low-severity\x20payout\x20—\x20the\x20largest\x20company\x20remainder,\x20since\x20low\x20pays\x20the\x20smallest\x20hunter\x20Rate.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_low','note':'Rate-0\x20ORDER\x20anchor\x20(CR-01)\x20binding\x20settle_low\x20to\x20the\x20paying\x20bounty\x20order;\x20pays\x20nothing.\x20hunter\x201000\x20+\x20company\x209000\x20+\x20anchor\x200\x20=\x2010000.'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Company-recovery\x20rail\x20(escrow-exit\x20invariant):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20back\x20to\x20the\x20company\x20(merchant/funder)\x20Entity\x20so\x20an\x20awarded\x20intake\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20the\x20settle\x20tiers/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20full\x20refund\x20to\x20the\x20COMPANY\x20on\x20rejected\x20(dup/na/informative/invalid)\x20or\x20pre-submission\x20closed_cancel\x20(refund_gate\x20node-gates\x20the\x20FULL\x20refundable\x20set\x20{rejected,\x20closed_cancel}).\x20GuardIdentifier(0)\x20resolves\x20to\x20the\x20paying\x20Order\x20and\x20allocation.move\x20ERECIPIENT_NOT_FOR_OBJECT\x20makes\x20redirection\x20structurally\x20impossible;\x20the\x20company\x20claims\x20via\x20the\x20two-step\x20order\x20receive.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false\x20so\x20an\x20awarded\x20order\x20cannot\x20also\x20drain\x20the\x20refund\x20rail\x20(D-BUG-2).\x20Set\x20this\x20allocator\x27s\x20once_per_order=true\x20and\x20register\x20the\x20{identifier:254,\x20b_submission:true}\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x20with\x20the\x20once-triggered\x20code.\x20This\x20refund\x20fires\x20once\x20per\x20order,\x20so\x20the\x20arming\x20is\x20safe\x20here;\x20NEVER\x20carry\x20it\x20onto\x20a\x20refund\x20rail\x20that\x20can\x20re-enter\x20its\x20refund\x20node\x20in\x20a\x20later\x20period\x20—\x20254\x20keys\x20on\x20payment_info.for_object\x20and\x20would\x20abort\x2016\x20forever\x20(OFN\x20#P-04).'}]},'key_risk':'The\x20company\x20funds\x20the\x20escrow\x20AND\x20its\x20independent\x20triager\x20grades\x20severity:\x20a\x20triager\x20that\x20under-grades\x20or\x20a\x20company\x20that\x20stalls\x20leaves\x20the\x20hunter\x27s\x20only\x20recourse\x20in\x20Arbitration,\x20and\x20the\x20compensation\x20fund\x20pays\x20the\x20order\x20owner\x20(the\x20company),\x20so\x20it\x20cannot\x20indemnify\x20the\x20hunter\x20directly.','build_notes':['INVERTED\x20FUNDING\x20TOPOLOGY\x20(the\x20whole\x20design\x20turns\x20on\x20this):\x20in\x20a\x20normal\x20sale\x20the\x20buyer\x20funds\x20and\x20the\x20merchant\x20receives,\x20so\x20the\x20payee\x20is\x20a\x20build-time\x20Entity.\x20A\x20bounty\x20inverts\x20it\x20—\x20the\x20sponsoring\x20COMPANY\x20is\x20the\x20order_payer\x20that\x20funds,\x20and\x20the\x20HUNTER\x20(a\x20different\x20identity\x20on\x20every\x20order)\x20is\x20the\x20payee.\x20Neither\x20Entity\x20(fixed\x20at\x20build;\x20a\x20program\x20has\x20many\x20hunters)\x20nor\x20GuardIdentifier\x20(resolves\x20to\x20for_object\x20=\x20the\x20order\x20=\x20the\x20company,\x20paying\x20the\x20funder\x20back)\x20can\x20express\x20a\x20per-order-dynamic\x20payee.\x20Recipient::Signer\x20(allocation.move:615-617)\x20is\x20the\x20ONLY\x20mechanism:\x20the\x20hunter\x20claims\x20by\x20signing\x20the\x20settlement\x20tx.\x20This\x20is\x20why\x20the\x20settle\x20guards\x20carry\x20a\x20MANDATORY\x20Signer-binding\x20leg\x20(context(Signer)\x20==\x20the\x20report\x20Repository\x20row\x27s\x20id_from-signer\x20key)\x20—\x20without\x20it\x20any\x20party\x20able\x20to\x20satisfy\x20the\x20tier\x20gate\x20could\x20redirect\x20the\x20bounty\x20to\x20itself.','SEVERITY\x20LADDER\x20(pattern.tiered_amount_ladder\x20over\x20a\x20Repository\x20value,\x20NOT\x20over\x20time):\x20Allocation\x20sharing\x20values\x20are\x20STATIC,\x20so\x20a\x20runtime-variable\x20payout\x20is\x20expressed\x20as\x20four\x20static\x20tier\x20allocators\x20selected\x20by\x20an\x20interval\x20guard\x20over\x20the\x20triage_decision\x20Repository\x20U64\x20(1=low\x20…\x204=critical).\x20The\x20bands\x20MUST\x20be\x20disjoint\x20and\x20exhaustive\x20over\x20{1,2,3,4}:\x20an\x20overlap\x20double-pays,\x20a\x20gap\x20leaves\x20that\x20severity\x20with\x20NO\x20payable\x20branch\x20and\x20the\x20escrow\x20waits\x20for\x20manual\x20resolution.\x20Each\x20tier\x20is\x20its\x20own\x20guard_key/allocator\x20whose\x20Rate\x20legs\x20sum\x20to\x20exactly\x2010000\x20on\x20their\x20own\x20(hunter\x20Rate\x20+\x20company\x20Rate\x20+\x20Rate-0\x20order\x20anchor),\x20so\x20the\x20on-chain\x20ERATE_NOT_10000\x20assert\x20is\x20satisfied\x20per\x20tier\x20without\x20relying\x20on\x20a\x20Surplus\x20exemption.','MAX-TIER\x20FUNDING\x20+\x20EXPLICIT\x20COMPANY\x20REMAINDER:\x20severity\x20is\x20unknown\x20at\x20buy,\x20so\x20the\x20company\x20escrows\x20the\x20CRITICAL\x20(max)\x20amount;\x20a\x20lower-severity\x20report\x20pays\x20the\x20hunter\x27s\x20tier\x20Rate\x20and\x20an\x20EXPLICIT\x20complementary\x20company\x20Rate\x20returns\x20the\x20unawarded\x20remainder\x20to\x20the\x20funder.\x20This\x20is\x20deliberately\x20NOT\x20an\x20uncapped\x20Surplus\x20sweep\x20—\x20the\x20split\x20is\x20a\x20fixed,\x20auditable\x20pair\x20of\x20Rate\x20legs\x20the\x20company\x20can\x20read\x20pre-order\x20(critical\x20pays\x20the\x20hunter\x20the\x20whole\x20pool,\x20so\x20it\x20carries\x20no\x20company\x20leg).\x20Keep\x20the\x20company\x20recipient\x20an\x20explicit\x20NON-EMPTY\x20Entity\x20(\x27merchant\x27);\x20a\x20blank\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deployer\x20via\x20the\x20SDK\x20resolver.','ONCE\x20SLOT\x20ARMING\x20+\x20SCOPE\x20(v54,\x20audit-261012\x20B7):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20each\x20SETTLEMENT\x20allocator\x20Guard\x20(the\x20four\x20settle\x20tiers;\x20the\x20refund\x20guard\x20here\x20is\x20one-shot\x20per\x20order,\x20so\x20arming\x20254\x20is\x20harmless\x20—\x20never\x20carry\x20it\x20to\x20a\x20refund\x20rail\x20that\x20can\x20re-enter\x20its\x20refund\x20node\x20in\x20a\x20later\x20period,\x2016\x20forever,\x20OFN\x20#P-04)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20payment_info.for_object\x20(the\x20bound\x20Order),\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016.\x20SCOPE\x20(C10,\x20mainnet-verified):\x20the\x20once\x20key\x20is\x20(guard,\x20allocator\x20leg,\x20bcs(for_object))\x20stored\x20ON\x20the\x20Allocation\x20—\x20once\x20PER\x20ORDER\x20per\x20allocation;\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20is\x20what\x20makes\x20each\x20tier\x20Guard\x20refuse\x20a\x20sibling\x20program\x27s\x20passport.','ACCEPTANCE\x20COMPONENT\x20(D12\x20重构\x202,\x20acceptance_mode\x20\x27bounty\x27):\x20the\x20validity/severity\x20decision\x20is\x20the\x20independent\x20triager\x27s,\x20never\x20the\x20funding\x20company\x27s\x20alone\x20(INV-A3\x20—\x20compile\x20hard-blocks\x20a\x20judge-decided\x20mode\x20whose\x20arbitration_mode\x20is\x20not\x20\x27third_party\x27).\x20Grant\x20the\x20triager\x20permission\x20entity\x20slot\x20index\x201001,\x20disjoint\x20from\x20BOTH\x20the\x20company\x20(order\x20payer)\x20and\x20the\x20hunter;\x20bind\x20only\x20an\x20already-operational\x20Arbitration\x20venue\x20as\x20the\x20contest\x20channel.','SILENCE\x20NEVER\x20AUTO-PAYS\x20(the\x20deliberate\x20contrast\x20with\x20agent-task):\x20agent-task\x20auto-RELEASES\x20to\x20the\x20worker\x20on\x20timeout\x20because\x20the\x20work\x20is\x20presumptively\x20owed.\x20A\x20bounty\x20is\x20the\x20opposite\x20—\x20an\x20unvalidated\x20report\x20draining\x20the\x20pool\x20is\x20the\x20core\x20risk\x20—\x20so\x20there\x20is\x20NO\x20accept-timeout\x20leg.\x20If\x20the\x20triager\x20stalls,\x20the\x20order\x20simply\x20stays\x20at\x20\x27submitted\x27\x20and\x20the\x20hunter\x27s\x20recourse\x20is\x20Arbitration\x20(a\x20dispute),\x20not\x20a\x20keeper\x20auto-award.\x20This\x20also\x20means\x20INV-A2\x20(accept/timeout\x20sibling\x20race)\x20does\x20not\x20arise:\x20there\x20is\x20no\x20timeout\x20sibling\x20on\x20the\x20accept\x20edge.','NO\x20REVISION\x20LOOP\x20(INV-A1\x20silent\x20by\x20omission):\x20a\x20report\x20is\x20triaged\x20ONCE\x20(valid+severity,\x20or\x20rejected)\x20—\x20there\x20is\x20no\x20bounded\x20resubmission\x20loop,\x20so\x20fee_params\x20declares\x20NO\x20revision_rounds_max\x20and\x20compile\x20raises\x20no\x20ACCEPTANCE_REVISION_UNBOUNDED.\x20Contrast\x20design-contest,\x20which\x20carries\x20a\x20counted\x20winner-fix\x20loop\x20and\x20MUST\x20mount\x20a\x20counter-backed\x20Repository\x20guard.','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20az-mn-261007\x20T5):\x20every\x20terminal\x20keeps\x20an\x20exit\x20under\x20BOTH\x20polarities\x20of\x20the\x20arbitration\x20payout\x20state.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20the\x20paired\x20recover_gate\x20row\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20company)\x20ships\x20in\x20the\x20allocator\x20so\x20an\x20awarded\x20intake\x20order\x27s\x20escrow\x20still\x20exits.\x20Resolve\x20both\x20guard\x20designs\x20before\x20the\x20Machine\x20publish.\x20NEVER\x20gate\x20the\x20refund\x20rail\x20on\x20order.dispute\x20count\x20==\x200\x20(append-only\x20vector\x20->\x20one-way\x20door).','COMPENSATION\x20FUND\x20LIMITATION\x20(honest\x20disclosure):\x20the\x20ruling\x20payout\x20path\x20pays\x20the\x20ORDER\x20OWNER\x20(the\x20company)\x20—\x20there\x20is\x20no\x20on-chain\x20path\x20for\x20the\x20compensation\x20fund\x20to\x20indemnify\x20the\x20HUNTER.\x20If\x20the\x20company\x20wrongly\x20rejects\x20a\x20valid\x20report,\x20the\x20hunter\x27s\x20on-chain\x20recourse\x20is\x20to\x20dispute\x20in\x20Arbitration\x20and\x20have\x20the\x20keeper\x20trigger\x20the\x20matching\x20settle\x20tier\x20from\x20the\x20escrow;\x20the\x20fund\x20itself\x20cannot\x20pay\x20the\x20hunter.\x20Document\x20this\x20asymmetry\x20to\x20hunters\x20pre-submission.','DISPUTES\x20route\x20through\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11):\x20Arbitration\x20(compensation_fund)\x20and\x20Allocator\x20(escrow)\x20are\x20independent\x20systems\x20by\x20design;\x20the\x20refund\x20Allocator\x20and\x20a\x20ruling-driven\x20settle\x20must\x20never\x20both\x20fire\x20for\x20one\x20report.\x20VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20freshly\x20created\x20Arbitration\x20defaults\x20to\x20PAUSED\x20—\x20unpause\x20is\x20the\x20ARBITRATOR\x27s\x20deployment\x20step\x20on\x20their\x20own\x20object,\x20never\x20this\x20build\x27s\x20duty;\x20bind\x20only\x20a\x20venue\x20already\x20unpaused\x20(a\x20paused\x20venue\x20rejects\x20every\x20filing\x20with\x20E_PAUSED).','commission_rate_bps\x20is\x200\x20and\x20is\x20NOT\x20a\x20placeholder:\x20WoWok\x20extracts\x20nothing\x20from\x20a\x20bounty.\x20A\x20program\x20that\x20IS\x20an\x20aggregator\x20(a\x20managed\x20bounty\x20platform)\x20may\x20charge\x20its\x20own\x20fee\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20company\x20can\x20compute\x20pre-program,\x20never\x20an\x20implicit\x20remainder;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity;\x20(3)\x20no\x20mandatory\x20transit\x20pool,\x20and\x20never\x20take\x20the\x20fee\x20by\x20silently\x20shrinking\x20the\x20hunter\x27s\x20Rate\x20leg\x20(the\x20complementary\x20company\x20Rate\x20is\x20the\x20funder\x27s\x20own\x20remainder,\x20not\x20a\x20platform\x20carve-out).','KEEPER\x20IS\x20A\x20FIRST-CLASS\x20DEPENDENCY:\x20triage-window\x20reminders,\x20the\x20ruling-driven\x20settle\x20execution\x20and\x20any\x20dispute-triggered\x20refund\x20are\x20100%\x20off-chain\x20(machine.move\x20has\x20no\x20timer;\x20arb.move\x20rulings\x20only\x20change\x20case\x20state).\x20No\x20keeper\x20means\x20manual-only\x20triage\x20and\x20the\x20funds-stuck\x20failure\x20mode\x20returns.','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20bounty\x20program\x20brief\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention),\x20or\x20host\x20your\x20own\x20endpoint\x20for\x20long-lived\x20mainnet\x20programs.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'triage_window_days':0x5,'dispute_timeout_days':0x7,'arbitration_fee_usd':0x0},'time_anchors':{'triage_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27submitted\x27,\x20find=last)\x20—\x20the\x20report\x20submission\x20ENTRY\x20timestamp;\x20triage_window_days\x20is\x20the\x20SLA\x20after\x20which\x20the\x20hunter\x20may\x20escalate\x20to\x20Arbitration.\x20There\x20is\x20NO\x20auto-release\x20leg\x20on\x20this\x20anchor\x20(silence\x20never\x20auto-pays\x20a\x20bounty).\x20The\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','dispute_timeout':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard,\x20R-M1-11)'},'trust_mechanisms':['R1\x20dual-track\x20payout:\x20a\x20valid\x20report\x20pays\x20via\x20the\x20severity-tier\x20Allocator;\x20an\x20arbitration\x20ruling\x20pays\x20via\x20the\x20compensation\x20fund\x20—\x20never\x20both\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false)','R2\x20independent\x20triager\x20+\x20independent\x20arbitration\x20Permission,\x20both\x20enforced\x20disjoint\x20from\x20the\x20company\x20(order\x20payer)\x20and\x20the\x20hunter\x20(INV-A3;\x20contract\x20assertion\x20at\x20publish)','R3\x20compensation\x20fund\x20required\x20before\x20publish\x20whenever\x20the\x20fund\x20is\x20non-zero\x20(with\x20the\x20honest\x20caveat\x20that\x20it\x20indemnifies\x20the\x20order\x20owner,\x20not\x20the\x20hunter)','R4\x20acceptance\x20gate:\x20an\x20explicit\x20triager\x20ruling\x20(valid+severity,\x20or\x20reject)\x20—\x20the\x20hunter\x20can\x20never\x20self-grade\x20and\x20the\x20company\x20can\x20never\x20silently\x20ignore\x20a\x20filed\x20report\x20without\x20leaving\x20it\x20disputable','R5\x20Signer-binding:\x20the\x20dynamic\x20hunter\x20payout\x20is\x20pinned\x20to\x20the\x20report\x20Repository\x20row\x27s\x20id_from-signer\x20key,\x20so\x20the\x20claimant\x20is\x20provably\x20the\x20reporter\x20(anti-front-run)','R6\x20severity\x20bands\x20disjoint\x20+\x20exhaustive;\x20each\x20tier\x27s\x20Rate\x20legs\x20sum\x20to\x20exactly\x2010000\x20(hunter\x20Rate\x20+\x20explicit\x20complementary\x20company\x20Rate),\x20no\x20uncapped\x20Surplus','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20(tiers,\x20triager,\x20venue)\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound\x20to\x20the\x20program','R9\x20keepers\x20for\x20the\x20triage-window\x20SLA,\x20the\x20ruling-driven\x20settle\x20and\x20the\x20dispute\x20timeout','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration\x20(0%\x20commission,\x20per-tier\x20bps\x20machine-checkable)'],'keeper_dependencies':['triage-window\x20SLA\x20reminder\x20(triage_window_days;\x20NO\x20auto-pay\x20—\x20escalation\x20is\x20the\x20hunter\x27s\x20Arbitration\x20right,\x20not\x20a\x20keeper\x20award)','ruling-driven\x20settlement\x20(a\x20valid\x20triage\x20records\x20severity;\x20the\x20keeper\x20submits\x20the\x20matching\x20tier\x27s\x20settle\x20passport\x20to\x20release\x20the\x20bounty)','dispute\x20response\x20timeout\x20+\x20arbitration\x20ruling\x20execution\x20(a\x20ruling\x20only\x20changes\x20case\x20state;\x20the\x20keeper\x20allocates\x20per\x20ruling)'],'recommended_role':'merchant','role_rationale':'The\x20sponsoring\x20company\x20builds\x20and\x20operates\x20the\x20bounty\x20program\x20Service,\x20funds\x20each\x20intake\x20order\x20as\x20order_payer,\x20and\x20delegates\x20grading\x20to\x20an\x20independent\x20triager\x20permission;\x20the\x20hunter\x20is\x20the\x20dynamic\x20Signer\x20payee,\x20not\x20a\x20permission\x20entity.','differences':['acceptance_mode\x20\x27bounty\x27:\x20an\x20INDEPENDENT\x20triager\x20grades\x20validity\x20+\x20severity\x20(the\x20验收裁判\x20component),\x20and\x20the\x20payout\x20is\x20a\x20severity-tiered\x20ladder\x20over\x20a\x20Repository\x20U64\x20—\x20not\x20a\x20single\x20milestone\x20release','INVERTED\x20funding:\x20the\x20company\x20(order_payer)\x20funds\x20and\x20the\x20hunter\x20is\x20paid\x20as\x20a\x20dynamic\x20Recipient::Signer,\x20identity-bound\x20to\x20the\x20report\x20submitter\x20—\x20the\x20only\x20per-order-dynamic\x20payee\x20the\x20chain\x20offers','No\x20auto-pay\x20timeout:\x20silence\x20NEVER\x20releases\x20an\x20unvalidated\x20bounty\x20(the\x20opposite\x20polarity\x20of\x20agent-task\x27s\x20silence-favors-the-worker\x20auto-release);\x20a\x20stalled\x20triager\x20routes\x20the\x20hunter\x20to\x20Arbitration','No\x20revision\x20loop:\x20a\x20report\x20is\x20graded\x20once,\x20so\x20INV-A1\x20stays\x20silent\x20by\x20omission\x20(contrast\x20design-contest\x27s\x20counted\x20winner-fix\x20loop)','review_mode\x20\x27none\x27:\x20reputation\x20rides\x20the\x20triager\x27s\x20on-chain\x20severity\x20rulings,\x20not\x20a\x20human\x20star-review'],'user_inputs':['the\x20four\x20severity-tier\x20payout\x20splits\x20—\x20each\x20tier\x27s\x20hunter\x20Rate\x20vs\x20the\x20complementary\x20company\x20Rate\x20in\x20the\x20allocator\x20rows\x20(critical\x20pays\x20the\x20hunter\x20the\x20whole\x20pool;\x20high/medium/low\x20default\x206000/3000/1000\x20bps\x20to\x20the\x20hunter).\x20These\x20row\x20Rates\x20are\x20the\x20authoritative\x20money\x20shape,\x20tuned\x20per\x20program','triage_window_days\x20—\x20the\x20triage\x20SLA\x20after\x20which\x20the\x20hunter\x20may\x20escalate\x20to\x20Arbitration\x20(NOT\x20an\x20auto-pay\x20timer)','dispute_timeout_days\x20+\x20arbitration_fee_usd\x20—\x20dispute\x20response\x20window\x20and\x20filing\x20fee\x20(default\x20near-zero\x20for\x20the\x20small-report\x20tail)','the\x20independent\x20triager\x20permission\x20entity\x20—\x20MUST\x20be\x20disjoint\x20from\x20the\x20company\x20(order\x20payer)\x20and\x20the\x20hunter;\x20grant\x20it\x20slot\x20index\x201001\x20and\x20bind\x20only\x20an\x20operational\x20Arbitration\x20venue']},{'id':'freelance/design-contest','industry':'freelance','variant':'design-contest','product_ref':'ninety-nine-designs','archetype':'challenger','review_mode':'none','acceptance_mode':'contest','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'funded','role':'Entry:\x20the\x20sponsoring\x20company\x20(order_payer)\x20opens\x20the\x20contest\x20order\x20and\x20escrows\x20the\x20GUARANTEED\x20prize\x20pool\x20atomically\x20at\x20buy\x20—\x20a\x20design\x20contest\x20is\x20guaranteed-award,\x20so\x20the\x20prize\x20is\x20committed\x20up-front\x20and\x20MUST\x20go\x20to\x20a\x20placed\x20winner;\x20the\x20only\x20no-payout\x20exits\x20are\x20a\x20pre-submission\x20void\x20(closed_cancel)\x20or\x20a\x20judged\x20no-valid-entry\x20(voided).\x20The\x20Machine\x20starts\x20here.\x20No\x20unpaid\x20\x27open\x27\x20state\x20exists\x20on\x20chain\x20(the\x20contest\x20brief\x20itself\x20is\x20an\x20off-Machine\x20WIP\x20listing)','semantic_role':'draft','from':[{'prev':''}]},{'name':'judging','role':'Submissions\x20closed\x20(the\x20submission\x20window\x20elapsed)\x20and\x20the\x20independent\x20jury\x20deliberates.\x20Designers\x20wrote\x20their\x20entries\x20to\x20the\x20entry\x20Repository\x20(id_from\x20signer\x20—\x20each\x20row\x20keyed\x20to\x20its\x20designer)\x20DURING\x20\x27funded\x27;\x20this\x20node\x20is\x20where\x20the\x20judge/jury\x20permission\x20(slot\x201001)\x20ranks\x20them\x20(off-chain\x20tally\x20or\x20via\x20the\x20bound\x20voting\x20venue).\x20Advanced\x20by\x20the\x20submission-window\x20TIME\x20gate,\x20so\x20a\x20keeper\x20can\x20close\x20submissions\x20if\x20the\x20judge\x20stalls','semantic_role':'active','from':[{'prev':'funded','forward':'CloseSubmissions','guard_key':'submission_window'}]},{'name':'placement_provisional','role':'The\x20independent\x20judge\x20(permission\x201001)\x20records\x20the\x20WINNER\x20—\x20writes\x20the\x20winning\x20designer\x27s\x20address\x20to\x20the\x20placement\x20Repository\x20keyed\x20by\x20THIS\x20order\x20—\x20and\x20the\x20provisional\x20result\x20opens\x20the\x20appeal\x20window.\x20Provisional,\x20not\x20final:\x20a\x20losing\x20entrant\x20may\x20contest\x20before\x20the\x20prize\x20commits','semantic_role':'active','from':[{'prev':'judging','forward':'RecordPlacement','guard_key':'record_placement','permission_index':0x3e9}]},{'name':'placement_appealed','role':'A\x20losing\x20entrant\x20(proved\x20a\x20real\x20entrant\x20by\x20their\x20entry\x20Repository\x20row)\x20contests\x20the\x20provisional\x20placement\x20WITHIN\x20the\x20appeal\x20window\x20—\x20the\x20contest\x20runs\x20on\x20the\x20Service\x27s\x20bound\x20Arbitration\x20object\x20(R-M1-11:\x20off-Machine;\x20rulings\x20change\x20Arb\x20case\x20state\x20only).\x20RECORD\x20waypoint,\x20NOT\x20a\x20dispute\x20terminal\x20(same\x20convention\x20as\x20retail\x27s\x20item_lost):\x20the\x20keeper\x20listens\x20for\x20the\x20Arb\x20Finished\x20event\x20and\x20pushes\x20the\x20ruling\x20forward\x20—\x20upheld\x20->\x20placement_final,\x20overturned\x20->\x20back\x20to\x20judging\x20for\x20a\x20re-record','semantic_role':'active','from':[{'prev':'placement_provisional','forward':'AppealPlacement','guard_key':'appeal_filed'}]},{'name':'placement_final','role':'Placement\x20committed:\x20either\x20the\x20appeal\x20window\x20elapsed\x20with\x20no\x20contest\x20(FinalizePlacement,\x20the\x20time\x20gate)\x20or\x20an\x20appealed\x20ruling\x20upheld\x20the\x20placement\x20(PlacementUpheld).\x20The\x20winner\x20now\x20delivers\x20final\x20source\x20files.\x20TWO\x20distinct\x20forwards\x20on\x20TWO\x20distinct\x20prevs\x20—\x20never\x20a\x20same-prev\x20sibling\x20race\x20(INV-A2)','semantic_role':'delivered','from':[{'prev':'placement_provisional','forward':'FinalizePlacement','guard_key':'appeal_window'},{'prev':'placement_appealed','forward':'PlacementUpheld','permission_index':0x3e9}]},{'name':'final_delivery','role':'The\x20winner\x20(dynamic\x20Signer)\x20submits\x20the\x20final\x20source\x20files\x20with\x20a\x20WIP-hash\x20evidence\x20row\x20written\x20to\x20the\x20delivery\x20Repository.\x20The\x20guaranteed\x20prize\x20is\x20now\x20owed;\x20the\x20sponsor\x20may\x20request\x20polish\x20revisions\x20or\x20accept,\x20and\x20a\x20delivery-window\x20keeper\x20auto-accepts\x20if\x20the\x20sponsor\x20goes\x20silent\x20—\x20the\x20prize\x20can\x20never\x20be\x20withheld\x20by\x20sponsor\x20inaction','semantic_role':'delivered','from':[{'prev':'placement_final','forward':'DeliverFinal','guard_key':'final_files'},{'prev':'revision','forward':'Redeliver'}]},{'name':'revision','role':'Sponsor-requested\x20polish\x20round\x20on\x20the\x20final\x20files\x20(the\x20winner-fix\x20loop).\x20UNBOUNDED\x20by\x20design\x20and\x20declared\x20revision_rounds_max\x20\x27unlimited\x27:\x20progress.move\x20caps\x20EDGE\x20count\x20(MAX_NODE_PAIR),\x20never\x20VISIT\x20count,\x20and\x20a\x20Repository\x20tally\x20is\x20an\x20upsert\x20value\x20its\x20own\x20writer\x20can\x20forge,\x20so\x20NO\x20finite\x20cap\x20is\x20chain-enforceable\x20(fix-03\x20ruling,\x20same\x20as\x20catalog-tiers).\x20The\x20loop\x20is\x20a\x20courtesy\x20—\x20it\x20gates\x20NO\x20money\x20(the\x20prize\x20is\x20guaranteed\x20and\x20settles\x20from\x20final_delivery),\x20so\x20a\x20sponsor\x20cannot\x20use\x20it\x20to\x20withhold\x20payment','semantic_role':'active','from':[{'prev':'final_delivery','forward':'RequestRevision','operator':'order_payer'}]},{'name':'settled','role':'Terminal:\x20the\x20sponsor\x20accepts\x20the\x20final\x20files\x20(AcceptDelivery)\x20OR\x20the\x20delivery\x20window\x20elapses\x20and\x20the\x20keeper\x20auto-accepts\x20(AutoAcceptByKeeper)\x20—\x20ONE\x20node\x20reached\x20by\x20TWO\x20distinct\x20forwards\x20sharing\x20prev\x20final_delivery\x20(the\x20INV-A2\x20folded\x20safe\x20form;\x20same-prev\x20siblings\x20merge\x20into\x20one\x20Pair,\x20distinct\x20names\x20avoid\x20E_DUPLICATE_FORWARD_NAME).\x20The\x20winner\x20then\x20claims\x20the\x20guaranteed\x20prize\x20by\x20signing\x20a\x20SEPARATE\x20settlement\x20tx\x20(settle_prize\x20allocator:\x20Rate\x2010000\x20to\x20the\x20dynamic\x20Signer,\x20pinned\x20to\x20the\x20placement\x20Repository\x20winner\x20address)','semantic_role':'final','from':[{'prev':'final_delivery','forward':'AcceptDelivery','operator':'order_payer'},{'prev':'final_delivery','forward':'AutoAcceptByKeeper','guard_key':'delivery_window'}]},{'name':'closed_cancel','role':'Pre-submission\x20sponsor\x20cancellation\x20—\x20the\x20contest\x20escrowed\x20the\x20guaranteed\x20prize\x20at\x20buy\x20but\x20the\x20judge\x20has\x20not\x20yet\x20closed\x20submissions,\x20so\x20the\x20sponsor\x20may\x20void\x20and\x20take\x20a\x20full\x20order-anchored\x20refund\x20(R-DRAFT-VOID:\x20an\x20abandoned\x20or\x20ghost\x20contest\x20order\x20needs\x20a\x20single-hop\x20payer\x20exit;\x20escrow\x20is\x20funded\x20at\x20order_new,\x20not\x20at\x20first\x20forward).\x20Post-close\x20outcomes\x20route\x20to\x20placement/void\x20and\x20disputes\x20to\x20Arbitration,\x20never\x20here,\x20so\x20the\x20refund\x20and\x20a\x20prize\x20payout\x20never\x20both\x20fire\x20(D-BUG-2)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'funded','forward':'CancelBeforeSubmission'}]},{'name':'voided','role':'The\x20independent\x20judge\x20(1001)\x20rules\x20NO\x20VALID\x20ENTRY\x20after\x20submissions\x20close\x20—\x20a\x20guaranteed-award\x20contest\x20still\x20cannot\x20pay\x20for\x20nobody\x27s\x20work,\x20so\x20the\x20prize\x20refunds\x20in\x20full\x20to\x20the\x20sponsor.\x20A\x20deliberate\x20judge\x20ruling,\x20never\x20a\x20timeout:\x20silence\x20never\x20auto-voids\x20(a\x20stalled\x20judge\x20leaves\x20the\x20order\x20at\x20\x27judging\x27\x20for\x20Arbitration\x20rather\x20than\x20silently\x20refunding\x20a\x20contest\x20that\x20had\x20real\x20entries)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'judging','forward':'VoidNoEntry','guard_key':'no_valid_entry','permission_index':0x3e9}]}],'guards':[{'template_id':'pattern.buy_guard_blocklist','host':'service','key':'buy','purpose':'Prevent\x20the\x20judge\x20/\x20jury\x20/\x20service\x20staff\x20from\x20self-purchasing\x20a\x20contest\x20entry\x20order\x20and\x20later\x20self-awarding\x20the\x20prize\x20(Passport-gated\x20purchase\x20once\x20set)\x20—\x20the\x20sponsor\x20(funder),\x20the\x20judge\x20and\x20the\x20winning\x20designer\x20must\x20be\x20three\x20disjoint\x20identities'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'submission_window','purpose':'Submission-close\x20time\x20gate\x20(funded->judging,\x20CloseSubmissions):\x20Clock\x20>=\x20progress.history.time\x20(id\x201280,\x20next_node=\x27funded\x27,\x20find=last)\x20+\x20submission_window_days,\x20so\x20entries\x20stop\x20being\x20accepted\x20objectively\x20and\x20a\x20keeper\x20can\x20close\x20submissions\x20if\x20the\x20judge\x20stalls.\x20Operator\x20left\x20unbound\x20so\x20the\x20keeper\x20submits\x20the\x20timeout\x20path.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05)\x20so\x20a\x20sibling\x20contest\x27s\x20passport\x20cannot\x20close\x20this\x20one'},{'template_id':'pattern.identity_check_single','host':'machine','key':'record_placement','purpose':'Judge\x20placement\x20ruling\x20(judging->placement_provisional,\x20RecordPlacement):\x20binds\x20the\x20forward\x20to\x20the\x20single\x20independent\x20judge/jury\x20permission\x20entity\x20(slot\x201001),\x20disjoint\x20from\x20BOTH\x20the\x20sponsor\x20(order\x20payer)\x20and\x20every\x20entrant\x20—\x20the\x20payout-owing\x20party\x20never\x20decides\x20the\x20payout\x20(INV-A3).\x20The\x20judge\x20also\x20writes\x20the\x20WINNER\x27s\x20address\x20to\x20the\x20placement\x20Repository\x20keyed\x20by\x20THIS\x20order,\x20the\x20value\x20the\x20settle_prize\x20Signer-binding\x20leg\x20reads\x20to\x20pin\x20the\x20dynamic\x20winner\x20payout.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]\x20(R-C3-05)\x20so\x20a\x20sibling\x20contest\x27s\x20passport\x20cannot\x20place\x20here'},{'template_id':'pattern.identity_check_single','host':'machine','key':'no_valid_entry','purpose':'Judge\x20NO-VALID-ENTRY\x20ruling\x20(judging->voided,\x20VoidNoEntry):\x20the\x20same\x20independent\x20judge\x20slot\x20(1001).\x20A\x20void\x20is\x20an\x20explicit\x20ruling,\x20never\x20a\x20default\x20—\x20there\x20is\x20NO\x20timeout\x20that\x20auto-voids,\x20so\x20a\x20stalled\x20judge\x20leaves\x20the\x20order\x20at\x20\x27judging\x27\x20for\x20Arbitration\x20rather\x20than\x20silently\x20refunding\x20a\x20contest\x20that\x20had\x20real\x20entries'},{'template_id':'pattern.repository_data_check','host':'machine','key':'appeal_filed','purpose':'Appeal-eligibility\x20gate\x20(placement_provisional->placement_appealed,\x20AppealPlacement):\x20the\x20appellant\x20must\x20have\x20an\x20entry\x20Repository\x20row\x20(id_from\x20signer\x20—\x20proves\x20they\x20are\x20a\x20real\x20entrant,\x20not\x20a\x20bystander\x20griefing\x20the\x20contest)\x20and\x20the\x20appeal\x20must\x20be\x20filed\x20WITHIN\x20appeal_window_days\x20of\x20the\x20provisional\x20placement.\x20The\x20appeal\x20itself\x20runs\x20on\x20the\x20bound\x20Arbitration\x20object\x20(R-M1-11);\x20this\x20gate\x20only\x20admits\x20eligible\x20appellants\x20to\x20the\x20record\x20waypoint'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'appeal_window','purpose':'Appeal-window\x20time\x20gate\x20(placement_provisional->placement_final,\x20FinalizePlacement):\x20Clock\x20>=\x20progress.history.time\x20(id\x201280,\x20next_node=\x27placement_provisional\x27,\x20find=last)\x20+\x20appeal_window_days\x20with\x20no\x20appeal\x20filed,\x20so\x20the\x20placement\x20commits\x20objectively.\x20Mutually\x20exclusive\x20with\x20AppealPlacement\x20by\x20node\x20position\x20+\x20the\x20window\x20(once\x20appealed\x20the\x20order\x20is\x20not\x20at\x20placement_provisional;\x20once\x20the\x20window\x20closes\x20no\x20appeal\x20can\x20fire)\x20—\x20the\x20INV-A2-safe\x20form,\x20never\x20a\x20same-prev\x20sibling\x20race.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>]'},{'template_id':'pattern.repository_data_check','host':'machine','key':'final_files','purpose':'Final-files\x20evidence\x20gate\x20(placement_final->final_delivery,\x20DeliverFinal):\x20the\x20winner\x27s\x20final\x20source-file\x20WIP\x20hash\x20must\x20be\x20written\x20to\x20the\x20delivery\x20Repository\x20BEFORE\x20the\x20forward\x20passes,\x20so\x20the\x20sponsor\x20accepts\x20against\x20a\x20tamper-evident\x20artifact,\x20not\x20prose.\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20(audit-261012\x20B3)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'delivery_window','purpose':'Delivery-window\x20auto-accept\x20keeper\x20edge\x20(final_delivery->settled,\x20AutoAcceptByKeeper):\x20Clock\x20>=\x20progress.history.time\x20(id\x201280,\x20next_node=\x27final_delivery\x27,\x20find=last)\x20+\x20delivery_window_days,\x20so\x20a\x20silent\x20sponsor\x20cannot\x20withhold\x20the\x20GUARANTEED\x20prize.\x20This\x20is\x20the\x20timeout\x20complement\x20of\x20AcceptDelivery\x20folded\x20into\x20the\x20SAME\x20settled\x20node\x20(INV-A2\x20safe\x20form),\x20NOT\x20a\x20sibling\x20node.\x20PROJECT-BOUND\x20via\x20logic_equal[order.service,\x20<service>];\x20operator\x20unbound\x20so\x20the\x20keeper\x20fires\x20it'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_prize','purpose':'Prize\x20settlement\x20gate\x20(settle_node\x20\x27settled\x27):\x20progress.current\x20==\x20settled\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20the\x20chain-derived\x20protocol-254\x20once\x20key\x20(bcs(payment_info.for_object),\x20replay\x20aborts\x2016),\x20PLUS\x20a\x20SIGNER-BINDING\x20leg\x20(context(Signer)\x20==\x20query(1167\x20repository.data(\x27placement\x27,\x20order))\x20—\x20the\x20winner\x20address\x20the\x20judge\x20recorded,\x20so\x20the\x20dynamic\x20Signer\x20recipient\x20is\x20provably\x20the\x20placed\x20winner\x20and\x20a\x20third\x20party\x20cannot\x20front-run\x20the\x20claim).\x20The\x20winner\x20signs\x20a\x20SEPARATE\x20claim\x20tx\x20after\x20the\x20order\x20reaches\x20\x27settled\x27;\x20the\x20forward-advancer\x20(sponsor/keeper)\x20is\x20NOT\x20the\x20payee'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate:\x20a\x20node\x20gate\x20over\x20the\x20FULL\x20refundable\x20set\x20{closed_cancel,\x20voided}\x20resolved\x20from\x20THIS\x20template\x27s\x20machine_shape\x20as\x20ONE\x20top-level\x20n-ary\x20logic_or\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20blocks\x20the\x20refund\x20once\x20an\x20arbitration\x20award\x20ACTUALLY\x20paid).\x20NODE\x20GATE\x20IS\x20MANDATORY\x20(audit-261012\x20B4):\x20an\x20identity-only\x20refund\x20guard\x20lets\x20the\x20sponsor\x20drain\x20the\x20escrow\x20the\x20moment\x20it\x20opens\x20the\x20contest.\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017\x20—\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter):\x20anti-hijack\x20is\x20structural\x20(GuardIdentifier(0)\x20recipient),\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening.\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg.\x20NEVER\x20gate\x20on\x20order.dispute\x20count\x20==\x200\x20(query\x20id\x201564):\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20that\x20gate\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Sponsor-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2\x20—\x20NO\x20node\x20equality\x20leg,\x20the\x20b9-261015\x20node-gate\x20teaching\x20is\x20removed):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20Bool)\x20+\x20order.service\x20binding\x20ONLY.\x20Why\x20no\x20node\x20gate:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20(upw-mn-261014\x20F-51:\x20a\x20node-pinned\x20rail\x20aborts\x207\x20after\x20a\x20keeper\x20moves\x20the\x20order\x20on;\x20upwc-cat-261017\x20CAT-C2\x20live:\x20a\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20after\x20the\x20award\x20paid),\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion\x20vs\x20refund_gate\x20(exactly\x20one\x20polarity\x20can\x20pass,\x20D-BUG-2)\x20—\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail.\x20Pays\x20Rate\x2010000\x20to\x20the\x20sponsor\x20(merchant)\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits.\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'}],'allocator':{'recipient':'signer','count':0x3,'mode':'rate','once_per_order':!![],'refund_track':'order_anchored','description':'Guaranteed-prize\x20contest\x20settlement\x20on\x20\x27settled\x27.\x20INVERTED\x20FUNDING\x20TOPOLOGY\x20(shared\x20with\x20bug-bounty):\x20the\x20sponsoring\x20COMPANY\x20is\x20the\x20order_payer\x20that\x20funds\x20the\x20escrow\x20and\x20the\x20WINNING\x20DESIGNER\x20is\x20the\x20payee\x20—\x20so\x20the\x20winner\x20cannot\x20be\x20a\x20build-time-fixed\x20Entity\x20(a\x20contest\x20has\x20many\x20entrants\x20across\x20many\x20orders)\x20nor\x20a\x20GuardIdentifier\x20(that\x20resolves\x20to\x20for_object\x20=\x20the\x20order\x20=\x20the\x20sponsor,\x20paying\x20the\x20funder\x20back).\x20The\x20ONLY\x20dynamic\x20per-order\x20payee\x20the\x20chain\x20offers\x20is\x20Recipient::Signer\x20(allocation.move:615-617,\x20tx_context::sender)\x20—\x20the\x20winner\x20claims\x20by\x20signing\x20the\x20settlement,\x20and\x20settle_prize\x27s\x20Signer-binding\x20leg\x20(context(Signer)\x20==\x20the\x20placement\x20Repository\x20winner\x20address\x20the\x20judge\x20recorded)\x20pins\x20that\x20claim\x20to\x20the\x20placed\x20winner\x20so\x20it\x20cannot\x20be\x20front-run.\x20SINGLE-WINNER-TAKES-PRIZE\x20is\x20a\x20CHAIN\x20CONSTRAINT,\x20not\x20a\x20policy\x20choice:\x20one\x20settlement\x20tx\x20has\x20ONE\x20tx_context::sender,\x20so\x20every\x20Signer\x20leg\x20in\x20one\x20allocator\x20pays\x20the\x20SAME\x20person,\x20and\x20a\x20Rate-10000\x20allocator\x20drains\x20100%\x20of\x20the\x20pool\x20(allocation.move\x20ERATE_NOT_10000)\x20—\x20a\x20runner-up\x20prize\x20to\x20a\x20DIFFERENT\x20dynamic\x20designer\x20is\x20therefore\x20NOT\x20expressible\x20from\x20one\x20contest\x20order\x20(see\x20the\x20MULTI-PLACE\x20LIMITATION\x20build\x20note).\x20The\x20winner\x20takes\x20the\x20whole\x20guaranteed\x20pool\x20(Rate\x2010000);\x20a\x20Rate-0\x20GuardIdentifier(0)\x20anchor\x20binds\x20the\x20settle\x20guard\x20to\x20the\x20paying\x20order\x20(CR-01);\x20once_per_order\x20arms\x20the\x20chain-derived\x20254\x20replay\x20slot.\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission.\x20Full\x20escrow\x20refund\x20to\x20the\x20sponsor\x20(Rate\x2010000\x20via\x20the\x20order-anchored\x20recipient)\x20on\x20a\x20pre-submission\x20closed_cancel\x20OR\x20a\x20judged\x20voided\x20(no\x20valid\x20entry),\x20and\x20only\x20while\x20no\x20arbitration\x20award\x20has\x20paid\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false);\x20an\x20awarded\x20order\x27s\x20escrow\x20instead\x20exits\x20via\x20the\x20paired\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20sponsor),\x20so\x20refund\x20and\x20ruling\x20payouts\x20never\x20both\x20fire\x20(D-BUG-2).','rows':[{'track':'settlement','recipient':'signer','recipient_key':'winner','mode':'rate','value':0x2710,'guard_key':'settle_prize','note':'The\x20GUARANTEED\x20prize\x20to\x20the\x20winning\x20designer\x20(dynamic\x20Signer,\x20identity-bound\x20to\x20the\x20placement\x20Repository\x20winner\x20address):\x20a\x20contest\x20pays\x20its\x20placed\x20winner\x20the\x20WHOLE\x20pool\x20(Rate\x2010000),\x20so\x20there\x20is\x20no\x20sponsor\x20remainder\x20leg.\x20Recipient::Signer\x20is\x20the\x20only\x20per-order-dynamic\x20payee;\x20settle_prize\x27s\x20Signer-binding\x20leg\x20proves\x20the\x20claimant\x20IS\x20the\x20recorded\x20winner.\x20The\x20winner\x20signs\x20a\x20SEPARATE\x20claim\x20tx\x20after\x20the\x20order\x20reaches\x20\x27settled\x27\x20—\x20the\x20forward-advancer\x20(sponsor/keeper)\x20never\x20receives.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_prize','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor,\x20CR-01):\x20makes\x20the\x20contest\x20ORDER\x20the\x20settle_prize\x20Guard\x27s\x20binding\x20target\x20so\x20a\x20sibling\x20contest\x27s\x20passport\x20cannot\x20release\x20this\x20escrow;\x20shares\x20the\x20guard_key\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator;\x20pays\x20nothing.\x20winner\x2010000\x20+\x20anchor\x200\x20=\x2010000\x20(ERATE_NOT_10000\x20satisfied).'},{'track':'settlement','recipient':'entity','recipient_key':'merchant','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Sponsor-recovery\x20rail\x20(escrow-exit\x20invariant):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20back\x20to\x20the\x20sponsor\x20(merchant/funder)\x20Entity\x20so\x20an\x20awarded\x20contest\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_prize/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.\x20Recipient\x20MUST\x20be\x20a\x20non-empty\x20Entity\x20(a\x20blank\x20one\x20routes\x20the\x20share\x20to\x20the\x20deployer\x20via\x20the\x20SDK\x20resolver).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20full\x20refund\x20to\x20the\x20SPONSOR\x20on\x20a\x20pre-submission\x20closed_cancel\x20OR\x20a\x20judged\x20voided\x20(no\x20valid\x20entry)\x20—\x20refund_gate\x20node-gates\x20the\x20FULL\x20refundable\x20set\x20{closed_cancel,\x20voided}.\x20GuardIdentifier(0)\x20resolves\x20to\x20the\x20paying\x20Order\x20and\x20allocation.move\x20ERECIPIENT_NOT_FOR_OBJECT\x20makes\x20redirection\x20structurally\x20impossible;\x20the\x20sponsor\x20claims\x20via\x20the\x20two-step\x20order\x20receive.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false\x20so\x20an\x20awarded\x20contest\x20cannot\x20also\x20drain\x20the\x20refund\x20rail\x20(D-BUG-2).\x20Set\x20this\x20allocator\x27s\x20once_per_order=true\x20and\x20register\x20the\x20{identifier:254,\x20b_submission:true}\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x20with\x20the\x20once-triggered\x20code.\x20This\x20refund\x20fires\x20once\x20per\x20order,\x20so\x20the\x20arming\x20is\x20safe\x20here;\x20NEVER\x20carry\x20it\x20onto\x20a\x20refund\x20rail\x20that\x20can\x20re-enter\x20its\x20refund\x20node\x20in\x20a\x20later\x20period\x20—\x20254\x20keys\x20on\x20payment_info.for_object\x20and\x20would\x20abort\x2016\x20forever\x20(OFN\x20#P-04).'}]},'key_risk':'The\x20sponsor\x20funds\x20the\x20guaranteed\x20prize\x20and\x20an\x20independent\x20judge\x20places\x20the\x20winner:\x20a\x20mis-placed\x20or\x20stalled\x20contest\x20leaves\x20a\x20losing\x20entrant\x27s\x20recourse\x20in\x20the\x20appeal\x20window\x20then\x20Arbitration,\x20and\x20the\x20compensation\x20fund\x20pays\x20the\x20order\x20owner\x20(the\x20sponsor),\x20not\x20a\x20designer.','build_notes':['INVERTED\x20FUNDING\x20TOPOLOGY\x20(shared\x20with\x20bug-bounty\x20—\x20the\x20whole\x20design\x20turns\x20on\x20it):\x20in\x20a\x20normal\x20sale\x20the\x20buyer\x20funds\x20and\x20the\x20merchant\x20receives,\x20so\x20the\x20payee\x20is\x20a\x20build-time\x20Entity.\x20A\x20contest\x20inverts\x20it\x20—\x20the\x20sponsoring\x20COMPANY\x20is\x20the\x20order_payer\x20that\x20funds\x20the\x20guaranteed\x20prize,\x20and\x20the\x20WINNING\x20DESIGNER\x20(a\x20different\x20identity\x20on\x20every\x20contest)\x20is\x20the\x20payee.\x20Neither\x20Entity\x20(fixed\x20at\x20build;\x20a\x20contest\x20has\x20many\x20entrants)\x20nor\x20GuardIdentifier\x20(resolves\x20to\x20for_object\x20=\x20the\x20order\x20=\x20the\x20sponsor,\x20paying\x20the\x20funder\x20back)\x20can\x20express\x20a\x20per-order-dynamic\x20payee.\x20Recipient::Signer\x20(allocation.move:615-617)\x20is\x20the\x20ONLY\x20mechanism:\x20the\x20winner\x20claims\x20by\x20signing\x20the\x20settlement\x20tx.\x20This\x20is\x20why\x20settle_prize\x20carries\x20a\x20MANDATORY\x20Signer-binding\x20leg\x20(context(Signer)\x20==\x20the\x20placement\x20Repository\x20winner\x20address\x20the\x20judge\x20recorded)\x20—\x20without\x20it\x20any\x20party\x20able\x20to\x20satisfy\x20the\x20settle\x20gate\x20could\x20redirect\x20the\x20prize\x20to\x20itself.','MULTI-PLACE\x20LIMITATION\x20(🔴\x20honest\x20disclosure,\x20chain\x20constraint\x20NOT\x20policy):\x20a\x20contest\x20can\x20pay\x20only\x20ONE\x20dynamic\x20winner\x20per\x20order.\x20One\x20settlement\x20tx\x20has\x20ONE\x20tx_context::sender,\x20so\x20every\x20Recipient::Signer\x20leg\x20in\x20a\x20single\x20allocator\x20pays\x20the\x20SAME\x20person;\x20and\x20separate\x20allocators\x20each\x20summing\x20Rate\x2010000\x20would\x20each\x20try\x20to\x20drain\x20100%\x20of\x20the\x20pool\x20(ERATE_NOT_10000),\x20so\x20the\x20first\x20fire\x20empties\x20it\x20and\x20a\x20runner-up\x20leg\x20gets\x20nothing.\x20A\x20runner-up\x20/\x20multi-tier\x20prize\x20to\x20DIFFERENT\x20dynamic\x20designers\x20is\x20therefore\x20NOT\x20expressible\x20from\x20one\x20contest\x20order\x20with\x20the\x20current\x20primitives.\x20WORKAROUND\x20the\x20sponsor\x20can\x20use\x20today:\x20run\x20one\x20sponsor\x20order\x20per\x20prize\x20level\x20(a\x201st-place\x20order,\x20a\x202nd-place\x20order),\x20each\x20a\x20single-winner\x20contest.\x20A\x20true\x20single-pool\x20multi-payee\x20split\x20is\x20a\x20gap\x20queued\x20for\x20the\x20D12-B6\x20primitive\x20research;\x20never\x20promise\x20runner-up\x20payouts\x20from\x20one\x20order.','GUARANTEED\x20AWARD\x20(the\x20contrast\x20with\x20bug-bounty):\x20a\x20design\x20contest\x20commits\x20the\x20prize\x20at\x20buy\x20and\x20MUST\x20pay\x20a\x20placed\x20winner\x20—\x20the\x20sponsor\x20cannot\x20walk\x20away\x20once\x20entries\x20exist.\x20The\x20only\x20no-payout\x20exits\x20are\x20a\x20PRE-SUBMISSION\x20void\x20(closed_cancel,\x20before\x20the\x20judge\x20closes\x20submissions)\x20or\x20a\x20judged\x20NO-VALID-ENTRY\x20(voided,\x20the\x20judge\x20rules\x20no\x20entry\x20merits\x20the\x20prize).\x20bug-bounty\x20is\x20the\x20opposite\x20polarity:\x20an\x20invalid\x20report\x20refunds\x20the\x20funder\x20and\x20no\x20bounty\x20is\x20owed.\x20This\x20is\x20why\x20the\x20refund\x20track\x20node-gates\x20{closed_cancel,\x20voided}\x20only\x20—\x20a\x20placed\x20winner\x27s\x20order\x20never\x20reaches\x20a\x20refund\x20node.','JURY\x20PLACEMENT\x20+\x20SIGNER-BINDING:\x20the\x20judge/jury\x20permission\x20(slot\x201001)\x20ranks\x20the\x20entries\x20and\x20writes\x20the\x20WINNER\x27s\x20address\x20to\x20the\x20placement\x20Repository\x20keyed\x20by\x20the\x20order\x20(the\x20write\x20is\x20bound\x20to\x20the\x20judge\x20via\x20the\x20policy\x27s\x20write\x20guard,\x20so\x20a\x20designer\x20cannot\x20self-place).\x20settle_prize\x20then\x20reads\x20that\x20row:\x20logic_equal[context(Signer),\x20query(1167\x20repository.data(\x27placement\x27,\x20order))].\x20The\x20vote\x20TALLY\x20itself\x20is\x20off-chain\x20or\x20via\x20the\x20bound\x20voting\x20venue\x20—\x20the\x20chain\x20records\x20the\x20RESULT\x20(one\x20winner\x20address\x20per\x20order),\x20which\x20is\x20all\x20the\x20settlement\x20needs.','APPEAL\x20WINDOW\x20(the\x20contest-specific\x20check\x20on\x20a\x20single\x20judge):\x20placement\x20is\x20PROVISIONAL\x20first.\x20A\x20losing\x20entrant\x20—\x20proved\x20real\x20by\x20their\x20entry\x20Repository\x20row\x20—\x20may\x20contest\x20within\x20appeal_window_days,\x20routing\x20to\x20the\x20Service\x27s\x20bound\x20Arbitration\x20(R-M1-11,\x20off-Machine).\x20The\x20keeper\x20pushes\x20the\x20ruling\x20forward:\x20upheld\x20->\x20placement_final,\x20overturned\x20->\x20back\x20to\x20judging\x20for\x20a\x20re-record.\x20This\x20is\x20the\x20design-contest\x20answer\x20to\x20\x27what\x20if\x20the\x20judge\x20picks\x20wrong\x27,\x20which\x20bug-bounty\x20(grade-once)\x20lacks.','UNBOUNDED\x20REVISION\x20—\x20INV-A1\x20HONEST\x20FORM\x20(this\x20refutes\x20the\x20naive\x20\x27finite\x20cap\x20+\x20counter\x20guard\x27\x20design):\x20the\x20winner-fix\x20loop\x20is\x20declared\x20revision_rounds_max\x20\x27unlimited\x27.\x20A\x20FINITE\x20cap\x20is\x20NOT\x20chain-enforceable:\x20progress.move\x20bounds\x20EDGE\x20count\x20(MAX_FORWARD\x20/\x20MAX_NODE_PAIR),\x20never\x20how\x20many\x20times\x20a\x20node\x20pair\x20is\x20VISITED,\x20and\x20a\x20Repository\x20\x27counter\x27\x20is\x20an\x20upsert\x20value\x20its\x20own\x20writer\x20can\x20forge\x20(no\x20atomic\x20increment,\x20no\x20write-once\x20—\x20see\x20the\x20retracted\x20anti-overwrite\x20idiom),\x20so\x20neither\x20the\x20sponsor\x20(who\x20would\x20under-count\x20to\x20keep\x20demanding\x20fixes)\x20nor\x20the\x20winner\x20(who\x20would\x20over-count\x20to\x20escape)\x20can\x20hold\x20it\x20honestly.\x20fix-03\x20ruled\x20\x27unlimited\x27\x20the\x20only\x20faithful\x20value,\x20and\x20the\x20benchmark\x20product\x27s\x20own\x20default\x20is\x20\x27unlimited\x20revisions\x20until\x20the\x20desired\x20design\x20is\x20achieved\x27.\x20The\x20loop\x20gates\x20NO\x20money\x20(the\x20prize\x20is\x20guaranteed\x20and\x20settles\x20from\x20final_delivery),\x20so\x20an\x20unbounded\x20loop\x20cannot\x20withhold\x20payment.\x20A\x20merchant\x20wanting\x20a\x20hard\x20cap\x20accepts\x20an\x20OFF-CHAIN-honored\x20tally\x20(like\x20enterprise-talent-market\x27s\x20revision_rounds_max\x202\x20\x27counted\x20off-chain\x27)\x20and\x20must\x20say\x20so\x20in\x20the\x20contest\x20terms.','INV-A2\x20FOLD\x20(why\x20there\x20is\x20no\x20separate\x20auto-accept\x20node):\x20AcceptDelivery\x20(sponsor)\x20and\x20its\x20timeout\x20complement\x20AutoAcceptByKeeper\x20(keeper)\x20are\x20TWO\x20DISTINCT\x20forwards\x20into\x20the\x20SAME\x20\x27settled\x27\x20node\x20sharing\x20prev\x20final_delivery\x20—\x20the\x20chain\x27s\x20E_DUPLICATE_NODE_PREV\x20merges\x20them\x20into\x20one\x20Pair\x20and\x20the\x20distinct\x20names\x20avoid\x20E_DUPLICATE_FORWARD_NAME\x20(6).\x20The\x20same\x20fold\x20governs\x20the\x20appeal\x20race:\x20FinalizePlacement\x20(appeal\x20window\x20elapsed)\x20and\x20AppealPlacement\x20(an\x20entrant\x20contests)\x20are\x20mutually\x20exclusive\x20by\x20node\x20position\x20+\x20the\x20window,\x20never\x20same-prev\x20siblings\x20that\x20both\x20fire.','ONCE\x20SLOT\x20ARMING\x20+\x20SCOPE\x20(v54,\x20audit-261012\x20B7):\x20Generation\x20must\x20add\x20a\x20submission\x20entry\x20{identifier:254,\x20b_submission:true,\x20value_type:\x22Address\x22,\x20object_type:\x22Order\x22}\x20to\x20each\x20SETTLEMENT\x20allocator\x20Guard\x20(settle_prize;\x20the\x20refund\x20guard\x20here\x20is\x20one-shot\x20per\x20order,\x20so\x20arming\x20254\x20is\x20harmless\x20—\x20never\x20carry\x20it\x20to\x20a\x20refund\x20rail\x20that\x20can\x20re-enter\x20its\x20refund\x20node\x20in\x20a\x20later\x20period,\x2016\x20forever,\x20OFN\x20#P-04)\x20and\x20submit\x20identifier\x20254\x20in\x20the\x20trigger\x20Passport\x20—\x20the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20payment_info.for_object\x20(the\x20bound\x20Order),\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016.\x20SCOPE\x20(C10,\x20mainnet-verified):\x20the\x20once\x20key\x20is\x20(guard,\x20allocator\x20leg,\x20bcs(for_object))\x20stored\x20ON\x20the\x20Allocation\x20—\x20once\x20PER\x20ORDER\x20per\x20allocation;\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20is\x20what\x20makes\x20settle_prize\x20refuse\x20a\x20sibling\x20contest\x27s\x20passport.','ACCEPTANCE\x20COMPONENT\x20(D12\x20重构\x202,\x20acceptance_mode\x20\x27contest\x27):\x20the\x20placement\x20decision\x20is\x20the\x20independent\x20judge/jury\x27s,\x20never\x20the\x20funding\x20sponsor\x27s\x20alone\x20(INV-A3\x20—\x20compile\x20hard-blocks\x20a\x20judge-decided\x20mode\x20whose\x20arbitration_mode\x20is\x20not\x20\x27third_party\x27).\x20Grant\x20the\x20judge\x20permission\x20entity\x20slot\x20index\x201001,\x20disjoint\x20from\x20BOTH\x20the\x20sponsor\x20(order\x20payer)\x20and\x20every\x20entrant;\x20bind\x20only\x20an\x20already-operational\x20Arbitration\x20venue\x20as\x20the\x20appeal\x20channel.','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20az-mn-261007\x20T5):\x20every\x20terminal\x20keeps\x20an\x20exit\x20under\x20BOTH\x20polarities\x20of\x20the\x20arbitration\x20payout\x20state.\x20refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20the\x20paired\x20recover_gate\x20row\x20(claimed_by\x20some\x20==\x20true,\x20Rate\x2010000\x20to\x20the\x20sponsor)\x20ships\x20in\x20the\x20allocator\x20so\x20an\x20awarded\x20contest\x20order\x27s\x20escrow\x20still\x20exits.\x20Resolve\x20both\x20guard\x20designs\x20before\x20the\x20Machine\x20publish.\x20NEVER\x20gate\x20the\x20refund\x20rail\x20on\x20order.dispute\x20count\x20==\x200\x20(append-only\x20vector\x20->\x20one-way\x20door).','COMPENSATION\x20FUND\x20LIMITATION\x20(honest\x20disclosure):\x20the\x20ruling\x20payout\x20path\x20pays\x20the\x20ORDER\x20OWNER\x20(the\x20sponsor)\x20—\x20there\x20is\x20no\x20on-chain\x20path\x20for\x20the\x20compensation\x20fund\x20to\x20indemnify\x20a\x20DESIGNER.\x20If\x20the\x20judge\x20wrongly\x20places\x20a\x20contest,\x20a\x20losing\x20entrant\x27s\x20on-chain\x20recourse\x20is\x20to\x20appeal\x20within\x20the\x20window\x20and\x20then\x20dispute\x20in\x20Arbitration;\x20the\x20fund\x20itself\x20cannot\x20pay\x20a\x20designer.\x20Document\x20this\x20asymmetry\x20to\x20entrants\x20pre-submission.','DISPUTES\x20route\x20through\x20Arbitration\x20—\x20never\x20Machine\x20nodes\x20(R-M1-11):\x20Arbitration\x20(compensation_fund)\x20and\x20Allocator\x20(escrow)\x20are\x20independent\x20systems\x20by\x20design;\x20the\x20refund\x20Allocator\x20and\x20a\x20ruling-driven\x20settle\x20must\x20never\x20both\x20fire\x20for\x20one\x20contest.\x20VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20freshly\x20created\x20Arbitration\x20defaults\x20to\x20PAUSED\x20—\x20unpause\x20is\x20the\x20ARBITRATOR\x27s\x20deployment\x20step\x20on\x20their\x20own\x20object,\x20never\x20this\x20build\x27s\x20duty;\x20bind\x20only\x20a\x20venue\x20already\x20unpaused\x20(a\x20paused\x20venue\x20rejects\x20every\x20filing\x20with\x20E_PAUSED).','commission_rate_bps\x20is\x200\x20and\x20is\x20NOT\x20a\x20placeholder:\x20WoWok\x20extracts\x20nothing\x20from\x20a\x20contest.\x20A\x20contest\x20platform\x20that\x20IS\x20the\x20aggregator\x20(a\x20managed\x20contest\x20host)\x20may\x20charge\x20its\x20own\x20fee\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20sponsor\x20can\x20compute\x20pre-contest,\x20never\x20an\x20implicit\x20remainder;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity;\x20(3)\x20no\x20mandatory\x20transit\x20pool,\x20and\x20never\x20take\x20the\x20fee\x20by\x20silently\x20shrinking\x20the\x20winner\x27s\x20Rate\x20leg\x20(a\x20platform\x20carve-out\x20must\x20be\x20its\x20own\x20explicit\x20leg,\x20not\x20a\x20Surplus\x20sweep\x20of\x20the\x20guaranteed\x20prize).','KEEPER\x20IS\x20A\x20FIRST-CLASS\x20DEPENDENCY:\x20the\x20submission\x20close,\x20the\x20appeal-window\x20finalize,\x20the\x20delivery-window\x20auto-accept\x20and\x20any\x20ruling-driven\x20placement\x20are\x20100%\x20off-chain\x20(machine.move\x20has\x20no\x20timer;\x20arb.move\x20rulings\x20only\x20change\x20case\x20state).\x20No\x20keeper\x20means\x20manual-only\x20advancement\x20and\x20the\x20funds-stuck\x20/\x20withheld-prize\x20failure\x20mode\x20returns.','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20contest\x20brief\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention),\x20or\x20host\x20your\x20own\x20endpoint\x20for\x20long-lived\x20mainnet\x20contests.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'submission_window_days':0xe,'appeal_window_days':0x3,'delivery_window_days':0x7,'revision_rounds_max':'unlimited','dispute_timeout_days':0x7,'arbitration_fee_usd':0x0},'time_anchors':{'submission_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27funded\x27,\x20find=last)\x20—\x20the\x20contest-open\x20ENTRY\x20timestamp;\x20submission_window_days\x20closes\x20entries.\x20The\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','appeal_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27placement_provisional\x27,\x20find=last)\x20—\x20the\x20provisional-placement\x20ENTRY\x20timestamp;\x20appeal_window_days\x20is\x20the\x20contest\x20window','delivery_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27final_delivery\x27,\x20find=last)\x20—\x20the\x20final-files\x20ENTRY\x20timestamp\x20(a\x20re-delivery\x20appends\x20a\x20fresh\x20entry\x20and\x20naturally\x20resets\x20it);\x20delivery_window_days\x20auto-accepts','dispute_timeout':'arbitration\x20case\x20(off-Machine\x20keeper\x20obligation\x20over\x20the\x20Arb\x20case\x20—\x20not\x20a\x20Machine\x20guard,\x20R-M1-11)'},'trust_mechanisms':['R1\x20dual-track\x20payout:\x20the\x20guaranteed\x20prize\x20pays\x20via\x20the\x20settle_prize\x20Allocator;\x20an\x20arbitration\x20ruling\x20pays\x20via\x20the\x20compensation\x20fund\x20—\x20never\x20both\x20(refund_gate\x20asserts\x20order.claimed_by\x20some\x20==\x20false)','R2\x20independent\x20judge/jury\x20+\x20independent\x20arbitration\x20Permission,\x20both\x20enforced\x20disjoint\x20from\x20the\x20sponsor\x20(order\x20payer)\x20and\x20every\x20entrant\x20(INV-A3;\x20contract\x20assertion\x20at\x20publish)','R3\x20compensation\x20fund\x20required\x20before\x20publish\x20whenever\x20the\x20fund\x20is\x20non-zero\x20(with\x20the\x20honest\x20caveat\x20that\x20it\x20indemnifies\x20the\x20order\x20owner,\x20not\x20a\x20designer)','R4\x20acceptance\x20gate:\x20an\x20explicit\x20judge\x20placement,\x20then\x20a\x20sponsor\x20accept\x20OR\x20the\x20delivery-window\x20auto-accept\x20—\x20a\x20designer\x20can\x20never\x20self-place\x20and\x20a\x20sponsor\x20can\x20never\x20withhold\x20the\x20guaranteed\x20prize\x20by\x20silence','R5\x20Signer-binding:\x20the\x20dynamic\x20winner\x20payout\x20is\x20pinned\x20to\x20the\x20placement\x20Repository\x20winner\x20address\x20the\x20judge\x20recorded,\x20so\x20the\x20claimant\x20is\x20provably\x20the\x20placed\x20winner\x20(anti-front-run)','R6\x20appeal\x20window:\x20a\x20losing\x20entrant\x20contests\x20the\x20provisional\x20placement\x20before\x20it\x20commits\x20—\x20the\x20contest-specific\x20check\x20on\x20a\x20single\x20judge\x27s\x20ranking','R7\x20Rate\x20sums\x20=\x2010000\x20on\x20every\x20allocator\x20group\x20(single-winner\x20Rate\x2010000\x20+\x20Rate-0\x20order\x20anchor);\x20publish\x20freeze\x20—\x20full\x20configuration\x20(judge,\x20venue,\x20windows)\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound\x20to\x20the\x20contest','R9\x20keepers\x20for\x20the\x20submission\x20close,\x20the\x20appeal/delivery\x20windows\x20and\x20the\x20dispute\x20timeout','R10\x20fee\x20parameters\x20expressed\x20as\x20on-chain\x20allocator\x20configuration\x20(0%\x20commission\x20machine-checkable)'],'keeper_dependencies':['submission-window\x20close\x20(submission_window_days;\x20a\x20keeper\x20closes\x20submissions\x20if\x20the\x20judge\x20stalls\x20—\x20the\x20time\x20gate\x20is\x20objective)','appeal-window\x20finalize\x20+\x20delivery-window\x20auto-accept\x20(appeal_window_days\x20/\x20delivery_window_days;\x20the\x20guaranteed\x20prize\x20must\x20not\x20be\x20withholdable\x20by\x20silence)','ruling-driven\x20placement\x20(an\x20appeal\x20ruling\x20only\x20changes\x20Arb\x20case\x20state;\x20the\x20keeper\x20pushes\x20PlacementUpheld/Rejudge\x20and\x20submits\x20the\x20winner\x27s\x20settle\x20claim)','dispute\x20response\x20timeout\x20+\x20arbitration\x20ruling\x20execution\x20(a\x20ruling\x20only\x20changes\x20case\x20state;\x20the\x20keeper\x20allocates\x20per\x20ruling)'],'recommended_role':'merchant','role_rationale':'The\x20sponsoring\x20company\x20builds\x20and\x20operates\x20the\x20contest\x20Service,\x20funds\x20the\x20guaranteed\x20prize\x20as\x20order_payer,\x20and\x20delegates\x20placement\x20to\x20an\x20independent\x20judge/jury\x20permission;\x20the\x20winning\x20designer\x20is\x20the\x20dynamic\x20Signer\x20payee,\x20not\x20a\x20permission\x20entity.','differences':['acceptance_mode\x20\x27contest\x27:\x20an\x20INDEPENDENT\x20judge/jury\x20RANKS\x20many\x20entrants\x20and\x20places\x20ONE\x20winner\x20(the\x20验收裁判\x20component),\x20with\x20an\x20appeal\x20window\x20a\x20losing\x20entrant\x20can\x20contest\x20—\x20not\x20a\x20single\x20triager\x20grading\x20one\x20report\x27s\x20severity\x20(bug-bounty)\x20or\x20one\x20evaluator\x20ruling\x20one\x20deliverable\x20(agent-task)','GUARANTEED\x20AWARD:\x20the\x20prize\x20is\x20committed\x20at\x20buy\x20and\x20MUST\x20go\x20to\x20a\x20placed\x20winner;\x20the\x20only\x20no-payout\x20exits\x20are\x20a\x20pre-submission\x20void\x20or\x20a\x20judged\x20no-valid-entry\x20(contrast\x20bug-bounty,\x20where\x20an\x20invalid\x20report\x20refunds\x20the\x20funder)','SINGLE-WINNER-TAKES-PRIZE\x20is\x20a\x20chain\x20constraint:\x20one\x20settlement\x20has\x20one\x20tx_context::sender\x20and\x20a\x20Rate-10000\x20allocator\x20drains\x20the\x20pool,\x20so\x20a\x20runner-up\x20prize\x20to\x20a\x20different\x20dynamic\x20designer\x20is\x20NOT\x20expressible\x20from\x20one\x20order\x20(a\x20multi-prize\x20contest\x20needs\x20one\x20sponsor\x20order\x20per\x20prize\x20level)','UNBOUNDED\x20winner-fix\x20loop\x20declared\x20revision_rounds_max\x20\x27unlimited\x27\x20(the\x20honest\x20form\x20—\x20no\x20chain-enforceable\x20visit\x20counter\x20exists);\x20bug-bounty\x20grades\x20once\x20with\x20no\x20loop,\x20agent-task\x20has\x20no\x20loop','INVERTED\x20funding\x20shared\x20with\x20bug-bounty:\x20the\x20sponsor\x20(order_payer)\x20funds\x20and\x20the\x20winner\x20is\x20paid\x20as\x20a\x20dynamic\x20Recipient::Signer\x20pinned\x20to\x20the\x20judge\x27s\x20placement\x20record','review_mode\x20\x27none\x27:\x20reputation\x20rides\x20the\x20judge\x27s\x20on-chain\x20placement\x20record\x20(a\x20win),\x20not\x20a\x20human\x20star-review'],'user_inputs':['submission_window_days\x20/\x20appeal_window_days\x20/\x20delivery_window_days\x20—\x20the\x20entry-close,\x20placement-contest\x20and\x20final-files\x20auto-accept\x20windows\x20(all\x20keeper-advanced\x20time\x20gates)','revision_rounds_max\x20—\x20KEEP\x20\x27unlimited\x27\x20(the\x20honest\x20form).\x20A\x20finite\x20cap\x20is\x20NOT\x20chain-enforceable\x20(progress.move\x20bounds\x20edges,\x20not\x20visits;\x20a\x20Repository\x20tally\x20is\x20a\x20forgeable\x20upsert).\x20A\x20merchant\x20wanting\x20a\x20hard\x20cap\x20accepts\x20an\x20off-chain-honored\x20tally\x20and\x20must\x20state\x20it\x20in\x20the\x20contest\x20terms','dispute_timeout_days\x20+\x20arbitration_fee_usd\x20—\x20dispute\x20response\x20window\x20and\x20filing\x20fee\x20(default\x20near-zero\x20so\x20a\x20losing\x20entrant\x20is\x20not\x20priced\x20out\x20of\x20contesting\x20a\x20wrongful\x20placement)','the\x20independent\x20judge/jury\x20permission\x20entity\x20—\x20MUST\x20be\x20disjoint\x20from\x20the\x20sponsor\x20(order\x20payer)\x20and\x20every\x20entrant;\x20grant\x20it\x20slot\x20index\x201001\x20and\x20bind\x20only\x20an\x20operational\x20Arbitration\x20venue\x20as\x20the\x20appeal\x20channel','the\x20placement\x20Repository\x20policy\x20(winner\x20address\x20keyed\x20by\x20order,\x20written\x20only\x20by\x20the\x20judge)\x20and\x20the\x20entry\x20Repository\x20(id_from\x20signer,\x20one\x20row\x20per\x20designer)\x20—\x20settle_prize\x27s\x20Signer-binding\x20reads\x20the\x20placement\x20row']},{'id':'rental/p2p-shortstay','industry':'rental','variant':'p2p-shortstay','product_ref':'airbnb','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'reserved','role':'Entry:\x20booking\x20PAID\x20and\x20escrowed,\x20awaiting\x20host\x20confirmation\x20(request-to-book).\x20buy\x20escrows\x20atomically\x20—\x20there\x20is\x20NO\x20unpaid\x20order\x20state\x20on\x20chain','semantic_role':'draft','from':[{'prev':'','forward':'Book','operator':'order_payer'}]},{'name':'cancelled_unpaid','role':'Request\x20declined\x20by\x20the\x20host,\x20expired\x20unconfirmed\x20past\x20the\x20confirm\x20window,\x20or\x20withdrawn\x20by\x20the\x20guest\x20before\x20host\x20confirmation\x20—\x20full\x20refund\x20Allocator\x20to\x20the\x20guest\x20(sibling\x20forwards\x20share\x20ONE\x20pair:\x20same\x20prev)','semantic_role':'cancelled','from':[{'prev':'reserved','forward':'DeclineRequest','operator':'merchant','permission_index':0x3e8},{'prev':'reserved','forward':'ExpireUnconfirmed','operator':'merchant','permission_index':0x3ea,'guard_key':'confirm_expire'},{'prev':'reserved','forward':'GuestWithdraw','operator':'order_payer'}]},{'name':'paid','role':'Host\x20confirmed\x20the\x20request\x20—\x20cancellation\x20policy\x20tiers\x20now\x20active\x20until\x20check-in','semantic_role':'active','from':[{'prev':'reserved','forward':'ConfirmRequest','operator':'merchant','permission_index':0x3e8}]},{'name':'guest_cancelled','role':'Guest\x20cancels\x20under\x20the\x20mounted\x20policy\x20tier\x20—\x20per-tier\x20refund\x20Allocator\x20(one\x20pair,\x20one\x20forward\x20per\x20tier\x20Guard)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'CancelTier1','operator':'order_payer','guard_key':'cancel_tier_1'},{'prev':'paid','forward':'CancelTier2','operator':'order_payer','guard_key':'cancel_tier_2'},{'prev':'paid','forward':'CancelTier3','operator':'order_payer','guard_key':'cancel_tier_3'},{'prev':'paid','forward':'CancelTier4','operator':'order_payer','guard_key':'cancel_tier_4'},{'prev':'paid','forward':'CancelTier5','operator':'order_payer','guard_key':'cancel_tier_5'},{'prev':'paid','forward':'CancelTier6','operator':'order_payer','guard_key':'cancel_tier_6'}]},{'name':'host_cancelled','role':'Host\x20cancels\x20before\x20check-in\x20—\x20full\x20refund\x20Allocator\x20to\x20guest\x20+\x20off-chain\x20demotion','semantic_role':'cancelled','from':[{'prev':'paid','forward':'HostCancel','operator':'merchant','permission_index':0x3e8,'guard_key':'host_cancel'}]},{'name':'checked_in','role':'Check-in\x20at\x20the\x20date-typed\x20time\x20gate\x20(keeper\x20advances)','semantic_role':'active','from':[{'prev':'paid','forward':'CheckIn','operator':'merchant','permission_index':0x3ea,'guard_key':'checkin_gate'}]},{'name':'checked_out','role':'Check-out\x20at\x20the\x20date-typed\x20time\x20gate;\x20the\x20serial\x20claim\x20window\x20opens\x20next\x20—\x20no\x20release\x20can\x20fire\x20before\x20it\x20closes','semantic_role':'delivered','from':[{'prev':'checked_in','forward':'CheckOut','operator':'merchant','permission_index':0x3ea,'guard_key':'checkout_gate'}]},{'name':'reviewed','role':'Guest\x20reviews\x20the\x20stay\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20stop\x20between\x20checkout\x20and\x20the\x20claim\x20window;\x20the\x20keeper\x20opens\x20the\x20claim\x20window\x20from\x20EITHER\x20prev,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END).\x20v102\x20(abnb14\x20F01):\x20a\x20SECOND\x20entry\x20edge\x20from\x20claim_window\x20—\x20the\x20claim\x20window\x20opens\x20from\x20checked_out\x20DIRECTLY\x20when\x20the\x20guest\x20never\x20reviews,\x20and\x20with\x20a\x20single\x20checked_out-only\x20entry\x20that\x20opening\x20permanently\x20welded\x20review\x20shut\x20(O10:\x20six\x20consecutive\x20Review\x20aborts\x2013\x20after\x20the\x20window\x20opened;\x20the\x20review\x20AND\x20its\x20reward\x20were\x20both\x20unreachable).\x20The\x20review_window\x20guard\x20anchors\x20the\x20checked_out\x20ENTRY\x20time\x20(find-by-node\x201280,\x20unaffected\x20by\x20the\x20claim-window\x20detour),\x20so\x20the\x20window\x20semantics\x20are\x20identical\x20on\x20both\x20edges','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'checked_out','forward':'Review','guard_key':'review_window'},{'prev':'claim_window','forward':'ReviewAfterWindowOpen','operator':'order_payer','guard_key':'review_window'}]},{'name':'claim_window','role':'SERIAL\x20CLAIM\x20WINDOW\x20(ABNB2-validated):\x20mandatory\x20waypoint\x20between\x20checkout\x20and\x20payout\x20—\x20the\x20pool\x20stays\x20intact\x20here\x20while\x20claims\x20are\x20filed\x20and\x20adjudicated.\x20Two\x20exits:\x20FileClaim\x20(inside\x20the\x20window)\x20or\x20ReleaseNoClaim\x20(window\x20elapsed,\x20no\x20claim).\x20Re-entered\x20from\x20reviewed\x20so\x20a\x20guest\x20review\x20can\x20never\x20strand\x20the\x20order\x20off\x20the\x20settlement\x20path\x20(R-DEAD-END)','semantic_role':'delivered','from':[{'prev':'checked_out','forward':'OpenClaimWindow','operator':'merchant','permission_index':0x3ea},{'prev':'reviewed','forward':'OpenClaimWindowAfterReview','operator':'merchant','permission_index':0x3ea}]},{'name':'payout_released','role':'Claim\x20window\x20closed\x20with\x20no\x20upheld\x20claim\x20—\x20the\x20intact\x20pool\x20splits\x20host/platform\x20by\x20Rate\x20(sums\x2010000,\x20full\x20drain\x20is\x20SAFE\x20here:\x20no\x20claim\x20can\x20still\x20be\x20open,\x20FACT-ALLOC-03).\x20Reached\x20from\x20claim_window\x20(no\x20claim)\x20or\x20claim_denied','semantic_role':'delivered','from':[{'prev':'claim_window','forward':'ReleaseNoClaim','operator':'merchant','permission_index':0x3ea,'guard_key':'claim_window_closed'},{'prev':'claim_denied','forward':'ReleaseAfterDeny','operator':'merchant','permission_index':0x3ea}]},{'name':'claim_open','role':'Host\x20files\x20a\x20damage\x20claim\x20inside\x20the\x20serial\x20window\x20(pre+post\x20evidence\x20required)\x20—\x20the\x20pool\x20is\x20guaranteed\x20intact\x20because\x20payout\x20can\x20only\x20fire\x20from\x20claim_window\x20after\x20the\x20window\x20elapses.\x20Contestable:\x20the\x20guest\x20holds\x20the\x20AppealClaimToArbitration\x20leg\x20(AB7-T1/F42),\x20so\x20an\x20upheld\x20claim\x20is\x20no\x20longer\x20a\x20unilateral\x20permission-1001\x20decision','semantic_role':'active','from':[{'prev':'claim_window','forward':'FileClaim','operator':'merchant','permission_index':0x3e8,'guard_key':'claim_window_open'}]},{'name':'guest_claim','role':'GUEST-SIDE\x20CLAIM\x20ENTRY\x20(AB7-T1,\x20abnb7-mn-261013\x20F41\x20fix):\x20the\x20order\x20holder\x20files\x20a\x20claim\x20inside\x20the\x20serial\x20window\x20—\x20WTS-anchored\x20evidence\x20(a\x20signed\x20Proof\x20ADDRESS\x20recorded\x20as\x20the\x20repository\x20row\x20value)\x20so\x20the\x20record\x27s\x20authenticity\x20is\x20verifier-checkable.\x20Same\x20intact-pool\x20guarantee\x20as\x20the\x20host\x20track;\x20exits\x20mirror\x20the\x20host\x20rail\x20(deny\x20/\x20pay-guest\x20/\x20appeal)','semantic_role':'active','from':[{'prev':'claim_window','forward':'FileClaimByGuest','operator':'order_payer','guard_key':'guest_claim_window_open'}]},{'name':'claim_appealed','role':'ARBITRATION\x20APPEAL\x20WAYPOINT\x20(AB7-T1,\x20abnb7-mn-261013\x20F42\x20fix):\x20a\x20party\x20contested\x20a\x20claim\x27s\x20outcome\x20—\x20the\x20contested\x20case\x20runs\x20on\x20the\x20Service\x27s\x20bound\x20Arbitration\x20object\x20(R-M1-11:\x20off-Machine;\x20rulings\x20change\x20Arb\x20case\x20state\x20only).\x20The\x20keeper\x20listens\x20for\x20the\x20Arb\x20Finished\x20event\x20and\x20pushes\x20the\x20ruling\x20forward\x20(upheld\x20→\x20the\x20matching\x20paid\x20node,\x20denied\x20→\x20claim_denied).\x20RECORD\x20waypoint,\x20NOT\x20a\x20dispute\x20terminal\x20—\x20same\x20convention\x20as\x20retail\x27s\x20item_lost','semantic_role':'active','from':[{'prev':'claim_open','forward':'AppealClaimToArbitration','operator':'order_payer','guard_key':'claim_appeal'},{'prev':'guest_claim','forward':'AppealGuestClaimToArbitration','operator':'merchant','permission_index':0x3e8}]},{'name':'claim_denied','role':'Claim\x20denied\x20on\x20the\x20evidence\x20chain\x20(or\x20via\x20arbitration)\x20—\x20ReleaseAfterDeny\x20routes\x20the\x20intact\x20pool\x20to\x20the\x20normal\x20payout;\x20NEVER\x20a\x20stop\x20node\x20(ABNB2\x20fix:\x20the\x20old\x20parallel\x20design\x20stranded\x20funds\x20here).\x20Reached\x20from\x20claim_open\x20/\x20guest_claim\x20reviewer\x20denials\x20AND\x20from\x20claim_appealed\x20rulings','semantic_role':'delivered','from':[{'prev':'claim_open','forward':'DenyClaim','operator':'merchant','permission_index':0x3e9,'guard_key':'claim_review'},{'prev':'guest_claim','forward':'DenyGuestClaim','operator':'merchant','permission_index':0x3e9,'guard_key':'claim_review'},{'prev':'claim_appealed','forward':'DenyClaimAfterRuling','operator':'merchant','permission_index':0x3ea},{'prev':'claim_appealed','forward':'DenyGuestClaimAfterRuling','operator':'merchant','permission_index':0x3ea}]},{'name':'claim_paid','role':'Host\x20claim\x20upheld\x20—\x20the\x20intact\x20pool\x20pays\x20the\x20host\x20(claim\x20award\x20=\x20the\x20host\x27s\x20own\x20escrowed\x20stay\x20income;\x20damages\x20BEYOND\x20the\x20pool\x20route\x20to\x20arbitration\x20+\x20compensation\x20fund,\x203x\x20cap).\x20Also\x20reached\x20from\x20claim_appealed\x20when\x20the\x20ruling\x20upholds\x20the\x20host','semantic_role':'delivered','from':[{'prev':'claim_open','forward':'PayClaim','operator':'merchant','permission_index':0x3e9,'guard_key':'claim_review'},{'prev':'claim_appealed','forward':'PayClaimAfterRuling','operator':'merchant','permission_index':0x3ea}]},{'name':'guest_claim_paid','role':'GUEST\x20claim\x20upheld\x20(AB7-T1):\x20the\x20intact\x20pool\x20refunds\x20the\x20guest\x20in\x20full\x20via\x20the\x20slot-0\x20order-anchored\x20rail\x20—\x20the\x20guest-side\x20mirror\x20of\x20claim_paid.\x20Reached\x20from\x20the\x20reviewer\x20(PayGuestClaim)\x20or\x20an\x20upheld\x20appeal\x20ruling\x20(PayGuestClaimAfterRuling)','semantic_role':'cancelled','from':[{'prev':'guest_claim','forward':'PayGuestClaim','operator':'merchant','permission_index':0x3e9,'guard_key':'claim_review'},{'prev':'claim_appealed','forward':'PayGuestClaimAfterRuling','operator':'merchant','permission_index':0x3ea}]},{'name':'completed','role':'Terminal:\x20payout\x20released\x20or\x20a\x20claim\x20paid\x20(host\x20or\x20guest\x20track)\x20—\x20the\x20pool\x20is\x20empty\x20and\x20the\x20review\x20window\x20elapses','semantic_role':'final','from':[{'prev':'payout_released','forward':'Finalize','operator':'merchant','permission_index':0x3ea},{'prev':'claim_paid','forward':'FinalizeAfterClaim','operator':'merchant','permission_index':0x3ea},{'prev':'guest_claim_paid','forward':'FinalizeAfterGuestClaim','operator':'merchant','permission_index':0x3ea}]}],'guards':[{'template_id':'pattern.verifier_evidence_philosophy','host':'service','key':'buy','purpose':'Payment\x20amount\x20equals\x20the\x20sum\x20of\x20sale\x20items\x20(rent\x20+\x20cleaning\x20+\x20service\x20fee)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'confirm_expire','purpose':'Host\x20confirmation\x20window\x20(default\x2024h)\x20anchored\x20on\x20progress.history.time\x20of\x20reserved\x20—\x20expiry\x20routes\x20the\x20order\x20to\x20cancelled_unpaid\x20with\x20a\x20full\x20refund\x20(keeper\x20advances)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_1','purpose':'Tier\x201\x20(flexible):\x20full\x20refund\x20until\x2024h\x20before\x20check-in\x20—\x20mounts\x20via\x20the\x20cancellation_policy\x20selection\x20(M-T7\x20conditional\x20emission)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_2','purpose':'Tier\x202\x20(moderate):\x20full\x20refund\x20until\x205\x20days\x20before\x20check-in'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_3','purpose':'Tier\x203\x20(firm):\x20full\x20refund\x20until\x2014\x20days\x20before\x20check-in'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_4','purpose':'Tier\x204\x20(strict):\x20full\x20refund\x20until\x2030\x20days\x20before\x20check-in'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_5','purpose':'Tier\x205\x20(strict-partial):\x2050%\x20refund\x20at\x207+\x20days\x20before\x20check-in\x20(tier5_guest_bps)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_6','purpose':'Tier\x206\x20(long-stay):\x2028+\x20night\x20stays,\x2030-day\x20window,\x2050%\x20refund\x20(tier6_guest_bps)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'host_cancel','purpose':'Host\x20cancellation\x20before\x20check-in\x20with\x20tiered\x20penalty\x20disclosure\x20(48h/30d\x20boundaries)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'checkin_gate','purpose':'Check-in\x20date-typed\x20time\x20gate\x20(e.g.\x2016:00\x20on\x20arrival\x20day)\x20—\x20ABSOLUTE\x20per-order\x20instance'},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20host\x20declares\x20customer_required\x20(guest\x20identity\x20per\x20house\x20rules):\x20AND\x20into\x20\x27checkin_gate\x27\x20—\x20gate\x20order.required_info\x20some\x20so\x20the\x20guest\x27s\x20recorded\x20credential\x20is\x20on-chain\x20before\x20keys\x20hand\x20over;\x20the\x20host\x20eyeballing\x20the\x20recorded\x20contact\x20in\x20the\x20Messenger\x20conversation\x20(never\x20the\x20recorded\x20address\x20value)\x20is\x20the\x20acceptance\x20basis;\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(testnet\x20HIGH-05),\x20so\x20this\x20Guard\x20is\x20the\x20only\x20enforcement'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'checkout_gate','purpose':'Check-out\x20date-typed\x20time\x20gate\x20(e.g.\x2011:00\x20on\x20departure\x20day)\x20—\x20ABSOLUTE\x20per-order\x20instance'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Guest\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x20review_window_days\x20(14)\x20of\x20checkout,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20post-checkout\x20—\x20checked_out\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20claim\x20window\x20opens\x20from\x20checked_out\x20directly\x20when\x20the\x20guest\x20never\x20reviews;\x20v102\x20(abnb14\x20F01):\x20reviewed\x20ALSO\x20carries\x20a\x20claim_window\x20ENTRY\x20edge\x20(ReviewAfterWindowOpen,\x20this\x20same\x20guard\x20key\x20shared\x20across\x20both\x20forwards)\x20so\x20the\x20opened\x20window\x20no\x20longer\x20welds\x20review\x20shut\x20—\x20the\x20anchor\x20is\x20the\x20checked_out\x20ENTRY\x20row\x20(find-by-node),\x20identical\x20semantics\x20on\x20both\x20edges;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'claim_window_open','purpose':'Claim\x20filing\x20INSIDE\x20the\x20serial\x20window\x20—\x20a\x20CLOSING\x20window:\x20Clock\x20<=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days;\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20the\x20window\x20is\x20shut\x20while\x20open\x20and\x20stays\x20open\x20after\x20it\x20closed\x20—\x20az3\x20F-03;\x20bkd8\x20BK-04);\x20relies\x20on\x20pre-check-in\x20and\x20post-check-out\x20evidence\x20writes'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'claim_window_closed','purpose':'No-claim\x20release\x20gate:\x20Clock\x20>=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x20—\x20the\x20only\x20forward\x20out\x20of\x20claim_window\x20besides\x20the\x20two\x20filing\x20forwards\x20(FileClaim\x20/\x20FileClaimByGuest),\x20so\x20the\x20pool\x20cannot\x20release\x20while\x20a\x20claim\x20could\x20still\x20be\x20filed\x20(serial\x20design,\x20ABNB2)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'claim_review','purpose':'Claim\x20adjudication:\x20pre+post\x20evidence\x20comparison\x20chain,\x20guest\x20response\x20window\x20(24h),\x20and\x20any\x20arbitration\x20ruling\x20—\x20gates\x20BOTH\x20claim\x20exits;\x20the\x20reviewer\x20permission\x20(1001)\x20is\x20distinct\x20from\x20the\x20filing\x20host\x20(1000)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'guest_claim_window_open','purpose':'Guest\x20claim\x20filing\x20INSIDE\x20the\x20serial\x20window\x20(AB7-T1)\x20—\x20a\x20CLOSING\x20window:\x20Clock\x20<=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days;\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20bkd8\x20BK-04)\x20—\x20the\x20order-holder\x20mirror\x20of\x20claim_window_open;\x20M-T2\x20keeps\x20one\x20key\x20per\x20source\x20decision,\x20so\x20the\x20guest\x27s\x20filing\x20gate\x20is\x20its\x20own\x20Guard\x20instance'},{'template_id':'pattern.repository_data_check','host':'machine','key':'guest_claim_evidence','purpose':'WTS-anchored\x20guest\x20evidence\x20(AB7-T1,\x20abnb7-mn-261013\x20F41):\x20the\x20guest-filed\x20claim\x20requires\x20an\x20evidence\x20row\x20whose\x20value\x20is\x20a\x20signed\x20Proof\x20ADDRESS\x20(proof.signer/proof.about/proof.time\x20verifier-checkable),\x20and\x20the\x20row\x27s\x20write\x20authorization\x20MUST\x20include\x20the\x20order\x20holder\x20—\x20a\x20host-only\x20writer\x20set\x20would\x20brick\x20the\x20guest\x20rail\x20exactly\x20the\x20way\x20the\x20host-only\x20claim_evidence\x20set\x20excluded\x20the\x20guest\x20at\x20F41'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'claim_appeal','purpose':'Order\x20holder\x20contests\x20a\x20claim\x20outcome\x20and\x20freezes\x20the\x20track\x20at\x20claim_appealed\x20—\x20the\x20contested\x20case\x20runs\x20on\x20the\x20Service\x27s\x20bound\x20Arbitration\x20(R-M1-11\x20off-Machine);\x20the\x20keeper\x20advances\x20on\x20the\x20Arb\x20Finished\x20event.\x20AB7-T1/F42:\x20this\x20appeal\x20leg\x20is\x20what\x20ends\x20unilateral\x20claim\x20adjudication\x20(one\x20merchant\x20signature\x20deciding\x20the\x20whole\x20split)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'payout_release_gate','purpose':'Payout\x20allocator\x20gate:\x20progress.current\x20==\x20payout_released\x20+\x20order.service\x20binding\x20—\x20the\x20pool\x20is\x20intact\x20because\x20payout_released\x20is\x20only\x20reachable\x20after\x20the\x20serial\x20claim\x20window\x20closed\x20with\x20no\x20upheld\x20claim'},{'template_id':'pattern.progress_state_check','host':'machine','key':'claim_paid_gate','purpose':'Claim-paid\x20allocator\x20gate:\x20progress.current\x20==\x20claim_paid\x20+\x20order.service\x20binding\x20—\x20pays\x20the\x20host\x20from\x20the\x20intact\x20pool\x20(claim\x20award\x20=\x20the\x20host\x27s\x20escrowed\x20stay\x20income)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'confirm_expire_refund','purpose':'Unconfirmed-refund\x20allocator\x20gate:\x20progress.current\x20==\x20cancelled_unpaid\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20none'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_1_refund','purpose':'Tier-1\x20refund\x20allocator\x20gate:\x20progress.history.time\x20of\x20guest_cancelled\x20inside\x20the\x20tier-1\x20window\x20(measured\x20from\x20order.time)\x20+\x20current\x20==\x20guest_cancelled\x20—\x20keeper\x20trigger\x20timing\x20cannot\x20shift\x20the\x20tier'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_2_refund','purpose':'Tier-2\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_3_refund','purpose':'Tier-3\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_4_refund','purpose':'Tier-4\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_5_refund','purpose':'Tier-5\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'cancel_tier_6_refund','purpose':'Tier-6\x20refund\x20allocator\x20gate\x20(same\x20anchoring)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'host_cancel_refund','purpose':'Host-cancel\x20refund\x20allocator\x20gate:\x20progress.current\x20==\x20host_cancelled\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'guest_claim_paid_gate','purpose':'Guest-claim\x20refund\x20allocator\x20gate\x20(AB7-T1):\x20progress.current\x20==\x20guest_claim_paid\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20none\x20—\x20the\x20full\x20refund\x20fires\x20once,\x20only\x20from\x20the\x20upheld\x20guest-claim\x20state'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion,\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Covers\x20the\x20AWARDED-GUEST-CLAIM\x20strand:\x20an\x20award\x20that\x20ACTUALLY\x20paid\x20welds\x20the\x20guest_claim_paid_gate\x20rail\x20shut\x20(claimed_by\x20none\x20fails),\x20and\x20the\x20host/platform\x20gates\x20pin\x20OTHER\x20nodes,\x20so\x20the\x20intact\x20pool\x20had\x20no\x20exit\x20once\x20the\x20keeper\x20finalized\x20past\x20guest_claim_paid\x20into\x20completed\x20—\x20this\x20rail\x20sweeps\x20it\x20to\x20the\x20host\x20Entity\x20instead.\x20Exactly\x20one\x20of\x20guest_claim_paid_gate\x20/\x20recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'host','count':0x5,'mode':'rate','refund_track':'order_anchored','rows':[{'track':'settlement','recipient':'entity','recipient_key':'host','mode':'rate','value_from':'host_rate_bps','guard_key':'payout_release_gate','note':'NO-CLAIM\x20/\x20CLAIM-DENIED\x20RELEASE:\x20host\x20share\x20of\x20the\x20intact\x20pool\x20at\x20payout_released\x20—\x20reachable\x20only\x20via\x20ReleaseNoClaim\x20(window\x20elapsed,\x20no\x20claim)\x20or\x20ReleaseAfterDeny\x20(claim\x20denied\x20on\x20the\x20evidence\x20chain).\x20Rate\x20legs\x20sum\x2010000\x20so\x20the\x20pool\x20drains\x20in\x20full;\x20safe\x20BECAUSE\x20serial\x20(no\x20claim\x20can\x20still\x20be\x20open).'},{'track':'settlement','recipient':'entity','recipient_key':'platform','mode':'rate','value_from':'platform_rate_bps','guard_key':'payout_release_gate','note':'Aggregator\x20fee\x20share\x20of\x20the\x20no-claim\x20release\x20—\x20an\x20explicit\x20pre-order-computable\x20number\x20(MERCHANT\x20FREEDOM),\x200\x20under\x20pure\x20direct\x20sales.\x20host+platform\x20MUST\x20sum\x20to\x2010000\x20within\x20the\x20group:\x20no\x20Surplus\x20exists\x20anywhere\x20in\x20this\x20template,\x20so\x20a\x20mis-sum\x20fails\x20the\x20rate\x20invariant.'},{'track':'settlement','recipient':'entity','recipient_key':'host','mode':'rate','value_from':'host_rate_bps','guard_key':'claim_paid_gate','note':'CLAIM\x20UPHELD:\x20host\x20share\x20of\x20the\x20intact\x20pool\x20at\x20claim_paid.\x20The\x20claim\x20award\x20IS\x20the\x20host\x27s\x20escrowed\x20stay\x20income\x20(the\x20pool\x20holds\x20only\x20the\x20booking\x20amount)\x20—\x20damages\x20BEYOND\x20the\x20pool\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(3x\x20cap),\x20never\x20to\x20a\x20bounded\x20Amount\x20leg\x20racing\x20the\x20release.'},{'track':'settlement','recipient':'entity','recipient_key':'platform','mode':'rate','value_from':'platform_rate_bps','guard_key':'claim_paid_gate','note':'Aggregator\x20fee\x20share\x20of\x20the\x20claim-paid\x20release;\x200\x20by\x20default.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'confirm_expire_refund','note':'Unconfirmed/declined\x20request\x20=\x20FULL\x20refund\x20to\x20the\x20paying\x20order\x20(slot-0\x20order\x20anchor).\x20The\x20allocator-side\x20guard\x20anchors\x20progress.current\x20==\x20cancelled_unpaid\x20+\x20order.service\x20binding\x20so\x20keeper\x20timing\x20cannot\x20misfire\x20onto\x20a\x20sibling\x20order.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'cancel_tier_1_refund','note':'Tier\x201:\x20full\x20refund\x20(slot-0\x20order\x20anchor).\x20Tier\x20refund\x20Guards\x20anchor\x20on\x20progress.history.time\x20of\x20guest_cancelled\x20(the\x20cancellation\x20moment),\x20NOT\x20Clock.now()\x20—\x20a\x20keeper\x20triggering\x20the\x20allocator\x20after\x20the\x20window\x20must\x20still\x20satisfy\x20it.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'cancel_tier_2_refund','note':'Tier\x202:\x20full\x20refund\x20(slot-0\x20order\x20anchor).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'cancel_tier_3_refund','note':'Tier\x203:\x20full\x20refund\x20(slot-0\x20order\x20anchor).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'cancel_tier_4_refund','note':'Tier\x204:\x20full\x20refund\x20(slot-0\x20order\x20anchor).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value_from':'tier5_guest_bps','guard_key':'cancel_tier_5_refund','note':'Tier\x205\x20partial:\x20guest\x20share\x20(slot-0\x20order\x20anchor).'},{'track':'refund','recipient':'entity','recipient_key':'host','mode':'rate','value_from':'tier5_host_bps','guard_key':'cancel_tier_5_refund','note':'Tier\x205\x20partial:\x20host\x20cancellation-fee\x20share.\x20guest+host\x20MUST\x20sum\x20to\x2010000\x20within\x20the\x20group\x20(no\x20Surplus).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value_from':'tier6_guest_bps','guard_key':'cancel_tier_6_refund','note':'Tier\x206\x20(long-stay)\x20partial:\x20guest\x20share\x20(slot-0\x20order\x20anchor).'},{'track':'refund','recipient':'entity','recipient_key':'host','mode':'rate','value_from':'tier6_host_bps','guard_key':'cancel_tier_6_refund','note':'Tier\x206\x20(long-stay)\x20partial:\x20host\x20share.\x20guest+host\x20MUST\x20sum\x20to\x2010000.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'host_cancel_refund','note':'Host\x20cancellation\x20=\x20FULL\x20refund\x20to\x20the\x20guest\x20(slot-0\x20order\x20anchor).\x20Host-breach\x20guest\x20compensation\x20(re-booking\x20cost)\x20has\x20no\x20automatic\x20allocator\x20—\x20it\x20is\x20an\x20arbitration\x20counterclaim\x20playbook\x20(guest\x20opens\x20an\x20Arb\x20case;\x20the\x20fund\x20pays\x20the\x20ruling).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'guest_claim_paid_gate','note':'GUEST\x20CLAIM\x20UPHELD\x20(AB7-T1)\x20=\x20FULL\x20refund\x20to\x20the\x20paying\x20order\x20(slot-0\x20order\x20anchor)\x20—\x20the\x20guest-side\x20mirror\x20of\x20the\x20host\x27s\x20claim_paid\x20release.\x20The\x20pool\x20is\x20intact\x20here:\x20guest_claim_paid\x20is\x20reachable\x20only\x20through\x20the\x20serial\x20claim\x20window\x27s\x20adjudication\x20exits\x20(reviewer\x20decision\x20or\x20appeal\x20ruling).'},{'track':'settlement','recipient':'entity','recipient_key':'host','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20host\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20payout_release_gate/claim_paid_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20guest_claim_paid_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'NO\x20PLATFORM\x20TAKE\x20by\x20default\x20(platform_rate_bps\x20ships\x20at\x200,\x20host\x2010000)\x20—\x20WoWok\x20is\x20direct-sales:\x20merchants\x20pay\x20gas\x20only.\x20SERIAL\x20CLAIM\x20WINDOW\x20(v30,\x20ABNB2\x20mainnet-validated):\x20every\x20order\x20passes\x20checked_out\x20→\x20claim_window\x20→\x20payout_released,\x20so\x20a\x20claim\x20is\x20always\x20filed\x20and\x20adjudicated\x20while\x20the\x20pool\x20is\x20intact;\x20the\x20chain\x20has\x20no\x20holdback\x20primitive\x20(FACT-ALLOC-03),\x20and\x20the\x20serial\x20topology\x20is\x20what\x20removes\x20the\x20first-come-first-served\x20race\x20between\x20the\x20payout\x20and\x20a\x20claim.\x20Three\x20release\x20states:\x20payout_released\x20(no\x20claim\x20filed\x20in\x20the\x20window,\x20or\x20a\x20claim\x20denied),\x20claim_paid\x20(host\x20claim\x20upheld\x20—\x20host/platform\x20split),\x20and\x20guest_claim_paid\x20(AB7-T1:\x20guest\x20claim\x20upheld\x20—\x20full\x20order-anchored\x20refund).\x20The\x20first\x20two\x20split\x20the\x20intact\x20pool\x20host/platform\x20by\x20host_rate_bps/platform_rate_bps\x20(Rate\x20legs\x20sum\x2010000\x20per\x20group\x20⇒\x20full\x20drain,\x20safe\x20because\x20no\x20claim\x20can\x20still\x20be\x20open).\x20Damages\x20beyond\x20the\x20booking\x20amount\x20are\x20NOT\x20payable\x20from\x20the\x20pool\x20(it\x20holds\x20only\x20the\x20stay\x20income)\x20and\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(3x\x20cap).\x20Refunds\x20are\x20order-anchored\x20GuardIdentifier(0)\x20Rate\x20legs\x20on\x20slot\x200\x20(the\x20submitted\x20Order\x20carried\x20by\x20payment_info.for_object\x20—\x20mainnet-verified\x20executable\x20three\x20times\x20in\x20the\x20licensing\x20refund\x20shape,\x20rex-mn-261021;\x20NEVER\x20slot\x20254\x20on\x20a\x20refund\x20rail,\x20OFN\x20#P-04;\x20a\x20static\x20slot\x20aborts\x20at\x20alloc\x20with\x20ERECIPIENT_NOT_FOR_OBJECT)\x20(full\x20for\x20unconfirmed/host-cancel/tiers\x201-4/guest-claim-upheld;\x20tier5/6\x20split\x20guest/host).\x20Surplus\x20deliberately\x20DISABLED\x20template-wide\x20(a\x20withdraw-all\x20leg\x20would\x20sweep\x20money\x20owed\x20to\x20other\x20tracks).\x20MERCHANT\x20FREEDOM:\x20an\x20aggregator\x20merchant\x20may\x20charge\x20its\x20own\x20fee\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity\x20(an\x20EMPTY\x20one\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently);\x20(3)\x20never\x20take\x20the\x20fee\x20via\x20Surplus.'},'key_risk':'Claim\x20evidence\x20—\x20the\x20serial\x20claim\x20window\x20(v30)\x20keeps\x20the\x20pool\x20intact\x20while\x20a\x20claim\x20is\x20open;\x20a\x20damage\x20claim\x20still\x20fails\x20without\x20the\x20pre+post\x20evidence\x20chain,\x20and\x20damages\x20beyond\x20the\x20pool\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(3x\x20cap)','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','PAYOUT\x20MECHANICS\x20(v30,\x20ABNB2\x20mainnet-validated):\x20the\x20chain\x20has\x20NO\x20holdback\x20primitive\x20—\x20fix\x20is\x20the\x20PAID\x20sum\x20of\x20an\x20allocator\x27s\x20Amount\x20legs\x20(allocation.move\x20fix\x20computation)\x20and\x20a\x20pure-Rate\x20plan\x20summing\x2010000\x20drains\x20100%\x20of\x20the\x20pool\x20(FACT-ALLOC-03).\x20The\x20serial\x20claim\x20window\x20is\x20the\x20resolution:\x20checked_out\x20→\x20claim_window\x20is\x20a\x20mandatory\x20waypoint,\x20and\x20the\x20ONLY\x20exits\x20are\x20FileClaim\x20(inside\x20the\x20window)\x20and\x20ReleaseNoClaim\x20(window\x20elapsed).\x20A\x20claim\x20is\x20therefore\x20always\x20adjudicated\x20while\x20the\x20pool\x20is\x20intact.\x20A\x20PROPORTIONAL\x20holdback\x20(e.g.\x20\x27leave\x2010%\x27)\x20remains\x20inexpressible\x20—\x20net-Rate\x20legs\x20must\x20sum\x20to\x2010000\x20and\x20there\x20is\x20no\x20reserve\x20parameter','TWO\x20RELEASE\x20STATES,\x20both\x20pure-Rate\x20splits\x20of\x20the\x20intact\x20pool:\x20payout_released\x20(host+platform,\x20guard\x20payout_release_gate\x20—\x20reached\x20via\x20ReleaseNoClaim\x20after\x20the\x20window\x20or\x20ReleaseAfterDeny\x20after\x20a\x20denial)\x20and\x20claim_paid\x20(host+platform,\x20guard\x20claim_paid_gate).\x20The\x20claim\x20award\x20is\x20the\x20host\x27s\x20own\x20escrowed\x20stay\x20income\x20—\x20the\x20pool\x20holds\x20nothing\x20more;\x20damages\x20BEYOND\x20the\x20booking\x20amount\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(3x\x20cap).\x20THIRD\x20state\x20(AB7-T1):\x20guest_claim_paid\x20—\x20a\x20GUEST\x20claim\x20upheld\x20refunds\x20the\x20order\x20in\x20full\x20via\x20guest_claim_paid_gate','BUYER-SIDE\x20CLAIM\x20PATH\x20+\x20ARBITRATION\x20APPEAL\x20(AB7-T1,\x20abnb7-mn-261013\x20F41/F42):\x20FileClaimByGuest\x20lets\x20the\x20ORDER\x20HOLDER\x20file\x20inside\x20the\x20serial\x20window\x20with\x20WTS-anchored\x20evidence\x20(a\x20signed\x20Proof\x20ADDRESS\x20as\x20the\x20repository\x20row\x20value\x20—\x20authenticity\x20verifier-checkable,\x20not\x20a\x20bare\x20text\x20row),\x20and\x20the\x20guest\x20evidence\x20row\x27s\x20write\x20authorization\x20MUST\x20include\x20the\x20order\x20holder\x20(a\x20host-only\x20writer\x20set\x20re-creates\x20the\x20F41\x20exclusion).\x20Either\x20party\x20can\x20send\x20a\x20contested\x20claim\x20to\x20the\x20Service\x27s\x20bound\x20Arbitration\x20via\x20the\x20claim_appealed\x20waypoint\x20(R-M1-11:\x20the\x20case\x20runs\x20off-Machine,\x20rulings\x20change\x20Arb\x20case\x20state\x20only,\x20and\x20the\x20keeper\x20pushes\x20the\x20final\x20forward\x20on\x20the\x20Arb\x20Finished\x20event\x20—\x20upheld\x20→\x20the\x20matching\x20paid\x20node,\x20denied\x20→\x20claim_denied).\x20No\x20claim\x20outcome\x20is\x20a\x20unilateral\x20permission\x20decision\x20anymore:\x20the\x20counterparty\x20always\x20holds\x20the\x20appeal\x20leg','FUND-TERMS\x20ROWS\x20ARE\x20EFFECTIVELY\x20WRITE-ONCE\x20(AB7-T2,\x20abnb7-mn-261013\x20F25):\x20any\x20repository\x20row\x20a\x20MONEY-MOVING\x20guard\x20reads\x20(cancellation-policy\x20tier\x20rows,\x20check-in\x20timestamps,\x20claim\x20thresholds)\x20is\x20a\x20fund\x20term\x20—\x20if\x20it\x20stays\x20counterparty-overwritable,\x20the\x20host\x20can\x20rewrite\x20the\x20terms\x20after\x20the\x20guest\x20cancels\x20and\x20even\x20zero\x20out\x20the\x20matching\x20rail,\x20with\x20no\x20buyer-visible\x20event\x20(RepositoryDataOverwriteEvent\x20renders\x20as\x20\x27Unknown\x20event\x27).\x20Never\x20route\x20fund\x20terms\x20through\x20a\x20single-party\x20mutable\x20row:\x20pin\x20the\x20term\x20row\x20at\x20booking\x20time\x20(or\x20bind\x20the\x20guard\x20to\x20order-scoped\x20values),\x20and\x20when\x20terms\x20must\x20change,\x20write\x20a\x20NEW\x20row\x20and\x20surface\x20the\x20change\x20in\x20the\x20Messenger\x20thread\x20—\x20a\x20silent\x20overwrite\x20of\x20fund\x20terms\x20is\x20a\x20unilateral\x20contract\x20amendment','Six\x20cancellation\x20tiers\x20=\x20six\x20time-lock\x20Guards;\x20the\x20host\x20picks\x20ONE\x20per\x20listing\x20via\x20the\x20cancellation_policy\x20input\x20(1..6,\x20benchmark\x20default\x201\x20=\x20flexible)\x20and\x20the\x20build\x20kernel\x20emits\x20ONLY\x20that\x20tier\x27s\x20forward\x20+\x20refund\x20rail\x20(M-T7\x20conditional\x20emission\x20—\x20the\x20other\x20five\x20tiers\x20are\x20dropped\x20at\x20compile,\x20so\x20the\x20overlapping-window\x20best-tier\x20pick\x20is\x20structurally\x20impossible).\x20Allocator\x20tier\x20Guards\x20anchor\x20on\x20progress.history.time\x20of\x20guest_cancelled\x20(the\x20cancellation\x20moment),\x20not\x20Clock.now()\x20—\x20keeper\x20trigger\x20timing\x20must\x20not\x20change\x20the\x20refund\x20tier','REQUEST-TO-BOOK\x20RAIL:\x20reserved\x20is\x20entered\x20ALREADY\x20PAID\x20(buy\x20escrows\x20atomically\x20—\x20no\x20unpaid\x20order\x20exists\x20on\x20chain;\x20the\x20incumbent\x27s\x20\x2724h\x20unpaid\x20expiry\x27\x20has\x20no\x20chain\x20equivalent).\x20cancelled_unpaid\x20is\x20the\x20host-decline\x20/\x20confirm-timeout\x20rail:\x20ExpireUnconfirmed\x20fires\x20on\x20the\x20confirm\x20window\x20(progress.history.time\x20of\x20reserved\x20+\x20confirm_window_hours,\x20keeper-advanced),\x20DeclineRequest\x20is\x20the\x20host\x27s\x20manual\x20reject\x20—\x20both\x20refund\x20in\x20full\x20via\x20the\x20confirm_expire\x20allocator','RELATIVE\x20time\x20windows\x20use\x20ONE\x20shared\x20witness-derived\x20Guard\x20each\x20(verified\x20on-chain):\x20anchor\x20=\x20progress.history.time\x20+\x20duration_ms\x20via\x20a\x20convert_witness\x20submission\x20of\x20the\x20OrderProgress\x20—\x20a\x20single\x20Guard\x20then\x20serves\x20EVERY\x20order.\x20Cancellation\x20windows\x20anchor\x20to\x20order.time;\x20POST-CHECKOUT\x20windows\x20(claim_window_open\x20/\x20claim_window_closed)\x20anchor\x20to\x20the\x20claim_window\x20ENTRY\x20(progress.history.time\x201280,\x20next_node=\x27claim_window\x27,\x20find=last)\x20—\x20anchoring\x20a\x20claim\x20window\x20to\x20order.time\x20makes\x20the\x20branch\x20unreachable\x20(order-time\x20+\x20pre-checkout\x20durations\x20>\x20window).\x20Only\x20ABSOLUTE\x20date\x20gates\x20(arrival-day\x2016:00)\x20are\x20per-order\x20instances','Surplus\x20mode\x20is\x20disabled\x20template-wide\x20—\x20a\x20withdraw-all\x20leg\x20would\x20sweep\x20money\x20still\x20owed\x20to\x20other\x20tracks\x20(an\x20uncapped\x20Surplus\x20takes\x20the\x20whole\x20remaining\x20balance,\x20allocation.move\x20withdraw_all\x20semantics)','Coverage-program\x20equivalent\x20=\x20compensation\x20fund:\x20publishing\x20with\x20a\x20funded\x20pool\x20requires\x20a\x20mounted\x20Arbitration','Arbitration\x20awards\x20are\x20capped\x20at\x203x\x20the\x20order\x20amount\x20—\x20excess\x20is\x20covered\x20by\x20the\x20compensation\x20fund\x20(recipient\x20hard-bound\x20to\x20the\x20order\x20owner)','Claim\x20escalation\x20goes\x20to\x20Arbitration\x20off-Machine\x20(R-M1-11)\x20—\x20claim_open/claim_denied/claim_paid\x20are\x20business\x20states,\x20not\x20dispute\x20terminals','Keepers\x20advance:\x20confirm\x20expiry,\x20check-in/out\x20gates,\x20claim-window\x20open\x20(right\x20after\x20checkout),\x20no-claim\x20release\x20(window\x20close),\x20and\x20finalize\x20—\x20time-lock\x20Guards\x20only\x20ALLOW\x20transitions','Platform\x20commission\x20recipient\x20MUST\x20be\x20an\x20explicit\x200x\x20vault\x20Entity\x20—\x20an\x20EMPTY\x20Entity\x20(\x22\x22)\x20silently\x20routes\x20the\x20platform\x20take\x20to\x20the\x20builder\x27s\x20own\x20local\x20account\x20(the\x20take\x20must\x20land\x20in\x20the\x20platform\x20treasury,\x20never\x20the\x20deploying\x20AI/host).\x20Defaults\x20ship\x20platform_rate_bps=0\x20/\x20host_rate_bps=10000\x20(pure\x20direct\x20sales\x20—\x20the\x20template\x27s\x20own\x20default\x20must\x20never\x20trip\x20R-RECIPIENT-03,\x20bkng3\x20live\x20lesson).\x20To\x20charge\x20an\x20aggregator\x20fee:\x20FIRST\x20create\x20the\x20platform\x20vault\x20Entity\x20(a\x20local\x20mark\x20named\x20\x27platform\x27\x20bound\x20to\x20the\x20treasury\x200x\x20address)\x20so\x20recipient_key:\x27platform\x27\x20resolves,\x20THEN\x20raise\x20platform_rate_bps\x20and\x20recompute\x20host_rate_bps\x20so\x20each\x20group\x20still\x20sums\x2010000.\x20An\x20unresolved\x20\x27platform\x27\x20mark\x20is\x20a\x20NON-blocking\x20warning;\x20an\x20EMPTY\x20Entity\x20is\x20a\x20BLOCKING\x20critical','Penalty-class\x20allocators\x20(late-cancel\x20fine,\x20host-cancel\x20penalty)\x20MUST\x20use\x20Rate\x20sharing\x20—\x20a\x20fixed\x20Amount\x20is\x20snapshotted\x20at\x20configuration\x20time\x20and\x20can\x20EXCEED\x20a\x20small\x20order\x27s\x20escrow,\x20aborting\x20the\x20allocation\x20with\x20Insufficient\x20balance\x20and\x20permanently\x20deadlocking\x20that\x20branch\x20(on-chain\x20verified)','Continuous\x20compensation\x20formulas\x20(refund\x20by\x20nights\x20used)\x20are\x20approximated\x20with\x20the\x20tiered\x20ladder\x20—\x20fixed\x20sharing\x20per\x20tier\x20selected\x20by\x20interval\x20Guards\x20(greater/lesser\x20opcodes,\x20on-chain\x20verified):\x20see\x20pattern.tiered_amount_ladder;\x20every\x20fixed\x20Amount\x20tier\x20must\x20stay\x20below\x20the\x20smallest\x20expected\x20order\x20escrow','Host-breach\x20guest\x20compensation\x20(re-booking\x20cost)\x20has\x20NO\x20automatic\x20allocator\x20—\x20host_cancelled\x20only\x20refunds\x20the\x20guest\x20in\x20full;\x20model\x20extra\x20compensation\x20as\x20an\x20arbitration\x20counterclaim\x20playbook\x20(guest\x20opens\x20an\x20Arb\x20case\x20against\x20the\x20host\x20service,\x20fund\x20pays\x20the\x20ruling)','Arbitration\x20rulings\x20change\x20Arb\x20case\x20state\x20only\x20and\x20NEVER\x20advance\x20the\x20Machine\x20—\x20a\x20keeper\x20must\x20listen\x20for\x20Arb\x20Finished\x20events\x20and\x20push\x20the\x20affected\x20Order\x27s\x20terminal\x20forward\x20itself\x20(ruling-payout\x20nodes\x20stay\x20manual\x20otherwise)','DUAL-TRACK\x20WARNING\x20(A-2,\x20mainnet-verified\x204x\x20worst\x20case):\x20the\x20refund\x20allocators\x20and\x20the\x20compensation\x20fund\x20are\x20independent\x20channels\x20—\x20a\x20full\x20refund\x20does\x20NOT\x20bar\x20a\x20later\x20compensation\x20claim\x20(the\x20compensation-claim\x20call\x20has\x20no\x20Guard\x20slot).\x20Refund\x20guards\x20should\x20assert\x20order.claimed_by\x20none\x20(blocks\x20claim-then-refund);\x20refund-then-claim\x20stays\x20open\x20until\x20the\x20contract\x20tracks\x20refunded_amount\x20—\x20size\x20the\x20fund\x20accordingly','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20Enforce\x20it\x20by\x20ANDing\x20the\x20pattern.required_info_evidence_gate\x20Guard\x20into\x20\x27checkin_gate\x27\x20(gate\x20order.required_info\x20some\x20BEFORE\x20keys\x20hand\x20over),\x20not\x20by\x20declaring\x20the\x20list;\x20only\x20the\x20PRESENCE\x20is\x20asserted\x20—\x20the\x20recorded\x20address\x20value\x20is\x20never\x20a\x20guard\x20condition,\x20and\x20acceptance\x20of\x20the\x20delivered\x20info\x20is\x20the\x20host\x27s\x20confirming\x20forward.\x20QUOTA\x20COUPLING:\x20the\x20guest\x27s\x20info\x20message\x20shares\x20the\x20SINGLE\x20stranger-message\x20quota\x20—\x20make\x20it\x20the\x20FIRST\x20pre-order\x20message,\x20or\x20have\x20the\x20host\x20respond\x20first\x20to\x20open\x20the\x20conversation','PRIVACY\x20BOUNDARY\x20(M-T10):\x20the\x20customer-service\x20Contact\x20is\x20a\x20PUBLIC\x20shared\x20object\x20—\x20anyone\x20can\x20read\x20its\x20description/location\x20and\x20the\x20full\x20IM\x20directory\x20(every\x20member\x27s\x20at/status/join_time/description,\x20no\x20permission\x20gate),\x20and\x20each\x20member\x27s\x20status\x20is\x20self-declared\x20(a\x20member\x20can\x20only\x20update\x20their\x20OWN\x20status\x20row\x20—\x20sender-scoped,\x20no\x20owner\x20override).\x20Buyer↔host\x20negotiation\x20is\x20therefore\x20NOT\x20private\x20on\x20chain:\x20message\x20CONTENT\x20stays\x20private\x20only\x20inside\x20end-to-end\x20encrypted\x20Messenger\x20sessions\x20(off-chain),\x20while\x20membership\x20itself\x20and\x20everything\x20on\x20the\x20Contact\x20object\x20is\x20public.\x20Never\x20record\x20personal\x20data\x20(phone,\x20email,\x20exact\x20unit\x20address)\x20in\x20Contact\x20description/location/IM\x20entries\x20—\x20deliver\x20those\x20via\x20Messenger,\x20and\x20keep\x20only\x20city-level\x20location\x20data\x20on\x20chain','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'host_rate_bps':0x2710,'platform_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'claim_window_days':0xe,'review_window_days':0xe,'cancellation_policy':'1','confirm_window_hours':0x18,'tier5_guest_bps':0x1388,'tier5_host_bps':0x1388,'tier6_guest_bps':0x1388,'tier6_host_bps':0x1388,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'conditional_guards':[{'guard_key':'cancel_tier_1','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'1','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_1_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'1','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-1\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_2','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'2','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_2_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'2','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-2\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_3','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'3','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_3_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'3','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-3\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_4','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'4','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_4_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'4','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-4\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_5','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'5','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_5_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'5','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-5\x20forward\x20and\x20its\x20refund\x20allocator)'},{'guard_key':'cancel_tier_6','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'6','question':'Cancellation\x20policy:\x20which\x20guest-cancel\x20tier\x20mounts\x20on\x20this\x20listing?\x201\x20=\x20flexible\x20(full\x20refund\x20until\x2024h\x20before\x20check-in),\x202\x20=\x20moderate\x20(until\x205\x20days),\x203\x20=\x20firm\x20(until\x2014\x20days),\x204\x20=\x20strict\x20(until\x2030\x20days),\x205\x20=\x20strict-partial\x20(50%/50%\x20split\x20at\x207+\x20days),\x206\x20=\x20long-stay\x20(28+\x20nights,\x2030-day\x20window,\x2050%/50%\x20split)'},{'guard_key':'cancel_tier_6_refund','param':'cancellation_policy','values':['1','2','3','4','5','6'],'emit_value':'6','question':'Cancellation\x20policy\x20tier\x20(mounts\x20with\x20the\x20tier-6\x20forward\x20and\x20its\x20refund\x20allocator)'}],'time_anchors':{'confirm_expire':'progress.history.time\x20(id\x201280,\x20next_node=\x27reserved\x27,\x20find=last)','cancellation':'order.time','host_cancellation':'order.time','claim_window_open':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last)','claim_window_closed':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last)','checkin':'absolute_date','checkout':'absolute_date'},'trust_mechanisms':['R1\x20per-tier\x20refund\x20allocators\x20+\x20host-cancel\x20full\x20refund\x20+\x20unconfirmed-request\x20full\x20refund','R2\x20independent\x20arbitration\x20Permission\x20(contract-enforced\x20separation)','R3\x20compensation\x20fund\x20(coverage\x20program)\x20covering\x20award\x20amounts\x20beyond\x20the\x203x\x20cap','R4\x20check-in/out\x20time\x20gates\x20+\x20claim\x20evidence\x20reliance\x20—\x20no\x20self-sign','R5\x20order-anchored\x20payments','R6\x20serial\x20claim\x20window:\x20payout\x20can\x20never\x20fire\x20while\x20a\x20claim\x20is\x20open\x20or\x20the\x20window\x20is\x20still\x20running;\x20pure-Rate\x20legs\x20sum\x2010000\x20per\x20release\x20state;\x20Surplus\x20disabled\x20template-wide','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20confirm\x20expiry,\x20check-in/out\x20gates,\x20claim-window\x20open/close,\x20and\x20finalize','R10\x20cancellation\x20policy\x20parameters\x20embedded\x20as\x20immutable\x20Guard\x20tiers\x20(one\x20mounted\x20per\x20listing)'],'keeper_dependencies':['request\x20confirm\x20expiry\x20(confirm_window_hours)','check-in/check-out\x20time\x20gates','claim-window\x20open\x20(right\x20after\x20checkout)','no-claim\x20release\x20(claim\x20window\x20close)','claim\x20response\x20window\x20expiry'],'recommended_role':'merchant','role_rationale':'Hosts\x20and\x20property\x20operators\x20own\x20the\x20listing\x20Service;\x20the\x20platform\x20variant\x20hosts\x20many\x20hosts\x20under\x20Permission\x20entities\x20with\x20per-listing\x20Guard\x20instances.','differences':['Light\x20platform:\x20hosts\x20own\x20their\x20listing\x20Services;\x20relative\x20time\x20windows\x20are\x20witness-derived\x20shared\x20Guards\x20(progress.history.time\x20+\x20duration);\x20only\x20absolute\x20date\x20gates\x20are\x20per-order\x20instances','Payout\x20timing:\x20the\x20serial\x20claim\x20window\x20sits\x20BETWEEN\x20checkout\x20and\x20payout\x20(v30,\x20ABNB2-validated)\x20—\x20the\x20pool\x20releases\x20only\x20after\x20the\x20window\x20closes\x20with\x20no\x20upheld\x20claim\x20(Rate\x2010000\x20⇒\x20full\x20drain\x20of\x20the\x20INTACT\x20pool;\x20no\x20on-chain\x20holdback\x20exists\x20—\x20FACT-ALLOC-03);\x20damages\x20beyond\x20the\x20booking\x20amount\x20route\x20to\x20arbitration\x20+\x20compensation\x20fund','Request-to-book\x20rail:\x20reserved\x20is\x20paid-and-pending;\x20host\x20decline\x20or\x20confirm\x20timeout\x20refunds\x20in\x20full\x20(the\x20incumbent\x27s\x20unpaid-expiry\x20has\x20no\x20chain\x20equivalent\x20—\x20buy\x20escrows\x20atomically)','Six\x20cancellation\x20policy\x20tiers\x20with\x20per-tier\x20refund\x20allocator\x20splits\x20—\x20the\x20host\x20picks\x20one\x20via\x20the\x20cancellation_policy\x20input\x20and\x20the\x20build\x20kernel\x20mounts\x20ONLY\x20that\x20tier\x27s\x20forward\x20+\x20refund\x20rail\x20(M-T7);\x20partial\x20tiers\x20split\x20guest/host\x20inside\x20ONE\x20allocator\x20group','Damage\x20claims\x20rely\x20on\x20the\x20pre+post\x20evidence\x20comparison\x20chain\x20inside\x20the\x20serial\x20claim\x20window;\x20the\x20claim\x20award\x20is\x20the\x20host\x27s\x20escrowed\x20stay\x20income\x20—\x20damages\x20beyond\x20it\x20route\x20to\x20arbitration\x20+\x20compensation\x20fund','Platform\x20commission\x20recipient\x20must\x20be\x20an\x20explicit\x200x\x20vault\x20Entity\x20—\x20never\x20the\x20empty\x20Entity\x20default'],'user_inputs':['host_rate_bps\x20/\x20platform_rate_bps\x20—\x20the\x20payout\x20split\x20(applied\x20identically\x20to\x20both\x20release\x20states)','claim_window_days\x20/\x20review_window_days\x20—\x20post-checkout\x20windows\x20(the\x20claim\x20window\x20is\x20the\x20ONLY\x20delay\x20between\x20checkout\x20and\x20payout)','confirm_window_hours\x20—\x20host\x20confirmation\x20window\x20before\x20auto-cancel','cancellation_policy\x20—\x20which\x20of\x20the\x20six\x20tier\x20Guards\x20to\x20mount\x20per\x20listing\x20(\x221\x22\x20flexible\x20...\x20\x226\x22\x20long-stay;\x20the\x20benchmark\x20default\x20is\x20\x221\x22;\x20the\x20T5/T6\x20partial-split\x20rows\x20carry\x20value_from\x20tier5_host_bps\x20/\x20tier6_host_bps).\x20The\x20build\x20kernel\x20emits\x20ONLY\x20the\x20selected\x20tier\x27s\x20forward\x20and\x20refund\x20rail\x20(M-T7\x20conditional\x20emission)']},{'id':'rental/institutional-longstay','industry':'rental','variant':'institutional-longstay','product_ref':'ziroom','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'deposit_paid','role':'Entry:\x20deposit\x20+\x2012\x20months\x20rent\x20escrowed\x20in\x20a\x20single\x20Allocation\x20(pre-funded\x20pool)','semantic_role':'draft','from':[{'prev':'','forward':'begin','operator':'order_payer'}]},{'name':'in_use','role':'Handover\x20done\x20(checklist\x20hash\x20written\x20to\x20the\x20evidence\x20Repository);\x20tenancy\x20active,\x20monthly\x20releases\x20run','semantic_role':'active','from':[{'prev':'deposit_paid','forward':'handover','permission_index':0x3e8,'guard_key':'handover'}]},{'name':'returned','role':'Tenant\x20returns\x20keys\x20(>=\x2015\x20days\x20notice\x20or\x20lease\x20end);\x20the\x20operator\x20accepts\x20the\x20return','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'in_use','forward':'return_accept','permission_index':0x3e8,'guard_key':'return_notice'}]},{'name':'inspected','role':'Verifier\x20inspects\x20within\x2024h\x20(pre+post\x20evidence\x20comparison\x20against\x20the\x20natural-wear\x20table)','semantic_role':'delivered','from':[{'prev':'returned','forward':'inspect_start','permission_index':0x3e9}]},{'name':'reviewed','role':'Tenant\x20reviews\x20the\x20stay\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20after\x20the\x20passing\x20inspection\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'inspected','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Lease\x20finalized\x20—\x20deposit\x20refund\x20Allocator\x20to\x20the\x20tenant\x20(3-business-day\x20deadline);\x20on\x20an\x20EARLY\x20return\x20the\x20unearned\x20prepaid\x20rent\x20still\x20in\x20the\x20pool\x20rides\x20the\x20terminal_residual_sweep\x20home\x20to\x20the\x20tenant\x20(the\x20month\x20rails\x20pin\x20in_use\x20and\x20are\x20dead\x20past\x20this\x20node\x20—\x20mn-261019\x20rental\x20report\x20RETURN-STRAND),\x20so\x20the\x20operator\x20must\x20advance\x20completed\x20only\x20after\x20every\x20served\x20month\x20has\x20actually\x20released','semantic_role':'final','from':[{'prev':'inspected','forward':'result_pass','permission_index':0x3e9,'guard_key':'inspect_window'},{'prev':'inspected','forward':'inspect_timeout_pass','operator':'order_payer','guard_key':'inspect_timeout'},{'prev':'returned','forward':'no_inspection_timeout','operator':'order_payer','guard_key':'no_inspect_timeout'},{'prev':'reviewed','forward':'result_pass_after_review','permission_index':0x3e9}]},{'name':'damage_confirmed','role':'Damage\x20confirmed\x20via\x20evidence\x20diff\x20—\x20deposit\x20deduction\x20Allocator\x20(repair\x20cost\x20per\x20public\x20price\x20table)','semantic_role':'final','from':[{'prev':'inspected','forward':'verdict_damage','permission_index':0x3ea,'guard_key':'damage_evidence'}]},{'name':'closed_cancel','role':'No-fault\x20exit\x20within\x203\x20days\x20of\x20signing\x20—\x20full\x20refund\x20Allocator','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'in_use','forward':'nofault_exit','operator':'order_payer','guard_key':'nofault_window'},{'prev':'deposit_paid','forward':'nofault_exit_prehandover','operator':'order_payer','guard_key':'nofault_window'}]},{'name':'early_terminated','role':'Early\x20exit\x20—\x20penalty\x20Allocator\x20(1\x20month\x20rent;\x20halved\x20when\x20re-let)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'in_use','forward':'early_exit','operator':'order_payer','guard_key':'early_exit_window'}]}],'guards':[{'template_id':'pattern.verifier_evidence_philosophy','host':'service','key':'buy','purpose':'Deposit\x20+\x2012\x20months\x20rent\x20escrowed\x20on\x20purchase\x20(one\x20pre-funded\x20pool)'},{'template_id':'pattern.repository_data_check','host':'machine','key':'handover','purpose':'Handover\x20checklist\x20hash\x20written\x20to\x20the\x20evidence\x20Repository\x20at\x20move-in'},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20operator\x20declares\x20customer_required\x20(tenant\x20identity\x20for\x20the\x20lease):\x20AND\x20into\x20\x27handover\x27\x20—\x20gate\x20order.required_info\x20some\x20so\x20the\x20tenant\x27s\x20recorded\x20credential\x20is\x20on-chain\x20before\x20keys\x20hand\x20over;\x20the\x20operator\x20eyeballing\x20the\x20recorded\x20contact\x20in\x20the\x20Messenger\x20conversation\x20(never\x20the\x20recorded\x20address\x20value)\x20is\x20the\x20acceptance\x20basis;\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(testnet\x20HIGH-05),\x20so\x20this\x20Guard\x20is\x20the\x20only\x20enforcement'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'return_notice','purpose':'Return\x20request\x20>=\x20fee_params.return_notice_days\x20(default\x2015)\x20days\x20ahead\x20(or\x20lease\x20end)\x20—\x20the\x20window\x20value\x20comes\x20from\x20the\x20named\x20fee_param,\x20never\x20hand-invented'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'inspect_window','purpose':'Inspection\x20within\x2024h\x20of\x20key\x20return\x20—\x20the\x20verifier\x27s\x20pass\x20window,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound\x20(the\x20inspection\x20action\x20is\x20allowed\x20only\x20INSIDE\x20the\x2024h;\x20the\x20opening-gate\x20twin\x20would\x20forbid\x20it\x20exactly\x20when\x20it\x20is\x20due\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'inspect_timeout','purpose':'Verifier\x20no-show\x20after\x20the\x20inspection\x20window\x20—\x20the\x20tenant\x20self-completes'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'no_inspect_timeout','purpose':'Inspection\x20never\x20started\x20within\x20the\x20deadline\x20after\x20the\x20return\x20—\x20the\x20tenant\x20self-completes'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Tenant\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20the\x20passing\x20inspection,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20deposit\x20rail\x20always\x20keeps\x20the\x20unreviewed\x20path\x20inspected\x20->\x20completed;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'nofault_window','purpose':'No-fault\x20exit\x20within\x203\x20days\x20of\x20signing\x20—\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound\x20(exit\x20is\x20allowed\x20only\x20INSIDE\x20the\x203\x20days;\x20the\x20opening-gate\x20twin\x20would\x20invert\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'early_exit_window','purpose':'Early-exit\x20notice\x20window.\x20DIRECTION\x20CAVEAT\x20(catalog\x20sweep\x202026-10-19):\x20an\x20early\x20exit\x20is\x20typically\x20allowed\x20THROUGHOUT\x20the\x20lease\x20—\x20the\x20penalty\x20allocator\x20carries\x20the\x20economics\x20—\x20so\x20bind\x20a\x20time\x20leg\x20only\x20deliberately:\x20a\x20notice-period-elapsed\x20leg\x20is\x20the\x20OPENING\x20gate\x20(time_lock_progress),\x20an\x20exit-by\x20deadline\x20is\x20the\x20CLOSING\x20window\x20(time_window_upper_bound);\x20never\x20inherit\x20a\x20direction\x20by\x20habit'},{'template_id':'pattern.repository_data_check','host':'machine','key':'damage_evidence','purpose':'Damage\x20verdict\x20relies\x20on\x20pre+post\x20evidence\x20comparison;\x20the\x20natural-wear\x20table\x20excludes\x20normal\x20aging'},{'template_id':'pattern.allocator_order_anchor','host':'service','key':'order_anchor','purpose':'Refund/split\x20allocator\x20anchor:\x20one\x20Rate-0\x20GuardIdentifier(0)\x20row\x20makes\x20the\x20submitted\x20ORDER\x20the\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20built\x20from\x20a\x20sibling\x20order\x27s\x20state\x20cannot\x20satisfy\x20the\x20refund\x20gates\x20(mainnet\x20CR-01)\x20—\x20the\x20anchor\x20row\x20pays\x20nothing.\x20SCOPE\x20(ZR-34):\x20Rate-bearing\x20or\x20mixed\x20(Amount+Rate)\x20groups\x20ONLY\x20—\x20inside\x20a\x20pure-Amount\x20group\x20the\x20Rate-0\x20row\x20flips\x20the\x20group\x20to\x20Rate\x20mode\x20(Rates\x20must\x20then\x20sum\x2010000)\x20and\x20configuration\x20aborts\x20(R-A-1-02);\x20pure-Amount\x20groups\x20anchor\x20via\x20their\x20pinned\x20Amount\x20+\x20GuardIdentifier(0)\x20recipient\x20+\x20the\x20255\x20once\x20slot\x20instead'},{'template_id':'pattern.allocation_staged_release','host':'machine','key':'staged_release','purpose':'TWELVE\x20per-month\x20time-lock\x20Guards\x20(one\x20per\x20rent\x20period)\x20—\x20a\x20single\x20shared\x20Guard\x20would\x20allow\x20same-day\x20double\x20releases'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_1_release','purpose':'Month\x201\x20rent\x20release\x20window\x20(30\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_2_release','purpose':'Month\x202\x20rent\x20release\x20window\x20(60\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_3_release','purpose':'Month\x203\x20rent\x20release\x20window\x20(90\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_4_release','purpose':'Month\x204\x20rent\x20release\x20window\x20(120\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_5_release','purpose':'Month\x205\x20rent\x20release\x20window\x20(150\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_6_release','purpose':'Month\x206\x20rent\x20release\x20window\x20(180\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_7_release','purpose':'Month\x207\x20rent\x20release\x20window\x20(210\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_8_release','purpose':'Month\x208\x20rent\x20release\x20window\x20(240\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_9_release','purpose':'Month\x209\x20rent\x20release\x20window\x20(270\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_10_release','purpose':'Month\x2010\x20rent\x20release\x20window\x20(300\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_11_release','purpose':'Month\x2011\x20rent\x20release\x20window\x20(330\x20days\x20after\x20handover)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'month_12_release','purpose':'Month\x2012\x20rent\x20release\x20window\x20(360\x20days\x20after\x20handover)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'deposit_refund_gate','purpose':'Deposit\x20refund\x20allocator\x20gate:\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'damage_refund_gate','purpose':'Damage\x20settlement\x20allocator\x20gate:\x20progress.current\x20==\x20damage_confirmed\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'early_exit_gate','purpose':'Early-exit\x20settlement\x20allocator\x20gate:\x20progress.current\x20==\x20early_terminated\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'nofault_refund_gate','purpose':'No-fault\x20refund\x20allocator\x20gate:\x20progress.current\x20==\x20closed_cancel\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20none'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion,\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20landlord\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits\x20(a\x20leased\x20order\x20awarded\x20mid-term\x20would\x20otherwise\x20weld\x20SHUT\x20every\x20claimed_by-none\x20rail\x20—\x20the\x20deposit\x20refund\x20above,\x20the\x20damage/early-exit\x20remainders,\x20the\x20no-fault\x20sweep\x20—\x20leaving\x20the\x20residual\x20pool\x20with\x20no\x20exit;\x20the\x20still-valid\x20month\x20Guards\x20keep\x20paying\x20but\x20a\x20pool\x20residual\x20below\x20the\x20next\x20pinned\x20Amount\x20can\x20never\x20leave).\x20Exactly\x20one\x20of\x20the\x20claimed_by-none\x20exit\x20rails\x20/\x20recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_residual_sweep','purpose':'Terminal\x20residual\x20sweep\x20at\x20completed\x20(KLK-P0-2\x20prescription;\x20mn-261019\x20rental\x20report\x20RETURN-STRAND,\x20T1/T6\x20live\x20evidence):\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20welds\x20only\x20after\x20an\x20award\x20has\x20actually\x20paid\x20—\x20the\x20recover_gate\x20rail\x20above\x20is\x20the\x20polarity\x20twin,\x20D-BUG-2)\x20+\x20NO\x20signer\x20leg\x20(keeper-reachable)\x20+\x20NO\x20window\x20leg\x20(always-on)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21)\x20+\x20the\x20identifier-255\x20once\x20slot\x20(per-Allocator\x20once\x20record\x20—\x20a\x20replay\x20aborts\x2016).\x20Rate\x2010000\x20sweeps\x20whatever\x20remains\x20in\x20the\x20pool\x20at\x20fire\x20time\x20to\x20the\x20order\x20anchor\x20(its\x20own\x20allocator\x20group\x20with\x20NO\x20Amount\x20leg,\x20so\x20the\x20base\x20is\x20the\x20current\x20balance):\x20on\x20the\x20golden\x20path\x20the\x20lease\x20ran\x20full\x20term,\x20the\x20pool\x20holds\x20only\x20the\x20deposit\x20—\x20a\x20fire\x20pays\x20it\x20to\x20the\x20same\x20order-anchored\x20recipient\x20the\x20deposit\x20leg\x20pays\x20(no\x20double\x20pay;\x20the\x20loser\x20of\x20the\x20race\x20aborts\x2014\x20EZERO_DISTRIBUTION\x20harmlessly);\x20on\x20an\x20EARLY\x20return\x20the\x20unearned\x20prepaid\x20rent\x20rides\x20the\x20sweep\x20home\x20to\x20the\x20tenant\x20—\x20the\x20earned\x20months\x20already\x20paid\x20via\x20their\x20own\x20month\x20Guards,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund\x20(same\x20shape\x20as\x20mooc-degree\x20terminal_settlement).\x20NEVER\x20widen\x20the\x20node\x20set\x20to\x20{damage_confirmed,\x20early_terminated,\x20closed_cancel}:\x20those\x20terminals\x27\x20remainder\x20rails\x20are\x20already\x20full\x20sweeps\x20—\x20a\x20second\x20Rate-10000\x20allocator\x20there\x20would\x20re-split\x20the\x20residual\x20(E-2)'},{'template_id':'pattern.fund_flow_refund_freeform','host':'machine','key':'early_exit_policy','purpose':'Early-exit\x20penalty\x20=\x20100%\x20of\x20one\x20month\x20rent\x20(halved\x20when\x20re-let);\x20the\x20tenant\x20receives\x20the\x20remainder'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'landlord','refund_track':'order_anchored','count':0xf,'mode':'amount','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_1_release','note':'Month\x201\x20of\x2012.\x20The\x20Amount\x20is\x20pinned\x20at\x20build\x20time\x20—\x20the\x20SKU\x20PRICE\x20LOCK\x20(order\x20price\x20=\x2012\x20x\x20monthly_rent_amount\x20+\x20deposit_amount)\x20proves\x20the\x20pool\x20covers\x20every\x20leg;\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20at\x20EVERY\x20release\x20(allocation.move,\x20EINSUFFICIENT_BALANCE),\x20so\x20a\x20lease\x20priced\x20below\x20the\x20pinned\x20leg\x20deadlocks\x20with\x20no\x20refund\x20path\x20(mainnet\x20CR-02).'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_2_release','note':'Month\x202\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_3_release','note':'Month\x203\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_4_release','note':'Month\x204\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_5_release','note':'Month\x205\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_6_release','note':'Month\x206\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_7_release','note':'Month\x207\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_8_release','note':'Month\x208\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_9_release','note':'Month\x209\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_10_release','note':'Month\x2010\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_11_release','note':'Month\x2011\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'monthly_rent_amount','guard_key':'month_12_release','note':'Month\x2012\x20of\x2012.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'damage_max_amount','guard_key':'damage_refund_gate','note':'Damage\x20deduction\x20to\x20the\x20landlord,\x20capped\x20at\x20damage_max_amount\x20(public\x20repair\x20price\x20table).\x20HARD\x20INVARIANT:\x20damage_max_amount\x20<=\x20deposit_amount\x20—\x20the\x20deduction\x20is\x20bounded\x20by\x20the\x20deposit.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'damage_refund_gate','note':'Tenant\x20remainder\x20at\x20damage_confirmed:\x20the\x20landlord\x27s\x20deduction\x20is\x20an\x20Amount\x20leg\x20in\x20this\x20same\x20allocator\x20group,\x20and\x20the\x20chain\x20computes\x20fix\x20as\x20the\x20sum\x20of\x20a\x20group\x27s\x20Amount\x20legs\x20(allocation.move\x20fix\x20computation\x20—\x20the\x20Rate\x20base\x20is\x20then\x20balance\x20-\x20fix)\x20—\x20so\x20the\x20tenant\x20leg\x20resolves\x20to\x20(pool\x20-\x20deduction)\x20=\x20deposit\x20+\x20unreleased\x20prepaid\x20rent\x20-\x20deduction\x20with\x20NO\x20template-side\x20fix\x20declaration\x20(v29:\x20fix/fix_from\x20retracted,\x20FACT-ALLOC-03).\x20The\x20lease\x20is\x20over,\x20so\x20the\x20prepaid\x20unused\x20rent\x20correctly\x20returns\x20to\x20the\x20tenant\x20together\x20with\x20the\x20deposit\x20remainder.'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'amount','value_from':'early_exit_penalty_amount','guard_key':'early_exit_gate','note':'Early-exit\x20penalty\x20to\x20the\x20landlord\x20(1\x20month\x20rent;\x20halve\x20early_exit_penalty_amount\x20when\x20re-let).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'early_exit_gate','note':'Tenant\x20remainder\x20at\x20early_terminated:\x20the\x20Rate\x20base\x20is\x20(pool\x20-\x20penalty)\x20because\x20the\x20penalty\x20Amount\x20leg\x20lands\x20in\x20the\x20group\x20fix\x20the\x20chain\x20computes\x20itself\x20(allocation.move\x20fix\x20computation)\x20—\x20deposit\x20+\x20unreleased\x20prepaid\x20rent\x20-\x20penalty\x20(v29:\x20fix_from\x20retracted,\x20FACT-ALLOC-03).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'amount','value_from':'deposit_amount','guard_key':'deposit_refund_gate','note':'T-05\x20FIX:\x20the\x20deposit\x20leg\x20is\x20an\x20Amount\x20pinned\x20to\x20deposit_amount\x20paying\x20the\x20order\x20owner\x20—\x20a\x20Surplus/Rate-10000\x20leg\x20here\x20swept\x20the\x20deposit\x20PLUS\x20all\x20unreleased\x20rent\x20to\x20the\x20tenant\x20on\x20mainnet\x20(585/525\x20in\x20full;\x20the\x20landlord\x20received\x200).\x20On\x20the\x20golden\x20path\x20(full\x20term)\x20every\x20rent\x20release\x20has\x20fired,\x20so\x20the\x20pool\x20holds\x20exactly\x20the\x20deposit;\x20on\x20an\x20EARLY\x20return\x20the\x20pool\x20still\x20holds\x20the\x20unearned\x20prepaid\x20rent\x20—\x20the\x20terminal_residual_sweep\x20row\x20below\x20carries\x20it\x20home\x20to\x20the\x20tenant\x20(the\x20month\x20rails\x20pin\x20in_use\x20and\x20are\x20dead\x20past\x20completed\x20—\x20mn-261019\x20rental\x20report\x20RETURN-STRAND),\x20so\x20advance\x20completed\x20only\x20after\x20every\x20served\x20month\x20has\x20actually\x20released.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'terminal_residual_sweep','note':'Terminal\x20residual\x20sweep\x20at\x20completed\x20(KLK-P0-2\x20prescription;\x20mn-261019\x20rental\x20report\x20RETURN-STRAND):\x20Rate\x2010000\x20of\x20the\x20CURRENT\x20pool\x20balance\x20to\x20the\x20order-anchored\x20recipient\x20—\x20its\x20own\x20allocator\x20group\x20with\x20NO\x20Amount\x20leg,\x20so\x20the\x20base\x20is\x20whatever\x20remains\x20at\x20fire\x20time.\x20DORMANT-by-recipient\x20on\x20the\x20golden\x20path:\x20a\x20full-term\x20lease\x20leaves\x20only\x20the\x20deposit,\x20and\x20a\x20fire\x20pays\x20it\x20to\x20the\x20same\x20order-anchored\x20recipient\x20the\x20deposit\x20leg\x20pays\x20(no\x20double\x20pay;\x20the\x20loser\x20of\x20the\x20race\x20aborts\x2014\x20EZERO_DISTRIBUTION\x20harmlessly).\x20On\x20an\x20EARLY\x20return\x20the\x20unearned\x20prepaid\x20rent\x20(the\x20month\x20rails\x20pin\x20in_use,\x20so\x20months\x204..12\x20can\x20never\x20fire\x20past\x20completed)\x20rides\x20the\x20sweep\x20home\x20to\x20the\x20tenant\x20—\x20the\x20earned\x20months\x20already\x20paid\x20via\x20their\x20own\x20month\x20Guards,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund\x20(same\x20shape\x20as\x20mooc-degree\x20terminal_settlement).\x20Excluded\x20AFTER\x20an\x20award\x20by\x20claimed_by\x20some\x20==\x20false\x20(recover_gate\x20is\x20the\x20polarity\x20twin,\x20D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'nofault_refund_gate','note':'No-fault\x20exit\x20within\x203\x20days\x20of\x20signing:\x20FULL\x20refund\x20of\x20the\x20whole\x20pool\x20(deposit\x20+\x2012\x20months\x20rent)\x20to\x20the\x20order\x20owner\x20—\x20a\x20full\x20sweep\x20is\x20correct\x20on\x20this\x20rail\x20because\x20no\x20rent\x20release\x20can\x20have\x20fired\x20yet\x20(month_1\x20opens\x2030\x20days\x20after\x20handover).'},{'track':'settlement','recipient':'entity','recipient_key':'landlord','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20landlord\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20the\x20monthly/damage/early-exit\x20rails),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20deposit_refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'Long-term\x20monthly\x20core\x20(single\x20Order\x20+\x20single\x20Allocation\x20pre-funded\x20with\x20deposit\x20+\x2012\x20months\x20rent):\x2012\x20monthly\x20Amount\x20releases\x20to\x20the\x20landlord,\x20each\x20gated\x20by\x20its\x20own\x20month\x20Guard\x20—\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20landlord\x20keeps\x20the\x20whole\x20rent;\x20the\x20traditional\x2010%\x20agency\x20fee\x20is\x20displaced,\x20not\x20reimplemented\x20(an\x20operator\x20charging\x20its\x20own\x20fee\x20needs\x20an\x20explicit\x20pre-order-computable\x20number,\x20an\x20explicit\x20non-empty\x20recipient\x20Entity,\x20and\x20never\x20a\x20Surplus\x20leg).\x20Exit\x20rails\x20settle\x20by\x20node:\x20completed\x20refunds\x20the\x20deposit\x20as\x20an\x20Amount\x20pinned\x20to\x20deposit_amount\x20(T-05\x20fix)\x20and\x20the\x20terminal_residual_sweep\x20carries\x20any\x20EARLY-return\x20residual\x20(unearned\x20prepaid\x20rent)\x20home\x20to\x20the\x20tenant;\x20damage_confirmed\x20pays\x20the\x20landlord\x20a\x20bounded\x20deduction\x20Amount\x20and\x20the\x20order\x20owner\x20the\x20remainder;\x20early_terminated\x20pays\x20the\x20landlord\x20the\x20penalty\x20Amount\x20and\x20the\x20order\x20owner\x20the\x20remainder;\x20closed_cancel\x20refunds\x20the\x20pool\x20in\x20full\x20(a\x20full\x20sweep\x20is\x20correct\x20on\x20this\x20rail\x20because\x20no\x20rent\x20release\x20can\x20have\x20fired\x20yet).\x20Every\x20RATE-BEARING\x20group\x20(damage,\x20early-exit,\x20no-fault,\x20the\x20residual\x20sweep)\x20is\x20order-anchored\x20(pattern.allocator_order_anchor)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order;\x20a\x20Rate-0\x20anchor\x20row\x20may\x20only\x20ride\x20a\x20group\x20that\x20already\x20has\x20a\x20Rate\x20leg\x20—\x20inside\x20a\x20pure-Amount\x20group\x20(the\x20twelve\x20monthly\x20releases,\x20the\x20pinned\x20deposit\x20refund)\x20it\x20flips\x20the\x20group\x20to\x20Rate\x20mode\x20and\x20aborts\x20at\x20configuration\x20(R-A-1-02,\x20ZR-34),\x20so\x20those\x20anchor\x20via\x20the\x20pinned\x20Amount\x20+\x20GuardIdentifier(0)\x20recipient\x20+\x20the\x20255\x20once\x20slot.\x20No\x20Surplus\x20anywhere.'},'key_risk':'Deposit\x20isolation\x20in\x20a\x20shared\x20pre-funded\x20pool\x20—\x20an\x20unbounded\x20refund\x20sweep\x20hands\x20unreleased\x20rent\x20to\x20the\x20tenant\x20(mainnet\x20T-05);\x20Amount-pinned\x20legs,\x20the\x20order\x20anchor,\x20and\x20the\x20255\x20once-slot\x20keep\x20every\x20rail\x20in\x20its\x20own\x20scope','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','threshold\x20=\x20ONE\x20month\x27s\x20rent\x20(not\x20the\x20total)\x20—\x20after\x20the\x2012th\x20release\x20the\x20balance\x20equals\x20exactly\x20one\x20month\x20=\x20threshold,\x20so\x20the\x20final\x20call\x20still\x20passes','T-05\x20DEPOSIT\x20FIX:\x20the\x20deposit\x20refund\x20leg\x20is\x20an\x20Amount\x20pinned\x20to\x20deposit_amount\x20paying\x20the\x20order\x20owner\x20(GuardIdentifier(0)).\x20The\x20old\x20Surplus/Rate-10000\x20shape\x20swept\x20the\x20deposit\x20PLUS\x20the\x20twelve\x20unreleased\x20rent\x20Amounts\x20to\x20the\x20tenant\x20on\x20mainnet\x20(585/525\x20in\x20full;\x20the\x20landlord\x20received\x200)\x20—\x20a\x20full-pool\x20sweep\x20is\x20correct\x20ONLY\x20on\x20the\x20no-fault\x20rail,\x20where\x20no\x20rent\x20release\x20can\x20have\x20fired','CR-01\x20ORDER\x20ANCHOR:\x20every\x20RATE-BEARING\x20refund/split\x20group\x20(damage,\x20early-exit,\x20no-fault)\x20carries\x20the\x20pattern.allocator_order_anchor\x20Guard\x20—\x20one\x20Rate-0\x20{GuardIdentifier:\x200}\x20row\x20makes\x20the\x20submitted\x20Order\x20the\x20binding\x20target\x20(payment_info.for_object),\x20so\x20a\x20passport\x20built\x20from\x20a\x20sibling\x20order\x27s\x20state\x20satisfies\x20nothing\x20here.\x20A\x20zero-amount\x20row\x20still\x20constructs\x20a\x200-value\x20CoinWrapper\x20and\x20pays\x20it\x20to\x20the\x20order\x20owner;\x20budget\x20the\x20gas.\x20SCOPE\x20(ZR-34):\x20a\x20Rate-0\x20anchor\x20row\x20rides\x20Rate-bearing\x20or\x20mixed\x20groups\x20ONLY\x20—\x20in\x20a\x20pure-Amount\x20group\x20(the\x20pinned\x20deposit\x20refund,\x20the\x20monthly\x20releases)\x20it\x20flips\x20the\x20group\x20to\x20Rate\x20mode\x20(Rates\x20must\x20sum\x2010000)\x20and\x20configuration\x20aborts\x20(R-A-1-02);\x20pure-Amount\x20groups\x20anchor\x20via\x20the\x20Amount\x20pin\x20+\x20GuardIdentifier(0)\x20+\x20the\x20255\x20once\x20slot','ONCE-PER-ORDER\x20(F-02,\x20protocol\x20142):\x20every\x20allocator\x20Guard\x20carries\x20the\x20address-typed\x20{\x20identifier:\x20255,\x20b_submission:\x20true\x20}\x20slot\x20pinned\x20to\x20the\x20Order;\x20the\x20trigger\x20Passport\x20submits\x20{\x20identifier:\x20255,\x20value:\x20[1]\x20+\x20bcs(order)\x20},\x20so\x20a\x20replay\x20aborts\x20with\x20code\x2016\x20instead\x20of\x20paying\x20twice.\x20The\x20slot\x20is\x20recorded\x20per-Allocation\x20(one\x20pool)\x20—\x20a\x20second\x20Allocation\x20of\x20the\x20same\x20Service\x20starts\x20with\x20no\x20once\x20record,\x20and\x20the\x20order\x20anchor\x20(not\x20the\x20slot)\x20stops\x20cross-order\x20passports.\x20Independent\x20month\x20Guards\x20alone\x20cannot\x20stop\x20a\x20same-month\x20double\x20release\x20—\x20the\x20slot\x20can','NO\x20ENTITY\x20PLACEHOLDERS\x20ON\x20REFUND\x20RAILS\x20(F-03):\x20every\x20refund\x20leg\x20pays\x20GuardIdentifier(0)\x20(the\x20order\x20owner).\x20An\x20Entity(\x27tenant\x27)\x20resolves\x20at\x20configuration\x20time\x20to\x20whatever\x20address\x20the\x20builder\x20supplies\x20—\x20and\x20an\x20EMPTY\x20name\x20silently\x20falls\x20back\x20to\x20the\x20deploying\x20account','SKU\x20PRICE\x20LOCK\x20(CR-02):\x20the\x20order\x20price\x20is\x20EXACTLY\x2012\x20x\x20monthly_rent_amount\x20+\x20deposit_amount,\x20and\x20every\x20Amount\x20leg\x20asserts\x20balance\x20>=\x20fix\x20at\x20release\x20(allocation.move,\x20EINSUFFICIENT_BALANCE).\x20A\x20cheaper\x20SKU\x20(a\x20discounted\x20month,\x20a\x20pilot\x20listing)\x20deadlocks\x20at\x20the\x20first\x20release\x20with\x20no\x20refund\x20path\x20—\x20such\x20listings\x20MUST\x20ship\x20as\x20their\x20own\x20Service\x20with\x20their\x20own\x20pinned\x20legs.\x20min_monthly_rent_usd\x20keeps\x20the\x20floor\x20machine-checkable','DAMAGE\x20INVARIANT:\x20damage_max_amount\x20<=\x20deposit_amount\x20—\x20the\x20deduction\x20is\x20bounded\x20by\x20the\x20deposit;\x20larger\x20losses\x20route\x20to\x20arbitration\x20+\x20the\x20compensation\x20fund\x20(award\x20cap\x203x\x20order)','DUAL-TRACK\x20WARNING\x20(A-2,\x20mainnet-verified\x204x\x20worst\x20case):\x20the\x20refund\x20allocators\x20and\x20the\x20compensation\x20fund\x20are\x20independent\x20channels\x20—\x20a\x20full\x20refund\x20does\x20NOT\x20bar\x20a\x20later\x20compensation\x20claim\x20(the\x20compensation-claim\x20call\x20has\x20no\x20Guard\x20slot).\x20Every\x20refund\x20gate\x20asserts\x20claimed_by\x20none\x20(blocks\x20claim-then-refund);\x20refund-then-claim\x20stays\x20open\x20—\x20size\x20the\x20fund\x20accordingly','Objections\x20escalate\x20to\x20Arbitration\x20inside\x20the\x2024h\x20objection\x20window\x20(R-M1-11:\x20no\x20dispute\x20nodes)\x20—\x20claim/inspection\x20disputes\x20are\x20business\x20states,\x20never\x20Machine\x20terminals','TIME\x20SEMANTICS:\x20relative\x20windows\x20anchor\x20on\x20the\x20source\x20node\x27s\x20recorded\x20entry\x20time\x20(progress.history.time\x201280,\x20witness-derived,\x20keeper-triggered);\x20cancellation\x20windows\x20anchor\x20on\x20order.time;\x20the\x20chain\x20Clock\x20is\x20the\x20only\x20clock\x20—\x20a\x20keeper\x20triggering\x20late\x20must\x20still\x20satisfy\x20the\x20window\x20assertions','Deposit-free\x20variant:\x20Passport\x20credit\x20credentials\x20replace\x20the\x20deposit\x20(reputation\x20collateral);\x20the\x20credit\x20line\x20itself\x20stays\x20off-chain\x20—\x20the\x20completed\x20rail\x20then\x20has\x20no\x20deposit\x20leg\x20and\x20the\x20damage\x20group\x20pays\x20from\x20the\x20compensation\x20fund\x20instead','No\x20Surplus\x20anywhere\x20in\x20this\x20template\x20—\x20one\x20pre-funded\x20pool\x20holds\x20deposit\x20+\x2012\x20months\x20of\x20rent,\x20and\x20a\x20withdraw-all\x20leg\x20would\x20drain\x20future\x20releases\x20(the\x20rails\x20are\x20path-isolated\x20by\x20Guard,\x20not\x20by\x20pool)','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20Enforce\x20it\x20by\x20ANDing\x20the\x20pattern.required_info_evidence_gate\x20Guard\x20into\x20\x27handover\x27\x20(gate\x20order.required_info\x20some\x20BEFORE\x20keys\x20hand\x20over),\x20not\x20by\x20declaring\x20the\x20list;\x20only\x20the\x20PRESENCE\x20is\x20asserted\x20—\x20the\x20recorded\x20address\x20value\x20is\x20never\x20a\x20guard\x20condition,\x20and\x20acceptance\x20of\x20the\x20delivered\x20info\x20is\x20the\x20operator\x27s\x20confirming\x20forward.\x20QUOTA\x20COUPLING:\x20the\x20guest\x27s\x20info\x20message\x20shares\x20the\x20SINGLE\x20stranger-message\x20quota\x20—\x20make\x20it\x20the\x20FIRST\x20pre-order\x20message,\x20or\x20have\x20the\x20operator\x20respond\x20first\x20to\x20open\x20the\x20conversation','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'service_fee_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'monthly_rent_amount':'45000000000','deposit_amount':'45000000000','damage_max_amount':'10000000000','early_exit_penalty_amount':'45000000000','lease_months':0xc,'monthly_allocators':0xc,'deposit_refund_days':0x3,'inspection_deadline_hours':0x18,'objection_window_hours':0x18,'no_fault_exit_days':0x3,'return_notice_days':0xf,'early_exit_penalty_months':0x1,'min_monthly_rent_usd':'SKU\x20price\x20lock:\x20order\x20price\x20=\x2012\x20x\x20monthly_rent_amount\x20+\x20deposit_amount;\x20a\x20cheaper\x20lease\x20ships\x20as\x20its\x20own\x20Service','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'no_fault_exit':'order.time\x20(pre-start\x20cancellation\x20branch)','early_exit_window':'order.time\x20(pre-checkout\x20cancellation\x20branch)','monthly_releases':'progress.history.time\x20(id\x201280,\x20next_node=\x27in_use\x27,\x20find=last\x20—\x2030-day\x20cadence\x20from\x20handover)','return_notice':'progress.history.time\x20(id\x201280,\x20next_node=\x27in_use\x27,\x20find=last)','inspection_deadline':'progress.history.time\x20(id\x201280,\x20next_node=\x27returned\x27,\x20find=last)','objection_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27inspected\x27,\x20find=last)','deposit_refund_deadline':'progress.history.time\x20(id\x201280,\x20next_node=\x27completed\x27,\x20find=last)'},'trust_mechanisms':['R1\x20deposit\x20refund\x20pinned\x20to\x20an\x20Amount\x20=\x20deposit_amount\x20paying\x20the\x20order\x20owner,\x20with\x20deadline\x20+\x20tenant\x20self-trigger\x20fallback;\x20no-fault\x203-day\x20full\x20refund','R2\x20independent\x20arbitration\x20Permission\x20(admin\x20=\x20arbitration\x20party)','R3\x20compensation\x20fund\x20front-pays\x20deposit\x20disputes\x20(award\x20cap\x203x\x20order)','R4\x20inspection\x20by\x20a\x20dedicated\x20verifier\x20role\x20—\x20not\x20the\x20landlord\x20alone','R5\x20order-anchored\x20escrow:\x20every\x20rate-bearing\x20refund/split\x20group\x20carries\x20the\x20pattern.allocator_order_anchor\x20Guard\x20and\x20GuardIdentifier(0)\x20recipients\x20(pure-Amount\x20groups\x20anchor\x20via\x20the\x20Amount\x20pin\x20+\x20the\x20255\x20once\x20slot\x20—\x20ZR-34)','R6\x20fixed\x20legs\x20covered\x20by\x20the\x20SKU\x20price\x20lock;\x20no\x20Surplus\x20anywhere','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20monthly\x20release\x20triggers\x20and\x20refund\x20deadline','R10\x20rent\x20business\x20parameters\x20embedded\x20as\x20Guard\x20constants\x20—\x20industry-recommended\x20defaults,\x20merchant-configurable'],'keeper_dependencies':['monthly\x20rent\x20release\x20triggers\x20(month_1..12\x20windows)','inspection\x20deadline\x20expiry','deposit\x20refund\x20deadline\x20(tenant\x20self-trigger\x20fallback)','lease\x20end\x20settlement'],'recommended_role':'merchant','role_rationale':'Centralized\x20long-term\x20rental\x20operators\x20own\x20the\x20lease\x20Service\x20with\x20dedicated\x20staff\x20roles\x20(handover/inspection/finance\x20Permission\x20entities).','differences':['Heavy\x20operations:\x20dedicated\x20staff\x20roles\x20(handover/inspection/finance)\x20as\x20Permission\x20entities\x20under\x20one\x20operator-owned\x20lease\x20Service','12\x20monthly\x20Amount\x20releases\x20each\x20gated\x20by\x20its\x20OWN\x20month\x20Guard\x20—\x20a\x20single\x20shared\x20Guard\x20would\x20allow\x20same-day\x20double\x20releases','Deposit\x20variants:\x20cash\x20deposit\x20or\x20Passport\x20credit\x20credentials\x20(deposit-free;\x20the\x20credit\x20line\x20stays\x20off-chain)'],'user_inputs':['monthly_rent_amount\x20/\x20deposit_amount\x20—\x20the\x20pinned\x20money\x20legs;\x20the\x20SKU\x20price\x20is\x20EXACTLY\x2012\x20x\x20monthly_rent_amount\x20+\x20deposit_amount\x20(a\x20discounted\x20or\x20pilot\x20lease\x20ships\x20as\x20its\x20own\x20Service\x20with\x20its\x20own\x20pins)','damage_max_amount\x20(<=\x20deposit_amount)\x20/\x20early_exit_penalty_amount\x20—\x20deduction\x20and\x20penalty\x20pins','lease_months\x20/\x20monthly_allocators\x20—\x20lease\x20length\x20in\x20months\x20(one\x20release\x20Guard\x20per\x20month)','deposit_refund_days\x20/\x20inspection_deadline_hours\x20/\x20objection_window_hours\x20—\x20the\x20exit-flow\x20windows','no_fault_exit_days\x20/\x20early_exit_penalty_months\x20—\x20exit\x20policy\x20parameters','service_fee_rate_bps\x20—\x20KEEP\x20AT\x200\x20(the\x20incumbent\x27s\x2010%\x20agency\x20fee,\x20displaced\x20by\x20design).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.']},{'id':'education/mooc-degree','industry':'education','variant':'mooc-degree','product_ref':'coursera','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'admitted','role':'Entry:\x20enrollment\x20confirmed\x20and\x20tuition\x20escrowed;\x20Machine\x20starts\x20here','semantic_role':'draft','from':['']},{'name':'semester_1','role':'Semester\x201\x20—\x20dual-sign\x20completion\x20(institution\x20certifies\x20+\x20student\x20confirms,\x20threshold=2)','semantic_role':'active','from':['admitted']},{'name':'semester_2','role':'Semester\x202\x20—\x20dual-sign\x20completion','semantic_role':'active','from':['semester_1']},{'name':'semester_3','role':'Representative;\x20expand\x20to\x20the\x20real\x20term\x20count\x20(e.g.\x208\x20semesters)\x20at\x20build\x20time','semantic_role':'active','from':['semester_2']},{'name':'graduation_ready','role':'All\x20terms\x20completed\x20—\x20awaiting\x20degree\x20conferral','semantic_role':'delivered','from':['semester_3']},{'name':'reviewed','role':'Student\x20reviews\x20the\x20program\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20to\x20the\x20conferral\x20record,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'graduation_ready','forward':'Review','guard_key':'review_window'}]},{'name':'graduated','role':'Degree\x20conferred\x20—\x20terminal\x20RECORD:\x20the\x20pool\x20is\x20empty\x20here\x20by\x20design\x20(every\x20term\x27s\x20tuition\x20Amount\x20was\x20already\x20released\x20per\x20term);\x20the\x20terminal_settlement\x20sweep\x20anchors\x20this\x20state\x20as\x20a\x20DORMANT\x20backstop\x20(residue\x20only\x20from\x20a\x20missed\x20release\x20or\x20discount\x20dust),\x20keeping\x20the\x20drained-record\x20statement\x20honest\x20under\x20R-DEAD-END/TERMINAL-NO-RAIL','semantic_role':'final','from':['graduation_ready',{'prev':'reviewed','forward':'ConferralAfterReview'}]},{'name':'withdrawn','role':'Student\x20withdraws\x20—\x20from\x20admission\x20or\x20ANY\x20semester\x20(plain\x20buyer\x20edges,\x20cohort-uniform\x20topology);\x20inside\x20the\x20refund\x20window\x20the\x20refund_gate\x20rail\x20pays\x20the\x20full\x20remaining\x20pool,\x20after\x20it\x20the\x20terminal_settlement\x20residual\x20sweep\x20does\x20(the\x20per-term\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund)\x20(R-M1-11\x20compliant)','operator':'order_payer','semantic_role':'cancelled','from':['admitted','semester_1','semester_2','semester_3']}],'guards':[{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'term_release_gate','purpose':'Per-term\x20tuition\x20release\x20gate,\x20bound\x20to\x20the\x20settlement\x20allocator\x20row\x20(guard_key\x20term_release_gate):\x20the\x20qualifying\x20NODE\x20SET\x20{semester_1,\x20semester_2,\x20semester_3,\x20graduation_ready,\x20graduated}\x20—\x20each\x20completed\x20term\x20releases\x20its\x20Amount,\x20and\x20the\x20conferral\x20states\x20stay\x20admissible\x20as\x20a\x20safety\x20net\x20so\x20a\x20missed\x20term\x20release\x20can\x20still\x20exit\x20at\x20graduation\x20(FUND-EXIT-01:\x20an\x20uncovered\x20terminal\x20strands\x20the\x20escrow\x20permanently,\x20IMMUT-001;\x20graduation\x20is\x20a\x20drained-record\x20terminal\x20ONLY\x20when\x20every\x20term\x20actually\x20released).\x20Institution\x20advances\x20(permission\x20slot)\x20+\x20student\x20triggers\x20via\x20Passport\x20—\x20dual-sign\x20prevents\x20self-sign\x20(R4).\x20Replays\x20are\x20sealed\x20per\x20term\x20by\x20the\x20identifier-255\x20\x27term-<k>\x27\x20once\x20key\x20(see\x20PER-TERM\x20RELEASE\x20KEY),\x20and\x20the\x20term_count\x20max\x20cap\x20bounds\x20the\x20total\x20releasable\x20Amount,\x20so\x20a\x20wide\x20node\x20set\x20cannot\x20over-release'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Pre-start\x20full\x20refund\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate):\x20progress.current\x20==\x20withdrawn\x20(the\x20refund\x20terminal)\x20+\x20the\x20refund\x20window\x20not\x20elapsed\x20(order.time\x20+\x20refund_window_days)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20NO\x20signer\x20leg\x20is\x20encoded\x20—\x20CAT-B2/upwc-cat-261017,\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening)\x20+\x20order.service\x20binding\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20student\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_settlement','purpose':'Terminal\x20residual\x20sweep\x20(FUND-EXIT-01\x20always-on\x20backstop,\x20yfdx-mn-261015\x20A1\x20—\x20live\x20mainnet\x20proof\x20yfdx-g-refund-rest):\x20n-ary\x20logic_or\x20over\x20ALL\x20terminal\x20nodes\x20{graduated,\x20withdrawn}\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20welds\x20only\x20after\x20an\x20award\x20has\x20actually\x20paid,\x20D-BUG-2\x20polarity)\x20+\x20NO\x20signer\x20leg\x20(keeper-reachable\x20—\x20an\x20owner-gone\x20order\x20keeps\x20a\x20fund\x20exit)\x20+\x20NO\x20window\x20leg\x20(always-on\x20—\x20a\x20post-refund-window\x20withdrawal\x20still\x20drains)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20student\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)\x20+\x20the\x20identifier-254\x20submission\x20slot\x20(chain-derived\x20once-per-order\x20key\x20=\x20bcs(payment_info.for_object);\x20a\x20replay\x20aborts\x2016).\x20Rate\x2010000\x20sweeps\x20the\x20RESIDUAL\x20pool\x20to\x20the\x20order\x20anchor:\x20on\x20the\x20golden\x20path\x20the\x20pool\x20is\x20already\x20empty\x20(every\x20per-term\x20Amount\x20released),\x20so\x20the\x20rail\x20rests\x20dormant\x20—\x20a\x20keeper\x20fire\x20on\x20an\x20empty\x20pool\x20aborts\x2014\x20EZERO_DISTRIBUTION\x20harmlessly;\x20residue\x20from\x20a\x20missed\x20term\x20release,\x20a\x20discounted\x20order,\x20or\x20a\x20post-window\x20withdrawal\x20exits\x20to\x20the\x20buyer\x20instead\x20of\x20stranding\x20(IMMUT-001).\x20Earned\x20tuition\x20=\x20whatever\x20the\x20per-term\x20rails\x20actually\x20RELEASED;\x20the\x20sweep\x20pays\x20the\x20unearned\x20remainder\x20home'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_settlement_recover','purpose':'Awarded-order\x20recovery\x20twin\x20of\x20terminal_settlement\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers\x20advance\x20orders\x20past\x20the\x20award\x20state\x20—\x20F-51;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion,\x20a\x20node\x20literal\x20re-seals\x20the\x20rail)\x20+\x20NO\x20signer\x20leg\x20+\x20NO\x20window\x20leg\x20(keeper-reachable\x20—\x20an\x20owner-gone\x20order\x20keeps\x20a\x20fund\x20exit)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20student\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise).\x20Pays\x20Rate\x2010000\x20of\x20the\x20residual\x20pool\x20to\x20the\x20institution\x20Entity:\x20exactly\x20one\x20of\x20terminal_settlement\x20(claimed_by\x20some\x20==\x20false)\x20/\x20terminal_settlement_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.allocation_staged_release','host':'machine','purpose':'Post-start\x20pro-rata\x20refund\x20per\x20completed\x20term\x20—\x20SUPERSEDED\x20(b9-261015,\x20chain-semantics\x20deep\x20read):\x20per-term\x20k/N\x20static\x20Rate\x20segments\x20are\x20NOT\x20expressible\x20(the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot,\x20allocation.move:482-486\x20—\x20runtime-pool\x20rates\x20decay\x20geometrically\x20across\x20fires\x20and\x20strand\x20an\x20integer-division\x20residual;\x20per-term\x20gates\x20cannot\x20bind\x20individual\x20sharing\x20rows).\x20Materialized\x20instead\x20as:\x20withdrawn\x20reachable\x20from\x20every\x20semester\x20+\x20the\x20terminal_settlement\x20residual\x20sweep\x20(per-term\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund)'},{'template_id':'pattern.progress_state_check','host':'machine','purpose':'Certificate\x20claim:\x20assessment\x20passed\x20+\x20identity\x20verified\x20+\x20honor\x20code\x20clean\x20(platform-signed)'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'7-day\x20trial\x20window\x20(subscription\x20side-template)'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'14-day\x20refund\x20window\x20for\x20single-course\x20/\x20annual\x20plans'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'Subscription\x20revenue\x20released\x20at\x20month\x20end\x20(side-template)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Student\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2090\x20days\x20of\x20graduation\x20readiness,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20record,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20conferral\x20always\x20keeps\x20the\x20unreviewed\x20path\x20graduation_ready\x20->\x20graduated;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','refund_track':'order_anchored','count':0x2,'mode':'amount','description':'Degree\x20tuition\x20per\x20term:\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20institution\x20Amount\x20=\x20the\x20FULL\x20per-term\x20tuition\x20(per-term\x20max\x20cap\x20prevents\x20over-release;\x20the\x20incumbent\x27s\x2030%\x20agency\x20share\x20is\x20displaced,\x20not\x20reimplemented\x20—\x20no\x20partner\x20or\x20platform\x20leg\x20exists).\x20Graduation\x20is\x20a\x20fund-empty\x20terminal\x20RECORD:\x20every\x20term\x20already\x20released\x20its\x20Amount.\x20Pre-start\x20refund\x20=\x20full\x20Rate\x2010000\x20to\x20student;\x20post-start\x20pro-rata\x20=\x20the\x20terminal_settlement\x20residual\x20sweep\x20(the\x20per-term\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20unearned\x20remainder\x20IS\x20the\x20sweep\x20—\x20the\x20declared\x20k/8+(8-k)/8\x20static\x20Rate\x20splits\x20are\x20superseded,\x20NOT\x20expressible\x20on\x20the\x20pool-snapshot\x20Rate\x20base).\x20MIXED\x20FORM:\x20income/settlement\x20recipients\x20are\x20Entity/Address\x20rows;\x20the\x20refund\x20track\x20MUST\x20be\x20a\x20separate\x20allocator\x20whose\x20recipient\x20is\x20GuardIdentifier(0)\x20—\x20the\x20passport\x20submits\x20the\x20ORDER\x20address\x20(never\x20the\x20student\x20EOA;\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)\x20and\x20the\x20guard\x20binds\x20identity\x20via\x20order.owner==context(Signer)','rows':[{'track':'settlement','recipient':'entity','recipient_key':'institution','mode':'amount','value_from':'term_price_usd','guard_key':'term_release_gate','note':'Per-term\x20tuition\x20Amount\x20(the\x20FULL\x20term\x20price),\x20released\x20at\x20each\x20completed\x20term\x20via\x20the\x20term_release_gate\x20guard.\x20A\x20per-term\x20cap\x20(term_count\x20/\x20min_term_price_usd)\x20prevents\x20over-release.\x20DISCOUNT\x20DEADLOCK\x20WARNING\x20(crs9-mn-261015\x20F-34\x20family):\x20a\x20fixed\x20Amount\x20demands\x20the\x20FULL\x20list\x20price\x20from\x20THIS\x20Order\x27s\x20pool\x20—\x20a\x20coupon/discounted\x20order\x20(pool\x20<\x20term_price)\x20aborts\x20EINSUFFICIENT_BALANCE\x20at\x20this\x20release\x20and\x20strands\x20the\x20escrow\x20(the\x20proven\x20discount-safe\x20single-release\x20shape\x20is\x20the\x20Rate-10000\x20leg,\x20mooc-single-course\x20v71).\x20ADJUDICATED\x20(b8-261015\x20design\x20verification,\x20chain-semantics\x20deep\x20read)\x20and\x20SUPERSEDED\x20(b9-261015,\x20allocation.move\x20deep\x20read\x20+\x20yfdx\x20mainnet\x20live\x20proof):\x20a\x20per-term\x20Rate\x20swap\x20is\x20NOT\x20expressible\x20on\x20this\x20multi-term\x20rail\x20—\x20sharing\x20rows\x20inside\x20ONE\x20allocator\x20pay\x20together\x20in\x20a\x20single\x20run\x20and\x20the\x20guard\x20binds\x20the\x20ALLOCATOR\x20(never\x20the\x20row),\x20so\x20\x27per-term\x20Rate\x20rows\x20+\x20per-term\x20gates\x27\x20cannot\x20be\x20built;\x20AND\x20the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot\x20(allocation.move:482-486),\x20so\x20per-term\x20runtime-pool\x20rates\x20decay\x20geometrically\x20across\x20fires\x20and\x20strand\x20an\x20integer-division\x20residual,\x20while\x20a\x20pinned\x20base\x20pays\x20the\x20LIST\x20per-term\x20price\x20and\x20overdraws\x20a\x20discounted\x20pool\x20mid-program\x20(EINSUFFICIENT_BALANCE).\x20Equal-per-term\x20and\x20discount-safe\x20are\x20mutually\x20exclusive\x20on\x20current\x20primitives.\x20The\x20Amount\x20leg\x20STAYS;\x20the\x20discount\x20surface\x20is\x20closed\x20at\x20BUY\x20time\x20by\x20ENFORCEMENT,\x20not\x20prose\x20(order.amount\x20>=\x20term_count\x20x\x20term_price\x20—\x20the\x20buy-path\x20fixed-leg\x20gate,\x20error\x20order_below_fixed_leg_sum,\x20b6-11\x20family;\x20a\x20discounted\x20order\x20is\x20rejected\x20before\x20any\x20money\x20moves).\x20The\x20mid-program\x20strand\x20is\x20closed\x20STRUCTURALLY\x20instead\x20of\x20with\x20the\x20declared\x20per-term\x20k/8+(8-k)/8\x20Rate\x20splits\x20(those\x20are\x20superseded,\x20never\x20materialized):\x20withdrawn\x20is\x20now\x20reachable\x20from\x20EVERY\x20semester\x20(plain\x20buyer\x20edges\x20—\x20a\x20term-k\x20abort\x20no\x20longer\x20leaves\x20the\x20remainder\x20with\x20no\x20exit),\x20the\x20earned\x20share\x20is\x20whatever\x20the\x20per-term\x20Amount\x20legs\x20already\x20released,\x20so\x20the\x20unearned\x20remainder\x20IS\x20the\x20residual\x20pool\x20and\x20the\x20terminal_settlement\x20refund\x20row\x20below\x20sweeps\x20it\x20to\x20the\x20order\x20anchor\x20—\x20a\x20full\x20residual\x20sweep\x20IS\x20the\x20pro-rata\x20refund,\x20discount-safe\x20by\x20construction,\x20with\x20no\x20per-term\x20gates\x20and\x20no\x20N-dependent\x20ratios.\x20NO\x20Rate-0\x20anchor\x20leg\x20here\x20BY\x20DESIGN:\x20an\x20Amount-mode\x20allocator\x20with\x20a\x20Rate-0\x20leg\x20sums\x200\x20!=\x2010000\x20and\x20aborts\x20ERATE_NOT_10000\x20(allocation.move:343-347)\x20—\x20the\x20order\x20binding\x20rides\x20the\x20guard\x27s\x20own\x20slot-0\x20submission\x20instead.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20refund\x20inside\x20the\x20published\x20refund_window_days,\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(node\x20withdrawn).\x20The\x20paired\x20guard\x20must\x20assert\x20the\x20window\x20has\x20not\x20elapsed\x20and\x20claimed_by\x20some\x20==\x20false\x20(signer\x20==\x20order.owner\x20OPTIONAL\x20—\x20trigger-rights\x20only;\x20CAT-B2/upwc-cat-261017:\x20not\x20an\x20encoded\x20template\x20leg)\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool).\x20That\x20exclusion\x20is\x20ONE-DIRECTIONAL\x20(v42):\x20it\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid\x20—\x20never\x20the\x20reverse\x20(a\x20refunded\x20buyer\x20can\x20still\x20file\x20and\x20win\x20a\x20case;\x20nothing\x20on\x20chain\x20seals\x20that\x20—\x20only\x20the\x20arbitrator\x27s\x20net\x20ruling\x20does,\x20and\x20the\x20compensation\x20fund\x20stays\x20an\x20independent\x20third\x20channel).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20the\x20dispute\x20vector\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever\x20and\x20strand\x20the\x20escrow\x20(one-way\x20door).\x20The\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20student\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'terminal_settlement','note':'Terminal\x20residual\x20sweep\x20(FUND-EXIT-01\x20always-on\x20backstop,\x20yfdx-mn-261015\x20A1\x20—\x20live-proven\x20shape\x20yfdx-g-refund-rest):\x20Rate\x2010000\x20of\x20the\x20REMAINING\x20pool\x20to\x20the\x20order-anchored\x20recipient,\x20gated\x20by\x20terminal_settlement\x20(n-ary\x20OR\x20over\x20ALL\x20terminal\x20nodes\x20{graduated,\x20withdrawn},\x20keeper-reachable,\x20no\x20signer\x20leg,\x20no\x20window\x20leg,\x20claimed_by\x20some\x20==\x20false,\x20254\x20once\x20per\x20order).\x20DORMANT\x20on\x20the\x20golden\x20path\x20—\x20the\x20pool\x20is\x20already\x20empty\x20(every\x20per-term\x20Amount\x20released)\x20and\x20a\x20keeper\x20fire\x20on\x20an\x20empty\x20pool\x20aborts\x2014\x20harmlessly;\x20backstops\x20residue\x20from\x20a\x20missed\x20term\x20release,\x20a\x20discounted\x20order,\x20or\x20a\x20post-window\x20withdrawal\x20(the\x20per-term\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund\x20—\x20discount-safe\x20by\x20construction).\x20Supersedes\x20the\x20declared\x20per-term\x20k/8+(8-k)/8\x20static\x20Rate\x20splits\x20(b8-261015):\x20the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot\x20(allocation.move:482-486)\x20and\x20sharing\x20rows\x20cannot\x20be\x20row-gated,\x20so\x20those\x20were\x20never\x20expressible.'},{'track':'settlement','recipient':'entity','recipient_key':'institution','mode':'rate','value':0x2710,'guard_key':'terminal_settlement_recover','note':'Awarded-order\x20recovery\x20twin\x20of\x20the\x20terminal_settlement\x20sweep\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20the\x20sweep\x27s\x20claimed_by\x20some\x20==\x20false\x20leg\x20welds\x20shut\x20the\x20moment\x20an\x20award\x20pays,\x20so\x20this\x20rail\x20is\x20what\x20keeps\x20an\x20AWARDED\x20order\x27s\x20residual\x20pool\x20exiting\x20(to\x20the\x20institution\x20Entity)\x20instead\x20of\x20stranding\x20at\x20a\x20terminal.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20term_release_gate/refund_gate/terminal_settlement),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20terminal_settlement\x20(claimed_by\x20some\x20==\x20false)\x20/\x20terminal_settlement_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}]},'key_risk':'Institution\x20self-sign\x20on\x20academic\x20completion\x20—\x20dual-sign\x20threshold=2\x20ensures\x20neither\x20institution\x20nor\x20student\x20can\x20unilaterally\x20release\x20term\x20funds','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','threshold=2\x20dual-sign\x20is\x20the\x20R4\x20adaptation:\x20the\x20institution\x20certifies\x20academics,\x20the\x20student\x20confirms\x20funds\x20—\x20neither\x20side\x20can\x20unilaterally\x20withdraw\x20term\x20payments','Per-term\x20allocators\x20carry\x20a\x20max\x20cap\x20—\x20prevents\x20over-release;\x20graduation\x20is\x20a\x20fund-empty\x20terminal\x20RECORD\x20(each\x20term\x20already\x20released\x20its\x20full\x20Amount\x20—\x20nothing\x20accumulates\x20for\x20a\x20final\x20sweep);\x20the\x20terminal_settlement\x20sweep\x20stays\x20armed\x20as\x20the\x20dormant\x20residue\x20backstop\x20(missed\x20release\x20/\x20discount\x20dust\x20/\x20post-window\x20withdrawal)','VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20fresh\x20Arbitration\x20ships\x20paused\x20with\x20zero\x20grants\x20—\x20unpause\x20and\x20voting\x20configuration\x20are\x20the\x20ARBITRATOR\x27s\x20deployment\x20steps\x20on\x20their\x20own\x20objects,\x20never\x20this\x20build\x27s.\x20Bind\x20only\x20a\x20venue\x20already\x20operational\x20(unpaused,\x20voting\x20armed):\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20with\x20E_PAUSED\x20(the\x20MCP\x20pre-publish\x20scan\x20hard-blocks\x20binding\x20a\x20paused\x20venue)','PER-TERM\x20RELEASE\x20KEY:\x20the\x20per-term\x20rail\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27term-<k>\x27\x20key\x20(the\x20chain\x20derives\x20the\x20slot\x20key\x20from\x20the\x20raw\x20submitted\x20bytes),\x20so\x20one\x20term\x20cannot\x20be\x20released\x20twice;\x20DISTINCT\x20keys\x20per\x20term\x20are\x20intentional\x20—\x20per-term\x20releases\x20are\x20legitimate\x20repeats\x20of\x20the\x20SAME\x20allocator\x20across\x20the\x20program,\x20so\x20once_per_order\x20(255\x20keyed\x20on\x20the\x20Order\x20itself)\x20must\x20NOT\x20be\x20used\x20here\x20(it\x20would\x20weld\x20terms\x202..N\x20shut)','Setting\x20lock\x20extended\x20to\x20cover\x20a\x20full\x20term\x20(~120\x20days,\x20add-only)\x20—\x20hedges\x20against\x20unilateral\x20fee-rule\x20changes','Certificate/degree\x20Repository\x20policies\x20freeze\x20on\x20write;\x20refund\x20orchestration\x20must\x20void\x20the\x20certificate\x20BEFORE\x20the\x20refund','Financial\x20aid\x20(scholarships\x20/\x20need-based\x20waivers)\x20=\x20OFF-chain\x20channel:\x20eligibility\x20review\x20and\x20waiver\x20approval\x20stay\x20off-chain;\x20the\x20on-chain\x20Order\x20records\x20only\x20the\x20actually-charged\x20amount\x20—\x20aid\x20never\x20creates\x20zero-amount\x20Orders\x20and\x20does\x20not\x20occupy\x20on-chain\x20objects','Withdrawal\x20refunds\x20route\x20via\x20Allocators\x20(R-M1-11);\x20disputes\x20(refund\x20ratio,\x20grades,\x20certificate\x20revocation)\x20go\x20to\x20Arbitration','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20institution\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','PRICE\x20FLOOR\x20FOR\x20THE\x20PER-TERM\x20AMOUNT\x20LEG:\x20the\x20per-term\x20Amount\x20(term_price_usd)\x20is\x20pinned\x20at\x20build\x20and\x20is\x20a\x20hard\x20subtraction\x20with\x20no\x20on-chain\x20floor;\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20(allocation.move,\x20EINSUFFICIENT_BALANCE),\x20so\x20any\x20term\x20listed\x20below\x20the\x20pinned\x20Amount\x20(a\x20discount,\x20a\x20waiver\x20applied\x20on-chain)\x20can\x20never\x20release\x20that\x20term\x20and\x20strands\x20the\x20escrow\x20(testnet\x20CR-02).\x20Keep\x20min_term_price_usd\x20>=\x20term_price_usd','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'platform_fee_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'term_count':0x8,'tuition_usd':0x6a98,'term_price_usd':0xd53,'institution_share_bps':0x2710,'platform_share_bps':0x0,'setting_lock_days':0x78,'refund_window_days':0xe,'min_term_price_usd':'must\x20cover\x20the\x20per-term\x20Amount\x20leg\x20(term_price_usd)','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'refund_window':'order.time\x20(enrollment\x20—\x20the\x20refund\x20branch\x20exits\x20admitted/early\x20terms)','setting_lock':'service\x20config\x20lock\x20(add-only\x20setting_lock_duration\x20—\x20not\x20a\x20Machine\x20window)'},'trust_mechanisms':['R1\x20pre-start\x20full\x20refund\x20+\x20post-start\x20pro-rata\x20refund\x20allocators','R2\x20independent\x20arbitration\x20Permission\x20(contract\x20assertion)','R3\x20compensation\x20fund\x20~1%\x20of\x20tuition\x20scale\x20(high\x20ticket)','R4\x20dual-sign\x20term\x20completion\x20(threshold=2)\x20—\x20no\x20self-sign','R5\x20order-anchored\x20refund\x20recipient','R6\x20Amount\x20max\x20caps\x20+\x20Rate\x20sums\x2010000\x20(settlement\x20=\x20the\x20per-term\x20Amount\x20leg;\x20graduation\x20is\x20a\x20drained\x20terminal\x20record\x20—\x20no\x20Surplus)','R7\x20publish\x20freeze\x20(course\x20revisions\x20=\x20new\x20WIP\x20versions,\x20not\x20Machine\x20edits)','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20subscription\x20expiry\x20and\x20renewal\x20reminders','R10\x20setting\x20lock\x20>=\x20term\x20duration\x20(recommended:\x20covers\x20a\x20full\x20term\x20so\x20mid-term\x20changes\x20need\x20a\x20new\x20WIP\x20version)'],'keeper_dependencies':['subscription\x20expiry\x20(trial/period\x20end)','monthly\x20subscription\x20release','renewal\x20reminder\x20before\x20period\x20end'],'recommended_role':'merchant','role_rationale':'Partner\x20universities/institutions\x20own\x20the\x20degree\x20Service;\x20platform\x20operations\x20and\x20certificate\x20issuance\x20run\x20under\x20dedicated\x20Permission\x20entities.','differences':['Large-ticket\x20tuition\x20escrowed\x20up\x20front\x20and\x20released\x20PER\x20TERM\x20with\x20dual-sign\x20completion\x20(institution\x20certifies\x20+\x20student\x20confirms,\x20threshold=2)','Per-term\x20allocators\x20carry\x20max\x20caps;\x20graduation\x20is\x20a\x20fund-empty\x20terminal\x20record\x20—\x20each\x20term\x20released\x20its\x20full\x20tuition\x20Amount\x20on\x20completion,\x20nothing\x20accumulates\x20for\x20a\x20final\x20sweep','Certificate/degree\x20Repository\x20freezes\x20on\x20write\x20—\x20refund\x20orchestration\x20must\x20void\x20the\x20certificate\x20BEFORE\x20the\x20refund'],'user_inputs':['term_count\x20—\x20real\x20number\x20of\x20terms\x20(semester_*\x20nodes\x20expand\x20to\x20match)','tuition_usd\x20/\x20term_price_usd\x20—\x20the\x20tuition\x20structure','institution_share_bps\x20—\x20per-term\x20share\x20to\x20the\x20institution\x20(default\x2010000).\x20platform_share_bps\x20—\x20KEEP\x20AT\x200;\x20any\x20remainder\x20stays\x20with\x20the\x20institution\x20until\x20graduation\x20rather\x20than\x20accruing\x20to\x20a\x20platform.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','setting_lock_days\x20—\x20recommended:\x20cover\x20a\x20full\x20term\x20(merchant-configurable)','refund_window_days\x20—\x20single-course\x20/\x20annual\x20plan\x20window']},{'id':'education/live-class-cohort','industry':'education','variant':'live-class-cohort','product_ref':'yuanfudao','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'enrolled','role':'Entry:\x20term\x20paid\x20and\x20escrowed\x20(regular-course\x20Service;\x20the\x20trial\x20funnel\x20is\x20a\x20separate\x20Service)','semantic_role':'draft','from':['']},{'name':'session_1','role':'Session\x201\x20—\x20dual-sign\x20attendance\x20(institution\x20advances\x20+\x20parent\x20signs,\x20threshold=2)','semantic_role':'active','from':['enrolled']},{'name':'session_2','role':'Session\x202\x20—\x20dual-sign\x20attendance','semantic_role':'active','from':['session_1']},{'name':'session_3','role':'Representative;\x20expand\x20to\x20N\x20sessions\x20at\x20build\x20time\x20(merchant\x20sets\x20the\x20real\x20count)','semantic_role':'active','from':['session_2']},{'name':'completed_ready','role':'All\x20sessions\x20attended\x20—\x20awaiting\x20finalization','semantic_role':'delivered','from':['session_3']},{'name':'reviewed','role':'Parent\x20reviews\x20the\x20term\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20to\x20the\x20finalization\x20record,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'completed_ready','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Course\x20finalized\x20(terminal)','semantic_role':'final','from':['completed_ready',{'prev':'reviewed','forward':'FinalizeAfterReview'}]},{'name':'withdrawn','role':'Refund\x20requested\x20—\x20pre-start\x20full\x20refund\x20or\x20post-start\x20pro-rata\x20Allocator\x20(R-M1-11\x20compliant)','operator':'order_payer','semantic_role':'cancelled','from':['enrolled','session_1','session_2','session_3']},{'name':'renewal_window','role':'Renewal\x20window\x20open\x20—\x20terminal\x20RECORD:\x20the\x20pool\x20is\x20empty\x20here\x20(income\x20already\x20released\x20at\x20completed),\x20so\x20nothing\x20can\x20strand;\x20the\x20next\x20term\x20is\x20a\x20new\x20Order\x20(REUSE\x20pattern\x20—\x20a\x20fresh\x20order\x20per\x20term\x20instead\x20of\x20an\x20in-order\x20loop)','semantic_role':'final','from':['completed']}],'guards':[{'template_id':'pattern.verifier_evidence_philosophy','host':'service','key':'buy','purpose':'Buy\x20gate\x20(R10,\x20industry-recommended\x20defaults\x20—\x20merchant-configurable):\x20max\x20prepay\x20amount\x205000\x20/\x20max\x2060\x20sessions\x20/\x20max\x203\x20months\x20—\x20on-chain\x20checks\x20Passport-submitted\x20values'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'session_release_gate','purpose':'Per-session\x20release\x20gate,\x20bound\x20to\x20the\x20settlement\x20allocator\x20row\x20(guard_key\x20session_release_gate):\x20the\x20qualifying\x20NODE\x20SET\x20{session_1,\x20session_2,\x20session_3,\x20completed_ready,\x20completed,\x20renewal_window}\x20—\x20each\x20attended\x20session\x20releases\x20its\x20Amount,\x20and\x20the\x20finalization\x20states\x20stay\x20admissible\x20as\x20a\x20safety\x20net\x20so\x20a\x20missed\x20session\x20release\x20can\x20still\x20exit\x20at\x20the\x20terminal\x20(FUND-EXIT-01:\x20an\x20uncovered\x20terminal\x20strands\x20the\x20escrow\x20permanently,\x20IMMUT-001;\x20renewal_window\x20is\x20a\x20drained-record\x20terminal\x20ONLY\x20when\x20every\x20session\x20actually\x20released).\x20Session\x20release\x20requires\x20the\x20parent\x27s\x20(order\x20owner\x27s)\x20signature\x20—\x20the\x20institution\x20can\x20NOT\x20self-claim;\x20the\x20release-sequence\x20lock\x20(payment\x20vector\x20length\x20check)\x20plus\x20the\x20identifier-255\x20\x27session-<k>\x27\x20once\x20key\x20prevents\x20over-release\x20and\x20double-release'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Pre-start\x20full\x20refund\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate):\x20progress.current\x20==\x20withdrawn\x20(the\x20refund\x20terminal)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20NO\x20signer\x20leg\x20is\x20encoded\x20—\x20CAT-B2/upwc-cat-261017,\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening\x20since\x20the\x20GuardIdentifier(0)\x20recipient\x20hard-binds\x20the\x20payee)\x20+\x20order.service\x20binding\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20parent\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_settlement','purpose':'Terminal\x20residual\x20sweep\x20(FUND-EXIT-01\x20always-on\x20backstop,\x20yfdx-mn-261015\x20A1\x20—\x20live\x20mainnet\x20proof\x20yfdx-g-refund-rest):\x20n-ary\x20logic_or\x20over\x20ALL\x20terminal\x20nodes\x20{completed,\x20renewal_window,\x20withdrawn}\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool;\x20welds\x20only\x20after\x20an\x20award\x20has\x20actually\x20paid,\x20D-BUG-2\x20polarity)\x20+\x20NO\x20signer\x20leg\x20(keeper-reachable\x20—\x20a\x20parent-gone\x20order\x20keeps\x20a\x20fund\x20exit)\x20+\x20NO\x20window\x20leg\x20(always-on)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20parent\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise)\x20+\x20the\x20identifier-254\x20submission\x20slot\x20(chain-derived\x20once-per-order\x20key\x20=\x20bcs(payment_info.for_object);\x20a\x20replay\x20aborts\x2016).\x20Rate\x2010000\x20sweeps\x20the\x20RESIDUAL\x20pool\x20to\x20the\x20order\x20anchor:\x20on\x20the\x20golden\x20path\x20the\x20pool\x20is\x20already\x20empty\x20(every\x20attended\x20session\x27s\x20Amount\x20released),\x20so\x20the\x20rail\x20rests\x20dormant\x20—\x20a\x20keeper\x20fire\x20on\x20an\x20empty\x20pool\x20aborts\x2014\x20EZERO_DISTRIBUTION\x20harmlessly;\x20residue\x20from\x20a\x20missed\x20session\x20release,\x20a\x20discounted\x20order,\x20or\x20a\x20mid-cohort\x20withdrawal\x20after\x20the\x20release-sequence\x20advanced\x20exits\x20to\x20the\x20buyer\x20instead\x20of\x20stranding\x20(IMMUT-001).\x20Earned\x20tuition\x20=\x20whatever\x20the\x20per-session\x20rails\x20actually\x20RELEASED;\x20the\x20sweep\x20pays\x20the\x20unearned\x20remainder\x20home'},{'template_id':'pattern.progress_state_check','host':'machine','key':'terminal_settlement_recover','purpose':'Awarded-order\x20recovery\x20twin\x20of\x20terminal_settlement\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers\x20advance\x20orders\x20past\x20the\x20award\x20state\x20—\x20F-51;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion,\x20a\x20node\x20literal\x20re-seals\x20the\x20rail)\x20+\x20NO\x20signer\x20leg\x20+\x20NO\x20window\x20leg\x20(keeper-reachable\x20—\x20an\x20owner-gone\x20order\x20keeps\x20a\x20fund\x20exit)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21;\x20the\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20parent\x20EOA:\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise).\x20Pays\x20Rate\x2010000\x20of\x20the\x20residual\x20pool\x20to\x20the\x20institution\x20Entity:\x20exactly\x20one\x20of\x20terminal_settlement\x20(claimed_by\x20some\x20==\x20false)\x20/\x20terminal_settlement_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.allocation_staged_release','host':'machine','purpose':'Post-start\x20pro-rata\x20refund:\x20(N-k)/N\x20converted\x20to\x20static\x20Rate\x20segments\x20—\x20SUPERSEDED\x20(b9-261015,\x20chain-semantics\x20deep\x20read):\x20per-session\x20k/N\x20static\x20Rate\x20segments\x20are\x20NOT\x20expressible\x20(the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot,\x20allocation.move:482-486\x20—\x20runtime-pool\x20rates\x20decay\x20geometrically\x20across\x20fires\x20and\x20strand\x20an\x20integer-division\x20residual;\x20per-session\x20gates\x20cannot\x20bind\x20individual\x20sharing\x20rows).\x20Materialized\x20instead\x20as:\x20withdrawn\x20reachable\x20from\x20every\x20session\x20(already\x20the\x20shape\x20here)\x20+\x20the\x20terminal_settlement\x20residual\x20sweep\x20(per-session\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund)'},{'template_id':'tpl_write_guard_type_check','host':'repository','key':'syllabus_write','purpose':'Syllabus\x20+\x20material\x20hash\x20commitment\x20written\x20BEFORE\x20course\x20start\x20(anti\x20empty-broadcast\x20/\x20silent\x20substitution)','policy':{'name':'syllabus','id_from':'signer','value_type':'String'}},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Parent\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2030\x20days\x20of\x20completion\x20readiness,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20record,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20finalization\x20always\x20keeps\x20the\x20unreviewed\x20path\x20completed_ready\x20->\x20completed;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'institution','count':0x2,'mode':'amount','refund_track':'order_anchored','rows':[{'track':'settlement','recipient':'entity','recipient_key':'institution','mode':'amount','value_from':'per_session_release','guard_key':'session_release_gate','note':'Per-session\x20release\x20=\x20term_price\x20/\x20session_count\x20(fee_params\x20per_session_release),\x20released\x20at\x20each\x20attended\x20session\x20via\x20the\x20session_release_gate\x20guard;\x20keep\x20min_term_price\x20>=\x20session_count\x20*\x20per_session_release\x20(alloc()\x20asserts\x20balance\x20>=\x20fix,\x20allocation.move\x20EINSUFFICIENT_BALANCE).\x20DISCOUNT\x20DEADLOCK\x20WARNING\x20(crs9-mn-261015\x20F-34\x20family):\x20min_term_price\x20floors\x20the\x20LIST\x20price\x20only\x20—\x20a\x20coupon/discounted\x20order\x27s\x20pool\x20can\x20fall\x20below\x20session_count\x20*\x20per_session_release\x20and\x20a\x20mid-sequence\x20session\x20release\x20aborts\x20EINSUFFICIENT_BALANCE,\x20stranding\x20the\x20escrow\x20(the\x20proven\x20discount-safe\x20single-release\x20shape\x20is\x20the\x20Rate-10000\x20leg,\x20mooc-single-course\x20v71;\x20a\x20single\x20Rate-10000\x20leg\x20here\x20would\x20sweep\x20the\x20whole\x20pool\x20at\x20the\x20FIRST\x20session,\x20and\x20per-session\x20Rate\x20rows\x20are\x20NOT\x20expressible\x20—\x20sharing\x20rows\x20inside\x20ONE\x20allocator\x20pay\x20together\x20per\x20run\x20and\x20the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot\x20(allocation.move:482-486),\x20so\x20runtime-pool\x20rates\x20decay\x20geometrically\x20across\x20fires).\x20Residue\x20from\x20a\x20discounted\x20or\x20bricked\x20sequence\x20exits\x20via\x20the\x20terminal_settlement\x20sweep\x20instead\x20of\x20stranding.\x20As\x20on\x20mooc-degree,\x20the\x20discount\x20surface\x20is\x20closed\x20at\x20BUY\x20time\x20by\x20ENFORCEMENT\x20(order.amount\x20>=\x20session_count\x20x\x20per_session_release\x20—\x20the\x20buy-path\x20fixed-leg\x20gate,\x20error\x20order_below_fixed_leg_sum,\x20b6-11\x20family;\x20a\x20discounted\x20order\x20is\x20rejected\x20before\x20any\x20money\x20moves).\x20NO\x20Rate-0\x20anchor\x20leg\x20here\x20BY\x20DESIGN:\x20an\x20Amount-mode\x20allocator\x20with\x20a\x20Rate-0\x20leg\x20sums\x200\x20!=\x2010000\x20and\x20aborts\x20ERATE_NOT_10000\x20(allocation.move:343-347)\x20—\x20the\x20order\x20binding\x20rides\x20the\x20guard\x27s\x20own\x20slot-0\x20submission\x20instead.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Pre-start\x20full\x20refund\x20to\x20the\x20order-anchored\x20recipient\x20(the\x20parent),\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(node\x20withdrawn);\x20post-start\x20withdrawal\x20refunds\x20ride\x20the\x20terminal_settlement\x20residual\x20sweep\x20(the\x20unearned\x20remainder\x20—\x20the\x20earned\x20share\x20already\x20left\x20via\x20the\x20per-session\x20releases).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'terminal_settlement','note':'Terminal\x20residual\x20sweep\x20(FUND-EXIT-01\x20always-on\x20backstop,\x20yfdx-mn-261015\x20A1\x20—\x20live-proven\x20shape\x20yfdx-g-refund-rest):\x20Rate\x2010000\x20of\x20the\x20REMAINING\x20pool\x20to\x20the\x20order-anchored\x20recipient,\x20gated\x20by\x20terminal_settlement\x20(n-ary\x20OR\x20over\x20ALL\x20terminal\x20nodes\x20{completed,\x20renewal_window,\x20withdrawn},\x20keeper-reachable,\x20no\x20signer\x20leg,\x20no\x20window\x20leg,\x20claimed_by\x20some\x20==\x20false,\x20254\x20once\x20per\x20order).\x20DORMANT\x20on\x20the\x20golden\x20path\x20—\x20the\x20pool\x20is\x20already\x20empty\x20(every\x20attended\x20session\x27s\x20Amount\x20released)\x20and\x20a\x20keeper\x20fire\x20on\x20an\x20empty\x20pool\x20aborts\x2014\x20harmlessly;\x20backstops\x20residue\x20from\x20a\x20missed\x20session\x20release,\x20a\x20discounted\x20order,\x20or\x20a\x20mid-cohort\x20withdrawal\x20(the\x20per-session\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20sweep\x20IS\x20the\x20pro-rata\x20refund\x20—\x20discount-safe\x20by\x20construction).\x20Supersedes\x20the\x20declared\x20(N-k)/N\x20static\x20Rate\x20segments\x20(b8-261015):\x20the\x20Rate\x20base\x20is\x20the\x20CURRENT\x20pool\x20snapshot\x20(allocation.move:482-486)\x20and\x20sharing\x20rows\x20cannot\x20be\x20row-gated,\x20so\x20those\x20were\x20never\x20expressible.'},{'track':'settlement','recipient':'entity','recipient_key':'institution','mode':'rate','value':0x2710,'guard_key':'terminal_settlement_recover','note':'Awarded-order\x20recovery\x20twin\x20of\x20the\x20terminal_settlement\x20sweep\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20the\x20sweep\x27s\x20claimed_by\x20some\x20==\x20false\x20leg\x20welds\x20shut\x20the\x20moment\x20an\x20award\x20pays,\x20so\x20this\x20rail\x20is\x20what\x20keeps\x20an\x20AWARDED\x20order\x27s\x20residual\x20pool\x20exiting\x20(to\x20the\x20institution\x20Entity)\x20instead\x20of\x20stranding\x20at\x20a\x20terminal.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20term_release_gate/refund_gate/terminal_settlement),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20terminal_settlement\x20(claimed_by\x20some\x20==\x20false)\x20/\x20terminal_settlement_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'Per-session\x20release:\x20institution\x20Amount\x20=\x20term_price\x20/\x20N\x20(e.g.\x205000/20\x20=\x20250)\x20gated\x20by\x20the\x20dual-sign\x20attendance\x20guard\x20with\x20a\x20release-sequence\x20lock;\x20optional\x20platform\x20commission\x20entry;\x20pre-start\x20refund\x20=\x20Rate\x2010000\x20to\x20the\x20order-anchored\x20recipient;\x20post-start\x20pro-rata\x20=\x20the\x20terminal_settlement\x20residual\x20sweep\x20to\x20the\x20order\x20anchor\x20(the\x20per-session\x20Amounts\x20already\x20paid\x20the\x20earned\x20share,\x20so\x20the\x20unearned\x20remainder\x20IS\x20the\x20sweep\x20—\x20the\x20declared\x20(N-k)/N\x20static\x20Rate\x20splits\x20are\x20superseded,\x20NOT\x20expressible\x20on\x20the\x20pool-snapshot\x20Rate\x20base).\x20No\x20Surplus\x20—\x20an\x20integer-division\x20remainder\x20stays\x20in\x20the\x20pool\x20by\x20design\x20and\x20the\x20terminal\x20sweep\x20collects\x20it'},'key_risk':'Institution\x20self-claiming\x20attendance\x20—\x20release\x20requires\x20the\x20parent\x27s\x20(order\x20owner\x27s)\x20signature;\x20the\x20institution\x20only\x20advances\x20the\x20workflow','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','Dual-sign\x20attendance:\x20the\x20institution\x20advances\x20the\x20workflow\x20(permission\x20slot)\x20but\x20fund\x20release\x20requires\x20the\x20parent\x27s\x20signature\x20—\x20fixes\x20the\x20classic\x20self-sign\x20bug','Over-release\x20defense:\x20the\x20attendance\x20Guard\x20family\x20adds\x20a\x20release-sequence\x20lock\x20(payment\x20vector\x20length\x20check)\x20—\x20exactly\x20one\x20trigger\x20per\x20session','Business\x20caps\x20(R10,\x20industry-recommended\x20defaults\x20—\x20merchant-configurable):\x20max\x20prepay\x205000\x20/\x2060\x20sessions\x20/\x203\x20months\x20—\x20the\x20on-chain\x20guard\x20checks\x20Passport-submitted\x20values;\x20Sale\x20structure\x20+\x20quote\x20validation\x20enforce\x20the\x20real\x20bounds','Setting\x20lock\x20extended\x20to\x2090\x20days\x20(add-only\x20function;\x20set\x20once)','Session\x20nodes\x20are\x20representative\x20—\x20expand\x20to\x20N\x20at\x20build\x20time;\x2060\x20sessions\x20is\x20about\x2067\x20nodes\x20(two-thirds\x20of\x20the\x20node\x20cap)','Refund\x20segments\x20are\x20static\x20Rate\x20conversions\x20of\x20(N-k)/N;\x20no\x20Surplus\x20(avoids\x20fractional\x20remainder\x20disputes)','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20institution\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','Trial\x20funnel\x20is\x20a\x20SEPARATE\x20Service\x20(lead\x20product);\x20coupon\x20handoff\x20via\x20a\x20Discount\x20pointing\x20at\x20the\x20main-course\x20Service','PRICE\x20FLOOR\x20FOR\x20THE\x20PER-SESSION\x20Amount\x20LEG:\x20each\x20release\x20pins\x20per_session_release\x20as\x20a\x20fixed\x20Amount\x20and\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20(allocation.move,\x20EINSUFFICIENT_BALANCE),\x20so\x20a\x20term\x20priced\x20below\x20the\x20release\x20unit\x20—\x20or\x20partially\x20refunded\x20down\x20to\x20it\x20—\x20can\x20never\x20release\x20the\x20remaining\x20sessions\x20(testnet\x20CR-02).\x20Keep\x20min_term_price\x20>=\x20session_count\x20*\x20per_session_release','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'prepay_cap':0x1388,'max_sessions':0x3c,'max_months':0x3,'term_price':0x1388,'session_count':0x14,'per_session_release':0xfa,'setting_lock_days':0x5a,'platform_commission_rate_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'min_term_price':'must\x20be\x20>=\x20session_count\x20*\x20per_session_release','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'setting_lock':'service\x20config\x20lock\x20(add-only\x20setting_lock_duration\x20—\x20not\x20a\x20Machine\x20window)'},'trust_mechanisms':['R1\x20pre-start\x20full\x20refund\x20+\x20post-start\x20pro-rata\x20segment\x20refunds','R2\x20independent\x20arbitration\x20Permission\x20(fee\x20<=\x202%\x20of\x20tuition)','R3\x20compensation\x20fund\x20(10x\x20single\x20order)\x20with\x20a\x2090-day\x20locked\x20withdrawal\x20wait','R4\x20parent-signature\x20attendance\x20release\x20—\x20institution\x20self-sign\x20forbidden','R5\x20order-anchored\x20refund\x20recipient\x20(two-step\x20claim)','R6\x20per-session\x20Amount\x20>=\x20threshold\x200;\x20refund\x20Rate\x20sums\x2010000','R7\x20publish\x20freeze\x20(schedule\x20changes\x20=\x20Repository\x20version\x20evidence,\x20not\x20Machine\x20edits)','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20trial\x20expiry\x20and\x20renewal\x20window','R10\x20business\x20prepay\x20caps\x20embedded\x20as\x20buy-guard\x20constants\x20(industry-recommended\x20defaults,\x20merchant-configurable)'],'keeper_dependencies':['trial\x20lesson\x20expiry','renewal\x20window\x20trigger','arbitration\x20ruling\x20refund\x20execution'],'recommended_role':'merchant','role_rationale':'Tutoring\x20institutions\x20own\x20the\x20course\x20Service;\x20the\x20parent\x20is\x20the\x20order\x20owner\x20whose\x20signature\x20gates\x20every\x20session\x20release.','differences':['Per-session\x201/N\x20progressive\x20release\x20—\x20funds\x20unlock\x20only\x20as\x20sessions\x20are\x20attended\x20(anti-runaway\x20protection)','Parent\x20(order\x20owner)\x20signature\x20gates\x20every\x20session\x20release;\x20the\x20institution\x20only\x20advances\x20the\x20workflow','Prepay\x20caps\x20(max\x20amount\x20/\x20sessions\x20/\x20months\x20—\x20industry-recommended\x20defaults,\x20merchant-configurable)\x20embedded\x20in\x20the\x20buy\x20guard;\x20the\x20trial\x20funnel\x20is\x20a\x20separate\x20lead\x20Service'],'user_inputs':['session_count\x20—\x20real\x20session\x20count\x20(session_*\x20nodes\x20expand\x20to\x20N;\x20merchant\x20sets\x20the\x20count)','term_price\x20/\x20per_session_release\x20—\x20the\x20term\x20price\x20and\x20its\x201/N\x20release\x20unit','prepay_cap\x20/\x20max_sessions\x20/\x20max_months\x20—\x20buy-gate\x20constants\x20(industry-recommended\x20defaults,\x20merchant-configurable)','setting_lock_days\x20—\x20Service\x20config\x20lock\x20window\x20(add-only\x20setting_lock_duration;\x20cover\x20a\x20full\x20term,\x20merchant-configurable)','platform_commission_rate_bps\x20—\x20KEEP\x20AT\x200;\x20the\x20commission\x20entry\x20is\x20removed\x20from\x20the\x20default\x20waterfall\x20(it\x20was\x20\x27optional\x27\x20but\x20present,\x20which\x20is\x20what\x20gets\x20copied).\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.']},{'id':'education/mooc-single-course','industry':'education','variant':'mooc-single-course','product_ref':'coursera','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','machine_shape':[{'name':'paid','role':'Entry:\x20course\x20/\x20subscription\x20term\x20paid\x20and\x20escrowed;\x20the\x2014-day\x20refund\x20window\x20opens\x20here\x20and\x20runs\x20from\x20order.time\x20(payment)\x20—\x20learning\x20progress\x20never\x20closes\x20it','semantic_role':'draft','from':['']},{'name':'enrolled','role':'Course\x20access\x20granted\x20—\x20content\x20Repository\x20unlocked;\x20the\x2014-day-from-payment\x20refund\x20window\x20is\x20still\x20open','semantic_role':'active','from':['paid']},{'name':'assessing','role':'Learner\x20submits\x20the\x20final\x20assessment;\x20the\x20institution\x20grades\x20—\x20grading\x20does\x20NOT\x20close\x20the\x20refund\x20window\x20(the\x20order.time\x20+\x2014\x20days\x20clock\x20governs,\x20not\x20the\x20milestone)','semantic_role':'active','from':['enrolled']},{'name':'certified','role':'Assessment\x20passed\x20—\x20certificate\x20payload\x20authorized,\x20pending\x20Repository\x20write','semantic_role':'delivered','from':['assessing']},{'name':'reviewed','role':'Learner\x20reviews\x20the\x20course\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20to\x20the\x20completion\x20record,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'certified','forward':'Review','guard_key':'review_window'}]},{'name':'completed','role':'Certificate\x20written\x20to\x20the\x20Repository;\x20SETTLEMENT\x20terminal\x20—\x20income\x20released\x20via\x20settle_gate\x20(progress.current\x20==\x20completed).\x20For\x20a\x20monthly/annual\x20plan\x20this\x20Order\x27s\x20term\x20ends\x20here;\x20the\x20next\x20term\x20is\x20a\x20NEW\x20Order\x20(REUSE\x20—\x20a\x20fresh\x20order\x20per\x20term,\x20no\x20in-order\x20renewal\x20state)','semantic_role':'final','from':['certified',{'prev':'reviewed','forward':'CompleteAfterReview'}]},{'name':'returned','role':'Refund\x20claimed\x20inside\x20the\x2014-day\x20window\x20—\x20order-anchored\x20full-refund\x20Allocator\x20(R-M1-11\x20compliant).\x20EVERY\x20entry\x20edge\x20carries\x20the\x20return_window\x20guard\x20explicitly\x20—\x20the\x20unkeyed\x20machine\x20guards\x20it\x20used\x20to\x20ride\x20stayed\x20PENDING\x20at\x20generate\x20and\x20left\x20the\x20terminal\x20with\x20no\x20fund\x20exit\x20(audit\x20FUND-EXIT-01,\x20mn-261014)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'claim_return','operator':'order_payer','guard_key':'return_window'},{'prev':'enrolled','forward':'claim_return','operator':'order_payer','guard_key':'return_window'},{'prev':'assessing','forward':'claim_return','operator':'order_payer','guard_key':'return_window'}]}],'guards':[{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'return_window','purpose':'Return-claim\x20EDGE\x20gate\x20on\x20claim_return\x20(paid/enrolled/assessing\x20->\x20returned):\x20Clock\x20<=\x20order.time\x20+\x20refund_window_days\x20—\x20a\x20CLOSING\x20window;\x20the\x20declaration\x20was\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20that\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19),\x20now\x20aligned\x20with\x20the\x20inline\x20resolution\x20this\x20line\x20already\x20prescribed\x20—\x20the\x20anchor\x20is\x20ORDER\x20CREATION\x20(progress.current_time\x20refreshes\x20on\x20every\x20forward\x20and\x20would\x20leave\x20the\x20window\x20perpetually\x20open;\x20matches\x20the\x20degree\x20sibling\x27s\x20v25\x20anchor)\x20—\x20AND\x20signer\x20==\x20order.order\x20owner\x20identity\x20leg\x20AND\x20order.service\x20==\x20<service>\x20project\x20binding\x20(R-C3-05).\x20TASKBIND-01:\x20the\x20table\x20MUST\x20declare\x20the\x20slot-254\x20Address\x20row.\x20Learning\x20progress\x20never\x20closes\x20this\x20window\x20—\x20grading-period\x20returns\x20stay\x20purchasable\x20(the\x20incumbent\x27s\x20real\x20policy).\x20Resolve\x20inline\x20from\x20tpl_time_window_upper\x20+\x20identity\x20+\x20service-binding\x20legs'},{'template_id':'tpl_allocator_node_gate_settle_once','host':'machine','key':'settle_gate','purpose':'Single-shot\x20settlement\x20allocator\x20gate\x20(KLM-C:\x20one-shot\x20per-order\x20escrow\x20settles\x20via\x20the\x20CHAIN-DERIVED\x20protocol-254\x20once\x20key\x20—\x20the\x20old\x20255+history-count\x20key\x20is\x20publicly\x20computable\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20locks\x20the\x20rail,\x20mainnet\x20KL-LIVE-01\x20261014):\x20progress.current\x20==\x20completed\x20+\x20order.service\x20binding\x20(R-C3-05)\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(D-BUG-2\x20polarity,\x20ships\x20in\x20the\x20tpl\x20root\x20—\x20ctra-mn-261019\x20F-05)\x20+\x20declared\x20254\x20Address\x20submission\x20slot\x20(once\x20key\x20=\x20bcs(payment_info.for_object),\x20replay\x20aborts\x2016).\x20The\x20kernel\x20injects\x20service_name\x20=\x20the\x20plan\x27s\x20service\x20name;\x20settle_node\x20defaults\x20to\x20\x27completed\x27.\x20SINGLE\x20COURSE\x20pays\x20the\x20fixed\x20Amount\x20here;\x20a\x20plan-term\x20variant\x20that\x20must\x20release\x20at\x20month-end\x20instead\x20adds\x20its\x20own\x20Clock\x20leg\x20via\x20an\x20APPENDED\x20allocator\x20(order_allocators\x20is\x20append-only\x20after\x20publish)\x20—\x20one\x20Machine\x20cannot\x20express\x20both\x20release\x20clocks\x20on\x20one\x20node'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20allocator\x20gate\x20(pending\x20judgment):\x20progress.current\x20==\x20returned\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool;\x20blocks\x20refund\x20once\x20an\x20award\x20ACTUALLY\x20paid\x20—\x20never\x20gate\x20on\x20dispute\x20count\x20==\x200,\x20the\x20append-only\x20vector\x20welds\x20the\x20rail\x20shut\x20on\x20the\x20first\x20filing\x20and\x20strands\x20the\x20escrow).\x20NO\x20SIGNER\x20LEG\x20IS\x20ENCODED\x20(CAT-B2,\x20upwc-cat-261017:\x20the\x20old\x20prose\x20claimed\x20\x27signer\x20==\x20order.owner\x20(anti-hijack\x20R5)\x27\x20but\x20tpl_allocator_node_gate_refund\x20has\x20no\x20signer\x20parameter);\x20anti-hijack\x20is\x20STRUCTURAL\x20(the\x20GuardIdentifier(0)\x20order-anchored\x20recipient\x20lands\x20funds\x20ON\x20the\x20Order,\x20owner-receive\x20only);\x20a\x20signer\x20leg\x20is\x20OPTIONAL\x20trigger-rights\x20hardening.\x20NEVER\x20arm\x20slot\x20254\x20on\x20this\x20rail\x20—\x20254\x20keys\x20on\x20payment_info.for_object\x20(OFN\x20#P-04);\x20once-semantics\x20comes\x20from\x20the\x20terminal-node\x20topology.\x20Resolve\x20with\x20tpl_allocator_node_gate_refund\x20+\x20the\x20claimed_by\x20leg;\x20the\x20paired\x20recover_gate\x20leg\x20keeps\x20the\x20awarded\x20escrow\x20exiting\x20(D-BUG-2:\x20exactly\x20one\x20polarity\x20can\x20ever\x20pass)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2\x20—\x20the\x20b9-261015\x20\x27FULL-SET\x20node\x20gate\x27\x20is\x20REMOVED:\x20the\x20encoded\x20legs\x20are\x20claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding\x20ONLY,\x20deliberately\x20NO\x20node\x20equality\x20leg):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding.\x20Why\x20no\x20node\x20gate:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20(upw-mn-261014\x20F-51:\x20a\x20delivered-pinned\x20rail\x20aborted\x207\x20after\x20the\x20auto-accept\x20keeper\x20moved\x20the\x20order\x20on;\x20upwc-cat-261017\x20CAT-C2\x20live:\x20a\x20completed-pinned\x20rail\x20stranded\x201.0\x20WOW\x20after\x20the\x20award\x20paid),\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20already\x20carries\x20the\x20mutual\x20exclusion\x20vs\x20refund_gate\x20(exactly\x20one\x20polarity\x20can\x20pass,\x20D-BUG-2)\x20—\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail\x20and\x20strands\x20the\x20escrow.\x20Pays\x20Rate\x2010000\x20to\x20the\x20institution\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion.\x20RULED-ZERO\x20CAVEAT\x20(BKN-P1):\x20any\x20claim\x20flips\x20the\x20polarity,\x20including\x20a\x20zero-award\x20ruling'},{'template_id':'tpl_write_guard_type_check','host':'repository','key':'cert_write','purpose':'Certificate\x20Repository\x20write\x20policy:\x20only\x20the\x20institution-signed\x20cert\x20payload\x20passes;\x20cert\x20freezes\x20on\x20write\x20—\x20void\x20BEFORE\x20any\x20refund\x20orchestration','policy':{'name':'certificate','id_from':'signer','value_type':'String'}},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Learner\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2030\x20days\x20of\x20certification,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20record,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20completion\x20always\x20keeps\x20the\x20unreviewed\x20path\x20certified\x20->\x20completed;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','refund_track':'order_anchored','once_per_order':!![],'count':0x3,'mode':'rate','description':'Income\x20track:\x20ONE\x20full\x20release\x20per\x20Order\x20—\x20single\x20course\x20sweeps\x20the\x20ACTUAL\x20paid\x20pool\x20at\x20certification\x20(Rate-10000\x20+\x20inline\x20Rate-0\x20ORDER\x20anchor,\x20discount-safe:\x20crs9-mn-261015\x20F-34),\x20monthly/annual\x20plans\x20are\x20one\x20Order\x20per\x20term\x20with\x20a\x20single\x20release\x20(never\x20recurring\x20within\x20an\x20Order)\x20—\x20the\x20settlement\x20income\x20leg\x20is\x20gated\x20by\x20settle_gate\x20at\x20completed\x20—\x20DIRECT-SALES:\x20WoWok\x20takes\x20no\x20platform\x20commission\x20(merchant\x20pays\x20gas\x20only),\x20so\x20the\x20default\x20waterfall\x20gives\x20the\x20merchant\x20the\x20whole\x20sale.\x20the\x2050/50\x20benchmark\x20split\x20was\x20the\x20incumbent\x27s,\x20and\x20the\x20partner\x20here\x20IS\x20the\x20merchant.\x20refund\x20track:\x20a\x20SEPARATE\x20allocator\x20whose\x20recipient\x20is\x20GuardIdentifier(0)\x20—\x20the\x20passport\x20submits\x20the\x20ORDER\x20address\x20(never\x20the\x20learner\x20EOA;\x20for_object\x20anchoring\x20aborts\x2015\x20otherwise),\x20guard\x20=\x20refund_gate\x20(AND[signer==order.owner,\x20progress.node==returned,\x20window,\x20claimed_by\x20none]),\x20Rate\x2010000\x20—\x20once-semantics\x20from\x20the\x20terminal\x20topology,\x20NEVER\x20slot\x20254\x20on\x20this\x20rail\x20(OFN\x20#P-04).\x20recovery\x20track:\x20recover_gate\x20pays\x20the\x20escrow\x20principal\x20to\x20the\x20course-partner\x20Entity\x20ONLY\x20after\x20an\x20award\x20actually\x20paid\x20(claimed_by\x20some),\x20the\x20paired\x20exit\x20(D-BUG-2)','rows':[{'track':'settlement','recipient':'entity','recipient_key':'course_partner','mode':'rate','value':0x2710,'guard_key':'settle_gate','note':'Single-course\x20income\x20leg\x20as\x20Rate-10000\x20AT\x20completed\x20(settle_gate\x20node\x20gate\x20+\x20service\x20binding\x20+\x20255-once,\x20kernel\x20auto-filled).\x20RATE\x20MODE\x20IS\x20THE\x20CANONICAL\x20SHAPE\x20(crs9-mn-261015\x20F-34,\x20mainnet-proven):\x20the\x20release\x20sweeps\x20the\x20Order\x27s\x20ACTUAL\x20paid\x20pool,\x20so\x20coupon/discount\x20orders\x20settle\x20in\x20full\x20—\x20the\x20previous\x20Amount\x20leg\x20(value_from:\x20course_price_usd)\x20pinned\x20the\x20LIST\x20price\x20and\x20aborted\x20EINSUFFICIENT_BALANCE\x20on\x20any\x20discounted\x20pool,\x20stranding\x20the\x20escrow.\x20plan\x20terms\x20reuse\x20the\x20same\x20one-release-per-Order\x20shape\x20(a\x20month-end\x20variant\x20needs\x20its\x20own\x20Clock\x20leg\x20via\x20an\x20appended\x20allocator\x20—\x20order_allocators\x20is\x20append-only).\x200%\x20platform\x20commission\x20stands\x20—\x20NO\x20Surplus\x20leg\x20(an\x20uncapped\x20Surplus\x20would\x20sweep\x20the\x20entire\x20remaining\x20pool\x20to\x20the\x20platform\x20Entity).\x20fee_params\x20benchmark\x20prices\x20stay\x20TS-layer\x20generation\x20inputs\x20in\x20smallest\x20units\x20(course_price_usd\x20\x27490000000\x27\x20for\x200.49\x20WOW,\x20NOT\x2049\x20—\x20mn-261013\x20P0).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_gate','note':'Rate-0\x20ORDER\x20anchor\x20LEG\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settle\x20allocator:\x20forces\x20the\x20settle\x20Guard\x20to\x20declare\x20slot\x200\x20(the\x20submitted\x20Order,\x20b_submission\x20Address)\x20and\x20makes\x20a\x20sibling\x20order\x27s\x20passport\x20unable\x20to\x20drive\x20this\x20rail\x20(testnet\x20CR-01\x20drain);\x20pays\x20nothing.\x20Legal\x20here\x20BECAUSE\x20the\x20group\x20carries\x20the\x20Rate-10000\x20companion\x20—\x20chain\x20asserts\x20per-allocator\x20Rate\x20sums\x20to\x20EXACTLY\x2010000\x20(allocation.move:343-347,\x20ERATE_NOT_10000;\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register,\x20crs-mn-261014\x20F-16).'},{'track':'settlement','recipient':'entity','recipient_key':'course_partner','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20at\x20returned\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20course-partner\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Exactly\x20one\x20of\x20refund_gate/recover_gate\x20can\x20ever\x20pass\x20(D-BUG-2).\x20RULED-ZERO\x20CAVEAT:\x20a\x20zero-award\x20ruling\x20also\x20flips\x20the\x20polarity\x20(no\x20amount\x20floor,\x20service.move:506-512)\x20—\x20the\x20guarantee\x20is\x20no-stranding,\x20not\x20no-misallocation.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Order-anchored\x20refund\x20inside\x20the\x20published\x20refund_window_days:\x20progress.current\x20==\x20returned\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(signer\x20==\x20order.owner\x20OPTIONAL\x20—\x20trigger-rights\x20only;\x20CAT-B2/upwc-cat-261017:\x20not\x20an\x20encoded\x20template\x20leg).\x20The\x20exclusion\x20is\x20ONE-DIRECTIONAL\x20(v42):\x20it\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid\x20—\x20never\x20the\x20reverse\x20(a\x20refunded\x20buyer\x20can\x20still\x20file\x20and\x20win\x20a\x20case;\x20only\x20the\x20arbitrator\x27s\x20net\x20ruling\x20seals\x20that,\x20and\x20the\x20compensation\x20fund\x20stays\x20an\x20independent\x20third\x20channel).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(append-only\x20vector\x20=\x20one-way\x20door,\x20strands\x20the\x20escrow\x20on\x20the\x20first\x20filing).\x20NEVER\x20arm\x20slot\x20254\x20on\x20this\x20rail\x20(OFN\x20#P-04\x20—\x20the\x20terminal-node\x20topology\x20is\x20the\x20once).\x20The\x20passport\x20submits\x20the\x20ORDER\x20address,\x20never\x20the\x20learner\x20EOA\x20(for_object\x20anchoring\x20aborts\x2015\x20otherwise).'}]},'key_risk':'Refund-window\x20abuse\x20and\x20double\x20refund\x20—\x20the\x20refund\x20allocator\x20is\x20node-gated\x20to\x20returned\x20(terminal-topology\x20once\x20+\x20claimed_by\x20polarity\x20pair\x20with\x20recover_gate),\x20and\x20the\x20certificate\x20Repository\x20write\x20freezes\x20the\x20credential\x20before\x20any\x20refund\x20orchestration','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','VENUE\x20READINESS\x20(role\x20boundary):\x20a\x20fresh\x20Arbitration\x20ships\x20paused\x20with\x20zero\x20grants\x20—\x20unpause\x20and\x20voting\x20configuration\x20are\x20the\x20ARBITRATOR\x27s\x20deployment\x20steps\x20on\x20their\x20own\x20objects,\x20never\x20this\x20build\x27s.\x20Bind\x20only\x20a\x20venue\x20already\x20operational\x20(unpaused,\x20voting\x20armed):\x20a\x20paused\x20venue\x20rejects\x20every\x20dispute\x20with\x20E_PAUSED\x20(the\x20MCP\x20pre-publish\x20scan\x20hard-blocks\x20binding\x20a\x20paused\x20venue)','REFUND\x20GUARD\x20IS\x20NODE-GATED:\x20AND[signer==order.owner,\x20progress.node==returned]\x20—\x20a\x20signer-only\x20guard\x20would\x20let\x20the\x20holder\x20claim\x20after\x20certification\x20(double-dip)','REFUND\x20RAIL\x20ONCE-SEMANTICS:\x20`returned`\x20is\x20a\x20cancelled\x20TERMINAL\x20—\x20the\x20rail\x20fires\x20at\x20most\x20once\x20per\x20Order\x20by\x20topology\x20(a\x20replay\x20hits\x20the\x20drained\x20pool,\x20EZERO\x2014).\x20NEVER\x20arm\x20slot\x20254\x20on\x20the\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20a\x20renewal/second\x20Order-in-flow\x20never\x20rewrites\x20(OFN\x20#P-04);\x20the\x20settlement\x20rail\x20carries\x20the\x20protocol-255\x20once\x20leg\x20inside\x20settle_gate\x20itself','Entry\x20edge\x20is\x20a\x20PAIR:\x20wire\x20{prev_node:\x27\x27}\x20into\x20paid\x20explicitly\x20—\x20marking\x20it\x20Entry\x20does\x20NOT\x20create\x20the\x20first\x20hop','Certificate\x20Repository\x20policies\x20freeze\x20on\x20write;\x20refund\x20orchestration\x20must\x20void\x20the\x20certificate\x20BEFORE\x20the\x20refund','Subscription\x20plans\x20(monthly\x20/\x20annual)\x20reuse\x20the\x20SAME\x20machine:\x20the\x20term\x27s\x20Order\x20SETTLES\x20and\x20ends\x20at\x20completed;\x20the\x20next\x20term\x20is\x20a\x20new\x20Order\x20(v63:\x20the\x20old\x20\x27renewal_window\x27\x20record\x20terminal\x20was\x20deleted\x20—\x20a\x20terminal\x20with\x20no\x20fund\x20exit\x20failed\x20FUND-EXIT-01\x20and\x20the\x20renewal\x20was\x20never\x20an\x20in-Machine\x20state\x20anyway).\x20The\x20month-end\x20income\x20release\x20for\x20a\x20term\x20is\x20a\x20chain-Clock\x20time\x20guard\x20added\x20via\x20an\x20APPENDED\x20allocator\x20(order_allocators\x20is\x20append-only)\x20—\x20document\x20the\x20time-source\x20choice\x20per\x20the\x20pattern.time_source_repository_oracle\x20tradeoff','Refunds\x20route\x20via\x20Allocators\x20(R-M1-11);\x20disputes\x20(grading,\x20certificate\x20revocation)\x20go\x20to\x20the\x20independent\x20Arbitration','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20course-partner\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'course_price_usd':0x31,'subscription_monthly_usd':0x3b,'annual_plan_usd':0x18f,'partner_share_bps':0x2710,'platform_share_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'refund_window_days':0xe,'month_release_day':0x1c,'min_course_price_usd':0x31,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'trust_mechanisms':['R1\x2014-day\x20refund\x20window:\x20full\x20refund\x20only\x20from\x20returned\x20—\x20node-gated\x20(refund_gate)\x20+\x20terminal-topology\x20once\x20+\x20claimed_by\x20polarity\x20pair\x20(D-BUG-2)','R2\x20independent\x20arbitration\x20Permission\x20(contract\x20assertion;\x20venue\x20readiness\x20check\x20in\x20build_notes)','R3\x20compensation\x20fund\x20NOT\x20funded\x20by\x20default\x20(low\x20ticket)\x20—\x20enable\x20it\x20for\x20professional-certificate\x20lines','R4\x20single-sign\x20acceptable\x20at\x20this\x20price\x20point;\x20the\x20certificate\x20(Repository\x20freeze-on-write)\x20is\x20the\x20tamper\x20anchor','R5\x20order-anchored\x20refund\x20recipient\x20(GuardIdentifier(0)\x20+\x20Order-address\x20submission\x20+\x20two-step\x20claim)','R6\x20Rate\x20sums\x2010000\x20on\x20every\x20Rate-bearing\x20track\x20(settlement\x20income\x20is\x20a\x20PURE-Amount\x20group\x20—\x20no\x20Rate\x20leg,\x20no\x20Rate-0\x20anchor:\x20any\x20Rate\x20leg\x20with\x20no\x20Surplus\x20must\x20sum\x20exactly\x2010000,\x20allocation.move:343-347;\x20refund\x2010000\x20behind\x20refund_gate;\x20recover\x2010000\x20behind\x20recover_gate;\x20no\x20platform\x20leg)','R11\x20PRICE\x20SAFETY\x20(min_course_price_usd\x20floor):\x20the\x20buy\x20price\x20IS\x20the\x20selected\x20fee_param\x20(course_price_usd\x20for\x20the\x20single\x20course,\x20the\x20plan\x20price\x20for\x20a\x20term\x20Order)\x20—\x20the\x20settlement\x20income\x20leg\x20is\x20Rate-10000,\x20so\x20it\x20sweeps\x20the\x20ACTUAL\x20paid\x20pool\x20and\x20can\x20never\x20deadlock\x20a\x20discounted\x20order\x20(the\x20former\x20fixed\x20Amount\x20leg\x20pinned\x20the\x20LIST\x20price\x20and\x20aborted\x20EINSUFFICIENT_BALANCE\x20on\x20every\x20discounted\x20order,\x20crs9-mn-261015\x20F-34);\x20builders\x20must\x20not\x20price\x20below\x20the\x20floor','R7\x20publish\x20freeze\x20(content\x20updates\x20=\x20new\x20WIP\x20versions,\x20not\x20Machine\x20edits)','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers:\x20subscription\x20expiry,\x20month-end\x20release\x20trigger,\x20renewal\x20reminders','R10\x20setting\x20lock\x20covering\x20the\x20refund\x20window\x20(recommended\x2030\x20days,\x20add-only)'],'keeper_dependencies':['subscription\x20expiry\x20/\x20term\x20end','month-end\x20income\x20release\x20trigger','renewal\x20reminder\x20before\x20term\x20end'],'recommended_role':'merchant','role_rationale':'The\x20institution\x20/\x20content\x20partner\x20owns\x20the\x20single-course\x20Service;\x20platform\x20billing\x20runs\x20under\x20a\x20dedicated\x20Permission\x20entity.','differences':['Consumer\x20line\x20vs\x20the\x20degree\x20sibling:\x20single\x20course\x20/\x20subscription\x20/\x20certificate\x20—\x20the\x20incumbent\x27s\x20mainline\x20revenue,\x20not\x20the\x20multi-term\x20degree\x20escrow','Income\x20is\x20ONE\x20full\x20release\x20per\x20Order\x20to\x20the\x20partner\x27s\x20Entity\x20(single\x20course:\x20fixed\x20Amount\x20at\x20certification;\x20monthly/annual:\x20one\x20Order\x20per\x20term\x20with\x20a\x20single\x20month-end\x20release\x20—\x20never\x20recurring\x20within\x20an\x20Order).\x20The\x20degree\x20line\x20releases\x20per\x20term\x20with\x20dual-sign\x20and\x20caps','Primary\x20buyer\x20protection\x20is\x20the\x2014-day\x20refund\x20window\x20(vs\x20the\x20degree\x27s\x20pre-start\x20full\x20+\x20per-term\x20pro-rata\x20refunds)'],'user_inputs':['course_price_usd\x20/\x20subscription_monthly_usd\x20/\x20annual_plan_usd\x20—\x20the\x20pricing\x20structure\x20(pick\x20one\x20per\x20Service)','partner_share_bps\x20—\x20partner\x27s\x20share\x20(default\x2010000).\x20platform_share_bps\x20—\x20KEEP\x20AT\x200;\x20the\x20incumbent\x20benchmark\x205000/5000\x20is\x20the\x20number\x20being\x20displaced.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','refund_window_days\x20—\x20default\x2014','month_release_day\x20—\x20day\x20of\x20month\x20for\x20the\x20subscription\x20income\x20release\x20guard','certificate\x20Repository\x20object\x20+\x20institution\x20signer\x20—\x20the\x20cert\x20write\x20policy'],'time_anchors':{'refund_window':'order.time\x20(order\x20creation\x20—\x20progress.current_time\x20refreshes\x20on\x20every\x20forward,\x20which\x20would\x20leave\x20the\x20window\x20perpetually\x20open)','subscription_term':'order.time'}},{'id':'travel/global-ota','industry':'travel','variant':'global-ota','product_ref':'booking-com','archetype':'leader','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'machine_shape':[{'name':'paid','role':'Entry:\x20booking\x20paid\x20and\x20escrowed.\x20There\x20is\x20NO\x20\x27created\x27\x20node\x20—\x20the\x20first\x20pair\x27s\x20prev_node\x20MUST\x20be\x20the\x20empty\x20string:\x20\x27\x27\x20──pay──→\x20paid\x20IS\x20the\x20starting\x20edge','semantic_role':'draft','from':[{'prev':'','forward':'pay','operator':'order_payer'}]},{'name':'confirmed','role':'Property/supplier\x20confirms\x20(permission\x20slot);\x2048h\x20confirm\x20timeout\x20releases\x20via\x20keeper','semantic_role':'active','from':[{'prev':'paid','forward':'supplier_confirm','permission_index':0x3e9},{'prev':'claim_open','forward':'claim_dismissed_resume','permission_index':0x3e8,'guard_key':'arb_dismissed_resume'}]},{'name':'in_stay','threshold':0x2,'role':'Check-in:\x20property\x20submits\x20redemption\x20WIP\x20+\x20buyer\x20confirms.\x20F41\x20(v70):\x20threshold=2\x20is\x20now\x20a\x20REAL\x20node\x20declaration\x20the\x20compiler\x20forwards\x20onto\x20the\x20Pair\x20—\x20the\x20compile-time\x20hardcode\x20previously\x20dissolved\x20it\x20to\x20\x27whoever\x20advances\x20first\x20wins\x27.\x20Implement\x20as\x20ONE\x20Pair\x20with\x20threshold=2\x20and\x20TWO\x20forwards\x20(check_in_property\x20+\x20check_in_guest)\x20—\x20a\x20single\x20forward\x20cannot\x20express\x20dual\x20confirmation,\x20and\x20two\x20SEPARATE\x20Pairs\x20into\x20in_stay\x20is\x20illegal\x20(E_DUPLICATE_NODE_PREV)','semantic_role':'active','from':[{'prev':'confirmed','forward':'check_in_property','permission_index':0x3e9,'guard_key':'checkin_evidence'},{'prev':'confirmed','forward':'check_in_guest','operator':'order_payer','guard_key':'guest_checkin_identity'}]},{'name':'completed','role':'Check-out\x20confirmed\x20by\x20the\x20buyer\x20—\x20the\x20stay\x20was\x20DELIVERED.\x20NOT\x20the\x20settlement\x20node\x20—\x20the\x20serial\x20claim\x20window\x20comes\x20next\x20(v30),\x20so\x20the\x20pool\x20stays\x20intact\x20while\x20post-stay\x20claims\x20are\x20adjudicated.\x20bkgota\x20F-03\x20(v102):\x20the\x20no-show\x20charge\x20NO\x20LONGER\x20lands\x20here\x20—\x20no_show\x20routes\x20to\x20the\x20dedicated\x20no_show_charged\x20node,\x20because\x20the\x20review/reward\x20guards\x20read\x20progress.current==\x27completed\x27\x20and\x20a\x20merged\x20node\x20let\x20a\x20charged\x20no-show\x20pass\x20the\x20review\x20gate\x20and\x20farm\x20the\x20reward','semantic_role':'delivered','from':[{'prev':'in_stay','forward':'check_out_guest','operator':'order_payer','guard_key':'checkout_gate'}]},{'name':'no_show_charged','role':'No-show\x20charge\x20filed\x20(property\x20evidence\x20+\x20time\x20floor)\x20—\x20the\x20buyer\x20never\x20arrived\x20and\x20the\x20first-night\x20charge\x20stands\x20on\x20the\x20escrow.\x20bkgota\x20F-03\x20(v102):\x20DEDICATED\x20node,\x20never\x20merged\x20into\x20completed\x20—\x20the\x20review/reward\x20guards\x20key\x20on\x20progress.current==\x27completed\x27,\x20so\x20the\x20merge\x20let\x20a\x20no-show\x20order\x20write\x20a\x205-star\x20review\x20and\x20claim\x20the\x20reward\x20for\x20a\x20stay\x20that\x20never\x20happened.\x20The\x20order\x20STAYS\x20on\x20the\x20settlement\x20path\x20(claim_window\x20entry\x20below):\x20the\x20pool\x20releases\x20through\x20the\x20serial\x20window,\x20and\x20the\x20buyer\x20can\x20still\x20contest\x20the\x20charge\x20via\x20file_claim.\x20Review\x20is\x20topologically\x20UNREACHABLE\x20from\x20here\x20—\x20a\x20no-show\x20never\x20earns\x20the\x20review\x20reward','semantic_role':'delivered','from':[{'prev':'confirmed','forward':'no_show','permission_index':0x3e9,'guard_key':'no_show_evidence'}]},{'name':'claim_window','role':'SERIAL\x20CLAIM\x20WINDOW\x20(v30,\x20ABNB2-validated):\x20mandatory\x20waypoint\x20between\x20completed\x20and\x20payout\x20—\x20the\x20pool\x20cannot\x20release\x20while\x20a\x20post-stay\x20claim\x20could\x20still\x20be\x20filed.\x20Two\x20exits:\x20FileClaim\x20(inside\x20the\x20window)\x20or\x20ReleaseNoClaim\x20(window\x20elapsed).\x20Also\x20re-entered\x20from\x20\x27reviewed\x27\x20and\x20\x27no_show_charged\x27\x20(v102)\x20so\x20a\x20buyer\x20review\x20—\x20and\x20a\x20no-show\x20charge\x20—\x20can\x20never\x20strand\x20the\x20order\x20off\x20the\x20settlement\x20path\x20(R-DEAD-END)','semantic_role':'delivered','from':[{'prev':'completed','forward':'open_claim_window','permission_index':0x3e8},{'prev':'reviewed','forward':'open_claim_window','permission_index':0x3e8},{'prev':'no_show_charged','forward':'open_claim_window','permission_index':0x3e8}]},{'name':'poststay_claim','role':'Post-checkout\x20claim\x20inside\x20the\x20serial\x20window\x20(guest\x20or\x20support\x20reports:\x20wrong\x20charge,\x20misrepresented\x20stay).\x20Arbitration\x20decides\x20off-Machine;\x20a\x20guest-favor\x20ruling\x20exits\x20via\x20the\x20arb_refund\x20edge\x20→\x20closed_cancel;\x20a\x20dismissed\x20claim\x20releases\x20via\x20ClaimDismissed\x20→\x20payout_released','operator':'order_payer','semantic_role':'active','from':[{'prev':'claim_window','forward':'file_claim','operator':'order_payer','guard_key':'poststay_claim_window'}]},{'name':'payout_released','role':'THE\x20SETTLEMENT\x20NODE\x20(v30):\x20reachable\x20ONLY\x20from\x20claim_window\x20(no\x20claim)\x20or\x20poststay_claim\x20(dismissed),\x20so\x20the\x20release\x20always\x20fires\x20on\x20an\x20intact,\x20undisputed\x20pool.\x20The\x20release\x20allocator\x20is\x20gated\x20on\x20THIS\x20node\x20—\x20never\x20on\x20completed,\x20otherwise\x20a\x20claim\x20path\x20that\x20skips\x20settlement\x20strands\x20the\x20merchant\x20share','semantic_role':'final','from':[{'prev':'claim_window','forward':'release_no_claim','permission_index':0x3e8,'guard_key':'release_no_claim_clock'},{'prev':'poststay_claim','forward':'claim_dismissed','permission_index':0x3e8,'guard_key':'arb_dismissed_poststay'}]},{'name':'reviewed','role':'Buyer\x20submits\x20review\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM:\x20row\x20policy\x20is\x20single-typed,\x20so\x20the\x20review\x20event\x20writes\x20a\x20U256\x20rating\x20row\x20—\x20the\x20range-queryable\x20column\x20—\x20AND\x20a\x20String\x20comment\x20row\x20keyed\x20to\x20the\x20same\x20order;\x20text\x20rides\x20its\x20own\x20presence-queryable\x20row,\x20never\x20progress\x20history)\x20—\x20Reward\x20window\x2090\x20days.\x20A\x20pure\x20side-branch\x20off\x20completed\x20(review\x20is\x20optional\x20and\x20must\x20never\x20gate\x20money)\x20with\x20an\x20EXIT\x20edge\x20back\x20into\x20the\x20settlement\x20path\x20(reviewed\x20→\x20claim_window\x20via\x20the\x20same\x20open_claim_window\x20forward,\x20R-DEAD-END):\x20an\x20unexited\x20version\x20of\x20this\x20node\x20would\x20strand\x20the\x20order\x20the\x20moment\x20a\x20buyer\x20reviewed,\x20because\x20settlement\x20hangs\x20off\x20claim_window,\x20not\x20completed.\x20v102\x20(abnb14\x20F01\x20generalization):\x20a\x20SECOND\x20entry\x20edge\x20from\x20claim_window\x20—\x20once\x20open_claim_window\x20fires\x20the\x20order\x20can\x20never\x20return\x20to\x20completed,\x20so\x20a\x20single\x20completed-only\x20entry\x20made\x20review\x20permanently\x20unreachable\x20for\x20every\x20late\x20reviewer\x20(the\x20review\x20window\x20was\x20swallowed\x20by\x20the\x20claim\x20window)','operator':'order_payer','semantic_role':'delivered','optional':!![],'from':[{'prev':'completed','forward':'submit_review','operator':'order_payer','guard_key':'review_author_identity'},{'prev':'claim_window','forward':'submit_review','operator':'order_payer','guard_key':'review_author_identity'}]},{'name':'closed_cancel','role':'Free\x20cancellation\x20or\x20confirm\x20timeout\x20—\x20refund\x20Allocator\x20to\x20buyer;\x20also\x20the\x20arb_refund\x20edge\x20target\x20when\x20a\x20ruling\x20favors\x20the\x20buyer\x20(guard\x20tpl_forward_arb_ruling_won).\x20Both\x20rails\x20out\x20of\x20\x27paid\x27\x20share\x20one\x20prev_node\x20and\x20MUST\x20be\x20merged\x20into\x20ONE\x20Pair\x20with\x20two\x20forwards','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'free_cancel','operator':'order_payer','guard_key':'free_cancel'},{'prev':'paid','forward':'confirm_timeout','permission_index':0x3e8,'guard_key':'confirm_timeout'},{'prev':'poststay_claim','forward':'arb_refund','permission_index':0x3e8,'guard_key':'arb_won_poststay'},{'prev':'claim_open','forward':'arb_refund','permission_index':0x3e8,'guard_key':'arb_won_walk'},{'prev':'disrupted','forward':'refund_after_disruption','operator':'order_payer','guard_key':'disruption_refund_gate'}]},{'name':'claim_open','role':'Oversell/walk\x20claim\x20PRE-STAY\x20—\x20buyer\x20or\x20support\x20reports;\x20arbitration\x20decides\x20off-Machine;\x20a\x20ruling\x20in\x20the\x20buyer\x27s\x20favor\x20exits\x20via\x20the\x20arb_refund\x20edge\x20→\x20closed_cancel\x20(refund\x20Allocator);\x20a\x20ruling\x20for\x20the\x20property\x20exits\x20via\x20ClaimDismissedResume\x20→\x20confirmed\x20(the\x20booking\x20stands)\x20—\x20NEVER\x20a\x20stop\x20node\x20with\x20money','operator':'order_payer','semantic_role':'active','from':[{'prev':'confirmed','forward':'walk_claim','operator':'order_payer','guard_key':'walk_claim_identity'}]},{'name':'disrupted','role':'Supplier\x20disruption\x20—\x20the\x20property\x20cannot\x20honor\x20a\x20confirmed\x20booking\x20(oversold/closed-out/force\x20majeure)\x20and\x20files\x20a\x20disruption\x20record\x20hash\x20into\x20the\x20evidence\x20Repository.\x20RECORD\x20waypoint\x20only\x20(R-M1-11\x20exemption:\x20a\x20business\x20STATE\x20like\x20\x27returned\x27,\x20never\x20a\x20dispute/arb-prefixed\x20naming):\x20it\x20routes\x20into\x20the\x20SAME\x20single\x20refund\x20rail\x20via\x20closed_cancel,\x20so\x20the\x20buyer\x20is\x20paid\x20without\x20filing\x20a\x20claim.\x20A\x20buyer\x20contesting\x20the\x20disruption\x20still\x20goes\x20through\x20claim_open\x20+\x20Arbitration','semantic_role':'active','from':[{'prev':'confirmed','forward':'report_disruption','permission_index':0x3e9,'guard_key':'disruption_evidence'}]}],'guards':[{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'free_cancel','purpose':'Free\x20cancellation\x20INSIDE\x20the\x20buyer\x27s\x20window\x20—\x20a\x20CLOSING\x20window\x20(\x27Clock\x20<=\x20order.time\x20+\x20free_cancel_hours\x27),\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20cancel\x20aborts\x20inside\x20the\x20window\x20and\x20is\x20ADMITTED\x20after\x20it\x20closed,\x20bkd8\x20BK-02).\x20P1-3:\x20the\x20window\x20anchors\x20on\x20order.time\x20(booking\x20time)\x20by\x20default.\x20It\x20is\x20NOT\x20\x27check-in\x20minus\x2072h\x27:\x20no\x20check-in\x20date\x20exists\x20on\x20chain\x20(Order/Sale/Quote\x20carry\x20no\x20date\x20field)\x20—\x20a\x20faithful\x20per-stay\x20deadline\x20rides\x20the\x20stay-date\x20Repository\x20row\x20per\x20the\x20STAY-DATE\x20PRESCRIPTION\x20(see\x20time_anchors.free_cancel;\x20D-01\x20field\x20deferred).\x20PLUS\x20an\x20order.owner\x20binding\x20leg\x20(pattern.identity_check_order_holder\x20—\x20an\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive:\x20without\x20it\x20the\x20platform\x20can\x20drive\x20this\x20\x27buyer\x27\x20forward\x20itself,\x20bkg15\x20F05,\x20same\x20composition\x20destination-experience\x20ships)\x20AND\x20order.service\x20binding'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'confirm_timeout','purpose':'Supplier\x20confirm\x20timeout\x20—\x20\x27Clock\x20>=\x20order.time\x20+\x20confirm_timeout_hours\x27;\x20keeper\x20releases\x20the\x20order\x20to\x20the\x20refund\x20rail'},{'template_id':'pattern.repository_data_check','host':'machine','key':'checkin_evidence','purpose':'Redemption\x20evidence\x20hash\x20compared\x20against\x20the\x20listing\x20commitment\x20(order.item.wip_hash);\x20dual\x20confirmation\x20(R4)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'checkout_gate','purpose':'Check-out\x20—\x20buyer\x20confirmation,\x20or\x20a\x20keeper\x20time\x20gate\x20anchored\x20on\x20order.time.\x20P1-3:\x20the\x20DEPARTURE\x20DATE\x20is\x20not\x20on\x20chain,\x20so\x20\x27checkout_date\x27\x20must\x20come\x20from\x20a\x20Repository\x20policy\x20written\x20at\x20buy\x20time,\x20or\x20be\x20approximated\x20as\x20order.time\x20+\x20stay_nights'},{'template_id':'pattern.verifier_evidence_philosophy','host':'machine','key':'no_show_evidence','purpose':'Property\x20evidences\x20no-show\x20+\x20a\x20time\x20floor\x20(\x27Clock\x20>=\x20order.time\x20+\x20no_show_floor_hours\x27)\x20so\x20a\x20charge\x20can\x20never\x20be\x20filed\x20before\x20arrival\x20—\x20drives\x20the\x20confirmed\x20→\x20no_show_charged\x20edge\x20(v102:\x20the\x20charge\x20lands\x20on\x20the\x20DEDICATED\x20no_show_charged\x20node,\x20never\x20completed\x20—\x20the\x20merge\x20let\x20a\x20charged\x20no-show\x20pass\x20the\x20review/reward\x20gate,\x20bkgota\x20F-03)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'poststay_claim_window','purpose':'Post-stay\x20claim\x20filing\x20INSIDE\x20the\x20serial\x20window\x20—\x20a\x20CLOSING\x20window\x20(\x27Clock\x20<=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x27),\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20the\x20window\x20is\x20shut\x20while\x20open\x20and\x20stays\x20open\x20after\x20it\x20closed,\x20bkd8\x20BK-04)\x20—\x20witness-anchored,\x20so\x20keeper\x20timing\x20cannot\x20shift\x20it.\x20PLUS\x20an\x20order.owner\x20binding\x20leg\x20(pattern.identity_check_order_holder,\x20bkg15\x20F05\x20—\x20the\x20filing\x20forward\x20is\x20operator\x20order_payer\x20whose\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive:\x20without\x20the\x20identity\x20leg\x20the\x20platform\x20can\x20file\x20claims\x20on\x20the\x20buyer\x27s\x20behalf)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settlement_release','purpose':'Settlement\x20allocator\x20gate\x20(v30,\x20v68\x20pin-vs-prev\x20correction),\x20bound\x20to\x20ALL\x20THREE\x20settlement\x20allocator\x20rows\x20ONLY\x20(guard_key\x20settlement_release\x20—\x20the\x20platform\x20commission\x20leg,\x20the\x20payment-fee\x20leg,\x20and\x20the\x20property\x20Surplus\x20leg\x20share\x20ONE\x20Allocator:\x20chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator,\x20and\x20a\x20standalone\x20Rate-0\x20leg\x20aborts\x20ERATE_NOT_10000,\x20so\x20the\x20legs\x20MUST\x20merge):\x20progress.current\x20==\x20payout_released\x20PLUS\x20\x27Clock\x20>=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x27.\x20Allocator\x20guards\x20evaluate\x20at\x20alloc\x20time,\x20when\x20progress.current\x20is\x20the\x20REACHED\x20node,\x20so\x20the\x20payout_released\x20pin\x20is\x20correct\x20here.\x20NEVER\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20edge:\x20a\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance\x20(progress.current\x20==\x20prev),\x20so\x20the\x20pin\x20would\x20weld\x20the\x20edge\x20shut\x20(bkng\x20F22\x20dead\x20rail).\x20The\x20v25\x20anchor\x20(order.time\x20+\x20payout_delay)\x20was\x20vacuous\x20—\x20booking-time\x20delays\x20always\x20expire\x20before\x20checkout;\x20the\x20serial\x20claim\x20window\x20is\x20the\x20real\x20post-stay\x20protection'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'release_no_claim_clock','purpose':'ReleaseNoClaim\x20FORWARD\x20time\x20gate\x20(v68,\x20split\x20off\x20settlement_release\x20per\x20bkng\x20F22):\x20\x27Clock\x20>=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x27\x20—\x20TIME\x20LEG\x20ONLY.\x20A\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance,\x20so\x20the\x20order\x20still\x20sits\x20at\x20the\x20PREV\x20node\x20(claim_window)\x20and\x20its\x20recorded\x20claim_window\x20ENTRY\x20time\x20(1280,\x20next_node=\x27claim_window\x27,\x20find=last)\x20is\x20the\x20correct\x20anchor;\x20a\x20progress.current\x20pin\x20must\x20NEVER\x20appear\x20here\x20(it\x20would\x20target\x20the\x20destination\x20node\x20and\x20weld\x20the\x20edge\x20shut).\x20The\x20payout_released\x20state\x20pin\x20stays\x20on\x20the\x20settlement\x20allocator\x20rows\x20(settlement_release),\x20which\x20evaluate\x20at\x20alloc\x20time\x20on\x20the\x20reached\x20node\x20—\x20belt\x20and\x20suspenders:\x20the\x20forward\x20cannot\x20fire\x20before\x20the\x20window\x20closes,\x20and\x20the\x20allocator\x20cannot\x20pay\x20outside\x20payout_released'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20execution\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate):\x20progress.current\x20==\x20closed_cancel\x20(the\x20refund\x20terminal\x20—\x20free_cancel,\x20confirm_timeout,\x20arb_refund,\x20and\x20disruption\x20refunds\x20ALL\x20exit\x20through\x20this\x20one\x20node,\x20so\x20one\x20gate\x20covers\x20every\x20rail)\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20one-directional)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it;\x20the\x20two-slot\x20arb\x20variant\x20declares\x20slot\x201\x20=\x20the\x20Arb\x20address\x20for\x20the\x20ruling\x20legs).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20Order.dispute\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20property\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_won_poststay','purpose':'Arb\x20refund\x20edge\x20gate\x20for\x20the\x20post-stay\x20claim\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order\x20recipient\x20for\x20GuardIdentifier(0),\x20slot\x201\x20=\x20Arb\x20for\x20ruling\x20state):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true\x20(set\x20by\x20the\x20ruling;\x20arb_withdraw\x20sweeps\x20only\x20the\x20fee\x20balance\x20and\x20never\x20touches\x20the\x20indemnity,\x20so\x20a\x20fee\x20withdrawal\x20cannot\x20clear\x20the\x20gate\x20—\x20the\x20one\x20path\x20that\x20DOES\x20clear\x20it\x20is\x20the\x20objection-cycle\x20reset,\x20which\x20fails\x20this\x20gate\x20shut\x20until\x20a\x20fresh\x20ruling).\x20TRUTH-UP\x20(bkgota\x20F-05,\x20arb.move\x20verified):\x20the\x20objection\x20WINDOW\x20behaves\x20differently\x20from\x20the\x20reset\x20—\x20filing\x20an\x20objection\x20moves\x20the\x20case\x20to\x20Objectionable\x20but\x20does\x20NOT\x20clear\x20the\x20indemnity\x20(arb.move\x20objection\x20keeps\x20the\x20ruling\x20fields;\x20only\x20reset\x20wipes\x20them),\x20so\x20WHILE\x20an\x20objection\x20is\x20pending\x20this\x20gate\x20remains\x20OPEN\x20and\x20the\x20refund\x20rail\x20can\x20still\x20pay\x20the\x20pre-objection\x20ruling;\x20a\x20merchant\x20must\x20therefore\x20treat\x20an\x20Objectionable\x20case\x20as\x20UNSETTLED\x20and\x20hold\x20the\x20forward\x20until\x20the\x20case\x20concludes\x20(re-ruling\x20or\x20reset),\x20never\x20pay\x20through\x20a\x20contested\x20gate.\x20NEVER\x20gate\x20on\x20arb.status\x20—\x20arb_withdraw\x20advances\x20the\x20case\x203→6\x20past\x20the\x2030-day\x20silence\x20window\x20and\x205→6\x20from\x20Finished,\x20and\x20Guard+Machine\x20are\x20immutable\x20after\x20publish\x20(testnet\x20o10\x20stranded\x201.5\x20WOW).\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20poststay_claim\x20->\x20closed_cancel'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_won_walk','purpose':'Arb\x20refund\x20edge\x20gate\x20for\x20the\x20pre-stay\x20walk\x20claim\x20(same\x20TWO-SLOT\x20shape\x20as\x20arb_won_poststay):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20claim_open\x20->\x20closed_cancel'},{'template_id':'tpl_forward_arb_ruling_dismissed','host':'machine','key':'arb_dismissed_poststay','purpose':'Dismissed-ruling\x20edge\x20gate\x20for\x20the\x20post-stay\x20claim\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order,\x20slot\x201\x20=\x20Arb):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200\x20(the\x20ruling\x20favoured\x20the\x20merchant).\x20Fail-closed:\x20the\x20amount\x20query\x20errors\x20on\x20the\x20None\x20field,\x20so\x20the\x20leg\x20passes\x20ONLY\x20when\x20indemnity\x20is\x20Some(0)\x20—\x20indemnity\x20is\x20Some\x20ONLY\x20after\x20a\x20ruling,\x20and\x20a\x20reset\x20clears\x20it,\x20so\x20a\x20voided\x20or\x20never-made\x20ruling\x20can\x20never\x20release\x20the\x20pool.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20poststay_claim\x20->\x20payout_released'},{'template_id':'tpl_forward_arb_ruling_dismissed','host':'machine','key':'arb_dismissed_resume','purpose':'Dismissed-ruling\x20edge\x20gate\x20for\x20the\x20pre-stay\x20walk\x20claim\x20(same\x20shape\x20as\x20arb_dismissed_poststay):\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200\x20—\x20the\x20property-favor\x20ruling\x20restores\x20the\x20booking.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20claim_open\x20->\x20confirmed'},{'template_id':'pattern.repository_data_check','host':'machine','key':'disruption_evidence','purpose':'Supplier-side\x20disruption\x20record\x20hash\x20(oversell/closed-out/force-majeure\x20record\x20in\x20the\x20evidence\x20Repository,\x20same\x20writer\x20authorization\x20as\x20the\x20redemption\x20WIP)\x20required\x20to\x20file\x20disrupted'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'disruption_refund_gate','purpose':'Buyer\x20confirms\x20the\x20supplier-filed\x20disruption\x20before\x20the\x20refund\x20rail\x20pays\x20(double\x20confirmation,\x20mirrors\x20retail\x27s\x20RefundAfterLoss):\x20the\x20supplier\x27s\x20own\x20filing\x20never\x20moves\x20money\x20alone'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'guest_checkin_identity','purpose':'Buyer\x20half\x20of\x20the\x20check-in\x20dual\x20confirmation\x20(bound\x20to\x20the\x20confirmed\x20->\x20in_stay\x20check_in_guest\x20forward):\x20an\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive\x20—\x20the\x20\x27\x27\x20operator\x20admits\x20ANY\x20caller\x20(progress.move:242-256),\x20so\x20without\x20the\x20order.owner\x20binding\x20leg\x20the\x20platform\x20could\x20drive\x20the\x20guest\x20confirmation\x20itself\x20and\x20fabricate\x20the\x20dual\x20confirmation\x20(bkg15\x20F05;\x20same\x20composition\x20the\x20disruption_refund_gate\x20and\x20destination-experience\x20buyer\x20edges\x20ship)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'review_author_identity','purpose':'Review\x20authorship\x20binding\x20(bound\x20to\x20the\x20completed\x20->\x20reviewed\x20submit_review\x20forward):\x20only\x20the\x20order\x20holder\x20may\x20author\x20the\x20rating/comment\x20rows\x20—\x20an\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive\x20(bkg15\x20F05),\x20and\x20unauthored\x20reviews\x20would\x20also\x20feed\x20the\x20review-reward\x20rail\x20(platform-forged\x20reviews\x20farming\x20the\x20reward)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'walk_claim_identity','purpose':'Walk-claim\x20filing\x20binding\x20(bound\x20to\x20the\x20confirmed\x20->\x20claim_open\x20walk_claim\x20forward):\x20filing\x20a\x20pre-stay\x20claim\x20is\x20the\x20BUYER\x27s\x20action\x20—\x20an\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive\x20(bkg15\x20F05),\x20so\x20without\x20the\x20identity\x20leg\x20anyone\x20(the\x20platform\x20included)\x20could\x20file\x20a\x20walk\x20claim\x20on\x20the\x20buyer\x27s\x20behalf\x20and\x20route\x20the\x20order\x20into\x20arbitration'},{'template_id':'pattern.progress_state_check','host':'reward','key':'review_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'property','count':0x4,'mode':'rate','refund_track':'order_anchored','rows':[{'track':'settlement','recipient':'entity','recipient_key':'platform','mode':'rate','value_from':'commission_rate_bps','guard_key':'settlement_release','note':'Platform\x20commission\x20leg;\x200\x20under\x20the\x20direct-sales\x20default.\x20Shares\x20guard_key\x20settlement_release\x20with\x20the\x20fee\x20and\x20Surplus\x20legs\x20—\x20the\x20three\x20legs\x20form\x20ONE\x20Allocator\x20(chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator:\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register),\x20firing\x20once\x20at\x20payout_released.'},{'track':'settlement','recipient':'entity','recipient_key':'payment_fee','mode':'rate','value_from':'payment_fee_bps','guard_key':'settlement_release','note':'Payment-channel\x20fee\x20leg;\x200\x20by\x20default.\x20Shares\x20guard_key\x20settlement_release\x20(same\x20single-Allocator\x20merge\x20as\x20the\x20commission\x20leg).'},{'track':'settlement','recipient':'entity','recipient_key':'property','mode':'surplus','guard_key':'settlement_release','note':'Property\x20net\x20=\x20the\x20remainder\x20after\x20commission\x20and\x20fee\x20—\x20Surplus\x20BY\x20DESIGN\x20so\x20the\x20split\x20can\x20never\x20mis-sum.\x20Shares\x20guard_key\x20settlement_release\x20(Rate\x20legs\x20+\x20the\x20one\x20Surplus\x20form\x20a\x20single\x20legal\x20Allocator:\x20with\x20a\x20Surplus\x20present\x20the\x20Rate\x20sum\x20must\x20be\x20<=\x2010000,\x20allocation.move).\x20This\x20recipient\x20MUST\x20stay\x20distinct\x20from\x20every\x20Rate\x20leg\x20(R-RECIPIENT-04):\x20Booking\x20mainnet\x202026-10-06\x20pointed\x20Surplus\x20at\x20a\x20Rate\x20leg\x27s\x20recipient,\x20the\x20property\x20took\x20100%,\x20the\x20commission/fee\x20legs\x20never\x20existed,\x20and\x20publish\x20froze\x20the\x20misroute.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Refunds\x20pay\x20the\x20order-anchored\x20recipient\x20(R5)\x20via\x20GuardIdentifier(0),\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(node\x20closed_cancel\x20—\x20free_cancel,\x20confirm_timeout,\x20arb,\x20and\x20disruption\x20refunds\x20all\x20exit\x20through\x20that\x20one\x20node).\x20Never\x20Signer,\x20which\x20pays\x20the\x20transaction\x20sender.\x20The\x20guard\x20MUST\x20also\x20require\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20Bool)\x20so\x20an\x20order\x20whose\x20arbitration\x20award\x20already\x20paid\x20cannot\x20reach\x20this\x20rail\x20(D-BUG-2\x20double-spend)\x20—\x20the\x20polarity\x20twin\x20is\x20the\x20shipped\x20recover_gate\x20row.\x20Percentage\x20cancellation\x20policies\x20split\x20platform\x20X\x20/\x20buyer\x20(10000-X)\x20on\x20their\x20own\x20allocators.'},{'track':'settlement','recipient':'entity','recipient_key':'property','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20property\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settlement_release/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'Merchant-mode\x20settlement,\x20TWO\x20recipient\x20shapes\x20in\x20one\x20plan.\x20RELEASE\x20legs\x20are\x20fixed\x20Entity\x20rows\x20(property\x20net\x20+\x20platform\x20commission\x20+\x20payment\x20fee)\x20—\x20Entity\x20is\x20keeper-independent\x20and\x20therefore\x20safe.\x20REFUND\x20legs\x20MUST\x20be\x20a\x20{GuardIdentifier:\x200}\x20row,\x20NOT\x20Signer:\x20allocation.move\x20resolves\x20GuardIdentifier\x20through\x20the\x20Guard\x20submission,\x20which\x20for\x20a\x20Service-created\x20Allocation\x20the\x20contract\x20pins\x20to\x20the\x20PAYING\x20ORDER,\x20so\x20the\x20money\x20lands\x20on\x20the\x20Order\x20and\x20only\x20order.owner\x20can\x20receive\x20it.\x20Recipient::Signer\x20pays\x20the\x20TRANSACTION\x20SENDER,\x20so\x20a\x20keeper-triggered\x20refund\x20would\x20pay\x20the\x20keeper\x20—\x20never\x20use\x20Signer\x20for\x20a\x20refund.\x20Note\x20also:\x20a\x20zero-share\x20GuardIdentifier\x20anchor\x20row\x20is\x20what\x20lets\x20a\x20release\x20Guard\x20read\x20order.*\x20at\x20all,\x20and\x20it\x20materialises\x20a\x200-balance\x20CoinWrapper\x20at\x20the\x20Order\x20(accepted,\x20value-free).\x20DIRECT-SALES\x20default:\x20no\x20platform\x20commission,\x20property\x20Rate\x2010000.\x20free\x20cancellation\x20=\x20full\x20refund\x20to\x20the\x20order-anchored\x20recipient;\x20percentage\x20cancellation\x20policies\x20=\x20platform\x20X\x20/\x20buyer\x20(10000-X)\x20splits;\x20no-show\x20approximates\x20a\x20first-night\x20charge\x20by\x20Rate;\x20arbitration-ruled\x20refunds\x20full\x20or\x20partial'},'key_risk':'Oversell\x20walk\x20—\x20buyer-first\x20claim\x20evidence\x20+\x20arbitration\x20ruling\x20refund.\x20COMPENSATION\x20FUND:\x20DO\x20NOT\x20FUND\x20(user\x20ruling\x202026-10-15)\x20until\x20the\x20arbitration-escrow\x20shared\x20gate\x20lands\x20—\x20an\x20unreserved\x20pool\x20is\x20double-takeable\x20via\x20refund-then-claim;\x20disputes\x20ride\x20the\x20escrow\x20rails\x20only\x20(rationale:\x20A-2\x20note)','compensation_fund_policy':'forbidden','build_notes':['D-1\x20EXPLICIT\x20PAIRS/FORWARDS\x20—\x20the\x20edges\x20below\x20are\x20DECLARED\x20AS\x20DATA\x20on\x20machine_shape\x20(each\x20node\x27s\x20from[]:\x20prev/forward/operator/permission_index/guard_key),\x20and\x20compile\x20turns\x20same-prev\x20siblings\x20into\x20ONE\x20Pair\x20with\x20sibling\x20forwards\x20(E_DUPLICATE_NODE_PREV:\x20ONE\x20Pair\x20per\x20(node,\x20prev_node)\x20—\x20competing\x20rails\x20must\x20share\x20a\x20Pair,\x20never\x20be\x20separate\x20Pairs).\x20The\x20prose\x20map\x20remains\x20the\x20authoritative\x20reading\x20order:\x20\x20\x20\x27\x27\x20─pay(w1)→\x20paid\x20|\x20paid\x20─supplier_confirm(perm1001,w1)→\x20confirmed\x20|\x20paid\x20─{free_cancel(buyer,w1),\x20confirm_timeout(perm1000,w1)}→\x20closed_cancel\x20(ONE\x20Pair,\x20two\x20forwards)\x20|\x20confirmed\x20─{check_in_property(perm1001,w1),\x20check_in_guest(buyer,w1,\x20order-holder\x20Guard)}→\x20in_stay\x20threshold=2\x20(ONE\x20Pair,\x20dual\x20confirmation)\x20|\x20confirmed\x20─walk_claim(buyer,w1,\x20order-holder\x20Guard)→\x20claim_open\x20|\x20confirmed\x20─report_disruption(perm1001,w1,\x20disruption-evidence\x20Guard)→\x20disrupted\x20|\x20disrupted\x20─refund_after_disruption(buyer,w1,\x20order-holder\x20Guard)→\x20closed_cancel\x20|\x20confirmed\x20─no_show(perm1001,w1)→\x20no_show_charged\x20(v102:\x20no-show\x20charge\x20on\x20a\x20DEDICATED\x20node\x20—\x20property\x20evidence\x20+\x20time\x20floor;\x20NEVER\x20hang\x20this\x20off\x20in_stay,\x20the\x20dual-confirmation\x20gate\x20can\x20never\x20be\x20reached\x20when\x20the\x20buyer\x20is\x20a\x20no-show\x20so\x20the\x20edge\x20would\x20be\x20dead;\x20NEVER\x20merge\x20it\x20into\x20completed\x20either\x20—\x20the\x20review/reward\x20guards\x20read\x20progress.current==\x27completed\x27\x20so\x20the\x20merge\x20let\x20a\x20charged\x20no-show\x20farm\x20the\x20reward,\x20bkgota\x20F-03)\x20|\x20no_show_charged\x20─open_claim_window(perm1000,w1)→\x20claim_window\x20(v102:\x20the\x20charged\x20order\x20stays\x20on\x20the\x20settlement\x20path\x20and\x20the\x20buyer\x20can\x20still\x20contest\x20via\x20file_claim;\x20review\x20is\x20topologically\x20unreachable\x20from\x20here\x20—\x20a\x20no-show\x20never\x20earns\x20the\x20review\x20reward)\x20|\x20in_stay\x20─check_out_guest(buyer,w1)→\x20completed\x20|\x20completed\x20─open_claim_window(perm1000,w1)→\x20claim_window\x20(SERIAL,\x20mandatory)\x20|\x20completed\x20─submit_review(buyer,w1,\x20order-holder\x20Guard)→\x20reviewed\x20|\x20claim_window\x20─submit_review(buyer,w1,\x20order-holder\x20Guard)→\x20reviewed\x20(v102,\x20abnb14\x20F01\x20generalization:\x20once\x20the\x20claim\x20window\x20opens\x20the\x20order\x20can\x20never\x20return\x20to\x20completed,\x20so\x20the\x20completed-only\x20entry\x20made\x20review\x20permanently\x20unreachable\x20for\x20late\x20reviewers)\x20|\x20reviewed\x20─open_claim_window(perm1000,w1)→\x20claim_window\x20(R-DEAD-END\x20exit:\x20a\x20review\x20can\x20never\x20strand\x20the\x20order\x20off\x20the\x20settlement\x20path)\x20|\x20claim_window\x20─file_claim(buyer,w1,\x20claim-window-open\x20Guard)→\x20poststay_claim\x20|\x20claim_window\x20─release_no_claim(perm1000,w1,\x20claim-window-closed\x20Guard)→\x20payout_released\x20|\x20poststay_claim\x20─claim_dismissed(perm1000,w1,\x20tpl_forward_arb_ruling_dismissed)→\x20payout_released\x20|\x20poststay_claim\x20─arb_refund(perm1000,w1,\x20tpl_forward_arb_ruling_won)→\x20closed_cancel\x20|\x20claim_open\x20─arb_refund(perm1000,w1,\x20tpl_forward_arb_ruling_won)→\x20closed_cancel\x20|\x20claim_open\x20─claim_dismissed_resume(perm1000,w1,\x20tpl_forward_arb_ruling_dismissed)→\x20confirmed\x20(property-favor\x20ruling:\x20the\x20booking\x20stands\x20—\x20NEVER\x20leave\x20claim_open\x20as\x20a\x20stop\x20node\x20with\x20money)','DUAL\x20CONFIRMATION\x20(corrected\x20per\x20booking\x20F-04):\x20threshold=2\x20with\x20two\x20DISTINCT\x20operator-bound\x20forwards\x20is\x20the\x20ONLY\x20way\x20to\x20require\x20two\x20distinct\x20OPERATOR\x20BINDINGS\x20before\x20a\x20transition\x20—\x20it\x20does\x20NOT\x20guarantee\x20two\x20different\x20PEOPLE.\x20Each\x20forward\x20contributes\x20its\x20weight\x20AT\x20MOST\x20ONCE\x20(locked\x20by\x20its\x20first\x20operator),\x20but\x20a\x20single\x20forward\x20with\x20weight=2\x20satisfies\x20the\x20threshold\x20alone,\x20and\x20two\x20permissionIndex\x20forwards\x20do\x20NOT\x20imply\x20two\x20people\x20(permission\x20admins\x20hold\x20EVERY\x20index\x20—\x20one\x20admin\x20can\x20execute\x20both).\x20Bind\x20each\x20forward\x20to\x20a\x20different\x20identity\x20(e.g.\x20namedOperator:\x27\x27\x20—\x20resolving\x20to\x20the\x20order\x20owner\x20or\x20its\x20registered\x20order\x20agents\x20—\x20plus\x20a\x20distinct\x20permissionIndex\x20member,\x20or\x20two\x20different\x20namedOperator\x20addresses)\x20and\x20keep\x20every\x20weight\x20at\x201.\x20A\x20pair\x20whose\x20distinct\x20forward\x20weights\x20sum\x20below\x20its\x20threshold\x20can\x20NEVER\x20migrate.','Merchant\x20mode\x20=\x20funds\x20flow\x20buyer\x20->\x20escrow\x20->\x20property/platform;\x20agent\x20mode\x20(reverse\x20commission)\x20=\x20the\x20commission-DEPOSIT\x20variant:\x20the\x20supplier\x20posts\x20a\x20refundable\x20commission\x20deposit\x20(a\x20separate\x20prepaid\x20Allocation)\x20at\x20onboarding,\x20each\x20order\x20still\x20settles\x20buyer\x20->\x20escrow\x20->\x20supplier\x20net,\x20and\x20the\x20platform\x20draws\x20accrued\x20commission\x20from\x20the\x20deposit\x20pool\x20on\x20the\x20settlement\x20cadence\x20—\x20no\x20reverse-fund-flow\x20primitive\x20needed','P1-3\x20TIME\x20ANCHORS\x20ARE\x20order.time,\x20NOT\x20THE\x20STAY\x20CALENDAR.\x20No\x20check-in\x20/\x20check-out\x20/\x20night\x20field\x20exists\x20anywhere\x20on\x20chain\x20(the\x20Order\x20items\x20vector\x20is\x20SaleItem{item,price,quantity,wip_hash};\x20Sale\x20=\x20{name,price,stock,suspension,wip,wip_hash}).\x20Every\x20window\x20below\x20is\x20measured\x20from\x20BOOKING\x20time\x20by\x20default.\x20For\x20a\x20real\x20OTA\x20this\x20is\x20a\x20material\x20semantic\x20loss:\x20a\x2072h\x20free-cancellation\x20window\x20anchored\x20on\x20booking\x20is\x20NOT\x20\x2772h\x20before\x20arrival\x27.\x20To\x20honour\x20the\x20business\x20promise,\x20ride\x20the\x20stay-date\x20Repository\x20row\x20—\x20the\x20STAY-DATE\x20PRESCRIPTION\x20(time_anchors.free_cancel\x20of\x20the\x20destination\x20template;\x20D3-A1:\x20order-scoped\x20Repository,\x20batched\x20id_from\x20None(0)\x20\x27stay_date\x27\x20row\x20written\x20at\x20buy\x20time,\x20pattern.repository_data_check\x20leg\x20comparing\x20Clock\x20against\x20row\x20+\x20offset).\x20Booking\x20lead\x20time\x20is\x20typically\x20weeks,\x20so\x20the\x20gap\x20is\x20not\x20cosmetic.\x20Guard\x20windows\x20are\x20frozen\x20at\x20creation\x20and\x20Machine\x20forwards\x20are\x20immutable\x20after\x20publish,\x20so\x20\x270-168h\x20adjustable\x27\x20means\x20one\x20frozen\x20Guard\x20per\x20window\x20value.','NEVER\x20feed\x20a\x20deadline\x20threshold\x20through\x20a\x20passport\x20submission\x20to\x20make\x20a\x20time\x20guard\x20work:\x20the\x20CONSTANT\x20opcode\x20prefers\x20the\x20passport\x20value\x20over\x20the\x20Guard\x27s\x20own\x20table\x20(passport\x20lookup\x20precedes\x20the\x20table),\x20so\x20anyone\x20can\x20forge\x20any\x20timestamp.\x20Derive\x20deadlines\x20from\x20order.time\x20or\x20a\x20Repository\x20instead.','Free-cancellation\x20window\x20(order.time\x20+\x20free_cancel_hours)\x20is\x20a\x20single\x20time-lock\x20Guard\x20—\x20buyer-triggered,\x20and\x20it\x20MUST\x20also\x20bind\x20order.owner\x20(pattern.identity_check_order_holder).\x20An\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive:\x20attaching\x20a\x20Progress\x20to\x20an\x20Order\x20is\x20permissionless\x20and\x20registers\x20ITS\x20CALLER\x20under\x20the\x20init-node\x20name\x20\x27\x27,\x20so\x20without\x20an\x20owner-binding\x20Guard\x20the\x20platform\x20can\x20advance\x20any\x20\x27buyer\x27\x20forward\x20itself\x20(verified\x20live\x20—\x20a\x20forged\x20guest\x20check-in\x20was\x20rejected\x20only\x20because\x20the\x20Guard\x20bound\x20the\x20owner).','Supplier\x20confirm\x20timeout\x20(order.time\x20+\x20confirm_timeout_hours)\x20releases\x20the\x20order\x20via\x20keeper;\x20the\x20property\x20is\x20demoted\x20off-chain','Check-in\x20is\x20dual-confirmation\x20via\x20threshold=2:\x20property\x20submits\x20the\x20redemption\x20WIP\x20+\x20buyer\x20confirms\x20(R4)','Settlement\x20ledger\x20+\x20redemption\x20evidence\x20+\x20walk\x20evidence\x20live\x20in\x20dedicated\x20Repositories\x20with\x20write-guarded\x20policies','Refund\x20recipient\x20is\x20the\x20ORDER\x20via\x20a\x20{GuardIdentifier:\x200}\x20row\x20plus\x20the\x20contract\x27s\x20for_object\x20pin,\x20and\x20the\x20buyer\x20claims\x20via\x20the\x20two-step\x20receive\x20flow\x20(R5).\x20NEVER\x20Recipient::Signer\x20for\x20a\x20refund\x20—\x20Signer\x20pays\x20the\x20TRANSACTION\x20SENDER,\x20so\x20a\x20keeper-triggered\x20refund\x20would\x20pay\x20the\x20keeper.','A-2\x20MUTUALLY\x20EXCLUSIVE\x20EXITS\x20(verified\x20live\x20on\x20testnet\x20+\x20mainnet):\x20the\x20refund\x20allocator\x20and\x20the\x20compensation\x20payout\x20are\x20INDEPENDENT\x20channels,\x20so\x20one\x20guest\x20took\x20a\x20full\x20escrow\x20refund\x20AND\x20a\x203x-order\x20compensation\x20for\x20the\x20SAME\x20order\x20(merchant\x20fund\x20drained\x203.0\x20->\x202.622\x20WOW)\x20—\x20worst\x20case\x20is\x204x\x20(full\x20refund\x201x\x20+\x20award\x20ceiling\x203x),\x20NOT\x203x.\x20The\x20compensation-claim\x20call\x20has\x20NO\x20Guard/Passport\x20slot\x20(service.move:464-483),\x20so\x20the\x20reverse\x20order\x20(full\x20refund\x20first,\x20then\x20claim)\x20is\x20just\x20as\x20open\x20as\x20claim-then-refund\x20—\x20a\x20refund-side\x20Guard\x20checking\x20claimed_by=none\x20only\x20seals\x20one\x20direction.\x20Pick\x20ONE\x20exit\x20per\x20dispute\x20—\x20either\x20run\x20the\x20arb_refund\x20edge\x20and\x20rule\x20indemnity\x20=\x200,\x20or\x20skip\x20the\x20refund\x20rail\x20and\x20pay\x20from\x20the\x20compensation\x20fund.\x20Sizing\x20the\x20fund\x20below\x203x\x20the\x20max\x20order\x20is\x20NOT\x20enough:\x20the\x20multiplier\x20applies\x20ON\x20TOP\x20of\x20the\x20refund.\x20USER\x20RULING\x20(2026-10-15):\x20do\x20NOT\x20fund\x20the\x20compensation\x20fund\x20at\x20all\x20until\x20the\x20arbitration-escrow\x20shared\x20gate\x20lands\x20(move\x20layer\x20bkng\x20A1/A2)\x20—\x20an\x20unreserved\x20shared\x20pool\x20double-takeable\x20through\x20refund-then-claim\x20must\x20not\x20be\x20offered\x20to\x20a\x20migrated\x20store;\x20disputes\x20ride\x20the\x20escrow\x20rails\x20only.','Disputes\x20route\x20to\x20Arbitration\x20with\x20an\x20independent\x20Permission\x20(R-M1-11).\x20The\x20venue\x20MUST\x20be\x20on\x20the\x20Service\x27s\x20arbitration\x20allowlist\x20or\x20the\x20payout\x20aborts\x20(E_ARBITRATION_NOT_ALLOWED);\x20removing\x20a\x20venue\x20while\x20a\x20case\x20it\x20ruled\x20on\x20is\x20still\x20awaiting\x20payout\x20strands\x20that\x20award.','ITEM\x20LOST\x20/\x20DISRUPTION\x20WAYPOINT\x20(R-M1-11\x20EXEMPTION,\x20DECLARED\x20AS\x20DATA):\x20when\x20the\x20supplier\x20cannot\x20honor\x20a\x20confirmed\x20booking,\x20it\x20files\x20disruption\x20evidence\x20on-chain\x20(the\x20\x27disruption_evidence\x27\x20repository_data_check\x20Guard)\x20and\x20advances\x20confirmed\x20─report_disruption→\x20disrupted\x20—\x20a\x20RECORD\x20waypoint\x20named\x20for\x20the\x20business\x20STATE\x20(never\x20a\x20dispute/arb-prefixed\x20name).\x20From\x20there\x20disrupted\x20─refund_after_disruption→\x20closed_cancel\x20(buyer\x20order-holder\x20confirmation,\x20mirroring\x20retail\x27s\x20RefundAfterLoss\x20double\x20confirmation)\x20rides\x20the\x20SAME\x20single\x20refund\x20rail\x20—\x20no\x20second\x20refund\x20allocator.\x20The\x20buyer\x20never\x20has\x20to\x20file\x20a\x20claim\x20to\x20be\x20paid.\x20Loss-liability\x20and\x20contested-disruption\x20disputes\x20still\x20go\x20to\x20the\x20separate\x20Arbitration\x20object\x20(claim_open\x20rail)','RESCHEDULED\x20=\x20REFUND-AND-REBUY,\x20NOT\x20A\x20NODE\x20(deliberate\x20non-coverage):\x20the\x20chain\x20has\x20no\x20calendar\x20primitive\x20(stay\x20dates\x20live\x20in\x20the\x20Repository\x20as\x20records,\x20unverifiable\x20on-chain)\x20and\x20an\x20Order\x20amount\x20is\x20immutable,\x20so\x20a\x20true\x20reschedule\x20node\x20cannot\x20express\x20the\x20rate-difference\x20payment\x20and\x20cannot\x20enforce\x20the\x20new\x20date\x20—\x20a\x20\x27rescheduled\x27\x20waypoint\x20would\x20be\x20a\x20half-true\x20node\x20(structure\x20claiming\x20semantics\x20the\x20primitives\x20cannot\x20carry).\x20Route\x20date\x20changes\x20through\x20the\x20EXISTING\x20rails:\x20close_cancel\x20with\x20a\x20full-refund\x20cancel\x20policy\x20(free_cancel\x27s\x20time-lock\x20+\x20order.owner\x20binding)\x20then\x20a\x20fresh\x20Order\x20carrying\x20the\x20new\x20dates\x20and\x20price.\x20When\x20the\x20Move\x20layer\x20grows\x20a\x20date\x20primitive\x20and\x20an\x20order-amendment\x20path,\x20revisit\x20a\x20real\x20reschedule\x20node;\x20until\x20then\x20do\x20NOT\x20model\x20one','ARB\x20RULING\x20EDGES\x20—\x20BOTH\x20directions\x20need\x20a\x20guard.\x20Refund\x20edge:\x20tpl_forward_arb_ruling_won\x20gating\x20on\x20arb.indemnity\x20some\x20==\x20true\x20(stable\x20ruling\x20signal:\x20arb_withdraw\x20sweeps\x20only\x20the\x20fee\x20balance\x20and\x20never\x20touches\x20the\x20indemnity,\x20so\x20a\x20fee\x20withdrawal\x20cannot\x20clear\x20the\x20gate;\x20but\x20arb_withdraw\x20DOES\x20advance\x20the\x20status\x203→6\x20past\x20the\x2030-day\x20silence\x20window\x20and\x205\x20Finished\x20→\x206\x20Withdrawn\x20from\x20Finished,\x20which\x20is\x20why\x20a\x20status\x20gate\x20remains\x20forbidden\x20—\x20Guard\x20+\x20Machine\x20are\x20immutable\x20after\x20publish,\x20testnet\x20o10:\x201.5\x20WOW\x20locked\x20with\x20no\x20exit).\x20Dismissal\x20edge:\x20tpl_forward_arb_ruling_dismissed\x20gating\x20on\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200\x20(fail-closed\x20on\x20the\x20None\x20field,\x20so\x20the\x20leg\x20passes\x20ONLY\x20when\x20a\x20ruling\x20exists\x20AND\x20favoured\x20the\x20merchant)\x20—\x20NEVER\x20a\x20bare\x20permission\x20edge\x20and\x20NEVER\x20\x27indemnity\x20some\x20==\x20false\x27,\x20which\x20conflates\x20never-ruled,\x20reset,\x20and\x20ruled-zero:\x20any\x20of\x20those\x20lets\x20the\x20platform\x20kill\x20a\x20buyer\x27s\x20claim\x20with\x20zero\x20on-chain\x20ruling\x20evidence','STOP-NODE\x20FUND-EXIT\x20COVERAGE\x20(mandatory\x20pre-publish\x20evaluation,\x20pattern.fund_flow_stop_node_coverage\x20/\x20R-M5-03\x20/\x20R-M5-09):\x20walk\x20EVERY\x20rest\x20state\x20—\x20payout_released\x20(release:\x20property\x20+\x20commission\x20+\x20fee,\x20gated\x20on\x20the\x20serial\x20claim\x20window\x20having\x20closed),\x20closed_cancel\x20(refund:\x20full\x20or\x20policy\x20split;\x20when\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20the\x20merchant-recovery\x20sweep\x20exits\x20the\x20principal\x20instead),\x20claim_open\x20(guest-favor\x20ruling\x20→\x20arb_refund;\x20property-favor\x20ruling\x20→\x20claim_dismissed_resume\x20→\x20confirmed),\x20poststay_claim\x20(guest-favor\x20ruling\x20→\x20arb_refund;\x20dismissed\x20→\x20payout_released),\x20reviewed\x20(Reward\x20claim)\x20—\x20each\x20needs\x20a\x20defined\x20withdrawal\x20AND\x20refund\x20rule,\x20each\x20mapping\x20guard\x20satisfiable\x20in\x20BOTH\x20directions;\x20Machine\x20+\x20Allocator\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001),\x20an\x20uncovered\x20stop\x20node\x20strands\x20escrow\x20permanently','Allocator\x20replay:\x20there\x20is\x20NO\x20executed-once\x20flag.\x20A\x20Rate\x20plan\x20summing\x20to\x2010000\x20self-limits\x20(the\x20pool\x20empties,\x20the\x20next\x20run\x20aborts),\x20but\x20an\x20Amount\x20leg\x20combined\x20with\x20an\x20always-true\x20time\x20Guard\x20can\x20be\x20drained\x20repeatedly\x20by\x20a\x20keeper\x20polling.\x20Every\x20one-shot\x20allocator\x20must\x20hang\x20off\x20a\x20one-shot\x20evidence\x20Guard.','Stock:\x20buy\x20decrements\x20it\x20and\x20NOTHING\x20refunds\x20it\x20—\x20no\x20cancellation,\x20refund\x20or\x20arbitration\x20path\x20restocks,\x20so\x20a\x20cancelled\x20booking\x20permanently\x20burns\x20a\x20room.\x20Put\x20a\x20stock_add\x20call\x20in\x20the\x20keeper\x20flow\x20for\x20every\x20cancellation\x20rail.\x20CAVEAT:\x20on-chain\x20per-item\x20sale\x20ops\x20(stock_add\x20/\x20stock_reduce\x20/\x20price_add\x20/\x20price_reduce\x20/\x20sale_suspension)\x20are\x20SILENT\x20no-ops\x20when\x20sale_name\x20matches\x20nothing\x20(no\x20abort,\x20no\x20event,\x20gas\x20charged)\x20—\x20keeper\x20flows\x20must\x20copy\x20sale_name\x20EXACTLY\x20from\x20the\x20live\x20sales\x20list;\x20the\x20MCP\x20pre-gate\x20refuses\x20unknown\x20names,\x20but\x20generated\x20keeper\x20scripts\x20bypassing\x20it\x20get\x20no\x20signal.\x20MAX_SALE_COUNT\x20is\x2050\x20and\x20is\x20only\x20checked\x20when\x20a\x20NEW\x20sale\x20name\x20appears,\x20so\x20a\x20date-per-sale\x20calendar\x20runs\x20out\x20after\x2050\x20dates.','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20Enforce\x20it\x20with\x20a\x20Guard\x20(pattern.required_info_evidence_gate,\x20gate\x20on\x20order.required_info\x20some\x20before\x20the\x20forward\x20that\x20needs\x20it),\x20not\x20by\x20declaring\x20the\x20list.\x20QUOTA\x20COUPLING:\x20the\x20traveler\x27s\x20info\x20message\x20shares\x20the\x20SINGLE\x20stranger-message\x20quota\x20—\x20make\x20it\x20the\x20FIRST\x20pre-order\x20message,\x20or\x20have\x20the\x20supplier\x20respond\x20first\x20to\x20open\x20the\x20conversation','GROWTH\x20PRINCIPLE:\x20this\x20graph\x20is\x20ONE\x20instantiation\x20of\x20Move-native\x20primitives\x20(nodes/pairs/forwards/guards/allocators)\x20—\x20derive\x20your\x20own\x20stop\x20nodes\x20and\x20fund\x20exits\x20from\x20the\x20business\x20rules;\x20nothing\x20here\x20is\x20a\x20fixed\x20vocabulary\x20to\x20copy','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'fee_params':{'property_rate_bps':0x2710,'commission_rate_bps':0x0,'payment_fee_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'free_cancel_hours':0x48,'confirm_timeout_hours':0x30,'no_show_floor_hours':0x18,'claim_window_days':0x7,'review_window_days':0x5a,'preferred_property_rate_bps':0x1fa4,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'free_cancel':'order.time\x20(booking\x20time\x20—\x20the\x20ZERO-addition\x20DEFAULT\x20anchor).\x20'+STAY_DATE_CORE,'confirm_timeout':'order.time\x20(booking\x20time)','no_show_floor':'order.time\x20(booking\x20time\x20—\x20the\x20charge\x20floor\x20runs\x20from\x20the\x20purchase,\x20so\x20a\x20pre-arrival\x20charge\x20can\x20never\x20file;\x20a\x20faithful\x20no-show\x20needs\x20the\x20stay-date\x20row\x20leg,\x20see\x20the\x20STAY-DATE\x20PRESCRIPTION\x20in\x20the\x20free_cancel\x20anchor)','claim_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last\x20—\x20witness-anchored;\x20the\x20ONLY\x20post-stay\x20window)','review_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27completed\x27,\x20find=last\x20—\x20the\x20reviewed\x20side-branch\x20never\x20gates\x20money)'},'trust_mechanisms':['R1\x20three\x20refund\x20paths:\x20free\x20cancellation\x20/\x20cancellation\x20policy\x20/\x20arbitration\x20ruling','R2\x20independent\x20arbitration\x20Permission\x20(contract-enforced)','R3\x20compensation\x20fund\x20sized\x20against\x20the\x203x\x20award\x20ceiling\x20(MAX_INDEMNITY_MULTIPLE,\x20enforced\x20at\x20ruling\x20time)\x20AND\x20additive\x20to\x20any\x20escrow\x20refund\x20already\x20paid\x20—\x20see\x20the\x20A-2\x20build_note','R4\x20check-in\x20dual\x20confirmation\x20—\x20property\x20self-sign\x20forbidden','R5\x20order-anchored\x20escrow\x20+\x20refund\x20recipient\x20as\x20a\x20{GuardIdentifier:\x200}\x20row\x20pinned\x20to\x20the\x20paying\x20Order\x20(never\x20Recipient::Signer,\x20which\x20pays\x20the\x20transaction\x20sender)','R6\x20Rate\x20sums\x20=\x2010000;\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20Contact\x20on\x20Service\x20and\x20Machine','R9\x20keepers\x20for\x20confirm\x20timeout,\x20check-out,\x20and\x20settlement','R10\x20cancellation-policy\x20windows\x20are\x20frozen\x20per\x20Machine\x20instance:\x20one\x20published\x20Machine\x20per\x20distinct\x20window\x20value,\x20because\x20Guards\x20are\x20frozen\x20at\x20creation\x20and\x20forwards\x20are\x20immutable\x20after\x20publish'],'keeper_dependencies':['supplier\x20confirm\x20timeout\x20(48h)','check-out\x20time\x20gate','claim-window\x20open\x20(right\x20after\x20completed)','no-claim\x20release\x20(claim\x20window\x20close)','review\x20window\x20expiry'],'recommended_role':'merchant','role_rationale':'Property\x20operators\x20and\x20hotel\x20merchants\x20own\x20the\x20booking\x20Service;\x20the\x20platform\x20variant\x20hosts\x20properties\x20under\x20Permission\x20entities\x20with\x20per-property\x20settlement\x20ledgers.','differences':['Merchant-mode\x20settlement\x20(buyer\x20->\x20escrow\x20->\x20property/platform);\x20agent\x20mode\x20(reverse\x20commission)\x20=\x20the\x20commission-deposit\x20variant:\x20supplier\x20posts\x20a\x20refundable\x20deposit\x20Allocation\x20at\x20onboarding,\x20the\x20platform\x20draws\x20accrued\x20commission\x20from\x20it\x20on\x20the\x20settlement\x20cadence','Free-cancellation\x20window\x20+\x20supplier\x20confirm\x20timeout\x20(48h\x20keeper\x20release)\x20shape\x20the\x20pre-stay\x20funnel','Check-in\x20is\x20dual-confirmation:\x20property\x20redemption\x20WIP\x20+\x20buyer\x20confirm\x20(R4)'],'user_inputs':['property_rate_bps\x20—\x20property\x27s\x20share\x20(default\x2010000).\x20commission_rate_bps\x20/\x20payment_fee_bps\x20—\x20BOTH\x20KEEP\x20AT\x200.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.','free_cancel_hours\x20—\x20free-cancellation\x20window,\x20MEASURED\x20FROM\x20order.time\x20(booking),\x20NOT\x20from\x20arrival\x20—\x20plus\x20the\x20booking\x20lead\x20time\x20(days\x20between\x20booking\x20and\x20arrival),\x20which\x20quantifies\x20how\x20far\x20the\x20chain-enforced\x20window\x20sits\x20from\x20the\x20business\x20promise;\x20if\x20lead\x20time\x20exceeds\x20the\x20window\x20the\x20two\x20diverge\x20and\x20you\x20must\x20move\x20the\x20stay\x20dates\x20into\x20a\x20Repository','confirm_timeout_hours\x20—\x20supplier\x20confirmation\x20timeout','review_window_days\x20—\x20the\x20review\x20Reward\x20window','preferred_property_rate_bps\x20—\x20the\x20incumbent\x27s\x20PREFERRED-partner\x20tier\x20(8100\x20=\x20the\x20visibility-boosted\x20commission\x20bracket\x20being\x20displaced);\x20benchmark\x20disclosure\x20only\x20—\x20under\x20direct\x20sales\x20the\x20property\x20keeps\x20the\x20whole\x20sale,\x20so\x20no\x20allocator\x20row\x20reads\x20it','review_reward_pool\x20—\x20INV-4\x20pool\x20plan\x20for\x20the\x20review_reward\x20incentive\x20(expected\x20orders\x20x\x20per-order\x20reward);\x20funded\x20at\x20build\x20time\x20via\x20the\x20reward_funding\x20input\x20(sale-time\x20planning\x20—\x20the\x20buyer\x20perceives\x20the\x20funded\x20reward\x20at\x20quote/buy)']},{'id':'travel/destination-experience','industry':'travel','variant':'destination-experience','product_ref':'klook','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'machine_shape':[{'name':'paid','role':'Entry:\x20multi-segment\x20trip\x20paid\x20and\x20escrowed;\x20Machine\x20starts\x20here','semantic_role':'draft','from':['']},{'name':'segment_D1','role':'Segment\x201\x20redeemed:\x20supplier\x20submits\x20WIP\x20+\x20buyer\x20confirms\x20(dual\x20confirmation)','semantic_role':'active','from':['paid']},{'name':'segment_D2','role':'Segment\x202\x20redeemed\x20(same\x20dual-confirmation\x20pattern)','semantic_role':'active','from':['segment_D1']},{'name':'segment_D3','role':'Segment\x203\x20redeemed\x20—\x20representative;\x20configure\x20per-segment\x20nodes\x20at\x20build\x20time','semantic_role':'active','from':['segment_D2']},{'name':'completed','role':'All\x20segments\x20redeemed\x20—\x20NOT\x20the\x20settlement\x20node:\x20the\x20serial\x20claim\x20window\x20comes\x20next\x20(D2/FACT-ALLOC-03),\x20so\x20the\x20pool\x20stays\x20intact\x20while\x20post-delivery\x20claims\x20are\x20filed\x20and\x20adjudicated.\x20Its\x20ONLY\x20exit\x20is\x20the\x20keeper-opened\x20claim\x20window\x20—\x20an\x20unopened\x20window\x20holds\x20the\x20pool\x20here\x20by\x20design\x20(the\x20serial\x20hold),\x20which\x20is\x20why\x20claim-window\x20open\x20is\x20a\x20declared\x20keeper\x20duty','semantic_role':'delivered','from':['segment_D3']},{'name':'claim_window','role':'SERIAL\x20CLAIM\x20WINDOW\x20(ABNB2-validated,\x20D2/FACT-ALLOC-03):\x20mandatory\x20waypoint\x20between\x20completed\x20and\x20the\x20residual\x20release\x20—\x20the\x20pool\x20cannot\x20release\x20while\x20a\x20post-delivery\x20claim\x20could\x20still\x20be\x20filed.\x20Exactly\x20two\x20exits:\x20FileClaim\x20inside\x20the\x20window\x20(file_claim,\x20closing\x20upper-bound\x20on\x20the\x20claim_window\x20ENTRY)\x20or\x20ReleaseNoClaim\x20once\x20it\x20elapses\x20(release_no_claim,\x20opening\x20clock\x20on\x20the\x20same\x20witness\x20anchor).\x20Opened\x20by\x20the\x20keeper\x20right\x20after\x20completed;\x20the\x20window\x20duration\x20rides\x20the\x20declared\x20fee\x20param\x20claim_window_days','semantic_role':'delivered','from':[{'prev':'completed','forward':'open_claim_window','permission_index':0x3e8}]},{'name':'poststay_claim','role':'Post-delivery\x20claim\x20filed\x20inside\x20the\x20serial\x20window\x20(buyer\x20disputes\x20a\x20redeemed\x20segment:\x20misrepresentation,\x20venue\x20no-show,\x20partial\x20delivery).\x20Arbitration\x20decides\x20OFF-Machine\x20(R-M1-11);\x20a\x20buyer-favor\x20ruling\x20exits\x20via\x20the\x20arb_refund\x20edge\x20->\x20closed_cancel;\x20a\x20dismissed\x20claim\x20releases\x20via\x20claim_dismissed\x20->\x20settled.\x20Reached\x20ONLY\x20from\x20claim_window,\x20so\x20the\x20pool\x20is\x20guaranteed\x20intact\x20while\x20the\x20claim\x20is\x20open\x20—\x20the\x20release\x20clock\x20cannot\x20fire\x20from\x20here','operator':'order_payer','semantic_role':'active','from':[{'prev':'claim_window','forward':'file_claim','operator':'order_payer','guard_key':'poststay_claim_window'}]},{'name':'settled','role':'Settlement\x20residual-exit\x20terminal\x20—\x20the\x20layer-1\x20rail\x20here\x20sweeps\x20any\x20residual\x20to\x20the\x20supplier\x20Entity\x20(normally\x20ZERO:\x20the\x20per-segment\x20layer-2\x20Amount\x20legs\x20are\x20pinned\x20to\x20the\x20order\x20total\x20by\x20construction);\x20the\x20primary\x20supplier\x20payouts\x20are\x20per-order\x20layer-2\x20Allocations.\x20Reachable\x20ONLY\x20from\x20claim_window\x20(no\x20claim\x20—\x20guard\x20release_no_claim_clock)\x20or\x20poststay_claim\x20(dismissed\x20—\x20guard\x20arb_dismissed_poststay),\x20so\x20the\x20release\x20always\x20fires\x20on\x20an\x20intact,\x20dispute-concluded\x20pool.\x20Supersedes\x20the\x20v86\x20KLM-FIX-2\x20two-inbound-edge\x20shape:\x20settlement\x20no\x20longer\x20waits\x20on\x20review\x20at\x20all,\x20and\x20the\x20old\x20completed->settled\x20default\x20edge\x20is\x20deleted\x20because\x20a\x20permissionless\x20settle\x20at\x20completed\x20could\x20sweep\x20the\x20residual\x20while\x20a\x20claim\x20was\x20still\x20openable\x20(FACT-ALLOC-03\x20FCFS\x20race)','semantic_role':'final','from':[{'prev':'claim_window','forward':'release_no_claim','permission_index':0x3e8,'guard_key':'release_no_claim_clock'},{'prev':'poststay_claim','forward':'claim_dismissed','permission_index':0x3e8,'guard_key':'arb_dismissed_poststay'}]},{'name':'closed_cancel','role':'Free\x20cancellation\x20(24h\x20pre-use)\x20or\x20tiered\x20cancellation\x20—\x20refund/charge\x20Allocators;\x20also\x20the\x20arb_refund\x20edge\x20target\x20when\x20a\x20ruling\x20favors\x20the\x20buyer\x20(guard\x20arb_won_claim\x20—\x20disputes\x20are\x20filed\x20OFF-Machine\x20per\x20R-M1-11,\x20and\x20the\x20ruling\x20edge\x20departs\x20poststay_claim\x20so\x20a\x20claim\x20can\x20only\x20execute\x20while\x20the\x20serial\x20window\x20holds\x20the\x20pool\x20intact)','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'paid','forward':'free_cancel','operator':'order_payer','guard_key':'free_cancel'},{'prev':'poststay_claim','forward':'arb_refund','permission_index':0x3e8,'guard_key':'arb_won_claim'}]}],'guards':[{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'free_cancel','purpose':'Free-cancellation\x20edge\x20gate\x20(bound\x20to\x20the\x20paid\x20->\x20closed_cancel\x20forward):\x20\x27Clock\x20<=\x20order.time\x20+\x20free_cancel_hours\x27\x20—\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20cancel\x20aborts\x20inside\x20the\x20window\x20and\x20is\x20admitted\x20after\x20it\x20closed\x20—\x20az3\x20F-03;\x20bkd8\x20BK-02;\x20catalog\x20sweep\x202026-10-19).\x20The\x20window\x20anchors\x20on\x20BOOKING\x20time\x20by\x20default\x20(no\x20use-date\x20primitive\x20on\x20chain\x20—\x20order.time\x20is\x20immutable;\x20a\x20faithful\x20\x2724h\x20pre-use\x27\x20window\x20rides\x20the\x20stay-date\x20Repository\x20row\x20per\x20the\x20STAY-DATE\x20PRESCRIPTION\x20in\x20time_anchors.free_cancel)\x20—\x20PLUS\x20an\x20order.owner\x20binding\x20leg\x20(pattern.identity_check_order_holder:\x20without\x20it\x20the\x20platform\x20can\x20advance\x20any\x20\x27buyer\x27\x20forward\x20itself\x20—\x20an\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive,\x20global-ota\x20live-verified)\x20AND\x20order.service\x20binding.\x20Replays\x20are\x20self-limited\x20by\x20the\x20refund\x20Rate\x2010000\x20rail\x20(the\x20pool\x20empties,\x20the\x20next\x20run\x20aborts)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','purpose':'Four\x20cancellation\x20tiers\x20(7d+\x20/\x203-7d\x20/\x201-3d\x20/\x20same-day)\x20charging\x205%\x20/\x2020%\x20/\x2050%\x20/\x2070%\x20—\x20each\x20tier\x20is\x20a\x20BOUNDED\x20window:\x20a\x20closing\x20upper-bound\x20leg\x20(time_window_upper_bound)\x20AND-ed\x20with\x20an\x20opening\x20lower-bound\x20leg\x20(time_lock_progress).\x20NOT\x20MODELED\x20in\x20this\x20template\x27s\x20allocator\x20(mn-261019\x20C-02:\x20no\x20tier\x20rails\x20exist\x20here)\x20—\x20the\x20per-tier\x20allocator\x20rows\x20are\x20a\x20build-time\x20addition;\x20tier\x20boundaries\x20anchor\x20on\x20BOOKING\x20time\x20by\x20default,\x20and\x20a\x20faithful\x20stay-date\x20ladder\x20rides\x20the\x20stay-date\x20Repository\x20row\x20per\x20the\x20STAY-DATE\x20PRESCRIPTION\x20(one\x20repository_data_check\x20leg\x20per\x20tier\x20boundary\x20—\x20a\x20build-time\x20addition,\x20same\x20class\x20as\x20the\x20allocator\x20rows),\x20so\x20the\x20on-chain\x20tiers\x20can\x20otherwise\x20only\x20approximate\x20the\x20source\x20platform\x27s\x20stay-date\x20policy'},{'template_id':'pattern.repository_data_check','host':'machine','purpose':'Per-segment\x20redemption\x20WIP:\x20supplier\x20submits\x20+\x20buyer\x20confirms\x20(T+3\x20time-lock\x20fallback)'},{'template_id':'pattern.required_info_evidence_gate','host':'machine','key':'required_info','purpose':'Only\x20when\x20the\x20operator\x20declares\x20customer_required\x20(traveler\x20names\x20/\x20ID\x20for\x20venue\x20entry):\x20gate\x20the\x20FIRST\x20segment\x20redemption\x20(segment_D1)\x20on\x20order.required_info\x20some\x20so\x20the\x20traveler\x27s\x20recorded\x20credential\x20is\x20on-chain\x20before\x20any\x20segment\x20is\x20redeemed;\x20the\x20supplier\x20eyeballing\x20the\x20recorded\x20contact\x20in\x20the\x20Messenger\x20conversation\x20(never\x20the\x20recorded\x20address\x20value)\x20is\x20the\x20acceptance\x20basis;\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20Service.customer_required\x20(testnet\x20HIGH-05),\x20so\x20this\x20Guard\x20is\x20the\x20only\x20enforcement'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'Force-majeure\x20evidence\x20window\x2048h\x20—\x20expired\x20claims\x20lose\x20standing'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'poststay_claim_window','purpose':'Claim\x20filing\x20INSIDE\x20the\x20serial\x20window\x20(bound\x20to\x20the\x20claim_window\x20->\x20poststay_claim\x20forward)\x20—\x20a\x20CLOSING\x20window:\x20Clock\x20<=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last\x20—\x20witness-anchored,\x20so\x20keeper\x20timing\x20cannot\x20shift\x20it).\x20Anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy:\x20the\x20window\x20is\x20shut\x20while\x20open\x20and\x20stays\x20open\x20after\x20it\x20closed\x20—\x20az3\x20F-03;\x20bkd8\x20BK-04).\x20PLUS\x20an\x20order.owner\x20binding\x20leg\x20(pattern.identity_check_order_holder,\x20bkg15\x20F05\x20—\x20the\x20filing\x20forward\x20is\x20operator\x20order_payer\x20whose\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive:\x20without\x20the\x20identity\x20leg\x20the\x20platform\x20can\x20file\x20claims\x20on\x20the\x20buyer\x27s\x20behalf)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'release_no_claim_clock','purpose':'No-claim\x20release\x20gate\x20(bound\x20to\x20the\x20claim_window\x20->\x20settled\x20forward,\x20the\x20sole\x20non-claim\x20exit):\x20Clock\x20>=\x20progress.history.time\x20of\x20claim_window\x20+\x20claim_window_days\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last\x20—\x20the\x20IMMUTABLE\x20witness\x20anchor).\x20A\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance,\x20so\x20the\x20order\x20still\x20sits\x20at\x20claim_window\x20and\x20its\x20recorded\x20ENTRY\x20time\x20is\x20the\x20correct\x20anchor;\x20a\x20progress.current\x20pin\x20must\x20NEVER\x20appear\x20here\x20—\x20it\x20would\x20target\x20the\x20destination\x20node\x20and\x20weld\x20the\x20edge\x20shut\x20(bkng\x20F22).\x20An\x20OPENING\x20time-lock,\x20the\x20exact\x20inverse\x20of\x20the\x20closing\x20filing\x20window\x20(opening\x20gate\x20=\x20tpl_time_lock_progress;\x20closing\x20window\x20=\x20tpl_time_window_upper\x20—\x20az3\x20F-03).\x20SUPERSEDES\x20the\x20v86\x20AutoSettleNoReview\x20fallback\x20(KLM-FIX-2):\x20settlement\x20no\x20longer\x20waits\x20on\x20review\x20at\x20all\x20—\x20the\x20serial\x20claim\x20window\x20is\x20the\x20post-delivery\x20hold,\x20and\x20the\x20old\x20completed->settled\x20default\x20edge\x20is\x20gone\x20because\x20it\x20could\x20sweep\x20the\x20residual\x20while\x20a\x20claim\x20was\x20still\x20openable\x20(FACT-ALLOC-03).\x20The\x20window\x20duration\x20rides\x20the\x20declared\x20fee_param\x20claim_window_days\x20—\x20a\x20prose-named\x20window\x20token\x20must\x20be\x20a\x20declared\x20fee\x20param\x20(inv-fee-param-names-resolve).\x20Edge\x20guard_key\x20binding\x20is\x20MANDATORY\x20—\x20an\x20unbound\x20GuardSpec\x20is\x20never\x20collected\x20into\x20the\x20build\x20(audit-261012\x20B3)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_gate','purpose':'Settlement\x20residual-exit\x20gate,\x20bound\x20to\x20the\x20settlement\x20allocator\x20row\x20(guard_key\x20settle_gate):\x20progress.current\x20==\x20settled\x20(the\x20terminal)\x20+\x20order.service\x20binding.\x20Under\x20the\x20two-tier\x20waterfall\x20the\x20per-segment\x20layer-2\x20Amount\x20legs\x20are\x20pinned\x20to\x20the\x20order\x20total\x20BY\x20CONSTRUCTION,\x20so\x20this\x20rail\x20normally\x20sweeps\x20ZERO\x20—\x20it\x20exists\x20so\x20that\x20any\x20residual\x20(a\x20cancelled\x20segment\x20refund,\x20an\x20integer-division\x20remainder,\x20a\x20repriced\x20segment)\x20still\x20has\x20an\x20exit\x20at\x20the\x20terminal\x20instead\x20of\x20stranding\x20(FUND-EXIT-01:\x20an\x20uncovered\x20terminal\x20strands\x20the\x20escrow\x20permanently,\x20IMMUT-001).\x20The\x20primary\x20supplier\x20payouts\x20are\x20per-order\x20layer-2\x20Allocations,\x20never\x20this\x20rail'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_won_claim','purpose':'Arb\x20refund\x20edge\x20gate\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order\x20recipient\x20for\x20GuardIdentifier(0),\x20slot\x201\x20=\x20Arb\x20for\x20ruling\x20state;\x20the\x20example_table\x20carries\x20the\x20254\x20task-binding\x20row\x20—\x20edge-bound\x20guards\x20require\x20it,\x20TASKBIND-01),\x20bound\x20to\x20the\x20poststay_claim\x20->\x20closed_cancel\x20forward:\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true\x20(set\x20by\x20the\x20ruling;\x20arb_withdraw\x20sweeps\x20only\x20the\x20fee\x20balance\x20and\x20never\x20touches\x20the\x20indemnity,\x20so\x20a\x20fee\x20withdrawal\x20cannot\x20clear\x20the\x20gate\x20—\x20the\x20one\x20path\x20that\x20DOES\x20clear\x20it\x20is\x20the\x20objection-cycle\x20reset,\x20which\x20fails\x20this\x20gate\x20shut\x20until\x20a\x20fresh\x20ruling).\x20NEVER\x20gate\x20on\x20arb.status\x20—\x20arb_withdraw\x20advances\x20the\x20case\x203→6\x20past\x20the\x2030-day\x20silence\x20window\x20and\x205→6\x20from\x20Finished\x20(Guard+Machine\x20immutable\x20after\x20publish;\x20testnet\x20o10\x20stranded\x201.5\x20WOW);\x20a\x20merchant-favor\x20dismissal\x20edge\x20needs\x20tpl_forward_arb_ruling_dismissed\x20(the\x20arb_dismissed_poststay\x20instance\x20below\x20—\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200,\x20fail-closed\x20on\x20the\x20None\x20field),\x20never\x20\x27indemnity\x20some\x20==\x20false\x27.\x20Disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11)\x20—\x20the\x20on-machine\x20poststay_claim\x20node\x20is\x20the\x20filing\x20waypoint\x20inside\x20the\x20serial\x20window,\x20and\x20the\x20ruling\x20edge\x20departs\x20THERE\x20so\x20a\x20claim\x20can\x20only\x20execute\x20while\x20the\x20pool\x20is\x20intact\x20(D2\x20serial\x20discipline);\x20the\x20ruling\x20itself\x20is\x20the\x20evidence,\x20the\x20guard\x20is\x20the\x20proof-of-ruling\x20on\x20the\x20money\x20rail.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20poststay_claim\x20->\x20closed_cancel'},{'template_id':'tpl_forward_arb_ruling_dismissed','host':'machine','key':'arb_dismissed_poststay','purpose':'Dismissed-ruling\x20edge\x20gate\x20for\x20the\x20post-delivery\x20claim\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order,\x20slot\x201\x20=\x20Arb),\x20bound\x20to\x20the\x20poststay_claim\x20->\x20settled\x20forward:\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity.amount\x20==\x200\x20(the\x20ruling\x20favoured\x20the\x20supplier).\x20Fail-closed:\x20the\x20amount\x20query\x20errors\x20on\x20the\x20None\x20field,\x20so\x20the\x20leg\x20passes\x20ONLY\x20when\x20indemnity\x20is\x20Some(0)\x20—\x20indemnity\x20is\x20Some\x20ONLY\x20after\x20a\x20ruling,\x20and\x20a\x20reset\x20clears\x20it,\x20so\x20a\x20voided\x20or\x20never-made\x20ruling\x20can\x20never\x20release\x20the\x20pool.\x20A\x20dismissed\x20claim\x20rejoins\x20the\x20settlement\x20path\x20AT\x20settled,\x20where\x20the\x20residual\x20rail\x20(settle_gate)\x20sweeps\x20on\x20an\x20intact,\x20dispute-concluded\x20pool.\x20NEVER\x20a\x20bare\x20permission\x20edge\x20and\x20NEVER\x20\x27indemnity\x20some\x20==\x20false\x27,\x20which\x20conflates\x20never-ruled,\x20reset,\x20and\x20ruled-zero\x20—\x20any\x20of\x20those\x20lets\x20the\x20platform\x20kill\x20a\x20buyer\x27s\x20claim\x20with\x20zero\x20on-chain\x20ruling\x20evidence.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE:\x20this\x20one\x20serves\x20poststay_claim\x20->\x20settled'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_gate','purpose':'Refund\x20execution\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate):\x20progress.current\x20==\x20closed_cancel\x20(the\x20refund\x20terminal\x20—\x20the\x20free_cancel\x20edge\x20and\x20the\x20arb_refund\x20edge\x20BOTH\x20land\x20here,\x20so\x20one\x20gate\x20covers\x20both\x20entries)\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570\x20—\x20blocks\x20the\x20refund\x20only\x20AFTER\x20an\x20award\x20has\x20actually\x20paid;\x20one-directional)\x20+\x20the\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200:\x20Order.dispute\x20is\x20append-only,\x20so\x20the\x20first\x20filed\x20case\x20would\x20weld\x20this\x20rail\x20shut\x20forever\x20(one-way\x20door)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers/buyers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands\x20—\x20F-51\x20delivered-pinned\x20abort\x207,\x20CAT-C2\x20completed-pinned\x20live\x201.0\x20WOW\x20stranded\x20—\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20re-adding\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20supplier\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20with\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'supplier','count':0x2,'mode':'rate','refund_track':'order_anchored','rows':[{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Layer-1\x20free-cancellation\x20full\x20refund\x20to\x20the\x20order\x20anchor\x20via\x20GuardIdentifier(0),\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(node\x20closed_cancel\x20—\x20both\x20the\x20free_cancel\x20edge\x20and\x20the\x20arb_refund\x20edge\x20land\x20there);\x20the\x20four-tier\x20cancellation\x20charges\x20and\x20arbitration\x20refunds\x20are\x20separate\x20allocators\x20created\x20at\x20build\x20time.'},{'track':'settlement','recipient':'entity','recipient_key':'supplier','mode':'surplus','guard_key':'settle_gate','note':'RESIDUAL-EXIT\x20rail,\x20gated\x20by\x20the\x20settle_gate\x20guard\x20(node\x20settled):\x20under\x20the\x20two-tier\x20waterfall\x20the\x20per-segment\x20layer-2\x20Amount\x20legs\x20are\x20pinned\x20to\x20the\x20order\x20total\x20BY\x20CONSTRUCTION,\x20so\x20this\x20rail\x20normally\x20sweeps\x20ZERO\x20—\x20it\x20exists\x20so\x20any\x20residual\x20still\x20exits\x20at\x20the\x20terminal\x20instead\x20of\x20stranding\x20(FUND-EXIT-01\x20/\x20IMMUT-001).\x20NOT\x20an\x20Amount\x20row:\x20layer2_segment_amounts\x20is\x20a\x20per-order\x20plan\x20(a\x20prose\x20fee_param,\x20not\x20a\x20number),\x20and\x20the\x20real\x20per-segment\x20payouts\x20are\x20per-order\x20layer-2\x20Allocations\x20(see\x20build\x20notes);\x20the\x20primary\x20supplier\x20payouts\x20NEVER\x20ride\x20this\x20rail.'},{'track':'settlement','recipient':'entity','recipient_key':'supplier','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20rail\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20b9-261015\x20catalog\x20sweep\x20—\x20run75747\x20F-06\x20promoted\x20from\x20build-note\x20prose\x20to\x20a\x20shipped\x20row):\x20fires\x20ONLY\x20when\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(order.claimed_by\x20some\x20==\x20true,\x20query\x20id\x201570\x20—\x20Bool)\x20—\x20sweeps\x20the\x20escrow\x20principal\x20to\x20the\x20supplier\x20Entity\x20so\x20an\x20awarded\x20order\x20still\x20exits.\x20Its\x20own\x20allocator\x20(guard_key\x20differs\x20from\x20settle_gate/refund_gate),\x20so\x20the\x20per-allocator\x20Rate\x20sum\x20stays\x20exactly\x2010000;\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Single-shot\x20by\x20balance\x20exhaustion\x20—\x20arms\x20NO\x20254\x20slot.'}],'description':'DIRECT-SALES\x20REWRITE\x20(this\x20allocator\x20previously\x20routed\x20the\x20FULL\x20order\x20amount\x20through\x20a\x20platform\x20pool\x20and\x20took\x20the\x20remainder\x20via\x20Surplus,\x20which\x20made\x20the\x20take\x20both\x20un-computable\x20pre-order\x20and\x20a\x20mandatory\x20transit\x20point):\x20layer-1\x20(Service-level)\x20refunds\x20free\x20cancellations\x20fully,\x20applies\x20four-tier\x20cancellation\x20charges,\x20and\x20executes\x20arbitration\x20refunds;\x20layer-2\x20(a\x20per-order\x20Allocation\x20created\x20after\x20payment)\x20releases\x20per-segment\x20fixed\x20Amounts\x20to\x20each\x20supplier\x20on\x20redemption.\x20The\x20sum\x20of\x20segment\x20Amounts\x20MUST\x20be\x20pinned\x20to\x20the\x20order\x20total\x20by\x20construction,\x20so\x20there\x20is\x20NO\x20remainder\x20for\x20anyone\x20to\x20take.\x20A\x20supplier\x20fee\x20is\x20modelled\x20as\x20its\x20own\x20explicitly-priced\x20segment\x20order,\x20never\x20as\x20a\x20residual\x20share.\x20Surplus\x20is\x20NOT\x20how\x20a\x20fee\x20is\x20taken\x20—\x20uncapped\x20it\x20sweeps\x20the\x20entire\x20remaining\x20pool.\x20MERCHANT\x20FREEDOM:\x20a\x20merchant\x20that\x20IS\x20the\x20aggregator\x20(chain\x20/\x20multi-supplier\x20orchestrator)\x20may\x20charge\x20its\x20own\x20fee,\x20under\x20three\x20constraints\x20—\x20(1)\x20an\x20EXPLICIT\x20number\x20a\x20buyer\x20can\x20compute\x20pre-order,\x20never\x20an\x20implicit\x20remainder\x20like\x20\x27order\x20total\x20-\x20segment\x20sums\x27;\x20(2)\x20an\x20explicit\x20NON-EMPTY\x20recipient\x20Entity,\x20because\x20an\x20EMPTY\x20Entity\x20never\x20reaches\x20the\x20deployer:\x20the\x20SDK\x20swaps\x20in\x20your\x20own\x20account\x20before\x20the\x20transaction\x20is\x20built,\x20while\x20on\x20chain\x20a\x20zero-address\x20Entity\x20recipient\x20burns\x20the\x20share\x20permanently;\x20(3)\x20no\x20mandatory\x20transit\x20pool\x20on\x20the\x20payout\x20path,\x20and\x20never\x20take\x20the\x20fee\x20via\x20a\x20Surplus\x20leg\x20—\x20an\x20uncapped\x20Surplus\x20sweeps\x20the\x20entire\x20remaining\x20pool\x20(a\x20max-capped\x20one\x20tops\x20the\x20payout\x20up\x20to\x20the\x20cap),\x20so\x20it\x20doubles\x20as\x20draining\x20the\x20pool.'},'key_risk':'Per-segment\x20supplier\x20payout\x20under\x20Service-level\x20static\x20rules\x20—\x20the\x20per-order\x20second-layer\x20Allocation\x20bypasses\x20the\x20Service\x20granularity\x20freeze','build_notes':['Core\x20redesign:\x20a\x20Service-level\x20segment\x20Rate\x20allocator\x20fails\x20contract\x20validation\x20—\x20use\x20a\x20per-order\x20layer-2\x20Allocation\x20(publicly\x20creatable\x20after\x20payment)\x20with\x20per-segment\x20Amount\x20entries','Layer-2\x20Amount\x20entries\x20are\x20exact\x20per-segment\x20figures\x20(per-order\x20customization);\x20sequential\x20execution\x20causes\x20no\x20distortion','Layer-2\x20threshold\x20=\x20ONE\x20segment\x27s\x20Amount\x20(never\x20the\x20order\x20total)\x20—\x20alloc()\x20asserts\x20balance\x20>=\x20threshold\x20before\x20every\x20release\x20(allocation.move\x20EINSUFFICIENT_BALANCE\x20threshold\x20check);\x20a\x20total-sized\x20threshold\x20locks\x20all\x20remaining\x20segments\x20after\x20the\x20first\x20redemption','Per-segment\x20redemption\x20binds\x20its\x20OWN\x20guard\x20instance\x20(supplier\x20WIP\x20+\x20buyer\x20confirm\x20per\x20segment)\x20—\x20a\x20single\x20shared\x20redemption\x20guard\x20could\x20double-fire\x20adjacent\x20segments\x20(no\x20alloc\x20nonce\x20on-chain)','NO\x20PLATFORM\x20TAKE\x20and\x20NO\x20RESIDUAL:\x20under\x20direct\x20sales\x20the\x20merchant\x20keeps\x20the\x20whole\x20booking,\x20so\x20every\x20layer-2\x20leg\x20is\x20an\x20explicitly-priced\x20per-segment\x20Amount\x20and\x20their\x20sum\x20is\x20pinned\x20to\x20the\x20order\x20total\x20BY\x20CONSTRUCTION.\x20Nothing\x20is\x20left\x20over,\x20so\x20there\x20is\x20no\x20remainder\x20for\x20anyone\x20to\x20take\x20—\x20an\x20implicit\x20`order\x20total\x20-\x20segment\x20sums`\x20take\x20was\x20both\x20un-computable\x20before\x20ordering\x20and\x20unbounded\x20(R-ECON-02).\x20If\x20the\x20merchant\x20IS\x20the\x20organizer\x20and\x20charges\x20its\x20own\x20fee,\x20that\x20fee\x20is\x20its\x20own\x20explicitly-priced\x20segment\x20order,\x20not\x20a\x20residual.','SEGMENT-SUM\x20INVARIANT\x20(CR-02\x20family):\x20the\x20layer-2\x20Amount\x20legs\x20are\x20hard\x20subtractions,\x20so\x20sum(per-segment\x20Amounts)\x20must\x20stay\x20at\x20or\x20below\x20the\x20order\x20total\x20—\x20alloc()\x20asserts\x20balance\x20>=\x20fix\x20(allocation.move,\x20EINSUFFICIENT_BALANCE)\x20and\x20the\x20Surplus\x20path\x20computes\x20the\x20remainder\x20as\x20u64::safe_sub(max,\x20alloced),\x20both\x20of\x20which\x20abort\x20when\x20the\x20segments\x20were\x20priced\x20above\x20the\x20escrow,\x20stranding\x20the\x20order\x20at\x20a\x20terminal\x20node\x20with\x20no\x20exit.\x20Quote\x20min_booking_amount\x20above\x20the\x20segment\x20sum,\x20or\x20price\x20segments\x20as\x20Rates','Instant-confirmation\x20variant\x20(real-time\x20ticketing):\x20paid\x20->\x20confirmed\x20->\x20redeemed\x20->\x20completed\x20(4\x20nodes)','REVIEW\x20REWARD\x20PLANNED\x20AT\x20SALE\x20TIME\x20(user\x20directive\x202026-10-10):\x20the\x20review\x20Reward\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built,\x20NOT\x20per\x20order\x20—\x20create\x20the\x20Reward\x20object,\x20fund\x20it\x20(fee_param\x20review_reward_pool\x20>=\x20expected\x20orders\x20x\x20per-order\x20amount,\x20INV-4),\x20and\x20bind\x20the\x20claim\x20guard\x20to\x20the\x20Service\x27s\x20reward\x20registry\x20at\x20build\x20time\x20with\x20the\x20standard\x20declared\x20up\x20front:\x20Progress\x20at\x20completed\x20+\x20review\x20content\x20hash,\x20window\x20=\x20review_window_days\x20anchored\x20on\x20order.time,\x20amount\x20=\x20fixed\x20per\x20order;\x20claim\x20policy\x20=\x20once\x20per\x20order\x20(reward_claim_policy,\x20OFN-C1).\x20REPLAY\x20ARMING\x20(SV-2\x20canonical\x20—\x20the\x20authoritative\x20teaching\x20rides\x20the\x20reward_claim\x20guard\x20purpose):\x20the\x20claim\x20guard\x20root\x20MUST\x20include\x20the\x20ORDER-SCOPED\x20record\x20gate\x20logic_not(query_reward_record_exists(object=<reward>,\x20where:{storeFromId:<order\x20slot>}))\x20—\x20entry-stamped\x20+\x20order-scoped\x20where\x20=\x20once\x20per\x20buyer\x20per\x20order\x20(azx7-mn-261014\x20live\x20T8;\x20the\x20old\x20\x27storeFromId\x20filter\x20is\x20inert\x27\x20verdict\x20described\x20UNSTAMPED\x20rewards\x20only);\x20the\x20recipient-only\x20EMPTY\x20where:{}\x20variant\x20is\x20a\x20DELIBERATE\x20once-per-buyer-FOR-LIFE\x20choice\x20and\x20must\x20NEVER\x20back\x20per-order\x20bounty\x20wording\x20(upw\x20F-48);\x20the\x20guard_add\x20ENTRY\x20store_from_id\x20stamp\x20is\x20the\x20DIFFERENT,\x20mandatory\x20field\x20—\x20pin\x20it\x20to\x20the\x20per-order\x20submission\x20slot\x20(slot\x200,\x20the\x20submitted\x20Order)\x20—\x20plus\x20the\x20identity\x20leg\x20Signer\x20==\x20order.owner\x20(the\x20on-chain\x20reward\x20claim\x20entry\x20is\x20permissionless\x20until\x20the\x20chain-side\x20patch,\x20audit-261012\x20B5);\x20the\x20recipient-only\x20gate\x20is\x20once-per-buyer\x20for\x20life;\x20strict\x20once-per-order\x20needs\x20the\x20order-scoped\x20where\x20(SV-2)\x20or\x20the\x20254\x20task-binding\x20Allocation\x20leg;\x20Reward.claim\x20has\x20no\x20protocol-level\x20idempotency\x20and\x20the\x20policy\x20field\x20arms\x20nothing;\x20guard-risk\x20R-X1-14\x20audits\x20the\x20built\x20guard.\x20The\x20FULL\x20terms\x20(node\x20standard\x20+\x20window\x20+\x20amount\x20+\x20remaining\x20pool)\x20MUST\x20be\x20presented\x20to\x20the\x20buyer\x20at\x20quote/buy\x20time\x20—\x20the\x20incentive\x20is\x20marketing\x20and\x20must\x20be\x20perceptible\x20BEFORE\x20the\x20order\x20is\x20placed,\x20never\x20discovered\x20after\x20delivery','Monthly\x20settlement\x20variant:\x20layer-2\x20recipients\x20=\x20one\x20Amount\x20leg\x20per\x20supplier-month,\x20released\x20on\x20that\x20month\x27s\x20guard;\x20batch\x20payout\x20runs\x20as\x20N\x20Amount\x20legs\x20to\x20the\x20SAME\x20named\x20recipients.\x20Do\x20NOT\x20route\x20supplier\x20payouts\x20through\x20an\x20organizer\x20pool\x20—\x20that\x20makes\x20the\x20organizer\x20a\x20mandatory\x20transit\x20waypoint\x20on\x20the\x20merchant\x27s\x20own\x20money\x20(R-ECON-04),\x20and\x20an\x20EMPTY\x20recipient\x20silently\x20pays\x20the\x20deploying\x20AI\x20instead\x20(ts-sdk/packages/wowok/src/w/local/index.ts)','Force-majeure\x20evidence\x20window\x20is\x2048h\x20—\x20expired\x20claims\x20lose\x20standing\x20(prevents\x20retroactive\x20evidence)','TIME\x20PARAMETERS\x20ARE\x20FEE_PARAMS,\x20NEVER\x20HAND-WRITTEN\x20VALUES\x20(KLM-A,\x20R-TIME-PROFILE):\x20every\x20guard\x20time\x20constant\x20(free-cancel\x20window,\x20cancellation\x20tiers,\x20evidence\x20window,\x20ticket\x20validity)\x20MUST\x20be\x20derived\x20from\x20this\x20template\x27s\x20fee_params\x20(free_cancel_hours\x20/\x20evidence_window_hours)\x20at\x20build\x20time\x20—\x20regression/test-compressed\x20values\x20(e.g.\x20a\x202-minute\x20\x27free\x20cancellation\x27\x20or\x20a\x2010-minute\x20\x2790-day\x20ticket\x27)\x20frozen\x20into\x20guards\x20are\x20unfixable\x20after\x20publish\x20(guards\x20freeze,\x20IMMUT-001)\x20and\x20decide\x20real\x20no-show/refund\x20outcomes;\x20the\x20wrap\x20publish\x20gate\x20now\x20BLOCKS\x20a\x20guard\x20whose\x20time\x20constant\x20sits\x20>=100x\x20below\x20the\x20production\x20duration\x20its\x20own\x20description\x20declares\x20(mainnet\x20261014\x20order\x20tests:\x20both\x20compressions\x20shipped\x20live)','Disputes\x20route\x20to\x20Arbitration\x20with\x20an\x20independent\x20Permission\x20(R-M1-11)','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed;\x20run75747\x20F-06):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20The\x20pairing\x20is\x20STRUCTURAL,\x20not\x20prose:\x20the\x20allocator\x20rows\x20SHIP\x20the\x20merchant-recovery\x20allocator\x20(recover_gate\x20row\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20supplier-side\x20Entity).\x20The\x20builder\x27s\x20only\x20duty\x20is\x20resolving\x20the\x20recover_gate\x20guard\x20design\x20(tpl_allocator_node_gate_recover)\x20before\x20the\x20Machine\x20publish;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass','STOP-NODE\x20FUND-EXIT\x20COVERAGE\x20(mandatory\x20pre-publish\x20evaluation,\x20pattern.fund_flow_stop_node_coverage\x20/\x20R-M5-03\x20/\x20R-M5-09):\x20walk\x20EVERY\x20rest\x20state\x20—\x20per-segment\x20redemption\x20(layer-2\x20release,\x20each\x20segment\x20its\x20own\x20guard),\x20completed\x20(awaiting\x20the\x20keeper-opened\x20claim\x20window\x20—\x20the\x20serial\x20hold),\x20claim_window\x20(filing\x20inside\x20the\x20window\x20or\x20no-claim\x20release),\x20poststay_claim\x20(buyer-favor\x20ruling\x20->\x20arb_refund,\x20arb.indemnity-gated;\x20dismissed\x20->\x20settled),\x20settled\x20(any\x20declared\x20residual;\x20with\x20no\x20platform\x20take\x20there\x20is\x20normally\x20none),\x20free-cancel\x20+\x20tiered\x20refunds\x20—\x20each\x20needs\x20a\x20defined\x20withdrawal\x20AND\x20refund\x20rule,\x20each\x20mapping\x20guard\x20satisfiable\x20in\x20BOTH\x20directions;\x20Machine\x20+\x20Allocator\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001),\x20an\x20uncovered\x20stop\x20node\x20strands\x20escrow\x20permanently','customer_required\x20is\x20DECLARATIVE\x20ONLY:\x20the\x20on-chain\x20purchase\x20entry\x20never\x20reads\x20it,\x20so\x20an\x20order\x20that\x20supplies\x20none\x20of\x20the\x20declared\x20fields\x20is\x20still\x20created.\x20Enforce\x20it\x20with\x20the\x20pattern.required_info_evidence_gate\x20Guard\x20on\x20the\x20FIRST\x20segment\x20redemption\x20(gate\x20order.required_info\x20some\x20BEFORE\x20any\x20segment\x20is\x20redeemed),\x20not\x20by\x20declaring\x20the\x20list;\x20only\x20the\x20PRESENCE\x20is\x20asserted\x20—\x20the\x20recorded\x20address\x20value\x20is\x20never\x20a\x20guard\x20condition,\x20and\x20acceptance\x20of\x20the\x20delivered\x20info\x20is\x20the\x20supplier\x27s\x20confirming\x20forward','GROWTH\x20PRINCIPLE:\x20the\x20two-tier\x20waterfall\x20is\x20ONE\x20instantiation\x20of\x20Move-native\x20primitives\x20for\x20multi-segment\x20fulfillment\x20—\x20derive\x20your\x20own\x20rest\x20states\x20and\x20fund\x20exits\x20from\x20the\x20business\x20rules;\x20nothing\x20here\x20is\x20a\x20fixed\x20vocabulary\x20to\x20copy','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.','SERIAL\x20WINDOW\x20SUPERSESSION\x20(v93\x20—\x20supersedes\x20the\x20v86\x20KLM-FIX-2\x20autosettle\x20fallback):\x20settled\x20previously\x20carried\x20TWO\x20inbound\x20edges\x20(the\x20completed\x20default\x20+\x20the\x20AutoSettleNoReview\x20time-lock)\x20because\x20review\x20gated\x20settlement\x20and\x20a\x20buyer\x20who\x20never\x20reviews\x20would\x20lock\x20the\x20merchant\x20out\x20(the\x20Progress\x20Session\x20has\x20no\x20TTL/timeout).\x20The\x20serial\x20claim\x20window\x20REMOVES\x20that\x20dependency\x20structurally:\x20settlement\x20now\x20hangs\x20off\x20claim_window\x20(release_no_claim\x20clock,\x20witness-anchored\x20on\x20the\x20claim_window\x20ENTRY)\x20and\x20poststay_claim\x20(dismissed\x20ruling)\x20only\x20—\x20review\x20gates\x20nothing,\x20the\x20keeper\x20opens\x20the\x20window\x20right\x20after\x20completed\x20(a\x20declared\x20keeper\x20duty),\x20and\x20the\x20release\x20never\x20races\x20an\x20openable\x20claim.\x20The\x20old\x20completed->settled\x20default\x20edge\x20is\x20DELETED,\x20not\x20re-anchored:\x20a\x20permissionless\x20settle\x20at\x20completed\x20could\x20sweep\x20the\x20residual\x20while\x20a\x20claim\x20was\x20still\x20openable\x20(FACT-ALLOC-03\x20FCFS\x20race).\x20Honest\x20boundary:\x20an\x20unopened\x20window\x20holds\x20the\x20pool\x20at\x20completed\x20by\x20design\x20—\x20that\x20is\x20the\x20serial\x20hold,\x20not\x20a\x20strand,\x20but\x20it\x20makes\x20claim-window\x20open\x20a\x20hard\x20keeper\x20duty\x20before\x20ANY\x20money\x20moves\x20post-delivery.\x20Naive-shape\x20lesson\x20from\x20the\x20v86\x20run\x20stands:\x20publishing\x20a\x20settlement\x20path\x20whose\x20only\x20trigger\x20is\x20a\x20counterparty\x20action\x20strands\x20the\x20merchant,\x20and\x20machines\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001)\x20—\x20the\x20window\x20cannot\x20be\x20bolted\x20on\x20later.','RESIDUAL-RELEASE\x20SERIAL\x20DISCIPLINE\x20(D2,\x20FACT-ALLOC-03;\x20N-21\x20—\x20SHIPPED\x20IN\x20v93):\x20the\x20settle_gate\x20Surplus\x20residual-exit\x20rail\x20is\x20serial-ordered\x20behind\x20the\x20claim\x20machinery\x20BY\x20THE\x20TOPOLOGY:\x20completed\x20->\x20claim_window\x20->\x20{file_claim\x20->\x20poststay_claim\x20|\x20release_no_claim\x20->\x20settled},\x20with\x20exactly\x20two\x20exits\x20from\x20claim_window\x20—\x20FileClaim\x20inside\x20the\x20window,\x20ReleaseNoClaim\x20once\x20it\x20elapses\x20(ABNB2-validated).\x20The\x20pool\x20cannot\x20release\x20while\x20a\x20claim\x20could\x20still\x20be\x20filed.\x20Under\x20the\x20two-tier\x20waterfall\x20the\x20residual\x20is\x20normally\x20ZERO\x20(the\x20per-segment\x20layer-2\x20Amount\x20legs\x20are\x20pinned\x20to\x20the\x20order\x20total),\x20which\x20makes\x20this\x20belt-and-suspenders;\x20if\x20a\x20custom\x20build\x20leaves\x20a\x20NON-ZERO\x20residual\x20elsewhere\x20(a\x20repriced\x20or\x20cancelled\x20segment,\x20an\x20integer-division\x20remainder),\x20keep\x20every\x20residual\x20rail\x20behind\x20the\x20same\x20serial\x20window\x20or\x20gate\x20it\x20on\x20a\x20post-window\x20progress\x20entry.\x20The\x20chain\x20has\x20no\x20holdback\x20primitive\x20(the\x20fix\x20is\x20the\x20PAID\x20sum\x20of\x20Amount\x20legs,\x20allocation.move:399,540):\x20once\x20the\x20residual\x20sweeps,\x20a\x20later\x20claim\x20pays\x20nothing\x20from\x20this\x20pool\x20—\x20the\x20arbitration\x20fund\x20is\x20a\x20separate\x20system,\x20but\x20a\x20buyer-favor\x20ruling\x20executes\x20from\x20poststay_claim\x20(arb_refund\x20->\x20closed_cancel)\x20while\x20the\x20window\x20holds\x20the\x20pool\x20intact,\x20so\x20the\x20serial\x20ordering\x20protects\x20both\x20directions.',ZERO_BALANCE_MASKING_NOTE],'fee_params':{'free_cancel_hours':0x18,'cancel_tier_charges_bps':'500/2000/5000/7000','platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'segment_count':0x3,'evidence_window_hours':0x30,'review_window_days':0x7,'claim_window_days':0x7,'layer2_segment_amounts':'resolved\x20per\x20order\x20from\x20the\x20segment\x20plan\x20(pinned\x20to\x20the\x20order\x20total)','min_booking_amount':'must\x20exceed\x20the\x20sum\x20of\x20the\x20per-segment\x20fixed\x20Amounts\x20(layer-2)','review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'free_cancel':'order.time\x20(booking\x20time\x20—\x20the\x20ZERO-addition\x20DEFAULT\x20anchor).\x20'+STAY_DATE_CORE,'cancellation_tiers':'order.time\x20(booking\x20time)','force_majeure_evidence':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim\x27,\x20find=last\x20—\x2048h\x20evidence\x20window\x20from\x20the\x20claim,\x20not\x20the\x20incident\x20date)','claim_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27claim_window\x27,\x20find=last\x20—\x20witness-anchored;\x20the\x20ONLY\x20post-delivery\x20window:\x20claim\x20filing\x20closes\x20inside\x20it,\x20the\x20no-claim\x20release\x20opens\x20after\x20it)','review_window':'order.time\x20(booking\x20time\x20—\x20the\x20REWARD\x20claim\x20window\x20runs\x20review_window_days\x20from\x20the\x20purchase;\x20distinct\x20from\x20the\x20machine\x20claim_window,\x20which\x20anchors\x20witness-derived\x20on\x20its\x20own\x20entry)'},'trust_mechanisms':['R1\x20refund\x20rails\x20ship\x20order-anchored:\x20free\x20cancellation\x20(full\x20refund)\x20+\x20arbitration\x20refund;\x20the\x20tiered-balance\x20cancellation\x20ladder\x20is\x20a\x20build-time\x20ADDITION\x20(no\x20tier\x20allocator\x20rows\x20ship\x20in\x20this\x20template\x20—\x20see\x20the\x20\x27Four\x20cancellation\x20tiers\x27\x20guard\x20purpose,\x20mn-261019\x20C-02\x20/\x20klk15\x20A-03)','R2\x20independent\x20arbitration\x20Permission\x20(structurally\x20eliminates\x20the\x20shared-Permission\x20critical\x20finding)','R3\x20compensation\x20fund\x20>=\x203x\x20max\x20order\x20(guarantee\x20front-pay\x20pool;\x203x\x20=\x20MAX_INDEMNITY_MULTIPLE)','R4\x20per-segment\x20dual\x20confirmation:\x20supplier\x20WIP\x20+\x20buyer\x20confirm\x20or\x20T+3\x20fallback','R5\x20both\x20layers\x20anchor\x20payments\x20to\x20the\x20order','R6\x20layer-1\x20Rate\x20sums\x2010000;\x20layer-2\x20Amount\x20+\x20single\x20Surplus','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20Contact\x20on\x20Service\x20and\x20Machine','R9\x20keepers\x20for\x20layer-2\x20Allocation\x20creation,\x20settlement,\x20and\x20evidence\x20windows','R10\x20tiered\x20cancellation\x20parameters\x20as\x20immutable\x20Guard\x20windows'],'keeper_dependencies':['per-order\x20layer-2\x20Allocation\x20creation\x20after\x20payment','settlement\x20trigger\x20(all\x20segments\x20redeemed\x20or\x20monthly\x20cycle)','claim-window\x20open\x20(right\x20after\x20completed)','no-claim\x20release\x20(claim\x20window\x20close)','T+3\x20redemption\x20confirmation\x20fallback','force-majeure\x20evidence\x20window\x20expiry'],'recommended_role':'both','role_rationale':'Experience\x20suppliers\x20fulfill\x20segments\x20as\x20sub-order\x20takers\x20(supplier\x20path);\x20the\x20merchant/operator\x20runs\x20the\x20two-tier\x20waterfall\x20(merchant\x20path)\x20—\x20and\x20keeps\x20the\x20whole\x20booking,\x20since\x20WoWok\x20extracts\x20nothing.','differences':['Redemption\x20=\x20the\x20only\x20settlement\x20evidence:\x20per-segment\x20supplier\x20WIP\x20+\x20buyer\x20dual\x20confirmation\x20(T+3\x20time-lock\x20fallback)','Two-tier\x20waterfall:\x20Service-level\x20layer-1\x20pool\x20+\x20a\x20per-order\x20layer-2\x20Allocation\x20for\x20per-segment\x20supplier\x20payouts\x20(bypasses\x20the\x20Service\x20granularity\x20freeze)','NO\x20PLATFORM\x20TAKE\x20and\x20NO\x20RESIDUAL:\x20under\x20direct\x20sales\x20the\x20merchant\x20keeps\x20the\x20whole\x20booking,\x20so\x20every\x20layer-2\x20leg\x20is\x20an\x20explicitly-priced\x20per-segment\x20Amount\x20and\x20their\x20sum\x20is\x20pinned\x20to\x20the\x20order\x20total\x20BY\x20CONSTRUCTION.\x20Nothing\x20is\x20left\x20over,\x20so\x20there\x20is\x20no\x20remainder\x20for\x20anyone\x20to\x20take\x20—\x20an\x20implicit\x20`order\x20total\x20-\x20segment\x20sums`\x20take\x20was\x20both\x20un-computable\x20before\x20ordering\x20and\x20unbounded\x20(R-ECON-02).\x20If\x20the\x20merchant\x20IS\x20the\x20organizer\x20and\x20charges\x20its\x20own\x20fee,\x20that\x20fee\x20is\x20its\x20own\x20explicitly-priced\x20segment\x20order,\x20not\x20a\x20residual.'],'user_inputs':['segment_count\x20—\x20per-segment\x20nodes\x20expand\x20to\x20the\x20real\x20trip\x20structure','free_cancel_hours\x20—\x20free-cancellation\x20window\x20before\x20use','cancel_tier_charges_bps\x20—\x20the\x20four\x20tiered\x20cancellation\x20charges','evidence_window_hours\x20—\x20force-majeure\x20evidence\x20window']},{'id':'subscription/creator-membership','industry':'subscription','variant':'creator-membership','product_ref':'patreon','archetype':'leader','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'subscription','arbitration_mode':'third_party','machine_shape':[{'name':'subscribed','role':'Entry:\x20fan\x20joins;\x20period-1\x20funds\x20are\x20escrowed\x20at\x20buy,\x20so\x20the\x20entry\x20join\x20forwards\x20DIRECTLY\x20to\x20delivering\x20—\x20no\x20period-1\x20charge/confirm_payment\x20spin\x20(OFN\x20J5)','semantic_role':'draft','from':['']},{'name':'charging','role':'RENEWAL\x20LOOP\x20ONLY:\x20fan\x20signs\x20the\x20next-period\x20charge\x20(explicit\x20signature\x20—\x20never\x20auto-charged);\x20period\x201\x20never\x20enters\x20here\x20(already\x20escrowed\x20at\x20buy)','operator':'order_payer','semantic_role':'active','from':['completed']},{'name':'delivering','role':'Payment\x20confirmed\x20(period\x201:\x20escrowed\x20at\x20buy\x20—\x20entry\x20join\x20arrives\x20here\x20directly);\x20creator\x20produces\x20the\x20period\x20content','semantic_role':'active','from':['subscribed','charging']},{'name':'delivered','role':'Period\x20content\x20hash\x20submitted\x20(matches\x20the\x20order\x20item\x20commitment)','semantic_role':'delivered','from':['delivering']},{'name':'reviewed','role':'Fan\x20reviews\x20the\x20creator\x20this\x20period\x20(structured\x20repository\x20rows\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed;\x20a\x20fan\x20silent\x20at\x20reviewed\x20still\x20reaches\x20expired\x20via\x20the\x20keeper,\x20so\x20the\x20escrow\x20cannot\x20strand\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'review','guard_key':'review_window'}]},{'name':'completed','role':'Fan\x20confirms\x20receipt\x20—\x20period\x20funds\x20releasable\x20(R4:\x20fan-only\x20confirmation)','operator':'order_payer','semantic_role':'final','from':['delivered',{'prev':'reviewed','forward':'confirm_after_review','operator':'order_payer'}]},{'name':'expired','role':'Period\x20end\x20+\x207-day\x20grace\x20passed\x20without\x20renewal\x20(keeper\x20advances)','semantic_role':'final','from':['delivering','delivered','reviewed']},{'name':'closed_cancel','role':'Fan\x20cancels\x20—\x20next-period\x20effective;\x20pro-rata\x20refund\x20Allocator\x20for\x20unearned\x20periods','operator':'order_payer','semantic_role':'cancelled','from':['subscribed','charging','delivering']}],'guards':[{'template_id':'pattern.identity_check_order_holder','host':'machine','purpose':'Every\x20charge/renewal\x20requires\x20the\x20subscriber\x27s\x20own\x20signature\x20(signer\x20=\x20order\x20owner)\x20—\x20no\x20third\x20party\x20can\x20renew'},{'template_id':'pattern.repository_data_check','host':'machine','purpose':'Per-period\x20content\x20hash\x20required,\x20matching\x20the\x20order\x20item\x20commitment'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_rail','purpose':'Per-period\x20release\x20gate,\x20bound\x20to\x20the\x20settlement\x20allocator\x20rows\x20(guard_key\x20settle_rail):\x20progress.current\x20==\x20completed\x20(fan-only\x20confirmation)\x20+\x20order.service\x20binding\x20—\x20the\x20creator\x20leg\x20and\x20the\x20Rate-0\x20ORDER\x20anchor\x20leg\x20share\x20ONE\x20Allocator\x20(chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator:\x2010000\x20+\x200\x20=\x2010000;\x20a\x20standalone\x20Rate-0\x20allocator\x20can\x20never\x20register).\x20State-based\x20release,\x20not\x20a\x20calendar\x20window'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'refund_gate','purpose':'Refund\x20track\x20gate,\x20bound\x20to\x20the\x20refund\x20allocator\x20row\x20(guard_key\x20refund_gate).\x20DEFAULT\x20FORM\x20=\x20ONE\x20OR-SUBGUARD\x20over\x20the\x20refundable\x20NODE\x20SET\x20{subscribed,\x20charging,\x20delivering,\x20closed_cancel,\x20expired}\x20—\x20every\x20refundable\x20node\x20AND\x20every\x20terminal\x20without\x20an\x20outgoing\x20edge\x20keeps\x20a\x20fund\x20exit\x20(closed_cancel\x20is\x20MANDATORY:\x20a\x20mid-period\x20cancel\x20with\x20funds\x20still\x20pooled\x20matches\x20no\x20other\x20track\x20and\x20deadlocks\x20the\x20escrow\x20permanently,\x20OFN\x20mainnet\x20#P-02;\x20expired\x20is\x20MANDATORY:\x20omitting\x20it\x20strands\x20every\x20naturally-lapsed\x20escrow)\x20—\x20each\x20leg\x20=\x20AND[signer==order.owner,\x20progress.node==<X>,\x20order.claimed_by\x20some==false\x20(query\x20id\x201570\x20—\x20once\x20a\x20ruling\x20has\x20actually\x20paid,\x20refund\x20is\x20precluded;\x20test/11\x20R2-F1\x20double-dip),\x20order.service\x20binding,\x20slot-0\x20declaration\x20({identifier:\x200,\x20b_submission:\x20true}\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21\x20—\x20the\x20GuardIdentifier(0)\x20recipient\x20leg\x20requires\x20it)].\x20A\x20signer-only\x20guard\x20lets\x20the\x20subscriber\x20claim\x20even\x20after\x20expiry.\x20The\x20per-node\x20expansion\x20(one\x20dedicated\x20track\x20per\x20node,\x20direct-fan-subscription\x20form)\x20is\x20the\x20EQUIVALENT\x20alternative\x20—\x20resolve\x20the\x20same\x20key\x20per\x20node\x20via\x20guard_resolutions\x20when\x20per-node\x20allocators\x20are\x20wanted;\x20the\x20some==true\x20polarity\x20is\x20the\x20awarded_recover\x20guard'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'awarded_recover','purpose':'Merchant-recovery\x20rail\x20guard,\x20shipped\x20BY\x20DEFAULT\x20(the\x20some==true\x20polarity\x20paired\x20with\x20every\x20refund\x20rail\x27s\x20claimed_by\x20some==false):\x20assert\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20ONLY\x20—\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20so\x20the\x20awarded\x20order\x27s\x20escrow\x20principal\x20still\x20exits,\x20wherever\x20the\x20fan\x20left\x20the\x20order\x20(NEVER\x20completed-only:\x20an\x20awarded\x20order\x20the\x20fan\x20never\x20confirmed\x20sits\x20at\x20delivered\x20and\x20can\x20never\x20reach\x20completed\x20—\x20ptrn-mn-261013\x20T11\x20stranded\x2020\x20WOW\x20that\x20way)\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2,\x20superseding\x20the\x20b9-261015\x20FULL-SET\x20teaching\x20—\x20F-51:\x20keepers\x20advance\x20orders\x20past\x20any\x20pinned\x20node;\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion);\x20exactly\x20one\x20of\x20refund_gate\x20(claimed_by\x20some\x20==\x20false)\x20/\x20awarded_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2;\x20escrow-exit\x20invariant,\x20mainnet\x20az-mn-261007\x20T5)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','purpose':'Fan\x20cancels\x20anytime;\x20effective\x20next\x20period'},{'template_id':'pattern.time_lock_progress','host':'machine','purpose':'Expiry\x20at\x20period\x20DELIVERY\x20+\x20period_days\x20+\x20grace\x20(keeper\x20advances;\x20anchor\x20=\x20the\x20delivered-entry\x20history\x20time\x201280\x20—\x20ofn5\x20F-01/F-02:\x20charging\x20is\x20renewal-only\x20and\x20absent\x20from\x20first-period\x20history,\x20so\x20a\x20charging\x20anchor\x20errors\x20W_FIELD_NOT_FOUND\x20on\x20period\x201)'},{'template_id':'pattern.allocator_order_anchor','host':'service','purpose':'Per-period\x20settlement\x20anchor:\x20one\x20Rate-0\x20{GuardIdentifier:\x200}\x20row\x20makes\x20the\x20submitted\x20ORDER\x20the\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20from\x20a\x20sibling\x20period\x20order\x20cannot\x20re-release\x20this\x20period\x27s\x20escrow\x20(testnet\x20CR-01)\x20—\x20the\x20anchor\x20row\x20pays\x20nothing'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Fan\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20period\x20delivery,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20confirmation\x20always\x20keeps\x20the\x20unreviewed\x20path\x20delivered\x20->\x20completed,\x20and\x20a\x20fan\x20silent\x20at\x20reviewed\x20still\x20reaches\x20expired\x20via\x20the\x20keeper;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20KERNEL\x20STATUS\x20(amz9-ln-261023\x20TPL-06\x20truth-up):\x20the\x20compile\x20kernel\x20now\x20SHIPS\x20exactly\x20that\x20shape\x20—\x20the\x20REVIEW-COMPONENT\x20emits\x20the\x20review\x20Repository\x20(policies\x20\x27review\x27\x20+\x20order-keyed\x20\x27rating\x27,\x20write_once:true)\x20together\x20with\x20the\x20dedicated\x20split\x20write\x20credential,\x20so\x20the\x20interim\x20write-the-rows-BEFORE-pressing-the-forward\x20ordering\x20is\x20OBSOLETE;\x20generated\x20shops\x20get\x20the\x20repository\x20and\x20the\x20credential\x20from\x20the\x20kernel,\x20and\x20this\x20edge\x20guard\x20remains\x20forward-only\x20by\x20design.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'creator','count':0x3,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'settle_rail','note':'Per-period\x20release\x20to\x20the\x20creator\x20at\x20completed\x20—\x200%\x20platform\x20take\x20—\x20via\x20the\x20settle_rail\x20guard;\x20the\x20anchor\x20leg\x20below\x20shares\x20the\x20same\x20key\x20so\x20both\x20legs\x20form\x20ONE\x20Allocator\x20(chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_rail','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settle_rail\x20allocator\x20(10000\x20+\x200\x20=\x2010000):\x20binds\x20the\x20settlement\x20Guard\x20to\x20this\x20period\x27s\x20own\x20order\x20(slot\x200\x20=\x20the\x20submitted\x20Order\x20address,\x20N-K21);\x20pays\x20nothing.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_gate','note':'Subscriber\x20refund,\x20gated\x20by\x20the\x20refund_gate\x20guard\x20(one\x20OR-subguard\x20over\x20the\x20refundable\x20NODE\x20SET\x20{subscribed,\x20charging,\x20delivering,\x20closed_cancel,\x20expired}\x20—\x20the\x20per-node\x20dedicated-track\x20expansion\x20is\x20the\x20equivalent\x20alternative\x20via\x20guard_resolutions;\x20the\x20node\x20gate\x20is\x20the\x20requirement;\x20signer==order.owner\x20is\x20optional\x20on\x20an\x20order-anchored\x20rail\x20since\x20the\x20recipient\x20is\x20already\x20hard-bound,\x20and\x20a\x20signer-only\x20track\x20is\x20never\x20sufficient),\x20covering\x20every\x20refundable\x20node\x20AND\x20every\x20terminal\x20without\x20an\x20outgoing\x20edge,\x20replay-protected\x20by\x20the\x20identifier-255\x20\x27period-<N>\x27\x20equality\x20leg\x20(NEVER\x20254\x20on\x20a\x20refund\x20rail\x20—\x20OFN\x20#P-04).\x20Each\x20refund\x20rail\x20arms\x20order.claimed_by\x20some\x20==\x20false\x20BY\x20DEFAULT\x20—\x20once\x20an\x20award\x20has\x20actually\x20paid\x20from\x20the\x20fund,\x20refund\x20is\x20precluded\x20permanently\x20(the\x20some\x20==\x20true\x20polarity\x20is\x20the\x20awarded_recover\x20row\x20below;\x20exactly\x20one\x20leg\x20can\x20ever\x20pass).'},{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'awarded_recover','note':'Merchant-recovery\x20rail,\x20shipped\x20by\x20DEFAULT\x20(paired\x20with\x20the\x20refund\x20rail\x20via\x20the\x20claimed_by\x20none/some\x20split):\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20+\x20node\x20gate\x20EXPANDED\x20PER\x20NODE\x20like\x20the\x20refund\x20family\x20(every\x20node\x20that\x20can\x20host\x20escrow\x20at\x20award\x20time\x20—\x20subscribed/charging/delivering/delivered/reviewed/closed_cancel/expired;\x20binding\x20recovery\x20to\x20completed\x20alone\x20strands\x20every\x20awarded\x20order\x20the\x20fan\x20never\x20confirmed,\x20ptrn-mn-261013\x20T11),\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20—\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20refund/recovery\x20legs\x20can\x20ever\x20pass\x20(escrow-exit\x20invariant,\x20mainnet\x20az-mn-261007).'}],'description':'0%\x20platform\x20take:\x20per-period\x20release\x20Rate\x2010000\x20to\x20the\x20creator\x20at\x20completed,\x20with\x20a\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20so\x20the\x20settlement\x20Guard\x20binds\x20the\x20period\x27s\x20own\x20order;\x20refund\x20Rate\x2010000\x20to\x20the\x20subscriber\x20on\x20node-gated\x20tracks\x20(AND[progress.node==<X>]\x20per\x20refundable\x20node\x20—\x20the\x20node\x20gate\x20is\x20the\x20requirement,\x20the\x20signer==order.owner\x20leg\x20is\x20optional\x20since\x20the\x20order-anchored\x20recipient\x20is\x20already\x20hard-bound;\x20coverage\x20=\x20every\x20refundable\x20node\x20AND\x20every\x20terminal\x20without\x20an\x20outgoing\x20edge,\x20expired\x20included);\x20threshold\x20MUST\x20be\x200\x20(a\x20positive\x20threshold\x20locks\x20small\x20residual\x20balances\x20after\x20partial\x20refunds);\x20ONCE\x20SEMANTICS:\x20once\x20=\x20per-rail\x20opt-in\x20legs\x20(254/255)\x20—\x20rails\x20whose\x20guards\x20declare\x20no\x20once\x20leg\x20are\x20REPEATABLE\x20by\x20design\x20(payroll\x20form);\x20the\x20framework\x20has\x20no\x20order-level\x20default.\x20REPLAY\x20PROTECTION\x20(OFN\x20#P-04,\x20mainnet-proven\x20261010):\x20every\x20rail\x20—\x20settlement\x20AND\x20refund\x20—\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count]);\x20NEVER\x20arm\x20254\x20on\x20a\x20refund\x20rail\x20(payment_info.for_object\x20never\x20changes,\x20so\x20the\x20OnceKey\x20repeats\x20every\x20period;\x20a\x20period-2+\x20full-drain\x20retry\x20hits\x20the\x20EMPTIED-POOL\x20abort\x2014\x20FIRST\x20—\x20EZERO\x20at\x20allocation.move:418\x20precedes\x20once\x20bookkeeping\x20—\x20and\x2016\x20only\x20surfaces\x20with\x20a\x20residual\x20balance)'},'key_risk':'Auto-renew\x20trap\x20—\x20every\x20period\x20requires\x20an\x20explicit\x20subscriber\x20signature;\x20keepers\x20may\x20remind\x20and\x20expire\x20but\x20can\x20never\x20charge','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','ENTRY\x20EDGE\x20IS\x20MANDATORY:\x20wire\x20an\x20explicit\x20pair\x20{prev_node:\x22\x22,\x20forwards:[Join]}\x20into\x20\x27subscribed\x27\x20—\x20Progress\x20starts\x20at\x20current=\x22\x22\x20and\x20the\x20first\x20hop\x20only\x20exists\x20if\x20this\x20pair\x20exists\x20(orders\x20arrive\x20dead\x20without\x20it;\x20the\x20publish\x20gate\x20blocks\x20machines\x20without\x20an\x20entry\x20pair)','PERIOD-1\x20SKIPS\x20CHARGING:\x20period-1\x20funds\x20are\x20escrowed\x20at\x20buy,\x20so\x20wire\x20the\x20join\x27s\x20onward\x20edge\x20from\x20\x27subscribed\x27\x20DIRECTLY\x20to\x20\x27delivering\x27\x20—\x20a\x20period-1\x20charge/confirm_payment\x20spin\x20is\x20a\x20dead\x20spin\x20(the\x20payment\x20it\x20would\x20confirm\x20is\x20already\x20in\x20the\x20pool).\x20The\x20\x27charging\x27\x20node\x20is\x20reachable\x20ONLY\x20via\x20the\x20renewal\x20loop','DOUBLE-DIP\x20GUARD:\x20refund\x20tracks\x20must\x20be\x20node-gated\x20(AND[progress.node==<X>],\x20one\x20track\x20per\x20refundable\x20node\x20INCLUDING\x20closed_cancel\x20AND\x20expired\x20—\x20omitting\x20closed_cancel\x20deadlocks\x20the\x20escrow\x20on\x20a\x20mid-period\x20cancel\x20and\x20omitting\x20expired\x20strands\x20every\x20naturally-lapsed\x20escrow,\x20D-30\x20family;\x20the\x20signer==order.owner\x20leg\x20is\x20optional\x20—\x20the\x20order-anchored\x20recipient\x20is\x20already\x20hard-bound)\x20and\x20arm\x20the\x20identifier-255\x20\x27period-<N>\x27\x20equality\x20leg\x20for\x20replay\x20protection\x20(NEVER\x20the\x20identifier-254\x20once-for-object\x20slot\x20on\x20a\x20refund\x20rail);\x20an\x20ungated\x20signer-only\x20refund\x20track\x20lets\x20the\x20subscriber\x20claim\x20escrow\x20after\x20expiry.\x20The\x20claimed_by\x20pairing\x20ships\x20in\x20the\x20rows\x20BY\x20DEFAULT\x20—\x20refund\x20rails\x20carry\x20some==false,\x20the\x20recovery\x20row\x20carries\x20some==true;\x20adjust\x20only\x20if\x20the\x20business\x20model\x20differs\x20(order.move:213-234\x20deliberately\x20ships\x20no\x20receive-gate,\x20so\x20nothing\x20else\x20closes\x20a\x20ruling-paid\x20case)','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass.\x20The\x20alternative\x20closure\x20with\x20the\x20identical\x20guarantee\x20lives\x20on\x20a\x20different\x20axis:\x20a\x20SERIAL\x20claim_window\x20node\x20between\x20delivery\x20and\x20payout\x20(state-based\x20release\x20—\x20payout\x20waits\x20out\x20the\x20dispute\x20window).\x20Pick\x20ONE\x20axis\x20per\x20rail\x20family;\x20both\x20are\x20chain-validated\x20(ptrn2\x20T6/T14)','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20tracks\x20pay\x20GuardIdentifier(0)\x20—\x20funds\x20land\x20ON\x20the\x20Order\x20object,\x20not\x20in\x20the\x20subscriber\x27s\x20wallet;\x20the\x20subscriber\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Order-anchored\x20payout\x20is\x20deliberate\x20(the\x20refund\x20stays\x20bound\x20to\x20the\x20order\x20even\x20across\x20wallet\x20rotation);\x20the\x20second\x20step\x20must\x20be\x20surfaced\x20in\x20the\x20storefront\x20UX','REPLAY\x20PROTECTION\x20(mainnet-proven):\x20every\x20rail\x20—\x20settlement\x20AND\x20refund\x20—\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count];\x20the\x20history\x20count\x20is\x20monotonic\x20and\x20unforgeable,\x20so\x20each\x20period\x20gets\x20a\x20fresh\x20OnceKey).\x20NEVER\x20arm\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20the\x20order\x27s\x20payment\x20intake\x20never\x20rewrites,\x20so\x20the\x20OnceKey\x20is\x20identical\x20in\x20every\x20period\x20and\x20refund\x20period\x202+\x20strands\x20the\x20escrow\x20—\x20the\x20255\x20period-<N>\x20leg\x20above\x20is\x20the\x20PRIMARY\x20protection.\x20OBSERVABILITY\x20(diagnose\x20by\x20this,\x20T9):\x20a\x20full-drain\x20retry\x20shows\x20the\x20EMPTIED-POOL\x20abort\x20(14)\x20FIRST\x20because\x20EZERO\x20(allocation.move:418)\x20precedes\x20once\x20bookkeeping\x20—\x2014\x20on\x20a\x20refund\x20replay\x20IS\x20the\x20254-replay\x20signature;\x2016\x20(E_ONCE_TRIGGERED)\x20only\x20surfaces\x20when\x20a\x20residual\x20balance\x20keeps\x20the\x20pool\x20alive','Per-period\x20signature\x20renewal\x20collapses\x20the\x20bind-card/auto-charge/retry/grace/drop\x20black\x20box\x20into\x20one\x20mechanism:\x20one\x20explicit\x20subscriber\x20signature\x20per\x20period','Renewal\x20=\x20a\x20single\x20subscriber\x20transaction:\x20next-period\x20payment\x20into\x20the\x20Allocation\x20pool\x20+\x20pool\x20recharge\x20+\x20Machine\x20loop\x20back\x20to\x20charging','The\x20renew\x20forward\x20binds\x20the\x20subscriber\x20as\x20operator;\x20the\x20charge\x20guard\x20checks\x20signer\x20=\x20order\x20owner\x20—\x20no\x20third\x20party\x20(creator/keeper)\x20can\x20renew\x20on\x20the\x20subscriber\x27s\x20behalf','The\x20renewal\x20loop\x20edge\x20is\x20legal:\x20the\x20charging\x20node\x20carries\x20two\x20entry\x20pairs\x20(initial\x20+\x20loop);\x20node\x20revisits\x20are\x20unrestricted','RENEWAL\x20MUST\x20RE-FUND:\x20the\x20contract\x20does\x20not\x20verify\x20new\x20escrow\x20on\x20a\x20loop\x20back-edge\x20—\x20use\x20the\x20order\x20call\x27s\x20`order_renew`\x20field,\x20ONE\x20PTB\x20that\x20pays\x20the\x20period\x20amount\x20into\x20the\x20Allocation\x20and\x20advances\x20the\x20renew\x20forward\x20(fund\x20+\x20record\x20+\x20advance\x20in\x20a\x20single\x20step,\x20no\x20unfunded-advance\x20window);\x20PRE-STATE\x20CONSTRAINT\x20(esound-mn-261021\x20B-1,\x20mainnet-verified):\x20a\x20guard\x20on\x20the\x20renew\x20forward\x20reading\x20allocation.balance\x20(query\x201051)\x20sees\x20only\x20the\x20COMMITTED\x20pre-transaction\x20balance\x20—\x20the\x20same-PTB\x20payment\x20is\x20INVISIBLE\x20to\x20it,\x20so\x20NEVER\x20bind\x20a\x20balance\x20gate\x20to\x20the\x20renew\x20forward\x20(it\x20would\x20always\x20abort);\x20the\x20zero-value\x20protection\x20rides\x20the\x20order_renew\x20routing\x20itself)','threshold\x20must\x20be\x200\x20—\x20small\x20subscription\x20amounts\x20+\x20partial\x20refunds\x20would\x20otherwise\x20lock\x20the\x20residual\x20below\x20a\x20positive\x20threshold','Long\x20subscriptions\x20(>\x2024\x20periods):\x20prefer\x20per-period\x20new\x20Orders\x20to\x20bound\x20progress-history\x20growth','Disputes\x20route\x20to\x20Arbitration\x20(default\x20open\x20voting)\x20—\x20award\x20cap\x20is\x203x\x20the\x20period\x20amount;\x20multi-period\x20disputes\x20split\x20per\x20period\x20(R-M1-11)','EXPIRED\x20DUAL\x20EXIT:\x20expired\x20is\x20terminal\x20with\x20TWO\x20inbound\x20edges\x20(delivering\x20/\x20delivered)\x20and\x20the\x20default\x20refund\x20rail\x20above\x20covers\x20it\x20(subscriber-protective:\x20no\x20renewal\x20=\x20no\x20entitlement).\x20If\x20the\x20business\x20must\x20pay\x20the\x20CREATOR\x20for\x20delivered-but-not-renewed\x20periods,\x20do\x20NOT\x20try\x20to\x20gate\x20one\x20node\x20two\x20ways\x20—\x20split\x20it\x20into\x20lapsed_unpaid\x20(from\x20delivering,\x20refund\x20rail)\x20and\x20lapsed_delivered\x20(from\x20delivered,\x20settle\x20rail)\x20exactly\x20as\x20the\x20localnet\x20T6\x20dual-terminal\x20design;\x20one\x20node\x20+\x20one\x20rail\x20can\x20only\x20serve\x20one\x20payee','ARBITRATION\x20READINESS\x20(two\x20sides\x20of\x20the\x20role\x20boundary\x20—\x20a\x20dispute\x20deadlocks\x20on\x20first\x20use\x20unless\x20both\x20hold):\x20(1)\x20MACHINE\x20side\x20(yours)\x20—\x20grant\x20the\x20arbitrator\x27s\x20address\x20the\x20Machine\x27s\x20arbitration\x20permission\x20index\x20(1003-family)\x20on\x20the\x20SERVICE\x27s\x20Permission;\x20without\x20it\x20the\x20arbitrator\x20cannot\x20advance\x20award\x20forwards\x20(permission::E_PERMISSION_DENIED,\x20T4).\x20(2)\x20VENUE\x20side\x20(the\x20arbitrator\x27s)\x20—\x20the\x20venue\x27s\x20vote/rule/confirm\x20permissions\x20and\x20its\x20unpause\x20live\x20on\x20the\x20ARBITRATOR\x27s\x20own\x20Arbitration\x20Permission;\x20the\x20Service\x20owner\x20has\x20no\x20admin\x20there\x20(builder\x20isolation,\x20T5),\x20so\x20your\x20duty\x20is\x20SELECTION,\x20not\x20configuration:\x20verify\x20the\x20venue\x20is\x20operational\x20(unpaused,\x20voting\x20armed)\x20before\x20binding.\x20Single-arbitrator\x20default\x20=\x20trusting\x20that\x20one\x20address\x20for\x20both\x20execution\x20and\x20verdict;\x20prefer\x20a\x20roster\x20+\x20threshold\x20for\x20a\x20neutral\x20bench','Honor-tier\x20Rewards:\x20claim\x20guard\x20=\x20historical\x20period\x20count\x20>=\x20N\x20—\x20AND\x20a\x20PAID-STATE\x20leg\x20on\x20any\x20bounty-style\x20reward\x20(good-review\x20bounty\x20double-dip,\x20ptrn2\x20A1:\x20a\x20FULLY\x20refunded\x20order\x20still\x20rides\x20delivered/reviewed,\x20so\x20rating\x20\x275\x27\x20+\x20bounty\x20claim\x20both\x20succeed\x20unless\x20a\x20guard\x20reads\x20settlement\x20evidence):\x20pair\x20every\x20reward\x20claim\x20with\x20the\x20settle\x20rail\x27s\x20evidence\x20—\x20a\x20repository\x20settle-evidence\x20row\x20written\x20at\x20completed,\x20or\x20an\x20allocation-payment\x20witness\x20—\x20so\x20refunded\x20orders\x20can\x20never\x20claim.\x20Pin\x20store_from_id\x20on\x20any\x20record-consuming\x20claim\x20leg\x20(unstamped\x20records\x20match\x20NO\x20store_from_id\x20predicate\x20—\x20the\x20replay\x20gate\x20is\x20silently\x20dead;\x20slot-less\x20guards\x20can\x20only\x20dedup\x20lifetime-once\x20via\x20an\x20empty-where\x20record\x20count/exists\x20leg,\x20and\x20re-adding\x20the\x20SAME\x20guard\x20overwrites\x20its\x20slot\x20in\x20place,\x20so\x20a\x20legacy\x20pool\x20is\x20repaired\x20by\x20re-adding\x20the\x20guard\x20with\x20the\x20stamp\x20pinned,\x20no\x20new\x20guard\x20needed).\x20PER-ORDER\x20ENTITLEMENT\x20ROW\x20(WINDOW-1\x20tier-predicate\x20half):\x20a\x20tier-scoped\x20promise\x20(\x27tier\x20X\x20enjoys\x20Y\x27)\x20becomes\x20constructive\x20by\x20writing\x20a\x20per-order\x20entitlement\x20row\x20at\x20settle\x20time\x20—\x20key\x20=\x20order\x20id,\x20value\x20=\x20U256\x20tier\x20id,\x20riding\x20the\x20SAME\x20settle-evidence\x20write\x20—\x20and\x20adding\x20a\x20keys_where\x20presence\x20leg\x20on\x20that\x20row\x20to\x20the\x20tier\x27s\x20claim\x20guard;\x20the\x20honor\x20guard\x27s\x20historical\x20period\x20count\x20is\x20tier-agnostic\x20by\x20construction,\x20so\x20this\x20row\x20is\x20the\x20ONLY\x20tier\x20evidence\x20a\x20guard\x20predicate\x20can\x20read\x20—\x20upgrade\x20the\x20tier\x20wording\x20to\x20constructive\x20exactly\x20when\x20the\x20row\x20+\x20leg\x20exist,\x20else\x20drop\x20the\x20wording.\x20Word\x20promises\x20to\x20match\x20the\x20guard:\x20Reward\x20objects\x20are\x20Service-level\x20and\x20sales\x20rows\x20carry\x20no\x20reward\x20field,\x20so\x20a\x20tier-scoped\x20promise\x20(\x27tier\x20X\x20earns\x20Y\x27)\x20without\x20a\x20guard\x20leg\x20reading\x20per-order\x20repository\x20evidence\x20is\x20unenforceable\x20decoration\x20—\x20either\x20add\x20the\x20predicate\x20or\x20drop\x20the\x20wording.\x20MIGRATION\x20DISCLOSURE:\x20guards\x20freeze\x20at\x20publish\x20—\x20reward\x20pools\x20armed\x20before\x20this\x20pairing\x20lack\x20the\x20leg\x20and\x20are\x20NOT\x20retro-patched;\x20audit\x20and\x20re-arm\x20existing\x20bounty\x20pools\x20(re-add\x20the\x20same\x20guard\x20with\x20the\x20slot\x20pinned)','Anti-dark-pattern\x20selling\x20point:\x20\x27explicit\x20signature\x20every\x20period\x20—\x20no\x20silent\x20auto-renewal,\x20no\x20card-on-file\x20black\x20box\x27\x20is\x20a\x20trust\x20differentiator;\x20surface\x20it\x20in\x20the\x20listing\x20WIP\x20promise\x20and\x20onboarding\x20copy','FREE\x20TIER\x20RECIPE:\x20a\x20$0\x20membership\x20is\x20a\x20100%-waiver\x20coupon\x20(RATES\x2010000)\x20on\x20a\x20positively-priced\x20sale\x20—\x20FIRST\x20PERIOD\x20ONLY:\x20coupons\x20are\x20SINGLE-USE\x20(burned\x20at\x20buy)\x20and\x20the\x20renewal\x20path\x20has\x20NO\x20discount\x20hook\x20(the\x20renew\x20PTB\x20pays\x20payment-create\x20full\x20price;\x20the\x20order\x27s\x20discount\x20field\x20is\x20fixed\x20at\x20buy\x20and\x20never\x20re-read),\x20so\x20a\x20per-period\x20100%-coupon\x20renew\x20is\x20IMPOSSIBLE\x20by\x20design\x20(F-RENEW-NO-COUPON)\x20—\x20disclose\x20the\x20free\x20tier\x20as\x20first-period-only.\x20A\x20zero-value\x20order\x20still\x20walks\x20the\x20full\x20machine\x20lifecycle\x20(localnet\x20T8),\x20and\x20settlement\x20on\x20an\x20unfunded/emptied\x20pool\x20ABORTS\x20EZERO-14\x20(MoveAbort\x2014)\x20with\x20FULL\x20rollback\x20—\x20pool\x20untouched,\x20once-key\x20unconsumed;\x20it\x20is\x20NOT\x20a\x20silent\x20no-op.\x20To\x20re-settle\x20a\x20refunded/emptied\x20period,\x20fund\x20the\x20Allocation\x20via\x20payment\x20create\x20for_object=<order>\x20(abort-then-recover\x20leaves\x20an\x20immutable\x20two-payment\x20audit\x20trail)','DISCOUNT\x20RENEWAL\x20DISCLOSURE\x20(obligation):\x20a\x20coupon\x20discounts\x20only\x20the\x20buy\x20it\x20is\x20redeemed\x20at\x20—\x20every\x20renewal\x20re-prices\x20from\x20the\x20SKU\x20price\x20(no\x20discount\x20hook\x20exists\x20on\x20the\x20renew\x20path),\x20so\x20\x27first\x20period\x20X%\x20off,\x20then\x20standard\x27\x20MUST\x20be\x20disclosed\x20in\x20the\x20listing/WIP\x20promise\x20BEFORE\x20purchase\x20(anti-dark-pattern).\x20Standing\x20renewal\x20discounts\x20are\x20NOT\x20constructible\x20on-chain\x20—\x20never\x20promise\x20one','RAIL\x20SNAPSHOT\x20AT\x20BUY\x20(append\x20mechanics):\x20fund\x20rails\x20snapshot\x20at\x20buy\x20—\x20an\x20order\x27s\x20plan\x20is\x20frozen\x20from\x20the\x20allocator\x20state\x20at\x20purchase;\x20later\x20allocator\x20edits\x20never\x20touch\x20existing\x20orders\x20(buyer\x20protection)\x20and\x20CANNOT\x20add\x20a\x20relief\x20rail\x20to\x20live\x20orders\x20(remedies\x20for\x20existing\x20orders\x20ride\x20compensation/arbitration,\x20never\x20an\x20append).\x20Appending\x20is\x20a\x20pure-extension\x20prefix:\x20every\x20appended\x20allocator\x20requires\x20a\x20description,\x20and\x20with\x20no\x20Surplus\x20row\x20the\x20appended\x20Rates\x20must\x20sum\x20to\x20exactly\x2010000\x20(the\x20chain\x20rejects\x20otherwise)','WIP\x20PROMISE\x20FILE\x20MECHANICS:\x20the\x20listing\x20WIP\x20is\x20the\x20binding\x20commitment\x20file\x20—\x20rebinding\x20has\x20NO\x20per-item\x20op:\x20sales\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend;\x20stock\x20values\x20are\x20ABSOLUTE,\x20not\x20deltas;\x20removal\x20is\x20immediate\x20and\x20irreversible)\x20or\x20op:add\x20creates\x20a\x20NEW\x20SKU;\x20a\x20buyer\x20leaving\x20wip_hash\x20empty\x20auto-fills\x20from\x20the\x20listing\x20at\x20purchase\x20with\x20on-chain\x20verification,\x20while\x20an\x20explicit\x20hash\x20pins\x20the\x20purchase-time\x20file\x20(later\x20swaps\x20cannot\x20retroactively\x20change\x20a\x20pinned\x20order).\x20Schedule\x20promise\x20updates\x20as\x20op:set\x20full\x20rewrites,\x20never\x20in-place\x20edits','EVIDENCE\x20TIERING\x20BY\x20NETWORK:\x20ciphertext\x20→\x20sealed\x20transcript\x20→\x20signature\x20→\x20on-chain\x20proof\x20anchor\x20runs\x20on\x20any\x20network,\x20but\x20guard-verified\x20messages\x20are\x20MAINNET-only,\x20and\x20the\x20official\x20key\x20history\x20is\x20PARTITIONED\x20by\x20network\x20—\x20each\x20server\x20key\x20belongs\x20to\x20its\x20home\x20partition\x20(mainnet/testnet/localnet)\x20and\x20officialness\x20is\x20scored\x20in\x20that\x20partition\x20only\x20(serverKeysOfficialNetwork\x20names\x20it);\x20on\x20testnet/localnet\x20treat\x20the\x20chain\x20as\x20rehearsal,\x20and\x20for\x20a\x20MAINNET\x20case\x20the\x20ONLY\x20network-level\x20truth\x20is\x20an\x20on-chain\x20Proof\x20anchor\x20(proof_message\x20re-anchored\x20on\x20mainnet)\x20—\x20a\x20file-level\x20verdict\x20from\x20a\x20non-mainnet\x20partition\x20never\x20grounds\x20a\x20mainnet\x20ruling','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'evidence_refs':['test/11\x20R1-F1\x20—\x20orders\x20arrive\x20dead\x20when\x20the\x20entry\x20pair\x20is\x20missing','OFN\x20J5\x20—\x20period-1\x20is\x20already\x20escrowed\x20at\x20buy;\x20a\x20charge/confirm\x20spin\x20is\x20dead','OFN\x20#P-02\x20—\x20a\x20mid-period\x20cancel\x20deadlocks\x20the\x20escrow\x20without\x20the\x20closed_cancel\x20refund\x20rail','test/11\x20R2-F1\x20—\x20double-dip:\x20an\x20ungated\x20signer-only\x20refund\x20track\x20claims\x20escrow\x20after\x20a\x20ruling\x20paid','az-mn-261007\x20T5\x20—\x202.38\x20escrow\x20stranded\x20at\x20reviewed\x20without\x20the\x20merchant-recovery\x20rail','OFN\x20#P-03\x20—\x20two-step\x20refund\x20payout:\x20funds\x20land\x20on\x20the\x20Order\x20object','OFN\x20#P-04\x20—\x20arming\x20254\x20on\x20a\x20refund\x20rail\x20aborts\x20period\x202+\x20(E_ONCE_TRIGGERED\x2016)','test/11\x20R2-F3\x20—\x20zero-value\x20periods\x20cycle\x20on\x20an\x20unfunded\x20renewal\x20loop'],'fee_params':{'platform_take_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'grace_days':0x7,'period_days':0x1e,'dispute_window_days':0xe,'renewal_reminder_days':0x3,'threshold':0x0,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'grace_expiry':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last\x20—\x20expiry\x20at\x20period\x20DELIVERY\x20+\x20period_days\x20+\x20grace:\x20Clock\x20>=\x20delivered_entry\x20+\x20period_days*86400000\x20+\x20grace_days*86400000.\x20delivered\x20is\x20present\x20on\x20EVERY\x20path\x20class\x20that\x20can\x20reach\x20expired\x20(both\x20expire\x20edges\x20ride\x20delivered/reviewed,\x20and\x20reviewed\x27s\x20only\x20in-edge\x20is\x20delivered),\x20while\x20charging\x20is\x20RENEWAL-ONLY\x20and\x20absent\x20from\x20first-period\x20history\x20—\x20a\x20charging\x20anchor\x20aborts\x20the\x20whole\x20guard\x20with\x20W_FIELD_NOT_FOUND\x20on\x20period\x201\x20(ofn5\x20F-01,\x20MovePrimitiveRuntimeError),\x20so\x20never\x20anchor\x20a\x20history-time\x20leg\x20on\x20a\x20node\x20missing\x20from\x20ANY\x20path\x20class\x20reaching\x20the\x20guarded\x20edges\x20(path-class\x20rule,\x20generalizing\x20the\x20F-TPL-01\x20edge-scope\x20rule:\x20topological\x20reachability\x20is\x20NOT\x20enough)','dispute_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20delivery\x20ENTRY\x20timestamp\x20of\x20the\x20period\x20—\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)','renewal_reminder':'off-chain\x20keeper\x20reminder\x20(no\x20on-chain\x20timestamp\x20anchor)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20(Rate\x2010000\x20to\x20subscriber,\x20signer-locked)','R2\x20independent\x20arbitration\x20Permission\x20(contract-enforced\x20separation).\x20Venue\x20SLA\x20expectation\x20(a\x20SELECTION\x20criterion\x20—\x20the\x20dispute\x20window\x20is\x20the\x20arbitrator\x27s\x20order,\x20not\x20a\x20guard\x20this\x20build\x20mounts):\x20prefer\x20venues\x20opening\x20cases\x20within\x2014\x20days\x20of\x20delivery','R3\x20compensation\x20fund\x20with\x20award\x20recipient\x20hard-bound\x20to\x20the\x20order\x20owner','R4\x20receipt\x20confirmation\x20by\x20the\x20subscriber\x20only\x20—\x20creator\x20self-sign\x20forbidden','R5\x20period\x20payments\x20anchored\x20to\x20the\x20order\x20Allocation','R6\x20Rate\x20=\x2010000\x20single\x20recipient;\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20renewal\x20reminders\x20+\x20expiry\x20ONLY\x20(no\x20charge\x20authority)','R10\x20period\x20price\x20embedded\x20in\x20the\x20Sale;\x20no\x20silent\x20auto-charge\x20parameter\x20exists'],'keeper_dependencies':['renewal\x20reminder\x20(period\x20end\x20-\x203\x20days)','expiry\x20trigger\x20(period\x20delivery\x20+\x20period_days\x20+\x20grace)','NO\x20auto-charge\x20authority\x20by\x20design'],'recommended_role':'merchant','role_rationale':'Creators\x20own\x20the\x20subscription\x20Service\x20and\x20keep\x20100%\x20of\x20period\x20funds\x20(0%\x20take);\x20honor\x20tiers\x20are\x20Reward\x20objects\x20on\x20the\x20same\x20Service.','differences':['Tiered\x20membership:\x20honor-tier\x20Reward\x20objects\x20(claim\x20guard\x20=\x20historical\x20period\x20count\x20>=\x20N)\x20layer\x20on\x20top\x20of\x20the\x20base\x20subscription','0%\x20platform\x20take\x20on\x20the\x20base\x20template\x20—\x20revenue\x20extension\x20points\x20are\x20Reward/discount\x20add-ons\x20rather\x20than\x20a\x20take\x20rate','Per-period\x20explicit-signature\x20renewal;\x20keepers\x20remind\x20and\x20expire\x20but\x20can\x20never\x20charge'],'user_inputs':['Period\x20price\x20(embedded\x20in\x20the\x20Sale\x20structure)','period_days\x20—\x20subscription\x20period\x20length,\x20now\x20ON\x20CHAIN\x20(expiry\x20anchor\x20=\x20period\x20delivery\x20+\x20period_days\x20+\x20grace)','grace_days\x20—\x20renewal\x20grace\x20window\x20before\x20expiry','dispute_window_days\x20—\x20dispute\x20opening\x20window\x20after\x20delivery','renewal_reminder_days\x20—\x20keeper\x20reminder\x20lead\x20time','Honor-tier\x20count\x20and\x20per-tier\x20claim\x20thresholds']},{'id':'subscription/direct-fan-subscription','industry':'subscription','variant':'direct-fan-subscription','product_ref':'onlyfans','archetype':'challenger','review_mode':'review_reward','reward_claim_policy':{'kind':'once'},'phase':0x1,'payment_model':'subscription','arbitration_mode':'third_party','machine_shape':[{'name':'subscribed','role':'Entry:\x20fan\x20joins\x20(age-verified\x20via\x20Passport);\x20period-1\x20funds\x20are\x20escrowed\x20at\x20buy,\x20so\x20the\x20entry\x20join\x20forwards\x20DIRECTLY\x20to\x20delivering\x20—\x20no\x20period-1\x20charge/confirm_payment\x20spin\x20(OFN\x20J5)','semantic_role':'draft','from':['']},{'name':'charging','role':'RENEWAL\x20LOOP\x20ONLY:\x20fan\x20signs\x20the\x20next-period\x20charge\x20(explicit\x20signature\x20—\x20never\x20auto-charged);\x20period\x201\x20never\x20enters\x20here\x20(already\x20escrowed\x20at\x20buy)','operator':'order_payer','semantic_role':'active','from':[{'prev':'completed','forward':'renew','operator':'order_payer','guard_key':'period_charge'}]},{'name':'delivering','role':'Payment\x20confirmed\x20(period\x201:\x20escrowed\x20at\x20buy\x20—\x20entry\x20join\x20arrives\x20here\x20directly);\x20creator\x20produces\x20the\x20period\x20content\x20/\x20response\x20record','semantic_role':'active','from':['subscribed','charging']},{'name':'delivered','role':'Period\x20content\x20hash\x20submitted\x20(matches\x20the\x20order\x20item\x20commitment)','semantic_role':'delivered','from':[{'prev':'delivering','forward':'submit_content','permission_index':0x3e8,'guard_key':'content_hash'}]},{'name':'reviewed','role':'Fan\x20reviews\x20the\x20creator\x20this\x20period\x20(DUAL-COLUMN\x20REVIEW\x20IDIOM\x20—\x20row\x20policy\x20is\x20single-typed,\x20so\x20each\x20review\x20event\x20writes\x20TWO\x20rows\x20keyed\x20to\x20the\x20same\x20order:\x20a\x20U256\x20rating\x20row\x201-5,\x20the\x20range-queryable\x20column\x20via\x20keys_where\x20numeric\x20Range,\x20plus\x20a\x20String\x20comment\x20row,\x20presence-queryable;\x20review\x20text\x20lives\x20on-chain\x20as\x20its\x20own\x20row,\x20never\x20in\x20progress\x20history\x20—\x20the\x20service\x27s\x20review\x20reputation\x20rail).\x20Optional\x20side\x20action\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20completed;\x20a\x20fan\x20silent\x20at\x20reviewed\x20still\x20reaches\x20expired\x20via\x20the\x20keeper\x20(review\x20implies\x20delivered\x20—\x20the\x20undelivered\x20exclusion\x20below\x20is\x20preserved),\x20so\x20the\x20escrow\x20cannot\x20strand\x20(R-DEAD-END)','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'review','guard_key':'review_window'}]},{'name':'completed','role':'Fan\x20confirms\x20receipt\x20—\x20state-machine\x20release\x20replaces\x20the\x20calendar\x20freeze\x20(R4:\x20fan-only\x20confirmation)','operator':'order_payer','semantic_role':'final','from':[{'prev':'delivered','forward':'confirm','operator':'order_payer','guard_key':'release_state'},{'prev':'reviewed','forward':'confirm_after_review','operator':'order_payer','guard_key':'release_after_review'}]},{'name':'expired','role':'Period\x20delivered\x20but\x20period_days\x20+\x20grace\x20passed\x20since\x20this\x20period\x27s\x20delivery\x20without\x20renewal\x20(keeper\x20advances,\x20permission\x201002);\x20the\x20lapsed\x20period\x20settles\x20to\x20the\x20creator\x20via\x20the\x20expired_settle\x20rail','semantic_role':'final','from':[{'prev':'delivered','forward':'expire','permission_index':0x3ea,'guard_key':'period_expiry'},{'prev':'reviewed','forward':'expire_after_review','permission_index':0x3ea,'guard_key':'period_expiry'}]},{'name':'closed_cancel','role':'Fan\x20cancels\x20—\x20next-period\x20effective;\x20per-node\x20refund\x20Allocator\x20rails','operator':'order_payer','semantic_role':'cancelled','from':['subscribed','charging','delivering']}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Age-verification\x20buy\x20gate\x20(R10):\x20purchase\x20requires\x20a\x20Passport\x20with\x20qualifying\x20age\x20credentials\x20(practically:\x20the\x20buyer\x20allowlist\x20—\x20the\x20chain\x20has\x20no\x20credential*\x20query,\x20only\x20has_verified).\x20compare\x20against\x20context(Signer):\x20the\x20Order\x20does\x20not\x20exist\x20at\x20buy\x20time,\x20so\x20order.*\x20legs\x20are\x20unusable\x20here\x20(ofshop\x20F-08)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'period_charge','purpose':'Every\x20charge/renewal\x20requires\x20the\x20subscriber\x27s\x20own\x20signature\x20(signer\x20==\x20order\x20owner);\x20bound\x20on\x20the\x20completed->charging\x20renew\x20forward'},{'template_id':'pattern.repository_data_check','host':'machine','key':'content_hash','purpose':'Per-period\x20content/response-record\x20hash\x20required,\x20matching\x20the\x20order\x20item\x20commitment;\x20bound\x20on\x20the\x20delivering->delivered\x20submit\x20forward\x20AND\x20allocation.balance\x20>=\x20order.amount\x20(query\x201051,\x20object\x20{identifier:0,\x20convert_witness:\x27OrderAllocation\x27}\x20—\x20a\x20drained\x20pool\x20must\x20never\x20pass:\x20after\x20a\x20mid-period\x20refund\x20the\x20escrow\x20is\x20empty\x20and\x20fulfillment\x20must\x20stop\x20structurally,\x20ofn5\x20F-04;\x20each\x20order_renew\x20re-tops\x20the\x20balance\x20so\x20renewal\x20periods\x20still\x20pass;\x20the\x20committed-balance\x20pre-state\x20read\x20is\x20safe\x20here\x20because\x20refund\x20and\x20submit\x20are\x20distinct\x20transactions,\x20esound\x20B-1)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'release_state','purpose':'Release\x20gated\x20by\x20the\x20delivery-confirmed\x20state\x20(current\x20==\x20delivered\x20when\x20the\x20fan\x20confirms)\x20—\x20replaces\x20the\x207/21-day\x20calendar\x20freeze;\x20bound\x20on\x20the\x20delivered->completed\x20confirm\x20forward\x20plus\x20the\x20allocation.balance\x20>=\x20order.amount\x20leg\x20(query\x201051\x20+\x20witness\x20OrderAllocation\x20109,\x20ofn5\x20F-04)\x20—\x20confirm\x20precedes\x20settlement\x20on\x20the\x20golden\x20path,\x20so\x20the\x20balance\x20is\x20intact;\x20a\x20post-refund\x20zombie\x20confirm\x20is\x20blocked'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_rail','purpose':'Settlement\x20rail\x20guard:\x20current\x20==\x20completed\x20+\x20order.service\x20binding\x20—\x20shared\x20by\x20the\x20settlement\x20row\x20and\x20the\x20Rate-0\x20ORDER\x20anchor\x20row\x20(they\x20merge\x20into\x20ONE\x20allocator)'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_subscribed','purpose':'Refund\x20rail\x20node\x20gate\x20({\x22\x22,\x20\x22subscribed\x22}\x20—\x20widened\x20ofn5\x20F-11:\x20a\x20buyer\x20who\x20vanished\x20between\x20buy\x20and\x20the\x20join\x20hop\x20can\x20still\x20refund\x20—\x20the\x20\x22\x22\x20entry\x20node\x20holds\x20escrowed\x20funds\x20with\x20no\x20other\x20rail):\x20one\x20allocator\x20track\x20per\x20refundable\x20node\x20is\x20the\x20DEFAULT\x20form\x20(a\x20node\x20set\x20is\x20also\x20expressible\x20via\x20the\x20relies\x20two-level\x20tree\x20—\x20OR-subguard\x20per\x20node\x20under\x20an\x20AND\x20parent\x20—\x20when\x20one\x20shared\x20rail\x20is\x20preferred);\x20add\x20an\x20order.claimed_by\x20some==false\x20leg\x20where\x20a\x20ruling\x20must\x20preclude\x20refund\x20(test/11\x20R2-F1\x20double-dip);\x20the\x20signer==order.owner\x20leg\x20is\x20optional\x20on\x20an\x20order-anchored\x20rail\x20since\x20the\x20recipient\x20is\x20already\x20hard-bound'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_charging','purpose':'Refund\x20rail\x20node\x20gate\x20(charging)\x20—\x20same\x20shape\x20as\x20refund_subscribed'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_delivering','purpose':'Refund\x20rail\x20node\x20gate\x20(delivering)\x20—\x20the\x20mid-period\x20cancel\x20state;\x20same\x20shape\x20as\x20refund_subscribed'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_cancelled','purpose':'Refund\x20rail\x20node\x20gate\x20(closed_cancel)\x20—\x20MANDATORY:\x20a\x20mid-period\x20cancel\x20with\x20funds\x20still\x20pooled\x20matches\x20no\x20other\x20track\x20and\x20deadlocks\x20the\x20escrow\x20permanently\x20(OFN\x20mainnet\x20#P-02)'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'period_expiry','purpose':'Expiry\x20gate\x20on\x20the\x20delivered->expired\x20keeper\x20forward:\x20expiry\x20=\x20period\x20DELIVERY\x20+\x20period_days\x20+\x20grace\x20(Clock\x20>=\x20delivered-entry\x20anchor\x20+\x20period_days*86400000\x20+\x20grace_days*86400000;\x20anchor\x20=\x20progress.history.time\x201280,\x20next_node=\x27delivered\x27,\x20find=last;\x20period_days\x20is\x20the\x20new\x20fee_param\x20length\x20knob;\x20ofn5\x20F-01/F-02:\x20the\x20old\x20charging-entry\x20anchor\x20aborted\x20period\x201\x20—\x20charging\x20is\x20renewal-only\x20and\x20missing\x20from\x20first-period\x20history,\x20so\x20the\x20query\x20errored\x20W_FIELD_NOT_FOUND\x20and\x20the\x20validator\x20raised\x20MovePrimitiveRuntimeError\x20—\x20anchor\x20history-time\x20legs\x20only\x20on\x20nodes\x20reachable\x20on\x20EVERY\x20path\x20class\x20reaching\x20these\x20edges)'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Fan\x20review\x20DEADLINE\x20window\x20—\x20review\x20allowed\x20only\x20WITHIN\x2014\x20days\x20of\x20period\x20delivery,\x20a\x20CLOSING\x20window\x20anchored\x20time_window_upper_bound,\x20NOT\x20time_lock_progress\x20(the\x20opening-gate\x20twin\x20inverts\x20the\x20policy\x20—\x20az3\x20F-03;\x20catalog\x20sweep\x202026-10-19);\x20anchor\x20progress.history.time\x201280,\x20source-node\x20entry,\x20find=last.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20confirmation\x20always\x20keeps\x20the\x20unreviewed\x20path\x20delivered\x20->\x20completed,\x20and\x20a\x20fan\x20silent\x20at\x20reviewed\x20still\x20reaches\x20expired\x20via\x20the\x20keeper;\x20REVIEW\x20IMMUTABILITY\x20REALITY\x20(ofn-mn-261012\x20F-02,\x20mainnet\x20A/B\x20verified):\x20repository.data\x20is\x20an\x20UPSERT\x20key-value\x20store\x20and\x20a\x20logic_not(query(\x27repository.data\x20has\x27...))\x20leg\x20ALWAYS\x20aborts\x20at\x20the\x20write\x20site\x20(the\x20write\x20guard\x20is\x20verified\x20inside\x20the\x20same\x20PTB,\x20before\x20the\x20row\x20exists)\x20—\x20do\x20NOT\x20teach\x20or\x20emit\x20the\x20anti-overwrite\x20idiom;\x20review-row\x20write-once\x20is\x20available\x20TODAY\x20at\x20the\x20policy\x20layer\x20—\x20set\x20PolicyRule.write_once=true\x20and\x20a\x20second\x20write\x20of\x20the\x20same\x20(id,key)\x20row\x20aborts\x20with\x20E_POLICY_WRITE_ONCE_CONFLICT=24\x20(repository.move;\x20live-verified\x20amz9-ln-261023\x20TPL-07)\x20—\x20FLAG\x20the\x20policy,\x20never\x20reach\x20for\x20a\x20guard\x20leg;\x20only\x20a\x20guard-expression\x20write-once\x20for\x20flag-less\x20policies\x20remains\x20on\x20the\x20protocol\x20decision\x20list.\x20LAYERED\x20RATING-RANGE\x20RULING\x20(upw-mn-261016\x20F-01,\x20single\x20source\x20for\x20all\x20templates):\x20a\x20Repository\x20PolicyRule\x20canNOT\x20enforce\x20a\x20numeric\x20floor\x20—\x20it\x20authorizes\x20WHO\x20writes\x20(guard\x20vector\x20+\x20id_from/value_type)\x20and\x20never\x20compares\x20VALUES\x20(the\x20reported\x20\x27value\x20>=\x204\x20write\x20policy,\x20submission\x203\x20aborts\x27\x20was\x20a\x20value-type\x20TAG\x20mismatch\x20misread\x20as\x20a\x20numeric\x20floor;\x203\x20=\x20the\x20U8\x20type\x20opcode;\x20a\x201-star\x20row\x20passes\x20every\x20current\x20policy)\x20—\x20never\x20claim\x20POLICY-side\x20range\x20enforcement.\x20A\x20GUARD\x20can\x20enforce\x20the\x20floor\x20at\x20claim/advance\x20time:\x20logic_as_u256_greater_or_equal[nodes]\x20over\x20query\x201167\x20repository.data\x20(params:\x20policy-name\x20string\x20row\x20+\x20the\x20row-owner\x20Address\x20row\x20—\x20the\x20order)\x20against\x20the\x20floor\x20constant,\x20or\x20the\x20query\x201177\x20keys-where\x20probe\x20(params:\x20candidate-id\x20row\x20+\x20Range-gte\x20predicate\x20row;\x20the\x20candidate\x20id\x20IS\x20the\x20order,\x20unfakeable\x20—\x20stronger\x20than\x20tpl_repository_review_threshold_gate\x27s\x20verifier-supplied\x20candidate\x20list).\x20Binary\x20comparisons\x20take\x20nodes[],\x20logic_not\x20takes\x20node\x20singular;\x20named\x20comparison\x20queries\x20(progress.current/order.*)\x20take\x20NO\x20parameters,\x20repository\x20probes\x20take\x20exactly\x20the\x20identifier\x20parameters\x20above.\x20Word\x20an\x20enforced\x20floor\x20as\x20\x27enforced\x20by\x20the\x20claim\x20guard\x27,\x20never\x20\x27by\x20the\x20repository\x20write\x20policy\x27.\x20REVIEW-CREDENTIAL\x20MOUNT\x20(upw-mn-261014\x20F-40,\x20live;\x20crs-mn-261014\x20F-27):\x20guards\x20evaluate\x20BEFORE\x20the\x20transition,\x20so\x20this\x20edge\x20guard\x27s\x20node\x20anchor\x20is\x20the\x20PRE\x20node\x20—\x20correct\x20on\x20the\x20Review\x20forward,\x20WRONG\x20as\x20the\x20review\x20repository\x27s\x20write\x20credential:\x20reused\x20as\x20the\x20write_guard\x20it\x20only\x20passes\x20BEFORE\x20the\x20review\x20advance,\x20so\x20pressing\x20the\x20forward\x20first\x20permanently\x20kills\x20the\x20review\x20(and\x20the\x20reward)\x20for\x20that\x20order\x20with\x20no\x20rail\x20back.\x20The\x20write\x20credential\x20must\x20be\x20a\x20SEPARATE\x20guard\x20whose\x20node\x20gate\x20is\x20an\x20n-ary\x20logic_or\x20over\x20the\x20writeable\x20node\x20SET\x20(minimal\x20live-proven\x20set:\x20{accepted,\x20reviewed}\x20—\x20the\x20pre\x20node\x20plus\x20the\x20review\x20state;\x20add\x20the\x20settlement\x20terminal\x20when\x20reviews\x20must\x20survive\x20the\x20merchant\x27s\x20advance),\x20carrying\x20the\x20same\x20window\x20+\x20service\x20legs;\x20keep\x20THIS\x20guard\x20forward-only.\x20INTERIM\x20ORDERING:\x20until\x20the\x20split\x20credential\x20exists,\x20the\x20buyer\x20must\x20write\x20the\x20review\x20rows\x20BEFORE\x20pressing\x20the\x20Review\x20forward\x20—\x20surface\x20it\x20as\x20an\x20explicit\x20step\x20in\x20the\x20order\x20guidance.\x20SERIAL\x20DISCIPLINE\x20(ofn5\x20F-03):\x20expiry\x20anchors\x20on\x20the\x20SAME\x20delivered\x20entry\x20as\x20this\x20window,\x20plus\x20period_days\x20+\x20grace\x20—\x20with\x20the\x20defaults\x20(30+7=37\x20>\x2014)\x20the\x20keeper\x20expire\x20can\x20never\x20fire\x20inside\x20the\x20open\x20review\x20window;\x20keep\x20period_days\x20+\x20grace_days\x20>=\x20the\x20review\x20window\x20when\x20tuning,\x20or\x20the\x20expired\x20terminal\x20kills\x20the\x20review\x20right\x20and\x20the\x20bounty\x20with\x20it.\x20The\x20review\x20ADVANCE\x20edge\x20also\x20carries\x20the\x20allocation.balance\x20>=\x20order.amount\x20leg\x20(query\x201051):\x20review\x20always\x20precedes\x20this\x20period\x27s\x20settlement,\x20so\x20the\x20leg\x20is\x20golden-path\x20safe\x20and\x20blocks\x20post-refund\x20reviews\x20(ofn5\x20F-04).\x20Do\x20NOT\x20put\x20a\x20balance>=amount\x20leg\x20on\x20the\x20reward\x20CLAIM\x20guard\x20—\x20settlement\x20fires\x20before\x20the\x20claim\x20on\x20the\x20golden\x20path\x20(localnet\x20ofn5\x20O1\x20digest\x20order),\x20the\x20leg\x20would\x20brick\x20every\x20legitimate\x20bounty;\x20the\x20SETTLEMENT-DRAINED\x20option\x20in\x20the\x20shared\x20claim\x20purpose\x20stays\x20the\x20only\x20balance\x20idiom\x20there.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'release_after_review','purpose':'Fan\x20confirmation\x20from\x20the\x20reviewed\x20side-stop:\x20current\x20==\x20reviewed\x20+\x20order.service\x20binding\x20—\x20mirrors\x20release_state\x20so\x20a\x20confirm\x20that\x20rides\x20the\x20review\x20exit\x20cannot\x20fire\x20from\x20any\x20other\x20node\x20plus\x20the\x20allocation.balance\x20>=\x20order.amount\x20leg\x20(query\x201051\x20+\x20witness\x20OrderAllocation\x20109,\x20ofn5\x20F-04)\x20—\x20confirm\x20precedes\x20settlement\x20on\x20the\x20golden\x20path,\x20so\x20the\x20balance\x20is\x20intact;\x20a\x20post-refund\x20zombie\x20confirm\x20is\x20blocked'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'expired_settle','purpose':'Expired-period\x20settlement\x20rail\x20(D-30\x20fix:\x20expired\x20previously\x20had\x20NO\x20fund\x20exit\x20and\x20stranded\x20every\x20naturally-lapsed\x20escrow):\x20at\x20expired\x20with\x20the\x20clock\x20past\x20grace\x20the\x20creator\x20keeps\x20the\x20lapsed\x20period\x20—\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20(mature\x20subscription-market\x20semantics:\x20delivered\x20content\x20is\x20payable,\x20silence\x20is\x20churn\x20not\x20a\x20refund\x20claim)'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'awarded_recover','purpose':'Merchant-recovery\x20rail\x20shipped\x20BY\x20DEFAULT\x20(the\x20some\x20==\x20true\x20polarity\x20paired\x20with\x20every\x20refund\x20rail\x27s\x20claimed_by\x20some\x20==\x20false):\x20assert\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20+\x20order.service\x20binding\x20ONLY\x20—\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity,\x20wherever\x20the\x20fan\x20left\x20the\x20order\x20(NEVER\x20completed-only\x20—\x20an\x20awarded\x20order\x20the\x20fan\x20never\x20confirmed\x20sits\x20at\x20delivered\x20and\x20can\x20never\x20reach\x20completed,\x20ptrn-mn-261013\x20T11\x20stranded\x2020\x20that\x20way)\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2,\x20superseding\x20the\x20b9-261015\x20FULL-SET\x20teaching\x20—\x20F-51:\x20keepers\x20advance\x20orders\x20past\x20any\x20pinned\x20node;\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion);\x20exactly\x20one\x20of\x20the\x20refund\x20legs\x20(claimed_by\x20some\x20==\x20false)\x20/\x20awarded_recover\x20(claimed_by\x20some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2;\x20escrow-exit\x20invariant,\x20az-mn-261007)'},{'template_id':'pattern.allocator_order_anchor','host':'service','purpose':'Per-period\x20settlement\x20anchor:\x20one\x20Rate-0\x20{GuardIdentifier:\x200}\x20row\x20(guard_key:\x20settle_rail,\x20merged\x20into\x20the\x20settlement\x20allocator)\x20makes\x20the\x20submitted\x20ORDER\x20the\x20Guard\x27s\x20binding\x20target,\x20so\x20a\x20passport\x20from\x20a\x20sibling\x20period\x20order\x20cannot\x20re-release\x20this\x20period\x27s\x20escrow\x20(testnet\x20CR-01)\x20—\x20the\x20anchor\x20row\x20pays\x20nothing'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE}],'allocator':{'recipient':'entity','recipient_key':'creator','count':0x4,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'settle_rail','note':'Per-period\x20release\x20to\x20the\x20creator\x20at\x20completed\x20—\x200%\x20platform\x20take\x20(the\x20flip\x20of\x20the\x20incumbent\x27s\x2020%).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_rail','note':'Rate-0\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor):\x20binds\x20the\x20settlement\x20Guard\x20to\x20this\x20period\x27s\x20own\x20order;\x20pays\x20nothing.\x20Shares\x20the\x20settle_rail\x20guard\x20so\x20both\x20legs\x20fire\x20as\x20ONE\x20allocator.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_subscribed','note':'Subscriber\x20refund,\x20node\x20gate\x20{\x22\x22,\x20\x22subscribed\x22}\x20—\x20includes\x20the\x20\x22\x22\x20entry\x20node\x20so\x20a\x20buyer\x20who\x20vanished\x20before\x20the\x20join\x20hop\x20can\x20still\x20refund\x20(ofn5\x20F-11;\x20per-node\x20rails:\x20refund_subscribed/refund_charging/refund_delivering/refund_cancelled).\x20Each\x20refund\x20rail\x20arms\x20order.claimed_by\x20some\x20==\x20false\x20BY\x20DEFAULT\x20—\x20a\x20paid\x20award\x20precludes\x20refund\x20permanently\x20(the\x20some\x20==\x20true\x20polarity\x20is\x20the\x20awarded_recover\x20row).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_charging','note':'Subscriber\x20refund,\x20node\x20gate\x20charging\x20(claimed_by\x20some\x20==\x20false\x20armed\x20by\x20default,\x20paired\x20with\x20awarded_recover).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_delivering','note':'Subscriber\x20refund,\x20node\x20gate\x20delivering\x20—\x20the\x20mid-period\x20cancel\x20state\x20(claimed_by\x20some\x20==\x20false\x20armed\x20by\x20default,\x20paired\x20with\x20awarded_recover).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_cancelled','note':'Subscriber\x20refund,\x20node\x20gate\x20closed_cancel\x20(OFN\x20#P-02:\x20omitting\x20it\x20deadlocks\x20the\x20escrow\x20on\x20a\x20mid-period\x20cancel;\x20claimed_by\x20some\x20==\x20false\x20armed\x20by\x20default,\x20paired\x20with\x20awarded_recover).'},{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'expired_settle','note':'Lapsed-period\x20settlement\x20to\x20the\x20creator\x20at\x20expired\x20(D-30\x20fix\x20—\x20this\x20rail\x27s\x20absence\x20stranded\x20every\x20naturally-lapsed\x20escrow).'},{'track':'settlement','recipient':'entity','recipient_key':'creator','mode':'rate','value':0x2710,'guard_key':'awarded_recover','note':'Merchant-recovery\x20rail:\x20escrow\x20principal\x20exits\x20when\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20true);\x20node\x20gate\x20EXPANDED\x20PER\x20NODE\x20like\x20the\x20refund\x20family\x20—\x20completed-only\x20strands\x20every\x20awarded\x20order\x20the\x20fan\x20never\x20confirmed\x20(ptrn-mn-261013\x20T11);\x20exactly\x20one\x20of\x20refund/awarded\x20legs\x20can\x20pass\x20(escrow-exit\x20invariant,\x20az-mn-261007).'}],'description':'0%\x20platform\x20take\x20(the\x20flip\x20of\x20the\x20incumbent\x27s\x2020%):\x20per-period\x20release\x20Rate\x2010000\x20to\x20the\x20creator\x20at\x20completed\x20(guard\x20settle_rail,\x20with\x20the\x20Rate-0\x20GuardIdentifier(0)\x20ORDER\x20anchor\x20row\x20from\x20pattern.allocator_order_anchor\x20so\x20the\x20settlement\x20Guard\x20binds\x20the\x20period\x27s\x20own\x20order);\x20refund\x20Rate\x2010000\x20to\x20the\x20subscriber\x20on\x20FOUR\x20node-gated\x20rails\x20(subscribed/charging/delivering/closed_cancel\x20—\x20per-node\x20rails\x20are\x20the\x20default\x20form;\x20a\x20node\x20set\x20is\x20also\x20expressible\x20via\x20the\x20relies\x20two-level\x20tree;\x20closed_cancel\x20is\x20mandatory,\x20OFN\x20#P-02);\x20lapsed-period\x20settlement\x20Rate\x2010000\x20to\x20the\x20creator\x20at\x20expired\x20(expired_settle);\x20merchant-recovery\x20rail\x20on\x20claimed_by\x20(awarded_recover);\x20threshold\x20MUST\x20be\x200\x20for\x20small\x20per-period\x20amounts;\x20REPLAY\x20PROTECTION\x20(OFN\x20#P-04,\x20mainnet-proven\x20261010):\x20every\x20rail\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count]\x20—\x20the\x20history\x20count\x20is\x20monotonic,\x20unforgeable\x20and\x20cannot\x20jump).\x20NEVER\x20arm\x20254\x20on\x20refund\x20rails:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20the\x20order\x27s\x20payment\x20intake\x20never\x20rewrites,\x20so\x20the\x20OnceKey\x20is\x20identical\x20every\x20period;\x20a\x20period-2+\x20full-drain\x20retry\x20shows\x20the\x20EMPTIED-POOL\x20abort\x20(14)\x20FIRST\x20(EZERO\x20at\x20allocation.move:418\x20precedes\x20once\x20bookkeeping)\x20and\x2016\x20only\x20surfaces\x20with\x20a\x20residual\x20balance;\x20tips\x20bypass\x20the\x20Machine\x20entirely\x20(direct\x20payments\x20with\x20no\x20allocation\x20semantics)'},'key_risk':'Chargeback-funded\x20freeze\x20replaced\x20by\x20state-machine\x20release\x20—\x20funds\x20unlock\x20at\x20delivery\x20confirmation,\x20not\x20after\x20a\x20calendar\x20window','build_notes':['SALE-TIME\x20REWARD\x20PLANNING\x20(v53\x20review_reward):\x20the\x20review\x20incentive\x20is\x20configured\x20when\x20the\x20Service\x20is\x20built\x20—\x20Reward\x20object\x20+\x20funded\x20pool\x20+\x20the\x20claim\x20guard\x20mounted\x20when\x20the\x20reward\x20is\x20registered\x20on\x20the\x20Service,\x20terms\x20anchored\x20on\x20THIS\x20template\x27s\x20own\x20review\x20node\x20AND\x20the\x20settlement\x20terminal\x20(resolve\x20both\x20from\x20machine_shape\x20semantic_role\x20—\x20a\x20reviewed-only\x20leg\x20goes\x20permanently\x20false\x20once\x20settlement\x20advances\x20past\x20the\x20review\x20node)\x20+\x20review\x20content\x20hash,\x20once-per-order\x20claim\x20(REPLAY\x20GATE:\x20the\x20claim\x20guard_add\x20entries\x20must\x20carry\x20the\x20per-order\x20store_from_id\x20stamp\x20—\x20unstamped\x20entries\x20degrade\x20the\x20rail\x20to\x20once-per-buyer-for-life,\x20crs9-mn-261015\x20F-37),\x20pool\x20plan\x20=\x20fee_param\x20review_reward_pool\x20funded\x20via\x20the\x20reward_funding\x20input\x20—\x20so\x20the\x20incentive\x20is\x20perceivable\x20by\x20the\x20buyer\x20at\x20quote/buy\x20time.\x20Per-build\x20opt-out:\x20inputs.review_mode.','ENTRY\x20EDGE\x20IS\x20MANDATORY:\x20wire\x20an\x20explicit\x20pair\x20{prev_node:\x22\x22,\x20forwards:[Join]}\x20into\x20\x27subscribed\x27\x20—\x20Progress\x20starts\x20at\x20current=\x22\x22\x20and\x20the\x20first\x20hop\x20only\x20exists\x20if\x20this\x20pair\x20exists\x20(orders\x20arrive\x20dead\x20without\x20it;\x20the\x20publish\x20gate\x20blocks\x20machines\x20without\x20an\x20entry\x20pair)','PERIOD-1\x20SKIPS\x20CHARGING:\x20period-1\x20funds\x20are\x20escrowed\x20at\x20buy,\x20so\x20wire\x20the\x20join\x27s\x20onward\x20edge\x20from\x20\x27subscribed\x27\x20DIRECTLY\x20to\x20\x27delivering\x27\x20—\x20a\x20period-1\x20charge/confirm_payment\x20spin\x20is\x20a\x20dead\x20spin\x20(the\x20payment\x20it\x20would\x20confirm\x20is\x20already\x20in\x20the\x20pool).\x20The\x20\x27charging\x27\x20node\x20is\x20reachable\x20ONLY\x20via\x20the\x20renewal\x20loop','PERIOD-EXPIRY\x20ANCHOR\x20(ofn5\x20F-01/F-02):\x20the\x20period_expiry\x20time\x20leg\x20anchors\x20on\x20the\x20DELIVERED\x20entry\x20(progress.history.time\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20+\x20period_days\x20+\x20grace\x20—\x20expiry\x20=\x20period\x20DELIVERY\x20+\x20period_days\x20+\x20grace.\x20NEVER\x20anchor\x20it\x20on\x20the\x20charging\x20entry:\x20charging\x20is\x20RENEWAL-ONLY\x20and\x20absent\x20from\x20first-period\x20history,\x20so\x20the\x20history-time\x20query\x20misses\x20and\x20returns\x20W_FIELD_NOT_FOUND,\x20which\x20the\x20passport\x20validator\x20re-raises\x20as\x20a\x20MovePrimitiveRuntimeError\x20that\x20aborts\x20the\x20whole\x20guard\x20(the\x20MCP\x20side\x20mis-files\x20it\x20as\x20config_error)\x20—\x20only\x20anchor\x20a\x20history-time\x20leg\x20on\x20a\x20node\x20present\x20in\x20EVERY\x20path\x20class\x20that\x20can\x20reach\x20the\x20guarded\x20edges','DOUBLE-DIP\x20GUARD:\x20refund\x20tracks\x20must\x20be\x20node-gated\x20(AND[progress.node==<X>],\x20one\x20track\x20per\x20refundable\x20node\x20INCLUDING\x20closed_cancel\x20AND\x20expired\x20—\x20omitting\x20closed_cancel\x20deadlocks\x20the\x20escrow\x20on\x20a\x20mid-period\x20cancel\x20and\x20omitting\x20expired\x20strands\x20every\x20naturally-lapsed\x20escrow,\x20D-30\x20family;\x20the\x20signer==order.owner\x20leg\x20is\x20optional\x20—\x20the\x20order-anchored\x20recipient\x20is\x20already\x20hard-bound)\x20and\x20arm\x20the\x20identifier-255\x20\x27period-<N>\x27\x20equality\x20leg\x20for\x20replay\x20protection\x20(NEVER\x20the\x20identifier-254\x20once-for-object\x20slot\x20on\x20a\x20refund\x20rail);\x20an\x20ungated\x20signer-only\x20refund\x20track\x20lets\x20the\x20subscriber\x20claim\x20escrow\x20after\x20expiry.\x20The\x20claimed_by\x20pairing\x20ships\x20in\x20the\x20rows\x20BY\x20DEFAULT\x20—\x20refund\x20rails\x20carry\x20some==false,\x20the\x20recovery\x20row\x20carries\x20some==true;\x20adjust\x20only\x20if\x20the\x20business\x20model\x20differs\x20(order.move:213-234\x20deliberately\x20ships\x20no\x20receive-gate,\x20so\x20nothing\x20else\x20closes\x20a\x20ruling-paid\x20case).\x20FULFILLMENT-SIDE\x20BALANCE\x20LEGS\x20(ofn5\x20F-04):\x20content_hash\x20/\x20release_state\x20/\x20release_after_review\x20/\x20review_window(advance)\x20each\x20carry\x20allocation.balance\x20>=\x20order.amount\x20—\x20refund\x20drains\x20the\x20pool,\x20so\x20delivery/review/confirm\x20structurally\x20stop\x20after\x20a\x20refund;\x20the\x20residual\x20gap\x20is\x20HONEST:\x20the\x20review\x20bounty\x20is\x20not\x20balance-separable\x20(settled\x20and\x20refunded-drained\x20both\x20read\x200\x20at\x20claim\x20time\x20—\x20the\x20drained-leg\x20idiom\x20passes\x20both),\x20keep\x20the\x20reward\x20pool\x20small\x20and\x20route\x20the\x20residual\x20to\x20arbitration;\x20disclose,\x20never\x20hide','ESCROW\x20EXIT\x20INVARIANT\x20(mainnet\x20incident:\x20a\x202.38\x20escrow\x20stranded\x20at\x20reviewed):\x20the\x20refund\x20rail\x20blocks\x20once\x20an\x20award\x20has\x20ACTUALLY\x20paid\x20(claimed_by\x20some\x20==\x20false).\x20PAIR\x20it\x20with\x20a\x20merchant-recovery\x20allocator\x20at\x20build\x20time\x20—\x20a\x20separate\x20allocator\x20whose\x20guard\x20asserts\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570\x20—\x20order.claimed_by\x20some,\x20Bool)\x20plus\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-C2:\x20the\x20claimed_by\x20axis\x20alone\x20carries\x20the\x20exclusion,\x20a\x20pinned\x20node\x20literal\x20sealed\x20a\x20live\x20rail\x20for\x201.0\x20WOW)\x20—\x20paying\x20Rate\x2010000\x20to\x20the\x20creator\x20Entity\x20—\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20awarded\x20order\x20still\x20exits;\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass.\x20The\x20alternative\x20closure\x20with\x20the\x20identical\x20guarantee\x20lives\x20on\x20a\x20different\x20axis:\x20a\x20SERIAL\x20claim_window\x20node\x20between\x20delivery\x20and\x20payout\x20(state-based\x20release\x20—\x20payout\x20waits\x20out\x20the\x20dispute\x20window).\x20Pick\x20ONE\x20axis\x20per\x20rail\x20family;\x20both\x20are\x20chain-validated\x20(ptrn2\x20T6/T14)','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20tracks\x20pay\x20GuardIdentifier(0)\x20—\x20funds\x20land\x20ON\x20the\x20Order\x20object,\x20not\x20in\x20the\x20subscriber\x27s\x20wallet;\x20the\x20subscriber\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Order-anchored\x20payout\x20is\x20deliberate\x20(the\x20refund\x20stays\x20bound\x20to\x20the\x20order\x20even\x20across\x20wallet\x20rotation);\x20the\x20second\x20step\x20must\x20be\x20surfaced\x20in\x20the\x20storefront\x20UX','REPLAY\x20PROTECTION\x20(mainnet-proven):\x20every\x20rail\x20—\x20settlement\x20AND\x20refund\x20—\x20arms\x20the\x20identifier-255\x20once-per-period\x20slot\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count];\x20the\x20history\x20count\x20is\x20monotonic\x20and\x20unforgeable,\x20so\x20each\x20period\x20gets\x20a\x20fresh\x20OnceKey).\x20NEVER\x20arm\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20the\x20order\x27s\x20payment\x20intake\x20never\x20rewrites,\x20so\x20the\x20OnceKey\x20is\x20identical\x20in\x20every\x20period\x20and\x20refund\x20period\x202+\x20strands\x20the\x20escrow\x20—\x20the\x20255\x20period-<N>\x20leg\x20above\x20is\x20the\x20PRIMARY\x20protection.\x20OBSERVABILITY\x20(diagnose\x20by\x20this,\x20T9):\x20a\x20full-drain\x20retry\x20shows\x20the\x20EMPTIED-POOL\x20abort\x20(14)\x20FIRST\x20because\x20EZERO\x20(allocation.move:418)\x20precedes\x20once\x20bookkeeping\x20—\x2014\x20on\x20a\x20refund\x20replay\x20IS\x20the\x20254-replay\x20signature;\x2016\x20(E_ONCE_TRIGGERED)\x20only\x20surfaces\x20when\x20a\x20residual\x20balance\x20keeps\x20the\x20pool\x20alive','RENEWAL\x20=\x20ONE\x20PTB\x20(the\x20declared\x20re-fund\x20convention):\x20use\x20the\x20order\x20call\x27s\x20`order_renew`\x20field\x20—\x20it\x20pays\x20the\x20period\x20amount\x20into\x20the\x20Allocation\x20and\x20advances\x20the\x20renew\x20forward\x20(fund\x20+\x20record\x20+\x20advance\x20in\x20a\x20single\x20step);\x20the\x20legacy\x203-transaction\x20split\x20left\x20a\x20window\x20where\x20the\x20loop\x20could\x20advance\x20without\x20funding.\x20PRE-STATE\x20CONSTRAINT\x20(esound-mn-261021\x20B-1,\x20mainnet-verified):\x20guards\x20on\x20the\x20renew\x20forward\x20read\x20the\x20COMMITTED\x20pre-transaction\x20balance\x20—\x20the\x20same-PTB\x20payment\x20is\x20INVISIBLE\x20to\x20them,\x20so\x20the\x20renew\x20forward\x20must\x20never\x20carry\x20an\x20allocation.balance\x20gate\x20(identity/signer\x20guards\x20are\x20fine)','State\x20replaces\x20time:\x20release\x20is\x20gated\x20by\x20the\x20delivery-confirmed\x20state,\x20not\x20a\x207/21-day\x20calendar\x20freeze;\x20signature\x20payments\x20eliminate\x20the\x20chargeback\x20category\x20entirely','Age\x20verification\x20(R10):\x20the\x20buy\x20guard\x20requires\x20a\x20Passport\x20with\x20qualifying\x20age\x20credentials;\x20the\x20credential\x20issuer\x20(KYC\x20provider)\x20is\x20off-chain\x20—\x20the\x20only\x20non-on-chain-able\x20link','Creator\x20onboarding\x20=\x20identity\x20Passport\x20+\x20permission\x20grant\x20(verification\x20standards\x20declared\x20in\x20the\x20deployment\x20checklist)','Three\x20sub-templates:\x20pay-per-view\x20(5\x20nodes,\x20its\x20own\x20Service\x20—\x20single\x20Machine\x20binding\x20per\x20Service),\x20paid\x20messaging\x20(subscription\x20skeleton\x20with\x20response-record\x20delivery),\x20tips\x20(direct\x20payment,\x20no\x20Machine)','Paid-messaging\x20response\x20obligations\x20are\x20SOFT\x20clauses:\x20response-time\x20promises\x20are\x20not\x20deterministic,\x20so\x20encode\x20them\x20as\x20written\x20promises\x20in\x20the\x20listing\x20WIP\x20(never\x20as\x20Guards);\x20a\x20missed\x20response\x20is\x20an\x20ordinary\x20dispute\x20and\x20routes\x20to\x20Arbitration','Content\x20compliance\x20boundary:\x20only\x20hashes\x20on-chain;\x20content\x20bodies\x20live\x20off-chain\x20—\x20content\x20governance\x20is\x20structurally\x20out\x20of\x20scope\x20for\x20on-chain\x20objects','Disputes\x20route\x20to\x20Arbitration\x20(open\x20voting\x20default);\x20multi-period\x20disputes\x20split\x20per\x20period\x20(award\x20cap\x203x\x20period\x20amount)','Anti-dark-pattern\x20selling\x20point:\x20every\x20renewal\x20requires\x20the\x20subscriber\x27s\x20explicit\x20signature\x20—\x20surface\x20\x27no\x20silent\x20auto-renewal\x27\x20in\x20the\x20listing\x20WIP\x20promise','FREE\x20TIER\x20RECIPE:\x20a\x20$0\x20tier\x20is\x20a\x20100%-waiver\x20coupon\x20(RATES\x2010000)\x20on\x20a\x20positively-priced\x20sale\x20—\x20FIRST\x20PERIOD\x20ONLY:\x20coupons\x20are\x20SINGLE-USE\x20(burned\x20at\x20buy)\x20and\x20the\x20renewal\x20path\x20has\x20NO\x20discount\x20hook\x20(the\x20renew\x20PTB\x20pays\x20payment-create\x20full\x20price;\x20the\x20order\x27s\x20discount\x20field\x20is\x20fixed\x20at\x20buy\x20and\x20never\x20re-read),\x20so\x20a\x20per-period\x20100%-coupon\x20renew\x20is\x20IMPOSSIBLE\x20by\x20design\x20(F-RENEW-NO-COUPON)\x20—\x20disclose\x20the\x20free\x20tier\x20as\x20first-period-only.\x20A\x20zero-value\x20order\x20still\x20walks\x20the\x20full\x20machine\x20lifecycle\x20(localnet\x20T8),\x20and\x20settlement\x20on\x20an\x20unfunded/emptied\x20pool\x20ABORTS\x20EZERO-14\x20(MoveAbort\x2014)\x20with\x20FULL\x20rollback\x20—\x20pool\x20untouched,\x20once-key\x20unconsumed;\x20it\x20is\x20NOT\x20a\x20silent\x20no-op.\x20To\x20re-settle\x20a\x20refunded/emptied\x20period,\x20fund\x20the\x20Allocation\x20via\x20payment\x20create\x20for_object=<order>\x20(abort-then-recover\x20leaves\x20an\x20immutable\x20two-payment\x20audit\x20trail)','DISCOUNT\x20RENEWAL\x20DISCLOSURE\x20(obligation):\x20a\x20coupon\x20discounts\x20only\x20the\x20buy\x20it\x20is\x20redeemed\x20at\x20—\x20every\x20renewal\x20re-prices\x20from\x20the\x20SKU\x20price\x20(no\x20discount\x20hook\x20exists\x20on\x20the\x20renew\x20path),\x20so\x20\x27first\x20period\x20X%\x20off,\x20then\x20standard\x27\x20MUST\x20be\x20disclosed\x20in\x20the\x20listing/WIP\x20promise\x20BEFORE\x20purchase\x20(anti-dark-pattern).\x20Standing\x20renewal\x20discounts\x20are\x20NOT\x20constructible\x20on-chain\x20—\x20never\x20promise\x20one','RAIL\x20SNAPSHOT\x20AT\x20BUY\x20(append\x20mechanics):\x20fund\x20rails\x20snapshot\x20at\x20buy\x20—\x20an\x20order\x27s\x20plan\x20is\x20frozen\x20from\x20the\x20allocator\x20state\x20at\x20purchase;\x20later\x20allocator\x20edits\x20never\x20touch\x20existing\x20orders\x20(buyer\x20protection)\x20and\x20CANNOT\x20add\x20a\x20relief\x20rail\x20to\x20live\x20orders\x20(remedies\x20for\x20existing\x20orders\x20ride\x20compensation/arbitration,\x20never\x20an\x20append).\x20Appending\x20is\x20a\x20pure-extension\x20prefix:\x20every\x20appended\x20allocator\x20requires\x20a\x20description,\x20and\x20with\x20no\x20Surplus\x20row\x20the\x20appended\x20Rates\x20must\x20sum\x20to\x20exactly\x2010000\x20(the\x20chain\x20rejects\x20otherwise)','WIP\x20PROMISE\x20FILE\x20MECHANICS:\x20the\x20listing\x20WIP\x20is\x20the\x20binding\x20commitment\x20file\x20—\x20rebinding\x20has\x20NO\x20per-item\x20op:\x20sales\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend;\x20stock\x20values\x20are\x20ABSOLUTE,\x20not\x20deltas;\x20removal\x20is\x20immediate\x20and\x20irreversible)\x20or\x20op:add\x20creates\x20a\x20NEW\x20SKU;\x20a\x20buyer\x20leaving\x20wip_hash\x20empty\x20auto-fills\x20from\x20the\x20listing\x20at\x20purchase\x20with\x20on-chain\x20verification,\x20while\x20an\x20explicit\x20hash\x20pins\x20the\x20purchase-time\x20file\x20(later\x20swaps\x20cannot\x20retroactively\x20change\x20a\x20pinned\x20order).\x20Schedule\x20promise\x20updates\x20as\x20op:set\x20full\x20rewrites,\x20never\x20in-place\x20edits','EVIDENCE\x20TIERING\x20BY\x20NETWORK:\x20ciphertext\x20→\x20sealed\x20transcript\x20→\x20signature\x20→\x20on-chain\x20proof\x20anchor\x20runs\x20on\x20any\x20network,\x20but\x20guard-verified\x20messages\x20are\x20MAINNET-only,\x20and\x20the\x20official\x20key\x20history\x20is\x20PARTITIONED\x20by\x20network\x20—\x20each\x20server\x20key\x20belongs\x20to\x20its\x20home\x20partition\x20(mainnet/testnet/localnet)\x20and\x20officialness\x20is\x20scored\x20in\x20that\x20partition\x20only\x20(serverKeysOfficialNetwork\x20names\x20it);\x20on\x20testnet/localnet\x20treat\x20the\x20chain\x20as\x20rehearsal,\x20and\x20for\x20a\x20MAINNET\x20case\x20the\x20ONLY\x20network-level\x20truth\x20is\x20an\x20on-chain\x20Proof\x20anchor\x20(proof_message\x20re-anchored\x20on\x20mainnet)\x20—\x20a\x20file-level\x20verdict\x20from\x20a\x20non-mainnet\x20partition\x20never\x20grounds\x20a\x20mainnet\x20ruling','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20sale\x20item\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net;\x2010\x20files\x20per\x20account,\x206-month\x20retention,\x20files\x20persist\x20until\x20manual\x20purge),\x20or\x20host\x20your\x20own\x20endpoint\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20website)\x20for\x20long-lived\x20mainnet\x20listings.\x20A\x20publicly\x20reachable\x20wip\x20prevents\x20order-time\x20fetch\x20failures,\x20and\x20on\x20mainnet\x20an\x20empty\x20wip\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.'],'evidence_refs':['test/11\x20R1-F1\x20—\x20orders\x20arrive\x20dead\x20when\x20the\x20entry\x20pair\x20is\x20missing','OFN\x20J5\x20—\x20period-1\x20is\x20already\x20escrowed\x20at\x20buy;\x20a\x20charge/confirm\x20spin\x20is\x20dead','OFN\x20#P-02\x20—\x20a\x20mid-period\x20cancel\x20deadlocks\x20the\x20escrow\x20without\x20the\x20closed_cancel\x20refund\x20rail','test/11\x20R2-F1\x20—\x20double-dip:\x20an\x20ungated\x20signer-only\x20refund\x20track\x20claims\x20escrow\x20after\x20a\x20ruling\x20paid','az-mn-261007\x20T5\x20—\x202.38\x20escrow\x20stranded\x20at\x20reviewed\x20without\x20the\x20merchant-recovery\x20rail','OFN\x20#P-03\x20—\x20two-step\x20refund\x20payout:\x20funds\x20land\x20on\x20the\x20Order\x20object','OFN\x20#P-04\x20—\x20arming\x20254\x20on\x20a\x20refund\x20rail\x20aborts\x20period\x202+\x20(E_ONCE_TRIGGERED\x2016)','OFN\x20J3\x20—\x20the\x20legacy\x203-transaction\x20renewal\x20split\x20left\x20an\x20unfunded-advance\x20window'],'fee_params':{'platform_take_bps':0x0,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'incumbent_take_bps':0x7d0,'dispute_window_days':0xe,'grace_days':0x7,'period_days':0x1e,'threshold':0x0,'review_reward_pool':0x64,'reward_claim_window_days':0xe},'time_anchors':{'grace_expiry':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last\x20—\x20expiry\x20at\x20period\x20DELIVERY\x20+\x20period_days\x20+\x20grace:\x20Clock\x20>=\x20delivered_entry\x20+\x20period_days*86400000\x20+\x20grace_days*86400000.\x20delivered\x20is\x20present\x20on\x20EVERY\x20path\x20class\x20that\x20can\x20reach\x20expired\x20(both\x20expire\x20edges\x20ride\x20delivered/reviewed,\x20and\x20reviewed\x27s\x20only\x20in-edge\x20is\x20delivered),\x20while\x20charging\x20is\x20RENEWAL-ONLY\x20and\x20absent\x20from\x20first-period\x20history\x20—\x20a\x20charging\x20anchor\x20aborts\x20the\x20whole\x20guard\x20with\x20W_FIELD_NOT_FOUND\x20on\x20period\x201\x20(ofn5\x20F-01,\x20MovePrimitiveRuntimeError),\x20so\x20never\x20anchor\x20a\x20history-time\x20leg\x20on\x20a\x20node\x20missing\x20from\x20ANY\x20path\x20class\x20reaching\x20the\x20guarded\x20edges\x20(path-class\x20rule,\x20generalizing\x20the\x20F-TPL-01\x20edge-scope\x20rule:\x20topological\x20reachability\x20is\x20NOT\x20enough)','dispute_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27delivered\x27,\x20find=last)\x20delivery\x20ENTRY\x20timestamp\x20of\x20the\x20period\x20—\x20the\x20entry\x20record\x20is\x20immutable,\x20while\x201272\x20current_time\x20drifts\x20(rewritten\x20every\x20migration,\x20ETS-C)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20—\x20the\x20platform-level\x20answer\x20to\x20\x27no\x20refund\x20policy\x20+\x20chargeback\x20pass-through\x27','R2\x20independent\x20arbitration\x20Permission\x20(testnet\x20lesson\x20hardened\x20into\x20the\x20contract).\x20Venue\x20SLA\x20expectation\x20(a\x20SELECTION\x20criterion\x20—\x20the\x20dispute\x20window\x20is\x20the\x20arbitrator\x27s\x20order,\x20not\x20a\x20lever\x20this\x20build\x20tunes):\x20prefer\x20venues\x20with\x20an\x20explicit\x2014-day\x20default\x20window','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner','R4\x20receipt\x20confirmation\x20by\x20the\x20subscriber\x20only\x20—\x20creator\x20self-sign\x20forbidden','R5\x20period\x20payments\x20anchored\x20to\x20the\x20order\x20Allocation','R6\x20Rate\x20=\x2010000;\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20full\x20configuration\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20reminders/expiry\x20only\x20(no\x20charge\x20authority)','R10\x20age-verification\x20buy\x20guard\x20(Passport\x20credentials)'],'keeper_dependencies':['renewal\x20reminder\x20(period\x20end\x20-\x203\x20days)','expiry\x20trigger\x20(period\x20delivery\x20+\x20period_days\x20+\x20grace)','NO\x20auto-charge\x20authority\x20by\x20design'],'recommended_role':'merchant','role_rationale':'Creators\x20own\x20the\x20subscription\x20Service\x20with\x200%\x20take;\x20age-verification\x20credentials\x20gate\x20purchases\x20via\x20Passport.','differences':['State-machine\x20release\x20replaces\x20the\x20calendar\x20freeze:\x20funds\x20unlock\x20at\x20delivery\x20confirmation,\x20not\x20after\x20a\x20window;\x20signature\x20payments\x20eliminate\x20the\x20chargeback\x20category','Age-verification\x20buy\x20gate\x20via\x20Passport\x20credentials\x20(R10)\x20—\x20the\x20credential\x20issuer\x20is\x20the\x20only\x20off-chain\x20link','Interaction\x20monetization\x20sub-templates:\x20pay-per-view\x20(own\x20Service),\x20paid\x20messaging\x20(response-record\x20delivery),\x20tips\x20(direct\x20payment,\x20no\x20Machine)'],'user_inputs':['period_days\x20—\x20subscription\x20period\x20length,\x20now\x20ON\x20CHAIN\x20(expiry\x20anchor\x20=\x20period\x20delivery\x20+\x20period_days\x20+\x20grace)','dispute_window_days\x20—\x20extendable\x20for\x20new\x20creators\x20as\x20a\x20risk\x20lever','grace_days\x20—\x20renewal\x20grace\x20window\x20before\x20expiry','incumbent_take_bps\x20—\x20the\x20displaced\x20platform\x27s\x2020%\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_take_bps\x20(KEEP\x20AT\x200),\x20no\x20allocator\x20row\x20reads\x20the\x20benchmark','Age-credential\x20issuer\x20selection\x20(KYC\x20provider,\x20off-chain)','Sub-template\x20selection:\x20pay-per-view\x20/\x20paid\x20messaging\x20/\x20tips']},{'id':'licensing/royalty-stream-auction','industry':'licensing','variant':'royalty-stream-auction','product_ref':'royalty-exchange','archetype':'leader','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','review_mode':'none','machine_shape':[{'name':'escrowed','role':'Entry:\x20the\x20off-chain-resolved\x20auction\x20WINNER\x20buys\x20the\x20royalty\x20share\x20at\x20the\x20winning\x20price;\x20the\x20purchase\x20funds\x20are\x20escrowed\x20atomically\x20at\x20buy\x20(Order.amount\x20=\x20winning\x20bid).\x20🔴\x20AUCTION\x20GAP\x20—\x20the\x20chain\x20has\x20NO\x20bid\x20ledger\x20/\x20highest-bidder\x20primitive,\x20so\x20there\x20is\x20NO\x20on-chain\x20bidding\x20state\x20and\x20NO\x20unpaid-reservation\x20node:\x20the\x20winner\x20is\x20resolved\x20OFF-chain,\x20added\x20to\x20the\x20buy\x20allowlist,\x20then\x20buys\x20in\x20ONE\x20PTB.\x20The\x20royalty\x20share\x20is\x20held\x20in\x20escrow\x20pending\x20the\x20inspection\x20window.','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'terms_delivered','role':'Rights-holder\x20delivers\x20the\x20license-grant\x20artifact:\x20the\x20signed\x20license\x20terms\x20+\x20the\x20royalty-share\x20certificate\x20hash,\x20written\x20to\x20the\x20evidence\x20Repository\x20and\x20anchored\x20as\x20the\x20listing\x20WIP.\x20This\x20is\x20WHAT\x20was\x20sold\x20—\x20the\x20buyer\x20inspects\x20it\x20against\x20the\x20representation\x20before\x20the\x20price\x20releases.','semantic_role':'active','from':[{'prev':'escrowed','forward':'DeliverTerms','operator':'merchant','permission_index':0x3e8,'guard_key':'grant_artifact'}]},{'name':'granted','role':'Settlement\x20terminal:\x20the\x20buyer\x20accepts\x20the\x20grant\x20(rights\x20are\x20as\x20represented)\x20OR\x20the\x20inspection_window_days\x20time-lock\x20auto-accepts\x20(a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow).\x20The\x20settlement\x20Allocator\x20releases\x20the\x20escrowed\x20purchase\x20price\x20and\x20SPLITS\x20it\x20among\x20the\x20rights-holder\x20Entities\x20per\x20the\x20Rate\x20plan\x20(primary_holder_bps\x20+\x20co_holder_bps\x20==\x2010000).\x20A\x20POST-settlement\x20buyer-won\x20ruling\x20re-routes\x20the\x20order\x20via\x20the\x20ArbRefund\x20edge\x20to\x20license_cancelled\x20(guard\x20arb_refund_settled):\x20the\x20escrow\x20is\x20already\x20drained,\x20so\x20the\x20compensation\x20rides\x20the\x20compensation-fund\x20payout\x20(order\x20compensate\x20sets\x20claimed_by,\x20which\x20closes\x20the\x20license_refund\x20rail\x20and\x20opens\x20recover_gate\x20for\x20any\x20residual\x20principal)\x20—\x20execute\x20the\x20fund\x20indemnity\x20BEFORE\x20the\x20machine\x20advance.','semantic_role':'final','from':[{'prev':'terms_delivered','forward':'AcceptGrant','operator':'order_payer','guard_key':'accept_grant'},{'prev':'terms_delivered','forward':'AutoAcceptGrant','operator':'merchant','permission_index':0x3ea,'guard_key':'inspection_timeout'}]},{'name':'license_cancelled','role':'Refund\x20terminal:\x20the\x20buyer\x20cancels\x20before\x20delivery,\x20REJECTS\x20the\x20grant\x20within\x20the\x20inspection\x20window\x20(rights\x20not\x20as\x20represented),\x20or\x20a\x20third-party\x20Arbitration\x20ruling\x20awards\x20a\x20refund.\x20The\x20whole\x20escrowed\x20purchase\x20price\x20refunds\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x200\x20—\x20the\x20submitted\x20Order).\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20without\x20the\x20guard\x20chain\x20(R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'escrowed','forward':'CancelBeforeDelivery','operator':'order_payer','guard_key':'cancel_escrowed'},{'prev':'terms_delivered','forward':'RejectGrant','operator':'order_payer','guard_key':'reject_grant'},{'prev':'terms_delivered','forward':'ArbRefund','operator':'merchant','permission_index':0x3ea,'guard_key':'arb_refund'},{'prev':'granted','forward':'ArbRefund','operator':'merchant','permission_index':0x3ea,'guard_key':'arb_refund_settled'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Auction-winner\x20/\x20qualified-licensee\x20buy\x20gate:\x20the\x20AUCTION\x20is\x20resolved\x20OFF-CHAIN\x20(🔴\x20GAP\x20—\x20no\x20on-chain\x20bid\x20ledger),\x20so\x20the\x20winning\x20bidder\x20is\x20added\x20to\x20this\x20allowlist\x20(Address-vector\x20table\x20constant)\x20and\x20ONLY\x20they\x20can\x20buy\x20at\x20the\x20winning\x20price.\x20Optionally\x20a\x20territory/qualification\x20Passport.\x20This\x20is\x20a\x20POST-auction\x20purchase\x20gate,\x20never\x20an\x20on-chain\x20ascending\x20auction\x20—\x20do\x20not\x20represent\x20it\x20as\x20a\x20live\x20bid\x20market.\x20An\x20open\x20listing\x20drops\x20the\x20allowlist\x20via\x20guard_resolutions.'},{'template_id':'pattern.repository_data_check','host':'machine','key':'grant_artifact','purpose':'License-grant\x20artifact\x20required\x20to\x20deliver\x20terms\x20(escrowed→terms_delivered):\x20the\x20signed\x20license\x20+\x20royalty-share\x20certificate\x20hash\x20written\x20to\x20the\x20evidence\x20Repository.\x20Anchors\x20WHAT\x20rights\x20were\x20sold\x20so\x20the\x20buyer\x20can\x20inspect\x20against\x20the\x20representation\x20and\x20a\x20later\x20dispute\x20has\x20an\x20on-chain\x20artifact\x20to\x20read.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'accept_grant','purpose':'Buyer\x20accepts\x20the\x20grant\x20within\x20the\x20inspection\x20window\x20(signer\x20==\x20order\x20owner)\x20→\x20granted;\x20the\x20settlement\x20release\x20fires.\x20Bound\x20on\x20the\x20terms_delivered→granted\x20AcceptGrant\x20forward.\x20Distinct\x20key\x20from\x20reject_grant\x20(one\x20approved\x20assertion\x20authorizes\x20exactly\x20one\x20business\x20decision,\x20M-T2).'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'inspection_timeout','purpose':'Inspection-window\x20auto-accept\x20(keeper):\x20Clock\x20>=\x20terms_delivered\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27terms_delivered\x27,\x20find=last)\x20+\x20inspection_window_days\x20—\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow;\x20the\x20rights\x20are\x20deemed\x20accepted\x20and\x20settlement\x20fires.\x20OPENING\x20gate\x20(time_lock_progress),\x20anchored\x20on\x20the\x20immutable\x20terms_delivered\x20entry\x20record\x20(1272\x20current_time\x20drifts\x20every\x20migration,\x20ETS-C).'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'reject_grant','purpose':'Buyer\x20REJECTS\x20the\x20grant\x20within\x20the\x20inspection\x20window\x20(rights\x20not\x20as\x20represented):\x20signer\x20==\x20order\x20owner\x20+\x20node\x20==\x20terms_delivered\x20→\x20license_cancelled,\x20the\x20refund\x20rail\x20fires.\x20The\x20buyer\x20is\x20never\x20obliged\x20to\x20accept\x20a\x20misrepresented\x20share.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_escrowed','purpose':'Buyer\x20cancels\x20BEFORE\x20terms\x20delivery\x20(escrowed→license_cancelled):\x20signer\x20==\x20order\x20owner\x20+\x20node\x20==\x20escrowed\x20→\x20full\x20refund.\x20The\x20pre-delivery\x20walk-away.'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_refund','purpose':'Arbitration\x20awards\x20the\x20buyer\x20a\x20refund\x20PRE-settlement\x20(rights\x20misrepresentation\x20proven),\x20bound\x20to\x20the\x20terms_delivered→license_cancelled\x20ArbRefund\x20forward:\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order\x20recipient,\x20slot\x201\x20=\x20Arb\x20ruling\x20state;\x20the\x20example_table\x20carries\x20the\x20254\x20task-binding\x20row\x20—\x20edge-bound\x20guards\x20require\x20it,\x20TASKBIND-01).\x20NEVER\x20gate\x20on\x20arb.status\x20(arb_withdraw\x20advances\x20the\x20case\x20past\x20the\x2030-day\x20silence\x20window;\x20Guard+Machine\x20immutable\x20after\x20publish).\x20Disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11)\x20—\x20no\x20claim\x20node.\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE\x20—\x20the\x20twin\x20instance\x20arb_refund_settled\x20carries\x20the\x20granted→license_cancelled\x20edge.'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_refund_settled','purpose':'Arbitration\x20awards\x20the\x20buyer\x20a\x20refund\x20POST-settlement,\x20bound\x20to\x20the\x20granted→license_cancelled\x20ArbRefund\x20forward\x20(same\x20canonical\x20two-slot\x20root\x20as\x20arb_refund\x20—\x20one\x20instance\x20per\x20exit\x20edge):\x20a\x20buyer-won\x20ruling\x20arriving\x20after\x20the\x20escrow\x20split\x20must\x20still\x20re-route\x20the\x20order\x20out\x20of\x20the\x20success\x20terminal.\x20The\x20escrow\x20is\x20DRAINED\x20at\x20this\x20point\x20—\x20the\x20refund\x20rail\x20has\x20nothing\x20to\x20pay;\x20the\x20actual\x20compensation\x20rides\x20the\x20compensation-fund\x20payout\x20(order\x20compensate,\x20claimed_by\x20set\x20→\x20license_refund\x20polarity-closes,\x20recover_gate\x20sweeps\x20any\x20residual\x20principal\x20to\x20the\x20rights-holder).\x20Keeper\x20discipline:\x20execute\x20the\x20fund\x20indemnity\x20FIRST,\x20then\x20advance\x20the\x20machine\x20—\x20the\x20advance\x20alone\x20moves\x20state,\x20never\x20money.'},{'template_id':'tpl_write_guard_type_check','host':'repository','key':'repo_write','policy':{'name':'evidence','id_from':'none','value_type':'String'},'purpose':'Evidence\x20Repository\x20write_guard,\x20EXECUTABLE\x20(tpl_write_guard_type_check:\x20the\x20Signer\x20must\x20equal\x20the\x20submitted\x20writer\x20address\x20and\x20the\x20writer\x20must\x20not\x20be\x20the\x20EntityRegistrar\x20system\x20address)\x20—\x20repository.move\x20only\x20asserts\x20the\x20write_guard\x20LIST\x20is\x20non-empty\x20(E_POLICY_WRITE_GUARD_REQUIRED=22),\x20never\x20what\x20a\x20listed\x20guard\x20proves,\x20so\x20an\x20unresolved\x20placeholder\x20here\x20is\x20an\x20OPEN\x20write\x20a\x20counterparty\x20could\x20pre-write\x20the\x20grant-artifact\x20row\x20through\x20to\x20satisfy\x20the\x20delivery\x20gate.\x20Row\x20keying:\x20id_from\x20none\x20—\x20the\x20caller\x20supplies\x20the\x20ORDER\x20address\x20as\x20the\x20data\x20key,\x20one\x20evidence\x20row\x20per\x20order;\x20the\x20grant_artifact\x20delivery\x20gate\x20reads\x20the\x20row\x20FOR\x20THIS\x20ORDER\x20(rex-mn-261021\x20live-proven).\x20Writer\x20binding\x20is\x20via\x20this\x20write_guard\x20LIST,\x20not\x20the\x20row\x20key.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_grant','purpose':'Settlement\x20allocator\x20gate,\x20bound\x20to\x20the\x20settlement\x20rows\x20(guard_key\x20settle_grant):\x20progress.current\x20==\x20granted\x20(the\x20terminal)\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false.\x20SPLITS\x20the\x20escrowed\x20purchase\x20price\x20among\x20the\x20rights-holder\x20Entities\x20(primary_holder_bps\x20+\x20co_holder_bps\x20==\x2010000).\x20One-shot\x20release\x20—\x20resolve\x20tpl_allocator_node_gate_settle_once\x20(protocol\x20254).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'license_refund','purpose':'Refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20license_refund):\x20progress.current\x20==\x20license_cancelled\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20purchase\x20price\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x200\x20—\x20the\x20submitted\x20Order;\x20slot\x20254\x20on\x20a\x20refund\x20rail\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20The\x20buyer-reject,\x20pre-delivery-cancel\x20and\x20arb-awarded\x20forwards\x20ALL\x20land\x20on\x20license_cancelled,\x20so\x20ONE\x20node-gated\x20refund\x20rail\x20serves\x20them.\x20Resolve\x20tpl_allocator_node_gate_refund.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(Order.dispute\x20is\x20append-only\x20—\x20a\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/upwc-cat-261017\x20CAT-B1+CAT-C2:\x20keepers\x20advance\x20orders\x20past\x20ANY\x20pinned\x20node\x20before\x20the\x20award\x20lands,\x20and\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion;\x20a\x20node\x20literal\x20re-seals\x20the\x20rail).\x20Pays\x20Rate\x2010000\x20to\x20the\x20primary_holder\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20license_refund\x20(claimed_by\x20some\x20==\x20false)\x20/\x20recover_gate\x20(some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion.'}],'allocator':{'recipient':'entity','recipient_key':'primary_holder','count':0x4,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'primary_holder','mode':'rate','value_from':'primary_holder_bps','guard_key':'settle_grant','note':'Primary\x20rights-holder\x20share\x20of\x20the\x20escrowed\x20purchase\x20price\x20at\x20granted\x20(primary_holder_bps,\x20default\x207000).\x20An\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deploying\x20AI;\x20a\x20zero-address\x20Entity\x20burns\x20it).'},{'track':'settlement','recipient':'entity','recipient_key':'co_holder','mode':'rate','value_from':'co_holder_bps','guard_key':'settle_grant','note':'Co-holder\x20/\x20publisher\x20/\x20co-writer\x20share\x20(co_holder_bps,\x20default\x203000).\x20primary_holder_bps\x20+\x20co_holder_bps\x20MUST\x20sum\x2010000\x20(allocation.move\x20ERATE_NOT_10000\x20—\x20Rates\x20sum\x20EXACTLY\x2010000\x20with\x20no\x20Surplus\x20leg).\x20Add\x20further\x20co-holders\x20by\x20appending\x20Rate\x20legs\x20that\x20keep\x20the\x20group\x20at\x2010000.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_grant','note':'Rate-0\x20ORDER\x20anchor\x20leg\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.\x20Rate\x20sums\x20are\x20per-Allocator,\x20so\x20the\x20anchor\x20shares\x20settle_grant.'},{'track':'settlement','recipient':'entity','recipient_key':'primary_holder','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20leg:\x20the\x20escrow\x20principal\x20of\x20an\x20AWARDED\x20order\x20(claimed_by\x20some\x20==\x20true)\x20exits\x20to\x20the\x20primary_holder\x20Entity.\x20The\x20polarity\x20twin\x20of\x20license_refund\x20—\x20exactly\x20one\x20can\x20pass\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'license_refund','note':'Full\x20refund\x20of\x20the\x20escrowed\x20purchase\x20price\x20to\x20the\x20order-anchored\x20buyer\x20at\x20license_cancelled\x20(slot\x200\x20—\x20the\x20submitted\x20Order,\x20payment_info.for_object;\x20mainnet-verified\x20executable\x20three\x20times\x20in\x20this\x20shape.\x20NEVER\x20slot\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes,\x20so\x20period\x202+\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20claimed_by\x20some\x20==\x20false;\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).\x20once_per_order\x20stops\x20a\x20replay.'}],'description':'ESCROWED\x20lump-sum\x20purchase\x20+\x20multi-holder\x20ROYALTY\x20SPLIT\x20release.\x20The\x20pool\x20holds\x20the\x20winning\x20bid\x20at\x20buy\x20and\x20releases\x20at\x20`granted`\x20(buyer\x20accept\x20or\x20inspection_window_days\x20auto-accept),\x20SPLIT\x20among\x20rights-holder\x20Entities\x20(primary_holder_bps\x20+\x20co_holder_bps\x20==\x2010000,\x20Rate\x20plan\x20—\x20allocation.move\x20ERATE_NOT_10000).\x20DIRECT-SALES:\x20platform_commission_bps\x20and\x20merchant_service_fee_bps\x20default\x200\x20(WoWok\x20takes\x20no\x20platform\x20commission;\x20the\x20rights-holders\x20keep\x20the\x20whole\x20sale,\x20split\x20between\x20themselves),\x20so\x20the\x20threshold\x20stays\x200\x20and\x20no\x20platform\x20Entity\x20is\x20required.\x20An\x20aggregator\x20(a\x20label/publisher\x20reselling\x20several\x20rights-holders)\x20may\x20charge\x20its\x20own\x20explicit,\x20disclosed\x20fee\x20to\x20a\x20NON-EMPTY\x20Entity\x20—\x20never\x20via\x20Surplus\x20(Surplus\x20calls\x20balance::withdraw_all\x20and\x20doubles\x20as\x20draining\x20the\x20pool).\x20Every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(a\x20Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20the\x20slot-0\x20refund\x20leg)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01).\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot,\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20of\x20the\x20grant-release\x20aborts\x20code\x2016.\x20TWO\x20refund\x20rails:\x20the\x20license-cancel\x20refund\x20(license_refund,\x20claimed_by\x20some\x20==\x20false)\x20and\x20the\x20merchant-recovery\x20sweep\x20(recover_gate,\x20claimed_by\x20some\x20==\x20true)\x20—\x20exactly\x20one\x20can\x20ever\x20pass\x20(escrow-exit\x20invariant,\x20D-BUG-2).\x20🔴\x20RECURRING\x20ROYALTY\x20DISTRIBUTION\x20is\x20a\x20SEPARATE\x20per-build\x20periodic\x20allocator\x20(the\x20pool\x20topped\x20up\x20via\x20the\x20renewal\x20receive\x20per\x20reporting\x20period\x20+\x20a\x20period-<N>\x20identifier-255\x20once-key),\x20NOT\x20shipped\x20in\x20this\x20one-shot\x20purchase\x20rail.'},'key_risk':'Off-chain-resolved\x20auction\x20(🔴\x20no\x20on-chain\x20bid\x20ledger)\x20settled\x20into\x20an\x20escrowed\x20purchase;\x20the\x20inspection-window\x20time-lock\x20and\x20the\x20multi-holder\x20Rate\x20split\x20protect\x20the\x20buyer\x20from\x20misrepresented\x20rights\x20before\x20the\x20price\x20releases.','build_notes':['🔴\x20OFF-CHAIN\x20AUCTION\x20RESOLUTION\x20(chain\x20GAP\x20—\x20verified\x20against\x20the\x20Move\x20source:\x20NO\x20bid\x20ledger\x20/\x20highest-bidder\x20/\x20ascending-auction\x20primitive\x20exists):\x20run\x20the\x20auction\x20OFF-chain\x20(bids\x20collected\x20in\x20the\x20listing\x27s\x20own\x20channel\x20/\x20Messenger),\x20the\x20rights-holder\x20resolves\x20the\x20winner,\x20then\x20ADD\x20the\x20winner\x20to\x20the\x20buy\x20allowlist\x20(Address-vector\x20table\x20constant)\x20so\x20ONLY\x20they\x20can\x20buy\x20at\x20the\x20winning\x20price.\x20This\x20is\x20a\x20post-auction\x20escrowed\x20purchase,\x20NOT\x20an\x20on-chain\x20auction\x20—\x20never\x20represent\x20it\x20as\x20a\x20live\x20bid\x20market.\x20An\x20on-chain\x20bid\x20primitive\x20would\x20be\x20a\x20chain\x20extension\x20(out\x20of\x20scope;\x20zero-chain-change\x20discipline).','MULTI-HOLDER\x20ROYALTY\x20SPLIT\x20(LIVE):\x20the\x20release\x20at\x20`granted`\x20splits\x20the\x20escrowed\x20purchase\x20price\x20among\x20rights-holder\x20Entities\x20via\x20the\x20Allocation\x20Rate\x20plan\x20(primary_holder_bps\x20+\x20co_holder_bps\x20==\x2010000;\x20allocation.move\x20ERATE_NOT_10000\x20—\x20Rates\x20sum\x20EXACTLY\x2010000\x20with\x20no\x20Surplus\x20leg).\x20Each\x20recipient\x20is\x20an\x20explicit\x20NON-EMPTY\x20Entity\x20(an\x20empty\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deploying\x20AI;\x20a\x20zero-address\x20Entity\x20burns\x20it).\x20Add\x20co-holders\x20by\x20appending\x20Rate\x20legs\x20that\x20keep\x20the\x20group\x20sum\x20at\x2010000.','INSPECTION-WINDOW\x20ESCROW\x20(LIVE):\x20the\x20purchase\x20price\x20is\x20escrowed\x20at\x20buy\x20and\x20releases\x20ONLY\x20after\x20the\x20buyer\x20accepts\x20the\x20grant\x20or\x20the\x20inspection_window_days\x20time-lock\x20auto-accepts\x20(tpl_time_lock_progress:\x20Clock\x20>=\x20terms_delivered\x20ENTRY\x20(progress.history.time\x201280,\x20find=last)\x20+\x20inspection_window_days).\x20The\x20buyer\x20can\x20reject\x20within\x20the\x20window\x20(rights\x20not\x20as\x20represented)\x20→\x20full\x20refund.\x20This\x20is\x20the\x20core\x20buyer\x20protection\x20against\x20a\x20misrepresented\x20royalty\x20share.','TERRITORY\x20/\x20QUALIFICATION\x20GATE\x20(LIVE):\x20the\x20buy_guard\x20allowlist\x20(pattern.identity_check_allowlist)\x20restricts\x20purchase\x20to\x20licensees\x20cleared\x20for\x20the\x20licensed\x20territory\x20/\x20qualification\x20set\x20—\x20an\x20Address-vector\x20table\x20constant\x20resolved\x20at\x20buy.\x20An\x20open\x20listing\x20drops\x20the\x20allowlist\x20via\x20guard_resolutions.','🔴\x20RECURRING\x20ROYALTY\x20DISTRIBUTION\x20(LIVE\x20mechanism,\x20mounted\x20per-build\x20—\x20NOT\x20shipped\x20in\x20this\x20one-shot\x20rail):\x20the\x20lump-sum\x20purchase\x20releases\x20at\x20`granted`;\x20ONGOING\x20royalty\x20distributions\x20to\x20the\x20buyer\x20ride\x20a\x20SEPARATE\x20periodic\x20allocator\x20—\x20the\x20pool\x20is\x20topped\x20up\x20per\x20reporting\x20period\x20via\x20the\x20renewal\x20receive\x20path\x20(balance::join)\x20and\x20distributed\x20under\x20a\x20period-<N>\x20identifier-255\x20once-key\x20(the\x20history\x20count\x20is\x20monotonic/unforgeable).\x20A\x20distribution\x20is\x20a\x20top-up\x20on\x20the\x20SAME\x20order\x27s\x20Allocation,\x20never\x20a\x20new\x20Machine\x20node\x20and\x20never\x20a\x20second\x20entry\x20edge.\x20Declare\x20it\x20only\x20when\x20the\x20shop\x20elects\x20ongoing\x20royalty\x20payouts;\x20the\x20off-chain\x20royalty\x20statement\x20stays\x20the\x20source\x20of\x20truth\x20for\x20the\x20amount.','ESCROW\x20EXIT\x20INVARIANT\x20(az-mn-261007,\x20D-BUG-2,\x20catalog-wide):\x20the\x20refund\x20rail\x20(license_refund)\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20PAIR\x20it\x20with\x20the\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20NO\x20node\x20equality\x20leg\x20—\x20UPWC-K1/CAT-B1+CAT-C2)\x20paying\x20Rate\x2010000\x20to\x20primary_holder\x20so\x20an\x20AWARDED\x20order\x27s\x20residual\x20principal\x20still\x20exits.\x20Exactly\x20one\x20of\x20the\x20two\x20can\x20ever\x20pass.','REPLAY\x20PROTECTION:\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot\x20on\x20the\x20settlement\x20allocator\x20(the\x20chain\x20derives\x20the\x20once-key\x20from\x20payment_info.for_object),\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20of\x20the\x20grant-release\x20aborts\x20code\x2016\x20(E_ONCE_TRIGGERED).\x20Refund\x20rails\x20pay\x20the\x20order-anchored\x20buyer\x20via\x20protocol\x20slot\x200\x20(the\x20submitted\x20Order;\x20mainnet-verified\x20executable\x20—\x20a\x20refund\x20rail\x20on\x20slot\x20254\x20aborts\x20E_ONCE_TRIGGERED(16)\x20from\x20period\x202,\x20OFN\x20#P-04).','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20rows\x20pay\x20GuardIdentifier(0)\x20—\x20funds\x20land\x20ON\x20the\x20Order\x20object,\x20not\x20in\x20the\x20buyer\x27s\x20wallet;\x20the\x20buyer\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Surface\x20the\x20second\x20step\x20in\x20the\x20storefront\x20UX.','LICENSE\x20TERMS\x20=\x20WIP\x20ARTIFACT:\x20the\x20binding\x20license\x20terms\x20+\x20royalty-share\x20certificate\x20are\x20anchored\x20as\x20the\x20listing\x20WIP\x20hash\x20and\x20the\x20grant_artifact\x20Repository\x20row\x20(terms_delivered).\x20Rebinding\x20has\x20NO\x20per-item\x20op:\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend),\x20op:add\x20creates\x20a\x20NEW\x20SKU.\x20Pin\x20the\x20purchase-time\x20hash\x20so\x20a\x20later\x20swap\x20cannot\x20retroactively\x20change\x20a\x20granted\x20license.','COMPLIANCE\x20(L-01):\x20a\x20royalty-stream\x20listing\x20must\x20NEVER\x20promise\x20investment\x20returns\x20or\x20promote\x20coin/token\x20price\x20—\x20it\x20sells\x20a\x20CONTRACTUAL\x20share\x20of\x20CONTRACTUAL\x20royalties.\x20Disclose\x20the\x20reporting\x20honesty:\x20off-chain\x20royalty\x20statements\x20are\x20the\x20source\x20of\x20truth\x20for\x20the\x20amount;\x20the\x20on-chain\x20split\x20executes\x20the\x20agreed\x20bps,\x20it\x20does\x20NOT\x20verify\x20the\x20underlying\x20revenue.\x20Copy\x20must\x20carry\x20\x27不构成投资建议或收益承诺\x20/\x20not\x20investment\x20advice\x20or\x20a\x20yield\x20promise\x27.','REPUTATION\x20RAIL\x20(optional):\x20review_mode\x20defaults\x20to\x20none;\x20a\x20rights-holder\x20reputation\x20review\x20rail\x20is\x20addable\x20per-build\x20via\x20inputs.review_mode=\x27review\x27\x20(an\x20OPTIONAL\x20`reviewed`\x20side-stop\x20off\x20terms_delivered\x20that\x20exits\x20back\x20to\x20the\x20settlement\x20rail\x20—\x20never\x20a\x20settlement\x20gateway,\x20R-DEAD-END).','DISPUTES\x20route\x20to\x20a\x20THIRD-PARTY\x20Arbitration\x20venue\x20(arbitration_mode\x20third_party,\x20an\x20independent\x20Permission\x20—\x20R2\x20/\x20E_ARBITRATION_PERMISSION_CONFLICT=33);\x20the\x20arb_refund\x20ruling\x20edges\x20(tpl_forward_arb_ruling_won,\x20one\x20instance\x20per\x20exit\x20edge:\x20terms_delivered→license_cancelled\x20AND\x20granted→license_cancelled)\x20re-route\x20the\x20order\x20to\x20the\x20refund\x20terminal\x20—\x20pre-settlement\x20the\x20refund\x20rail\x20pays\x20the\x20escrowed\x20price;\x20post-settlement\x20execute\x20the\x20compensation-fund\x20indemnity\x20FIRST,\x20then\x20advance\x20(the\x20escrow\x20is\x20drained,\x20the\x20advance\x20is\x20the\x20state\x20half).\x20Disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11,\x20no\x20claim\x20node).\x20Un-pause\x20the\x20Arbitration\x20after\x20deploy\x20(new\x20Arbitrations\x20default\x20bPaused=true;\x20pause:false\x20via\x20permission\x20356).','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20listing\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net),\x20or\x20self-hosted\x20(GitHub\x20Pages\x20/\x20IPFS\x20/\x20your\x20site)\x20for\x20long-lived\x20mainnet\x20listings;\x20an\x20empty\x20wip\x20on\x20mainnet\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.','SKU\x20HAS\x20NO\x20INCENTIVE\x20FIELD\x20(chain\x20fact,\x20rex-mn-261021\x20MX-T7\x20/\x20G-07):\x20the\x20on-chain\x20Sale\x20struct\x20carries\x20six\x20mandatory\x20fields\x20and\x20NO\x20`incentive`\x20field\x20—\x20a\x20good-review\x20bounty\x20or\x20any\x20\x27reward\x20perceivable\x20at\x20order\x20time\x27\x20CANNOT\x20ride\x20the\x20SKU;\x20declaring\x20one\x20is\x20a\x20rejected-field\x20wall\x20every\x20author\x20hits.\x20Express\x20it\x20(a)\x20in\x20the\x20Service\x20description\x20(panorama-visible),\x20(b)\x20in\x20the\x20WIP\x20detail\x20body,\x20and\x20(c)\x20when\x20it\x20must\x20actually\x20PAY,\x20via\x20a\x20reward\x20rail\x20(reward\x20pool\x20+\x20rating-floor\x20Repository\x20leg\x20+\x20the\x20order-anchored\x20once\x20slot)\x20—\x20never\x20as\x20a\x20Sale\x20field.','FINITE\x20STOCK\x20+\x20QUOTE2/BUY2\x20ONLY\x20(chain\x20facts,\x20rex-mn-261021\x20MX-T9):\x20`stock`\x20has\x20NO\x20infinity\x20sentinel\x20—\x20the\x20quote-time\x20check\x20asserts\x20stock\x20>=\x20quantity\x20and\x20stock\x20DECREMENTS\x20at\x20buy\x20time\x20(service.move),\x20so\x20set\x20a\x20concrete\x20integer\x20stock\x20that\x20covers\x20the\x20expected\x20winning\x20bids\x20and\x20top\x20it\x20up\x20later\x20via\x20the\x20SKU\x20set\x20op;\x20never\x20write\x20\x27∞\x27.\x20The\x20legacy\x20quote/buy\x20entrypoints\x20are\x20DISABLED\x20on\x20chain\x20(E_DEPRECATED_USE_V2,\x20abort\x2036)\x20—\x20every\x20price\x20check\x20and\x20purchase\x20MUST\x20go\x20through\x20quote2/buy2\x20(buy2\x20with\x20a\x20passport\x20when\x20a\x20buy_guard\x20is\x20set).'],'fee_params':{'primary_holder_bps':0x1b58,'co_holder_bps':0xbb8,'inspection_window_days':0x7,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'threshold':0x0,'incumbent_take_bps':0x5dc},'time_anchors':{'inspection_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27terms_delivered\x27,\x20find=last)\x20—\x20the\x20immutable\x20terms-delivered\x20ENTRY\x20timestamp;\x20inspection_window_days\x20auto-accept\x20fires\x20from\x20it\x20(1272\x20current_time\x20drifts\x20every\x20migration,\x20ETS-C)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20—\x20the\x20escrowed\x20purchase\x20price\x20refunds\x20in\x20full\x20on\x20buyer\x20reject\x20/\x20pre-delivery\x20cancel\x20/\x20arb\x20ruling\x20(license_refund,\x20slot-0\x20order-anchored)','R2\x20independent\x20THIRD-PARTY\x20arbitration\x20Permission\x20(arbitration_mode\x20third_party;\x20E_ARBITRATION_PERMISSION_CONFLICT=33)\x20—\x20rights-misrepresentation\x20disputes\x20resolve\x20at\x20a\x20venue\x20neither\x20party\x20controls','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner','R4\x20grant\x20acceptance\x20by\x20the\x20buyer\x20only\x20(accept_grant,\x20signer\x20==\x20order\x20owner)\x20—\x20rights-holder\x20self-confirm\x20forbidden;\x20the\x20inspection_window_days\x20time-lock\x20is\x20the\x20keeper\x20complement,\x20never\x20a\x20self-release','R5\x20the\x20purchase\x20price\x20and\x20every\x20royalty-split\x20leg\x20anchored\x20to\x20the\x20order\x20Allocation\x20(the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order)','R6\x20Rate\x20plan\x20sums\x2010000\x20(primary_holder_bps\x20+\x20co_holder_bps);\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20the\x20license\x20terms\x20(WIP),\x20the\x20split\x20plan\x20and\x20the\x20allowlist\x20are\x20fully\x20configured\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20inspection-window\x20auto-accept\x20and\x20the\x20arb-ruling\x20advance\x20only\x20(no\x20charge\x20authority)','R10\x20territory\x20/\x20qualification\x20buy\x20gate\x20via\x20the\x20allowlist\x20(optionally\x20a\x20Passport)','R11\x20license\x20terms\x20+\x20royalty-share\x20certificate\x20anchored\x20as\x20the\x20WIP\x20artifact\x20and\x20the\x20grant_artifact\x20Repository\x20row\x20(immutable\x20provenance\x20of\x20WHAT\x20was\x20sold)'],'keeper_dependencies':['inspection-window\x20auto-accept\x20(terms_delivered\x20entry\x20+\x20inspection_window_days)','arbitration-ruling\x20advance\x20—\x20TWO\x20exit\x20edges:\x20terms_delivered→license_cancelled\x20(pre-settlement\x20ruling;\x20the\x20refund\x20rail\x20pays\x20the\x20escrowed\x20price)\x20and\x20granted→license_cancelled\x20(post-settlement\x20ruling;\x20execute\x20the\x20compensation-fund\x20indemnity\x20FIRST,\x20then\x20advance\x20—\x20the\x20escrow\x20is\x20drained,\x20the\x20advance\x20is\x20the\x20state\x20half\x20of\x20the\x20remedy)','NO\x20auto-charge\x20authority\x20by\x20design'],'recommended_role':'merchant','role_rationale':'The\x20rights-holder\x20(or\x20their\x20label/publisher)\x20owns\x20the\x20licensing\x20Service,\x20resolves\x20the\x20off-chain\x20auction,\x20and\x20configures\x20the\x20multi-holder\x20royalty\x20split;\x20buyers\x20are\x20licensees.','differences':['Auction-SETTLED\x20lump-sum\x20purchase\x20of\x20a\x20royalty\x20SHARE\x20(vs\x20the\x20sibling\x27s\x20fixed-tier\x20direct\x20license\x20sale):\x20the\x20winner\x20is\x20resolved\x20OFF-chain\x20(🔴\x20no\x20on-chain\x20bid\x20ledger)\x20and\x20buys\x20at\x20the\x20winning\x20price\x20through\x20the\x20allowlist\x20gate','MULTI-HOLDER\x20royalty\x20split\x20at\x20release\x20(primary_holder_bps\x20+\x20co_holder_bps\x20Rate\x20plan)\x20—\x20the\x20sibling\x20splits\x20producer/publisher\x20on\x20a\x20single-tier\x20sale','An\x20INSPECTION-WINDOW\x20time-lock\x20gates\x20release\x20(the\x20buyer\x20verifies\x20the\x20rights\x20before\x20the\x20price\x20releases);\x20recurring\x20royalty\x20distributions\x20ride\x20a\x20separate\x20per-build\x20periodic\x20allocator'],'user_inputs':['primary_holder_bps\x20/\x20co_holder_bps\x20—\x20the\x20royalty\x20split\x20among\x20rights-holders\x20(MUST\x20sum\x2010000)','inspection_window_days\x20—\x20the\x20buyer\x27s\x20window\x20to\x20verify\x20the\x20rights\x20before\x20auto-accept','incumbent_take_bps\x20—\x20the\x20displaced\x20royalty-exchange/marketplace\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_commission_bps\x20(KEEP\x20AT\x200),\x20no\x20allocator\x20row\x20reads\x20the\x20benchmark','The\x20winning\x20bidder\x27s\x20address\x20(added\x20to\x20the\x20buy\x20allowlist\x20after\x20the\x20off-chain\x20auction\x20resolves)','The\x20license\x20terms\x20+\x20royalty-share\x20certificate\x20WIP\x20artifact\x20(anchored\x20at\x20buy)','Territory\x20/\x20qualification\x20set\x20for\x20the\x20allowlist\x20gate\x20(optional)','Third-party\x20Arbitration\x20venue\x20selection\x20(independent\x20Permission)']},{'id':'licensing/asset-license-metered','industry':'licensing','variant':'asset-license-metered','product_ref':'beatstars','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','review_mode':'none','machine_shape':[{'name':'licensed','role':'Entry:\x20the\x20buyer\x20purchases\x20a\x20license\x20TIER\x20(basic/premium/unlimited/exclusive\x20—\x20a\x20WIP\x20SKU)\x20for\x20the\x20digital\x20asset;\x20the\x20tier\x20price\x20is\x20escrowed\x20atomically\x20at\x20buy\x20(Order.amount\x20=\x20the\x20selected\x20tier\x20price).\x20The\x20tier\x20selects\x20the\x20PRICE\x20and\x20the\x20terms\x20artifact,\x20NOT\x20the\x20machine\x20shape\x20(one\x20Machine\x20serves\x20all\x20tiers).','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'grant_delivered','role':'The\x20producer/publisher\x20delivers\x20the\x20license\x20grant:\x20the\x20tier\x20terms\x20artifact\x20+\x20the\x20asset\x20files\x20/\x20download-credential\x20hash,\x20written\x20to\x20the\x20evidence\x20Repository.\x20🔴\x20METERED-CAPS\x20GAP\x20—\x20any\x20usage\x20cap\x20in\x20the\x20tier\x20(streams/units/monetization\x20ceiling)\x20is\x20NOT\x20self-executing\x20on\x20chain;\x20it\x20is\x20an\x20attested-counter\x20+\x20arbitration-evidence\x20obligation,\x20disclosed\x20in\x20the\x20terms.','semantic_role':'active','from':[{'prev':'licensed','forward':'DeliverGrant','operator':'merchant','permission_index':0x3e8,'guard_key':'grant_artifact'}]},{'name':'granted','role':'Settlement\x20terminal:\x20the\x20buyer\x20confirms\x20receipt\x20of\x20the\x20grant\x20OR\x20the\x20delivery_window_days\x20time-lock\x20auto-accepts\x20(a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow).\x20The\x20settlement\x20Allocator\x20releases\x20the\x20escrowed\x20tier\x20price\x20and\x20SPLITS\x20it\x20producer/publisher\x20(producer_bps\x20+\x20publisher_bps\x20==\x2010000).\x20A\x20POST-settlement\x20buyer-won\x20ruling\x20re-routes\x20the\x20order\x20via\x20the\x20ArbRefund\x20edge\x20to\x20license_cancelled\x20(guard\x20arb_refund_settled):\x20the\x20escrow\x20is\x20already\x20drained,\x20so\x20the\x20compensation\x20rides\x20the\x20compensation-fund\x20payout\x20(order\x20compensate\x20sets\x20claimed_by,\x20which\x20closes\x20the\x20license_refund\x20rail\x20and\x20opens\x20recover_gate\x20for\x20any\x20residual\x20principal)\x20—\x20execute\x20the\x20fund\x20indemnity\x20BEFORE\x20the\x20machine\x20advance.','semantic_role':'final','from':[{'prev':'grant_delivered','forward':'AcceptGrant','operator':'order_payer','guard_key':'accept_grant'},{'prev':'grant_delivered','forward':'AutoAcceptGrant','operator':'merchant','permission_index':0x3ea,'guard_key':'delivery_timeout'}]},{'name':'license_cancelled','role':'Refund\x20terminal:\x20the\x20buyer\x20cancels\x20before\x20delivery,\x20rejects\x20the\x20grant\x20(wrong\x20tier\x20/\x20asset\x20not\x20as\x20described),\x20or\x20a\x20third-party\x20Arbitration\x20ruling\x20awards\x20a\x20refund.\x20WHERE\x20THE\x20MONEY\x20GOES\x20(post-BF-14\x20dual\x20branch):\x20while\x20NO\x20fund\x20indemnity\x20has\x20been\x20claimed\x20(order.claimed_by\x20none\x20—\x20the\x20cancel\x20/\x20reject\x20paths,\x20or\x20a\x20ruling\x20not\x20yet\x20claimed),\x20the\x20WHOLE\x20escrowed\x20tier\x20price\x20refunds\x20to\x20the\x20order-anchored\x20buyer\x20via\x20the\x20license_refund\x20rail\x20(slot\x200\x20—\x20the\x20submitted\x20Order);\x20once\x20the\x20buyer\x20claims\x20the\x20compensation-fund\x20indemnity\x20(claimed_by\x20some\x20—\x20the\x20keeper\x20discipline\x20requires\x20the\x20fund\x20payout\x20FIRST\x20on\x20a\x20buyer-won\x20ruling),\x20license_refund\x20polarity-closes\x20and\x20the\x20escrow\x20principal\x20exits\x20through\x20the\x20merchant-paired\x20recover_gate\x20route.\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27,\x20R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'licensed','forward':'CancelBeforeDelivery','operator':'order_payer','guard_key':'cancel_licensed'},{'prev':'grant_delivered','forward':'RejectGrant','operator':'order_payer','guard_key':'reject_grant'},{'prev':'grant_delivered','forward':'ArbRefund','operator':'merchant','permission_index':0x3ea,'guard_key':'arb_refund'},{'prev':'granted','forward':'ArbRefund','operator':'merchant','permission_index':0x3ea,'guard_key':'arb_refund_settled'}]}],'guards':[{'template_id':'pattern.identity_check_allowlist','host':'service','key':'buy','purpose':'Territory\x20/\x20qualification\x20buy\x20gate\x20(LIVE\x20territory-allowlist\x20primitive):\x20restricts\x20purchase\x20to\x20licensees\x20cleared\x20for\x20the\x20licensed\x20territory\x20or\x20qualification\x20set\x20(Address-vector\x20table\x20constant\x20resolved\x20at\x20buy).\x20An\x20OPEN\x20store\x20(anyone\x20can\x20buy\x20a\x20tier)\x20drops\x20the\x20allowlist\x20via\x20guard_resolutions\x20—\x20the\x20benchmark\x20beat-store\x20default\x20is\x20open.'},{'template_id':'pattern.repository_data_check','host':'machine','key':'grant_artifact','purpose':'License-grant\x20artifact\x20required\x20to\x20deliver\x20(licensed→grant_delivered):\x20the\x20tier\x20terms\x20+\x20asset-files\x20/\x20download-credential\x20hash\x20written\x20as\x20an\x20ORDER-keyed\x20row\x20(data\x20key\x20=\x20this\x20order\x27s\x20address)\x20in\x20the\x20grant-evidence\x20Repository\x20(policy\x20\x27grant\x27,\x20guard\x20grant_evidence_write)\x20—\x20one\x20grant\x20row\x20per\x20order,\x20no\x20cross-order\x20collision.\x20Anchors\x20WHAT\x20was\x20licensed\x20(the\x20tier\x20and\x20its\x20usage\x20terms)\x20so\x20a\x20cap\x20dispute\x20has\x20an\x20on-chain\x20artifact\x20to\x20read.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'accept_grant','purpose':'Buyer\x20confirms\x20receipt\x20of\x20the\x20grant\x20(signer\x20==\x20order\x20owner)\x20→\x20granted;\x20the\x20settlement\x20release\x20fires.\x20Bound\x20on\x20the\x20grant_delivered→granted\x20AcceptGrant\x20forward.\x20Distinct\x20key\x20from\x20reject_grant\x20(M-T2).'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'delivery_timeout','purpose':'Delivery-window\x20auto-accept\x20(keeper):\x20Clock\x20>=\x20grant_delivered\x20ENTRY\x20(progress.history.time\x20id\x201280,\x20next_node=\x27grant_delivered\x27,\x20find=last)\x20+\x20delivery_window_days\x20—\x20a\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow.\x20OPENING\x20gate\x20(time_lock_progress),\x20anchored\x20on\x20the\x20immutable\x20grant_delivered\x20entry\x20record\x20(1272\x20current_time\x20drifts,\x20ETS-C).'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'reject_grant','purpose':'Buyer\x20REJECTS\x20the\x20grant\x20(wrong\x20tier\x20/\x20asset\x20not\x20as\x20described):\x20signer\x20==\x20order\x20owner\x20+\x20node\x20==\x20grant_delivered\x20→\x20license_cancelled,\x20the\x20refund\x20rail\x20fires.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'cancel_licensed','purpose':'Buyer\x20cancels\x20BEFORE\x20grant\x20delivery\x20(licensed→license_cancelled):\x20signer\x20==\x20order\x20owner\x20+\x20node\x20==\x20licensed\x20→\x20full\x20refund.\x20The\x20pre-delivery\x20walk-away.'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_refund','purpose':'Arbitration\x20awards\x20the\x20buyer\x20a\x20refund\x20PRE-settlement\x20(a\x20usage-cap\x20breach\x20or\x20misdescription\x20proven,\x20with\x20the\x20attested\x20counter\x20as\x20evidence),\x20bound\x20to\x20the\x20grant_delivered→license_cancelled\x20ArbRefund\x20forward:\x20arb.order\x20==\x20order\x20AND\x20arb.indemnity\x20some\x20==\x20true\x20PLUS\x20the\x20canonical\x20zero-award\x20exclusion\x20leg\x20(logic_not\x20over\x20arb.indemnity.amount\x20==\x200,\x20shipped\x20in\x20tpl_forward_arb_ruling_won\x27s\x20root\x20—\x20presence\x20alone\x20admits\x20a\x20Some(0)\x20MERCHANT-FAVOR\x20dismissal;\x20compose\x20by\x20COPY,\x20never\x20by\x20hand)\x20(TWO-SLOT:\x20slot\x200\x20=\x20Order,\x20slot\x201\x20=\x20Arb;\x20the\x20example_table\x20carries\x20the\x20254\x20task-binding\x20row,\x20TASKBIND-01).\x20NEVER\x20gate\x20on\x20arb.status.\x20Disputes\x20filed\x20OFF-Machine\x20(R-M1-11).\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE\x20—\x20the\x20twin\x20instance\x20arb_refund_settled\x20carries\x20the\x20granted→license_cancelled\x20edge.'},{'template_id':'tpl_forward_arb_ruling_won','host':'machine','key':'arb_refund_settled','purpose':'Arbitration\x20awards\x20the\x20buyer\x20a\x20refund\x20POST-settlement,\x20bound\x20to\x20the\x20granted→license_cancelled\x20ArbRefund\x20forward\x20(same\x20canonical\x20two-slot\x20root\x20as\x20arb_refund,\x20zero-award\x20exclusion\x20leg\x20included\x20—\x20one\x20instance\x20per\x20exit\x20edge):\x20a\x20buyer-won\x20ruling\x20arriving\x20after\x20the\x20producer/publisher\x20split\x20must\x20still\x20re-route\x20the\x20order\x20out\x20of\x20the\x20success\x20terminal.\x20The\x20escrow\x20is\x20DRAINED\x20at\x20this\x20point\x20—\x20the\x20refund\x20rail\x20has\x20nothing\x20to\x20pay;\x20the\x20actual\x20compensation\x20rides\x20the\x20compensation-fund\x20payout\x20(order\x20compensate,\x20claimed_by\x20set\x20→\x20license_refund\x20polarity-closes,\x20recover_gate\x20sweeps\x20any\x20residual\x20principal\x20to\x20the\x20producer\x20Entity\x20—\x20the\x20pairing\x20is\x20the\x20merchant\x27s\x20configured\x20commercial\x20choice,\x20not\x20a\x20protocol-mandated\x20direction;\x20post-BF-14\x20claimed_by\x20marks\x20a\x20CLAIMED\x20buyer-direction\x20indemnity,\x20which\x20is\x20what\x20flips\x20the\x20polarity).\x20Keeper\x20discipline:\x20execute\x20the\x20fund\x20indemnity\x20FIRST,\x20then\x20advance\x20the\x20machine\x20—\x20the\x20advance\x20alone\x20moves\x20state,\x20never\x20money.'},{'template_id':'tpl_write_guard_type_check','host':'repository','key':'grant_evidence_write','policy':{'name':'grant','id_from':'none','value_type':'String'},'purpose':'Grant-evidence\x20Repository\x20write_guard,\x20EXECUTABLE\x20(tpl_write_guard_type_check:\x20the\x20Signer\x20must\x20equal\x20the\x20submitted\x20writer\x20address\x20and\x20the\x20writer\x20must\x20not\x20be\x20the\x20EntityRegistrar\x20system\x20address)\x20—\x20repository.move\x20only\x20asserts\x20the\x20write_guard\x20LIST\x20is\x20non-empty\x20(E_POLICY_WRITE_GUARD_REQUIRED=22),\x20never\x20what\x20a\x20listed\x20guard\x20proves,\x20so\x20an\x20unresolved\x20placeholder\x20here\x20is\x20an\x20OPEN\x20write\x20a\x20counterparty\x20could\x20pre-write\x20a\x20grant\x20row\x20through.\x20ORDER-domain\x20rows\x20(POLICY\x20SPLIT):\x20id_from\x20none\x20—\x20the\x20caller\x20supplies\x20the\x20ORDER\x20address\x20as\x20the\x20data\x20key,\x20one\x20grant\x20row\x20per\x20order,\x20so\x20the\x20grant_artifact\x20delivery\x20gate\x20reads\x20the\x20row\x20FOR\x20THIS\x20ORDER\x20(rex-mn-261021\x20MX-T6\x20live-proven;\x20a\x20Signer-keyed\x20policy\x20here\x20collides\x20every\x20order\x27s\x20grant\x20rows\x20into\x20ONE\x20writer-keyed\x20upsert\x20row\x20and\x20bricks\x20the\x20per-order\x20delivery\x20gate\x20—\x20azq9-mn-261019\x20TPL-B\x20shape).'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'usage_attestation_write','policy':{'name':'usage','id_from':'signer','value_type':'String'},'purpose':'🔴\x20METERED-CAPS\x20GAP\x20—\x20the\x20usage-attestation\x20Repository\x20write_guard.\x20A\x20tier\x27s\x20usage\x20cap\x20(streams/units/monetization\x20ceiling)\x20has\x20NO\x20on-chain\x20oracle:\x20the\x20licensee/reporter\x20writes\x20periodic\x20usage\x20rows\x20HERE\x20under\x20a\x20bound\x20write_guard,\x20and\x20a\x20guard\x20reads\x20them\x20via\x20repository.data\x20count-where\x20(query\x201173)\x20as\x20EVIDENCE\x20for\x20a\x20cap-breach\x20dispute.\x20This\x20is\x20only\x20as\x20trustworthy\x20as\x20its\x20write-guard\x20and\x20the\x20off-chain\x20reporter\x20—\x20NEVER\x20a\x20chain-native\x20meter,\x20never\x20an\x20automatic\x20deduction.\x20The\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20(repository.move\x20only\x20asserts\x20the\x20list\x20is\x20non-empty,\x20E_POLICY_WRITE_GUARD_REQUIRED=22\x20—\x20a\x20placeholder\x20is\x20an\x20OPEN\x20write\x20a\x20counterparty\x20could\x20forge\x20a\x20usage\x20row\x20through).\x20SIGNER-domain\x20rows\x20(POLICY\x20SPLIT):\x20id_from\x20signer\x20keys\x20each\x20attestation\x20row\x20to\x20its\x20own\x20reporter\x20—\x20a\x20per-reporter\x20attested\x20counter,\x20deliberately\x20distinct\x20from\x20the\x20order-keyed\x20grant\x20evidence\x20(grant_evidence_write).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_grant','purpose':'Settlement\x20allocator\x20gate,\x20bound\x20to\x20the\x20settlement\x20rows\x20(guard_key\x20settle_grant):\x20progress.current\x20==\x20granted\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false.\x20SPLITS\x20the\x20escrowed\x20tier\x20price\x20producer/publisher\x20(producer_bps\x20+\x20publisher_bps\x20==\x2010000).\x20One-shot\x20release\x20—\x20resolve\x20tpl_allocator_node_gate_settle_once\x20(protocol\x20254).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'license_refund','purpose':'Refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20license_refund):\x20progress.current\x20==\x20license_cancelled\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20the\x20WHOLE\x20escrowed\x20tier\x20price\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20buyer\x20(slot\x200\x20—\x20the\x20submitted\x20Order;\x20slot\x20254\x20on\x20a\x20refund\x20rail\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20The\x20cancel/reject/arb\x20forwards\x20ALL\x20land\x20on\x20license_cancelled,\x20so\x20ONE\x20node-gated\x20rail\x20serves\x20them.\x20Resolve\x20tpl_allocator_node_gate_refund.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(append-only\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Merchant-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-B1+CAT-C2).\x20Pays\x20Rate\x2010000\x20to\x20the\x20producer\x20Entity\x20so\x20an\x20AWARDED\x20order\x27s\x20escrow\x20principal\x20still\x20exits:\x20exactly\x20one\x20of\x20license_refund\x20(some\x20==\x20false)\x20/\x20recover_gate\x20(some\x20==\x20true)\x20can\x20pass\x20(D-BUG-2).\x20Resolve\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot.'}],'allocator':{'recipient':'entity','recipient_key':'producer','count':0x4,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'producer','mode':'rate','value_from':'producer_bps','guard_key':'settle_grant','note':'Producer\x20share\x20of\x20the\x20escrowed\x20tier\x20price\x20at\x20granted\x20(producer_bps,\x20default\x208000).\x20An\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deploying\x20AI;\x20a\x20zero-address\x20Entity\x20burns\x20it).'},{'track':'settlement','recipient':'entity','recipient_key':'publisher','mode':'rate','value_from':'publisher_bps','guard_key':'settle_grant','note':'Publisher\x20/\x20label\x20share\x20(publisher_bps,\x20default\x202000).\x20producer_bps\x20+\x20publisher_bps\x20MUST\x20sum\x2010000\x20(allocation.move\x20ERATE_NOT_10000).\x20A\x20sole-producer\x20store\x20sets\x20producer_bps\x2010000\x20/\x20publisher_bps\x200\x20(keep\x20the\x20publisher\x20leg\x20at\x200\x20to\x20an\x20explicit\x20Entity,\x20or\x20drop\x20it\x20and\x20re-pin\x20the\x20producer\x20leg\x20to\x2010000).'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_grant','note':'Rate-0\x20ORDER\x20anchor\x20leg\x20(pattern.allocator_order_anchor):\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.\x20Rate\x20sums\x20are\x20per-Allocator,\x20so\x20the\x20anchor\x20shares\x20settle_grant.'},{'track':'settlement','recipient':'entity','recipient_key':'producer','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Merchant-recovery\x20leg:\x20an\x20AWARDED\x20order\x27s\x20escrow\x20principal\x20(claimed_by\x20some\x20==\x20true)\x20exits\x20to\x20the\x20producer\x20Entity.\x20The\x20polarity\x20twin\x20of\x20license_refund\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'license_refund','note':'Full\x20refund\x20of\x20the\x20escrowed\x20tier\x20price\x20to\x20the\x20order-anchored\x20buyer\x20at\x20license_cancelled\x20(slot\x200\x20—\x20the\x20submitted\x20Order,\x20payment_info.for_object.\x20NEVER\x20slot\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes,\x20so\x20period\x202+\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20claimed_by\x20some\x20==\x20false;\x20once_per_order\x20stops\x20a\x20replay.'}],'description':'ESCROWED\x20tier-price\x20purchase\x20+\x20producer/publisher\x20SPLIT\x20release.\x20The\x20pool\x20holds\x20the\x20selected\x20license-tier\x20price\x20at\x20buy\x20and\x20releases\x20at\x20`granted`\x20(buyer\x20confirm\x20or\x20delivery_window_days\x20auto-accept),\x20SPLIT\x20producer/publisher\x20(producer_bps\x20+\x20publisher_bps\x20==\x2010000,\x20Rate\x20plan\x20—\x20allocation.move\x20ERATE_NOT_10000).\x20DIRECT-SALES:\x20platform_commission_bps\x20and\x20merchant_service_fee_bps\x20default\x200\x20(WoWok\x20takes\x20no\x20commission;\x20the\x20producer/publisher\x20keep\x20the\x20whole\x20sale),\x20so\x20the\x20threshold\x20stays\x200.\x20An\x20aggregator\x20(a\x20label\x20reselling\x20several\x20producers)\x20may\x20charge\x20its\x20own\x20explicit,\x20disclosed\x20fee\x20to\x20a\x20NON-EMPTY\x20Entity\x20—\x20never\x20via\x20Surplus\x20(Surplus\x20calls\x20balance::withdraw_all\x20and\x20doubles\x20as\x20draining\x20the\x20pool).\x20Every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(a\x20Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20the\x20slot-0\x20refund\x20leg)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(CR-01).\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot,\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20aborts\x20code\x2016.\x20TWO\x20refund\x20rails:\x20license_refund\x20(claimed_by\x20some\x20==\x20false)\x20and\x20recover_gate\x20(claimed_by\x20some\x20==\x20true)\x20—\x20exactly\x20one\x20can\x20ever\x20pass\x20(escrow-exit\x20invariant,\x20D-BUG-2).\x20🔴\x20METERED\x20USAGE\x20CAPS\x20are\x20NOT\x20chain-enforced:\x20they\x20ride\x20the\x20attested\x20usage\x20Repository\x20(usage_attestation_write)\x20+\x20count-where\x20evidence\x20(query\x201173)\x20into\x20Arbitration,\x20never\x20an\x20automatic\x20deduction.'},'key_risk':'Fixed-tier\x20license\x20SKUs\x20sold\x20direct;\x20🔴\x20usage\x20caps\x20(streams/units/ceiling)\x20have\x20NO\x20on-chain\x20meter\x20—\x20they\x20are\x20attested-counter\x20+\x20arbitration\x20evidence,\x20never\x20self-executing,\x20and\x20must\x20be\x20disclosed\x20as\x20such.','build_notes':['🔴\x20USAGE-CAP\x20METERING\x20(chain\x20GAP\x20—\x20verified\x20against\x20the\x20Move\x20source:\x20NO\x20usage\x20oracle\x20exists\x20on\x20chain):\x20a\x20license\x20tier\x27s\x20usage\x20caps\x20(streams,\x20units,\x20monetization\x20ceiling,\x20territory)\x20are\x20NOT\x20self-executing.\x20The\x20honest\x20mechanism\x20is\x20an\x20ATTESTED\x20Repository\x20counter\x20—\x20the\x20licensee/reporter\x20writes\x20periodic\x20usage\x20rows\x20under\x20a\x20bound\x20write_guard\x20(usage_attestation_write),\x20and\x20a\x20guard\x20reads\x20them\x20via\x20repository.data\x20count-where\x20(query\x201173)\x20as\x20EVIDENCE.\x20This\x20is\x20only\x20as\x20trustworthy\x20as\x20its\x20write-guard\x20and\x20the\x20off-chain\x20reporter;\x20it\x20is\x20NEVER\x20a\x20chain-native\x20meter.\x20A\x20cap\x20breach\x20is\x20a\x20DISPUTE\x20that\x20routes\x20to\x20Arbitration\x20with\x20the\x20attested\x20counter\x20as\x20evidence\x20—\x20never\x20an\x20automatic\x20on-chain\x20deduction.\x20Do\x20not\x20represent\x20caps\x20as\x20chain-enforced.','TIERED\x20LICENSE\x20SKUs:\x20basic/premium/unlimited/exclusive\x20are\x20WIP\x20products\x20(SKUs)\x20priced\x20at\x20buy\x20—\x20the\x20tier\x20selects\x20the\x20PRICE\x20and\x20the\x20terms\x20artifact,\x20NOT\x20the\x20machine\x20shape\x20(one\x20Machine\x20serves\x20all\x20tiers).\x20The\x20producer/publisher\x20split\x20(producer_bps\x20+\x20publisher_bps\x20==\x2010000)\x20applies\x20to\x20whichever\x20tier\x20price\x20is\x20escrowed.\x20A\x20sole-producer\x20store\x20sets\x20producer_bps\x2010000\x20/\x20publisher_bps\x200.','GRANT\x20DELIVERY:\x20the\x20license\x20grant\x20(tier\x20terms\x20+\x20asset\x20files\x20/\x20download-credential\x20hash)\x20is\x20delivered\x20as\x20the\x20grant_artifact\x20Repository\x20row\x20at\x20grant_delivered;\x20the\x20buyer\x20accepts\x20(or\x20the\x20delivery_window_days\x20time-lock\x20auto-accepts)\x20→\x20settlement\x20releases\x20and\x20splits\x20producer/publisher.','EVIDENCE\x20WRITE\x20GATE\x20(HOST-GRAPH-01):\x20the\x20usage-attestation\x20and\x20grant-artifact\x20Repositories\x20MUST\x20carry\x20a\x20bound\x20write_guard\x20—\x20repository.move\x20only\x20asserts\x20the\x20write_guard\x20LIST\x20is\x20non-empty\x20(E_POLICY_WRITE_GUARD_REQUIRED=22),\x20never\x20what\x20a\x20listed\x20guard\x20proves,\x20so\x20a\x20placeholder\x20is\x20an\x20OPEN\x20write\x20a\x20counterparty\x20could\x20pre-write\x20to\x20forge\x20a\x20usage\x20row\x20or\x20a\x20grant.\x20Bind\x20the\x20writer\x20(signer\x20/\x20Permission\x20staff\x20/\x20Order\x20holder).','ESCROW\x20EXIT\x20INVARIANT\x20(az-mn-261007,\x20D-BUG-2,\x20catalog-wide):\x20the\x20refund\x20rail\x20(license_refund)\x20asserts\x20order.claimed_by\x20some\x20==\x20false;\x20PAIR\x20it\x20with\x20the\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true,\x20NO\x20node\x20equality\x20leg\x20—\x20UPWC-K1/CAT-B1+CAT-C2)\x20paying\x20Rate\x2010000\x20to\x20the\x20producer\x20so\x20an\x20AWARDED\x20order\x27s\x20residual\x20principal\x20still\x20exits.\x20Exactly\x20one\x20of\x20the\x20two\x20can\x20ever\x20pass.','REPLAY\x20PROTECTION:\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot\x20on\x20the\x20settlement\x20allocator\x20(the\x20chain\x20derives\x20the\x20once-key\x20from\x20payment_info.for_object),\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20of\x20the\x20grant-release\x20aborts\x20code\x2016\x20(E_ONCE_TRIGGERED).\x20Refund\x20rails\x20pay\x20the\x20order-anchored\x20buyer\x20via\x20protocol\x20slot\x200\x20(the\x20submitted\x20Order\x20—\x20a\x20refund\x20rail\x20on\x20slot\x20254\x20aborts\x20E_ONCE_TRIGGERED(16)\x20from\x20period\x202,\x20OFN\x20#P-04).','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20rows\x20pay\x20GuardIdentifier(0)\x20—\x20funds\x20land\x20ON\x20the\x20Order\x20object;\x20the\x20buyer\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Surface\x20the\x20second\x20step\x20in\x20the\x20storefront\x20UX.','TERRITORY\x20/\x20QUALIFICATION\x20GATE\x20(LIVE):\x20the\x20buy_guard\x20allowlist\x20(pattern.identity_check_allowlist)\x20restricts\x20purchase\x20to\x20licensees\x20cleared\x20for\x20a\x20territory/qualification\x20set.\x20The\x20benchmark\x20beat-store\x20default\x20is\x20OPEN\x20—\x20drop\x20the\x20allowlist\x20via\x20guard_resolutions\x20for\x20an\x20open\x20store.','DIRECT-SALES\x20ECONOMICS:\x20platform_commission_bps\x20/\x20merchant_service_fee_bps\x20default\x200\x20—\x20the\x20producer/publisher\x20keep\x20the\x20whole\x20sale\x20(split\x20between\x20themselves).\x20An\x20aggregator\x20(a\x20label/publisher\x20reselling\x20several\x20producers)\x20may\x20charge\x20its\x20own\x20explicit,\x20disclosed\x20fee\x20to\x20a\x20NON-EMPTY\x20Entity,\x20never\x20via\x20Surplus\x20(Surplus\x20calls\x20balance::withdraw_all\x20and\x20doubles\x20as\x20draining\x20the\x20pool).','COMPLIANCE\x20(L-01):\x20a\x20license\x20tier\x20is\x20a\x20USAGE\x20GRANT,\x20never\x20a\x20security\x20or\x20an\x20investment\x20—\x20copy\x20must\x20NOT\x20promise\x20returns\x20or\x20promote\x20coin/token\x20price\x20(\x27不构成投资建议或收益承诺\x20/\x20not\x20investment\x20advice\x20or\x20a\x20yield\x20promise\x27).\x20Disclose\x20the\x20caps\x20as\x20attested-counter\x20obligations,\x20not\x20chain-enforced\x20limits.','REPUTATION\x20RAIL\x20(optional):\x20review_mode\x20defaults\x20to\x20none;\x20a\x20producer/publisher\x20reputation\x20review\x20rail\x20is\x20addable\x20per-build\x20via\x20inputs.review_mode=\x27review\x27\x20(an\x20OPTIONAL\x20`reviewed`\x20side-stop\x20off\x20grant_delivered\x20that\x20exits\x20back\x20to\x20the\x20settlement\x20rail\x20—\x20never\x20a\x20settlement\x20gateway,\x20R-DEAD-END).','DISPUTES\x20route\x20to\x20a\x20THIRD-PARTY\x20Arbitration\x20venue\x20(arbitration_mode\x20third_party,\x20an\x20independent\x20Permission\x20—\x20R2\x20/\x20E_ARBITRATION_PERMISSION_CONFLICT=33);\x20the\x20arb_refund\x20ruling\x20edges\x20(tpl_forward_arb_ruling_won,\x20one\x20instance\x20per\x20exit\x20edge:\x20grant_delivered→license_cancelled\x20AND\x20granted→license_cancelled)\x20re-route\x20the\x20order\x20to\x20the\x20refund\x20terminal\x20—\x20pre-settlement\x20the\x20refund\x20rail\x20pays\x20the\x20escrowed\x20price;\x20post-settlement\x20execute\x20the\x20compensation-fund\x20indemnity\x20FIRST,\x20then\x20advance\x20(the\x20escrow\x20is\x20drained,\x20the\x20advance\x20is\x20the\x20state\x20half).\x20Disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11,\x20no\x20claim\x20node).\x20Un-pause\x20the\x20Arbitration\x20after\x20deploy\x20(new\x20Arbitrations\x20default\x20bPaused=true;\x20pause:false\x20via\x20permission\x20356).','WIP\x20DETAIL\x20FILE:\x20give\x20every\x20license\x20tier\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net),\x20or\x20self-hosted;\x20an\x20empty\x20wip\x20on\x20mainnet\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.','SKU\x20HAS\x20NO\x20INCENTIVE\x20FIELD\x20(chain\x20fact,\x20rex-mn-261021\x20MX-T7\x20/\x20G-07):\x20the\x20on-chain\x20Sale\x20struct\x20carries\x20six\x20mandatory\x20fields\x20and\x20NO\x20`incentive`\x20field\x20—\x20a\x20good-review\x20bounty\x20or\x20any\x20\x27reward\x20perceivable\x20at\x20order\x20time\x27\x20CANNOT\x20ride\x20the\x20SKU;\x20declaring\x20one\x20is\x20a\x20rejected-field\x20wall\x20every\x20author\x20hits.\x20Express\x20it\x20(a)\x20in\x20the\x20Service\x20description\x20(panorama-visible),\x20(b)\x20in\x20the\x20WIP\x20detail\x20body,\x20and\x20(c)\x20when\x20it\x20must\x20actually\x20PAY,\x20via\x20a\x20reward\x20rail\x20(reward\x20pool\x20+\x20rating-floor\x20Repository\x20leg\x20+\x20the\x20order-anchored\x20once\x20slot)\x20—\x20never\x20as\x20a\x20Sale\x20field.','FINITE\x20STOCK\x20+\x20QUOTE2/BUY2\x20ONLY\x20(chain\x20facts,\x20rex-mn-261021\x20MX-T9):\x20`stock`\x20has\x20NO\x20infinity\x20sentinel\x20—\x20the\x20quote-time\x20check\x20asserts\x20stock\x20>=\x20quantity\x20and\x20stock\x20DECREMENTS\x20at\x20buy\x20time\x20(service.move),\x20so\x20set\x20a\x20concrete\x20integer\x20stock\x20per\x20TIER\x20SKU\x20(an\x20\x27unlimited\x27\x20TIER\x20is\x20a\x20terms\x20label,\x20not\x20the\x20stock\x20field\x20—\x20stock\x20is\x20still\x20a\x20finite\x20integer)\x20and\x20top\x20it\x20up\x20later\x20via\x20the\x20SKU\x20set\x20op;\x20never\x20write\x20\x27∞\x27.\x20The\x20legacy\x20quote/buy\x20entrypoints\x20are\x20DISABLED\x20on\x20chain\x20(E_DEPRECATED_USE_V2,\x20abort\x2036)\x20—\x20every\x20price\x20check\x20and\x20purchase\x20MUST\x20go\x20through\x20quote2/buy2\x20(buy2\x20with\x20a\x20passport\x20when\x20a\x20buy_guard\x20is\x20set).'],'fee_params':{'producer_bps':0x1f40,'publisher_bps':0x7d0,'delivery_window_days':0x3,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'threshold':0x0,'incumbent_take_bps':0xbb8},'time_anchors':{'delivery_window':'progress.history.time\x20(id\x201280,\x20next_node=\x27grant_delivered\x27,\x20find=last)\x20—\x20the\x20immutable\x20grant-delivered\x20ENTRY\x20timestamp;\x20delivery_window_days\x20auto-accept\x20fires\x20from\x20it\x20(1272\x20current_time\x20drifts,\x20ETS-C)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20—\x20the\x20escrowed\x20tier\x20price\x20refunds\x20in\x20full\x20on\x20buyer\x20reject\x20/\x20pre-delivery\x20cancel\x20/\x20arb\x20ruling\x20(license_refund,\x20slot-0\x20order-anchored)','R2\x20independent\x20THIRD-PARTY\x20arbitration\x20Permission\x20(arbitration_mode\x20third_party;\x20E_ARBITRATION_PERMISSION_CONFLICT=33)\x20—\x20cap-breach\x20/\x20misdescription\x20disputes\x20resolve\x20at\x20a\x20neutral\x20venue,\x20with\x20the\x20attested\x20usage\x20counter\x20as\x20evidence','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner','R4\x20grant\x20acceptance\x20by\x20the\x20buyer\x20only\x20(accept_grant,\x20signer\x20==\x20order\x20owner)\x20—\x20producer\x20self-confirm\x20forbidden;\x20the\x20delivery_window_days\x20time-lock\x20is\x20the\x20keeper\x20complement,\x20never\x20a\x20self-release','R5\x20the\x20tier\x20price\x20and\x20both\x20split\x20legs\x20anchored\x20to\x20the\x20order\x20Allocation\x20(the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order)','R6\x20Rate\x20plan\x20sums\x2010000\x20(producer_bps\x20+\x20publisher_bps);\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20the\x20tier\x20SKUs,\x20the\x20split\x20plan\x20and\x20the\x20usage\x20terms\x20are\x20fully\x20configured\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20delivery-window\x20auto-accept\x20and\x20the\x20arb-ruling\x20advance\x20only\x20(no\x20charge\x20authority)','R10\x20territory\x20/\x20qualification\x20buy\x20gate\x20via\x20the\x20allowlist\x20(open-store\x20default\x20drops\x20it)','R11\x20tier\x20terms\x20+\x20asset\x20grant\x20anchored\x20as\x20the\x20WIP\x20artifact\x20and\x20the\x20grant_artifact\x20Repository\x20row;\x20🔴\x20usage\x20caps\x20attested\x20to\x20the\x20usage\x20Repository\x20(write-guarded),\x20read\x20as\x20arbitration\x20evidence\x20(query\x201173),\x20never\x20an\x20oracle'],'keeper_dependencies':['delivery-window\x20auto-accept\x20(grant_delivered\x20entry\x20+\x20delivery_window_days)','arbitration-ruling\x20advance\x20—\x20TWO\x20exit\x20edges:\x20grant_delivered→license_cancelled\x20(pre-settlement\x20ruling;\x20the\x20refund\x20rail\x20pays\x20the\x20escrowed\x20price)\x20and\x20granted→license_cancelled\x20(post-settlement\x20ruling;\x20execute\x20the\x20compensation-fund\x20indemnity\x20FIRST,\x20then\x20advance\x20—\x20the\x20escrow\x20is\x20drained,\x20the\x20advance\x20is\x20the\x20state\x20half\x20of\x20the\x20remedy)','NO\x20auto-charge\x20authority\x20by\x20design;\x20NO\x20on-chain\x20usage\x20metering\x20(attestation\x20is\x20off-chain\x20reporter-driven)'],'recommended_role':'merchant','role_rationale':'The\x20producer/publisher\x20owns\x20the\x20licensing\x20Service,\x20mints\x20the\x20tier\x20SKUs\x20and\x20delivers\x20the\x20grant\x20artifact;\x20buyers\x20are\x20licensees.\x20Usage\x20caps\x20are\x20attested\x20off-chain\x20and\x20enforced\x20through\x20Arbitration,\x20not\x20a\x20chain\x20meter.','differences':['Fixed-TIER\x20direct\x20license\x20sale\x20(basic/premium/unlimited/exclusive\x20WIP\x20SKUs)\x20vs\x20the\x20sibling\x27s\x20off-chain-resolved\x20auction\x20of\x20a\x20royalty\x20share','Producer/publisher\x20split\x20on\x20a\x20single-tier\x20price\x20(vs\x20the\x20sibling\x27s\x20multi-holder\x20royalty-share\x20split)','🔴\x20Usage\x20caps\x20are\x20an\x20attested-counter\x20+\x20arbitration-evidence\x20obligation\x20(no\x20on-chain\x20metering\x20oracle)\x20—\x20the\x20sibling\x20sells\x20a\x20share\x20of\x20ACTUAL\x20royalties\x20and\x20has\x20no\x20per-use\x20cap'],'user_inputs':['producer_bps\x20/\x20publisher_bps\x20—\x20the\x20producer/publisher\x20split\x20(MUST\x20sum\x2010000;\x20a\x20sole\x20producer\x20sets\x2010000/0)','delivery_window_days\x20—\x20the\x20buyer\x27s\x20window\x20to\x20confirm\x20the\x20grant\x20before\x20auto-accept','incumbent_take_bps\x20—\x20the\x20displaced\x20beat/asset-market\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_commission_bps\x20(KEEP\x20AT\x200),\x20no\x20allocator\x20row\x20reads\x20the\x20benchmark','The\x20license\x20tiers\x20and\x20their\x20prices\x20(WIP\x20SKUs:\x20basic/premium/unlimited/exclusive)','The\x20per-tier\x20usage\x20caps\x20+\x20the\x20usage-attestation\x20reporter\x20(🔴\x20off-chain;\x20the\x20on-chain\x20counter\x20is\x20attested\x20evidence,\x20never\x20an\x20oracle)','The\x20grant\x20artifact\x20(tier\x20terms\x20+\x20asset-files\x20/\x20download-credential\x20hash)','Third-party\x20Arbitration\x20venue\x20selection\x20(independent\x20Permission)']},{'id':'crowdfunding/all-or-nothing-threshold','industry':'crowdfunding','variant':'all-or-nothing-threshold','product_ref':'kickstarter','archetype':'leader','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','crowdfunding_mode':'threshold','review_mode':'none','machine_shape':[{'name':'pledged','role':'Entry:\x20a\x20backer\x20contributes.\x20The\x20contribution\x20is\x20escrowed\x20in\x20THIS\x20order\x27s\x20OWN\x20Allocation\x20(payment_info.for_object\x20=\x20this\x20Order,\x20NEVER\x20balance-joined\x20into\x20a\x20shared\x20pot\x20—\x20so\x20attribution\x20survives\x20and\x20the\x20contribution\x20is\x20refundable\x20to\x20THIS\x20backer)\x20and\x20recorded\x20as\x20a\x20writer-bound\x20row\x20in\x20the\x20shared\x20campaign\x20Repository\x20(id_from\x20signer,\x20value\x20=\x20the\x20contribution\x20amount,\x20write_guard\x20binds\x20order.owner\x20==\x20Signer).\x20Order.amount\x20=\x20the\x20contribution.\x20A\x20backer\x20MAY\x20withdraw\x20the\x20pledge\x20at\x20any\x20time\x20BEFORE\x20the\x20campaign\x20deadline\x20(order_payer\x20→\x20withdrawn):\x20withdrawal\x20REMOVES\x20their\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20—\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it)\x20so\x20the\x20sum-where\x20(1174)\x20aggregate\x20stops\x20counting\x20it,\x20and\x20refunds\x20the\x20contribution\x20in\x20full.\x20AFTER\x20the\x20deadline\x20the\x20contribution\x20is\x20committed\x20to\x20the\x20threshold\x20outcome\x20(release\x20XOR\x20missed-refund)\x20—\x20no\x20post-deadline\x20withdrawal.','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'funded_released','role':'Settlement\x20terminal\x20(GOAL\x20MET):\x20at\x20the\x20campaign\x20deadline\x20the\x20on-chain\x20aggregate\x20raise\x20(repository.data\x20sum-where,\x20query\x201174\x20→\x20U256,\x20over\x20the\x20keeper-enumerated\x20writer-bound\x20contribution\x20rows)\x20>=\x20funding_threshold,\x20so\x20a\x20keeper\x20advances\x20this\x20order\x20and\x20the\x20settlement\x20Allocator\x20RELEASES\x20the\x20escrowed\x20contribution\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000\x20—\x20WoWok\x20takes\x20no\x20platform\x20commission;\x20the\x20project\x20keeps\x20the\x20whole\x20raise).','semantic_role':'final','from':[{'prev':'pledged','forward':'ReleaseOnFunded','operator':'merchant','permission_index':0x3ea,'guard_key':'threshold_release'}]},{'name':'missed_refunded','role':'Refund\x20terminal\x20(GOAL\x20MISSED):\x20at\x20the\x20deadline\x20the\x20aggregate\x20<\x20funding_threshold,\x20so\x20a\x20keeper\x20BATCH-advances\x20every\x20backer\x27s\x20order\x20(enumerating\x20the\x20contributor\x20row\x20ids\x20via\x20find-where\x201176\x20/\x20keys-where\x201177)\x20and\x20the\x20refund\x20Allocator\x20returns\x20each\x20contribution\x20IN\x20FULL\x20to\x20its\x20OWN\x20backer\x20(for_object\x20slot\x200\x20—\x20the\x20submitted\x20Order;\x20funds\x20land\x20on\x20the\x20backer\x27s\x20Order,\x20extracted\x20with\x20a\x20separate\x20owner_receive).\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20without\x20the\x20guard\x20chain\x20(R-M1-11).','semantic_role':'cancelled','from':[{'prev':'pledged','forward':'RefundOnMissed','operator':'merchant','permission_index':0x3ea,'guard_key':'threshold_refund'}]},{'name':'withdrawn','role':'Buyer-withdrawal\x20terminal\x20(PRE-DEADLINE):\x20a\x20backer\x20cancels\x20their\x20pledge\x20while\x20the\x20campaign\x20is\x20still\x20live.\x20The\x20withdrawal\x20REMOVES\x20their\x20writer-bound\x20contribution\x20row\x20from\x20the\x20campaign\x20Repository\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20—\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it,\x20and\x20the\x20sum-where\x201174\x20aggregate\x20stops\x20counting\x20the\x20withdrawn\x20pledge\x20—\x20a\x20backer\x20can\x20never\x20inflate\x20a\x20\x27goal\x20met\x27\x20then\x20pull\x20their\x20money)\x20and\x20the\x20refund\x20Allocator\x20returns\x20the\x20contribution\x20IN\x20FULL\x20to\x20the\x20backer\x27s\x20own\x20order\x20(slot\x200,\x20extracted\x20with\x20a\x20separate\x20owner_receive).\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20(R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'pledged','forward':'WithdrawPledge','operator':'order_payer','guard_key':'pre_deadline_withdraw'}]}],'guards':[{'template_id':'tpl_crowdfunding_threshold_gate','host':'machine','key':'threshold_release','purpose':'RELEASE\x20polarity\x20of\x20the\x20funding-threshold\x20gate,\x20bound\x20to\x20the\x20pledged→funded_released\x20forward:\x20logic_and[\x20sum-where(1174\x20over\x20the\x20campaign\x20contribution\x20rows)\x20>=\x20funding_threshold,\x20Clock\x20>=\x20campaign_deadline_ms\x20].\x20The\x20aggregate\x20is\x20a\x20READ-ONLY\x20sum\x20over\x20keeper-enumerated\x20writer-bound\x20rows\x20(max\x20100\x20candidate\x20ids),\x20never\x20a\x20re-computation\x20of\x20every\x20escrow\x20balance\x20—\x20disclose\x20the\x20boundary\x20(L-04).\x20The\x20deadline\x20is\x20an\x20ABSOLUTE\x20campaign\x20timestamp\x20shared\x20by\x20every\x20backer\x20(pattern.time_lock_absolute),\x20NOT\x20a\x20per-order\x20entry+duration\x20lock.'},{'template_id':'tpl_crowdfunding_threshold_gate','host':'machine','key':'threshold_refund','purpose':'REFUND\x20polarity\x20of\x20the\x20SAME\x20gate,\x20bound\x20to\x20the\x20pledged→missed_refunded\x20forward:\x20logic_and[\x20sum-where(1174)\x20<\x20funding_threshold,\x20Clock\x20>=\x20campaign_deadline_ms\x20]\x20(swap\x20the\x20aggregate\x20leaf\x20to\x20logic_as_u256_lesser).\x20Mutually\x20exclusive\x20with\x20threshold_release\x20on\x20the\x20same\x20aggregate,\x20so\x20exactly\x20one\x20forward\x20is\x20satisfiable\x20once\x20the\x20deadline\x20passes\x20—\x20the\x20D-BUG-2\x20escrow-exit\x20polarity\x20specialized\x20to\x20a\x20funding\x20campaign.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'pre_deadline_withdraw','purpose':'Pre-deadline\x20withdrawal\x20gate,\x20bound\x20to\x20the\x20pledged→withdrawn\x20forward:\x20logic_as_u256_lesser_or_equal[context(Clock),\x20identifier[N](campaign_deadline_ms)]\x20—\x20the\x20CLOSING-window\x20direction\x20(a\x20backer\x20may\x20withdraw\x20only\x20WHILE\x20the\x20campaign\x20is\x20live).\x20ANCHOR\x20IS\x20THE\x20ABSOLUTE\x20shared\x20campaign\x20deadline\x20(the\x20SAME\x20campaign_deadline_ms\x20identifier\x20the\x20threshold\x20gate\x20reads\x20via\x20pattern.time_lock_absolute),\x20NOT\x20a\x20per-order\x20entry+duration:\x20every\x20backer\x20faces\x20ONE\x20deadline.\x20After\x20the\x20deadline\x20this\x20forward\x20aborts,\x20so\x20a\x20withdrawal\x20can\x20never\x20defund\x20a\x20campaign\x20whose\x20goal\x20was\x20already\x20met\x20—\x20the\x20buyer-withdrawal\x20exit\x20and\x20the\x20keeper\x20deadline\x20settlement\x20are\x20mutually\x20exclusive\x20IN\x20TIME\x20(D-BUG-2:\x20this\x20is\x20the\x20claimed_by-false\x20buyer-side\x20twin\x20of\x20the\x20deadline\x20rails).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'funded_release','purpose':'Settlement\x20allocator\x20gate,\x20bound\x20to\x20the\x20release\x20row\x20(guard_key\x20funded_release):\x20progress.current\x20==\x20funded_released\x20(the\x20terminal)\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false.\x20Releases\x20the\x20escrowed\x20contribution\x20(Rate\x2010000)\x20to\x20the\x20project\x20Entity.\x20One-shot\x20—\x20resolve\x20tpl_allocator_node_gate_settle_once\x20(protocol\x20254).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'missed_refund','purpose':'Refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20missed_refund):\x20progress.current\x20==\x20missed_refunded\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20contribution\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200\x20—\x20the\x20submitted\x20Order;\x20slot\x20254\x20on\x20a\x20refund\x20rail\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20Resolve\x20tpl_allocator_node_gate_refund.\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(Order.dispute\x20is\x20append-only\x20—\x20a\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'withdraw_refund','purpose':'Withdrawal-refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20withdraw_refund):\x20progress.current\x20==\x20withdrawn\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20contribution\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200).\x20Distinct\x20from\x20missed_refund\x20by\x20the\x20node\x20it\x20reads\x20(withdrawn\x20vs\x20missed_refunded),\x20so\x20the\x20two\x20buyer-refund\x20rails\x20are\x20disjoint\x20by\x20their\x20node\x20predicate\x20—\x20NOT\x20by\x20a\x20once\x20slot:\x20refund\x20rails\x20arm\x20NO\x20254\x20(254\x20is\x20the\x20ONCE-FOR-OBJECT\x20slot;\x20a\x20refund\x20node\x20re-entered\x20in\x20a\x20later\x20period\x20would\x20abort\x2016,\x20OFN\x20#P-04).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Project-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20az-mn-261007;\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-B1+CAT-C2:\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion).\x20Pays\x20Rate\x2010000\x20to\x20the\x20project\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20ARBITRATION-AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20missed_refund\x20/\x20withdraw_refund\x20(claimed_by\x20some\x20==\x20false)\x20and\x20recover_gate\x20(some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).\x20Resolve\x20tpl_allocator_node_gate_recover;\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20Rate-10000\x20rail\x20is\x20single-shot\x20by\x20balance\x20exhaustion.'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','policy':{'name':'contribution','id_from':'signer','value_type':'U64'},'purpose':'Campaign\x20Repository\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20to\x20the\x20contributing\x20backer\x20(identity\x20leaf:\x20logic_or[query(1562\x20order.owner)==Signer,\x20query(1567\x20order.agent\x20has,\x20Signer)]):\x20repository.move\x20only\x20asserts\x20the\x20write_guard\x20LIST\x20is\x20non-empty\x20(E_POLICY_WRITE_GUARD_REQUIRED=22),\x20never\x20what\x20a\x20listed\x20guard\x20proves,\x20so\x20a\x20placeholder\x20that\x20returns\x20true\x20is\x20an\x20OPEN\x20write\x20—\x20anyone\x20could\x20inflate\x20the\x20aggregate\x20and\x20forge\x20a\x20\x27goal\x20met\x27.\x20id_from\x20signer\x20keys\x20each\x20row\x20to\x20the\x20backer\x27s\x20own\x20address\x20(one\x20row\x20per\x20funder);\x20the\x20value\x20is\x20the\x20contribution\x20amount\x20the\x20sum-where\x20(1174)\x20totals.\x20The\x20SAME\x20writer-binding\x20is\x20what\x20makes\x20withdrawal\x20safe:\x20the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20derives\x20the\x20row\x20id\x20from\x20the\x20signer,\x20so\x20a\x20backer\x20can\x20remove\x20ONLY\x20their\x20own\x20contribution\x20row.\x20EXISTENCE-IS-NOT-TRUST\x20(R-X1-17).'}],'allocator':{'recipient':'entity','recipient_key':'project','count':0x3,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'funded_release','note':'Release\x20the\x20escrowed\x20contribution\x20(Rate\x2010000\x20=\x20the\x20whole\x20raise)\x20to\x20the\x20project\x20Entity\x20at\x20funded_released.\x20An\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deploying\x20AI;\x20a\x20zero-address\x20Entity\x20burns\x20it).\x20WoWok\x20takes\x20no\x20platform\x20commission,\x20so\x20there\x20is\x20no\x20platform\x20Rate\x20leg\x20—\x20the\x20project\x20keeps\x20100%.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'funded_release','note':'Rate-0\x20ORDER\x20anchor\x20leg\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Project-recovery\x20leg:\x20the\x20escrow\x20principal\x20of\x20an\x20ARBITRATION-AWARDED\x20order\x20(claimed_by\x20some\x20==\x20true)\x20exits\x20to\x20the\x20project\x20Entity\x20(the\x20backer\x20was\x20already\x20made\x20whole\x20from\x20the\x20compensation\x20fund).\x20The\x20polarity\x20twin\x20of\x20missed_refund\x20—\x20exactly\x20one\x20can\x20pass\x20(D-BUG-2).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'missed_refund','note':'Full\x20per-contributor\x20refund\x20of\x20the\x20escrowed\x20contribution\x20to\x20the\x20order-anchored\x20backer\x20at\x20missed_refunded\x20(slot\x200\x20—\x20the\x20submitted\x20Order,\x20payment_info.for_object;\x20mainnet-verified\x20executable\x20three\x20times\x20in\x20this\x20shape.\x20NEVER\x20slot\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes,\x20so\x20period\x202+\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20claimed_by\x20some\x20==\x20false;\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).\x20once_per_order\x20stops\x20a\x20replay.\x20Because\x20each\x20order\x27s\x20Allocation\x20is\x20for_object-bound\x20to\x20ITS\x20OWN\x20order\x20and\x20never\x20pooled,\x20this\x20leg\x20refunds\x20THIS\x20backer\x20THEIR\x20OWN\x20contribution\x20—\x20attribution\x20is\x20preserved\x20by\x20not\x20pooling.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'withdraw_refund','note':'Pre-deadline\x20pledge-WITHDRAWAL\x20refund:\x20returns\x20the\x20escrowed\x20contribution\x20IN\x20FULL\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200)\x20when\x20they\x20withdraw\x20while\x20the\x20campaign\x20is\x20still\x20live\x20(progress.current\x20==\x20withdrawn,\x20claimed_by\x20some\x20==\x20false).\x20The\x20withdrawal\x20ALSO\x20removes\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal,\x20id_from\x20signer\x20→\x20only\x20the\x20row\x27s\x20own\x20writer)\x20so\x20the\x20aggregate\x20sum-where\x20(1174)\x20stops\x20counting\x20it\x20—\x20a\x20withdrawn\x20pledge\x20can\x20never\x20inflate\x20a\x20\x27goal\x20met\x27\x20then\x20pull\x20its\x20money.\x20Distinct\x20from\x20missed_refund\x20by\x20the\x20node\x20it\x20reads,\x20so\x20the\x20two\x20buyer-refund\x20rails\x20cannot\x20both\x20pay\x20—\x20refund\x20rails\x20arm\x20NO\x20254\x20(254\x20is\x20the\x20ONCE-FOR-OBJECT\x20slot;\x20a\x20refund\x20node\x20re-entered\x20in\x20a\x20later\x20period\x20aborts\x2016,\x20OFN\x20#P-04).'}],'description':'ALL-OR-NOTHING\x20THRESHOLD\x20ESCROW\x20+\x20per-contributor\x20release/refund.\x20Each\x20backer\x27s\x20contribution\x20is\x20escrowed\x20in\x20its\x20OWN\x20unpooled\x20Allocation\x20(for_object\x20=\x20the\x20backer\x27s\x20Order)\x20—\x20the\x20money\x20is\x20NEVER\x20balance-joined\x20into\x20a\x20shared\x20pot,\x20so\x20attribution\x20survives\x20and\x20a\x20missed\x20campaign\x20refunds\x20every\x20backer\x20their\x20own\x20contribution.\x20At\x20the\x20campaign\x20deadline\x20a\x20settlement\x20Guard\x20reads\x20the\x20on-chain\x20aggregate\x20raise\x20(repository.data\x20sum-where,\x20query\x201174\x20→\x20U256,\x20over\x20the\x20keeper-enumerated\x20writer-bound\x20contribution\x20rows)\x20and\x20decides:\x20aggregate\x20>=\x20funding_threshold\x20→\x20RELEASE\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000);\x20aggregate\x20<\x20funding_threshold\x20→\x20REFUND\x20each\x20contribution\x20to\x20its\x20own\x20backer\x20(slot\x200).\x20The\x20two\x20legs\x20are\x20mutually\x20exclusive\x20on\x20the\x20same\x20aggregate\x20(D-BUG-2\x20escrow-exit\x20polarity).\x20DIRECT-SALES:\x20platform_commission_bps\x20and\x20merchant_service_fee_bps\x20default\x200\x20(WoWok\x20takes\x20no\x20platform\x20commission;\x20the\x20project\x20keeps\x20the\x20whole\x20raise),\x20so\x20the\x20ALLOCATOR\x20threshold\x20(fee_params.threshold)\x20stays\x200\x20—\x20it\x20is\x20the\x20Allocation.minimum-balance\x20gate\x20and\x20is\x20DISTINCT\x20from\x20funding_threshold\x20(the\x20campaign\x20aggregate\x20goal\x20read\x20by\x20the\x20sum-where\x20gate);\x20keep\x20fee_params.threshold\x20<=\x20the\x20smallest\x20contribution\x20or\x20the\x20release/refund\x20strands.\x20Every\x20settlement/refund\x20allocator\x20carries\x20the\x20order\x20anchor\x20(a\x20Rate-0\x20GuardIdentifier(0)\x20settlement\x20leg\x20+\x20the\x20slot-0\x20refund\x20leg)\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack,\x20testnet\x20CR-01).\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot,\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20aborts\x20code\x2016.\x20TWO\x20refund\x20rails:\x20the\x20missed-campaign\x20refund\x20(missed_refund,\x20claimed_by\x20some\x20==\x20false)\x20and\x20the\x20project-recovery\x20sweep\x20(recover_gate,\x20claimed_by\x20some\x20==\x20true)\x20—\x20exactly\x20one\x20can\x20ever\x20pass.\x20🔴\x20The\x20aggregate\x20is\x20a\x20read\x20over\x20an\x20ATTESTED\x20roster\x20(keeper-supplied\x20candidate\x20ids,\x20max\x20100),\x20NOT\x20a\x20chain-verified\x20total-custody\x20proof\x20—\x20a\x20campaign\x20with\x20>100\x20contributors\x20splits\x20the\x20roster\x20across\x20settlements.'},'key_risk':'All-or-nothing\x20raise:\x20each\x20contribution\x20is\x20escrowed\x20UNPOOLED\x20so\x20a\x20missed\x20goal\x20auto-refunds\x20every\x20backer.\x20The\x20threshold\x20total\x20is\x20a\x20keeper-attested\x20aggregate,\x20not\x20a\x20custody\x20proof,\x20and\x20post-raise\x20delivery\x20is\x20backed\x20only\x20by\x20compensation\x20+\x20arbitration.','build_notes':['UNPOOLED\x20PER-CONTRIBUTOR\x20ESCROW\x20(the\x20whole\x20point,\x20LIVE):\x20every\x20backer\x27s\x20contribution\x20sits\x20in\x20its\x20OWN\x20Allocation\x20with\x20payment_info.for_object\x20bound\x20to\x20that\x20backer\x27s\x20Order.\x20The\x20money\x20is\x20NEVER\x20balance::join-ed\x20into\x20a\x20shared\x20pot\x20(allocation.move:810/824\x20would\x20merge\x20it\x20and\x20lose\x20attribution)\x20—\x20so\x20the\x20chain\x20can\x20always\x20answer\x20\x27whose\x20money\x20is\x20this\x27\x20and\x20refund\x20it\x20to\x20the\x20right\x20backer.\x20A\x20for_object-bound\x20Allocation\x20forces\x20every\x20recipient\x20leg\x20to\x20the\x20bound\x20address\x20(allocation.move:523-524,\x20ERECIPIENT_NOT_FOR_OBJECT=15),\x20which\x20is\x20exactly\x20what\x20the\x20slot-0\x20refund\x20leg\x20wants.','THRESHOLD\x20GATE\x20=\x20ON-CHAIN\x20AGGREGATE\x20(LIVE,\x20zero\x20chain\x20change):\x20the\x20settlement\x20Guard\x20reads\x20repository.data\x20sum-where\x20(query\x201174\x20→\x20U256,\x20checked_add\x20overflow-safe)\x20over\x20the\x20campaign\x27s\x20contribution\x20rows\x20and\x20compares\x20against\x20funding_threshold\x20(tpl_crowdfunding_threshold_gate).\x20No\x20crowdfunding\x20primitive\x20exists\x20or\x20is\x20needed\x20—\x20the\x20aggregate\x20is\x20a\x20read-only\x20view;\x20the\x20money\x20stays\x20SEPARATE\x20in\x20each\x20order\x27s\x20Allocation.','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17,\x20existence-is-not-trust):\x20each\x20contribution\x20row\x20is\x20written\x20under\x20pattern.repository_write_authorization\x20with\x20an\x20identity\x20leaf\x20(order.owner\x20==\x20Signer\x20/\x20order.agent\x20has\x20Signer)\x20and\x20id_from\x20signer,\x20so\x20a\x20backer\x20can\x20only\x20record\x20their\x20OWN\x20contribution.\x20An\x20unbound\x20write_guard\x20makes\x20the\x20aggregate\x20forgeable\x20—\x20anyone\x20could\x20inflate\x20the\x20total\x20and\x20fake\x20a\x20\x27goal\x20met\x27.','ABSOLUTE\x20SHARED\x20DEADLINE\x20(LIVE):\x20settlement\x20opens\x20only\x20at\x20Clock\x20>=\x20campaign_deadline_ms\x20—\x20ONE\x20absolute\x20timestamp\x20shared\x20by\x20every\x20backer\x20(pattern.time_lock_absolute),\x20NOT\x20a\x20per-order\x20entry+duration\x20lock\x20(which\x20would\x20give\x20each\x20backer\x20a\x20different\x20deadline).\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20pattern.time_source_repository_oracle\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20calendar\x20date,\x20and\x20document\x20the\x20time\x20source.','TWO-LEG\x20ESCROW\x20EXIT\x20(D-BUG-2,\x20catalog-wide):\x20the\x20release\x20leg\x20(funded_release,\x20claimed_by\x20some\x20==\x20false\x20→\x20project)\x20and\x20the\x20refund\x20leg\x20(missed_refund,\x20claimed_by\x20some\x20==\x20false\x20→\x20backer\x20slot\x200)\x20are\x20gated\x20on\x20MUTUALLY\x20EXCLUSIVE\x20aggregate\x20comparisons\x20(>=\x20vs\x20<),\x20so\x20exactly\x20one\x20fires\x20at\x20deadline.\x20PAIR\x20the\x20refund\x20with\x20the\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true\x20→\x20project,\x20NO\x20node\x20equality\x20leg)\x20so\x20an\x20arbitration-awarded\x20order\x27s\x20residual\x20principal\x20still\x20exits.','KEEPER\x20BATCH\x20SETTLEMENT\x20(LIVE,\x20ops\x20efficiency):\x20on\x20a\x20missed\x20campaign\x20a\x20keeper\x20enumerates\x20every\x20contributor\x20row\x20id\x20via\x20repository.data\x20find-where\x20(1176\x20→\x20VectorAddress)\x20/\x20keys-where\x20(1177\x20→\x20VectorString)\x20and\x20advances\x20each\x20backer\x27s\x20refund\x20leg\x20in\x20one\x20PTB\x20(or\x20N\x20PTBs).\x20🔴\x20The\x20candidate-id\x20set\x20is\x20capped\x20at\x20100\x20per\x20sum-where\x20—\x20a\x20campaign\x20with\x20>100\x20contributors\x20splits\x20the\x20roster\x20across\x20settlements.\x20This\x20batch\x20atomicity\x20is\x20an\x20OPS\x20convenience,\x20not\x20a\x20chain\x20capability\x20(the\x20per-contributor\x20refund\x20works\x20without\x20it).','🔴\x20AGGREGATE\x20TRUST\x20BOUNDARY\x20(L-04,\x20MUST\x20disclose):\x20the\x20funding\x20total\x20is\x20a\x20read-only\x20sum\x20over\x20keeper-supplied,\x20writer-bound\x20contribution\x20rows\x20—\x20it\x20is\x20NOT\x20an\x20independent\x20re-computation\x20of\x20every\x20escrow\x20balance,\x20and\x20roster\x20completeness\x20is\x20keeper-attested.\x20Never\x20present\x20the\x20threshold\x20as\x20a\x20chain-verified\x20total-custody\x20proof.\x20State\x20plainly:\x20\x27达标判定依据链上共享账本的聚合募资额（每笔出资记录已绑定写入方），聚合值是对已记录出资行的只读求和，非对每一笔托管余额的独立重算。\x27','🔴\x20WITHDRAWABLE\x20BEFORE\x20THE\x20DEADLINE,\x20COMMITTED\x20AFTER\x20(L-04,\x20MUST\x20disclose):\x20a\x20backer\x20may\x20withdraw\x20their\x20pledge\x20at\x20any\x20time\x20BEFORE\x20the\x20campaign\x20deadline\x20(order_payer\x20→\x20withdrawn,\x20gated\x20by\x20pattern.time_window_upper_bound\x20on\x20the\x20ABSOLUTE\x20campaign_deadline_ms).\x20Withdrawal\x20REMOVES\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20—\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it)\x20so\x20the\x20sum-where\x20(1174)\x20aggregate\x20STOPS\x20counting\x20the\x20withdrawn\x20pledge\x20—\x20a\x20backer\x20can\x20never\x20inflate\x20a\x20\x27goal\x20met\x27\x20and\x20then\x20pull\x20their\x20money\x20—\x20and\x20refunds\x20the\x20contribution\x20in\x20full\x20to\x20their\x20own\x20order\x20(slot\x200).\x20AFTER\x20the\x20deadline\x20the\x20contribution\x20is\x20committed\x20to\x20the\x20threshold\x20outcome\x20(release\x20XOR\x20missed-refund);\x20the\x20withdrawal\x20forward\x20aborts,\x20so\x20it\x20can\x20never\x20defund\x20an\x20already-met\x20goal.\x20State\x20plainly:\x20\x27截止前可随时撤回出资（撤回即从链上募资聚合中剔除该笔并原路全额退回）；截止后出资锁定，仅按达标结果释放给项目方或原路退回。\x27','🔴\x20NON-INVESTMENT\x20(L-01,\x20MUST\x20disclose):\x20crowdfunding\x20copy\x20must\x20NEVER\x20promise\x20investment\x20returns,\x20yield,\x20or\x20token-price\x20appreciation\x20—\x20it\x20is\x20a\x20threshold\x20purchase/presale/donation,\x20not\x20a\x20security.\x20Carry\x20\x27不构成投资建议或收益承诺\x20/\x20not\x20investment\x20advice\x20or\x20a\x20yield\x20promise\x27.','🔴\x20KYC/AML\x20(L-05,\x20MUST\x20flag):\x20pooled\x20fundraising\x20is\x20HIGH\x20regulatory\x20intensity\x20—\x20cross-border\x20funds\x20and\x20reward\x20tiers\x20may\x20trigger\x20securities\x20/\x20money-transmission\x20/\x20KYC-AML\x20rules.\x20Flag\x20for\x20compliance;\x20do\x20not\x20automate\x20around\x20them.','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20rows\x20pay\x20GuardIdentifier(0)\x20(the\x20submitted\x20Order)\x20—\x20funds\x20land\x20ON\x20the\x20backer\x27s\x20Order\x20object,\x20not\x20in\x20their\x20wallet;\x20the\x20backer\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Surface\x20the\x20second\x20step\x20in\x20the\x20storefront\x20UX.','REPLAY\x20PROTECTION:\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot\x20on\x20the\x20settlement\x20allocator\x20(the\x20chain\x20derives\x20the\x20once-key\x20from\x20payment_info.for_object),\x20scoped\x20PER\x20ALLOCATION\x20(per\x20order),\x20so\x20a\x20replay\x20of\x20the\x20release\x20aborts\x20code\x2016\x20(E_ONCE_TRIGGERED).','CAMPAIGN\x20TERMS\x20=\x20WIP\x20ARTIFACT:\x20the\x20funding\x20goal,\x20deadline\x20and\x20reward\x20tiers\x20are\x20anchored\x20as\x20the\x20listing\x20WIP\x20hash\x20before\x20launch.\x20Rebinding\x20has\x20NO\x20per-item\x20op:\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP\x20(verbatim\x20full\x20resend),\x20op:add\x20creates\x20a\x20NEW\x20SKU.\x20Pin\x20the\x20launch-time\x20hash\x20so\x20a\x20later\x20edit\x20cannot\x20retroactively\x20change\x20the\x20goal\x20a\x20backer\x20funded\x20against.','DISPUTES\x20route\x20to\x20a\x20THIRD-PARTY\x20Arbitration\x20venue\x20(arbitration_mode\x20third_party,\x20an\x20independent\x20Permission\x20—\x20R2\x20/\x20E_ARBITRATION_PERMISSION_CONFLICT=33);\x20disputes\x20are\x20filed\x20OFF-Machine\x20(R-M1-11,\x20no\x20claim\x20node).\x20Un-pause\x20the\x20Arbitration\x20after\x20deploy\x20(new\x20Arbitrations\x20default\x20bPaused=true;\x20pause:false\x20via\x20permission\x20356).','WIP\x20DETAIL\x20FILE:\x20give\x20the\x20campaign\x20a\x20product-detail\x20(wip)\x20URL\x20—\x20easiest\x20is\x20the\x20wip_file\x20tool\x20upload\x20to\x20the\x20official\x20free\x20host\x20(wip.store.wowok.net),\x20or\x20self-hosted\x20for\x20long-lived\x20mainnet\x20campaigns;\x20an\x20empty\x20wip\x20on\x20mainnet\x20downgrades\x20the\x20service\x27s\x20completeness\x20score.','COMPENSATION\x20FUND\x20PRE-LOCK\x20(B2,\x20ksg-mn-261022):\x20while\x20a\x20compensation\x20fund\x20is\x20armed\x20on\x20the\x20Service,\x20EVERY\x20buy\x20requires\x20fund\x20>=\x203x\x20the\x20order\x20amount\x20(MAX_INDEMNITY_MULTIPLE)\x20—\x20a\x20campaign\x20shop\x20must\x20lock\x203x\x20its\x20LARGEST\x20reward\x20tier\x20BEFORE\x20launch,\x20or\x20every\x20higher\x20tier\x20is\x20silently\x20unsellable\x20(order_new\x20is\x20refused\x20pre-flight\x20with\x20the\x20exact\x203x\x20math;\x20discovering\x20this\x20after\x20launch\x20means\x20the\x20tiers\x20were\x20already\x20advertised).\x20Size\x20the\x20fund\x20from\x20the\x20largest\x20tier\x20up\x20front,\x20or\x20run\x20donation\x20campaigns\x20without\x20a\x20compensation\x20fund\x20and\x20rely\x20on\x20arbitration\x20only.'],'fee_params':{'funding_threshold':0x2710,'campaign_duration_days':0x1e,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'threshold':0x0,'incumbent_take_bps':0x1f4},'time_anchors':{'campaign_deadline':'context\x20Clock\x20>=\x20campaign_deadline_ms\x20(an\x20ABSOLUTE\x20epoch-ms\x20timestamp,\x20pattern.time_lock_absolute)\x20—\x20ONE\x20shared\x20campaign\x20deadline\x20for\x20every\x20backer,\x20NOT\x20a\x20per-order\x20entry+duration\x20lock;\x20bind\x20pattern.time_source_repository_oracle\x20for\x20a\x20real-world\x20calendar\x20date\x20(chain\x20Clock\x20is\x20block-driven)'},'trust_mechanisms':['R1\x20refund\x20allocator\x20—\x20a\x20missed\x20campaign\x20refunds\x20every\x20contribution\x20IN\x20FULL\x20to\x20its\x20own\x20backer\x20(missed_refund,\x20slot-0\x20order-anchored,\x20for_object-bound\x20unpooled\x20escrow)','R2\x20independent\x20THIRD-PARTY\x20arbitration\x20Permission\x20(arbitration_mode\x20third_party;\x20E_ARBITRATION_PERMISSION_CONFLICT=33)\x20—\x20delivery/non-delivery\x20disputes\x20resolve\x20at\x20a\x20venue\x20neither\x20party\x20controls','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner\x20(the\x20post-raise\x20delivery\x20backstop)','R4\x20the\x20funding\x20threshold\x20is\x20an\x20on-chain\x20aggregate\x20read\x20(sum-where\x201174)\x20over\x20writer-bound\x20rows\x20—\x20the\x20decision\x20executes\x20on-chain\x20WITHOUT\x20the\x20project\x27s\x20discretion;\x20the\x20aggregate\x20is\x20still\x20an\x20ATTESTED\x20read\x20(L-04\x20boundary,\x20not\x20an\x20independent\x20re-computation\x20of\x20every\x20escrow\x20balance)\x20and\x20is\x20disclosed\x20as\x20such','R5\x20every\x20contribution\x20anchored\x20to\x20its\x20OWN\x20order\x20Allocation\x20(the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order;\x20for_object\x20preserves\x20attribution)','R6\x20Rate\x20plan:\x20project\x20keeps\x20100%\x20(Rate\x2010000);\x20allocator\x20threshold\x200;\x20funding_threshold\x20is\x20the\x20distinct\x20campaign\x20goal','R7\x20publish\x20freeze\x20—\x20the\x20campaign\x20terms\x20(WIP),\x20the\x20funding\x20goal,\x20the\x20deadline\x20and\x20the\x20writer-bound\x20contribution\x20policy\x20are\x20fully\x20configured\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20deadline\x20settlement\x20advance\x20and\x20the\x20missed-campaign\x20batch\x20refund\x20only\x20(no\x20charge\x20authority)','R10\x20contribution-row\x20write_guard\x20binds\x20the\x20writer\x20to\x20the\x20backer\x20(order.owner\x20==\x20Signer)\x20so\x20the\x20aggregate\x20cannot\x20be\x20forged','R11\x20campaign\x20terms\x20+\x20funding\x20goal\x20+\x20deadline\x20anchored\x20as\x20the\x20WIP\x20artifact\x20(immutable\x20provenance\x20of\x20WHAT\x20was\x20raised\x20against)','R12\x20pre-deadline\x20pledge\x20withdrawal\x20(order_payer\x20→\x20withdrawn)\x20removes\x20the\x20backer\x27s\x20OWN\x20writer-bound\x20contribution\x20row\x20so\x20the\x20sum-where\x20aggregate\x20stops\x20counting\x20it,\x20then\x20refunds\x20in\x20full\x20—\x20a\x20withdrawn\x20pledge\x20can\x20never\x20inflate\x20a\x20\x27goal\x20met\x27'],'keeper_dependencies':['deadline\x20settlement\x20advance\x20(pledged→funded_released\x20on\x20the\x20release-polarity\x20gate\x20once\x20Clock\x20>=\x20deadline\x20and\x20the\x20aggregate\x20>=\x20goal)','missed-campaign\x20batch\x20refund\x20(enumerate\x20contributor\x20ids\x20via\x20find-where\x201176\x20/\x20keys-where\x201177,\x20advance\x20each\x20pledged→missed_refunded\x20on\x20the\x20refund-polarity\x20gate)','NO\x20auto-charge\x20authority\x20by\x20design;\x20the\x20pre-deadline\x20pledge\x20withdrawal\x20is\x20buyer\x20self-service\x20(order_payer),\x20needs\x20no\x20keeper'],'recommended_role':'merchant','role_rationale':'The\x20project\x20owner\x20(creator)\x20owns\x20the\x20crowdfunding\x20Service,\x20sets\x20the\x20funding\x20goal\x20+\x20deadline,\x20and\x20receives\x20the\x20release\x20on\x20a\x20successful\x20raise;\x20backers\x20are\x20the\x20funders,\x20each\x20escrowing\x20an\x20unpooled,\x20refundable\x20contribution.','differences':['ALL-OR-NOTHING:\x20a\x20funding_threshold\x20aggregate\x20gate\x20decides\x20release\x20XOR\x20per-contributor\x20refund\x20at\x20the\x20deadline\x20(vs\x20the\x20sibling\x27s\x20flexible\x20keep-it-all,\x20which\x20releases\x20every\x20contribution\x20with\x20NO\x20goal\x20and\x20NO\x20missed-campaign\x20refund)','Per-contributor\x20UNPOOLED\x20escrow\x20with\x20an\x20automatic\x20missed-campaign\x20refund\x20(the\x20sibling\x20has\x20no\x20missed-refund\x20leg\x20—\x20its\x20contributions\x20are\x20non-refundable\x20after\x20the\x20deadline;\x20BOTH\x20allow\x20a\x20pre-deadline\x20pledge\x20withdrawal)','The\x20release/refund\x20decision\x20is\x20an\x20on-chain\x20sum-where\x20(1174)\x20aggregate\x20read\x20ANDed\x20with\x20an\x20absolute\x20campaign\x20deadline;\x20the\x20sibling\x27s\x20release\x20leg\x20carries\x20no\x20aggregate\x20gate'],'user_inputs':['funding_threshold\x20—\x20the\x20aggregate\x20campaign\x20goal\x20the\x20sum-where\x20(1174)\x20total\x20is\x20compared\x20against\x20(U256\x20semantics;\x20DISTINCT\x20from\x20the\x20allocator\x27s\x20fee_params.threshold\x20which\x20stays\x200)','campaign_deadline_ms\x20—\x20the\x20ABSOLUTE\x20shared\x20deadline\x20(epoch\x20ms)\x20settlement\x20opens\x20at;\x20one\x20deadline\x20for\x20every\x20backer','campaign_duration_days\x20—\x20display\x20helper\x20for\x20the\x20deadline\x20(the\x20gate\x20reads\x20campaign_deadline_ms)','The\x20campaign\x20terms\x20+\x20funding\x20goal\x20+\x20reward\x20tiers\x20WIP\x20artifact\x20(anchored\x20at\x20launch)','The\x20project\x20Entity\x20that\x20receives\x20the\x20release\x20on\x20a\x20successful\x20raise\x20(NON-EMPTY)','incumbent_take_bps\x20—\x20the\x20displaced\x20crowdfunding\x20platform\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_commission_bps\x20(KEEP\x20AT\x200),\x20no\x20allocator\x20row\x20reads\x20the\x20benchmark','Third-party\x20Arbitration\x20venue\x20selection\x20(independent\x20Permission)']},{'id':'crowdfunding/flexible-keep-it-all','industry':'crowdfunding','variant':'flexible-keep-it-all','product_ref':'gofundme','archetype':'challenger','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','crowdfunding_mode':'flexible','review_mode':'none','machine_shape':[{'name':'pledged','role':'Entry:\x20a\x20backer\x20contributes.\x20The\x20contribution\x20is\x20escrowed\x20in\x20THIS\x20order\x27s\x20OWN\x20Allocation\x20(for_object\x20=\x20this\x20Order)\x20and\x20recorded\x20as\x20a\x20writer-bound\x20row\x20in\x20the\x20campaign\x20Repository.\x20🔴\x20FLEXIBLE\x20KEEP-IT-ALL:\x20there\x20is\x20NO\x20funding\x20goal\x20and\x20NO\x20missed-campaign\x20refund\x20—\x20the\x20project\x20keeps\x20whatever\x20it\x20raises.\x20A\x20backer\x20MAY\x20withdraw\x20the\x20pledge\x20BEFORE\x20the\x20deadline\x20(order_payer\x20→\x20withdrawn,\x20removing\x20their\x20contribution\x20row\x20and\x20refunding\x20in\x20full);\x20a\x20contribution\x20is\x20NON-REFUNDABLE\x20once\x20the\x20deadline\x20passes\x20—\x20disclose\x20this\x20up\x20front,\x20never\x20blur\x20it\x20with\x20the\x20all-or-nothing\x20model.','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'released','role':'Settlement\x20terminal:\x20at\x20the\x20campaign\x20deadline\x20a\x20keeper\x20advances\x20this\x20order\x20and\x20the\x20settlement\x20Allocator\x20releases\x20the\x20escrowed\x20contribution\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000)\x20REGARDLESS\x20of\x20any\x20aggregate\x20total\x20—\x20there\x20is\x20NO\x20threshold\x20gate\x20on\x20this\x20leg\x20(the\x20defining\x20contrast\x20to\x20the\x20all-or-nothing\x20leader).','semantic_role':'final','from':[{'prev':'pledged','forward':'ReleaseAtDeadline','operator':'merchant','permission_index':0x3ea,'guard_key':'deadline_release'}]},{'name':'withdrawn','role':'Buyer-withdrawal\x20terminal\x20(PRE-DEADLINE):\x20a\x20backer\x20cancels\x20their\x20pledge\x20while\x20the\x20campaign\x20is\x20still\x20live.\x20The\x20withdrawal\x20REMOVES\x20their\x20writer-bound\x20contribution\x20row\x20(via\x20the\x20Repository\x27s\x20writer-scoped\x20row-removal\x20—\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it,\x20and\x20the\x20public\x20raise\x20total\x20stops\x20counting\x20it)\x20and\x20the\x20refund\x20Allocator\x20returns\x20the\x20contribution\x20IN\x20FULL\x20to\x20the\x20backer\x27s\x20own\x20order\x20(slot\x200).\x20This\x20is\x20the\x20ONLY\x20money-back\x20path\x20in\x20the\x20flexible\x20model\x20—\x20after\x20the\x20deadline\x20the\x20keep-it-all\x20posture\x20is\x20non-refundable.\x20Named\x20as\x20a\x20routing\x20state\x20(not\x20the\x20bare\x20fund-terminal\x20\x27cancelled\x27)\x20so\x20the\x20intent\x20is\x20self-evident\x20(R-M1-11).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'pledged','forward':'WithdrawPledge','operator':'order_payer','guard_key':'pre_deadline_withdraw'}]}],'guards':[{'template_id':'pattern.time_lock_progress','host':'machine','key':'deadline_release','purpose':'Deadline\x20release\x20gate,\x20bound\x20to\x20the\x20pledged→released\x20forward:\x20Clock\x20>=\x20the\x20campaign\x20deadline.\x20FLEXIBLE\x20polarity\x20carries\x20NO\x20aggregate\x20sum-where\x20leg\x20—\x20the\x20contribution\x20releases\x20at\x20the\x20deadline\x20whatever\x20the\x20total.\x20Use\x20an\x20ABSOLUTE\x20shared\x20campaign\x20deadline\x20(pattern.time_lock_absolute\x20shape\x20/\x20a\x20repository\x20time-oracle\x20for\x20a\x20real-world\x20date),\x20NOT\x20a\x20per-order\x20entry+duration\x20that\x20would\x20give\x20each\x20backer\x20a\x20different\x20deadline.\x20OPENING\x20gate\x20(greater_or_equal).'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'pre_deadline_withdraw','purpose':'Pre-deadline\x20withdrawal\x20gate,\x20bound\x20to\x20the\x20pledged→withdrawn\x20forward:\x20logic_as_u256_lesser_or_equal[context(Clock),\x20identifier[N](campaign_deadline_ms)]\x20—\x20the\x20CLOSING-window\x20direction\x20(a\x20backer\x20may\x20withdraw\x20only\x20WHILE\x20the\x20campaign\x20is\x20live).\x20ANCHOR\x20IS\x20THE\x20ABSOLUTE\x20shared\x20campaign\x20deadline\x20(the\x20SAME\x20campaign_deadline_ms\x20the\x20release\x20gate\x20reads),\x20NOT\x20a\x20per-order\x20entry+duration.\x20After\x20the\x20deadline\x20this\x20forward\x20aborts,\x20so\x20the\x20keep-it-all\x20release\x20and\x20the\x20buyer\x20withdrawal\x20are\x20mutually\x20exclusive\x20IN\x20TIME\x20(D-BUG-2:\x20this\x20is\x20the\x20claimed_by-false\x20buyer-side\x20twin\x20of\x20the\x20release/recover\x20rails).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'withdraw_refund','purpose':'Withdrawal-refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20withdraw_refund):\x20progress.current\x20==\x20withdrawn\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20contribution\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200).\x20This\x20is\x20the\x20flexible\x20model\x27s\x20ONLY\x20buyer\x20refund\x20rail\x20(pre-deadline\x20withdrawal);\x20refund\x20rails\x20arm\x20NO\x20254\x20(254\x20is\x20the\x20ONCE-FOR-OBJECT\x20slot;\x20a\x20refund\x20node\x20re-entered\x20in\x20a\x20later\x20period\x20would\x20abort\x2016,\x20OFN\x20#P-04).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'project_release','purpose':'Settlement\x20allocator\x20gate,\x20bound\x20to\x20the\x20release\x20row\x20(guard_key\x20project_release):\x20progress.current\x20==\x20released\x20(the\x20terminal)\x20+\x20order.service\x20binding\x20+\x20claimed_by\x20some\x20==\x20false.\x20Releases\x20the\x20escrowed\x20contribution\x20(Rate\x2010000)\x20to\x20the\x20project\x20Entity.\x20One-shot\x20—\x20resolve\x20tpl_allocator_node_gate_settle_once\x20(protocol\x20254).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Project-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20+\x20order.service\x20binding,\x20NO\x20node\x20equality\x20leg\x20(UPWC-K1/CAT-B1+CAT-C2:\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20exclusion).\x20Pays\x20Rate\x2010000\x20to\x20the\x20project\x20Entity\x20so\x20an\x20ARBITRATION-AWARDED\x20order\x27s\x20escrow\x20principal\x20still\x20exits\x20(the\x20backer\x20was\x20made\x20whole\x20from\x20the\x20compensation\x20fund).\x20Exactly\x20one\x20of\x20withdraw_refund\x20(claimed_by\x20some\x20==\x20false\x20→\x20backer)\x20and\x20recover_gate\x20(some\x20==\x20true\x20→\x20project)\x20can\x20ever\x20pass\x20—\x20the\x20D-BUG-2\x20escrow-exit\x20polarity:\x20in\x20the\x20flexible\x20model\x20BOTH\x20the\x20deadline\x20release\x20and\x20the\x20arbitration\x20recovery\x20exit\x20to\x20the\x20project,\x20and\x20the\x20only\x20buyer-side\x20money-back\x20leg\x20is\x20the\x20pre-deadline\x20withdrawal.\x20Resolve\x20tpl_allocator_node_gate_recover.'},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','policy':{'name':'contribution','id_from':'signer','value_type':'U64'},'purpose':'Campaign\x20Repository\x20write_guard\x20binds\x20the\x20writer\x20to\x20the\x20contributing\x20backer\x20(order.owner\x20==\x20Signer\x20/\x20order.agent\x20has\x20Signer),\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20value\x20=\x20the\x20contribution\x20amount.\x20Even\x20though\x20the\x20flexible\x20model\x20has\x20NO\x20aggregate\x20gate,\x20the\x20contribution\x20ledger\x20is\x20still\x20writer-bound\x20so\x20the\x20public\x20raise\x20total\x20is\x20honest,\x20a\x20backer\x20cannot\x20misrecord\x20another\x27s\x20contribution\x20(R-X1-17),\x20and\x20—\x20as\x20in\x20the\x20leader\x20—\x20the\x20same\x20binding\x20lets\x20a\x20backer\x20remove\x20ONLY\x20their\x20own\x20row\x20on\x20withdrawal.'}],'allocator':{'recipient':'entity','recipient_key':'project','count':0x3,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'project_release','note':'Release\x20the\x20escrowed\x20contribution\x20(Rate\x2010000\x20=\x20the\x20whole\x20raise)\x20to\x20the\x20project\x20Entity\x20at\x20the\x20deadline,\x20regardless\x20of\x20any\x20aggregate\x20total.\x20An\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory.\x20WoWok\x20takes\x20no\x20platform\x20commission.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'project_release','note':'Rate-0\x20ORDER\x20anchor\x20leg\x20(pattern.allocator_order_anchor):\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail\x20(testnet\x20CR-01);\x20pays\x20nothing.'},{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Project-recovery\x20leg\x20for\x20an\x20ARBITRATION-AWARDED\x20order\x20(claimed_by\x20some\x20==\x20true)\x20—\x20the\x20escrow\x20principal\x20exits\x20to\x20the\x20project\x20Entity.\x20The\x20D-BUG-2\x20polarity\x20twin\x20of\x20the\x20pre-deadline\x20withdraw_refund\x20leg\x20(claimed_by\x20some\x20==\x20false\x20→\x20backer);\x20after\x20the\x20deadline\x20there\x20is\x20NO\x20missed-campaign\x20refund\x20—\x20keep-it-all\x20is\x20non-refundable\x20by\x20design\x20(disclosed,\x20L-04).'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'withdraw_refund','note':'Pre-deadline\x20pledge-WITHDRAWAL\x20refund\x20—\x20the\x20flexible\x20model\x27s\x20ONLY\x20buyer\x20money-back\x20rail:\x20returns\x20the\x20escrowed\x20contribution\x20IN\x20FULL\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200)\x20when\x20they\x20withdraw\x20while\x20the\x20campaign\x20is\x20live\x20(progress.current\x20==\x20withdrawn,\x20claimed_by\x20some\x20==\x20false).\x20The\x20withdrawal\x20ALSO\x20removes\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20so\x20the\x20public\x20raise\x20total\x20stops\x20counting\x20it.\x20Refund\x20rails\x20arm\x20NO\x20254\x20(254\x20is\x20the\x20ONCE-FOR-OBJECT\x20slot;\x20a\x20refund\x20node\x20re-entered\x20in\x20a\x20later\x20period\x20would\x20abort\x2016,\x20OFN\x20#P-04).\x20After\x20the\x20deadline\x20this\x20rail\x20is\x20unreachable\x20—\x20keep-it-all\x20is\x20non-refundable\x20(L-04).'}],'description':'FLEXIBLE\x20KEEP-IT-ALL\x20ESCROW.\x20Each\x20backer\x27s\x20contribution\x20is\x20escrowed\x20in\x20its\x20OWN\x20unpooled\x20Allocation\x20(for_object\x20=\x20the\x20backer\x27s\x20Order)\x20and\x20released\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000)\x20at\x20the\x20campaign\x20deadline\x20REGARDLESS\x20of\x20the\x20aggregate\x20total\x20—\x20there\x20is\x20NO\x20funding_threshold\x20gate\x20and\x20NO\x20missed-campaign\x20refund\x20leg.\x20This\x20is\x20the\x20disclosed\x20contrast\x20to\x20the\x20all-or-nothing\x20leader:\x20🔴\x20a\x20flexible\x20contribution\x20is\x20NON-REFUNDABLE\x20once\x20the\x20deadline\x20passes\x20(the\x20project\x20keeps\x20whatever\x20it\x20raises),\x20which\x20MUST\x20be\x20stated\x20up\x20front\x20and\x20never\x20blurred\x20with\x20the\x20all-or-nothing\x20model.\x20The\x20ONE\x20buyer\x20money-back\x20path\x20is\x20a\x20PRE-DEADLINE\x20pledge\x20withdrawal\x20(order_payer\x20→\x20withdrawn):\x20it\x20removes\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal,\x20id_from\x20signer\x20→\x20only\x20the\x20row\x27s\x20own\x20writer)\x20so\x20the\x20public\x20raise\x20total\x20stops\x20counting\x20it,\x20and\x20refunds\x20the\x20contribution\x20in\x20full\x20to\x20the\x20backer\x27s\x20order\x20(slot\x200,\x20order_anchored\x20refund_track).\x20DIRECT-SALES:\x20platform_commission_bps\x20and\x20merchant_service_fee_bps\x20default\x200;\x20the\x20allocator\x20threshold\x20(fee_params.threshold)\x20stays\x200.\x20Every\x20settlement\x20allocator\x20carries\x20the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor\x20(anti\x20cross-order\x20hijack,\x20CR-01);\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot\x20so\x20a\x20replay\x20aborts\x20code\x2016.\x20The\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true\x20→\x20project)\x20is\x20the\x20escrow-exit\x20for\x20an\x20arbitration-awarded\x20order;\x20the\x20withdraw_refund\x20rail\x20(claimed_by\x20some\x20==\x20false\x20→\x20backer,\x20pre-deadline\x20only)\x20is\x20its\x20D-BUG-2\x20polarity\x20twin,\x20and\x20after\x20the\x20deadline\x20both\x20claimed_by\x20polarities\x20exit\x20to\x20the\x20project.'},'key_risk':'Flexible\x20keep-it-all\x20raise:\x20contributions\x20release\x20to\x20the\x20project\x20at\x20the\x20deadline\x20with\x20NO\x20goal\x20and\x20NO\x20missed-campaign\x20refund.\x20The\x20defining\x20risk\x20is\x20a\x20backer\x20mistaking\x20it\x20for\x20all-or-nothing,\x20so\x20the\x20non-refundable-after-deadline\x20posture\x20must\x20be\x20disclosed\x20up\x20front\x20(L-04).','build_notes':['🔴\x20NO-REFUND-AFTER-DEADLINE\x20POSTURE\x20(L-04,\x20MUST\x20disclose\x20up\x20front):\x20this\x20is\x20FLEXIBLE\x20keep-it-all\x20—\x20the\x20project\x20keeps\x20whatever\x20it\x20raises\x20and\x20a\x20contribution\x20is\x20NON-REFUNDABLE\x20once\x20the\x20deadline\x20passes.\x20There\x20is\x20NO\x20funding\x20goal\x20and\x20NO\x20missed-campaign\x20refund\x20leg.\x20The\x20ONLY\x20money-back\x20path\x20is\x20a\x20PRE-DEADLINE\x20pledge\x20withdrawal\x20(below).\x20Never\x20present\x20this\x20as\x20an\x20all-or-nothing\x20campaign;\x20state\x20plainly:\x20\x27本活动为灵活众筹（keep-it-all），截止前可撤回出资，截止后出资即释放给项目方、不设达标门槛、不提供退款。\x27','🔴\x20PRE-DEADLINE\x20WITHDRAWAL\x20(the\x20one\x20buyer\x20exit,\x20LIVE):\x20while\x20the\x20campaign\x20is\x20live\x20a\x20backer\x20may\x20withdraw\x20(order_payer\x20→\x20withdrawn,\x20gated\x20by\x20pattern.time_window_upper_bound\x20on\x20the\x20ABSOLUTE\x20campaign_deadline_ms\x20—\x20the\x20CLOSING-window\x20direction).\x20Withdrawal\x20REMOVES\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal;\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address,\x20so\x20only\x20the\x20row\x27s\x20own\x20writer\x20can\x20remove\x20it)\x20so\x20the\x20public\x20raise\x20total\x20stops\x20counting\x20it,\x20and\x20refunds\x20the\x20contribution\x20in\x20full\x20to\x20their\x20own\x20order\x20(slot\x200).\x20After\x20the\x20deadline\x20the\x20withdrawal\x20forward\x20aborts\x20—\x20the\x20release\x20and\x20the\x20withdrawal\x20are\x20mutually\x20exclusive\x20in\x20time\x20(D-BUG-2).','UNPOOLED\x20PER-CONTRIBUTOR\x20ESCROW\x20(LIVE):\x20each\x20contribution\x20still\x20sits\x20in\x20its\x20OWN\x20Allocation\x20(for_object\x20=\x20the\x20backer\x27s\x20Order),\x20never\x20balance-joined\x20—\x20so\x20the\x20public\x20raise\x20total\x20is\x20attributable\x20and\x20an\x20arbitration-awarded\x20backer\x20can\x20be\x20made\x20whole\x20from\x20the\x20compensation\x20fund.\x20The\x20unpooled\x20shape\x20is\x20shared\x20with\x20the\x20leader;\x20the\x20difference\x20is\x20the\x20absent\x20threshold\x20gate\x20+\x20missed-refund\x20leg.','NO\x20AGGREGATE\x20GATE\x20(the\x20defining\x20contrast):\x20the\x20release\x20leg\x20carries\x20NO\x20sum-where\x20(1174)\x20comparison\x20—\x20it\x20fires\x20at\x20the\x20deadline\x20whatever\x20the\x20total.\x20The\x20contribution\x20Repository\x20ledger\x20is\x20still\x20writer-bound\x20(order.owner\x20==\x20Signer)\x20so\x20the\x20displayed\x20raise\x20total\x20is\x20honest,\x20but\x20nothing\x20gates\x20on\x20it.','ABSOLUTE\x20SHARED\x20DEADLINE\x20(LIVE):\x20release\x20opens\x20at\x20Clock\x20>=\x20campaign_deadline_ms\x20—\x20ONE\x20absolute\x20timestamp\x20shared\x20by\x20every\x20backer\x20(pattern.time_lock_absolute\x20/\x20a\x20repository\x20time-oracle\x20for\x20a\x20real-world\x20date),\x20NOT\x20a\x20per-order\x20entry+duration\x20lock.\x20The\x20withdrawal\x20window\x20closes\x20on\x20the\x20SAME\x20absolute\x20timestamp.','ESCROW\x20EXIT\x20(catalog-wide,\x20D-BUG-2):\x20the\x20withdraw_refund\x20leg\x20(claimed_by\x20some\x20==\x20false\x20→\x20backer,\x20pre-deadline)\x20and\x20the\x20recover_gate\x20rail\x20(claimed_by\x20some\x20==\x20true\x20→\x20project)\x20are\x20the\x20claimed_by\x20polarity\x20pair;\x20the\x20deadline\x20release\x20(project_release\x20→\x20project)\x20is\x20the\x20normal\x20terminal.\x20Because\x20keep-it-all\x20has\x20no\x20missed-campaign\x20refund,\x20after\x20the\x20deadline\x20both\x20claimed_by\x20polarities\x20exit\x20to\x20the\x20project\x20Entity.','🔴\x20NON-INVESTMENT\x20(L-01,\x20MUST\x20disclose):\x20never\x20promise\x20investment\x20returns,\x20yield,\x20or\x20token-price\x20appreciation\x20—\x20a\x20flexible\x20raise\x20is\x20a\x20donation/presale,\x20not\x20a\x20security.\x20Carry\x20\x27不构成投资建议或收益承诺\x27.','🔴\x20KYC/AML\x20(L-05,\x20MUST\x20flag):\x20pooled\x20cross-border\x20fundraising\x20may\x20trigger\x20securities\x20/\x20money-transmission\x20/\x20KYC-AML\x20rules\x20—\x20flag\x20for\x20compliance.','TWO-STEP\x20PAYOUT:\x20release/recovery\x20rows\x20pay\x20the\x20project\x20Entity;\x20the\x20withdrawal\x20refund\x20and\x20any\x20arbitration\x20compensation\x20to\x20a\x20backer\x20land\x20on\x20the\x20Order\x20(slot\x200)\x20and\x20are\x20extracted\x20with\x20a\x20separate\x20owner_receive\x20call.','CAMPAIGN\x20TERMS\x20=\x20WIP\x20ARTIFACT:\x20the\x20deadline\x20and\x20the\x20explicit\x20no-refund-after-deadline/keep-it-all\x20terms\x20are\x20anchored\x20as\x20the\x20listing\x20WIP\x20hash\x20before\x20launch;\x20op:set\x20rewrites\x20the\x20ENTIRE\x20WIP,\x20op:add\x20creates\x20a\x20NEW\x20SKU.','DISPUTES\x20route\x20to\x20a\x20THIRD-PARTY\x20Arbitration\x20venue\x20(arbitration_mode\x20third_party;\x20R-M1-11,\x20no\x20claim\x20node).\x20Un-pause\x20the\x20Arbitration\x20after\x20deploy\x20(bPaused=true\x20default;\x20pause:false\x20via\x20permission\x20356).','COMPENSATION\x20FUND\x20PRE-LOCK\x20(B2,\x20ksg-mn-261022):\x20while\x20a\x20compensation\x20fund\x20is\x20armed\x20on\x20the\x20Service,\x20EVERY\x20buy\x20requires\x20fund\x20>=\x203x\x20the\x20order\x20amount\x20(MAX_INDEMNITY_MULTIPLE)\x20—\x20lock\x203x\x20the\x20largest\x20pledge\x20tier\x20BEFORE\x20launch\x20or\x20higher\x20tiers\x20are\x20silently\x20unsellable\x20(order_new\x20is\x20refused\x20pre-flight);\x20for\x20pure-donation\x20campaigns\x20consider\x20running\x20WITHOUT\x20a\x20compensation\x20fund\x20and\x20relying\x20on\x20arbitration\x20only.'],'fee_params':{'campaign_duration_days':0x1e,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'threshold':0x0,'incumbent_take_bps':0x122},'time_anchors':{'campaign_deadline':'context\x20Clock\x20>=\x20campaign_deadline_ms\x20(an\x20ABSOLUTE\x20epoch-ms\x20timestamp,\x20pattern.time_lock_absolute)\x20—\x20ONE\x20shared\x20campaign\x20deadline\x20for\x20every\x20backer;\x20bind\x20pattern.time_source_repository_oracle\x20for\x20a\x20real-world\x20calendar\x20date'},'trust_mechanisms':['R1\x20unpooled\x20per-contributor\x20escrow\x20(for_object\x20=\x20the\x20backer\x27s\x20Order)\x20—\x20attributable,\x20never\x20merged','R2\x20independent\x20THIRD-PARTY\x20arbitration\x20Permission\x20(arbitration_mode\x20third_party;\x20E_ARBITRATION_PERMISSION_CONFLICT=33)','R3\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner\x20(the\x20post-raise\x20delivery\x20backstop)','R4\x20writer-bound\x20contribution\x20ledger\x20(order.owner\x20==\x20Signer)\x20so\x20the\x20public\x20raise\x20total\x20is\x20honest','R5\x20every\x20contribution\x20anchored\x20to\x20its\x20OWN\x20order\x20Allocation\x20(Rate-0\x20GuardIdentifier(0)\x20order\x20anchor)','R6\x20Rate\x20plan:\x20project\x20keeps\x20100%\x20(Rate\x2010000);\x20allocator\x20threshold\x200','R7\x20publish\x20freeze\x20—\x20the\x20campaign\x20terms\x20(WIP),\x20the\x20deadline\x20and\x20the\x20explicit\x20no-refund-after-deadline\x20posture\x20are\x20configured\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20deadline\x20release\x20advance\x20only\x20(no\x20charge\x20authority)','R10\x20🔴\x20the\x20no-refund-after-deadline\x20keep-it-all\x20posture\x20is\x20disclosed\x20up\x20front,\x20never\x20blurred\x20with\x20all-or-nothing\x20(L-04)','R11\x20pre-deadline\x20pledge\x20withdrawal\x20(order_payer\x20→\x20withdrawn)\x20removes\x20the\x20backer\x27s\x20own\x20writer-bound\x20contribution\x20row\x20and\x20refunds\x20in\x20full\x20—\x20the\x20flexible\x20model\x27s\x20single\x20buyer\x20money-back\x20rail'],'keeper_dependencies':['deadline\x20release\x20advance\x20(pledged→released\x20once\x20Clock\x20>=\x20the\x20campaign\x20deadline)','NO\x20missed-campaign\x20refund\x20keeper\x20(the\x20flexible\x20model\x20has\x20no\x20missed-refund\x20leg;\x20the\x20only\x20buyer\x20refund\x20is\x20the\x20self-service\x20PRE-DEADLINE\x20withdrawal,\x20which\x20needs\x20no\x20keeper)','NO\x20auto-charge\x20authority\x20by\x20design'],'recommended_role':'merchant','role_rationale':'The\x20project\x20owner\x20(creator/cause)\x20owns\x20the\x20flexible\x20crowdfunding\x20Service\x20and\x20keeps\x20whatever\x20it\x20raises\x20at\x20the\x20deadline;\x20backers\x20are\x20donors/purchasers\x20accepting\x20a\x20non-refundable-after-deadline\x20posture\x20(withdrawable\x20only\x20while\x20the\x20campaign\x20is\x20live).','differences':['FLEXIBLE\x20KEEP-IT-ALL:\x20NO\x20funding_threshold\x20gate\x20and\x20NO\x20missed-campaign\x20refund\x20leg\x20—\x20every\x20contribution\x20releases\x20to\x20the\x20project\x20at\x20the\x20deadline\x20(vs\x20the\x20leader\x27s\x20all-or-nothing\x20release\x20XOR\x20per-contributor\x20refund)','🔴\x20Contributions\x20are\x20NON-REFUNDABLE\x20once\x20the\x20deadline\x20passes\x20(disclosed\x20up\x20front);\x20the\x20leader\x20refunds\x20every\x20backer\x20automatically\x20on\x20a\x20missed\x20goal.\x20Both\x20models\x20allow\x20a\x20PRE-DEADLINE\x20pledge\x20withdrawal.','Shares\x20the\x20unpooled\x20per-contributor\x20escrow\x20+\x20writer-bound\x20ledger\x20+\x20absolute\x20deadline\x20+\x20pre-deadline\x20withdrawal\x20rail\x20with\x20the\x20leader,\x20but\x20the\x20release\x20leg\x20carries\x20no\x20aggregate\x20sum-where\x20comparison'],'user_inputs':['campaign_deadline_ms\x20—\x20the\x20ABSOLUTE\x20shared\x20deadline\x20(epoch\x20ms)\x20the\x20release\x20opens\x20at','campaign_duration_days\x20—\x20display\x20helper\x20for\x20the\x20deadline','The\x20campaign\x20terms\x20+\x20the\x20explicit\x20no-refund/keep-it-all\x20disclosure\x20WIP\x20artifact\x20(anchored\x20at\x20launch)','The\x20project\x20Entity\x20that\x20receives\x20the\x20release\x20(NON-EMPTY)','incumbent_take_bps\x20—\x20the\x20displaced\x20donation-crowdfunding\x20processing\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_commission_bps\x20(KEEP\x20AT\x200)','Third-party\x20Arbitration\x20venue\x20selection\x20(independent\x20Permission)']},{'id':'crowdfunding/reward-campaign-fulfillment','industry':'crowdfunding','variant':'reward-campaign-fulfillment','product_ref':'indiegogo','archetype':'leader','phase':0x1,'payment_model':'escrow','arbitration_mode':'third_party','crowdfunding_mode':'threshold','review_mode':'review_reward','after_sales_mode':'return','reward_claim_policy':{'kind':'once'},'recommended_role':'merchant','role_rationale':'The\x20project\x20owner\x20(creator)\x20owns\x20the\x20crowdfunding\x20Service,\x20sets\x20the\x20funding\x20goal\x20+\x20deadline,\x20ships\x20the\x20reward\x20tiers\x20and\x20receives\x20the\x20release\x20per\x20accepted\x20backer;\x20backers\x20are\x20the\x20funders,\x20each\x20escrowing\x20an\x20unpooled,\x20refundable\x20pledge.','key_risk':'Reward\x20crowdfunding:\x20the\x20pledge\x20is\x20escrowed\x20per\x20backer\x20until\x20the\x20tier\x20is\x20accepted,\x20so\x20missed-goal\x20/\x20withdrawal\x20/\x20return\x20all\x20have\x20a\x20live\x20refund\x20path\x20—\x20but\x20the\x20campaign\x20goal\x20is\x20a\x20keeper-attested\x20aggregate\x20of\x20self-declared\x20values,\x20and\x20the\x20review\x20bounty\x20is\x20a\x20merchant-funded\x20promise.','machine_shape':[{'name':'pledged','role':'Entry:\x20a\x20backer\x20pledges\x20a\x20reward\x20tier.\x20The\x20pledge\x20is\x20escrowed\x20in\x20THIS\x20order\x27s\x20OWN\x20Allocation\x20(payment_info.for_object\x20=\x20this\x20Order,\x20never\x20balance-joined)\x20and\x20recorded\x20as\x20a\x20writer-bound\x20row\x20in\x20the\x20campaign\x20Repository\x20(id_from\x20signer,\x20value\x20=\x20the\x20declared\x20contribution).\x20Order.amount\x20=\x20the\x20tier\x20price\x20actually\x20escrowed\x20(after\x20any\x20coupon).\x20The\x20buyer\x20may\x20withdraw\x20the\x20pledge\x20while\x20the\x20campaign\x20is\x20live\x20(pledged\x20→\x20withdrawn):\x20the\x20withdrawal\x20REMOVES\x20the\x20backer\x27s\x20own\x20writer-bound\x20contribution\x20row\x20so\x20the\x20sum-where\x20(1174)\x20aggregate\x20stops\x20counting\x20it,\x20and\x20refunds\x20the\x20pledge\x20in\x20full.','operator':'order_payer','semantic_role':'draft','from':[{'prev':'','forward':'Enter','operator':'order_payer'}]},{'name':'funded_released','role':'Campaign\x20decision\x20state\x20(GOAL\x20MET):\x20at\x20the\x20campaign\x20deadline\x20the\x20on-chain\x20aggregate\x20raise\x20(repository.data\x20sum-where,\x20query\x201174\x20→\x20U256,\x20over\x20the\x20keeper-enumerated\x20writer-bound\x20contribution\x20rows)\x20>=\x20funding_threshold,\x20so\x20a\x20keeper\x20advances\x20this\x20order\x20past\x20the\x20campaign\x20decision.\x20NOT\x20a\x20payout\x20terminal:\x20the\x20pledge\x20stays\x20held\x20per-backer\x20until\x20the\x20reward\x20is\x20delivered\x20and\x20accepted\x20(escrow-through-fulfillment),\x20so\x20the\x20post-fulfillment\x20RETURN\x20rail\x20keeps\x20a\x20live\x20on-chain\x20refund\x20path.','semantic_role':'active','from':[{'prev':'pledged','forward':'ReleaseOnFunded','operator':'merchant','permission_index':0x3ea,'guard_key':'threshold_release'}]},{'name':'missed_refunded','role':'Refund\x20terminal\x20(GOAL\x20MISSED):\x20at\x20the\x20deadline\x20the\x20aggregate\x20<\x20funding_threshold,\x20so\x20a\x20keeper\x20advances\x20every\x20backer\x27s\x20order\x20and\x20the\x20refund\x20Allocator\x20returns\x20each\x20pledge\x20IN\x20FULL\x20to\x20its\x20own\x20backer\x20(slot\x200\x20—\x20the\x20submitted\x20Order;\x20extracted\x20with\x20a\x20separate\x20owner_receive).\x20Named\x20as\x20a\x20routing\x20state\x20so\x20the\x20intent\x20is\x20self-evident\x20without\x20the\x20guard\x20chain.','semantic_role':'cancelled','from':[{'prev':'pledged','forward':'RefundOnMissed','operator':'merchant','permission_index':0x3ea,'guard_key':'threshold_refund'}]},{'name':'withdrawn','role':'Buyer-withdrawal\x20terminal\x20(PRE-DEADLINE):\x20the\x20backer\x20cancels\x20the\x20pledge\x20while\x20the\x20campaign\x20is\x20still\x20live.\x20The\x20withdrawal\x20REMOVES\x20their\x20writer-bound\x20contribution\x20row\x20(the\x20Repository\x27s\x20writer-scoped\x20row-removal:\x20id_from\x20signer\x20keys\x20the\x20row\x20to\x20the\x20contributor\x27s\x20own\x20address)\x20so\x20the\x20aggregate\x20stops\x20counting\x20it,\x20and\x20the\x20refund\x20Allocator\x20returns\x20the\x20pledge\x20IN\x20FULL\x20to\x20the\x20backer\x27s\x20own\x20order\x20(slot\x200).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'pledged','forward':'WithdrawPledge','operator':'order_payer','guard_key':'pre_deadline_withdraw'}]},{'name':'pledge_cancelled','role':'Post-decision\x20cancellation\x20terminal:\x20the\x20campaign\x20goal\x20was\x20met\x20but\x20the\x20reward\x20tier\x20has\x20NOT\x20been\x20shipped\x20yet,\x20so\x20the\x20backer\x20may\x20still\x20cancel\x20their\x20pledge\x20(buyer-side\x20void\x20hop).\x20The\x20pledge\x20is\x20refunded\x20IN\x20FULL\x20from\x20its\x20own\x20escrow\x20(slot\x200).\x20Business\x20note:\x20the\x20campaign\x20goal\x20is\x20a\x20snapshot\x20taken\x20at\x20the\x20deadline\x20—\x20a\x20post-deadline\x20cancellation\x20does\x20NOT\x20reopen\x20the\x20campaign\x20decision,\x20it\x20only\x20means\x20the\x20project\x20collects\x20less\x20from\x20this\x20backer\x20(and\x20escrow-through-fulfillment\x20means\x20the\x20project\x20had\x20not\x20been\x20paid\x20yet\x20anyway).','operator':'order_payer','semantic_role':'cancelled','from':[{'prev':'funded_released','forward':'CancelBeforeShipment','operator':'order_payer','guard_key':'cancel_window'},{'prev':'fulfilling','forward':'CancelDuringFulfilment','operator':'order_payer','guard_key':'cancel_window'}]},{'name':'fulfilling','role':'Fulfillment\x20phase\x20OPENED:\x20the\x20campaign\x20reached\x20its\x20goal,\x20the\x20buyer\x27s\x20required\x20info\x20(shipping\x20/\x20contact\x20address,\x20delivered\x20over\x20the\x20encrypted\x20Messenger)\x20is\x20on\x20chain\x20as\x20order.required_info,\x20and\x20the\x20project\x20starts\x20producing\x20and\x20shipping\x20the\x20reward\x20tiers.\x20The\x20pledge\x20is\x20still\x20held\x20per-backer;\x20nothing\x20is\x20released\x20to\x20the\x20project\x20yet.','semantic_role':'active','from':[{'prev':'funded_released','forward':'StartFulfillment','operator':'merchant','permission_index':0x3ea,'guard_key':'required_info'}]},{'name':'shipped','role':'Reward\x20tier\x20shipped:\x20the\x20project\x20records\x20the\x20shipment\x20(carrier\x20+\x20tracking\x20in\x20the\x20Messenger\x20conversation,\x20never\x20as\x20public\x20on-chain\x20personal\x20data).','semantic_role':'active','from':[{'prev':'fulfilling','forward':'ConfirmShipment','operator':'merchant','permission_index':0x3ea}]},{'name':'delivered','role':'Carrier\x20scan\x20/\x20buyer\x20confirms\x20the\x20reward\x20tier\x20was\x20delivered.\x20Buyer-first\x20confirmation:\x20the\x20merchant\x20cannot\x20self-declare\x20delivery\x20to\x20capture\x20the\x20escrow.\x20The\x20shipping\x20address,\x20contact\x20address\x20and\x20(for\x20stay\x20tiers)\x20the\x20meeting\x20address\x20are\x20exchanged\x20over\x20the\x20encrypted\x20Messenger\x20only.','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'shipped','forward':'ConfirmDelivery','operator':'order_payer','guard_key':'deliver_confirm'}]},{'name':'reviewed','role':'Buyer\x20leaves\x20a\x20rating\x20+\x20written\x20review\x20of\x20the\x20delivered\x20tier\x20(structured\x20repository\x20rows:\x20a\x20U256\x20rating\x20row\x20and\x20a\x20String\x20comment\x20row\x20keyed\x20to\x20this\x20order).\x20OPTIONAL\x20side\x20stop\x20with\x20an\x20EXIT\x20edge\x20back\x20to\x20the\x20settlement\x20rail,\x20so\x20a\x20silent\x20reviewer\x20can\x20never\x20strand\x20the\x20escrow\x20(R-DEAD-END).\x20The\x20review\x20is\x20also\x20the\x20CLAIM\x20CREDENTIAL\x20for\x20the\x20buyer\x27s\x20reward\x20bounty\x20(leave\x20a\x20review\x20→\x20get\x20the\x20bounty),\x20which\x20the\x20buyer\x20can\x20perceive\x20at\x20quote\x20time\x20via\x20the\x20tier\x27s\x20incentive\x20declaration.','operator':'order_payer','semantic_role':'delivered','optional':!![],'from':[{'prev':'delivered','forward':'LeaveReview','operator':'order_payer','guard_key':'review_window'}]},{'name':'completed','role':'Settlement\x20terminal\x20(ACCEPTED):\x20the\x20buyer\x20accepted\x20the\x20delivered\x20tier,\x20so\x20the\x20settlement\x20Allocator\x20releases\x20the\x20escrowed\x20pledge\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000\x20—\x20WoWok\x20takes\x20no\x20platform\x20commission,\x20the\x20project\x20keeps\x20the\x20whole\x20pledge).\x20A\x20silent\x20buyer\x20is\x20released\x20by\x20the\x20keeper\x20after\x20settlement_delay_days\x20(the\x20AutoComplete\x20forward\x20on\x20the\x20SAME\x20pair),\x20so\x20the\x20escrow\x20can\x20never\x20sit\x20at\x20delivered\x20forever.','operator':'order_payer','semantic_role':'final','from':[{'prev':'delivered','forward':'AcceptDelivery','operator':'order_payer','guard_key':'settle_accept'},{'prev':'reviewed','forward':'AcceptDeliveryAfterReview','operator':'order_payer','guard_key':'settle_accept'},{'prev':'delivered','forward':'AutoCompleteAfterWindow','operator':'merchant','permission_index':0x3ea,'guard_key':'settle_clock'}]},{'name':'return_requested','role':'Return\x20request\x20inside\x20the\x20seller\x27s\x20return\x20window\x20(post-delivery,\x20PRE-settlement):\x20the\x20reward\x20tier\x20arrived\x20damaged\x20/\x20not\x20as\x20described.\x20This\x20rail\x20is\x20only\x20alive\x20while\x20the\x20escrow\x20is\x20still\x20held\x20—\x20once\x20the\x20order\x20has\x20settled\x20the\x20buyer\x27s\x20remedy\x20is\x20the\x20independent\x20Arbitration\x20case\x20window\x20plus\x20the\x20compensation\x20fund,\x20never\x20a\x20second\x20machine\x20refund\x20path.','operator':'order_payer','semantic_role':'delivered','from':[{'prev':'delivered','forward':'RequestReturn','operator':'order_payer','guard_key':'return_window'}]},{'name':'returned','role':'Return\x20accepted:\x20the\x20project\x20approves\x20the\x20return\x20and\x20the\x20refund\x20Allocator\x20returns\x20the\x20escrowed\x20pledge\x20IN\x20FULL\x20to\x20the\x20backer\x27s\x20own\x20order\x20(slot\x200).\x20Mutually\x20exclusive\x20with\x20completed\x20by\x20construction\x20(a\x20different\x20node),\x20so\x20a\x20backer\x20can\x20never\x20both\x20keep\x20the\x20reward\x20and\x20be\x20refunded.','semantic_role':'cancelled','from':[{'prev':'return_requested','forward':'ApproveReturn','operator':'merchant','permission_index':0x3ea,'guard_key':'return_approved'}]}],'guards':[{'template_id':'tpl_crowdfunding_threshold_gate','host':'machine','key':'threshold_release','purpose':'RELEASE\x20polarity\x20of\x20the\x20funding-threshold\x20gate,\x20bound\x20to\x20the\x20pledged→funded_released\x20forward:\x20logic_and[\x20sum-where(1174\x20over\x20the\x20campaign\x20contribution\x20rows)\x20>=\x20funding_threshold,\x20Clock\x20>=\x20campaign_deadline_ms\x20].\x20The\x20aggregate\x20is\x20a\x20READ-ONLY\x20sum\x20over\x20keeper-enumerated\x20writer-bound\x20rows\x20(max\x20100\x20candidate\x20ids),\x20never\x20a\x20re-computation\x20of\x20every\x20escrow\x20balance\x20—\x20disclose\x20the\x20boundary\x20(L-04).\x20The\x20deadline\x20is\x20an\x20ABSOLUTE\x20campaign\x20timestamp\x20shared\x20by\x20every\x20backer\x20(pattern.time_lock_absolute),\x20NOT\x20a\x20per-order\x20entry+duration\x20lock.'},{'template_id':'tpl_crowdfunding_threshold_gate','host':'machine','key':'threshold_refund','purpose':'REFUND\x20polarity\x20of\x20the\x20SAME\x20gate,\x20bound\x20to\x20the\x20pledged→missed_refunded\x20forward:\x20logic_and[\x20sum-where(1174)\x20<\x20funding_threshold,\x20Clock\x20>=\x20campaign_deadline_ms\x20]\x20(swap\x20the\x20aggregate\x20leaf\x20to\x20logic_as_u256_lesser).\x20Mutually\x20exclusive\x20with\x20threshold_release\x20on\x20the\x20same\x20aggregate,\x20so\x20exactly\x20one\x20forward\x20is\x20satisfiable\x20once\x20the\x20deadline\x20passes.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'pre_deadline_withdraw','purpose':'Pre-deadline\x20withdrawal\x20gate,\x20bound\x20to\x20the\x20pledged→withdrawn\x20forward:\x20logic_as_u256_lesser_or_equal[context(Clock),\x20identifier[N](campaign_deadline_ms)]\x20—\x20the\x20CLOSING-window\x20direction\x20(a\x20backer\x20may\x20withdraw\x20only\x20WHILE\x20the\x20campaign\x20is\x20live).\x20ANCHOR\x20IS\x20THE\x20ABSOLUTE\x20shared\x20campaign\x20deadline\x20(the\x20SAME\x20campaign_deadline_ms\x20identifier\x20the\x20threshold\x20gate\x20reads\x20via\x20pattern.time_lock_absolute),\x20NOT\x20a\x20per-order\x20entry+duration:\x20every\x20backer\x20faces\x20ONE\x20deadline.\x20After\x20the\x20deadline\x20this\x20forward\x20aborts,\x20so\x20a\x20withdrawal\x20can\x20never\x20defund\x20a\x20campaign\x20whose\x20goal\x20was\x20already\x20met\x20(the\x20catalog-gap\x20P0-2\x20inline\x20resolution).'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'cancel_window','purpose':'Pre-shipment\x20cancellation\x20DEADLINE\x20window\x20—\x20a\x20CLOSING\x20window\x20(logic_as_u256_lesser_or_equal)\x20anchored\x20on\x20the\x20order\x20entry:\x20the\x20backer\x20may\x20cancel\x20a\x20pledge\x20AFTER\x20the\x20campaign\x20goal\x20was\x20met\x20but\x20only\x20while\x20the\x20reward\x20tier\x20has\x20not\x20been\x20shipped.\x20The\x20buyer-side\x20void\x20hop\x20(R-DRAFT-VOID)\x20must\x20exist\x20on\x20every\x20escrowed\x20node,\x20otherwise\x20an\x20abandoned\x20order\x20strands\x20the\x20pledge.'},{'template_id':'tpl_required_info_present','host':'machine','key':'required_info','purpose':'Required-info\x20gate,\x20bound\x20to\x20the\x20funded_released→fulfilling\x20forward:\x20order.required_info\x20some\x20—\x20the\x20buyer\x27s\x20shipping\x20/\x20contact\x20address\x20(delivered\x20over\x20the\x20encrypted\x20Messenger\x20and\x20recorded\x20as\x20an\x20on-chain\x20Proof)\x20must\x20be\x20present\x20BEFORE\x20the\x20project\x20starts\x20shipping.\x20Service.customer_required\x20is\x20DECLARATIVE-ONLY,\x20so\x20this\x20Guard\x20is\x20the\x20only\x20enforcement;\x20the\x20recorded\x20value\x20is\x20never\x20published\x20on\x20chain.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'deliver_confirm','purpose':'Delivery\x20confirmation\x20gate,\x20bound\x20to\x20the\x20shipped→delivered\x20forward:\x20the\x20ORDER\x20HOLDER\x20(the\x20buyer)\x20confirms\x20the\x20carrier\x20handed\x20the\x20reward\x20tier\x20over.\x20The\x20merchant\x20can\x20never\x20self-declare\x20delivery\x20to\x20capture\x20the\x20escrow.'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'return_window','purpose':'Return-request\x20DEADLINE\x20window\x20—\x20a\x20CLOSING\x20window\x20(logic_as_u256_lesser_or_equal),\x20anchored\x20on\x20the\x20delivered\x20node\x20entry:\x20the\x20buyer\x20may\x20request\x20a\x20return\x20only\x20INSIDE\x20the\x20seller\x27s\x20return\x20window.\x20The\x20opening-gate\x20twin\x20would\x20encode\x20\x27no\x20returns\x20now,\x20unlimited\x20returns\x20forever\x20after\x27\x20—\x20the\x20exact\x20inverse.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'return_approved','purpose':'Return-approval\x20gate,\x20bound\x20to\x20the\x20return_requested→returned\x20forward:\x20the\x20order\x20holder\x20(the\x20buyer)\x20confirms\x20the\x20returned\x20goods\x20were\x20received\x20back,\x20so\x20the\x20refund\x20rail\x20cannot\x20be\x20fired\x20by\x20the\x20project\x20alone.'},{'template_id':'pattern.identity_check_order_holder','host':'machine','key':'settle_accept','purpose':'Buyer\x20acceptance\x20gate,\x20bound\x20to\x20the\x20delivered→completed\x20(and\x20reviewed→completed)\x20forward:\x20the\x20ORDER\x20HOLDER\x20(the\x20buyer)\x20accepts\x20the\x20delivered\x20tier,\x20which\x20opens\x20the\x20settlement\x20rail.\x20The\x20acceptance\x20is\x20the\x20buyer\x27s\x20SIGNATURE\x20on\x20\x27the\x20reward\x20is\x20what\x20was\x20promised\x27\x20—\x20it\x20is\x20what\x20moves\x20the\x20pledge\x20from\x20the\x20buyer\x27s\x20escrow\x20to\x20the\x20project.\x20No\x20time\x20window\x20on\x20this\x20edge:\x20the\x20buyer\x20may\x20accept\x20as\x20soon\x20as\x20the\x20carrier\x20confirms.'},{'template_id':'pattern.time_lock_progress','host':'machine','key':'settle_clock','purpose':'Settlement\x20FORWARD\x20time\x20gate\x20(split\x20off\x20settle_window):\x20\x27Clock\x20>=\x20delivered\x20entry\x20+\x20settlement_delay_days\x27\x20—\x20the\x20TIME\x20LEG\x20ONLY,\x20anchored\x20on\x20the\x20PREV\x20node\x27s\x20entry\x20(a\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance,\x20so\x20progress.current\x20reads\x20as\x20prev).\x20A\x20progress.current\x20pin\x20must\x20NEVER\x20appear\x20here\x20(it\x20would\x20target\x20the\x20destination\x20node\x20completed\x20and\x20weld\x20the\x20edge\x20shut);\x20the\x20completed\x20state\x20pin\x20stays\x20on\x20the\x20settlement\x20allocator\x20rows\x20(settle_window),\x20which\x20evaluate\x20at\x20alloc\x20time\x20on\x20the\x20reached\x20node.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'settle_window','purpose':'Settlement\x20allocator\x20gate,\x20bound\x20to\x20the\x20settlement\x20allocator\x20rows\x20ONLY\x20(guard_key\x20settle_window):\x20progress.current\x20==\x20completed\x20PLUS\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20—\x20the\x20exclusion\x20is\x20ONE-DIRECTIONAL\x20(it\x20blocks\x20the\x20payout\x20only\x20AFTER\x20a\x20compensation\x20award\x20actually\x20paid).\x20The\x20Rate-0\x20ORDER\x20anchor\x20leg\x20rides\x20the\x20same\x20key\x20so\x20the\x20anchor\x20and\x20the\x20project\x20leg\x20share\x20ONE\x20Allocator\x20(chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20==\x200\x20(Order.dispute\x20is\x20append-only\x20—\x20a\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_missed','purpose':'Missed-goal\x20refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20refund_missed):\x20progress.current\x20==\x20missed_refunded\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20(query\x20id\x201570,\x20Bool)\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20pledge\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200\x20—\x20the\x20submitted\x20Order;\x20NEVER\x20slot\x20254\x20on\x20a\x20refund\x20rail:\x20period\x202+\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_withdrawn','purpose':'Pre-deadline\x20pledge-WITHDRAWAL\x20refund\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20refund_withdrawn):\x20progress.current\x20==\x20withdrawn\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20pledge\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200).\x20Distinct\x20from\x20refund_missed\x20by\x20the\x20node\x20it\x20reads,\x20so\x20the\x20two\x20buyer-refund\x20rails\x20never\x20overlap.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_returned','purpose':'Post-delivery\x20RETURN\x20refund\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20refund_returned):\x20progress.current\x20==\x20returned\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20pledge\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200).\x20This\x20is\x20the\x20return\x20rail\x20that\x20keeps\x20the\x20escrow\x20alive\x20until\x20the\x20reward\x20tier\x20is\x20accepted\x20(escrow-through-fulfillment).'},{'template_id':'pattern.progress_state_check','host':'machine','key':'refund_cancelled','purpose':'Post-decision\x20cancellation\x20refund\x20allocator\x20gate,\x20bound\x20to\x20the\x20refund\x20row\x20(guard_key\x20refund_cancelled):\x20progress.current\x20==\x20pledge_cancelled\x20+\x20order.service\x20binding\x20+\x20order.claimed_by\x20some\x20==\x20false\x20→\x20pays\x20the\x20WHOLE\x20escrowed\x20pledge\x20(Rate\x2010000)\x20back\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200).\x20The\x20buyer-side\x20void\x20hop\x27s\x20money\x20path\x20—\x20without\x20it\x20the\x20buyer\x27s\x20exit\x20is\x20topologically\x20dead.'},{'template_id':'pattern.progress_state_check','host':'machine','key':'recover_gate','purpose':'Project-recovery\x20allocator\x20gate\x20(escrow-exit\x20invariant,\x20catalog-wide):\x20order.claimed_by\x20some\x20==\x20true\x20(query\x20id\x201570,\x20Bool)\x20+\x20order.service\x20binding\x20—\x20deliberately\x20NO\x20node\x20equality\x20leg\x20(the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20mutual\x20exclusion).\x20Pays\x20Rate\x2010000\x20to\x20the\x20project\x20Entity\x20so\x20the\x20escrow\x20principal\x20of\x20an\x20ARBITRATION-AWARDED\x20order\x20still\x20exits:\x20exactly\x20one\x20of\x20the\x20buyer-refund\x20rails\x20(claimed_by\x20some\x20==\x20false)\x20and\x20recover_gate\x20(some\x20==\x20true)\x20can\x20ever\x20pass\x20(D-BUG-2).'},{'template_id':'pattern.time_window_upper_bound','host':'machine','key':'review_window','purpose':'Buyer\x20review\x20DEADLINE\x20window\x20—\x20a\x20CLOSING\x20window\x20(logic_as_u256_lesser_or_equal)\x20anchored\x20on\x20the\x20delivered\x20node\x20entry:\x20the\x20buyer\x20may\x20review\x20only\x20INSIDE\x20the\x20review\x20window.\x20Optional\x20side\x20action,\x20NEVER\x20a\x20settlement\x20gate\x20—\x20the\x20escrow\x20always\x20keeps\x20the\x20unreviewed\x20path\x20delivered\x20→\x20completed.'},{'template_id':'pattern.progress_state_check','host':'reward','key':'reward_claim','purpose':REWARD_CLAIM_PURPOSE},{'template_id':'pattern.repository_write_authorization','host':'repository','key':'repo_write','policy':{'name':'contribution','id_from':'signer','value_type':'U64'},'purpose':'Campaign\x20Repository\x20write_guard\x20MUST\x20bind\x20the\x20writer\x20to\x20the\x20contributing\x20backer\x20(identity\x20leaf:\x20logic_or[query(1562\x20order.owner)==Signer,\x20query(1567\x20order.agent\x20has,\x20Signer)]):\x20repository.move\x20only\x20asserts\x20the\x20write_guard\x20LIST\x20is\x20non-empty,\x20never\x20what\x20a\x20listed\x20guard\x20proves,\x20so\x20a\x20placeholder\x20that\x20returns\x20true\x20is\x20an\x20OPEN\x20write\x20—\x20anyone\x20could\x20inflate\x20the\x20aggregate\x20and\x20forge\x20a\x20\x27goal\x20met\x27.\x20id_from\x20signer\x20keys\x20each\x20row\x20to\x20the\x20backer\x27s\x20own\x20address\x20(one\x20row\x20per\x20funder)\x20and\x20makes\x20the\x20writer-scoped\x20row-removal\x20(the\x20withdrawal\x20rail)\x20possible.\x20EXISTENCE-IS-NOT-TRUST\x20(R-X1-17).\x20🔴\x20A6\x20boundary:\x20this\x20policy\x20binds\x20WHO\x20writes,\x20never\x20WHAT\x20is\x20written\x20—\x20the\x20row\x20VALUE\x20is\x20self-declared,\x20so\x20the\x20aggregate\x20can\x20be\x20inflated\x20by\x20a\x20backer\x20who\x20escrowed\x20far\x20less\x20than\x20they\x20declared.'}],'allocator':{'recipient':'entity','recipient_key':'project','count':0x3,'mode':'rate','refund_track':'order_anchored','once_per_order':!![],'rows':[{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'settle_window','note':'Release\x20the\x20escrowed\x20pledge\x20to\x20the\x20project\x20Entity\x20when\x20the\x20buyer\x20ACCEPTS\x20the\x20delivered\x20tier\x20(Rate\x2010000\x20=\x20the\x20whole\x20pledge).\x20An\x20explicit\x20NON-EMPTY\x20Entity\x20is\x20mandatory\x20(an\x20empty\x20Entity\x20routes\x20the\x20share\x20to\x20the\x20deploying\x20AI;\x20a\x20zero-address\x20Entity\x20burns\x20it).\x20WoWok\x20takes\x20no\x20platform\x20commission,\x20so\x20there\x20is\x20no\x20platform\x20Rate\x20leg\x20—\x20the\x20project\x20keeps\x20100%.'},{'track':'settlement','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x0,'guard_key':'settle_window','note':'Rate-0\x20ORDER\x20anchor\x20leg\x20(pattern.allocator_order_anchor)\x20riding\x20INSIDE\x20the\x20settlement\x20allocator:\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order\x20(slot\x200\x20=\x20submitted\x20Order)\x20so\x20a\x20sibling\x20order\x27s\x20passport\x20cannot\x20drive\x20this\x20rail;\x20pays\x20nothing.\x20Chain\x20Rate\x20sums\x20are\x20asserted\x20per\x20Allocator,\x20so\x20the\x20anchor\x20shares\x20the\x20settle_window\x20guard_key\x20(10000\x20+\x200\x20=\x2010000).'},{'track':'settlement','recipient':'entity','recipient_key':'project','mode':'rate','value':0x2710,'guard_key':'recover_gate','note':'Project-recovery\x20leg:\x20the\x20escrow\x20principal\x20of\x20an\x20ARBITRATION-AWARDED\x20order\x20(claimed_by\x20some\x20==\x20true)\x20exits\x20to\x20the\x20project\x20Entity\x20(the\x20backer\x20was\x20already\x20made\x20whole\x20from\x20the\x20compensation\x20fund).\x20The\x20polarity\x20twin\x20of\x20the\x20buyer-refund\x20rails\x20—\x20exactly\x20one\x20can\x20pass.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_missed','note':'Full\x20per-contributor\x20refund\x20of\x20the\x20escrowed\x20pledge\x20to\x20the\x20order-anchored\x20backer\x20at\x20missed_refunded\x20(slot\x200\x20—\x20the\x20submitted\x20Order,\x20payment_info.for_object;\x20NEVER\x20slot\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes,\x20so\x20period\x202+\x20aborts\x20E_ONCE_TRIGGERED(16),\x20OFN\x20#P-04).\x20claimed_by\x20some\x20==\x20false;\x20NEVER\x20gate\x20on\x20dispute\x20count\x20(append-only\x20one-way\x20door).\x20once_per_order\x20stops\x20a\x20replay.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_withdrawn','note':'Pre-deadline\x20pledge-WITHDRAWAL\x20refund:\x20returns\x20the\x20escrowed\x20pledge\x20IN\x20FULL\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200)\x20when\x20they\x20withdraw\x20while\x20the\x20campaign\x20is\x20still\x20live.\x20The\x20withdrawal\x20ALSO\x20removes\x20the\x20backer\x27s\x20writer-bound\x20contribution\x20row\x20so\x20the\x20aggregate\x20stops\x20counting\x20it.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_returned','note':'Post-delivery\x20RETURN\x20refund:\x20returns\x20the\x20escrowed\x20pledge\x20IN\x20FULL\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200)\x20when\x20the\x20merchant\x20approves\x20the\x20return\x20of\x20a\x20damaged\x20/\x20not-as-described\x20reward\x20tier.\x20This\x20is\x20the\x20rail\x20that\x20keeps\x20the\x20escrow\x20alive\x20until\x20the\x20reward\x20is\x20accepted.'},{'track':'refund','recipient':'guard_identifier','recipient_key':'0','mode':'rate','value':0x2710,'guard_key':'refund_cancelled','note':'Post-decision\x20CANCELLATION\x20refund:\x20returns\x20the\x20escrowed\x20pledge\x20IN\x20FULL\x20to\x20the\x20order-anchored\x20backer\x20(slot\x200)\x20when\x20the\x20backer\x20cancels\x20after\x20the\x20campaign\x20goal\x20was\x20met\x20but\x20before\x20the\x20reward\x20tier\x20shipped.\x20The\x20buyer-side\x20void\x20hop\x27s\x20money\x20path.'}],'description':'ESCROW-THROUGH-FULFILLMENT\x20release\x20+\x20four\x20mutually\x20exclusive\x20buyer-refund\x20rails.\x20Every\x20backer\x27s\x20pledge\x20sits\x20in\x20its\x20OWN\x20unpooled\x20Allocation\x20(payment_info.for_object\x20=\x20the\x20backer\x27s\x20Order),\x20so\x20\x27whose\x20money\x20is\x20this\x27\x20is\x20always\x20answerable\x20and\x20a\x20refund\x20returns\x20the\x20backer\x27s\x20OWN\x20pledge.\x20The\x20pledge\x20is\x20released\x20to\x20the\x20project\x20Entity\x20(Rate\x2010000\x20—\x20WoWok\x20takes\x20no\x20platform\x20commission,\x20the\x20project\x20keeps\x20100%)\x20only\x20when\x20the\x20buyer\x20ACCEPTS\x20the\x20delivered\x20reward\x20tier\x20(settle_window).\x20Until\x20then\x20the\x20buyer-side\x20refund\x20rails\x20are\x20live:\x20the\x20missed-goal\x20refund\x20(refund_missed),\x20the\x20pre-deadline\x20withdrawal\x20refund\x20(refund_withdrawn),\x20the\x20post-delivery\x20return\x20refund\x20(refund_returned)\x20and\x20the\x20post-decision\x20cancellation\x20refund\x20(refund_cancelled)\x20—\x20each\x20bound\x20to\x20a\x20DIFFERENT\x20node,\x20so\x20at\x20most\x20one\x20of\x20them\x20can\x20ever\x20fire\x20for\x20an\x20order.\x20The\x20project-recovery\x20rail\x20(recover_gate,\x20claimed_by\x20some\x20==\x20true)\x20is\x20the\x20polarity\x20twin\x20of\x20the\x20buyer\x20rails.\x20Every\x20settlement/refund\x20allocator\x20carries\x20the\x20ORDER\x20anchor\x20so\x20payment_info.for_object\x20binds\x20the\x20paying\x20order\x20(anti\x20cross-order\x20hijack).\x20once_per_order\x20arms\x20the\x20identifier-254\x20ONCE-FOR-OBJECT\x20slot,\x20scoped\x20PER\x20ALLOCATION,\x20so\x20a\x20replay\x20aborts\x20code\x2016.\x20🔴\x20The\x20campaign\x20goal\x20the\x20threshold\x20gate\x20reads\x20is\x20an\x20aggregate\x20over\x20self-declared,\x20keeper-submitted\x20contribution\x20records\x20—\x20an\x20attested\x20read,\x20not\x20a\x20custody\x20proof\x20(A6/A7\x20disclosures).'},'fee_params':{'funding_threshold':0x11e1a300,'campaign_deadline_ms':0x0,'campaign_duration_days':0x1e,'platform_commission_bps':0x0,'merchant_service_fee_bps':0x0,'threshold':0x0,'incumbent_take_bps':0x1f4,'review_reward_pool':0x1312d00,'reward_claim_window_days':0xe,'review_window_days':0xe,'return_window_days':0xe,'settlement_delay_days':0x1,'withdrawal_window_days':0x1e},'time_anchors':{'campaign_deadline':'context\x20Clock\x20>=\x20campaign_deadline_ms\x20(an\x20ABSOLUTE\x20epoch-ms\x20timestamp,\x20pattern.time_lock_absolute)\x20—\x20ONE\x20shared\x20campaign\x20deadline\x20for\x20every\x20backer,\x20NOT\x20a\x20per-order\x20entry+duration\x20lock;\x20bind\x20pattern.time_source_repository_oracle\x20for\x20a\x20real-world\x20calendar\x20date\x20(chain\x20Clock\x20is\x20block-driven)','return_window':'Clock\x20<=\x20delivered-entry\x20+\x20return_window_days\x20(a\x20CLOSING\x20window,\x20pattern.time_window_upper_bound)\x20—\x20the\x20return\x20rail\x20is\x20only\x20alive\x20inside\x20the\x20window;\x20after\x20it,\x20the\x20buyer\x27s\x20remedy\x20is\x20the\x20Arbitration\x20case\x20window\x20+\x20compensation\x20fund','review_window':'Clock\x20<=\x20delivered-entry\x20+\x20review_window_days\x20(a\x20CLOSING\x20window)\x20—\x20the\x20review\x20is\x20optional\x20and\x20never\x20gates\x20money','settlement':'Clock\x20>=\x20delivered-entry\x20+\x20settlement_delay_days\x20(pattern.time_lock_progress)\x20—\x20a\x20silent\x20buyer\x20is\x20released\x20by\x20the\x20keeper\x20after\x20the\x20window\x20so\x20the\x20escrow\x20cannot\x20sit\x20at\x20delivered\x20forever'},'trust_mechanisms':['R1\x20FOUR\x20buyer-side\x20refund\x20rails\x20over\x20one\x20unpooled\x20per-backer\x20escrow:\x20missed-goal\x20(refund_missed),\x20pre-deadline\x20withdrawal\x20(refund_withdrawn),\x20post-delivery\x20return\x20(refund_returned),\x20post-decision\x20cancellation\x20(refund_cancelled)\x20—\x20each\x20bound\x20to\x20a\x20different\x20node,\x20so\x20at\x20most\x20one\x20can\x20fire\x20per\x20order','R2\x20escrow-through-fulfillment:\x20the\x20pledge\x20is\x20released\x20to\x20the\x20project\x20ONLY\x20when\x20the\x20buyer\x20accepts\x20the\x20delivered\x20tier\x20(settle_window)\x20—\x20the\x20project\x20cannot\x20capture\x20the\x20escrow\x20by\x20self-declaring\x20delivery\x20(deliver_confirm\x20is\x20buyer-first)','R3\x20independent\x20THIRD-PARTY\x20arbitration\x20Permission\x20(arbitration_mode\x20third_party)\x20for\x20non-delivery\x20/\x20not-as-described\x20cases\x20that\x20survive\x20the\x20return\x20window;\x20the\x20venue\x27s\x20controllers\x20are\x20NOT\x20protocol-verified\x20—\x20disclosed\x20(N-01)','R4\x20compensation\x20fund\x20payout\x20hard-bound\x20to\x20the\x20order\x20owner\x20(the\x20post-raise\x20delivery\x20backstop)','R5\x20every\x20pledge\x20anchored\x20to\x20its\x20OWN\x20order\x20Allocation\x20(the\x20Rate-0\x20GuardIdentifier(0)\x20order\x20anchor\x20binds\x20the\x20settlement\x20Guard\x20to\x20the\x20paying\x20order;\x20for_object\x20preserves\x20attribution)','R6\x20Rate\x20plan:\x20the\x20project\x20keeps\x20100%\x20(Rate\x2010000);\x20allocator\x20threshold\x200;\x20funding_threshold\x20is\x20the\x20distinct\x20campaign\x20goal','R7\x20publish\x20freeze\x20—\x20the\x20campaign\x20terms\x20(WIP),\x20the\x20funding\x20goal,\x20the\x20deadline,\x20the\x20reward-tier\x20catalogue\x20and\x20the\x20writer-bound\x20contribution\x20policy\x20are\x20configured\x20before\x20publish','R8\x20customer-service\x20Contact\x20bound','R9\x20keepers\x20for\x20the\x20deadline\x20settlement\x20advance\x20and\x20the\x20missed-campaign\x20batch\x20refund\x20only\x20(no\x20charge\x20authority)','R10\x20contribution-row\x20write_guard\x20binds\x20the\x20writer\x20to\x20the\x20backer\x20(order.owner\x20==\x20Signer)\x20so\x20the\x20aggregate\x20cannot\x20be\x20inflated\x20by\x20a\x20third\x20party','R11\x20campaign\x20terms\x20+\x20funding\x20goal\x20+\x20deadline\x20+\x20the\x20reward-tier\x20catalogue\x20anchored\x20as\x20the\x20WIP\x20artifact','R12\x20pre-deadline\x20pledge\x20withdrawal\x20removes\x20the\x20backer\x27s\x20OWN\x20writer-bound\x20contribution\x20row,\x20then\x20refunds\x20in\x20full','R13\x20REVIEW\x20BOUNTY:\x20a\x20merchant-funded\x20Reward\x20pool\x20pays\x20the\x20buyer\x20a\x20cash\x20bounty\x20for\x20leaving\x20a\x20rating\x20+\x20written\x20review;\x20the\x20buyer\x20sees\x20the\x20incentive\x20terms\x20at\x20quote\x20time\x20(the\x20tier\x27s\x20incentive\x20declaration)\x20and\x20claims\x20it\x20once\x20per\x20order;\x20the\x20pool\x20must\x20be\x20funded\x20at\x20build\x20time\x20(an\x20unfunded\x20incentive\x20promise\x20must\x20not\x20publish)','R14\x20privacy\x20boundary:\x20shipping\x20address\x20/\x20contact\x20address\x20/\x20meeting\x20address\x20are\x20exchanged\x20over\x20the\x20encrypted\x20Messenger\x20only,\x20never\x20written\x20to\x20a\x20public\x20on-chain\x20field\x20(Contact\x20descriptions,\x20repository\x20rows,\x20progress\x20messages)'],'keeper_dependencies':['deadline\x20campaign\x20decision\x20(pledged→funded_released\x20on\x20the\x20release-polarity\x20gate\x20once\x20Clock\x20>=\x20deadline\x20and\x20the\x20aggregate\x20>=\x20goal)','missed-campaign\x20batch\x20refund\x20(enumerate\x20contributor\x20ids\x20via\x20find-where\x201176\x20/\x20keys-where\x201177,\x20advance\x20each\x20pledged→missed_refunded\x20on\x20the\x20refund-polarity\x20gate)','fulfillment\x20advance\x20(funded_released→fulfilling→shipped),\x20delivery\x20confirmation\x20and\x20the\x20settlement\x20advance\x20(delivered→completed)','NO\x20auto-charge\x20authority\x20by\x20design;\x20the\x20pre-deadline\x20pledge\x20withdrawal\x20is\x20buyer\x20self-service\x20(order_payer),\x20needs\x20no\x20keeper'],'differences':['REWARD-CAMPAIGN\x20(Indiegogo-style):\x20the\x20pledge\x20is\x20escrowed\x20per\x20backer\x20through\x20the\x20FULFILLMENT\x20phase\x20and\x20released\x20only\x20on\x20the\x20buyer\x27s\x20acceptance\x20—\x20the\x20sibling\x20crowdfunding/all-or-nothing-threshold\x20releases\x20at\x20the\x20deadline,\x20which\x20leaves\x20a\x20defective\x20reward\x20with\x20no\x20on-chain\x20refund\x20path','Full\x20reward-tier\x20fulfilment\x20spine:\x20fulfilling\x20→\x20shipped\x20→\x20delivered\x20→\x20reviewed\x20→\x20completed,\x20plus\x20the\x20post-delivery\x20return\x20rail\x20(return_requested\x20→\x20returned)\x20—\x20the\x20sibling\x20has\x20no\x20fulfilment\x20phase\x20at\x20all','Review\x20rail:\x20a\x20buyer-advanced\x20reviewed\x20node\x20(optional\x20side\x20stop\x20with\x20an\x20exit\x20edge\x20back\x20to\x20the\x20settlement\x20rail)\x20plus\x20a\x20merchant-funded\x20review\x20bounty\x20—\x20the\x20sibling\x20declares\x20review_mode\x20\x27none\x27','FOUR\x20refund\x20rails\x20(missed-goal\x20/\x20pre-deadline\x20withdrawal\x20/\x20post-delivery\x20return\x20/\x20post-decision\x20cancellation)\x20instead\x20of\x20two;\x20each\x20is\x20node-bound\x20so\x20they\x20never\x20overlap'],'user_inputs':['funding_threshold\x20—\x20the\x20aggregate\x20campaign\x20goal\x20the\x20sum-where\x20(1174)\x20total\x20is\x20compared\x20against\x20(U256\x20semantics;\x20DISTINCT\x20from\x20the\x20allocator\x27s\x20fee_params.threshold\x20which\x20stays\x200)','campaign_deadline_ms\x20—\x20the\x20ABSOLUTE\x20shared\x20deadline\x20(epoch\x20ms)\x20the\x20campaign\x20decision\x20opens\x20at;\x20one\x20deadline\x20for\x20every\x20backer','campaign_duration_days\x20—\x20display\x20helper\x20for\x20the\x20deadline','campaign_repository\x20—\x20the\x20Repository\x20object\x20address\x20holding\x20the\x20contribution\x20ledger\x20(REQUIRED\x20by\x20tpl_crowdfunding_threshold_gate)','contribution_key\x20—\x20the\x20Repository\x20policy\x20key\x20under\x20which\x20contribution\x20rows\x20are\x20stored\x20(default\x20\x27contribution\x27)','The\x20reward-tier\x20catalogue\x20(name,\x20pledge\x20amount,\x20tier\x20availability\x20count,\x20WIP\x20detail\x20file\x20per\x20tier)\x20—\x20the\x20tier\x20catalogue\x20IS\x20the\x20Service\x27s\x20sales\x20list','The\x20campaign\x20terms\x20+\x20funding\x20goal\x20+\x20deadline\x20+\x20tier\x20catalogue\x20WIP\x20artifact\x20(anchored\x20at\x20launch)','The\x20project\x20Entity\x20that\x20receives\x20the\x20release\x20on\x20an\x20accepted\x20tier\x20(NON-EMPTY)','reward_funding\x20—\x20the\x20funded\x20review-bounty\x20pool\x20(compile\x20REQUIRES\x20it\x20under\x20review_mode\x20review_reward;\x20review_reward_pool\x20sizes\x20the\x20plan\x20benchmark)\x20so\x20the\x20incentive\x20is\x20perceivable\x20BEFORE\x20the\x20order','review_window_days\x20/\x20return_window_days\x20/\x20settlement_delay_days\x20/\x20withdrawal_window_days\x20/\x20reward_claim_window_days\x20—\x20the\x20business\x20windows','incumbent_take_bps\x20—\x20the\x20displaced\x20crowdfunding\x20platform\x20take,\x20benchmark\x20disclosure\x20only;\x20this\x20template\x27s\x20take\x20is\x20platform_commission_bps\x20(KEEP\x20AT\x200)','Third-party\x20Arbitration\x20venue\x20selection\x20(independent\x20Permission)\x20—\x20verify\x20the\x20venue\x27s\x20controllers\x20first\x20(N-01)'],'build_notes':['UNPOOLED\x20PER-BACKER\x20ESCROW:\x20every\x20backer\x27s\x20pledge\x20sits\x20in\x20its\x20OWN\x20Allocation\x20with\x20payment_info.for_object\x20bound\x20to\x20that\x20backer\x27s\x20Order.\x20The\x20money\x20is\x20NEVER\x20balance::join-ed\x20into\x20a\x20shared\x20pot\x20—\x20so\x20the\x20chain\x20can\x20always\x20answer\x20\x27whose\x20money\x20is\x20this\x27\x20and\x20refund\x20it\x20to\x20the\x20right\x20backer.\x20A\x20for_object-bound\x20Allocation\x20forces\x20every\x20recipient\x20leg\x20to\x20the\x20bound\x20address\x20(allocation.move:523-524,\x20ERECIPIENT_NOT_FOR_OBJECT=15),\x20which\x20is\x20exactly\x20what\x20the\x20slot-0\x20refund\x20legs\x20want.','THRESHOLD\x20GATE\x20=\x20ON-CHAIN\x20AGGREGATE\x20(zero\x20chain\x20change):\x20the\x20campaign\x20Guard\x20reads\x20repository.data\x20sum-where\x20(query\x201174\x20→\x20U256,\x20checked_add\x20overflow-safe)\x20over\x20the\x20campaign\x27s\x20contribution\x20rows\x20and\x20compares\x20against\x20funding_threshold\x20(tpl_crowdfunding_threshold_gate).\x20The\x20aggregate\x20is\x20a\x20read-only\x20view;\x20the\x20money\x20stays\x20SEPARATE\x20in\x20each\x20order\x27s\x20Allocation.','🔴\x20AGGREGATE\x20TRUST\x20BOUNDARY\x20(L-04,\x20MUST\x20disclose):\x20the\x20funding\x20total\x20is\x20a\x20read-only\x20sum\x20over\x20keeper-supplied,\x20writer-bound\x20contribution\x20rows\x20—\x20it\x20is\x20NOT\x20an\x20independent\x20re-computation\x20of\x20every\x20escrow\x20balance,\x20and\x20roster\x20completeness\x20is\x20keeper-attested.\x20Never\x20present\x20the\x20threshold\x20as\x20a\x20chain-verified\x20total-custody\x20proof.\x20State\x20plainly:\x20\x27The\x20goal\x20decision\x20reads\x20the\x20on-chain\x20aggregate\x20pledge\x20total\x20over\x20the\x20shared\x20campaign\x20ledger\x20(every\x20contribution\x20record\x20is\x20writer-bound);\x20the\x20aggregate\x20is\x20a\x20read-only\x20sum\x20over\x20RECORDED\x20contribution\x20rows,\x20not\x20an\x20independent\x20re-computation\x20of\x20each\x20escrowed\x20balance.\x27','🔴\x20THE\x20AGGREGATE\x20SUMS\x20DECLARED\x20VALUES,\x20NOT\x20ESCROWED\x20VALUES\x20(A6,\x20ksg-mn-261022\x20—\x20MUST\x20disclose):\x20the\x20contribution\x20row\x20VALUE\x20is\x20self-declared\x20by\x20the\x20backer;\x20the\x20write\x20policy\x20binds\x20WHO\x20writes,\x20never\x20WHAT\x20is\x20written.\x20A\x20backer\x20can\x20therefore\x20record\x20a\x20contribution\x20larger\x20than\x20the\x20pledge\x20they\x20escrowed\x20and\x20move\x20the\x20campaign\x27s\x20aggregate.\x20Keep\x20the\x20sum-where\x20candidate\x20list\x20short\x20and\x20re-derive\x20the\x20campaign\x20total\x20from\x20the\x20escrowed\x20order\x20amounts,\x20or\x20treat\x20the\x20aggregate\x20as\x20an\x20attestation\x20only.','🔴\x20THE\x20CANDIDATE\x20SET\x20IS\x20KEEPER-ATTESTED\x20AND\x20CAPPED\x20AT\x20100\x20(A7,\x20ksg-mn-261022\x20—\x20MUST\x20disclose):\x20the\x20aggregate\x20covers\x20ONLY\x20the\x20records\x20the\x20keeper\x20submitted\x20in\x20this\x20settlement\x20—\x20it\x20is\x20not\x20a\x20whole-ledger\x20scan.\x20A\x20campaign\x20settled\x20in\x20several\x20batches\x20therefore\x20produces\x20SEVERAL\x20different\x20totals,\x20and\x20the\x20release\x20XOR\x20refund\x20verdict\x20is\x20taken\x20per\x20batch\x20—\x20so\x20the\x20same\x20campaign\x20can\x20release\x20some\x20backers\x20and\x20refund\x20others.\x20A\x20campaign\x20with\x20more\x20than\x20100\x20backers\x20has\x20no\x20well-defined\x20goal\x20decision.','ESCROW-THROUGH-FULFILLMENT\x20(the\x20deliberate\x20departure\x20from\x20charge-at-campaign-end):\x20the\x20pledge\x20is\x20released\x20to\x20the\x20project\x20only\x20when\x20the\x20buyer\x20ACCEPTS\x20the\x20delivered\x20tier.\x20This\x20keeps\x20a\x20live\x20on-chain\x20refund\x20path\x20for\x20a\x20damaged\x20/\x20not-as-described\x20reward;\x20under\x20a\x20deadline-release\x20model\x20the\x20escrow\x20is\x20empty\x20by\x20the\x20time\x20the\x20buyer\x20can\x20complain,\x20and\x20the\x20refund\x20would\x20have\x20to\x20be\x20paid\x20from\x20the\x20merchant\x27s\x20own\x20wallet\x20off-chain.\x20State\x20the\x20policy\x20plainly\x20to\x20backers.','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17,\x20existence-is-not-trust):\x20each\x20contribution\x20row\x20is\x20written\x20under\x20pattern.repository_write_authorization\x20with\x20an\x20identity\x20leaf\x20(order.owner\x20==\x20Signer\x20/\x20order.agent\x20has\x20Signer)\x20and\x20id_from\x20signer,\x20so\x20a\x20backer\x20can\x20only\x20record\x20their\x20OWN\x20contribution.','ABSOLUTE\x20SHARED\x20DEADLINE\x20(P0-2\x20inline\x20resolution):\x20the\x20shipped\x20catalog\x20has\x20pattern.time_lock_absolute\x20(an\x20OPENING\x20gate)\x20but\x20NO\x20closing-window\x20twin,\x20so\x20pattern.time_window_upper_bound\x20resolves\x20to\x20a\x20PER-ORDER\x20entry+duration\x20window.\x20Resolve\x20pre_deadline_withdraw\x20INLINE\x20as\x20lesser_or_equal[context(Clock),\x20identifier[N](campaign_deadline_ms)]\x20so\x20every\x20backer\x20faces\x20ONE\x20shared\x20campaign\x20deadline;\x20otherwise\x20a\x20backer\x20can\x20withdraw\x20AFTER\x20the\x20deadline\x20and\x20defund\x20a\x20campaign\x20whose\x20goal\x20was\x20already\x20met.','🔴\x20NON-INVESTMENT\x20(L-01,\x20MUST\x20disclose):\x20crowdfunding\x20copy\x20must\x20NEVER\x20promise\x20investment\x20returns,\x20yield,\x20or\x20token-price\x20appreciation\x20—\x20it\x20is\x20a\x20threshold\x20purchase/presale/donation,\x20not\x20a\x20security.\x20Carry\x20the\x20plain\x20disclosure\x20\x27not\x20investment\x20advice\x20or\x20a\x20yield\x20promise\x27\x20in\x20the\x20campaign\x20copy.','🔴\x20KYC/AML\x20(L-05,\x20MUST\x20flag):\x20pooled\x20fundraising\x20is\x20HIGH\x20regulatory\x20intensity\x20—\x20cross-border\x20funds\x20and\x20reward\x20tiers\x20may\x20trigger\x20securities\x20/\x20money-transmission\x20/\x20KYC-AML\x20rules.\x20Flag\x20for\x20compliance;\x20do\x20not\x20automate\x20around\x20them.','🔴\x20ARBITRATION\x20TRIBUNAL\x20CONTROLLERS\x20UNVERIFIED\x20(N-01,\x20ksg-mn-261022\x20—\x20MUST\x20disclose):\x20the\x20protocol\x20routes\x20disputes\x20to\x20the\x20venue\x20the\x20merchant\x20binds,\x20but\x20it\x20does\x20NOT\x20verify\x20WHO\x20controls\x20that\x20venue\x20—\x20the\x20venue\x27s\x20admin/permission\x20holders\x20can\x20pause,\x20re-key\x20or\x20steer\x20case\x20handling,\x20and\x20a\x20venue\x20controlled\x20by\x20(or\x20affiliated\x20with)\x20the\x20merchant\x20is\x20not\x20an\x20independent\x20tribunal.\x20Verify\x20the\x20venue\x27s\x20controller\x20set\x20before\x20binding\x20it\x20and\x20disclose\x20to\x20backers\x20that\x20arbitration\x20outcomes\x20depend\x20on\x20a\x20third-party\x20venue\x20whose\x20controllers\x20are\x20not\x20protocol-verified.','REVIEW\x20BOUNTY\x20(buyer-perceivable):\x20each\x20tier\x20may\x20declare\x20an\x20incentive\x20(amount\x20/\x20conditions\x20/\x20basis\x20/\x20claim_window)\x20so\x20the\x20buyer\x20SEES\x20\x27leave\x20a\x20review\x20→\x20get\x20X\x27\x20at\x20quote\x20time.\x20The\x20rail\x20is\x20a\x20merchant-funded\x20Reward\x20pool\x20claimed\x20once\x20per\x20order\x20(reward_claim_policy\x20kind\x20\x27once\x27);\x20compile\x20REQUIRES\x20the\x20reward_funding\x20input\x20under\x20review_mode\x20review_reward\x20—\x20an\x20unfunded\x20incentive\x20promise\x20must\x20not\x20publish.\x20The\x20bounty\x20pays\x20only\x20after\x20the\x20claim\x20window\x20closes\x20(reward_claim_window_days,\x20default\x2014).\x20ETHICS:\x20the\x20rating-floor\x20leg\x20is\x20deliberately\x20EMPTY\x20—\x20a\x20bounty\x20that\x20pays\x20only\x20for\x20ratings\x20>=\x204\x20is\x20review-gating,\x20it\x20suppresses\x20legitimate\x20bad\x20reviews\x20and\x20poisons\x20the\x20reputation\x20signal.\x20Pay\x20for\x20an\x20HONEST\x20review,\x20good\x20or\x20bad;\x20if\x20you\x20do\x20want\x20a\x20floor,\x20disclose\x20it\x20in\x20the\x20tier\x20text\x20BEFORE\x20the\x20buyer\x20orders.','BUYER-SIDE\x20VOID\x20HOP:\x20every\x20escrowed\x20node\x20needs\x20an\x20order-payer\x20hop\x20to\x20a\x20cancelled\x20endpoint\x20(R-DRAFT-VOID)\x20—\x20an\x20abandoned\x20pledge\x20would\x20otherwise\x20strand\x20the\x20escrow\x20forever.\x20Here\x20the\x20void\x20hop\x20is\x20pledge_cancelled\x20(post-goal,\x20pre-shipment),\x20so\x20the\x20buyer\x20always\x20has\x20a\x20single-hop\x20exit\x20and\x20a\x20full\x20refund.','REQUIRED\x20INFO\x20BEFORE\x20FULFILMENT:\x20order.required_info\x20some\x20is\x20gated\x20on\x20the\x20funded_released→fulfilling\x20forward\x20(tpl_required_info_present),\x20so\x20the\x20shipping\x20/\x20contact\x20address\x20must\x20be\x20on\x20chain\x20as\x20a\x20Proof\x20before\x20the\x20project\x20ships.\x20Service.customer_required\x20is\x20DECLARATIVE-ONLY\x20—\x20without\x20this\x20Guard\x20nothing\x20enforces\x20it.\x20The\x20VALUE\x20stays\x20private\x20(Messenger\x20proof),\x20only\x20the\x20presence\x20is\x20on\x20chain.','TWO-STEP\x20REFUND\x20PAYOUT:\x20refund\x20rows\x20pay\x20GuardIdentifier(0)\x20(the\x20submitted\x20Order)\x20—\x20funds\x20land\x20ON\x20the\x20backer\x27s\x20Order\x20object,\x20not\x20in\x20their\x20wallet;\x20the\x20backer\x20extracts\x20them\x20with\x20a\x20separate\x20order\x20owner_receive\x20call.\x20Surface\x20the\x20second\x20step\x20in\x20the\x20storefront\x20UX.','DISCOUNT\x20COUPONS:\x20a\x20coupon\x20lowers\x20the\x20ESCROWED\x20amount\x20(Order.amount)\x20while\x20the\x20contribution\x20row\x20value\x20stays\x20what\x20the\x20backer\x20declared\x20—\x20so\x20a\x20coupon\x27d\x20pledge\x20and\x20the\x20campaign\x20aggregate\x20can\x20diverge.\x20Mint\x20the\x20coupon\x20per-buyer,\x20disclose\x20the\x20burn-on-use\x20semantics,\x20and\x20never\x20let\x20a\x20100%\x20coupon\x20create\x20a\x20zero-value\x20order\x20(E_ZERO_TOTAL_ORDER).','PRIVACY\x20BOUNDARY\x20(M-T10):\x20the\x20shipping\x20address,\x20the\x20contact\x20address\x20and\x20the\x20meeting\x20address\x20for\x20stay\x20tiers\x20are\x20exchanged\x20over\x20the\x20encrypted\x20Messenger\x20only.\x20Never\x20write\x20personal\x20data\x20(phone,\x20email,\x20exact\x20unit\x20address)\x20into\x20a\x20public\x20on-chain\x20field\x20—\x20Contact\x20description/location/IM\x20entries,\x20repository\x20rows,\x20progress\x20messages\x20or\x20WIP\x20text\x20are\x20all\x20public.\x20Deliver\x20them\x20via\x20Messenger\x20and\x20record\x20only\x20the\x20WTS\x20proof\x20on\x20chain.','CAMPAIGN\x20TERMS\x20=\x20WIP\x20ARTIFACT:\x20the\x20funding\x20goal,\x20the\x20deadline,\x20the\x20reward-tier\x20catalogue\x20and\x20the\x20campaign\x20terms\x20are\x20anchored\x20as\x20the\x20listing\x20WIP\x20hash\x20before\x20launch.\x20Pin\x20the\x20launch-time\x20hash\x20so\x20a\x20later\x20edit\x20cannot\x20retroactively\x20change\x20the\x20goal\x20a\x20backer\x20funded\x20against.','COMPENSATION\x20FUND\x20PRE-LOCK\x20(B2,\x20ksg-mn-261022):\x20while\x20a\x20compensation\x20fund\x20is\x20armed\x20on\x20the\x20Service,\x20EVERY\x20buy\x20requires\x20fund\x20>=\x203x\x20the\x20order\x20amount\x20(MAX_INDEMNITY_MULTIPLE)\x20—\x20a\x20campaign\x20shop\x20must\x20lock\x203x\x20its\x20LARGEST\x20reward\x20tier\x20BEFORE\x20launch,\x20or\x20every\x20higher\x20tier\x20is\x20silently\x20unsellable.\x20Size\x20the\x20fund\x20from\x20the\x20largest\x20tier\x20up\x20front,\x20or\x20run\x20without\x20a\x20compensation\x20fund\x20and\x20rely\x20on\x20arbitration\x20only.','DISPUTES\x20route\x20to\x20a\x20THIRD-PARTY\x20Arbitration\x20venue\x20(arbitration_mode\x20third_party).\x20Un-pause\x20the\x20Arbitration\x20after\x20deploy\x20(new\x20Arbitrations\x20default\x20bPaused=true).']}];export const TEMPLATE_KEYWORDS={'retail/scale-marketplace':['marketplace','fulfillment','reserve','third-party\x20seller','scale\x20marketplace','a-to-z\x20guarantee'],'retail/vertical-handmade':['handmade','artisan','vintage','craft','custom\x20order','offsite\x20ads','attribution'],'retail/preorder-deposit':['preorder','pre-order','deposit','down\x20payment','balance\x20payment','pay\x20later','installment','layaway','crowdfunding','crowd\x20purchase','kickstarter','gamefound','reserved\x20slot','limited\x20drop','two-phase\x20payment'],'freelance/enterprise-talent-market':['freelance\x20marketplace','talent\x20market','escrow\x20release','revision','acceptance\x20timeout','milestone'],'freelance/catalog-tiers':['project\x20catalog','gig\x20tiers','fixed-price\x20listing','buyer\x20requirements','add-ons','revisions','instant\x20cancel','catalog\x20gig'],'freelance/creator-zero-commission':['0%\x20commission','zero\x20commission','no\x20commission','fixed\x20contract\x20fee','portfolio\x20funnel'],'freelance/agent-task':['agent\x20task','ai\x20agent','agent-to-agent','autonomous\x20task','machine\x20task','agent\x20marketplace','evaluator'],'freelance/bug-bounty':['bug\x20bounty','vulnerability','security\x20bounty','triage','severity','white\x20hat','bounty\x20program'],'freelance/design-contest':['design\x20contest','crowdsourced\x20design','logo\x20contest','design\x20competition','creative\x20contest','prize\x20pool','jury'],'rental/p2p-shortstay':['short-term\x20rental','homestay','host','cancellation\x20policy','damage\x20claim','check-in'],'rental/institutional-longstay':['long-term\x20rental','monthly\x20rent','lease','deposit\x20refund','property\x20management'],'education/mooc-degree':['degree','semester','university','certificate','mooc','tuition'],'education/mooc-single-course':['single\x20course','one\x20course','self-paced','course\x20certificate','mooc','enroll'],'education/live-class-cohort':['tutoring','k12','session','attendance','prepay\x20cap','trial\x20lesson','live\x20class'],'travel/global-ota':['hotel','room','no-show','walk','merchant\x20mode','accommodation','ota'],'travel/destination-experience':['experience','ticket','multi-segment','redeem','supplier\x20payout','instant\x20confirmation'],'subscription/creator-membership':['creator','membership','per-period','honor\x20tier','fan\x20subscription'],'subscription/direct-fan-subscription':['age\x20verification','pay-per-view','ppv','tip','content\x20subscription'],'licensing/royalty-stream-auction':['royalty','royalties','royalty\x20stream','royalty\x20share','music\x20rights','ip\x20licensing','intellectual\x20property','auction','rights\x20holder','sync\x20licensing','catalog\x20sale','royalty\x20split'],'licensing/asset-license-metered':['beat\x20license','beats','sample\x20pack','asset\x20license','tiered\x20license','exclusive\x20license','non-exclusive','stock\x20license','font\x20license','template\x20license','usage\x20cap','metered\x20license','digital\x20asset'],'crowdfunding/all-or-nothing-threshold':['crowdfunding','crowd\x20funding','all-or-nothing','threshold','funding\x20goal','campaign','backer','pledge','kickstarter','indiegogo','fixed\x20funding','reward\x20tier','refund\x20if\x20unmet','aggregate\x20goal'],'crowdfunding/reward-campaign-fulfillment':['reward\x20crowdfunding','indiegogo','reward\x20tier','tier\x20catalogue','escrow\x20through\x20fulfillment','review\x20bounty','incentive\x20declaration','campaign\x20deadline','backer\x20pledge','fulfillment\x20phase','reward\x20campaign'],'crowdfunding/flexible-keep-it-all':['crowdfunding','keep\x20it\x20all','flexible\x20funding','donation','fundraiser','campaign','no\x20refund','gofundme','indiegogo','tip\x20jar','creator\x20funding']};export const TEMPLATE_TAGS={'retail/scale-marketplace':['marketplace','scale','fulfillment','escrow','third-party-seller'],'retail/vertical-handmade':['marketplace','handmade','artisan','craft','escrow'],'retail/preorder-deposit':['retail','preorder','deposit','installment','layaway','two-phase','escrow'],'freelance/enterprise-talent-market':['freelance','talent','escrow-milestone','b2b','acceptance'],'freelance/catalog-tiers':['freelance','gig','catalog','fixed-price','escrow-milestone'],'freelance/creator-zero-commission':['freelance','creator','zero-commission','portfolio'],'freelance/agent-task':['freelance','agent','agent-to-agent','task','evaluator','escrow'],'freelance/bug-bounty':['freelance','bounty','bug-bounty','security','triage','escrow'],'freelance/design-contest':['freelance','contest','design-contest','crowdsourced','prize','escrow'],'rental/p2p-shortstay':['rental','shortstay','host','p2p','escrow'],'rental/institutional-longstay':['rental','longstay','lease','institutional','deposit'],'education/mooc-degree':['education','mooc','degree','certificate','university'],'education/mooc-single-course':['education','mooc','course','certificate','self-paced'],'education/live-class-cohort':['education','cohort','tutoring','live-class','k12'],'travel/global-ota':['travel','ota','hotel','accommodation','booking'],'travel/destination-experience':['travel','experience','tour','ticket','activity'],'subscription/creator-membership':['subscription','membership','creator','recurring','tier'],'subscription/direct-fan-subscription':['subscription','fan','ppv','recurring','age-gated'],'licensing/royalty-stream-auction':['licensing','royalty','auction','ip','royalty-split','escrow'],'licensing/asset-license-metered':['licensing','asset-license','tiered','beat','metered','escrow'],'crowdfunding/all-or-nothing-threshold':['crowdfunding','all-or-nothing','threshold','campaign','backer','escrow','refund'],'crowdfunding/flexible-keep-it-all':['crowdfunding','keep-it-all','flexible','campaign','donation','escrow'],'crowdfunding/reward-campaign-fulfillment':['crowdfunding','reward-campaign','tier-fulfillment','review-bounty','escrow','refund','campaign']};export function getBuiltinTemplate(a){return BUILTIN_TEMPLATES['find'](b=>b['id']===a);}export function listBuiltinTemplates(){return BUILTIN_TEMPLATES;}export function validateBuiltinTemplateCatalog(a=BUILTIN_TEMPLATES){for(const b of a){const d=validateAllocatorRows(b);if(d['length']>0x0)throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20fails\x20allocator-row\x20validation:\x20'+d['join'](';\x20')+'\x0a'+'Fix\x20the\x20entry\x20—\x20BUILTIN_TEMPLATES\x20is\x20the\x20seed\x20source\x20for\x20the\x20on-disk\x20template\x20tree.');const f=new Set(b['machine_shape']['map'](l=>l['name']));if(f['size']!==b['machine_shape']['length'])throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20has\x20duplicate\x20machine\x20node\x20names');const h=new Set();for(const l of b['guards']){if(l['key']===undefined)continue;if(h['has'](l['key']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20declares\x20guard\x20key\x20\x27'+l['key']+'\x27\x20more\x20than\x20once');h['add'](l['key']);}let i=0x0;for(const m of b['machine_shape']){for(const o of m['from']??[]){if(typeof o==='string'){if(o==='')i++;else{if(!f['has'](o))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20edge\x20\x27'+o+'\x27\x20->\x20'+m['name']+'\x20references\x20unknown\x20source\x20node\x20\x27'+o+'\x27');}continue;}if(o['prev']==='')i++;else{if(!f['has'](o['prev']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20edge\x20'+o['prev']+'\x20->\x20'+m['name']+'\x20references\x20unknown\x20source\x20node\x20\x27'+o['prev']+'\x27');}if(o['guard_key']!==undefined&&!h['has'](o['guard_key']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20edge\x20'+o['prev']+'\x20->\x20'+m['name']+'\x20references\x20unresolved\x20guard_key\x20\x27'+o['guard_key']+'\x27\x20(no\x20guards[]\x20entry\x20carries\x20that\x20key)');}}if(i!==0x1)throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20must\x20declare\x20exactly\x20ONE\x20entry\x20edge\x20(prev\x20\x22\x22),\x20found\x20'+i+'\x20—\x20without\x20it\x20orders\x20strand\x20at\x20current=\x22\x22');for(const p of b['allocator']['rows']??[]){if(p['guard_key']!==undefined&&!h['has'](p['guard_key']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20allocator\x20row\x20\x27'+p['track']+'/'+(p['recipient_key']??'?')+'\x27\x20references\x20unresolved\x20guard_key\x20\x27'+p['guard_key']+'\x27');}const j=b['conditional_guards']??[],k=new Map();for(const q of j){k['set'](q['param'],(k['get'](q['param'])??0x0)+0x1);}for(const s of j){if(!h['has'](s['guard_key']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20entry\x20references\x20unresolved\x20guard_key\x20\x27'+s['guard_key']+'\x27');if(!s['values']['includes'](s['emit_value']))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20param\x20\x27'+s['param']+'\x27:\x20emit_value\x20\x27'+s['emit_value']+'\x27\x20is\x20not\x20in\x20the\x20declared\x20values\x20set');const u=b['fee_params'][s['param']];if(typeof u!=='string'||!s['values']['includes'](u))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20param\x20\x27'+s['param']+'\x27\x20must\x20be\x20a\x20declared\x20string\x20fee_param\x20within\x20the\x20values\x20set\x20(found:\x20'+(JSON['stringify'](u)??'undefined')+')');const w=(k['get'](s['param'])??0x0)>0x1;if(!w&&u===s['emit_value'])throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20param\x20\x27'+s['param']+'\x27:\x20the\x20declared\x20default\x20\x27'+u+'\x27\x20equals\x20emit_value\x20—\x20the\x20condition\x20would\x20always\x20fire;\x20the\x20default\x20must\x20be\x20the\x20DROPPED\x20side');}for(const [x,y]of k){if(y<=0x1)continue;const z=j['filter'](B=>B['param']===x),A=JSON['stringify'](z[0x0]['values']);for(const B of z){if(JSON['stringify'](B['values'])!==A)throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20selector\x20param\x20\x27'+x+'\x27:\x20entries\x20declare\x20different\x20value\x20sets\x20('+A+'\x20vs\x20'+JSON['stringify'](B['values'])+')\x20—\x20the\x20wizard\x20question\x20and\x20the\x20boundary\x20validation\x20must\x20see\x20ONE\x20enum');}for(const C of z[0x0]['values']){if(!z['some'](D=>D['emit_value']===C))throw new Error('[builtin-templates]\x20\x27'+b['id']+'\x27\x20conditional_guards\x20selector\x20param\x20\x27'+x+'\x27:\x20value\x20\x27'+C+'\x27\x20has\x20no\x20emit\x20variant\x20—\x20answering\x20it\x20would\x20mount\x20zero\x20variants\x20and\x20strand\x20the\x20selector\x20node\x20without\x20an\x20edge');}}}}validateBuiltinTemplateCatalog();