@wowok/agent-mcp 3.4.0 → 3.4.2

package/dist/knowledge/guard-templates.js

@@ -1 +1 @@
-export const PROTOCOL_SLOT_254_NOTE='PROTOCOL\x20SLOT\x20254:\x20the\x20task-binding\x20row\x20is\x20mandatory\x20on\x20every\x20forward-bound\x20guard\x20—\x20the\x20chain-side\x20task-binding\x20check\x20aborts\x20(code\x2011)\x20without\x20it;\x20the\x20value\x20is\x20written\x20by\x20order\x20creation,\x20never\x20submitted\x20by\x20hand';export const GUARD_TEMPLATES=[{'id':'tpl_buy_guard_whitelist','scene_id':'service_buy_guard','name':'Whitelist\x20purchase\x20validation','description':'Only\x20addresses\x20in\x20the\x20whitelist\x20can\x20purchase\x20the\x20service.\x20Suitable\x20for\x20limited-time\x20sales,\x20VIP\x20exclusives,\x20internal\x20testing\x20eligibility,\x20etc.','recommended_patterns':['P04','P03'],'parameters':[{'name':'whitelist','type':'vec_address','description':'List\x20of\x20authorized\x20addresses','required':!![],'constraint':'Each\x20address\x20must\x20be\x20valid\x20and\x20unique'},{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(used\x20for\x20circular\x20references)','required':![],'constraint':'If\x20P16\x20circular\x20reference\x20is\x20used,\x20a\x20name\x20must\x20be\x20provided\x20rather\x20than\x20an\x20address'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'VecAddress','value':'${whitelist}','name':'Authorized\x20purchase\x20whitelist'}],'example_root':{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x0},{'type':'context','context':'Signer'}]},'applicable_industries':['rental','ecommerce','education','travel','subscription'],'relevant_risks':['R-C1-01','R-C3-01','R-C4-01'],'creation_notes':['Updating\x20the\x20whitelist\x20requires\x20rebuilding\x20the\x20Guard\x20(buy_guard\x20is\x20iterable)','If\x20the\x20Service\x20is\x20already\x20published,\x20the\x20table\x20can\x20use\x20the\x20address\x20directly;\x20otherwise\x20use\x20the\x20name\x20(P16\x20circular\x20reference)'],'example_use_case':'Internal\x20testing\x20phase\x20for\x20camera\x20equipment\x20rental,\x20allowing\x20only\x20the\x20first\x2050\x20seed\x20users\x20to\x20place\x20rental\x20orders.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_buy_guard_blocklist','scene_id':'service_buy_guard','name':'Blocklist\x20purchase\x20validation','description':'Denies\x20purchase\x20to\x20addresses\x20on\x20the\x20blocklist;\x20an\x20EMPTY\x20blocklist\x20is\x20an\x20OPEN\x20store\x20(anyone\x20may\x20buy).\x20'+'Instantiable\x20form\x20of\x20pattern.buy_guard_blocklist\x20—\x20arm\x20a\x20self-purchase\x20ban\x20by\x20listing\x20the\x20provider\x27s\x20'+'own\x20account(s),\x20or\x20a\x20territory\x20embargo\x20by\x20listing\x20barred\x20buyers.\x20The\x20polarity\x20twin\x20of\x20'+'tpl_buy_guard_whitelist:\x20a\x20blocklist\x20can\x20default\x20empty\x20(open),\x20an\x20allowlist\x20cannot\x20(an\x20empty\x20'+'whitelist\x20denies\x20everyone),\x20which\x20is\x20why\x20the\x20open-store\x20default\x20is\x20expressible\x20only\x20here.','recommended_patterns':['P04','P03'],'parameters':[{'name':'blocklist','type':'vec_address','description':'Addresses\x20denied\x20purchase\x20(empty\x20vector\x20=\x20open\x20store)','required':![],'default':'[]','constraint':'Each\x20address\x20must\x20be\x20valid\x20and\x20unique;\x20an\x20empty\x20list\x20leaves\x20the\x20store\x20open\x20to\x20every\x20buyer'},{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(used\x20for\x20circular\x20references)','required':![],'constraint':'If\x20P16\x20circular\x20reference\x20is\x20used,\x20a\x20name\x20must\x20be\x20provided\x20rather\x20than\x20an\x20address'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'VecAddress','value':'${blocklist}','name':'Denied-purchase\x20blocklist'}],'example_root':{'type':'logic_not','node':{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x0},{'type':'context','context':'Signer'}]}},'applicable_industries':['freelance','ecommerce','education','licensing'],'relevant_risks':['R-C1-01','R-C3-01','R-C4-01'],'creation_notes':['EMPTY-BLOCKLIST\x20DEFAULT:\x20an\x20empty\x20blocklist\x20makes\x20vec_contains_address\x20false\x20for\x20every\x20signer,\x20so\x20the\x20inverted\x20gate\x20passes\x20for\x20everyone\x20—\x20the\x20OPEN\x20store.\x20This\x20is\x20the\x20safe\x20instanceable\x20default\x20the\x20ALLOWLIST\x20twin\x20can\x20never\x20have\x20(an\x20empty\x20whitelist\x20would\x20brick\x20every\x20purchase),\x20which\x20is\x20why\x20a\x20blocklist\x20buy\x20gate\x20converts\x20to\x20an\x20instantiable\x20tpl\x20while\x20an\x20opt-in\x20territory\x20allowlist\x20stays\x20a\x20generation-resolved\x20design.','POLARITY:\x20the\x20root\x20is\x20logic_not\x20over\x20vec_contains_address[blocklist,\x20Signer]\x20—\x20compose\x20by\x20COPY.\x20Do\x20NOT\x20hand-flatten\x20into\x20per-address\x20logic_not(logic_equal)\x20chains;\x20the\x20single\x20vector\x20table\x20slot\x20stays\x20authoritative\x20and\x20is\x20editable\x20until\x20publish\x20(guards\x20are\x20immutable\x20after\x20—\x20IMMUT-001).','SELF-PURCHASE\x20BAN\x20(the\x20agent-task\x20use):\x20list\x20the\x20provider-side\x20account(s)\x20so\x20the\x20seller\x20of\x20the\x20work\x20cannot\x20buy\x20their\x20own\x20escrowed\x20task\x20and\x20rule\x20on\x20it.\x20Passport-gated\x20purchase\x20(once\x20a\x20Passport\x20gate\x20is\x20set)\x20rides\x20the\x20Service-level\x20gate,\x20not\x20this\x20vector.'],'example_use_case':'Agent\x20task:\x20the\x20task\x27s\x20provider\x20account\x20is\x20blocked\x20from\x20purchasing\x20its\x20own\x20listing\x20while\x20every\x20other\x20buyer\x20can\x20fund\x20the\x20bounty\x20—\x20the\x20blocklist\x20ships\x20empty\x20(open\x20store)\x20until\x20the\x20builder\x20lists\x20the\x20provider\x20identity.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_allocator_threshold','scene_id':'service_order_allocators_guard','name':'Allocation\x20amount\x20threshold\x20validation','description':'Selects\x20different\x20allocation\x20strategies\x20based\x20on\x20the\x20order\x20amount.\x20When\x20the\x20amount\x20exceeds\x20the\x20threshold,\x20advanced\x20allocation\x20is\x20used;\x20otherwise,\x20default\x20allocation\x20applies.\x20Caller-authorization\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②):\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20merchant-or-keeper\x20dynamic-permission\x20leg\x20(service.permission\x20==\x20the\x20submitted\x20Permission\x20slot,\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer)\x20—\x20a\x20stranger\x20can\x20no\x20longer\x20fire\x20the\x20threshold\x20rail.\x20The\x20BUYER\x20leg\x20is\x20NOT\x20expressible\x20on\x20this\x20template:\x20its\x20table\x20has\x20no\x20Order\x20slot\x20(a\x20legacy\x20gap\x20this\x20ruling\x20leaves\x20in\x20place)\x20—\x20build\x20a\x20buyer-triggerable\x20threshold\x20rail\x20from\x20tpl_allocator_identity_set_order_holder\x20plus\x20the\x20threshold\x20leg\x20instead.','recommended_patterns':['P02','P10'],'parameters':[{'name':'threshold','type':'number','description':'Allocation\x20threshold\x20(unit:\x20smallest\x20precision)','required':!![],'constraint':'Must\x20be\x20>\x200;\x20a\x20reasonable\x20range\x20is\x20recommended\x20to\x20avoid\x20boundary\x20gaming'},{'name':'service_name','type':'string','description':'Service\x20object\x20name','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object'},{'identifier':0x1,'b_submission':![],'value_type':'U64','value':'${threshold}','name':'Allocation\x20threshold'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]},{'type':'logic_as_u256_greater','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x1}]}]},'applicable_industries':['ecommerce','rental','education','travel'],'relevant_risks':['R-X1-01','R-X1-05','R-X1-08'],'creation_notes':['order_allocators\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20publish)','A\x20distribution\x20call\x20submits\x20ONE\x20guard;\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20fires\x20in\x20vector\x20order\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20the\x20whole\x20bound\x20vector\x20on\x20each\x20call)','Threshold\x20boundary\x20must\x20be\x20tested:\x20behavior\x20when\x20exactly\x20equal\x20to\x20the\x20threshold\x20(>\x20vs\x20>=)','CALLER-AUTHORIZATION\x20LIMITATION:\x20this\x20template\x20predates\x20the\x20Order\x20submission\x20slot,\x20so\x20the\x20buyer-side\x20leg\x20(order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer)\x20is\x20NOT\x20expressible\x20—\x20the\x20shipped\x20caller\x20leg\x20is\x20merchant-or-keeper-only\x20(gf30\x20A2\x20/\x20rex5\x20T-27).\x20A\x20buyer-triggerable\x20threshold\x20rail\x20needs\x20an\x20Order\x20slot\x20plus\x20the\x20order-holder\x20union;\x20build\x20it\x20from\x20tpl_allocator_identity_set_order_holder\x20and\x20copy\x20the\x20threshold\x20leg\x20in.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/polarity/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.'],'example_use_case':'E-commerce\x20platform:\x20order\x20amount\x20>\x201000\x20WOW\x20triggers\x203-way\x20allocation\x20(platform\x20+\x20merchant\x20+\x20logistics);\x20otherwise\x202-way\x20allocation\x20(platform\x20+\x20merchant).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_treasury_personal','scene_id':'service_order_allocators_guard','name':'Treasury\x20+\x20personal\x20address\x20allocation\x20(Entity\x20sharing)','description':'2\x20allocators\x20representing\x202\x20merchant\x20collection\x20approaches:\x20(1)\x20named\x20Treasury\x20address\x20for\x20public\x20fund\x20aggregation,\x20(2)\x20fixed\x20personal\x20address.\x20'+'Uses\x20sharing.who=Entity\x20so\x20funds\x20always\x20flow\x20to\x20the\x20legitimate\x20RECIPIENT\x20regardless\x20of\x20caller,\x20while\x20the\x20CALLER\x20is\x20authorized\x20by\x20the\x20shipped\x20caller-authorization\x20leg\x20(buyer\x20order-holder\x20OR\x20merchant-or-keeper\x20dynamic\x20permission;\x20gf30\x20A2\x20/\x20rex5\x20T-27).\x20'+'Guards\x20verify\x20the\x20order\x20is\x20at\x20the\x20Complete\x20node\x20(Service\x20scoping\x20is\x20chain-side\x20since\x20protocol\x20v148\x20—\x20bsw4\x20F-06\x20removed\x20the\x20host-binding\x20leg).','recommended_patterns':['P02','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'complete_node_name','type':'string','description':'Expected\x20node\x20name\x20that\x20triggers\x20allocation\x20(e.g.\x20\x27Complete\x27)','required':!![],'default':'Complete','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'treasury_name','type':'string','description':'Named\x20Treasury\x20object\x20(created\x20with\x20the\x20Service\x27s\x20permission)','required':!![],'constraint':'Treasury\x20must\x20be\x20created\x20before\x20the\x20Service;\x20use\x20the\x20SAME\x20permission\x20as\x20the\x20Service\x20for\x20consistency'},{'name':'personal_address','type':'address','description':'Fixed\x20personal\x20collection\x20address\x20(e.g.\x20the\x20permission\x20creator\x27s\x20address)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${complete_node_name}','name':'Expected\x20Complete\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['insurance','ecommerce','travel','rental','subscription'],'relevant_risks':['R-C3-05','R-C3-06','R-X1-05','R-X1-01'],'creation_notes':['2\x20Guard\x20objects\x20with\x20IDENTICAL\x20root/table\x20but\x20DIFFERENT\x20descriptions\x20(allocators\x20require\x20unique\x20guard\x20addresses\x20—\x20no\x20two\x20allocators\x20may\x20reference\x20the\x20same\x20Guard).','sharing.who=Entity\x20(Treasury/personal)\x20binds\x20only\x20the\x20RECIPIENT\x20(R-C3-06\x20safe)\x20—\x20it\x20NEVER\x20authorized\x20the\x20caller:\x20the\x20shipped\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20gates\x20WHO\x20may\x20fire\x20the\x20allocation\x20(buyer\x20order-holder\x20OR\x20merchant-or-keeper\x20dynamic\x20permission),\x20so\x20Entity-sharing\x20and\x20caller\x20authorization\x20are\x20orthogonal\x20layers.','Each\x20allocator\x20is\x20bound\x20to\x20a\x20DIFFERENT\x20guard\x20—\x20the\x20caller\x27s\x20submitted\x20guard\x20selects\x20which\x20path\x20fires.\x20To\x20switch\x20from\x20Treasury\x20to\x20personal\x20collection,\x20submit\x20the\x20personal\x20allocator\x27s\x20guard\x20instead','Treasury\x20should\x20be\x20created\x20with\x20the\x20SAME\x20permission\x20as\x20the\x20Service\x20(permission\x20consistency\x20—\x20different\x20permissions\x20=\x20minor\x20risk).','HOST-BINDING\x20REMOVED\x20(bsw4\x20F-05/F-06\x20sweep):\x20the\x20legacy\x20order.service\x20==\x20<service>\x20leg\x20no\x20longer\x20ships\x20—\x20since\x20protocol\x20v148\x20the\x20Progress\x20layer\x20rejects\x20cross-order\x20submissions\x20chain-side,\x20and\x20the\x20leg\x20pinned\x20the\x20Machine\x20to\x20one\x20Service\x20instance\x20(republishing\x20the\x20Service\x20stranded\x20every\x20guard).','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/polarity/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20is\x20immutable\x20after\x20Service\x20publish\x20—\x20verify\x20the\x20Guard\x20logic\x20and\x20sharing\x20config\x20before\x20publishing.'],'example_use_case':'Insurance\x20service:\x20after\x20a\x20claim\x20reaches\x20the\x20Complete\x20node,\x20order\x20funds\x20are\x20allocated\x20to\x20the\x20insurance\x20Treasury\x20'+'(approach\x201,\x20for\x20operational\x20fund\x20aggregation)\x20or\x20to\x20the\x20provider\x27s\x20personal\x20address\x20(approach\x202,\x20for\x20direct\x20income).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_identity_set_order_holder','scene_id':'service_order_allocators_guard','name':'Order-holder\x20identity-set\x20allocation\x20(Level\x202)','description':'Level\x202\x20identity-set\x20binding:\x20Signer\x20is\x20order.owner\x20(1562,\x20Address)\x20OR\x20order.agent\x20(1567,\x20Bool\x20with\x20[Signer]\x20param).\x20'+'Demonstrates\x20the\x20mixed\x20return-type\x20construction\x20pattern\x20—\x20Address-returning\x20queries\x20are\x20wrapped\x20in\x20logic_equal,\x20'+'while\x20Bool-returning\x20queries\x20(suffix\x20\x27has\x27)\x20are\x20used\x20directly\x20as\x20logic_or\x20children.\x20'+'Cross-service\x20theft\x20prevention\x20is\x20chain-side\x20since\x20protocol\x20v148\x20(no\x20host-Service\x20pin\x20—\x20bsw4\x20F-06).\x20'+'Use\x20when\x20either\x20the\x20order\x20owner\x20or\x20an\x20authorized\x20agent\x20should\x20be\x20able\x20to\x20trigger\x20allocation\x20(e.g.\x20refund\x20to\x20caller).','recommended_patterns':['P02','P10','P16'],'parameters':[],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},'applicable_industries':['ecommerce','rental','travel','subscription'],'relevant_risks':['R-C3-01','R-C3-05','R-C3-06','R-C4-04'],'creation_notes':['MIXED\x20RETURN-TYPE\x20CONSTRUCTION\x20(key\x20Level\x202\x20pattern):\x20query\x201562\x20(order.owner)\x20returns\x20Address\x20→\x20wrap\x20in\x20logic_equal\x20with\x20context(Signer);\x20query\x201567\x20(order.agent\x20has)\x20returns\x20Bool\x20→\x20use\x20directly\x20as\x20logic_or\x20child\x20with\x20parameters:\x20[context(Signer)].','logic_or\x20wrapping\x20of\x20the\x20Signer\x20check\x20suppresses\x20R-C4-04\x20(Level\x201\x20strict\x20binding\x20convenience\x20warning)\x20—\x20this\x20is\x20the\x20recommended\x20Level\x202\x20alternative.','Use\x20this\x20pattern\x20when\x20sharing.who=Signer\x20(funds\x20flow\x20to\x20caller)\x20AND\x20either\x20the\x20owner\x20or\x20an\x20agent\x20should\x20be\x20authorized\x20to\x20trigger\x20allocation.','HOST-BINDING\x20REMOVED\x20(bsw4\x20F-06):\x20no\x20order.service\x20leg\x20—\x20protocol\x20v148\x27s\x20chain-side\x20task-binding\x20check\x20scopes\x20every\x20submission\x20to\x20the\x20originating\x20Service.','If\x20agents\x20are\x20not\x20needed,\x20use\x20the\x20simpler\x20Level\x202\x20dynamic\x20pattern:\x20logic_equal[query(1562),\x20context(Signer)]\x20without\x20logic_or.'],'example_use_case':'Refund\x20allocation:\x20when\x20an\x20order\x20is\x20cancelled,\x20either\x20the\x20order\x20owner\x20or\x20an\x20authorized\x20agent\x20can\x20trigger\x20the\x20refund.\x20'+'The\x20Guard\x20verifies\x20Signer\x20is\x20order.owner\x20OR\x20order.agent;\x20Service\x20scoping\x20is\x20chain-side\x20(protocol\x20v148).','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_allocator_identity_set_service_provider_dynamic','scene_id':'service_order_allocators_guard','name':'Service-provider\x20identity-set\x20allocation\x20with\x20dynamic\x20permission\x20(Level\x202)','description':'Level\x202\x20identity-set\x20binding\x20with\x20DYNAMIC\x20permission\x20address:\x20Signer\x20is\x20permission.owner\x20(1002,\x20Address)\x20OR\x20'+'has\x20admin\x20(1004,\x20Bool\x20with\x20[Signer]\x20param).\x20The\x20permission\x20address\x20is\x20submitted\x20by\x20the\x20caller\x20and\x20verified\x20'+'against\x20service.permission\x20(1488)\x20—\x20this\x20survives\x20permission\x20rotation\x20without\x20rebuilding\x20the\x20Guard.\x20'+'Use\x20when\x20the\x20Service\x20may\x20rotate\x20its\x20permission\x20(like\x20a\x20company\x20changing\x20its\x20board)\x20and\x20a\x20static\x20permission\x20'+'address\x20would\x20break\x20the\x20Guard.','recommended_patterns':['P02','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20caller\x20—\x20must\x20equal\x20service.permission)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x2},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x2},'parameters':[{'type':'context','context':'Signer'}]}]}]},'applicable_industries':['ecommerce','rental','insurance','travel','subscription'],'relevant_risks':['R-C3-01','R-C3-05','R-C3-06','R-C4-04'],'creation_notes':['DYNAMIC\x20PERMISSION\x20VERIFICATION\x20(key\x20pattern):\x20caller\x20submits\x20a\x20Permission\x20address\x20(identifier\x202);\x20Guard\x20verifies\x20query(1488:\x20service.permission)\x20==\x20submitted\x20permission,\x20then\x20checks\x201002/1004\x20against\x20the\x20submitted\x20permission.\x20This\x20survives\x20permission\x20rotation\x20—\x20if\x20the\x20Service\x20changes\x20its\x20permission,\x20the\x20Guard\x20still\x20works\x20without\x20rebuilding.','MIXED\x20RETURN-TYPE\x20CONSTRUCTION:\x20query\x201002\x20(permission.owner)\x20returns\x20Address\x20→\x20wrap\x20in\x20logic_equal;\x20query\x201004\x20(permission.admin\x20has)\x20returns\x20Bool\x20→\x20use\x20directly\x20as\x20logic_or\x20child\x20with\x20parameters:\x20[context(Signer)].','logic_or\x20wrapping\x20of\x20the\x20Signer\x20check\x20suppresses\x20R-C4-04\x20(Level\x201\x20strict\x20binding\x20convenience\x20warning).','TWO\x20conditions\x20in\x20logic_and:\x20(1)\x20dynamic\x20permission\x20verification,\x20(2)\x20identity\x20set\x20(owner\x20OR\x20admin).\x20The\x20legacy\x20order.service\x20host-binding\x20leg\x20was\x20removed\x20(v148\x20chain-side\x20task\x20binding\x20—\x20bsw4\x20F-06).','Static\x20permission\x20alternative\x20(simpler\x20but\x20breaks\x20on\x20rotation):\x20use\x20a\x20table\x20constant\x20for\x20the\x20permission\x20address\x20instead\x20of\x20b_submission=true\x20+\x201488\x20verification.','Repository-based\x20address\x20set\x20(most\x20flexible,\x20most\x20complex):\x20store\x20the\x20permission\x20address\x20set\x20in\x20a\x20Repository\x20and\x20query\x20dynamically\x20—\x20only\x20for\x20extreme\x20flexibility\x20needs.'],'example_use_case':'Merchant\x20allocation:\x20the\x20Service\x20may\x20rotate\x20its\x20permission\x20(like\x20a\x20company\x20changing\x20its\x20board).\x20'+'The\x20caller\x20submits\x20the\x20current\x20permission\x20address;\x20the\x20Guard\x20verifies\x20it\x20matches\x20service.permission\x20(1488),\x20'+'then\x20checks\x20that\x20Signer\x20is\x20the\x20permission\x20owner\x20or\x20has\x20admin\x20rights.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_allocator_node_gate_settle','scene_id':'service_order_allocators_guard','name':'Node-gated\x20settlement\x20rail\x20(node\x20gate\x20+\x20order\x20anchor\x20+\x20period\x20once-key)','description':'Settlement\x20allocator\x20guard\x20for\x20rails\x20that\x20legitimately\x20run\x20once\x20per\x20RENEWAL\x20PERIOD:\x20progress.current\x20==\x20settle_node,\x20'+'the\x20protocol-255\x20once-per-period\x20key\x20pinned\x20to\x20the\x20monotonic\x20'+'progress.history\x20count\x20(replay-proof\x20on\x20renewal\x20loops;\x20OFN\x20#P-04,\x20mainnet-proven).\x20For\x20ONE-SHOT\x20per-order\x20escrow\x20'+'(the\x20order\x20settles\x20at\x20most\x20once\x20in\x20its\x20lifetime)\x20use\x20tpl_allocator_node_gate_settle_once\x20instead\x20—\x20the\x20history\x20'+'count\x20is\x20PUBLICLY\x20READABLE\x20(zero\x20replay\x20protection\x20on\x20a\x20single-shot\x20rail)\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20'+'locks\x20the\x20key\x20(klook\x20KL-LIVE-01,\x20261014).\x20Canonical\x20guard\x20design\x20for\x20settlement\x20'+'allocator\x20rows\x20(catalog-tiers\x20style)\x20—\x20do\x20NOT\x20borrow\x20tpl_forward_node_check\x20(machine_forward\x20scene).\x20Caller-authorization\x20leg\x20REQUIRED\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20buyer\x20or\x20merchant-or-keeper\x20dynamic-permission\x20caller\x20leg\x20—\x20never\x20strip\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27completed\x27)','required':!![],'default':'completed','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0xff,'b_submission':!![],'value_type':'U64','name':'ONCE\x20byte-key\x20slot\x20(protocol\x20255):\x20caller\x20submits\x20the\x20current\x20period\x20step;\x20the\x20guard\x20leg\x20pins\x20it\x20to\x20the\x20monotonic\x20progress.history\x20count\x20so\x20each\x20period\x20gets\x20a\x20fresh\x20key'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0xff},{'type':'query','query':'progress.history\x20count','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['FOUR\x20legs\x20in\x20logic_and:\x20(1)\x20node\x20gate\x20progress.current\x20==\x20settle_node\x20(the\x20arrival\x20precondition),\x20(2)\x20caller-authorization\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20logic_or[buyer\x20order-holder,\x20merchant-or-keeper\x20dynamic\x20permission]\x20—\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20(3)\x20protocol-255\x20once\x20leg\x20pinned\x20to\x20progress.history\x20count\x20(monotonic,\x20unforgeable\x20—\x20each\x20period\x20gets\x20a\x20fresh\x20OnceKey;\x20OFN\x20#P-04,\x20mainnet-proven\x20261010).','The\x20guard\x20table\x20MUST\x20declare\x20identifier\x20255\x20(b_submission:\x20true)\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport\x20from\x20the\x20guard\x20table,\x20so\x20the\x20once\x20leg\x20could\x20never\x20pass\x20without\x20the\x20declaration.','Pair\x20the\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20this\x20guard_key,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20and\x20a\x20sibling\x20period\x27s\x20passport\x20satisfies\x20nothing\x20(testnet\x20CR-01).','Drop\x20the\x20255\x20leg\x20ONLY\x20when\x20the\x20settle\x20node\x20is\x20reachable\x20exactly\x20once\x20per\x20order\x20lifetime\x20AND\x20no\x20renewal\x20loop\x20exists\x20(single-shot\x20services);\x20a\x20re-enterable\x20settle\x20node\x20without\x20it\x20is\x20replayable.\x20A\x20SINGLE-SHOT\x20service\x20should\x20NOT\x20use\x20this\x20template\x20at\x20all\x20—\x20use\x20tpl_allocator_node_gate_settle_once\x20(chain-derived\x20254\x20key):\x20a\x20single-shot\x20rail\x20keyed\x20to\x20the\x20publicly\x20readable\x20history\x20count\x20has\x20zero\x20replay\x20protection\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20locks\x20it\x20(klook\x20KL-LIVE-01,\x20261014).','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/polarity/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Subscription\x20settlement:\x20each\x20period\x20settles\x20to\x20the\x20creator\x20when\x20the\x20fan\x20confirms\x20(completed);\x20the\x20255\x20leg\x20keyed\x20to\x20the\x20period\x27s\x20history\x20count\x20lets\x20periods\x201..N\x20each\x20settle\x20exactly\x20once.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_settle_nodes','scene_id':'service_order_allocators_guard','name':'Node-SET\x20staged\x20settlement\x20rail\x20(multi-fire,\x20per-stage\x20255\x20once\x20key)','description':'Settlement\x20allocator\x20guard\x20for\x20rails\x20that\x20fire\x20ONCE\x20PER\x20STAGE\x20across\x20a\x20node\x20lineage\x20(degree\x20terms,\x20course\x20'+'sessions,\x20milestone\x20stages):\x20progress.current\x20in\x20the\x20settle-eligible\x20NODE\x20SET\x20{settle_node,\x20alt,\x20alt2,\x20alt3}\x20'+'plus\x20the\x20protocol-255\x20once-per-stage\x20key\x20pinned\x20to\x20the\x20monotonic\x20progress.history\x20count\x20(each\x20stage\x27s\x20entry\x20'+'grows\x20the\x20count,\x20so\x20every\x20fire\x20gets\x20a\x20fresh\x20chain\x20OnceKey\x20and\x20a\x20repeat\x20at\x20the\x20SAME\x20node\x20aborts\x2016\x20—\x20'+'OFN\x20#P-04\x20mainnet-proven).\x20Caller-authorization\x20leg\x20REQUIRED\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20alloc_by_guard\x20has\x20NO\x20'+'chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20buyer\x20or\x20merchant-or-keeper\x20dynamic-permission\x20caller\x20leg\x20—\x20'+'never\x20strip\x20it.\x20Deliberately\x20NO\x20claimed_by\x20leg:\x20one\x20arbitration\x20award\x20must\x20not\x20weld\x20the\x20REMAINING\x20stages\x20'+'shut\x20(a\x20single-shot\x20settle_once\x20can\x20afford\x20the\x20polarity\x20leg;\x20a\x20staged\x20rail\x20cannot)\x20—\x20the\x20terminal\x20residual\x20'+'sweep\x20+\x20its\x20recover\x20twin\x20remain\x20the\x20awarded\x20order\x27s\x20exits.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'First\x20stage\x20node\x20whose\x20arrival\x20releases\x20the\x20stage\x20Amount\x20(e.g.\x20\x27semester_1\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'settle_node_alt','type':'string','description':'Second\x20stage\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20program\x20has\x20a\x20single\x20stage','required':![],'default':'${settle_node}','constraint':'Every\x20stage\x20the\x20Amount\x20must\x20release\x20from\x20—\x20omitting\x20one\x20strands\x20that\x20stage\x27s\x20escrow'},{'name':'settle_node_alt2','type':'string','description':'Third\x20stage\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${settle_node}'},{'name':'settle_node_alt3','type':'string','description':'Fourth\x20stage\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${settle_node}','constraint':'Five-plus\x20stages:\x20add\x20per-node\x20String\x20table\x20slots\x20(identifier\x208,\x209,\x20...\x20—\x20slots\x200/6/255\x20are\x20taken)\x20and\x20extend\x20the\x20node-set\x20logic_or\x20by\x20COPY\x20of\x20the\x20shipped\x20four-child\x20form'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'First\x20stage\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${settle_node_alt}','name':'Second\x20stage\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${settle_node_alt2}','name':'Third\x20stage\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x7,'b_submission':![],'value_type':'String','value':'${settle_node_alt3}','name':'Fourth\x20stage\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0xff,'b_submission':!![],'value_type':'U64','name':'ONCE\x20byte-key\x20slot\x20(protocol\x20255):\x20the\x20caller\x20submits\x20the\x20current\x20progress.history\x20count;\x20the\x20guard\x20leg\x20pins\x20it,\x20so\x20each\x20stage\x20gets\x20a\x20fresh\x20OnceKey\x20and\x20a\x20replay\x20at\x20the\x20same\x20stage\x20aborts\x2016'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x7}]}]},{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0xff},{'type':'query','query':'progress.history\x20count','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['education','ecommerce','rental','freelance','travel'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['THREE\x20logic\x20legs\x20in\x20logic_and:\x20(1)\x20the\x20node-SET\x20gate\x20—\x20progress.current\x20in\x20{settle_node,\x20alt,\x20alt2,\x20alt3}\x20as\x20ONE\x20top-level\x20logic_or,\x20(2)\x20the\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20—\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20(3)\x20the\x20protocol-255\x20once\x20leg\x20pinned\x20to\x20progress.history\x20count\x20(monotonic,\x20unforgeable\x20—\x20each\x20stage\x20gets\x20a\x20fresh\x20OnceKey;\x20OFN\x20#P-04,\x20mainnet-proven\x20261010).\x20The\x20guard\x20table\x20MUST\x20declare\x20identifier\x20255\x20(b_submission:\x20true)\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport\x20from\x20the\x20guard\x20table.','WHY\x20NOT\x20254\x20(single-shot\x20key):\x20254\x20keys\x20on\x20payment_info.for_object,\x20which\x20never\x20changes\x20across\x20stages\x20—\x20the\x20SECOND\x20stage\x20fire\x20would\x20abort\x2016\x20forever\x20and\x20strand\x20the\x20remaining\x20stages\x20(OFN\x20#P-04).\x20The\x20255\x20history-count\x20pin\x20is\x20the\x20only\x20per-fire\x20key\x20that\x20advances\x20with\x20the\x20order.','WHY\x20NOT\x20a\x20claimed_by\x20leg\x20(settle_once\x20ships\x20one):\x20a\x20staged\x20rail\x20MUST\x20keep\x20firing\x20after\x20an\x20award\x20pays\x20—\x20welding\x20stages\x202..N\x20shut\x20strands\x20the\x20program.\x20The\x20awarded\x20order\x27s\x20exits\x20are\x20the\x20terminal\x20residual\x20sweep\x20and\x20its\x20recover\x20twin,\x20not\x20this\x20rail.','PER-STAGE\x20CAP:\x20the\x20Amount\x20leg\x20is\x20a\x20fixed\x20per-stage\x20figure;\x20the\x20node\x20set\x20+\x20once\x20key\x20bound\x20the\x20fires\x20to\x20one\x20per\x20stage\x20entry,\x20so\x20an\x20N-stage\x20program\x20releases\x20at\x20most\x20N\x20x\x20Amount.\x20A\x20stage\x20expanded\x20beyond\x20the\x20four\x20shipped\x20slots\x20needs\x20extra\x20String\x20table\x20slots\x20(identifier\x208,\x209,\x20...)\x20and\x20one\x20more\x20logic_or\x20child\x20per\x20slot.','Pair\x20the\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20sharing\x20this\x20guard_key\x20when\x20the\x20allocator\x20pays\x20a\x20third\x20party,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20(testnet\x20CR-01).\x20An\x20Amount-mode\x20allocator\x20with\x20a\x20Rate-0\x20leg\x20aborts\x20ERATE_NOT_10000\x20—\x20order\x20binding\x20then\x20rides\x20the\x20guard\x27s\x20own\x20slot-0\x20submission\x20instead.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20progress\x20handler\x20injects\x20the\x20order-holder\x20rail\x20on\x20forward\x20ops\x20only,\x20but\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/polarity/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Degree\x20tuition:\x20each\x20completed\x20term\x20(semester_1..3,\x20graduation_ready)\x20releases\x20one\x20per-term\x20Amount\x20exactly\x20once;\x20the\x20255\x20leg\x20keyed\x20to\x20the\x20stage\x27s\x20history\x20count\x20lets\x20every\x20term\x20fire\x20while\x20a\x20replay\x20at\x20the\x20same\x20term\x20aborts\x2016.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_settle_once','scene_id':'service_order_allocators_guard','name':'Node-gated\x20SINGLE-SHOT\x20settlement\x20rail\x20(node\x20gate\x20+\x20order\x20anchor\x20+\x20chain-derived\x20254\x20once)','description':'Settlement\x20allocator\x20guard\x20for\x20ONE-SHOT\x20per-order\x20escrow\x20(the\x20order\x20settles\x20at\x20most\x20once\x20in\x20its\x20lifetime):\x20'+'progress.current\x20in\x20the\x20settle-eligible\x20NODE\x20SET\x20{settle_node,\x20settle_node_alt,\x20settle_node_alt2}\x20—\x20the\x20final\x20'+'node\x20plus\x20every\x20optional\x20post-settlement\x20side\x20node\x20(UPWC-K2/CAT-C1:\x20a\x20buyer\x20Praise\x20moved\x20progress.current\x20to\x20'+'\x27wonder\x27\x20and\x20the\x20completed-only\x20pin\x20aborted\x20the\x20merchant\x27s\x20alloc,\x20stranding\x20the\x20escrow)\x20—\x20plus\x20the\x20'+'claimed_by\x20some\x20==\x20false\x20polarity\x20leg\x20(ctra-mn-261019\x20F-05:\x20without\x20it\x20an\x20'+'AWARDED\x20order\x20could\x20fire\x20settle\x20AND\x20the\x20recovery\x20rail\x20against\x20the\x20same\x20pool\x20—\x20first-come\x20wins\x20and\x20the\x20loser\x27s\x20'+'split\x20is\x20skipped;\x20the\x20leg\x20joins\x20the\x20D-BUG-2\x20exclusion\x20the\x20refund/recover\x20twins\x20already\x20carry;\x20BKN-P1\x20caveat:\x20a\x20'+'ZERO-award\x20ruling\x20also\x20sets\x20claimed_by,\x20so\x20a\x20ruled-zero\x20order\x20settles\x20via\x20the\x20recovery\x20rail\x20paying\x20the\x20merchant\x20'+'Entity,\x20never\x20via\x20this\x20rail),\x20plus\x20the\x20protocol-254\x20'+'chain-derived\x20once\x20key\x20—\x20bcs(payment_info.for_object)\x20derived\x20on-chain,\x20submitted\x20bytes\x20ignored,\x20exactly-once\x20'+'per\x20paying\x20order\x20enforced\x20by\x20the\x20chain\x20(aborts\x2016\x20on\x20replay,\x2021\x20when\x20the\x20order\x20declares\x20no\x20for_object).\x20'+'For\x20rails\x20that\x20legitimately\x20run\x20once\x20per\x20RENEWAL\x20PERIOD\x20use\x20tpl_allocator_node_gate_settle\x20(255\x20+\x20period\x20key)\x20instead.\x20Caller-authorization\x20leg\x20REQUIRED\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20buyer\x20or\x20merchant-or-keeper\x20dynamic-permission\x20caller\x20leg\x20—\x20never\x20strip\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27completed\x27)','required':!![],'default':'completed','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'settle_node_alt','type':'string','description':'Second\x20settle-eligible\x20node\x20—\x20the\x20template\x27s\x20post-settlement\x20OPTIONAL\x20side\x20node\x20(e.g.\x20\x27wonder\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20no\x20side\x20nodes','required':![],'default':'completed','constraint':'UPWC-K2\x20(upwc-cat-261017\x20CAT-C1):\x20a\x20settlement\x20gate\x20pinned\x20to\x20the\x20final\x20node\x20ALONE\x20strands\x20the\x20escrow\x20the\x20moment\x20a\x20buyer\x20uses\x20an\x20optional\x20post-settlement\x20side\x20action\x20(Praise/Complain\x20move\x20progress.current\x20off\x20completed\x20BEFORE\x20the\x20merchant\x27s\x20alloc\x20runs).\x20Pass\x20every\x20node\x20settlement\x20must\x20still\x20fire\x20from'},{'name':'settle_node_alt2','type':'string','description':'Third\x20settle-eligible\x20node\x20(e.g.\x20\x27no_wonder\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'completed'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x3,'b_submission':![],'value_type':'Bool','value':![],'name':'Expected\x20claimed_by\x20polarity:\x20false\x20=\x20no\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(query\x20\x27order.claimed_by\x20some\x27);\x20an\x20awarded\x20order\x20exits\x20via\x20the\x20recovery\x20rail,\x20never\x20settle'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${settle_node_alt}','name':'Second\x20settle-eligible\x20node\x20(optional\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${settle_node_alt2}','name':'Third\x20settle-eligible\x20node\x20(optional\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','name':'CHAIN-DERIVED\x20ONCE\x20slot\x20(protocol\x20254):\x20the\x20once\x20key\x20is\x20derived\x20on-chain\x20from\x20the\x20paying\x20order\x20(bcs(payment_info.for_object));\x20the\x20submitted\x20bytes\x20are\x20ignored,\x20so\x20exactly-once\x20per\x20order\x20is\x20chain-enforced\x20and\x20publicly\x20unforgeable'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['ecommerce','rental','education','travel','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['THREE\x20logic\x20legs\x20in\x20logic_and\x20(node-SET\x20gate\x20+\x20caller-authorization\x20+\x20claimed_by\x20some\x20==\x20false;\x20the\x20legacy\x20order.service\x20host-binding\x20leg\x20was\x20removed\x20—\x20v148\x20chain-side\x20task\x20binding,\x20bsw4\x20F-06);\x20the\x20caller\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20is\x20logic_or[buyer\x20order-holder,\x20merchant-or-keeper\x20dynamic\x20permission]\x20—\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check;\x20the\x20ONCE\x20semantics\x20is\x20NOT\x20a\x20logic\x20leg\x20—\x20it\x20is\x20the\x20declared\x20254\x20submission\x20slot:\x20alloc()\x20derives\x20the\x20key\x20on-chain\x20as\x20bcs(payment_info.for_object)\x20and\x20a\x20second\x20alloc\x20for\x20the\x20same\x20order\x20aborts\x2016\x20(E_ONCE_TRIGGERED)\x20before\x20any\x20distribution.','NODE-SET\x20SHAPE\x20(klook-mn-261019\x20KLM-FIND-02):\x20the\x20node-set\x20leg\x20is\x20a\x20logic_or\x20ONLY\x20when\x20the\x20settled\x20set\x20has\x202+\x20nodes\x20—\x20logic_or\x20requires\x20at\x20least\x202\x20children\x20(\x27logic_or\x20requires\x20at\x20least\x202\x20child\x20nodes\x27),\x20so\x20a\x20SINGLE-node\x20rail\x20uses\x20the\x20bare\x20logic_equal[progress.current\x20==\x20<node>]\x20as\x20the\x20leg;\x20wrapping\x20one\x20node\x20in\x20logic_or\x20fails\x20guard\x20creation.','The\x20guard\x20table\x20MUST\x20declare\x20{identifier:\x20254,\x20b_submission:\x20true,\x20value_type:\x20\x27Address\x27}\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport\x20from\x20the\x20guard\x20table.','WHY\x20NOT\x20255\x20+\x20history\x20count\x20on\x20a\x20single-shot\x20rail\x20(klook\x20KL-LIVE-01):\x20the\x20history\x20count\x20is\x20PUBLICLY\x20READABLE\x20(anyone\x20pre-computes\x20the\x20next\x20value\x20—\x20zero\x20replay\x20protection)\x20and\x20a\x20keeper\x20off-by-one\x20pins\x20the\x20wrong\x20key\x20and\x20permanently\x20locks\x20the\x20rail;\x20254\x20is\x20chain-derived\x20from\x20the\x20paying\x20order\x20and\x20immune\x20to\x20both.','Pair\x20the\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20this\x20guard_key,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20(testnet\x20CR-01).','Renewal/subscription\x20settlement\x20(once\x20per\x20PERIOD)\x20must\x20use\x20tpl_allocator_node_gate_settle\x20—\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes\x20across\x20periods,\x20so\x20a\x20renewal\x20rail\x20with\x20254\x20aborts\x2016\x20forever\x20from\x20period\x202\x20(OFN\x20#P-04).','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/polarity/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Travel\x20single-shot\x20settlement:\x20each\x20order\x20settles\x20exactly\x20once\x20when\x20the\x20last\x20segment\x20is\x20redeemed\x20(completed);\x20a\x20replayed\x20alloc\x20for\x20the\x20same\x20order\x20aborts\x2016\x20via\x20the\x20chain-derived\x20254\x20key\x20—\x20no\x20keeper-computed\x20key\x20to\x20guess\x20or\x20mistype.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_refund','scene_id':'service_order_allocators_guard','name':'Node-gated\x20refund\x20rail\x20(node\x20gate\x20+\x20order\x20anchor;\x20NEVER\x20slot\x20254)','description':'Refund\x20allocator\x20guard\x20over\x20a\x20refund\x20NODE\x20SET\x20{refund_node,\x20refund_node_alt}:\x20progress.current\x20in\x20the\x20set\x20plus\x20the\x20'+'claimed_by\x20some\x20==\x20false\x20polarity\x20leg\x20—\x20the\x20claimed_by\x20leg\x20ships\x20IN\x20example_root\x20(coursera-mn-261014\x20'+'F-30:\x20a\x20prose-only\x20claimed_by\x20instruction\x20made\x20the\x20resolver\x20synthesize\x20a\x20double-negated\x20leg\x20that\x20bricked\x20the\x20rail\x20on\x20a\x20'+'clean\x20unclaimed\x20refund,\x20live\x20abort\x207\x20with\x20the\x20escrow\x20stranded).\x20Designed\x20for\x20order-anchored\x20refund\x20rows\x20(recipient\x20'+'GuardIdentifier(0)\x20—\x20funds\x20land\x20on\x20the\x20Order,\x20extracted\x20by\x20a\x20separate\x20owner_receive\x20step).\x20Deliberately\x20arms\x20NO\x20254\x20slot:\x20'+'254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes\x20across\x20renewal\x20periods,\x20so\x20a\x20refund\x20rail\x20with\x20254\x20aborts\x20'+'E_ONCE_TRIGGERED(16)\x20forever\x20from\x20period\x202\x20(OFN\x20#P-04).\x20Once-semantics\x20comes\x20from\x20the\x20terminal-node\x20topology\x20instead.\x20Caller-authorization\x20leg\x20REQUIRED\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20buyer\x20or\x20merchant-or-keeper\x20dynamic-permission\x20caller\x20leg\x20—\x20never\x20strip\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'refund_node','type':'string','description':'Machine\x20node\x20at\x20which\x20the\x20refund\x20fires\x20(e.g.\x20\x27closed_cancel\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive).\x20Pass\x20every\x20extra\x20refundable\x20terminal\x20via\x20refund_node_alt\x20—\x20never\x20AND-prepend\x20one\x20node\x20gate\x20beside\x20extra\x20node\x20literals'},{'name':'refund_node_alt','type':'string','description':'Second\x20refund-eligible\x20node\x20(e.g.\x20\x27rejected\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20a\x20single\x20refund\x20terminal','required':![],'default':'${refund_node}','constraint':'Cover\x20EVERY\x20refundable\x20terminal\x20—\x20omitting\x20one\x20deadlocks\x20the\x20escrow\x20(OFN\x20#P-02).\x20Three-plus\x20nodes:\x20add\x20per-node\x20String\x20table\x20slots\x20(identifier\x205\x20first,\x20then\x207,\x208,\x20...\x20-\x20slot\x206\x20is\x20the\x20caller-auth\x20Permission\x20slot)\x20and\x20extend\x20the\x20node-set\x20logic_or\x20by\x20COPY\x20of\x20the\x20shipped\x20two-child\x20form'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${refund_node}','name':'Primary\x20refund\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x3,'b_submission':![],'value_type':'Bool','value':![],'name':'Expected\x20claimed_by\x20polarity:\x20false\x20=\x20no\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(query\x20\x27order.claimed_by\x20some\x27)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${refund_node_alt}','name':'Second\x20refund-eligible\x20node\x20(optional;\x20duplicates\x20the\x20primary\x20when\x20the\x20machine\x20has\x20one\x20refund\x20terminal)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-08'],'creation_notes':['FOUR\x20legs\x20in\x20logic_and:\x20(1)\x20the\x20node-SET\x20gate\x20—\x20progress.current\x20in\x20{refund_node,\x20refund_node_alt}\x20as\x20ONE\x20top-level\x20logic_or\x20child,\x20(2)\x20the\x20CALLER-AUTHORIZATION\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②)\x20—\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20stranger\x20could\x20fire\x20the\x20rail\x20against\x20someone\x20else\x27s\x20escrow:\x20the\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20dynamic\x20permission\x20—\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20(K-4:\x20rails\x20are\x20keeper-fired;\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation);\x20an\x20order-anchored\x20recipient\x20(GuardIdentifier(0))\x20binds\x20WHERE\x20funds\x20land,\x20never\x20WHO\x20may\x20fire],\x20(3)\x20order.claimed_by\x20some\x20==\x20false\x20(Bool,\x20query\x201570)\x20—\x20blocks\x20the\x20refund\x20once\x20an\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid;\x20the\x20polarity\x20twin\x20tpl_allocator_node_gate_recover\x20asserts\x20true,\x20so\x20exactly\x20one\x20of\x20the\x20pair\x20can\x20ever\x20pass\x20(D-BUG-2).\x20The\x20claimed_by\x20leg\x20ships\x20IN\x20example_root\x20—\x20compose\x20it\x20by\x20COPY,\x20never\x20by\x20hand:\x20the\x20synthesized\x20anti-pattern\x20logic_equal[logic_not(query\x20\x27order.claimed_by\x20some\x27),\x20false]\x20is\x20a\x20DOUBLE\x20NEGATION\x20(unclaimed\x20order:\x20some==false\x20→\x20not==true\x20→\x20true==false\x20→\x20the\x20leg\x20always\x20fails)\x20and\x20bricks\x20the\x20rail\x20with\x20the\x20escrow\x20stranded\x20at\x20a\x20terminal\x20node\x20(coursera-mn-261014\x20F-30,\x20live\x20passport::E_VERIFY_FAILED\x20(7)\x20at\x20trigger\x20on\x20a\x20clean\x20unclaimed\x20refund\x20—\x20an\x20always-false\x20leg\x20rejects\x20the\x20trigger\x20at\x20passport\x20verification).','NEVER\x20arm\x20identifier\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object,\x20which\x20the\x20order\x27s\x20payment\x20intake\x20never\x20rewrites\x20—\x20the\x20OnceKey\x20is\x20identical\x20in\x20every\x20renewal\x20period,\x20so\x20refund\x20period\x202+\x20aborts\x20and\x20the\x20escrow\x20strands\x20with\x20no\x20recovery\x20(OFN\x20#P-04).\x20OBSERVABILITY:\x20on\x20a\x20full-drain\x20rail\x20the\x20EMPTIED-POOL\x20abort\x20(14,\x20when\x20the\x20distribution\x20entry\x20finds\x20the\x20pool\x20already\x20empty)\x20fires\x20BEFORE\x20the\x20once\x20slot\x20is\x20read\x20—\x2014\x20on\x20a\x20refund\x20replay\x20IS\x20the\x20254-replay\x20signature;\x2016\x20(E_ONCE_TRIGGERED)\x20only\x20surfaces\x20when\x20a\x20residual\x20balance\x20keeps\x20the\x20pool\x20alive.\x20Once-semantics\x20on\x20refunds\x20comes\x20from\x20the\x20terminal-node\x20topology\x20(a\x20cancelled\x20terminal\x20is\x20reachable\x20once),\x20not\x20from\x20a\x20once\x20slot.','Renewal\x20loops\x20that\x20legitimately\x20RE-ENTER\x20a\x20refund\x20node\x20(cancel\x20in\x20period\x201,\x20cancel\x20again\x20in\x20period\x203)\x20arm\x20identifier\x20255\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count])\x20instead\x20—\x20byte-keyed,\x20fresh\x20per\x20period.','MULTI-NODE\x20refund\x20(e.g.\x20{closed_cancel,\x20returned,\x20item_lost}):\x20hoist\x20the\x20node\x20predicate\x20to\x20ONE\x20top-level\x20n-ary\x20logic_or\x20as\x20a\x20single\x20logic_and\x20child\x20(the\x20chain\x20grammar\x20accepts\x20>2\x20logic_or\x20children):\x20{\x20type:\x20\x27logic_or\x27,\x20nodes:\x20[\x20{\x20type:\x20\x27logic_equal\x27,\x20nodes:\x20[{\x20type:\x20\x27query\x27,\x20query:\x20\x27progress.current\x27,\x20object:\x20{\x20identifier:\x200,\x20convert_witness:\x20\x27OrderProgress\x27\x20},\x20parameters:\x20[]\x20},\x20{\x20type:\x20\x27identifier\x27,\x20identifier:\x201\x20}]\x20},\x20...one\x20equality\x20per\x20node...\x20]\x20}\x20—\x20each\x20node\x20needs\x20its\x20OWN\x20String\x20table\x20slot\x20(identifier\x201,\x204,\x20then\x205,\x207,\x208,\x20...\x20-\x20slot\x206\x20is\x20the\x20caller-auth\x20Permission\x20slot).\x20NEVER\x20AND-prepend\x20a\x20single-node\x20gate\x20next\x20to\x20extra\x20node\x20literals:\x20the\x20pinned\x20node\x20contradicts\x20its\x20AND-siblings\x20and\x20they\x20become\x20DEAD\x20literals\x20—\x20azx7-mn-261014\x20CR-azx7-01\x20shipped\x20logic_and[equal(current,\x27returned\x27),\x20...,\x20or[...,\x20equal(current,\x27closed_cancel\x27)],\x20...]\x20where\x20the\x20\x27returned\x27\x20pin\x20made\x20the\x20closed_cancel/item_lost\x20equalities\x20unreachable\x20(both\x20legs\x20dead,\x20escrow\x20stranded\x20twice\x20on\x20mainnet).\x20Cover\x20EVERY\x20refundable\x20node\x20—\x20omitting\x20the\x20mid-period\x20cancel\x20node\x20deadlocks\x20the\x20escrow\x20(OFN\x20#P-02);\x20every\x20terminal\x20must\x20keep\x20a\x20fund\x20exit.\x20The\x20SHIPPED\x20example\x20is\x20the\x20two-node\x20form\x20(identifiers\x201\x20and\x204):\x20with\x20refund_node_alt\x20left\x20at\x20its\x20default\x20the\x20alt\x20leg\x20duplicates\x20the\x20primary\x20—\x20a\x20legal\x20tautology,\x20never\x20a\x20dead\x20literal.','Where\x20a\x20paid\x20arbitration\x20award\x20must\x20preclude\x20refund,\x20the\x20claimed_by\x20some\x20==\x20false\x20leg\x20above\x20already\x20seals\x20it\x20(query\x201570)\x20—\x20PAIR\x20a\x20merchant-recovery\x20allocator\x20with\x20claimed_by\x20some\x20==\x20true\x20(escrow-exit\x20invariant,\x20az-mn-261007)\x20—\x20exactly\x20one\x20of\x20the\x20two\x20legs\x20can\x20ever\x20pass\x20(D-BUG-2).\x20RULED-ZERO\x20SEAL\x20(BKN-P1,\x20decision\x20option\x20a):\x20a\x20ZERO-award\x20ruling\x20ALSO\x20sets\x20claimed_by\x20(the\x20ruling\x20operation\x20has\x20no\x20amount\x20floor),\x20so\x20this\x20leg\x20seals\x20on\x20ruled-zero\x20too\x20—\x20the\x20buyer\x27s\x20rail\x20closes\x20with\x20NO\x20indemnity\x20moved,\x20and\x20the\x20paired\x20recovery\x20rail\x20becomes\x20the\x20only\x20escrow\x20exit\x20paying\x20the\x20principal\x20to\x20the\x20MERCHANT\x20Entity.\x20The\x20pairing\x20guarantees\x20no\x20stranding,\x20not\x20no-misallocation\x20—\x20disclose\x20this\x20trade-off\x20when\x20arming\x20the\x20pair;\x20award-amount\x20polarity\x20is\x20not\x20expressible\x20on\x20the\x20refund\x20track.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/polarity/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Fan\x20cancels\x20mid-period:\x20the\x20refund\x20rail\x20fires\x20at\x20closed_cancel,\x20paying\x20100%\x20back\x20to\x20the\x20subscriber\x27s\x20Order\x20(two-step\x20owner_receive\x20payout);\x20the\x20mid-period\x20node\x20rail\x20is\x20mandatory\x20—\x20omitting\x20it\x20strands\x20the\x20escrow.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_recover','scene_id':'service_order_allocators_guard','name':'Award-recovery\x20rail\x20(claimed_by-some\x20polarity;\x20NO\x20node\x20gate;\x20NEVER\x20slot\x20254)','description':'Polarity\x20twin\x20of\x20tpl_allocator_node_gate_refund\x20for\x20the\x20MERCHANT\x20side\x20of\x20the\x20escrow-exit\x20invariant\x20(az-mn-261007):\x20fires\x20only\x20where\x20an\x20arbitration\x20ruling\x20has\x20ACTUALLY\x20claimed\x20the\x20order\x20—\x20the\x20order.claimed_by\x20some\x20==\x20true\x20leg\x20(query\x20\x27order.claimed_by\x20some\x27,\x20Bool\x20identifier)\x20—\x20the\x20sole\x20state\x20leg\x20(Service\x20scoping\x20is\x20chain-side\x20since\x20v148;\x20bsw4\x20F-06\x20removed\x20the\x20host-binding\x20leg).\x20Deliberately\x20carries\x20NO\x20node\x20gate\x20(UPWC-K1,\x20upwc-cat-261017\x20CAT-B1/CAT-C2):\x20every\x20node\x20literal\x20—\x20single\x20or\x20set\x20—\x20eventually\x20pins\x20the\x20rail\x20below\x20where\x20the\x20order\x20actually\x20rests\x20when\x20the\x20award\x20lands\x20(keeper\x20auto-accept,\x20buyer\x20praise,\x20revision\x20loop\x20all\x20move\x20orders\x20after\x20delivery),\x20and\x20a\x20pinned\x20node\x20aborts\x207\x20with\x20the\x20escrow\x20stranded;\x20the\x20claimed_by\x20axis\x20ALONE\x20carries\x20the\x20state\x20condition\x20and\x20the\x20mutual\x20exclusion,\x20so\x20the\x20rail\x20passes\x20wherever\x20the\x20awarded\x20order\x20rests.\x20Zero-award\x20rulings\x20claim\x20too\x20(RULED-ZERO\x20CAVEAT,\x20BKN-P1).\x20The\x20paired\x20Allocator\x20row\x20(not\x20this\x20Guard)\x20pays\x20Rate\x2010000\x20to\x20the\x20merchant/creator\x20Entity:\x20exactly\x20one\x20of\x20the\x20refund\x20(some\x20==\x20false)\x20and\x20recovery\x20(some\x20==\x20true)\x20legs\x20can\x20ever\x20pass\x20at\x20ANY\x20node\x20(D-BUG-2).\x20Deliberately\x20arms\x20NO\x20254\x20slot\x20—\x20a\x20recovery\x20rail\x20is\x20single-shot\x20by\x20construction\x20(claimed_by\x20is\x20written\x20once;\x20the\x20second\x20compensate\x20aborts\x20E_ORDER_ALREADY_CLAIMED),\x20so\x20it\x20needs\x20no\x20once\x20slot.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x3,'b_submission':![],'value_type':'Bool','value':!![],'name':'Expected\x20claimed_by\x20polarity:\x20true\x20=\x20award\x20has\x20ACTUALLY\x20paid\x20(query\x20\x27order.claimed_by\x20some\x27)'}],'example_root':{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x3}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-08'],'creation_notes':['SINGLE\x20COMPARISON\x20ROOT:\x20order.claimed_by\x20some\x20==\x20true\x20—\x20the\x20POLARITY\x20FLIP\x20that\x20distinguishes\x20this\x20rail\x20from\x20its\x20refund\x20twin:\x20the\x20refund\x20guard\x20asserts\x20the\x20Bool\x20identifier\x20false\x20(claimed_by\x20none),\x20this\x20one\x20true\x20(an\x20award\x20ACTUALLY\x20paid,\x20single-shot\x20order.compensate\x20wrote\x20claimed_by).\x20Exactly\x20one\x20of\x20the\x20two\x20polarities\x20can\x20ever\x20pass\x20at\x20ANY\x20node\x20(D-BUG-2).\x20RULED-ZERO\x20CAVEAT\x20(BKN-P1,\x20decision\x20option\x20a):\x20\x27some\x20==\x20true\x27\x20fires\x20on\x20ANY\x20claim,\x20including\x20a\x20ZERO-award\x20ruling\x20(claimed_by\x20is\x20written\x20without\x20an\x20amount\x20floor)\x20—\x20on\x20ruled-zero\x20this\x20rail\x20becomes\x20the\x20only\x20escrow\x20exit\x20and\x20sweeps\x20the\x20principal\x20to\x20the\x20merchant\x20Entity\x20even\x20though\x20the\x20buyer\x20received\x20nothing;\x20that\x20misallocation\x20is\x20the\x20accepted\x20trade-off\x20of\x20the\x20pairing:\x20the\x20guarantee\x20is\x20no-stranding,\x20not\x20no-misallocation.','WHY\x20NO\x20NODE\x20GATE\x20(UPWC-K1,\x20upwc-cat-261017\x20CAT-B1/CAT-C2\x20—\x20supersedes\x20the\x20F-51\x20node-set\x20teaching):\x20the\x20catalog-tiers\x20mainnet\x20run\x20shipped\x20a\x20purpose\x20that\x20PROMISED\x20a\x20full-set\x20node\x20gate\x20while\x20the\x20fill\x20machinery\x20emitted\x20a\x20single\x20\x27completed\x27\x20literal\x20—\x20the\x20awarded\x20order\x20had\x20been\x20auto-accepted\x20to\x20\x27accepted\x27,\x20the\x20rail\x20aborted\x207\x20and\x201.0\x20WOW\x20stranded.\x20The\x20F-51\x20half-fix\x20(teach\x20a\x20WIDER\x20node\x20set)\x20still\x20relies\x20on\x20the\x20resolver\x20materializing\x20the\x20exact\x20set,\x20and\x20every\x20narrower\x20fill\x20re-creates\x20the\x20stranding.\x20The\x20claimed_by\x20axis\x20makes\x20the\x20node\x20dimension\x20IRRELEVANT:\x20before\x20any\x20award\x20the\x20leg\x20is\x20false\x20(rail\x20closed),\x20after\x20the\x20award\x20it\x20is\x20true\x20(rail\x20open)\x20wherever\x20the\x20order\x20rests\x20—\x20keepers,\x20buyers\x20and\x20side\x20actions\x20can\x20never\x20pin\x20the\x20escrow\x20again.\x20Do\x20NOT\x20re-add\x20a\x20node\x20equality\x20here;\x20if\x20a\x20caller\x20demands\x20one,\x20refuse\x20with\x20this\x20note.','CALLER-BINDING\x20gap\x20(upw-mn-261014\x20F-52a):\x20this\x20rail\x20pays\x20a\x20FIXED\x20merchant\x20Entity,\x20so\x20nothing\x20else\x20binds\x20the\x20caller\x20—\x20any\x20account\x20that\x20knows\x20the\x20guard\x20address\x20can\x20sweep\x20the\x20escrow\x20principal\x20to\x20the\x20merchant.\x20The\x20refund\x20twin\x20is\x20implicitly\x20bound\x20(its\x20GuardIdentifier(0)\x20recipient\x20hard-binds\x20the\x20payee\x20to\x20the\x20order\x20owner);\x20this\x20one\x20is\x20not.\x20Where\x20a\x20last-moment\x20buyer\x20contest\x20matters,\x20add\x20an\x20identity\x20leg\x20(order.owner\x20==\x20context(Signer)\x20is\x20wrong\x20here\x20—\x20the\x20MERCHANT\x20sweeps;\x20use\x20the\x20merchant\x20identity\x20or\x20a\x20Permission-staff\x20check)\x20and\x20disclose\x20that\x20the\x20sweep\x20then\x20needs\x20the\x20merchant\x20online.\x20Keep\x20as-is\x20when\x20permissionless\x20triggering\x20is\x20the\x20intended\x20keeper\x20model\x20—\x20but\x20then\x20the\x20R-C3-01/LE-04\x20lint\x20finding\x20is\x20expected\x20and\x20accepted.','The\x20Guard\x20only\x20GATES\x20—\x20the\x20money\x20shape\x20lives\x20on\x20the\x20paired\x20Allocator\x20row:\x20Rate\x2010000\x20to\x20the\x20merchant/creator\x20ENTITY\x20(an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer;\x20on\x20chain\x20a\x20zero-address\x20recipient\x20burns\x20the\x20share\x20permanently).\x20Using\x20the\x20REFUND\x20template\x20here\x20inverts\x20the\x20polarity:\x20the\x20rail\x20only\x20passes\x20BEFORE\x20the\x20award\x20pays,\x20so\x20once\x20claimed_by\x20is\x20set\x20the\x20awarded\x20order\x27s\x20escrow\x20strands\x20forever\x20—\x20the\x20az-mn-261007\x20stranded-escrow\x20shape\x20(2.38\x20locked\x20at\x20reviewed).','PAIR\x20it\x20with\x20the\x20refund\x20rail\x20around\x20every\x20full-drain\x20settle\x20rail\x20(escrow-exit\x20invariant):\x20pre-settle\x20dispute\x20blocks\x20settle\x20permanently\x20(claimed_by\x20some\x20==\x20false\x20makes\x20the\x20refund\x20leg\x20pass\x20and\x20settle\x20can\x20no\x20longer\x20fire),\x20and\x20this\x20recovery\x20rail\x20is\x20then\x20the\x20ONLY\x20exit\x20for\x20the\x20principal.','NEVER\x20arm\x20identifier\x20254\x20on\x20this\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object,\x20identical\x20in\x20every\x20renewal\x20period\x20—\x20recovery\x20period\x202+\x20aborts\x20E_ONCE_TRIGGERED(16)\x20and\x20the\x20principal\x20strands\x20(OFN\x20#P-04).\x20A\x20recovery\x20rail\x20is\x20single-shot\x20by\x20construction\x20(claimed_by\x20is\x20written\x20once;\x20the\x20second\x20compensate\x20aborts\x20E_ORDER_ALREADY_CLAIMED),\x20so\x20it\x20needs\x20no\x20once\x20slot\x20at\x20all.','Renewal\x20loops\x20that\x20legitimately\x20re-enter\x20recovery\x20arm\x20identifier\x20255\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count])\x20instead\x20—\x20byte-keyed,\x20fresh\x20per\x20period\x20(same\x20remedy\x20as\x20the\x20refund\x20twin).','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20the\x20polarity\x20pair\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Arbitrator\x20awards\x20the\x20buyer\x201.00\x20from\x20the\x20compensation\x20fund\x20(claimed_by\x20set)\x20while\x20an\x20auto-accept\x20keeper\x20has\x20already\x20moved\x20the\x20order\x20past\x20delivered:\x20the\x20escrow\x20principal\x20is\x20now\x20refund-blocked;\x20the\x20recovery\x20rail\x20fires\x20WHEREVER\x20the\x20order\x20rests\x20and\x20sweeps\x20the\x20remaining\x20principal\x20to\x20the\x20merchant\x20Entity,\x20so\x20the\x20awarded\x20order\x20still\x20exits\x20with\x20a\x20zero\x20balance.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_settle_tier_small','scene_id':'service_order_allocators_guard','name':'Tiered\x20settlement\x20rail\x20—\x20SMALL-order\x20leg\x20(node\x20gate\x20+\x20order.amount\x20<=\x20tier\x20+\x20NOT\x20item-flag)','description':'SMALL\x20leg\x20of\x20a\x20tiered\x20settlement\x20fee:\x20fires\x20only\x20while\x20order.amount\x20<=\x20tier_amount\x20AND\x20the\x20order\x20does\x20NOT\x20hold\x20the\x20flag\x20item.\x20A\x20single\x20Amount\x20allocator\x20row\x20cannot\x20switch\x20per\x20order\x20—\x20but\x20guards\x20CAN\x20read\x20the\x20order\x20(ctra-mn-261019\x20F-04,\x20live-proven:\x20both\x20tiers\x20fired\x20with\x20per-unit\x20reconciliation\x20exact),\x20so\x20a\x20tiered\x20fee\x20ships\x20as\x20DISJOINT\x20self-selecting\x20rails,\x20each\x20its\x20own\x20guard_key\x20+\x20allocator:\x20this\x20small\x20rail,\x20its\x20tpl_allocator_node_gate_settle_tier_large\x20twin\x20(order.amount\x20>\x20tier),\x20and\x20optionally\x20a\x20flag\x20rail\x20(query\x201551\x20\x27order.item\x20has\x27\x20—\x20flagged\x20items\x20route\x20to\x20their\x20own\x20rail\x20regardless\x20of\x20size,\x20which\x20is\x20why\x20the\x20small\x20leg\x20carries\x20the\x20NOT-flag\x20leg).\x20MUTUAL\x20EXCLUSION\x20LIVES\x20INSIDE\x20THE\x20GUARDS:\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins\x20—\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20on\x20each\x20distribution\x20call)\x20—\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS.\x20Root\x20shape\x20matches\x20tpl_allocator_node_gate_settle_once\x20(node\x20gate\x20+\x20claimed_by\x20some\x20==\x20false\x20+\x20caller-authorization\x20+\x20the\x20chain-derived\x20254\x20once\x20slot);\x20the\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20ships\x20IN\x20the\x20root\x20-\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20never\x20strip\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27completed\x27)','required':!![],'default':'completed','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'tier_amount','type':'number','description':'Tier\x20upper\x20boundary\x20in\x20the\x20SAME\x20smallest-unit\x20space\x20as\x20order.amount\x20(convert\x20the\x20USD\x20fee_param\x20at\x20the\x20token\x27s\x20decimals)','required':!![],'constraint':'Must\x20be\x20>\x200;\x20boundary\x20membership\x20is\x20<=\x20(an\x20order\x20exactly\x20at\x20the\x20tier\x20settles\x20SMALL)'},{'name':'flag_item_name','type':'string','description':'Item\x20name\x20carrying\x20the\x20routing\x20flag\x20—\x20an\x20order\x20holding\x20this\x20item\x20(query\x201551\x20\x27order.item\x20has\x27)\x20routes\x20to\x20its\x20own\x20rail,\x20never\x20the\x20small\x20rail','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20flagged\x20sale\x20item\x27s\x20name\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x3,'b_submission':![],'value_type':'Bool','value':![],'name':'Expected\x20claimed_by\x20polarity:\x20false\x20=\x20no\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(query\x20\x27order.claimed_by\x20some\x27)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${tier_amount}','name':'Tier\x20upper\x20bound\x20—\x20the\x20small\x20rail\x20fires\x20only\x20while\x20order.amount\x20<=\x20this\x20(same\x20smallest-unit\x20space\x20as\x20order.amount)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${flag_item_name}','name':'Flag\x20item\x20name:\x20an\x20order\x20holding\x20this\x20item\x20is\x20excluded\x20from\x20the\x20small\x20rail\x20(it\x20routes\x20to\x20the\x20flag\x20rail)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','name':'CHAIN-DERIVED\x20ONCE\x20slot\x20(protocol\x20254):\x20the\x20once\x20key\x20is\x20derived\x20on-chain\x20from\x20the\x20paying\x20order\x20(bcs(payment_info.for_object));\x20submitted\x20bytes\x20ignored\x20—\x20exactly-once\x20per\x20order\x20is\x20chain-enforced'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_not','node':{'type':'query','query':'order.item\x20has','object':{'identifier':0x0},'parameters':[{'type':'identifier','identifier':0x5}]}},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['TIER\x20EXPRESSION\x20(ctra-mn-261019\x20F-04):\x20a\x20single\x20Amount\x20row\x20cannot\x20switch\x20per\x20order,\x20but\x20the\x20guard\x20reads\x20the\x20order\x20and\x20selects\x20the\x20rail\x20—\x20tiers\x20ship\x20as\x20DISJOINT\x20self-selecting\x20settlement\x20rails\x20(small\x20=\x20order.amount\x20<=\x20tier\x20AND\x20NOT\x20flag;\x20large\x20=\x20order.amount\x20>\x20tier;\x20flag/digital\x20=\x20\x27order.item\x20has\x27\x20the\x20flag\x20item),\x20each\x20its\x20own\x20guard_key\x20+\x20allocator.\x20Both\x20tiers\x20fired\x20live\x20with\x20per-unit\x20reconciliation\x20exact.','DISJOINTNESS\x20IS\x20THE\x20BUILDER\x27S\x20DUTY,\x20INSIDE\x20THE\x20GUARDS:\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins\x20—\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20on\x20each\x20distribution\x20call)\x20—\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS.\x20A\x20flagged\x20LARGE\x20order\x20satisfies\x20both\x20the\x20large\x20tier\x20and\x20the\x20flag\x20rail\x20unless\x20the\x20flag\x20only\x20ever\x20marks\x20sub-tier\x20items\x20or\x20the\x20large\x20leg\x20ALSO\x20carries\x20the\x20NOT-flag\x20leg\x20—\x20make\x20the\x20three\x20roots\x20pairwise-exclusive\x20by\x20construction\x20and\x20test\x20the\x20boundary\x20(exactly\x20at\x20tier_amount\x20settles\x20SMALL,\x20<=;\x20the\x20twin\x20uses\x20strict\x20>).','The\x20guard\x20table\x20MUST\x20declare\x20{identifier:\x20254,\x20b_submission:\x20true,\x20value_type:\x20\x27Address\x27}\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport;\x20a\x20replayed\x20alloc\x20for\x20the\x20same\x20order\x20aborts\x2016\x20before\x20any\x20distribution.','Pair\x20EACH\x20tier\x27s\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20THAT\x20tier\x27s\x20guard_key,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20and\x20a\x20sibling\x20order\x27s\x20passport\x20satisfies\x20nothing\x20(testnet\x20CR-01).\x20Keep\x20each\x20tier\x20allocator\x27s\x20Rate\x20legs\x20summing\x20to\x20exactly\x2010000\x20(no\x20Surplus\x20leg).','The\x20claimed_by\x20some\x20==\x20false\x20polarity\x20leg\x20(query\x201570)\x20ships\x20IN\x20the\x20root\x20(F-30/F-05):\x20an\x20AWARDED\x20order\x20exits\x20via\x20the\x20recovery\x20rail\x20(tpl_allocator_node_gate_recover),\x20never\x20through\x20a\x20tier\x20rail.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/polarity/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20and\x20the\x20tier\x20constant\x20against\x20the\x20Machine\x20and\x20the\x20token\x27s\x20decimals\x20BEFORE\x20publishing;\x20the\x20tier\x20lives\x20in\x20the\x20SAME\x20smallest-unit\x20space\x20as\x20order.amount.'],'example_use_case':'Tiered\x20contract\x20fee\x20(fixed-fee\x20marketplace\x20style):\x20an\x20order\x20of\x20400\x20(tier\x20500,\x20flag\x20\x27KIT\x27)\x20settles\x20via\x20THIS\x20small\x20rail\x20—\x20order.amount\x20<=\x20500\x20AND\x20the\x20order\x20holds\x20no\x20KIT\x20item\x20—\x20paying\x20the\x20$15\x20Amount\x20leg\x20then\x20the\x20net\x20Rate\x20split;\x20a\x20900\x20order\x20fails\x20the\x20lesser_or_equal\x20leg\x20and\x20settles\x20via\x20the\x20large\x20twin\x20instead.\x20Live-proven\x20ctra-mn-261019\x20F-04.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_settle_tier_large','scene_id':'service_order_allocators_guard','name':'Tiered\x20settlement\x20rail\x20—\x20LARGE-order\x20leg\x20(node\x20gate\x20+\x20order.amount\x20>\x20tier)','description':'LARGE\x20leg\x20of\x20a\x20tiered\x20settlement\x20fee:\x20fires\x20only\x20while\x20order.amount\x20>\x20tier_amount.\x20The\x20strict->\x20twin\x20of\x20tpl_allocator_node_gate_settle_tier_small\x20(which\x20carries\x20<=\x20tier\x20AND\x20the\x20NOT-item-flag\x20leg);\x20together\x20they\x20partition\x20the\x20order\x20space\x20at\x20the\x20tier\x20boundary\x20—\x20but\x20the\x20mutual\x20exclusion\x20is\x20carried\x20ENTIRELY\x20by\x20these\x20roots,\x20because\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins:\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20on\x20each\x20distribution\x20call),\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS\x20(ctra-mn-261019\x20F-04,\x20live-proven:\x20both\x20tiers\x20fired\x20with\x20per-unit\x20reconciliation\x20exact).\x20Root\x20shape\x20matches\x20tpl_allocator_node_gate_settle_once\x20(node\x20gate\x20+\x20claimed_by\x20some\x20==\x20false\x20+\x20caller-authorization\x20+\x20the\x20chain-derived\x20254\x20once\x20slot);\x20the\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20ships\x20IN\x20the\x20root\x20-\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20never\x20strip\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27completed\x27)','required':!![],'default':'completed','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'tier_amount','type':'number','description':'Tier\x20boundary\x20in\x20the\x20SAME\x20smallest-unit\x20space\x20as\x20order.amount\x20(convert\x20the\x20USD\x20fee_param\x20at\x20the\x20token\x27s\x20decimals)','required':!![],'constraint':'Must\x20be\x20>\x200;\x20the\x20large\x20rail\x20fires\x20only\x20STRICTLY\x20above\x20it\x20(the\x20small\x20twin\x20owns\x20the\x20==\x20boundary\x20via\x20<=)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x3,'b_submission':![],'value_type':'Bool','value':![],'name':'Expected\x20claimed_by\x20polarity:\x20false\x20=\x20no\x20arbitration\x20award\x20has\x20ACTUALLY\x20paid\x20(query\x20\x27order.claimed_by\x20some\x27)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${tier_amount}','name':'Tier\x20bound\x20—\x20the\x20large\x20rail\x20fires\x20only\x20while\x20order.amount\x20>\x20this'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','name':'CHAIN-DERIVED\x20ONCE\x20slot\x20(protocol\x20254):\x20the\x20once\x20key\x20is\x20derived\x20on-chain\x20from\x20the\x20paying\x20order\x20(bcs(payment_info.for_object));\x20submitted\x20bytes\x20ignored\x20—\x20exactly-once\x20per\x20order\x20is\x20chain-enforced'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_as_u256_greater','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['STRICT->\x20TWIN:\x20this\x20rail\x20owns\x20the\x20order.amount\x20>\x20tier\x20space;\x20the\x20small\x20twin\x20(tpl_allocator_node_gate_settle_tier_small)\x20owns\x20<=\x20tier\x20minus\x20flagged\x20items.\x20The\x20boundary\x20is\x20disjoint\x20BY\x20ARITHMETIC\x20(an\x20order\x20is\x20never\x20both\x20>\x20and\x20<=)\x20—\x20but\x20when\x20a\x20flag/digital\x20rail\x20exists,\x20a\x20flagged\x20LARGE\x20order\x20satisfies\x20BOTH\x20this\x20root\x20and\x20the\x20flag\x20rail:\x20close\x20that\x20hole\x20by\x20keeping\x20the\x20flag\x20only\x20on\x20sub-tier\x20items\x20or\x20by\x20ANDing\x20this\x20root\x20with\x20the\x20same\x20NOT-flag\x20leg\x20(logic_not\x20over\x20query\x201551\x20\x27order.item\x20has\x27).','DISJOINTNESS\x20IS\x20THE\x20BUILDER\x27S\x20DUTY,\x20INSIDE\x20THE\x20GUARDS\x20(ctra-mn-261019\x20F-04):\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins\x20—\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20on\x20each\x20distribution\x20call)\x20—\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS.\x20Never\x20\x27add\x20a\x20second\x20Amount\x20row\x20and\x20hope\x20the\x20chain\x20picks\x20one\x27.','The\x20guard\x20table\x20MUST\x20declare\x20{identifier:\x20254,\x20b_submission:\x20true,\x20value_type:\x20\x27Address\x27}\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport;\x20a\x20replayed\x20alloc\x20for\x20the\x20same\x20order\x20aborts\x2016\x20before\x20any\x20distribution.','Pair\x20THIS\x20tier\x27s\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20the\x20LARGE\x20tier\x27s\x20guard_key\x20(each\x20tier\x20is\x20its\x20OWN\x20allocator;\x20the\x20small\x20twin\x27s\x20rows\x20share\x20the\x20small\x20key).\x20Keep\x20each\x20tier\x20allocator\x27s\x20Rate\x20legs\x20summing\x20to\x20exactly\x2010000\x20(no\x20Surplus\x20leg).','The\x20claimed_by\x20some\x20==\x20false\x20polarity\x20leg\x20(query\x201570)\x20ships\x20IN\x20the\x20root\x20(F-30/F-05):\x20an\x20AWARDED\x20order\x20exits\x20via\x20the\x20recovery\x20rail\x20(tpl_allocator_node_gate_recover),\x20never\x20through\x20a\x20tier\x20rail.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/polarity/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20and\x20the\x20tier\x20constant\x20against\x20the\x20Machine\x20and\x20the\x20token\x27s\x20decimals\x20BEFORE\x20publishing.'],'example_use_case':'Tiered\x20contract\x20fee\x20(fixed-fee\x20marketplace\x20style):\x20an\x20order\x20of\x20900\x20(tier\x20500)\x20fails\x20the\x20small\x20rail\x27s\x20lesser_or_equal\x20leg\x20and\x20settles\x20via\x20THIS\x20large\x20rail\x20—\x20paying\x20the\x20$29\x20Amount\x20leg\x20then\x20the\x20net\x20Rate\x20split;\x20boundary\x20order\x20500\x20settles\x20SMALL\x20(<=).\x20Live-proven\x20ctra-mn-261019\x20F-04.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_node_check','scene_id':'machine_forward_guard','name':'Workflow\x20node\x20state\x20validation','description':'Verifies\x20that\x20the\x20order\x20is\x20currently\x20at\x20the\x20correct\x20Machine\x20node\x20before\x20advancing\x20to\x20the\x20next\x20step.\x20Prevents\x20skipping\x20nodes\x20or\x20reverse\x20operations.','recommended_patterns':['P06','P09'],'parameters':[{'name':'expected_node','type':'string','description':'Expected\x20current\x20node\x20name','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20name\x20defined\x20in\x20Machine\x20nodes\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Expected\x20current\x20node\x20name'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},'applicable_industries':['rental','ecommerce','education','travel','subscription'],'relevant_risks':['R-C2-01','R-C2-03','R-X1-08'],'creation_notes':['Forward.guard\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20Machine\x20publish)','witness\x20100\x20(Order→Progress)\x20is\x20a\x20single\x20hop;\x20no\x20risk\x20of\x20chained-derivation\x20breakage','Node\x20names\x20are\x20case-sensitive;\x20query\x20returns\x20a\x20String\x20type',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Camera\x20equipment\x20rental\x20flow:\x20the\x20user\x20must\x20be\x20at\x20the\x20\x27pending\x20return\x27\x20node\x20to\x20perform\x20the\x20return\x20operation.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_fund_gate','scene_id':'machine_forward_guard','name':'Escrow\x20fund\x20gate\x20(order-anchored\x20balance\x20check\x20on\x20a\x20forward)','description':'Gates\x20a\x20forward\x20on\x20the\x20order\x27s\x20COMMITTED\x20escrow\x20balance:\x20allocation.balance\x20(query\x201051)\x20derived\x20from\x20the\x20'+'submitted\x20Order\x20via\x20witness\x20TypeOrderAllocation(109)\x20must\x20be\x20>=\x20the\x20declared\x20threshold.\x20PRE-STATE\x20CONSTRAINT\x20'+'(esound-mn-261021\x20B-1,\x20mainnet-verified):\x20guard\x20predicates\x20read\x20the\x20pre-transaction\x20balance,\x20so\x20this\x20gate\x20is\x20'+'satisfiable\x20only\x20against\x20funds\x20committed\x20in\x20a\x20PRIOR\x20transaction\x20—\x20NEVER\x20bind\x20it\x20on\x20a\x20forward\x20that\x20the\x20one-PTB\x20'+'order_renew\x20advances\x20in\x20the\x20same\x20PTB\x20(the\x20same-PTB\x20payment\x20is\x20invisible\x20to\x20the\x20gate;\x20the\x20forward\x20always\x20aborts).\x20'+'Valid\x20homes:\x20the\x20second\x20hop\x20of\x20a\x20fund-then-advance\x20pair\x20(funding\x20TX\x20commits,\x20this\x20gate-bearing\x20TX\x20advances),\x20or\x20'+'prepaid\x20builds\x20where\x20the\x20price\x20was\x20escrowed\x20at\x20buy.','recommended_patterns':['P02','P06','P10'],'parameters':[{'name':'min_balance','type':'number','description':'Minimum\x20committed\x20escrow\x20balance\x20in\x20smallest\x20units','required':!![],'constraint':'Must\x20be\x20a\x20plain\x20integer\x20in\x20smallest\x20units\x20(no\x20decimals,\x20no\x20unit\x20suffix)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'U64','value':'${min_balance}','name':'Minimum\x20committed\x20escrow\x20balance\x20(smallest\x20units)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'allocation.balance','object':{'identifier':0x0,'convert_witness':'OrderAllocation'},'parameters':[]},{'type':'identifier','identifier':0x1}]},'applicable_industries':['subscription','rental','education','travel','ecommerce','freelance'],'relevant_risks':['R-X1-01','R-C2-03'],'creation_notes':['PRE-STATE\x20CONSTRAINT\x20(esound-mn-261021\x20B-1,\x20mainnet-verified):\x20the\x20balance\x20read\x20is\x20the\x20COMMITTED\x20pre-transaction\x20state.\x20NEVER\x20bind\x20this\x20gate\x20on\x20a\x20forward\x20advanced\x20by\x20the\x20same-PTB\x20order_renew\x20call\x20—\x20the\x20payment\x20half\x20of\x20that\x20call\x20is\x20invisible\x20to\x20the\x20gate\x20and\x20the\x20forward\x20ALWAYS\x20aborts.','witness\x20109\x20(Order→Allocation)\x20is\x20a\x20single\x20hop\x20via\x20order.allocation\x20(query\x201569);\x20it\x20resolves\x20at\x20verification\x20time,\x20so\x20the\x20guard\x20is\x20authored\x20on\x20the\x20Order\x20address\x20and\x20never\x20needs\x20the\x20Allocation\x20address.','Valid\x20pairings:\x20(a)\x20fund-then-advance\x20across\x20TWO\x20transactions\x20—\x20TX1\x20commits\x20funds\x20(allocation\x20top-up\x20primitive,\x20pending),\x20TX2\x20advances\x20this\x20gate-bearing\x20forward;\x20(b)\x20prepaid\x20builds\x20—\x20the\x20full\x20price\x20was\x20escrowed\x20at\x20buy,\x20so\x20any\x20later\x20gate\x20read\x20sees\x20it;\x20(c)\x20on\x20a\x20gate-LESS\x20renewal\x20loop,\x20order_renew\x20itself\x20carries\x20the\x20funding\x20(zero-value\x20protection\x20rides\x20the\x20routing,\x20not\x20this\x20gate).','The\x20balance\x20check\x20is\x20a\x20GATE,\x20not\x20a\x20debit\x20—\x20distribution\x20still\x20runs\x20through\x20the\x20allocators\x20(allocation.alloc)\x20bound\x20to\x20their\x20own\x20guards.','Forward.guard\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20Machine\x20publish);\x20verify\x20the\x20renewal\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Monthly\x20subscription\x20(two-TX\x20shape):\x20TX1\x20commits\x20the\x20new\x20period\x27s\x20funds\x20into\x20the\x20Allocation;\x20TX2\x20advances\x20\x27completed\x27\x20->\x20\x27working\x27\x20(period\x202)\x20through\x20this\x20gate\x20(committed\x20balance\x20>=\x20one\x20period\x20price).\x20Do\x20NOT\x20bind\x20this\x20gate\x20on\x20an\x20order_renew-advanced\x20edge\x20—\x20the\x20same-PTB\x20deposit\x20is\x20invisible\x20to\x20it\x20(esound-mn-261021\x20B-1).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_privacy_delivery_proof','scene_id':'machine_forward_guard','name':'Privacy-delivery\x20Proof\x20verification\x20(strict\x20mode,\x20Messenger\x20→\x20on-chain\x20Proof)','description':'Strict-mode\x20guard\x20for\x20\x27privacy\x20information\x20delivered\x20via\x20Messenger\x20but\x20not\x20suitable\x20for\x20on-chain\x20publication\x27\x20'+'(e.g.\x20shipping\x20details,\x20return\x20addresses,\x20private\x20credentials).\x20The\x20verifier\x20submits\x20BOTH\x20a\x20Proof\x20object\x20address\x20'+'(generated\x20by\x20messenger.submitChainProof)\x20AND\x20the\x20Order\x20object\x20address.\x20Two\x20conditions\x20verify:\x20'+'(1)\x20Signer\x20==\x20proof.signer\x20(submitter\x20accountability\x20—\x20\x27whoever\x20benefits\x20bears\x20the\x20burden\x20of\x20proof\x27),\x20'+'(2)\x20proof.time\x20>\x20order.time\x20(proof\x20created\x20after\x20the\x20order\x20—\x20freshness,\x20prevents\x20stale-proof\x20replay).\x20'+'No\x20content\x20verification\x20—\x20only\x20submission\x20responsibility.\x20The\x20counterparty\x20can\x20dispute\x20by\x20checking\x20their\x20own\x20'+'Messenger\x20conversation.\x20Broad-mode\x20alternative\x20(verify\x20Merkle\x20Root\x20string\x20length\x20==\x2066\x20via\x20P15)\x20is\x20documented\x20'+'in\x20creation_notes\x20—\x20broad\x20mode\x20trusts\x20the\x20submitter\x27s\x20honesty\x20and\x20is\x20suitable\x20when\x20the\x20Guard\x20is\x20mainly\x20an\x20'+'arbitration\x20basis\x20rather\x20than\x20a\x20fund-flow\x20gate.','recommended_patterns':['P10','P15'],'parameters':[],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_object\x20(protocol\x20slot\x200\x20—\x20the\x20SDK\x20slot\x20consensus\x20resolves\x20slot\x200\x20to\x20the\x20submitted\x20Order;\x20klook-mn-261019\x20KLM-FIND-01)','binding_constraint':'Service\x20scoping\x20is\x20chain-side\x20(protocol\x20v148\x20task\x20binding)'},{'identifier':0x5,'b_submission':!![],'value_type':'Address','object_type':'Proof','name':'proof_object\x20(Proof\x20address\x20generated\x20by\x20messenger.submitChainProof,\x20submitted\x20by\x20verifier\x20at\x20runtime)','binding_constraint':'Must\x20be\x20a\x20Proof\x20object\x20created\x20AFTER\x20the\x20order;\x20signer\x20must\x20equal\x20the\x20transaction\x20Signer.\x20SLOT\x20CONSENSUS\x20(klook-mn-261019\x20KLM-FIND-01,\x20live\x20mainnet):\x20a\x20non-Order\x20submission\x20must\x20occupy\x20its\x20OWN\x20free\x20slot\x20—\x20the\x20slot-254\x20row\x27s\x20Order\x20type\x20makes\x20the\x20SDK\x20resolve\x20slot\x200\x20as\x20the\x20Order,\x20so\x20mounting\x20proof.*\x20queries\x20on\x20slot\x200\x20fails\x20creation\x20with\x20\x27witness\x20object\x20type(Proof)\x20not\x20consistent\x20with\x20query\x20object\x20type(Order)\x27'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'query','query':'proof.signer','object':{'identifier':0x5},'parameters':[]}]},{'type':'logic_as_u256_greater','nodes':[{'type':'query','query':'proof.time','object':{'identifier':0x5},'parameters':[]},{'type':'query','query':'order.time','object':{'identifier':0x0},'parameters':[]}]}]},'applicable_industries':['ecommerce','logistics','service','privacy\x20delivery'],'relevant_risks':['R-C3-01','R-C3-05','R-X1-12'],'creation_notes':['STRICT\x20MODE\x20(this\x20template):\x20verifier\x20submits\x20Proof\x20+\x20Order\x20addresses.\x20Two\x20conditions:\x20Signer==proof.signer\x20(submitter\x20accountability),\x20proof.time>order.time\x20(freshness).\x20The\x20legacy\x20order.service\x20project-binding\x20leg\x20was\x20removed\x20(v148\x20chain-side\x20task\x20binding\x20—\x20bsw4\x20F-06).\x20No\x20content\x20verification\x20—\x20only\x20submission\x20responsibility\x20(\x27beneficiary\x20bears\x20burden\x20of\x20proof\x27\x20principle).','BROAD\x20MODE\x20ALTERNATIVE:\x20use\x20P15\x20retained_submission\x20with\x20a\x20String\x20submission\x20(the\x20Merkle\x20Root)\x20and\x20verify\x20calc_string_length\x20==\x2066\x20(0x\x20prefix\x20+\x2064\x20hex\x20chars).\x20Broad\x20mode\x20trusts\x20the\x20submitter\x27s\x20honesty;\x20the\x20counterparty\x20can\x20dispute\x20by\x20checking\x20their\x20own\x20Messenger\x20conversation.\x20Broad\x20mode\x20is\x20suitable\x20when\x20the\x20Guard\x20is\x20mainly\x20an\x20arbitration\x20basis,\x20not\x20a\x20fund-flow\x20gate.','Guard\x20table\x20supports\x20MULTIPLE\x20b_submission=true\x20Address\x20identifiers\x20(no\x20submission\x20count\x20limit)\x20—\x20this\x20template\x20uses\x20two:\x20Order\x20(protocol\x20slot\x200)\x20and\x20Proof\x20(slot\x205).\x20SLOT\x20CONSENSUS\x20(klook-mn-261019\x20KLM-FIND-01):\x20slot\x200\x20always\x20resolves\x20to\x20the\x20submitted\x20ORDER\x20(the\x20slot-254\x20task-binding\x20row\x27s\x20Order\x20type\x20anchors\x20the\x20SDK\x27s\x20type\x20resolution)\x20—\x20never\x20mount\x20a\x20non-Order\x20query\x20on\x20slot\x200;\x20give\x20every\x20non-Order\x20submission\x20its\x20own\x20free\x20slot.','submitChainProof(env,\x20peerAddress,\x20description?)\x20records\x20the\x20counterparty\x27s\x20address\x20as\x20the\x20proof\x27s\x20about\x20value.\x20PRIVACY:\x20about\x20records\x20ONLY\x20the\x20contact\x20—\x20it\x20has\x20no\x20on-chain-enforced\x20meaning\x20and\x20must\x20NEVER\x20be\x20a\x20guard\x20decision\x20condition;\x20NEVER\x20pass\x20an\x20order\x20id\x20or\x20any\x20order\x20reference\x20in\x20the\x20description\x20(a\x20description\x20like\x20\x27order:0x…\x27\x20would\x20publicly\x20link\x20the\x20Proof\x20to\x20the\x20Order\x20on\x20chain).\x20All\x20order/business\x20linkage\x20stays\x20inside\x20the\x20Messenger\x20conversation;\x20acceptance\x20of\x20delivered\x20info\x20is\x20the\x20merchant\x27s\x20confirming\x20forward,\x20not\x20the\x20recorded\x20about\x20value.','Query\x20IDs\x20(all\x20zero-parameter):\x20proof.signer=1958,\x20proof.time=1960\x20(invariant\x20clock_derived,\x20always\x20>0),\x20order.time=1574.','Forward.guard\x20is\x20immutable\x20after\x20Machine\x20publish\x20—\x20choose\x20broad\x20vs\x20strict\x20before\x20publishing.',PROTOCOL_SLOT_254_NOTE,'The\x20same\x20strict\x20Guard\x20can\x20be\x20reused\x20across\x20ALL\x20Machine\x20forwards\x20that\x20need\x20merkle-root\x20verification\x20(shipping,\x20lost,\x20returns,\x20etc.)\x20—\x20the\x20verifier\x20just\x20submits\x20the\x20relevant\x20Proof\x20+\x20Order\x20each\x20time.','Condition\x20(1)\x20Signer==proof.signer\x20suppresses\x20R-C3-01\x20(submission\x20not\x20bound\x20to\x20Signer).\x20Cross-project\x20submission\x20bypass\x20(R-C3-05)\x20is\x20closed\x20chain-side\x20since\x20v148\x20—\x20no\x20template\x20leg\x20needed\x20(bsw4\x20F-06).'],'example_use_case':'MyShop\x20e-commerce:\x20after\x20delivering\x20shipping\x20details\x20/\x20return\x20addresses\x20via\x20Messenger\x20(privacy\x20info\x20not\x20suitable\x20for\x20on-chain\x20publication),\x20'+'the\x20provider\x20generates\x20a\x20Proof\x20via\x20submitChainProof\x20and\x20submits\x20it\x20with\x20the\x20Order\x20address\x20to\x20advance\x20the\x20Machine\x20forward.\x20'+'The\x20Guard\x20verifies\x20the\x20submitter\x20is\x20the\x20Proof\x27s\x20signer,\x20the\x20Proof\x20was\x20created\x20after\x20the\x20order;\x20Service\x20scoping\x20is\x20chain-side\x20(protocol\x20v148).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_submission_signer_binding','scene_id':'progress_submission_guard','name':'Submission\x20data\x20signer\x20binding\x20validation','description':'Verifies\x20that\x20the\x20user\x20submitting\x20the\x20data\x20is\x20a\x20legitimate\x20Progress\x20participant\x20and\x20that\x20the\x20submitted\x20value\x20matches\x20expectations.','recommended_patterns':['P08','P15'],'parameters':[{'name':'expected_value','type':'string','description':'Expected\x20submitted\x20value\x20(e.g.\x20node\x20name,\x20status\x20code)','required':!![]},{'name':'provider_address','type':'address','description':'Service\x20provider\x20address\x20(used\x20for\x20identity\x20verification)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'String','name':'User-submitted\x20operation\x20type\x20(e.g.\x20\x27return\x27\x20/\x20\x27damage\x27)','binding_constraint':'Must\x20be\x20one\x20of\x20the\x20predefined\x20operation\x20types'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${provider_address}','name':'Service\x20provider\x20address'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${expected_value}','name':'Expected\x20submitted\x20value'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0x0},{'type':'identifier','identifier':0x2}]},{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x1}]}]},'applicable_industries':['rental','ecommerce','education','travel'],'relevant_risks':['R-C3-01','R-C3-03','R-X1-12'],'creation_notes':['submission\x20guard\x20cannot\x20be\x20modified\x20after\x20binding','The\x20name\x20of\x20b_submission=true\x20entries\x20must\x20be\x20a\x20complete\x20natural-language\x20description\x20(≥10\x20characters)','Providing\x20a\x20binding_constraint\x20field\x20describing\x20value\x20rules\x20is\x20recommended\x20(R-X1-12)'],'example_use_case':'On\x20equipment\x20return,\x20the\x20user\x20submits\x20the\x20\x27return\x27\x20operation;\x20the\x20Guard\x20verifies\x20that\x20the\x20submitter\x20is\x20the\x20service\x20provider\x20and\x20that\x20the\x20operation\x20type\x20is\x20correct.','verifier_constraint_level':'level1_strict'},{'id':'tpl_reward_one_time_claim','scene_id':'reward_claim','name':'One-time\x20reward\x20claim\x20validation','description':'Verifies\x20a\x20reward\x20claim\x20is\x20first-time-only:\x20order\x20state\x20gate\x20+\x20order-holder\x20identity\x20+\x20order-scoped\x20record\x20replay\x20gate\x20(SV-2,\x20azx7-mn-261014\x20live\x20T8\x20—\x20supersedes\x20the\x20ofn-mn-261012\x20recipient-only\x20retraction;\x20the\x20ofn\x20\x27storeFromId\x20filter\x20is\x20inert\x27\x20verdict\x20described\x20unstamped/legacy\x20rewards\x20only),\x20plus\x20an\x20OPTIONAL\x20order-keyed\x20rating-floor\x20eligibility\x20leg\x20(upwk-mn-261017\x20F-62)\x20that\x20pays\x20the\x20bounty\x20only\x20above\x20a\x20minimum\x20review\x20rating.','recommended_patterns':['P07','P13'],'parameters':[{'name':'reward_address','type':'address','description':'Reward\x20object\x20address\x20(the\x20pool\x20being\x20claimed\x20from)','required':!![]},{'name':'service_name','type':'address','description':'Host\x20Service\x20object\x20name\x20or\x20address\x20(P16\x20circular\x20ref\x20—\x20resolved\x20by\x20the\x20SDK\x20after\x20the\x20Service\x20exists).\x20KTT3-F15\x20STORE\x20BINDING:\x20a\x20reward\x20claim\x20has\x20no\x20chain-side\x20Service\x20context\x20(the\x20PTB\x20carries\x20only\x20the\x20Reward),\x20so\x20WITHOUT\x20this\x20leg\x20any\x20completed\x20order\x20from\x20ANY\x20store\x20satisfies\x20the\x20node/owner/amount\x20legs\x20and\x20drains\x20the\x20pool\x20cross-store.\x20The\x20kernel\x20seeds\x20the\x20plan\x27s\x20service\x20name\x20automatically;\x20hand-fills\x20MUST\x20pass\x20it','required':!![]},{'name':'expected_pre_claim_node','type':'string','description':'Machine\x20node\x20name\x20at\x20which\x20claiming\x20is\x20allowed\x20(e.g.\x20\x27reviewed\x27)','required':!![]},{'name':'expected_pre_claim_node_alt','type':'string','description':'Second\x20acceptable\x20node\x20in\x20the\x20claim-allowed\x20SET\x20—\x20default\x20\x27completed\x27\x20(az3-mn-261013\x20F-16:\x20a\x20single\x20reviewed-only\x20leg\x20deadlocks\x20the\x20claim\x20whenever\x20settlement\x20wins\x20the\x20race\x20first\x20—\x20order\x20already\x20completed\x20when\x20the\x20review\x20lands;\x20the\x20resolved\x20root\x20admits\x20EITHER\x20node)','required':![],'default':'completed'},{'name':'expected_pre_claim_node_alt2','type':'string','description':'Third\x20acceptable\x20node\x20in\x20the\x20claim-allowed\x20SET\x20—\x20the\x20template\x27s\x20optional\x20post-settlement\x20side\x20node\x20(e.g.\x20\x27wonder\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20none.\x20UPWC-K3\x20(upwc-cat-261017\x20CAT-D1):\x20without\x20it,\x20a\x20buyer\x20who\x20praises\x20AFTER\x20reviewing\x20moves\x20progress.current\x20off\x20the\x20claim\x20set\x20and\x20voids\x20their\x20own\x20bounty\x20—\x20the\x20incentive\x20self-defeats','required':![],'default':'reviewed'},{'name':'expected_pre_claim_node_alt3','type':'string','description':'Fourth\x20acceptable\x20node\x20in\x20the\x20claim-allowed\x20SET\x20(e.g.\x20\x27no_wonder\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'reviewed'},{'name':'opens_after_days','type':'number','description':'Days\x20AFTER\x20the\x20claim-allowed\x20node\x27s\x20entry\x20before\x20the\x20bounty\x20OPENS\x20(bkm4\x20BF-17;\x200\x20=\x20claimable\x20as\x20soon\x20as\x20the\x20order\x20reaches\x20the\x20claim-allowed\x20set).\x20tbs7\x20F-04\x20floor:\x20for\x20stores\x20with\x20an\x20after-sales\x20window\x20the\x20kernel\x20default\x20derives\x20max(14,\x20return_window_days/review_window_days\x20+\x201)\x20—\x20a\x20bounty\x20claimable\x20while\x20the\x20buyer\x20can\x20still\x20return\x20is\x20a\x20claim-and-return\x20rebate\x20arbitrage','required':![],'default':'0'},{'name':'closes_after_days','type':'number','description':'Days\x20the\x20bounty\x20stays\x20CLAIMABLE\x20once\x20opened\x20—\x20counted\x20from\x20the\x20window\x20OPEN,\x20so\x20an\x20opens\x20delay\x20can\x20never\x20swallow\x20the\x20claimable\x20span.\x20bsw4\x20F-11:\x20a\x20claim\x20window\x20MUST\x20close\x20(\x2714\x20days\x20to\x20claim\x27\x20must\x20be\x20a\x20real\x20deadline\x20—\x20the\x20v76\x20archetype\x20opened\x20at\x20day\x2014\x20and\x20never\x20closed,\x20the\x20disclosed\x20window\x20was\x20fictional).\x20\x270\x27\x20=\x20never\x20closes\x20(open-ended;\x20discouraged\x20—\x20disclose\x20it\x20explicitly\x20at\x20quote\x20time)','required':![],'default':'14'},{'name':'rating_repository','type':'address','description':'Repository\x20holding\x20the\x20order-keyed\x20rating\x20rows\x20—\x20the\x20build\x20plan\x27s\x20\x27_review\x27\x20repository\x20(same\x20one\x20the\x20review\x20text\x20rows\x20live\x20in).\x20Empty/absent\x20=\x20ship\x20WITHOUT\x20the\x20rating\x20leg\x20(plain\x20praise\x20bounty,\x20no\x20rating\x20floor)','required':![],'default':''},{'name':'rating_policy_name','type':'string','description':'Policy\x20key\x20of\x20the\x20order-keyed\x20U64\x20rating\x20rows\x20—\x20MUST\x20equal\x20the\x20compile-emitted\x20rating\x20policy\x20name\x20(\x27rating\x27,\x20review\x20component)','required':![],'default':'rating'},{'name':'rating_floor','type':'number','description':'Minimum\x20rating\x20the\x20bounty\x20pays\x20above\x20(e.g.\x20\x274\x27).\x20\x270\x27\x20=\x20no\x20floor\x20—\x20omit\x20the\x20leg\x20same\x20as\x20an\x20empty\x20rating_repository','required':![],'default':'4','constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x274\x27'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${reward_address}','name':'Reward\x20object\x20(claim\x20pool)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${expected_pre_claim_node}','name':'Expected\x20pre-claim\x20node\x20name\x20(e.g.\x20\x27reviewed\x27)'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${expected_pre_claim_node_alt}','name':'Alternate\x20pre-claim\x20node\x20in\x20the\x20allowed\x20SET\x20(e.g.\x20\x27completed\x27)'},{'identifier':0x9,'b_submission':![],'value_type':'String','value':'${expected_pre_claim_node_alt2}','name':'Third\x20claim-allowed\x20node\x20(optional\x20post-settlement\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0xa,'b_submission':![],'value_type':'String','value':'${expected_pre_claim_node_alt3}','name':'Fourth\x20claim-allowed\x20node\x20(optional\x20post-settlement\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'1','name':'Minimum\x20PAID\x20order\x20amount\x20(1\x20smallest\x20unit\x20—\x20BKN-P2\x20positive-amount\x20leg)'},{'identifier':0x5,'b_submission':![],'value_type':'U64','value':'${opens_after_days}','name':'OPENS\x20delay\x20in\x20DAYS\x20(bounty\x20opens\x20after\x20this\x20many\x20days\x20elapse\x20from\x20the\x20claim-allowed\x20node\x20entry;\x200\x20=\x20opens\x20at\x20entry)'},{'identifier':0xc,'b_submission':![],'value_type':'U64','value':'${closes_after_days}','name':'CLOSES\x20span\x20in\x20DAYS\x20(claimable\x20for\x20this\x20many\x20days\x20once\x20opened,\x20counted\x20from\x20the\x20window\x20open;\x200\x20=\x20never\x20closes\x20—\x20the\x20row\x20AND\x20the\x20closing\x20leg\x20are\x20omitted)'},{'identifier':0xd,'b_submission':![],'value_type':'U64','value':'86400000','name':'Milliseconds\x20per\x20day\x20(opens/closes\x20day-to-ms\x20conversion\x20constant)'},{'identifier':0x6,'b_submission':![],'value_type':'Address','value':'${rating_repository}','name':'Rating\x20repository\x20(PLAN-BOUND\x20\x27_review\x27\x20repository\x20—\x20NEVER\x20a\x20buyer-submitted\x20row;\x20omit\x20slots\x206-8\x20AND\x20the\x20rating\x20leg\x20when\x20rating_repository\x20is\x20empty)'},{'identifier':0x7,'b_submission':![],'value_type':'String','value':'${rating_policy_name}','name':'Rating\x20policy\x20key\x20(must\x20equal\x20the\x20compile-emitted\x20\x27rating\x27\x20policy)'},{'identifier':0x8,'b_submission':![],'value_type':'U64','value':'${rating_floor}','name':'Rating\x20floor\x20—\x20the\x20bounty\x20pays\x20only\x20when\x20the\x20order-keyed\x20rating\x20row\x20is\x20>=\x20this'},{'identifier':0xb,'b_submission':![],'value_type':'Bool','value':![],'name':'Expected\x20claimed_by\x20state\x20(false\x20=\x20NO\x20arbitration\x20award\x20stamped\x20on\x20the\x20order\x20—\x20incentives\x20ride\x20undisputed\x20orders\x20only,\x20tbs7\x20F-04)'},{'identifier':0xe,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Host\x20Service\x20object\x20(KTT3-F15\x20store\x20binding\x20—\x20the\x20bounty\x20pays\x20only\x20for\x20THIS\x20store\x27s\x20orders;\x20a\x20reward\x20claim\x20has\x20no\x20chain-side\x20Service\x20context\x20so\x20this\x20leg\x20is\x20the\x20only\x20store\x20scoping)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x9}]},{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0xa}]}]},{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.service','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0xe}]},{'type':'logic_and','nodes':[{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0xb}]}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_pre_claim_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x5},{'type':'identifier','identifier':0xd}]}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_pre_claim_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x5},{'type':'identifier','identifier':0xd}]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0xc},{'type':'identifier','identifier':0xd}]}]}]},{'type':'logic_not','node':{'type':'query_reward_record_exists','object':{'identifier':0x1},'where':{'storeFromId':{'identifier':0x0}}}},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'repository.data','object':{'identifier':0x6},'parameters':[{'type':'identifier','identifier':0x7},{'type':'identifier','identifier':0x0}]},{'type':'identifier','identifier':0x8}]}]},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01','R-X1-10'],'creation_notes':['POSITIVE-AMOUNT\x20LEG\x20(BKN-P2,\x20v55):\x20the\x20order.amount\x20>=\x201\x20leg\x20is\x20MANDATORY\x20—\x20a\x20zero-total\x20order\x20(e.g.\x20a\x20100%-off\x20coupon\x20buy)\x20holds\x20an\x20EMPTY\x20escrow\x20and\x20must\x20never\x20trigger\x20incentives\x20(zero-cost\x20buy\x20->\x20review\x20node\x20->\x20bounty\x20claim\x20is\x20the\x20arbitrage\x20the\x20leg\x20closes).\x20Never\x20issue\x20a\x20zeroing\x20coupon\x20at\x20all:\x20the\x20issuance\x20floor\x20blocks\x20it\x20unconditionally\x20(BSX-F07\x20—\x20allow_zero_total\x20waives\x20nothing),\x20so\x20a\x20deliberate\x20free\x20tier\x20is\x20priced\x20at\x201\x20smallest\x20unit\x20(which\x20this\x20leg\x20then\x20admits).\x20Never\x20drop\x20this\x20leg\x20when\x20specializing\x20the\x20root.','REPLAY\x20GATE\x20(SV-2,\x20azx7-mn-261014\x20live\x20T8):\x20this\x20template\x27s\x20root\x20scopes\x20the\x20claim-records\x20query\x20BY\x20THE\x20ORDER\x20—\x20where.storeFromId\x20references\x20slot\x200\x20(the\x20submitted\x20Order\x20address),\x20the\x20same\x20slot\x20the\x20guard_add\x20entry\x20stamps,\x20so\x20the\x20gate\x20reads\x20\x27this\x20recipient\x20has\x20never\x20claimed\x20for\x20THIS\x20order\x27\x20—\x20once\x20per\x20buyer\x20per\x20ORDER.\x20An\x20EMPTY\x20where\x20({})\x20is\x20the\x20deliberate\x20once-per-buyer-FOR-LIFE\x20variant\x20(recipient\x20defaults\x20to\x20the\x20Signer;\x20klk-mn-261014\x20live:\x20replay\x20aborts\x20at\x20the\x20passport\x20layer,\x20E_VERIFY_FAILED=7)\x20—\x20choose\x20it\x20ONLY\x20for\x20one-bounty-per-buyer\x20designs,\x20never\x20for\x20per-order\x20bounty\x20wording\x20(upw-mn-261014\x20F-48:\x20it\x20silently\x20kills\x20the\x20buyer\x27s\x20second\x20order).','NEVER\x20hand-write\x20the\x20raw\x20query\x20form\x20with\x20an\x20empty\x20VecU8\x20parameter\x20(klk-mn-261013\x20F-05,\x20mainnet-probed):\x20empty\x20query\x20bytes\x20reach\x20the\x20native\x20untranslated\x20and\x20abort\x20with\x20an\x20uncoded\x20MovePrimitiveRuntimeError\x20(\x27Query\x20bytes\x20is\x20empty\x27)\x20—\x20no\x20abort\x20code,\x20no\x20diagnosis.\x20The\x20deployed\x20guard\x20entry\x20(pre\x20A-5)\x20accepts\x20the\x20empty\x20constant\x20at\x20creation,\x20so\x20the\x20failure\x20surfaces\x20only\x20at\x20first\x20verification.\x20If\x20a\x20raw\x20form\x20is\x20ever\x20required,\x20the\x20parameter\x20MUST\x20carry\x20the\x20[value_type\x20marker\x20+\x20BCS\x20conditions]\x20header\x20bytes\x20—\x20which\x20is\x20exactly\x20what\x20the\x20structured\x20node\x20emits\x20for\x20you.','STAMP\x20+\x20FILTER\x20PAIR\x20(SV-2):\x20the\x20reward.guard_add\x20store_from_id\x20STAMP\x20and\x20the\x20where.storeFromId\x20QUERY\x20FILTER\x20are\x20DIFFERENT\x20fields\x20and\x20BOTH\x20are\x20required\x20for\x20the\x20per-order\x20scope\x20—\x20the\x20STAMP\x20makes\x20each\x20claim\x20record\x20key\x20on\x20the\x20submitted\x20Order\x20address;\x20the\x20FILTER\x20matches\x20records\x20by\x20that\x20same\x20value.\x20A\x20record-consuming\x20guard\x20(this\x20template)\x20MUST\x20be\x20added\x20with\x20store_from_id\x20=\x200\x20(the\x20submitted\x20Order/claimant\x20slot)\x20—\x20the\x20MCP\x20guard_add\x20stamp\x20gate\x20(UPW-K7)\x20REJECTS\x20the\x20unstamped\x20entry;\x20on-chain\x20the\x20unstamped\x20entry\x20is\x20accepted\x20but\x20writes\x20records\x20with\x20store_from\x20=\x20none,\x20which\x20matches\x20no\x20storeFromId\x20predicate\x20—\x20that\x20unstamped\x20shape\x20is\x20the\x20ONLY\x20context\x20where\x20the\x20ofn-mn-261012\x20F-01\x20\x27filter\x20is\x20inert\x27\x20verdict\x20ever\x20held\x20(azx7-mn-261014\x20live\x20T8\x20disproved\x20the\x20blanket\x20retraction).\x20Re-adding\x20the\x20SAME\x20guard\x20overwrites\x20its\x20slot\x20in\x20place,\x20so\x20live\x20pools\x20are\x20repairable.','POST-STATE\x20UPDATE\x20(MOV-PROTOCOL-1212):\x20in\x20the\x20HEAD\x20framework\x20source\x20guard\x20queries\x20observe\x20same-transaction\x20writes\x20(post-state),\x20so\x20write-then-verify\x20within\x20one\x20PTB\x20sees\x20its\x20own\x20write\x20—\x20DEPLOYMENT-GATED\x20(DEPLOY-K1):\x20not\x20yet\x20confirmed\x20on\x20the\x20deployed\x20binary;\x20verify\x20via\x20wowok_buildin_info\x20info=\x27upgrade_check\x27\x20(build_stamp.chain_stamp)\x20before\x20relying\x20on\x20it.\x20This\x20does\x20NOT\x20revive\x20\x27repository.data\x20count\x20==\x200\x27\x20as\x20a\x20first-claim\x20gate:\x20repository.data\x20is\x20an\x20upsert\x20key-value\x20store\x20—\x20a\x20repeat\x20write\x20overwrites\x20the\x20row\x20instead\x20of\x20growing\x20the\x20count.\x20Keep\x20the\x20exists_where\x20replay\x20gate.','IDENTITY\x20LEG\x20(mandatory\x20regardless\x20of\x20chain\x20patch\x20state):\x20claim()\x20pays\x20Recipient::Signer\x20(tx_context::sender)\x20with\x20no\x20order\x20binding\x20of\x20its\x20own\x20—\x20without\x20the\x20order.owner\x20identity\x20leg\x20any\x20address\x20holding\x20any\x20order\x20at\x20the\x20required\x20node\x20drains\x20the\x20pool\x20(audit-261012\x20B5).\x20The\x20MOV-PROTOCOL-1212\x20chain\x20patch\x20adds\x20recipient==signer\x20(E_CLAIM_RECIPIENT_NOT_SIGNER=14)\x20and\x20a\x20per-(recipient,\x20guard,\x20bcs(store_from))\x20once-slot\x20(E_CLAIM_ALREADY_MADE=13)\x20as\x20the\x20SECOND\x20line\x20—\x20a\x20replay\x20with\x20the\x20registered\x20guard\x20still\x20aborts\x20at\x20the\x20passport\x20layer\x20FIRST\x20(E_VERIFY_FAILED=7),\x20so\x20observing\x20abort\x207\x20says\x20nothing\x20about\x20the\x20patch\x27s\x20deployment;\x20check\x20freshness\x20via\x20wowok_buildin_info\x20upgrade_check\x20(build_stamp.chain_stamp,\x20DEPLOY-K1).','RECIPIENT\x20SEMANTICS\x20(crs-mn-261015\x20F-12,\x20live\x20mainnet):\x20the\x20reward.guard_add\x20ENTRY\x20recipient\x20MUST\x20be\x20{Signer:\x27signer\x27}\x20—\x20the\x20claim\x20entry\x20requires\x20recipient\x20==\x20tx_context::sender\x20(abort\x2014,\x20E_CLAIM_RECIPIENT_NOT_SIGNER),\x20and\x20a\x20{GuardIdentifier}\x20recipient\x20resolves\x20from\x20the\x20passport\x20submission\x20(conventionally\x20the\x20submitted\x20Order\x20address)\x20which\x20can\x20never\x20be\x20the\x20signer:\x20the\x20pool\x20behind\x20it\x20is\x20structurally\x20unpayable\x20(a\x20live\x20funded\x20pool\x20paid\x20abort\x2014\x20on\x20every\x20claim).\x20The\x20order-anchored\x20GuardIdentifier(0)\x20idiom\x20is\x20an\x20ALLOCATION\x20push\x20rail\x20(money\x20lands\x20ON\x20the\x20Order;\x20for_object\x20anchors\x20it)\x20—\x20NEVER\x20copy\x20it\x20onto\x20the\x20reward\x20pull\x20rail.\x20An\x20{Entity}\x20recipient\x20also\x20passes\x20(the\x20SDK\x20replaces\x20it\x20with\x20the\x20claimant\x27s\x20local\x20account\x20when\x20building\x20the\x20claim\x20PTB).\x20The\x20MCP\x20guard_add\x20recipient\x20gate\x20rejects\x20the\x20GuardIdentifier\x20form\x20(crs\x20F-12).','SETTLEMENT-DRAINED\x20LEG\x20—\x20DELIBERATE\x20OPTION\x20(crs-mn-261015\x20F-16):\x20a\x20bounty\x20meant\x20as\x20the\x20follow-on\x20to\x20a\x20COMPLETED\x20purchase\x20adds\x20logic_as_u256_lesser[query(\x27allocation.balance\x27,\x20object:{identifier:0,\x20convert_witness:\x27OrderAllocation\x27}),\x20query(\x27order.amount\x27,\x20object:{identifier:0})]\x20—\x20the\x20escrow\x20must\x20be\x20at\x20least\x20partially\x20drained\x20(query\x201051\x20+\x20witness\x20109,\x20live-proven)\x20before\x20the\x20bounty\x20pays,\x20closing\x20both\x20the\x20unknown-commit\x20window\x20(a\x20claim\x20racing\x20an\x20in-flight\x20settlement)\x20and\x20the\x20stalling-merchant\x20hole\x20(no\x20release,\x20no\x20incentive).\x20Do\x20NOT\x20add\x20it\x20for\x20a\x20review-nudge\x20bounty\x20claimed\x20immediately\x20at\x20the\x20review\x20node\x20—\x20that\x20is\x20the\x20adjudicated\x20review→claim→complete\x20ordering\x20(upwc-mn-261013\x20③)\x20where\x20the\x20claim\x20deliberately\x20PRECEDES\x20settlement;\x20the\x20two\x20designs\x20are\x20mutually\x20exclusive,\x20choose\x20per\x20business\x20intent\x20and\x20state\x20the\x20choice\x20in\x20the\x20quote\x27s\x20reward\x20terms.','CLAIM-WINDOW\x20TIME\x20LEGS\x20(bkm4\x20BF-17,\x20v76;\x20re-anchored\x20UPWC-K4/CAT-D1;\x20opens/closes\x20split\x20bsw4\x20F-11,\x202026-10-29):\x20the\x20bounty\x20OPENS\x20only\x20after\x20opens_after_days\x20elapse\x20from\x20the\x20claim-allowed\x20node\x27s\x20entry\x20—\x20Clock\x20>=\x20entry\x20+\x20opens,\x20OPENING\x20direction\x20(etm\x20A-06;\x20never\x20invert\x20it\x20into\x20a\x20closing\x20gate)\x20—\x20and\x20CLOSES\x20at\x20entry\x20+\x20opens\x20+\x20closes_after_days\x20(Clock\x20<=,\x20CLOSING\x20direction),\x20the\x20closes\x20span\x20counted\x20FROM\x20THE\x20WINDOW\x20OPEN\x20so\x20an\x20opens\x20floor\x20can\x20never\x20swallow\x20the\x20claimable\x20span.\x20The\x20time\x20source\x20is\x20query\x201280\x20progress.history.time\x20via\x20the\x20structured\x20node\x20query_progress_history_time\x20(OrderProgress\x20witness),\x20FILTERED\x20by\x20where:{nextNode:\x20\x22${expected_pre_claim_node}\x22}\x20and\x20read\x20with\x20find:\x27first\x27\x20—\x20the\x20anchor\x20is\x20the\x20FIRST\x20recorded\x20entry\x20into\x20the\x20primary\x20claim\x20node,\x20i.e.\x20the\x20original\x20review\x20event\x20(ktt3-tn-261028\x20F-16:\x20find:\x27last\x27\x20let\x20a\x20buyer\x20loop\x20completed->reviewed->completed\x20and\x20each\x20re-entry\x20wrote\x20a\x20NEW\x201280\x20record,\x20silently\x20RESTARTING\x20the\x20window;\x20find:\x27first\x27\x20is\x20immune\x20—\x20same\x20semantics\x20as\x20tpl_time_window_upper_history_days).\x20The\x20old\x20empty-where\x20form\x20(where:{}\x20+\x20find:\x27last\x27,\x20v76\x20original)\x20resolved\x20to\x20the\x20LATEST\x20entry\x20of\x20whatever\x20node\x20the\x20order\x20currently\x20sits\x20at,\x20so\x20every\x20later\x20advance\x20(settlement,\x20praise,\x20revision)\x20silently\x20RESTARTED\x20the\x20window\x20and\x20a\x20post-review\x20advance\x20voided\x20the\x20bounty\x20—\x20that\x20form\x20is\x20superseded\x20and\x20must\x20not\x20be\x20re-introduced\x20(upwc-cat-261017\x20CAT-D1\x20live:\x200ms-window\x20probe).\x20The\x20claim-allowed\x20node\x20SET\x20is\x20NOT\x20the\x20filter\x27s\x20job\x20anymore:\x20it\x20is\x20carried\x20by\x20the\x20OR\x20legs\x20over\x20expected_pre_claim_node/alt/alt2/alt3\x20(see\x20NODE-SET\x20CLAIM\x20STATE\x20above);\x20keep\x20the\x20filter\x20pinned\x20to\x20the\x20primary\x20review\x20node\x20and\x20never\x20widen\x20it\x20to\x20the\x20set.\x20The\x20anchor\x20record\x20is\x20written\x20once\x20per\x20entry\x20and\x20never\x20rewritten\x20in\x20place,\x20so\x20with\x20find:\x27first\x27\x20a\x20settlement-race\x20re-entry\x20cannot\x20shift\x20the\x20window\x20mid-flight\x20(1272\x20progress.current_time\x20drift\x20class,\x20ETS-C,\x20is\x20eliminated\x20by\x20construction).\x20REQUIRES\x20an\x20execution\x20layer\x20with\x20the\x201280\x20primitive\x20(progress.history.time,\x20node-entry\x20timestamps)\x20—\x20shipped\x20with\x20the\x20current\x20buildin;\x20verify\x20freshness\x20via\x20wowok_buildin_info\x20info=\x27upgrade_check\x27\x20before\x20relying\x20on\x20it\x20on\x20an\x20old\x20binary.\x20On\x20builds\x20that\x20lack\x201280,\x20fall\x20back\x20to\x20pattern.time_source_repository_oracle.\x20The\x20day\x20knobs\x20pair\x20with\x20the\x20archetype\x20reward_claim_closes_after_days\x20fee_param\x20(default\x2014)\x20—\x20keep\x20the\x20two\x20in\x20sync\x20when\x20specializing\x20a\x20pack.\x20closes_after_days\x20\x270\x27\x20omits\x20the\x20closing\x20leg\x20AND\x20its\x20table\x20row\x20(open-ended\x20bounty\x20—\x20deliberate,\x20disclose\x20at\x20quote).','CLAIM-AND-RETURN\x20ARBITRAGE\x20CURE\x20(tbs7\x20F-04,\x202026-10-29\x20—\x20O17\x20live:\x20claim\x200.05\x20bounty\x20at\x20reviewed,\x20then\x20return\x20the\x20goods\x20for\x20a\x20full\x202.0\x20refund;\x20the\x20bounty\x20stayed\x20in\x20the\x20buyer\x27s\x20wallet\x20and\x20clawback\x20was\x20DECLINED\x20as\x20a\x20primitive):\x20the\x20cure\x20is\x20BEFORE-payment\x20exclusion,\x20two\x20zero-primitive\x20legs.\x20(1)\x20UNDISPUTED-ORDER\x20leg\x20—\x20order.claimed_by\x20some\x20==\x20FALSE\x20(identifier\x2011):\x20an\x20arbitration\x20award\x20stamp\x20permanently\x20kills\x20the\x20bounty;\x20a\x20buyer\x20who\x20goes\x20the\x20dispute\x20route\x20loses\x20the\x20incentive\x20by\x20polarity,\x20not\x20by\x20recovery.\x20(2)\x20AFTER-SALES-EXPIRY\x20floor\x20on\x20opens_after_days\x20—\x20the\x20opening\x20delay\x20MUST\x20exceed\x20the\x20store\x27s\x20after-sales\x20closing\x20bound\x20(return_window_days\x20/\x20review_window_days):\x20while\x20the\x20return\x20window\x20is\x20still\x20open\x20the\x20buyer\x20has\x20NOT\x20yet\x20earned\x20the\x20bounty,\x20and\x20a\x20return\x20filed\x20before\x20claim\x20time\x20moves\x20progress.current\x20off\x20the\x20claim-allowed\x20SET\x20(return_requested/returned\x20are\x20never\x20in\x20the\x20set),\x20failing\x20the\x20root.\x20The\x20kernel\x20default\x20derives\x20max(14d,\x20afterSales+1d);\x20a\x20merchant\x20pinning\x20a\x20SHORTER\x20reward_claim_opens_after_days\x20than\x20the\x20store\x27s\x20return\x20window\x20re-opens\x20the\x20arbitrage\x20—\x20warn\x20at\x20quote\x20time.\x20Do\x20NOT\x20add\x20a\x20settlement-drain\x20leg\x20together\x20with\x20a\x20long\x20window\x20for\x20review-nudge\x20designs\x20—\x20the\x20adjudicated\x20review→claim→complete\x20ordering\x20(upwc-mn-261013\x20③)\x20is\x20unaffected\x20by\x20these\x20legs\x20(claimed_by\x20none\x20holds\x20on\x20healthy\x20orders).','For\x20per-order\x20once\x20semantics\x20the\x20ORDER-SCOPED\x20gate\x20above\x20IS\x20the\x20primary\x20form\x20(SV-2).\x20Route\x20the\x20incentive\x20through\x20an\x20Allocation\x20leg\x20gated\x20on\x20protocol\x20slot\x20254\x20(chain-derived\x20bcs(payment_info.for_object),\x20unforgeable)\x20only\x20when\x20you\x20want\x20the\x20per-order\x20once\x20enforced\x20by\x20the\x20chain\x20itself,\x20immune\x20to\x20guard-tree\x20mistakes.','ADJUDICATED\x20DESIGN\x20(upwc-mn-261013\x20③)\x20—\x20REVIEW-THEN-CLAIM-THEN-COMPLETE\x20ordering:\x20the\x20standard\x20flow\x20writes\x20the\x20repository\x20review\x20row\x20FIRST,\x20fires\x20the\x20reward\x20claim\x20SECOND,\x20and\x20only\x20then\x20advances\x20the\x20machine\x20to\x20completed.\x20A\x20test/report\x20line\x20reading\x20\x27review\x20written\x20before\x20complete\x27\x20describes\x20the\x20designed\x20order,\x20not\x20a\x20defect\x20(KL-C5\x20review-window\x20idiom\x20family).','NODE-SET\x20CLAIM\x20STATE\x20(az3-mn-261013\x20F-16\x20+\x20UPWC-K3/CAT-D1):\x20expected_pre_claim_node\x20is\x20a\x20SET,\x20not\x20a\x20single\x20value\x20—\x20always\x20pass\x20expected_pre_claim_node_alt\x20(\x27completed\x27)\x20so\x20a\x20claim\x20filed\x20AFTER\x20settlement\x20wins\x20the\x20race\x20does\x20not\x20abort\x20(7),\x20AND\x20the\x20template\x27s\x20optional\x20post-settlement\x20side\x20nodes\x20as\x20alt2/alt3\x20(e.g.\x20\x27wonder\x27/\x27no_wonder\x27)\x20so\x20a\x20buyer\x20who\x20praises\x20after\x20reviewing\x20does\x20not\x20void\x20their\x20own\x20bounty.\x20A\x20reviewed-only\x20leg\x20went\x20live\x20dead\x20on\x20mainnet\x20the\x20moment\x20settlement\x20fired\x20first\x20(v2\x20root\x20dead,\x20v3\x20OR\x20leg\x20live).','WINDOW\x20ANCHOR\x20(UPWC-K4/CAT-D1\x20+\x20ktt3-tn-261028\x20F-16):\x20the\x20time\x20leg\x20anchors\x20the\x20PRIMARY\x20claim\x20node\x27s\x20FIRST\x20recorded\x20ENTRY\x20(where.nextNode\x20+\x20find:\x27first\x27)\x20—\x20later\x20advances\x20(settlement,\x20praise,\x20revision)\x20and\x20buyer\x20loop\x20re-entries\x20(completed->reviewed->completed)\x20no\x20longer\x20restart\x20the\x20window.\x20Pass\x20the\x20review\x20node\x20as\x20expected_pre_claim_node,\x20never\x20a\x20post-settlement\x20node:\x20the\x20anchor\x20IS\x20the\x20original\x20review\x20event.','RATING-FLOOR\x20ELIGIBILITY\x20LEG\x20(upwk-mn-261017\x20F-62):\x20the\x20leg\x20reads\x20the\x20ORDER-KEYED\x20U64\x20rating\x20row\x20—\x20query\x201167\x20(repository.data)\x20over\x20the\x20PLAN-BOUND\x20repository\x20(slot\x206)\x20with\x20the\x20policy\x20key\x20(slot\x207)\x20and\x20THE\x20SUBMITTED\x20ORDER\x20(slot\x200)\x20as\x20the\x20row\x20id,\x20compared\x20against\x20the\x20floor\x20(slot\x208).\x20The\x20buyer\x20writes\x20the\x20row\x20at\x20review\x20time\x20(repository.data_add\x20id\x20=\x20order\x20address,\x20value\x20=\x20stars\x20U64)\x20and\x20the\x20template\x20compiler\x20emits\x20the\x20matching\x20\x27rating\x27\x20policy\x20for\x20exactly\x20this\x20pairing\x20—\x20keep\x20rating_policy_name\x20in\x20lockstep\x20with\x20it.\x20THE\x20REVIEW\x20TEXT\x20ROW\x20IS\x20DISPLAY-ONLY\x20and\x20NEVER\x20keys\x20this\x20leg\x20(ORDER-keyed\x20since\x20F09,\x20yfd-ln-261024,\x20same\x20as\x20the\x20rating\x20row\x20—\x20the\x20duty\x20split\x20is\x20payload,\x20not\x20the\x20key):\x20keying\x20on\x20it\x20reads\x20the\x20wrong\x20record\x20or\x20dead-locks\x20the\x20claim\x20fail-closed\x20(F-62\x20four-layer\x20break\x20—\x20adjudication\x20right,\x20data\x20row\x20missing,\x20template\x20leg\x20missing,\x20scanner\x20blind;\x20this\x20leg\x20closes\x20layer\x203).','RATING-LEG\x20OMISSION\x20SEMANTICS:\x20rating_repository\x20empty/absent\x20=\x20omit\x20slots\x206-8\x20AND\x20the\x20rating\x20leg\x20(plain\x20praise\x20bounty\x20with\x20no\x20rating\x20floor);\x20rating_floor\x20\x270\x27\x20=\x20same\x20(a\x20>=\x200\x20floor\x20gates\x20nothing).\x20Never\x20ship\x20the\x20leg\x20with\x20a\x20dangling\x20slot\x20—\x20a\x201167\x20read\x20against\x20a\x20missing\x20row\x20fails\x20closed\x20and\x20bricks\x20the\x20claim\x20(F-03\x20class).','RATING-LEG\x20QUOTE-GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20\x27rating\x27\x20policy\x20is\x20quote-guard-protected,\x20the\x20claim\x20passport\x20MUST\x20carry\x20that\x20quote_guard\x20in\x20its\x20impack\x20list\x20—\x20the\x201167\x20read\x20aborts\x20otherwise\x20(fail-closed).\x20The\x20compile-emitted\x20rating\x20policy\x20ships\x20UNPROTECTED\x20(payout-relevant\x20amounts\x20are\x20not\x20secrets)\x20—\x20keep\x20it\x20that\x20way\x20unless\x20the\x20business\x20demands\x20secrecy,\x20and\x20then\x20disclose\x20the\x20carry\x20in\x20the\x20quote\x27s\x20reward\x20terms.','Reward\x20guard\x20is\x20immutable\x20once\x20the\x20Reward\x20object\x20is\x20published\x20—\x20verify\x20this\x20guard\x20against\x20a\x20realistic\x20passport\x20BEFORE\x20publish\x20(F-03:\x20a\x20wrong\x20bound\x20guard\x20can\x20permanently\x20brick\x20the\x20claim\x20path).'],'example_use_case':'Review\x20bounty:\x20fan\x20finishes\x20review\x20(node\x20\x27reviewed\x27),\x20submits\x20the\x20Order,\x20claims\x20the\x20praise\x20bounty.\x20The\x20identity\x20leg\x20binds\x20the\x20claim\x20to\x20the\x20order\x20holder;\x20the\x20logic_not(exists_where)\x20leg\x20rejects\x20a\x20second\x20claim\x20from\x20the\x20same\x20address.\x20A\x20replay\x20attempt\x20aborts\x20and\x20the\x20pool\x20keeps\x20its\x20balance.\x20With\x20the\x20rating\x20leg\x20armed,\x20a\x203-star\x20review\x20on\x20a\x204-floor\x20bounty\x20claims\x20nothing.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_repository_review_threshold_gate','scene_id':'reward_claim','name':'Positive-review\x20threshold\x20gate','description':'Gates\x20a\x20benefit\x20(reward\x20claim,\x20privilege,\x20milestone)\x20on\x20review\x20quality\x20recorded\x20in\x20a\x20Repository:\x20count-form\x20requires\x20at\x20least\x20N\x20reviews\x20rated\x20>=\x20a\x20minimum\x20star\x20level;\x20sum-form\x20requires\x20the\x20review-score\x20sum\x20to\x20reach\x20a\x20threshold.\x20Uses\x20the\x20repository\x20composite\x20where-queries\x20(count\x20where\x20/\x20sum\x20where)\x20with\x20a\x20verifier-supplied\x20candidate\x20list.','recommended_patterns':['P07','P13'],'parameters':[{'name':'review_repository','type':'address','description':'Repository\x20object\x20holding\x20the\x20review\x20rows','required':!![]},{'name':'review_key','type':'string','description':'Policy\x20key\x20under\x20which\x20review\x20rows\x20are\x20stored\x20(e.g.\x20\x27review\x27)','required':!![]},{'name':'min_star','type':'number','description':'Minimum\x20star\x20rating\x20that\x20counts\x20as\x20a\x20positive\x20review','required':!![],'constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x274\x27.\x20Predicate\x20bounds\x20are\x20numeric\x20strings,\x20never\x20JSON\x20numbers'},{'name':'min_review_count','type':'number','description':'Minimum\x20number\x20of\x20positive\x20reviews\x20required\x20(count\x20form)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Repository','name':'Review\x20Repository\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${review_key}','name':'Review\x20policy\x20key'},{'identifier':0x2,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20review\x20row\x20ids\x20supplied\x20by\x20the\x20verifier\x20(max\x20100,\x20deduped)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${min_review_count}','name':'Minimum\x20positive\x20review\x20count'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query_repository_data_count_where','object':{'identifier':0x0},'key':{'identifier':0x1},'ids':{'identifier':0x2},'where':{'kind':'range','valueMin':'${min_star}'}},{'type':'identifier','identifier':0x3}]},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01'],'creation_notes':['TWO\x20FORMS\x20—\x20COUNT\x20(this\x20example_root):\x20query_repository_data_count_where\x20with\x20where\x20{kind:\x27range\x27,\x20valueMin:\x27${min_star}\x27}\x20returns\x20U64\x20=\x20number\x20of\x20candidate\x20rows\x20rated\x20>=\x20min_star;\x20compare\x20logic_as_u256_greater_or_equal\x20against\x20the\x20count\x20threshold.','TWO\x20FORMS\x20—\x20SUM\x20(swap\x20the\x20query\x20node):\x20query_repository_data_sum_where\x20returns\x20U256\x20=\x20the\x20sum\x20of\x20the\x20numeric\x20payloads\x20of\x20matching\x20rows;\x20compare\x20it\x20against\x20a\x20total-score\x20threshold\x20with\x20logic_as_u256_greater_or_equal.\x20Use\x20the\x20sum\x20form\x20when\x20review\x20weight\x20should\x20scale\x20with\x20rating\x20(5-star\x20counts\x20more\x20than\x204-star);\x20use\x20the\x20count\x20form\x20for\x20a\x20flat\x20\x27N\x20positive\x20reviews\x27\x20rule.','U256\x20NUMBER-STRING\x20SEMANTICS:\x20every\x20predicate\x20bound\x20and\x20threshold\x20is\x20a\x20PLAIN\x20NUMBER\x20STRING\x20(e.g.\x20\x274\x27,\x20\x2720\x27)\x20with\x20U256\x20semantics\x20—\x20on-chain\x20comparison\x20widens\x20all\x20numeric\x20types\x20to\x20U256.\x20Predicate\x20kind\x20must\x20match\x20the\x20policy\x20value\x20type;\x20mismatching\x20rows\x20are\x20skipped\x20honestly\x20(never\x20an\x20error).','CANDIDATE\x20IDS:\x20the\x20ids\x20row\x20is\x20verifier-supplied\x20evidence\x20(b_submission\x20VecAddress,\x20max\x20100,\x20deduped).\x20For\x20per-user\x20review\x20rows\x20the\x20natural\x20candidate\x20set\x20is\x20the\x20user\x27s\x20review\x20row\x20ids;\x20enumerate\x20them\x20via\x20a\x20repository\x20data\x20query\x20or\x20derive\x20them\x20from\x20order\x20records\x20—\x20never\x20trust\x20a\x20count\x20over\x20ids\x20the\x20verifier\x20can\x20pad\x20with\x20foreign\x20rows\x20unless\x20each\x20row\x20id\x20is\x20bound\x20to\x20the\x20user.','QUOTE_GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20scanned\x20policy\x20key\x20is\x20protected\x20by\x20a\x20quote_guard,\x20the\x20passport\x20verifying\x20this\x20gate\x20MUST\x20carry\x20that\x20quote_guard\x20in\x20its\x20impack\x20list\x20—\x20the\x20fetch\x20(1167),\x20count/sum/find\x20(1173/1174/1176)\x20AND\x20the\x20keys-where\x20scan\x20(1177)\x20all\x20abort\x20otherwise.\x20A\x20gate\x20that\x20reads\x20protected\x20review\x20data\x20without\x20carrying\x20the\x20quote_guard\x20fails\x20closed.','Identity\x20anchor:\x20combine\x20with\x20an\x20order-owner\x20or\x20Signer\x20leg\x20(see\x20tpl_reward_one_time_claim)\x20so\x20the\x20benefit\x20goes\x20to\x20the\x20reviewer,\x20not\x20whoever\x20assembles\x20the\x20passport.'],'example_use_case':'Loyalty\x20perk:\x20a\x20fan\x20who\x20has\x20posted\x20at\x20least\x203\x20reviews\x20rated\x204\x20stars\x20or\x20higher\x20can\x20claim\x20a\x20bonus.\x20The\x20verifier\x20submits\x20the\x20fan\x27s\x20review\x20row\x20ids;\x20the\x20count-form\x20root\x20only\x20passes\x20when\x20at\x20least\x203\x20rows\x20carry\x20a\x20rating\x20>=\x204.\x20Swap\x20to\x20the\x20sum\x20form\x20to\x20require\x20the\x20fan\x27s\x20total\x20review\x20score\x20to\x20reach\x2015.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_crowdfunding_threshold_gate','scene_id':'machine_forward_guard','name':'Crowdfunding\x20threshold\x20settlement\x20gate\x20(release\x20/\x20refund\x20polarity)','description':'Gates\x20a\x20campaign\x20settlement\x20forward\x20on\x20the\x20ESCROW-BOUND\x20on-chain\x20raise:\x20logic_and[\x20sum-where-bound(1179)\x20over\x20'+'the\x20campaign\x27s\x20ORDER-KEYED\x20contribution\x20rows\x20>=\x20funding_threshold,\x20allocation.balance\x20>=\x20order.amount\x20on\x20the\x20'+'task-bound\x20order\x20(live-escrow\x20leg,\x20witness\x20OrderAllocation),\x20order.claimed_by\x20some\x20==\x20false\x20(no\x20arbitration\x20'+'award\x20has\x20paid),\x20Clock\x20>=\x20campaign_deadline\x20].\x20RELEASE\x20polarity\x20(this\x20example_root,\x20greater_or_equal)\x20fires\x20'+'the\x20release\x20leg\x20when\x20the\x20goal\x20is\x20met;\x20REFUND\x20polarity\x20(swap\x20the\x20FIRST\x20leaf\x20to\x20logic_as_u256_lesser)\x20fires\x20the\x20'+'per-contributor\x20refund\x20leg\x20when\x20the\x20goal\x20is\x20missed.\x20The\x20deadline\x20is\x20an\x20ABSOLUTE\x20campaign\x20timestamp\x20(shared\x20by\x20'+'every\x20funder),\x20NOT\x20a\x20per-order\x20entry+duration\x20lock.\x20Executable\x20form\x20of\x20the\x20crowdfunding_mode\x20threshold\x20gate;\x20'+'the\x20aggregate\x20is\x20a\x20read-only\x20bound\x20sum\x20over\x20keeper-supplied\x20candidate\x20ORDER\x20ids\x20(max\x20100,\x20pre-filtered\x20'+'against\x20live\x20allocations)\x20—\x20roster\x20completeness\x20is\x20attested,\x20never\x20a\x20chain-verified\x20total-custody\x20proof.','recommended_patterns':['P06','P07'],'parameters':[{'name':'campaign_repository','type':'address','description':'Repository\x20object\x20holding\x20the\x20campaign\x27s\x20contribution\x20rows.\x20Default\x20\x27${repository_name}\x27\x20=\x20the\x20plan\x27s\x20kernel-created\x20evidence\x20Repository\x20(compile\x20seeds\x20repository_name\x20like\x20service_name\x20—\x20late-bound\x20by\x20object\x20NAME\x20at\x20execution).\x20Pass\x20an\x20explicit\x20repository\x20name/address\x20to\x20read\x20a\x20different\x20ledger.','required':!![],'default':'${repository_name}'},{'name':'contribution_key','type':'string','description':'Policy\x20key\x20under\x20which\x20contribution\x20rows\x20are\x20stored\x20(default\x20\x27contribution\x27\x20—\x20the\x20canonical\x20crowdfunding\x20write-policy\x20name\x20declared\x20by\x20the\x20template\x27s\x20repository\x20write\x20guard)','required':!![],'default':'contribution'},{'name':'funding_threshold','type':'number','description':'Aggregate\x20funding\x20goal\x20the\x20sum-where\x20total\x20is\x20compared\x20against\x20(U256\x20semantics,\x20plain\x20number\x20string)','required':!![],'constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x271000\x27.\x20Predicate\x20bounds\x20and\x20thresholds\x20are\x20numeric\x20strings,\x20never\x20JSON\x20numbers'},{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20campaign\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20settlement\x20is\x20blocked\x20until\x20Clock\x20>=\x20it','required':!![],'constraint':'Shared\x20by\x20every\x20funder\x27s\x20order\x20—\x20one\x20campaign,\x20one\x20deadline.\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20a\x20repository\x20time-oracle\x20(pattern.time_source_repository_oracle)\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20date'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Repository','name':'Campaign\x20Repository\x20(submitted\x20by\x20the\x20keeper\x20at\x20settlement)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${contribution_key}','name':'Contribution\x20policy\x20key'},{'identifier':0x2,'b_submission':!![],'value_type':'VecAddress','name':'Contributor\x20ORDER\x20addresses\x20(row\x20id\x20=\x20funder\x27s\x20order)\x20enumerated\x20by\x20the\x20keeper\x20(find-where\x201176\x20/\x20keys-where\x201177;\x20max\x20100,\x20deduped),\x20pre-filtered\x20to\x20LIVE\x20allocations\x20(balance\x20>\x200)\x20—\x20the\x20campaign\x20roster\x20is\x20ATTESTED\x20by\x20this\x20set,\x20not\x20chain-derived'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${funding_threshold}','name':'Aggregate\x20funding\x20goal\x20(U256\x20comparison)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20campaign\x20deadline\x20(epoch\x20ms);\x20Clock\x20>=\x20it\x20opens\x20settlement'},{'identifier':0x5,'b_submission':![],'value_type':'Bool','value':![],'name':'Expected\x20claimed_by\x20polarity:\x20false\x20=\x20no\x20arbitration\x20award\x20has\x20paid\x20this\x20order'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query_repository_data_sum_where_bound','object':{'identifier':0x0},'key':{'identifier':0x1},'ids':{'identifier':0x2},'where':{'kind':'range','valueMin':'1'}},{'type':'identifier','identifier':0x3}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'allocation.balance','object':{'identifier':0xfe,'convert_witness':'OrderAllocation'},'parameters':[]},{'type':'query','query':'order.amount','object':{'identifier':0xfe},'parameters':[]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0xfe},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x4}]}]},'applicable_industries':['crowdfunding','retail','subscription'],'relevant_risks':['R-X1-17','R-C1-03'],'creation_notes':['TWO\x20POLARITIES,\x20ONE\x20AGGREGATE:\x20RELEASE\x20(this\x20example_root)\x20uses\x20logic_as_u256_greater_or_equal[sum_where_bound,\x20threshold];\x20REFUND\x20swaps\x20that\x20FIRST\x20leaf\x20to\x20logic_as_u256_lesser[sum_where_bound,\x20threshold].\x20Both\x20AND\x20the\x20SAME\x20live-escrow,\x20claimed_by\x20and\x20deadline\x20leaves,\x20so\x20they\x20are\x20mutually\x20exclusive\x20—\x20exactly\x20one\x20is\x20satisfiable\x20once\x20Clock\x20>=\x20deadline\x20(the\x20D-BUG-2\x20escrow-exit\x20polarity\x20specialized\x20to\x20a\x20funding\x20gate).\x20Mount\x20the\x20release\x20polarity\x20on\x20the\x20→funded_released\x20forward\x20and\x20the\x20refund\x20polarity\x20on\x20the\x20→missed_refunded\x20forward.','LEGACY\x20SUM-FORM\x20(query\x201174,\x20do\x20NOT\x20ship):\x20query_repository_data_sum_where\x20sums\x20the\x20self-reported\x20row\x20payloads\x20—\x20a\x20row\x20can\x20claim\x20any\x20value,\x20which\x20made\x20the\x20gate\x20forgeable\x20(F-01).\x20Kept\x20only\x20to\x20teach\x20the\x20migration:\x20swap\x201174\x20→\x201179\x20TOGETHER\x20with\x20the\x20order-keyed\x20write\x20policy\x20(id_from\x20removed,\x20row\x20id\x20=\x20funder\x27s\x20order\x20address).\x20Half-migrating\x20bricks\x20the\x20gate\x20SILENTLY:\x20the\x20bound\x20query\x20reads\x200\x20for\x20signer-keyed\x20rows,\x20so\x20every\x20contribution\x20contributes\x200\x20and\x20the\x20threshold\x20can\x20never\x20be\x20met\x20—\x20with\x20NO\x20error\x20anywhere.\x20Predicate\x20bounds\x20and\x20the\x20threshold\x20remain\x20PLAIN\x20NUMBER\x20STRINGS\x20with\x20U256\x20semantics.','ESCROW-BOUND\x20FORM\x20(query\x201179,\x20LIVE\x20default\x20—\x20this\x20example_root):\x20query_repository_data_sum_where_bound\x20returns\x20per-row\x20min(row_value,\x20order.amount\x20of\x20the\x20Order\x20the\x20row\x20id\x20names)\x20summed\x20as\x20U256\x20(checked_add,\x20overflow-safe).\x20A\x20row\x20cannot\x20claim\x20more\x20than\x20its\x20Order\x20actually\x20escrowed\x20(F-01\x20closed),\x20and\x20it\x20reads\x200\x20for\x20any\x20row\x20id\x20that\x20is\x20NOT\x20an\x20Order\x20(fail-closed)\x20—\x20which\x20is\x20why\x20the\x20write\x20side\x20MUST\x20key\x20rows\x20by\x20the\x20funder\x27s\x20ORDER:\x20id_from\x20removed\x20from\x20the\x20write\x20policy,\x20row\x20id\x20=\x20order\x20address,\x20candidate\x20ids\x20=\x20contributor\x20ORDER\x20addresses.\x20The\x20where\x20{kind:\x27range\x27,\x20valueMin:\x271\x27}\x20predicate\x20skips\x20zeroed\x20(withdrawn-cleared)\x20rows.','🔴\x20CANDIDATE\x20IDS\x20ARE\x20KEEPER-ATTESTED\x20(the\x20honest\x20boundary,\x20L-04)\x20—\x20AND\x20MUST\x20BE\x20PRE-FILTERED\x20(F-05):\x20the\x20ids\x20row\x20(identifier\x202)\x20is\x20verifier-supplied\x20(b_submission\x20VecAddress,\x20max\x20100,\x20deduped).\x20Enumerate\x20via\x20find-where\x20(1176)\x20/\x20keys-where\x20(1177),\x20then\x20drop\x20every\x20candidate\x20whose\x20live\x20allocation\x20balance\x20is\x200\x20(withdrawn/refunded/paid\x20order)\x20BEFORE\x20feeding\x201179\x20—\x20a\x20withdrawn-but-undeleted\x20row\x20still\x20contributes\x20min(row_value,\x20order.amount)\x20to\x20the\x20bound\x20sum\x20and\x20can\x20flip\x20the\x20GO/NO-GO\x20polarity.\x20The\x20per-order\x20legs\x20(1051\x20+\x20claimed_by)\x20still\x20guarantee\x20no\x20order\x20is\x20paid\x20twice\x20or\x20from\x20a\x20drained\x20escrow;\x20the\x20pre-filter\x20protects\x20the\x20AGGREGATE\x20polarity\x20only.\x20A\x20campaign\x20with\x20>100\x20contributors\x20needs\x20the\x20roster\x20split\x20across\x20settlements.\x20Never\x20present\x20the\x20total\x20as\x20a\x20chain-verified\x20custody\x20proof.','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17,\x20existence-is-not-trust):\x20the\x20contribution\x20rows\x20MUST\x20be\x20written\x20under\x20pattern.repository_write_authorization\x20with\x20an\x20identity\x20leaf\x20(order.owner\x20==\x20Signer\x20/\x20order.agent\x20has\x20Signer)\x20and\x20NO\x20id_from\x20(order-keyed:\x20row\x20id\x20=\x20the\x20funder\x27s\x20order\x20address)\x20so\x20a\x20funder\x20can\x20only\x20record\x20a\x20contribution\x20bound\x20to\x20their\x20OWN\x20escrowed\x20order\x20—\x20an\x20unbound\x20write_guard\x20makes\x20the\x20aggregate\x20forgeable\x20and\x20the\x20threshold\x20meaningless.','ABSOLUTE\x20DEADLINE,\x20NOT\x20PER-ORDER:\x20identifier\x204\x20is\x20a\x20single\x20campaign-wide\x20epoch-ms\x20timestamp\x20(pattern.time_lock_absolute\x20shape).\x20Do\x20NOT\x20anchor\x20on\x20progress.history.time\x20(1280)\x20entry+duration\x20here\x20—\x20that\x20would\x20give\x20each\x20funder\x20a\x20different\x20deadline\x20measured\x20from\x20when\x20they\x20pledged.\x20For\x20a\x20real-world\x20calendar\x20deadline\x20bind\x20pattern.time_source_repository_oracle\x20and\x20document\x20the\x20time\x20source.','QUOTE_GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20contribution\x20policy\x20key\x20is\x20protected\x20by\x20a\x20quote_guard,\x20the\x20passport\x20verifying\x20this\x20gate\x20MUST\x20carry\x20it\x20in\x20its\x20impack\x20list\x20—\x20the\x20bound\x20sum\x20(1179)\x20and\x20the\x20keys-where\x20scan\x20(1177)\x20abort\x20otherwise.\x20Leave\x20the\x20contribution\x20policy\x20unprotected\x20(the\x20raise\x20total\x20is\x20public,\x20not\x20a\x20secret)\x20so\x20settlement\x20stays\x20simple.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'All-or-nothing\x20campaign:\x20200\x20backers\x20each\x20escrow\x20a\x20contribution\x20in\x20their\x20OWN\x20unpooled\x20Allocation\x20and\x20record\x20an\x20'+'order-keyed\x20row\x20(row\x20id\x20=\x20their\x20order\x20address)\x20in\x20the\x20campaign\x20Repository;\x20a\x20withdrawal\x20clears\x20the\x20row\x20to\x200\x20in\x20'+'the\x20same\x20PTB\x20as\x20the\x20refund.\x20At\x20the\x20deadline\x20a\x20keeper\x20enumerates\x20the\x20contributor\x20ORDER\x20addresses,\x20drops\x20'+'zero-balance\x20ones\x20(withdrawn/refunded),\x20and\x20advances\x20each\x20order:\x20the\x20release-polarity\x20gate\x20(bound\x20sum\x20>=\x20goal,\x20'+'allocation\x20still\x20live,\x20never\x20arbitration-paid)\x20fires\x20→funded_released\x20for\x20every\x20backer\x20when\x20the\x20goal\x20is\x20met;\x20'+'the\x20refund-polarity\x20gate\x20(bound\x20sum\x20<\x20goal)\x20fires\x20→missed_refunded,\x20returning\x20each\x20contribution\x20to\x20its\x20own\x20'+'backer\x20(order-anchored\x20user\x20slot\x200,\x20the\x20submitted\x20Order)\x20when\x20the\x20goal\x20is\x20missed.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_crowdfunding_threshold_gate_refund','scene_id':'machine_forward_guard','name':'Crowdfunding\x20threshold\x20REFUND\x20gate\x20(goal-missed\x20polarity,\x20aggregate\x20<)','description':'REFUND\x20polarity\x20of\x20the\x20campaign\x20threshold\x20settlement:\x20logic_and[\x20sum-where-bound(1179)\x20over\x20the\x20'+'campaign\x27s\x20ORDER-keyed\x20contribution\x20rows\x20<\x20funding_threshold,\x20allocation.balance\x20>=\x20order.amount\x20'+'on\x20the\x20task-bound\x20order\x20(live-escrow\x20leg),\x20order.claimed_by\x20some\x20==\x20false,\x20Clock\x20>=\x20'+'campaign_deadline\x20].\x20Fires\x20the\x20per-contributor\x20refund\x20leg\x20when\x20the\x20goal\x20is\x20MISSED;\x20the\x20RELEASE\x20'+'twin\x20(tpl_crowdfunding_threshold_gate,\x20aggregate\x20>=)\x20fires\x20the\x20release\x20leg\x20when\x20the\x20goal\x20is\x20met\x20—\x20'+'the\x20two\x20are\x20mutually\x20exclusive\x20on\x20the\x20same\x20aggregate,\x20so\x20exactly\x20one\x20passes\x20after\x20the\x20deadline\x20'+'(D-BUG-2\x20escrow-exit\x20polarity).\x20Distinct\x20template\x20ids,\x20not\x20a\x20param\x20swap:\x20guard\x20roots\x20are\x20'+'immutable\x20data\x20filled\x20from\x20example_root,\x20so\x20polarity\x20must\x20be\x20picked\x20at\x20BIND\x20time.\x20The\x20deadline\x20'+'is\x20an\x20ABSOLUTE\x20campaign\x20timestamp\x20shared\x20by\x20every\x20funder.\x20Keeper-attempted\x20OR\x20backer\x20self-heal\x20'+'(AbandonAfterDeadline)\x20may\x20drive\x20the\x20advance\x20—\x20the\x20aggregate\x20+\x20claimed_by\x20+\x20deadline\x20legs\x20make\x20'+'the\x20OUTCOME\x20state-determined,\x20so\x20the\x20driver\x20cannot\x20redirect\x20the\x20funds.','recommended_patterns':['P06','P07'],'parameters':[{'name':'campaign_repository','type':'address','description':'Repository\x20object\x20holding\x20the\x20campaign\x27s\x20contribution\x20rows.\x20Default\x20\x27${repository_name}\x27\x20=\x20the\x20plan\x27s\x20kernel-created\x20evidence\x20Repository\x20(compile\x20seeds\x20repository_name\x20like\x20service_name\x20—\x20late-bound\x20by\x20object\x20NAME\x20at\x20execution).\x20Pass\x20an\x20explicit\x20repository\x20name/address\x20to\x20read\x20a\x20different\x20ledger.','required':!![],'default':'${repository_name}'},{'name':'contribution_key','type':'string','description':'Policy\x20key\x20under\x20which\x20contribution\x20rows\x20are\x20stored\x20(default\x20\x27contribution\x27\x20—\x20the\x20canonical\x20crowdfunding\x20write-policy\x20name\x20declared\x20by\x20the\x20template\x27s\x20repository\x20write\x20guard)','required':!![],'default':'contribution'},{'name':'funding_threshold','type':'number','description':'Aggregate\x20funding\x20goal\x20the\x20sum-where\x20total\x20is\x20compared\x20against\x20(U256\x20semantics,\x20plain\x20number\x20string)','required':!![],'constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x271000\x27.\x20Predicate\x20bounds\x20and\x20thresholds\x20are\x20numeric\x20strings,\x20never\x20JSON\x20numbers'},{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20campaign\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20settlement\x20is\x20blocked\x20until\x20Clock\x20>=\x20it','required':!![],'constraint':'Shared\x20by\x20every\x20funder\x27s\x20order\x20—\x20one\x20campaign,\x20one\x20deadline.\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20a\x20repository\x20time-oracle\x20(pattern.time_source_repository_oracle)\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20date'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Repository','name':'Campaign\x20Repository\x20(submitted\x20by\x20the\x20keeper\x20at\x20settlement)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${contribution_key}','name':'Contribution\x20policy\x20key'},{'identifier':0x2,'b_submission':!![],'value_type':'VecAddress','name':'Contributor\x20ORDER\x20addresses\x20(row\x20id\x20=\x20funder\x27s\x20order)\x20enumerated\x20by\x20the\x20keeper\x20(find-where\x201176\x20/\x20keys-where\x201177;\x20max\x20100,\x20deduped),\x20pre-filtered\x20to\x20LIVE\x20allocations\x20(balance\x20>\x200)\x20—\x20the\x20campaign\x20roster\x20is\x20ATTESTED\x20by\x20this\x20set,\x20not\x20chain-derived'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${funding_threshold}','name':'Aggregate\x20funding\x20goal\x20(U256\x20comparison)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20campaign\x20deadline\x20(epoch\x20ms);\x20Clock\x20>=\x20it\x20opens\x20settlement'},{'identifier':0x5,'b_submission':![],'value_type':'Bool','value':![],'name':'Expected\x20claimed_by\x20polarity:\x20false\x20=\x20no\x20arbitration\x20award\x20has\x20paid\x20this\x20order'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_as_u256_lesser','nodes':[{'type':'query_repository_data_sum_where_bound','object':{'identifier':0x0},'key':{'identifier':0x1},'ids':{'identifier':0x2},'where':{'kind':'range','valueMin':'1'}},{'type':'identifier','identifier':0x3}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'allocation.balance','object':{'identifier':0xfe,'convert_witness':'OrderAllocation'},'parameters':[]},{'type':'query','query':'order.amount','object':{'identifier':0xfe},'parameters':[]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0xfe},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x4}]}]},'applicable_industries':['crowdfunding','retail','subscription'],'relevant_risks':['R-X1-17','R-C1-03'],'creation_notes':['BIND-TIME\x20POLARITY\x20(ktt2\x20F-01/F-02,\x202026-10-28):\x20bind\x20THIS\x20id\x20to\x20the\x20→missed_refunded\x20forward\x20and\x20tpl_crowdfunding_threshold_gate\x20(>=)\x20to\x20the\x20→funded_released\x20forward.\x20Binding\x20the\x20release\x20id\x20to\x20BOTH\x20forwards\x20compiles\x20two\x20byte-identical\x20>=\x20guards\x20—\x20a\x20met\x20goal\x20refunds\x20and\x20a\x20missed\x20goal\x20strands\x20(the\x20exact\x20ktt2\x20on-chain\x20failure).\x20There\x20is\x20no\x20runtime\x20or\x20fill-time\x20polarity\x20switch:\x20Guards\x20are\x20immutable\x20data,\x20so\x20the\x20polarity\x20is\x20the\x20template\x20id.','TWO\x20POLARITIES,\x20ONE\x20AGGREGATE:\x20REFUND\x20(this\x20example_root)\x20uses\x20logic_as_u256_lesser[sum_where_bound,\x20threshold];\x20RELEASE\x20swaps\x20that\x20FIRST\x20leaf\x20to\x20logic_as_u256_greater_or_equal.\x20Both\x20AND\x20the\x20SAME\x20live-escrow,\x20claimed_by\x20and\x20deadline\x20leaves,\x20so\x20they\x20are\x20mutually\x20exclusive\x20—\x20exactly\x20one\x20is\x20satisfiable\x20once\x20Clock\x20>=\x20deadline\x20(the\x20D-BUG-2\x20escrow-exit\x20polarity\x20specialized\x20to\x20a\x20funding\x20gate).','ESCROW-BOUND\x20FORM\x20(query\x201179):\x20per-row\x20min(row_value,\x20order.amount\x20of\x20the\x20row\x20id\x27s\x20Order),\x20summed\x20U256\x20checked_add\x20—\x20a\x20row\x20cannot\x20claim\x20more\x20than\x20its\x20Order\x20escrowed\x20and\x20reads\x200\x20for\x20non-Order\x20row\x20ids\x20(fail-closed).\x20The\x20write\x20side\x20MUST\x20key\x20rows\x20by\x20the\x20funder\x27s\x20ORDER\x20(no\x20id_from)\x20—\x20signer-keyed\x20rows\x20read\x200\x20under\x20the\x20bound\x20form\x20and\x20silently\x20brick\x20the\x20gate\x20(CROWDFUNDING_SIGNER_KEYED_ROWS).','LIVE-ESCROW\x20LEG\x20keeps\x20an\x20already-drained\x20order\x20(refunded\x20via\x20withdrawal)\x20from\x20re-entering\x20the\x20refund\x20rail;\x20claimed_by\x20==\x20false\x20defers\x20an\x20arbitration-displaced\x20order\x20to\x20the\x20recovery\x20rail.','CANDIDATE\x20IDS\x20ARE\x20KEEPER-ATTESTED\x20AND\x20MUST\x20BE\x20PRE-FILTERED\x20(F-05):\x20drop\x20every\x20candidate\x20whose\x20live\x20allocation\x20balance\x20is\x200\x20BEFORE\x20feeding\x201179\x20—\x20a\x20withdrawn-but-undeleted\x20row\x20still\x20contributes\x20to\x20the\x20bound\x20sum\x20and\x20can\x20flip\x20the\x20GO/NO-GO\x20polarity.\x20Max\x20100\x20ids\x20per\x20settlement.','SELF-HEAL\x20DRIVER-SAFETY\x20(GF2-30):\x20a\x20backer\x20may\x20drive\x20the\x20refund\x20advance\x20(AbandonAfterDeadline)\x20when\x20no\x20keeper\x20ran\x20—\x20safe\x20because\x20the\x20OUTCOME\x20is\x20state-determined\x20(aggregate\x20<\x20goal\x20AND\x20Clock\x20>=\x20deadline\x20forces\x20refund;\x20the\x20driver\x20cannot\x20redirect\x20funds).\x20No\x20identity\x20leg\x20by\x20design:\x20the\x20guard\x27s\x20state\x20legs\x20ARE\x20the\x20authorization.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'All-or-nothing\x20campaign,\x20goal\x20missed:\x20at\x20the\x20deadline\x20the\x20keeper\x20(or\x20any\x20backer,\x20self-heal)\x20advances\x20'+'each\x20pledger\x27s\x20order\x20through\x20→missed_refunded;\x20this\x20gate\x20passes\x20only\x20while\x20the\x20bound\x20aggregate\x20is\x20'+'STILL\x20below\x20the\x20goal,\x20returning\x20every\x20contribution\x20to\x20its\x20own\x20backer\x20(slot\x200).\x20A\x20keeper\x20cannot\x20'+'advance\x20a\x20MET\x20round\x20through\x20this\x20gate\x20(>=\x20fails\x20<),\x20and\x20a\x20backer\x20cannot\x20drain\x20a\x20MET\x20round\x20via\x20the\x20'+'release\x20twin\x27s\x20twin\x20polarity\x20—\x20the\x20two\x20gates\x20are\x20mutually\x20exclusive\x20on\x20one\x20aggregate.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_roster_member_gate','scene_id':'machine_forward_guard','name':'Named-operator\x20roster\x20admission\x20gate\x20(DM-P1\x20exclusive\x20forward\x20+\x20evidence)','description':'Gates\x20a\x20machine\x20forward\x20on\x20KERNEL-ENFORCED\x20roster\x20membership:\x20the\x20transaction\x20signer\x20must\x20be\x20on\x20the\x20'+'named-operator\x20roster\x20of\x20the\x20order\x27s\x20Progress\x20(query\x201575,\x20parameterless\x20—\x20the\x20signer\x20comes\x20from\x20the\x20tx\x20'+'context).\x20ANDed\x20with\x20the\x20same\x20evidence-row\x20presence\x20leg\x20as\x20'+'tpl_repository_row_present\x20(at\x20least\x20one\x20row\x20under\x20the\x20named\x20policy\x20whose\x20value\x20contains\x20the\x20marker,\x20'+'among\x20the\x20verifier-submitted\x20candidate\x20row\x20ids),\x20so\x20a\x20courier\x20handover\x20edge\x20requires\x20BOTH\x20the\x20roster\x20'+'predicate\x20AND\x20the\x20handover\x20evidence.\x20Gated\x20by\x20protocol\x20v138\x20—\x20on\x20a\x20chain\x20without\x20the\x20feature\x20flag\x20the\x20'+'guard\x20evaluation\x20aborts\x20(fail-closed),\x20so\x20verify\x20build_stamp.chain_stamp\x20via\x20upgrade_check\x20before\x20shipping.','recommended_patterns':['P06','P15'],'parameters':[{'name':'repository_name','type':'string','description':'Evidence\x20Repository\x20object\x20name\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20with\x20the\x20plan\x27s\x20evidence\x20repository\x20(\x27<base>_evidence\x27,\x20A5\x20late-binding\x20like\x20service_name)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'row_name','type':'string','description':'Policy\x20key\x20under\x20which\x20the\x20evidence\x20rows\x20are\x20stored\x20(e.g.\x20\x27evidence\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Repository\x20policy\x20name\x20(case-sensitive)'},{'name':'evidence_marker','type':'string','description':'Substring\x20the\x20evidence\x20row\x20value\x20must\x20contain\x20(e.g.\x20the\x20forward\x20name\x20that\x20marks\x20the\x20handover,\x20\x27PickupOrder\x27\x20/\x20\x27DeliverOrder\x27)\x20—\x20the\x20row\x20without\x20the\x20marker\x20does\x20not\x20open\x20the\x20gate','required':!![]}],'example_table':[{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Evidence\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${row_name}','name':'Evidence\x20policy\x20key'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${evidence_marker}','name':'Marker\x20substring\x20the\x20row\x20value\x20must\x20contain'},{'identifier':0x5,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20evidence\x20row\x20ids\x20submitted\x20by\x20the\x20verifier\x20(max\x20100,\x20deduped)'},{'identifier':0x6,'b_submission':![],'value_type':'U64','value':0x1,'name':'Minimum\x20matching\x20row\x20count\x20(superseded\x20by\x20the\x20F-10\x20order-pin\x20leg\x20—\x20order-keyed\x20policies\x20hold\x20ONE\x20row\x20per\x20order;\x20kept\x20for\x20table-layout\x20stability)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'query_order_named_operator_member','object':{'identifier':0xfe}},{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x1},'key':{'identifier':0x2},'ids':{'identifier':0x5},'where':{'kind':'stringContains','value':'${evidence_marker}'}},{'type':'identifier','identifier':0xfe}]}]},'applicable_industries':['delivery','logistics','local_life'],'relevant_risks':['R-X1-17','R-C3-05'],'creation_notes':['EXCLUSIVE\x20ADMISSION,\x20NOT\x20AUTHORIZATION:\x20the\x20edge\x27s\x20namedOperator\x20rail\x20(permission\x20layer)\x20and\x20this\x20guard\x20(guard\x20layer)\x20do\x20OPPOSITE\x20jobs\x20—\x20the\x20rail\x20lets\x20a\x20listed\x20rider\x20advance\x20WITHOUT\x20a\x20permission\x20entity;\x20the\x201575\x20predicate\x20BARS\x20every\x20unlisted\x20signer.\x20Ship\x20both:\x20the\x20rail\x20alone\x20is\x20authorization-only\x20(R-19:\x20an\x20unlisted\x20address\x20is\x20not\x20denied),\x20the\x20predicate\x20alone\x20is\x20meaningless\x20without\x20the\x20roster\x20rail\x20declaring\x20who\x20is\x20allowed\x20to\x20be\x20listed.','TASK-BINDING:\x20keep\x20the\x20order\x20object\x20on\x20slot\x20254\x20(b_submission=true,\x20object_type\x20Order).\x20Mounting\x20the\x201575\x20node\x20against\x20a\x20FREE\x20slot\x20is\x20the\x20T10\x20hijack\x20face\x20—\x20the\x20attacker\x20submits\x20their\x20OWN\x20rostered\x20order\x20and\x20advances\x20the\x20victim\x27s\x20forward\x20(compile\x20GUARD_IDENTITY_SLOT_NOT_TASKBOUND\x20now\x20covers\x20the\x20typed\x20node).','PROTOCOL\x20GATE\x20(v138):\x20query\x201575\x20is\x20behind\x20the\x20feature\x20flag\x20`enable_order_named_operator_member`\x20—\x20on\x20a\x20chain\x20without\x20it\x20the\x20guard\x20evaluation\x20aborts.\x20Check\x20wowok_buildin_info\x20info=\x27upgrade_check\x27\x20(build_stamp.chain_stamp)\x20before\x20building\x20on\x20it;\x20the\x20abort\x20is\x20fail-closed\x20(the\x20forward\x20freezes,\x20it\x20never\x20silently\x20opens).','WRITE-SIDE\x20BINDING\x20IS\x20STILL\x20MANDATORY\x20(R-X1-17):\x20the\x20evidence\x20leg\x20inherits\x20tpl_repository_row_present\x27s\x20discipline\x20—\x20bind\x20the\x20evidence\x20policy\x27s\x20write_guard\x20to\x20the\x20credentialed\x20writer\x20(merchant\x20staff),\x20the\x20RIDER\x20writes\x20nothing;\x20the\x20roster\x20authorizes\x20the\x20rider\x27s\x20FORWARD,\x20never\x20a\x20repository\x20write.','ROSTER\x20BUDGET:\x20the\x20per-order\x20namedOperator\x20roster\x20is\x20written\x20at\x20runtime\x20by\x20the\x20permission-221\x20holder\x20(max\x2060\x20rosters\x20/\x2080\x20addresses\x20per\x20Progress\x20object)\x20—\x20the\x20dispatch\x20duty\x20stays\x20an\x20OFF-CHAIN\x20keeper\x20task\x20(K-4);\x20disclose\x20it\x20(NAMED_OPERATOR_ROSTER_UNDISCLOSED).','INIT-NODE\x20ROSTER\x20ENTRY:\x20the\x20roster\x20the\x201575\x20predicate\x20reads\x20ALSO\x20contains\x20the\x20entry\x20seeded\x20at\x20Progress\x20creation\x20—\x20the\x20Progress-creation\x20entry\x20point\x20registers\x20the\x20calling\x20address\x20under\x20the\x20empty-string\x20init\x20node\x20name,\x20and\x20that\x20caller\x20is\x20usually\x20the\x20order\x20owner\x20side\x20—\x20so\x20the\x20predicate\x20passes\x20for\x20that\x20address\x20as\x20well.\x20The\x20forward\x27s\x20EXCLUSIVITY\x20therefore\x20still\x20leans\x20on\x20the\x20upstream\x20identity\x20rail\x20(the\x20namedOperator\x20rail\x20declaring\x20who\x20may\x20be\x20listed);\x20this\x20gate\x20bars\x20the\x20unlisted,\x20it\x20does\x20not\x20unseat\x20the\x20seeded\x20entry.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Food\x20delivery:\x20the\x20ready\x20->\x20picked_up\x20forward\x20(namedOperator\x20\x27courier\x27)\x20mounts\x20this\x20gate\x20—\x20the\x20dispatched\x20'+'rider\x20advances\x20only\x20when\x20(1)\x20the\x20kernel\x20sees\x20their\x20signer\x20on\x20the\x20order\x27s\x20\x27courier\x27\x20roster\x20(1575)\x20and\x20'+'(2)\x20the\x20merchant\x20staff\x27s\x20pickup\x20handover\x20row\x20(marker\x20\x27PickupOrder\x27)\x20exists\x20in\x20the\x20evidence\x20Repository.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_lock_absolute_ms','scene_id':'machine_forward_guard','name':'Absolute-deadline\x20time\x20lock\x20(opening\x20gate)','description':'Gates\x20a\x20forward\x20on\x20ONE\x20shared\x20absolute\x20timestamp:\x20the\x20chain\x20Clock\x20must\x20be\x20>=\x20a\x20fixed\x20epoch-ms\x20deadline\x20'+'(a\x20Guard\x20constant,\x20identical\x20for\x20every\x20order\x20—\x20a\x20campaign\x20end,\x20an\x20offer\x20expiry,\x20a\x20booking\x20close).\x20'+'Opening-gate\x20direction\x20(greater_or_equal):\x20the\x20forward\x20stays\x20BLOCKED\x20until\x20the\x20deadline\x20passes\x20—\x20'+'crowdfunding\x20release,\x20presale\x20settlement,\x20schedule\x20opening.\x20Executable\x20form\x20of\x20'+'pattern.time_lock_absolute;\x20the\x20closing-window\x20twin\x20(act\x20only\x20UNTIL\x20the\x20deadline)\x20is\x20'+'tpl_time_window_upper_absolute_ms,\x20and\x20the\x20per-order\x20entry-anchored\x20twin\x20is\x20tpl_time_lock_progress.','recommended_patterns':['P06'],'parameters':[{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20the\x20gated\x20action\x20opens\x20when\x20Clock\x20>=\x20it.\x20SAME\x20value\x20for\x20every\x20order\x20—\x20one\x20campaign,\x20one\x20deadline','required':!![],'constraint':'Plain\x20integer\x20epoch\x20milliseconds,\x20e.g.\x20\x271793100000000\x27.\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20pattern.time_source_repository_oracle\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20calendar\x20date\x20and\x20document\x20the\x20source'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20deadline\x20(epoch\x20ms)\x20—\x20ONE\x20shared\x20timestamp\x20for\x20every\x20order'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x0}]},'applicable_industries':['crowdfunding','retail','ecommerce','subscription'],'relevant_risks':[],'creation_notes':['ABSOLUTE,\x20NOT\x20PER-ORDER\x20(gfm31\x20T04\x20/\x20rex3\x20F-01):\x20identifier\x200\x20is\x20ONE\x20campaign-wide\x20epoch-ms\x20constant.\x20Do\x20NOT\x20bind\x20an\x20entry+duration\x20lock\x20(tpl_time_lock_progress,\x201280\x20anchor)\x20when\x20the\x20business\x20means\x20a\x20shared\x20deadline\x20—\x20per-order\x20anchoring\x20gives\x20every\x20participant\x20a\x20different\x20deadline\x20and\x20RE-ARMS\x20the\x20window\x20on\x20every\x20progress\x20write\x20(a\x20merchant-controlled\x20re-schedule\x20=\x20self-renewal).\x20For\x20a\x20real-world\x20calendar\x20deadline\x20bind\x20pattern.time_source_repository_oracle\x20and\x20document\x20the\x20time\x20source.','DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20deadline]\x20encodes\x20an\x20OPENING\x20gate\x20(blocked\x20until\x20the\x20deadline).\x20For\x20a\x20CLOSING\x20window\x20(act\x20only\x20UNTIL\x20the\x20deadline)\x20use\x20tpl_time_window_upper_absolute_ms\x20—\x20inverting\x20the\x20comparison\x20makes\x20the\x20gate\x20permanently\x20open.','ONE\x20GUARD\x20SERVES\x20EVERY\x20ORDER:\x20the\x20deadline\x20is\x20a\x20Guard\x20constant,\x20so\x20no\x20per-order\x20state\x20is\x20read\x20—\x20but\x20the\x20guard\x20is\x20still\x20task-bound\x20(slot\x20254)\x20and\x20fires\x20per\x20order.\x20A\x20deadline\x20CHANGE\x20after\x20publish\x20is\x20impossible\x20(Guards\x20are\x20immutable,\x20IMMUT-001):\x20freeze\x20the\x20timestamp\x20BEFORE\x20publish\x20(gfm31\x20P0①:\x20the\x20deadline\x20must\x20be\x20settled\x20at\x20build\x20time,\x20and\x20late-arriving\x20buys\x20are\x20intercepted\x20on\x20the\x20buy\x20side,\x20not\x20by\x20moving\x20this\x20gate).','CHAIN\x20CLOCK\x20IS\x20COARSE:\x20block-driven\x20Clock\x20can\x20lag\x20wall\x20time\x20by\x20seconds-to-minutes\x20—\x20never\x20gate\x20a\x20sub-minute\x20race\x20on\x20it.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Flexible\x20keep-it-all\x20campaign:\x20every\x20backer\x27s\x20release\x20advance\x20(pledged\x20→\x20released)\x20is\x20gated\x20on\x20Clock\x20>=\x20'+'campaign_deadline_ms\x20—\x20ONE\x20absolute\x20timestamp\x20shared\x20by\x20every\x20funder,\x20so\x20the\x20deadline\x20cannot\x20drift\x20per\x20'+'order\x20and\x20no\x20progress\x20write\x20can\x20re-arm\x20it;\x20the\x20paired\x20withdrawal\x20window\x20closes\x20on\x20the\x20SAME\x20timestamp\x20'+'(tpl_time_window_upper_absolute_ms),\x20making\x20release\x20and\x20withdrawal\x20mutually\x20exclusive\x20in\x20time\x20(D-BUG-2).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_order_holder_time_lock_absolute','scene_id':'machine_forward_guard','name':'Absolute-deadline\x20time\x20lock\x20+\x20order-holder\x20identity\x20(buyer-driven\x20release)','description':'Gates\x20a\x20forward\x20on\x20ONE\x20shared\x20absolute\x20timestamp\x20AND\x20the\x20order-holder\x20identity\x20set:\x20the\x20chain\x20Clock\x20must\x20'+'be\x20>=\x20a\x20fixed\x20epoch-ms\x20deadline\x20(a\x20Guard\x20constant,\x20identical\x20for\x20every\x20order)\x20AND\x20the\x20Signer\x20must\x20be\x20the\x20'+'order\x20owner\x20or\x20a\x20registered\x20agent\x20(read\x20at\x20the\x20254\x20task-binding\x20slot).\x20The\x20identity-bearing\x20twin\x20of\x20'+'tpl_time_lock_absolute_ms\x20for\x20buyer-driven\x20release/self-heal\x20edges\x20(force-release\x20after\x20deadline):\x20the\x20'+'identity\x20leg\x20is\x20NOT\x20optional\x20there\x20—\x20namedOperator\x20\x22\x22\x20is\x20metadata,\x20never\x20an\x20authorization,\x20and\x20a\x20'+'deadline-only\x20guard\x20lets\x20ANY\x20signer\x20advance\x20the\x20order\x27s\x20settlement\x20(gfm35\x20F02\x20live).\x20Mount\x20the\x20pure\x20'+'tpl_time_lock_absolute_ms\x20on\x20the\x20keeper/merchant\x20release\x20edge\x20under\x20a\x20DISTINCT\x20guard\x20key,\x20reading\x20the\x20'+'SAME\x20campaign_deadline_ms,\x20so\x20the\x20self-heal\x20opens\x20exactly\x20when\x20the\x20keeper\x20rail\x20does.','recommended_patterns':['P06','P16'],'parameters':[{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20the\x20gated\x20action\x20opens\x20when\x20Clock\x20>=\x20it.\x20SAME\x20value\x20for\x20every\x20order\x20—\x20one\x20campaign,\x20one\x20deadline','required':!![],'constraint':'Plain\x20integer\x20epoch\x20milliseconds,\x20e.g.\x20\x271793100000000\x27.\x20Bind\x20the\x20SAME\x20value\x20the\x20keeper-side\x20release\x20gate\x20reads\x20—\x20the\x20self-heal\x20and\x20the\x20keeper\x20advance\x20must\x20open\x20on\x20one\x20timestamp'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20deadline\x20(epoch\x20ms)\x20—\x20ONE\x20shared\x20timestamp\x20for\x20every\x20order'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation\x20—\x20the\x20identity\x20legs\x20read\x20THIS\x20slot)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x0}]}]},'applicable_industries':['crowdfunding','retail','ecommerce','subscription'],'relevant_risks':[],'creation_notes':['IDENTITY\x20IS\x20THE\x20AUTHORIZATION\x20on\x20a\x20buyer\x20release\x20edge\x20(gfm35-tn-261029\x20F02):\x20the\x20chain\x27s\x20passport-aware\x20permission\x20assert\x20is\x20SKIPPED\x20(permissionNeeded=false)\x20when\x20permissionIndex\x20is\x20none,\x20and\x20the\x20order_payer\x20rail\x20compiles\x20to\x20namedOperator\x20\x22\x22\x20with\x20no\x20index\x20—\x20the\x20guard\x20predicate\x20is\x20the\x20ONLY\x20gate.\x20Mounting\x20this\x20fused\x20form\x20on\x20the\x20force-release\x20edge\x20closes\x20it\x20to\x20everyone\x20but\x20the\x20order\x20holder;\x20compile\x20hard-blocks\x20the\x20pure\x20time\x20lock\x20there\x20(RELEASE_EDGE_NO_IDENTITY).','SPLIT\x20THE\x20KEYS\x20(compile\x20FORWARD_GUARD_IDENTITY_PERM_CONFLICT):\x20the\x20keeper/merchant\x20release\x20edge\x20rides\x20permission_index\x201002\x20—\x20an\x20order-holder\x20identity\x20guard\x20there\x20has\x20a\x20disjoint\x20signer\x20set\x20and\x20bricks\x20the\x20build.\x20Two\x20DISTINCT\x20guard\x20keys\x20over\x20ONE\x20campaign_deadline_ms:\x20pure\x20tpl_time_lock_absolute_ms\x20on\x20the\x20keeper\x20edge,\x20this\x20fused\x20twin\x20on\x20the\x20buyer\x20edge.','DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20deadline]\x20is\x20the\x20OPENING\x20gate\x20(blocked\x20until\x20the\x20deadline)\x20—\x20same\x20polarity\x20as\x20the\x20keeper\x20twin,\x20so\x20the\x20self-heal\x20opens\x20exactly\x20when\x20the\x20keeper\x20rail\x20does;\x20inverting\x20it\x20makes\x20the\x20gate\x20permanently\x20open.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20the\x20identity\x20legs\x20read\x20it\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Flexible\x20keep-it-all\x20campaign:\x20the\x20backer\x27s\x20force-release\x20self-heal\x20(pledged\x20->\x20released\x20once\x20Clock\x20>=\x20'+'campaign_deadline_ms,\x20when\x20no\x20keeper\x20ran)\x20is\x20gated\x20on\x20the\x20deadline\x20AND\x20Signer\x20∈\x20{order.owner,\x20order\x20'+'agents}\x20—\x20after\x20the\x20deadline\x20any\x20BACKER\x20can\x20drive\x20their\x20own\x20release,\x20but\x20no\x20stranger\x20can\x20force\x20'+'settlement\x20on\x20someone\x20else\x27s\x20pledge.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_upper_absolute_ms','scene_id':'machine_forward_guard','name':'Absolute-deadline\x20window\x20bound\x20+\x20order-holder\x20identity\x20(closing\x20window)','description':'Gates\x20a\x20forward\x20to\x20a\x20window\x20that\x20CLOSES\x20on\x20ONE\x20shared\x20absolute\x20timestamp:\x20the\x20chain\x20Clock\x20must\x20be\x20<=\x20a\x20'+'fixed\x20epoch-ms\x20deadline\x20(a\x20Guard\x20constant,\x20identical\x20for\x20every\x20order),\x20ANDed\x20with\x20the\x20order-holder\x20'+'identity\x20set\x20(owner\x20or\x20registered\x20agent,\x20read\x20at\x20the\x20254\x20task-binding\x20slot).\x20Closing-window\x20direction\x20'+'(lesser_or_equal):\x20the\x20forward\x20is\x20allowed\x20only\x20WHILE\x20the\x20campaign/offer\x20is\x20live\x20—\x20pledge\x20withdrawal,\x20'+'claim\x20windows,\x20early-bird\x20pricing;\x20after\x20the\x20deadline\x20the\x20forward\x20aborts.\x20The\x20identity\x20leg\x20is\x20NOT\x20'+'optional\x20on\x20a\x20buyer\x20exit\x20(etsy-aurelia\x20F-01):\x20the\x20edge\x27s\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20'+'authorization\x20—\x20without\x20it\x20a\x20stranger\x20could\x20drive\x20the\x20withdrawal\x20for\x20a\x20backer\x20and\x20drain\x20the\x20pledge\x20'+'mid-campaign.\x20Executable\x20form\x20of\x20pattern.time_window_upper_bound\x20with\x20an\x20ABSOLUTE\x20anchor\x20+\x20'+'pattern.identity_check_order_holder;\x20the\x20opening-gate\x20twin\x20is\x20tpl_time_lock_absolute_ms,\x20and\x20the\x20'+'per-order\x20entry-anchored\x20twin\x20is\x20tpl_time_window_upper.','recommended_patterns':['P06'],'parameters':[{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20the\x20gated\x20action\x20closes\x20when\x20Clock\x20>=\x20it.\x20SAME\x20value\x20for\x20every\x20order\x20—\x20one\x20campaign,\x20one\x20deadline','required':!![],'constraint':'Plain\x20integer\x20epoch\x20milliseconds,\x20e.g.\x20\x271793100000000\x27.\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20pattern.time_source_repository_oracle\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20calendar\x20date\x20and\x20document\x20the\x20source'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20deadline\x20(epoch\x20ms)\x20—\x20ONE\x20shared\x20timestamp\x20closing\x20the\x20window\x20for\x20every\x20order'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation\x20—\x20the\x20identity\x20legs\x20read\x20THIS\x20slot)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x0}]}]},'applicable_industries':['crowdfunding','retail','ecommerce','subscription'],'relevant_risks':[],'creation_notes':['ABSOLUTE,\x20NOT\x20PER-ORDER\x20(gfm31\x20T04\x20/\x20rex3\x20F-01):\x20identifier\x200\x20is\x20ONE\x20campaign-wide\x20epoch-ms\x20constant.\x20Do\x20NOT\x20anchor\x20a\x20closing\x20window\x20on\x20node\x20entry+duration\x20when\x20the\x20business\x20means\x20a\x20shared\x20deadline\x20—\x20per-order\x20anchoring\x20reopens\x20the\x20window\x20on\x20every\x20re-entry\x20(rex3\x20F-03:\x20a\x20rejected\x20return\x20restarted\x20the\x20return\x20window).\x20The\x20closing\x20anchor\x20MUST\x20be\x20the\x20SAME\x20timestamp\x20the\x20paired\x20opening\x20gate\x20reads\x20(D-BUG-2:\x20release\x20opens\x20at\x20the\x20deadline\x20exactly\x20when\x20withdrawal\x20closes).','DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06):\x20lesser_or_equal[Clock,\x20deadline]\x20encodes\x20a\x20CLOSING\x20window\x20(allowed\x20only\x20until\x20the\x20deadline,\x20aborts\x20after).\x20For\x20an\x20OPENING\x20gate\x20use\x20tpl_time_lock_absolute_ms\x20—\x20inverting\x20the\x20comparison\x20makes\x20the\x20window\x20permanently\x20closed.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer\x20exits\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20deadline-only\x20guard\x20lets\x20ANY\x20signer\x20drive\x20the\x20backer\x27s\x20withdrawal\x20mid-campaign.\x20The\x20owner/agent\x20identity\x20legs\x20ship\x20IN\x20example_root\x20over\x20the\x20254\x20task-binding\x20slot;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.','PAIR\x20THE\x20POLARITIES\x20ON\x20ONE\x20TIMESTAMP\x20(gfm31\x20O5):\x20mount\x20this\x20closing\x20gate\x20on\x20the\x20buyer\x20exit\x20(pledged\x20→\x20withdrawn)\x20and\x20tpl_time_lock_absolute_ms\x20on\x20the\x20settlement\x20(pledged\x20→\x20released)\x20with\x20the\x20SAME\x20campaign_deadline_ms\x20—\x20after\x20the\x20deadline\x20the\x20exit\x20aborts\x20and\x20the\x20release\x20opens,\x20so\x20late\x20liquidity\x20cannot\x20dodge\x20the\x20keep-it-all\x20posture.\x20For\x20a\x20real-world\x20calendar\x20deadline\x20bind\x20pattern.time_source_repository_oracle\x20and\x20document\x20the\x20time\x20source.','CHAIN\x20CLOCK\x20IS\x20COARSE:\x20block-driven\x20Clock\x20can\x20lag\x20wall\x20time\x20by\x20seconds-to-minutes\x20—\x20never\x20gate\x20a\x20sub-minute\x20race\x20on\x20it.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Flexible\x20keep-it-all\x20campaign:\x20the\x20backer\x27s\x20withdrawal\x20(pledged\x20→\x20withdrawn)\x20is\x20gated\x20on\x20the\x20order\x20'+'holder\x20acting\x20while\x20Clock\x20<=\x20campaign_deadline_ms\x20—\x20the\x20window\x20closes\x20exactly\x20when\x20the\x20shared\x20'+'release\x20gate\x20opens,\x20so\x20a\x20backer\x20(and\x20only\x20the\x20backer)\x20can\x20exit\x20while\x20the\x20campaign\x20is\x20live\x20and\x20the\x20'+'keeper\x20self-heal\x20release\x20is\x20unreachable\x20before\x20the\x20deadline.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_band_abs_order_holder','scene_id':'machine_forward_guard','name':'Service-start\x20band\x20window\x20+\x20order-holder\x20identity\x20(tiered-exit\x20form)','description':'Gates\x20a\x20forward\x20to\x20ONE\x20band\x20of\x20the\x20notice\x20span\x20before\x20a\x20SHARED\x20absolute\x20service\x20start:\x20the\x20chain\x20Clock\x20'+'must\x20satisfy\x20[lower_hours\x20=\x200?]\x20...\x20start\x20-\x20upper_hours\x20<\x20Clock\x20<=\x20start\x20-\x20lower_hours,\x20ANDed\x20with\x20the\x20'+'order-holder\x20identity\x20set\x20(owner\x20or\x20registered\x20agent,\x20read\x20at\x20the\x20254\x20task-binding\x20slot).\x20The\x20'+'instantiable\x20form\x20of\x20a\x20cancellation\x20FEE\x20LADDER:\x20mount\x20one\x20forward\x20per\x20band,\x20each\x20with\x20its\x20own\x20charge\x20'+'allocator,\x20so\x20\x27cancel\x207+\x20days\x20out\x20=\x205%,\x203-7\x20days\x20=\x2020%,\x201-3\x20days\x20=\x2050%,\x20under\x2024h\x20=\x2070%\x27\x20is\x20four\x20'+'guards\x20over\x20one\x20anchor\x20instead\x20of\x20one\x20prose\x20formula\x20the\x20chain\x20cannot\x20enforce.\x20An\x20absolute\x20anchor\x20is\x20'+'what\x20makes\x20the\x20bands\x20stable\x20(re-entries\x20and\x20late\x20bookings\x20cannot\x20shift\x20them);\x20the\x20identity\x20leg\x20is\x20not\x20'+'optional\x20on\x20a\x20buyer\x20exit\x20(etsy-aurelia\x20F-01).\x20Instantiable\x20form\x20of\x20pattern.time_window_upper_bound\x20'+'with\x20two\x20bounds\x20+\x20pattern.identity_check_order_holder.','recommended_patterns':['P06','P10','P16'],'parameters':[{'name':'service_start_ms','type':'number','description':'Absolute\x20service/experience\x20start\x20as\x20an\x20epoch-ms\x20timestamp.\x20SAME\x20value\x20for\x20every\x20order\x20—\x20one\x20departure,\x20one\x20date\x20(the\x20crowdfunding\x20campaign_deadline_ms\x20doctrine)','required':!![],'constraint':'Plain\x20integer\x20epoch\x20milliseconds,\x20e.g.\x20\x271793100000000\x27.\x20NOT\x20a\x20per-order\x20duration:\x20a\x20per-order\x20anchor\x20lets\x20a\x20re-entry\x20(or\x20a\x20late\x20booking)\x20reopen\x20the\x20band.\x20Compile\x20names\x20merge\x20this\x20from\x20fee_params[\x27service_start_ms\x27];\x20a\x20default\x20of\x200\x20fails\x20every\x20band\x20closed,\x20so\x20the\x20builder\x20MUST\x20set\x20it'},{'name':'lower_hours','type':'number','description':'Lower\x20notice\x20bound\x20in\x20hours:\x20the\x20forward\x20passes\x20only\x20while\x20start\x20-\x20Clock\x20>=\x20lower_hours','required':!![],'constraint':'0\x20admits\x20the\x20whole\x20run-up\x20to\x20the\x20start\x20(the\x20innermost\x20band);\x20the\x20template\x20converts\x20to\x20ms\x20(x\x203600000)\x20and\x20ADDS\x20to\x20Clock\x20—\x20it\x20never\x20subtracts\x20from\x20the\x20anchor\x20(a\x20future\x20anchor\x20underflows\x20calc_number_subtract)'},{'name':'upper_hours','type':'number','description':'Upper\x20notice\x20bound\x20in\x20hours\x20(exclusive):\x20the\x20forward\x20passes\x20only\x20while\x20start\x20-\x20Clock\x20<\x20upper_hours.\x20Absent\x20or\x20\x270\x27\x20=\x20open-ended\x20band\x20(no\x20upper\x20leg)','required':![],'constraint':'Must\x20be\x20>\x20lower_hours\x20when\x20set;\x20equal\x20bounds\x20ship\x20an\x20empty\x20band\x20that\x20can\x20never\x20pass.\x20\x270\x27/omitted\x20drops\x20the\x20leg\x20AND\x20its\x20table\x20row\x20before\x20substitution'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U64','value':'${service_start_ms}','name':'Absolute\x20service\x20start\x20(epoch\x20ms)\x20—\x20ONE\x20shared\x20timestamp\x20for\x20every\x20order\x20of\x20this\x20departure'},{'identifier':0x1,'b_submission':![],'value_type':'U64','value':'${lower_hours}','name':'Lower\x20notice\x20bound\x20in\x20hours\x20(start\x20-\x20Clock\x20>=\x20this)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':0x36ee80,'name':'Hours-to-milliseconds\x20constant'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${upper_hours}','name':'Upper\x20notice\x20bound\x20in\x20hours\x20(start\x20-\x20Clock\x20<\x20this;\x20row\x20dropped\x20when\x20open-ended)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation\x20—\x20the\x20identity\x20legs\x20read\x20THIS\x20slot)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'calc_number_add','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x1},{'type':'identifier','identifier':0x2}]}]},{'type':'identifier','identifier':0x0}]},{'type':'logic_as_u256_lesser','nodes':[{'type':'identifier','identifier':0x0},{'type':'calc_number_add','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x2}]}]}]}]},'applicable_industries':['travel','rental','ecommerce'],'relevant_risks':['R-C3-01','R-C3-05'],'creation_notes':['ABSOLUTE,\x20SHARED\x20START\x20(crowdfunding\x20campaign_deadline_ms\x20doctrine):\x20identifier\x200\x20is\x20ONE\x20epoch-ms\x20timestamp\x20for\x20the\x20whole\x20Service/departure,\x20read\x20from\x20fee_params[\x27service_start_ms\x27]\x20by\x20name\x20merge.\x20Do\x20NOT\x20re-anchor\x20a\x20band\x20on\x20order.time\x20or\x20on\x20node\x20entry:\x20a\x20per-order\x20anchor\x20rotates\x20with\x20every\x20booking\x20(a\x20late\x20booker\x20would\x20land\x20in\x20the\x20cheap\x20band,\x20klk15-ln-261023)\x20and\x20a\x20node\x20anchor\x20reopens\x20the\x20band\x20on\x20every\x20re-entry.\x20One\x20date,\x20four\x20bands,\x20one\x20immutable\x20anchor.','BAND\x20ALGEBRA\x20(all\x20four\x20tiers,\x20one\x20anchor):\x20T1\x20notice\x20>=\x20L_1\x20and\x20open-ended;\x20T2\x20L_2\x20<=\x20notice\x20<\x20L_1;\x20T3\x20L_3\x20<=\x20notice\x20<\x20L_2;\x20T4\x200\x20<=\x20notice\x20<\x20L_3\x20—\x20where\x20notice\x20=\x20start\x20-\x20Clock.\x20Each\x20row\x20is\x20ONE\x20forward\x20with\x20ONE\x20band;\x20the\x20tiers\x20are\x20distinguished\x20by\x20their\x20GUARDS,\x20never\x20by\x20a\x20`tier`\x20parameter\x20inside\x20one\x20guard\x20(the\x20chain\x20has\x20no\x20per-call\x20dispatch:\x20a\x20single\x20guard\x20admitting\x20all\x20four\x20would\x20charge\x20one\x20price).\x20Ship\x20a\x20charge\x20allocator\x20per\x20band\x20so\x20the\x20fee\x20ladder\x20is\x20executable.','ADD-ONLY\x20ARITHMETIC:\x20the\x20comparison\x20is\x20calc_number_add[Clock,\x20hours*3600000]\x20<=\x20start.\x20NEVER\x20rewrite\x20it\x20as\x20start\x20-\x20Clock:\x20start\x20is\x20in\x20the\x20FUTURE,\x20so\x20calc_number_subtract\x20underflows\x20a\x20U64\x20and\x20the\x20leg\x20fails\x20closed\x20forever\x20(klk15-ln-261023\x20§F).\x20Never\x20use\x20logic_as_u256_greater_or_equal\x20with\x20a\x20subtraction\x20either.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer\x20exits\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20band-only\x20guard\x20lets\x20ANY\x20signer\x20drive\x20the\x20buyer\x27s\x20cancel\x20(and\x20pick\x20the\x20cheapest\x20band).\x20The\x20owner/agent\x20legs\x20ship\x20IN\x20example_root\x20over\x20the\x20254\x20task-binding\x20slot;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.\x20Bind\x20this\x20guard\x20to\x20an\x20order_payer\x20edge:\x20the\x20identity\x20layer\x20runs\x20BEFORE\x20the\x20guard,\x20so\x20a\x20permissionIndex\x20or\x20named_operator\x20rail\x20is\x20disjoint\x20and\x20nobody\x20could\x20pass\x20both\x20(FORWARD_GUARD_IDENTITY_PERM_CONFLICT).','zero\x20service_start_ms\x20FAILS\x20EVERY\x20BAND\x20CLOSED:\x20the\x20fee_param\x20ships\x200\x20(a\x20template\x20cannot\x20know\x20the\x20date)\x20and\x20Clock\x20+\x20N\x20hours\x20<=\x200\x20is\x20false,\x20so\x20all\x20tier\x20rails\x20abort\x20until\x20the\x20builder\x20sets\x20the\x20real\x20start.\x20That\x20is\x20the\x20intended\x20fail-closed\x20default\x20—\x20the\x20build\x20note\x20must\x20disclose\x20it.\x20Set\x20the\x20value\x20at\x20generation\x20(fee_overrides[\x27service_start_ms\x27]\x20=\x20<epoch\x20ms>).','CHAIN\x20CLOCK\x20IS\x20COARSE:\x20block-driven\x20Clock\x20can\x20lag\x20wall\x20time\x20by\x20seconds-to-minutes\x20—\x20never\x20gate\x20a\x20sub-minute\x20race\x20on\x20it,\x20and\x20keep\x20band\x20boundaries\x20at\x20least\x20a\x20few\x20minutes\x20apart.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Dated\x20experience\x20with\x20a\x20cancellation\x20fee\x20ladder:\x20paid\x20->\x20cancelled_t1\x20(>=\x207\x20days\x20out,\x205%\x20charge),\x20'+'cancelled_t2\x20(3-7\x20days,\x2020%),\x20cancelled_t3\x20(1-3\x20days,\x2050%),\x20cancelled_t4\x20(<\x2024h,\x2070%)\x20—\x20four\x20forwards,\x20'+'four\x20band\x20guards\x20over\x20the\x20SAME\x20service_start_ms,\x20four\x20charge\x20allocators;\x20the\x20buyer\x20keeps\x20the\x20remainder\x20'+'and\x20only\x20the\x20order\x20holder\x20(or\x20their\x20agent)\x20can\x20drive\x20any\x20of\x20the\x20four.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_repository_review_decision_gate','scene_id':'reward_claim','name':'Merchant\x20review-decision\x20gate','description':'Gates\x20a\x20review\x20bounty\x20on\x20an\x20explicit\x20merchant\x20approval:\x20the\x20claim\x20passes\x20only\x20when\x20the\x20review\x20repository\x27s\x20\x27review_decision\x27\x20policy\x20holds\x20a\x20U64\x20decision\x20row\x20FOR\x20THE\x20SUBMITTED\x20ORDER\x20with\x20value\x20>=\x20the\x20promised\x20payout.\x20The\x20matched-row\x20set\x20is\x20pinned\x20to\x20the\x20submitted\x20order\x20via\x20vec_contains_address,\x20so\x20candidate-list\x20padding\x20cannot\x20borrow\x20another\x20order\x27s\x20approval.\x20Pairs\x20with\x20the\x20compile-emitted\x20write\x20side\x20(review_mode\x20\x27review_reward\x27\x20professional\x20form).','recommended_patterns':['P13'],'parameters':[{'name':'review_repository','type':'address','description':'The\x20review\x20Repository\x20emitted\x20by\x20the\x20build\x20plan\x20(name\x20suffix\x20\x27_review\x27);\x20pass\x20its\x20LocalMark\x20name\x20or\x20address','required':!![]},{'name':'min_payout','type':'number','description':'Approved-payout\x20floor\x20(U64,\x20smallest\x20units)\x20a\x20decision\x20row\x20must\x20carry\x20to\x20count\x20as\x20approval\x20—\x20set\x20it\x20to\x20the\x20promised\x20per-order\x20bounty','required':!![],'constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x271000000000\x27.\x20Must\x20equal\x20the\x20payout\x20the\x20reward\x20claim\x20actually\x20pays'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Claimed\x20order\x20(submission\x20slot\x200\x20—\x20also\x20the\x20replay\x20stamp\x20slot)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${review_repository}','name':'Review\x20Repository\x20(plan-bound\x20—\x20NEVER\x20a\x20buyer-submitted\x20row)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'review_decision','name':'Decision\x20policy\x20key'},{'identifier':0x3,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20decision\x20rows\x20(buyer\x20submits\x20[order];\x20padding\x20is\x20neutralized\x20by\x20the\x20membership\x20pin)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${min_payout}','name':'Approved-payout\x20floor'}],'example_root':{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x1},'key':{'identifier':0x2},'ids':{'identifier':0x3},'where':{'kind':'range','valueMin':'${min_payout}'}},{'type':'identifier','identifier':0x0}]},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01'],'creation_notes':['COMPOSITION\x20(professional\x20review_reward\x20claim\x20root):\x20logic_and[\x20identity\x20leg\x20(Signer\x20==\x20order.owner),\x20THIS\x20decision\x20leg,\x20replay\x20leg\x20(structured\x20query_reward_record_exists\x20with\x20the\x20SV-2\x20per-order\x20stamp),\x20BKN-P2\x20positive-amount\x20leg\x20(order.amount\x20>=\x201)\x20].\x20The\x20decision\x20leg\x20ADDS\x20the\x20approval\x20requirement\x20on\x20top\x20of\x20the\x20mandatory\x20replay/idempotency\x20legs\x20—\x20it\x20replaces\x20nothing.','SUBSTITUTION-PROOF\x20BY\x20CONSTRUCTION:\x20the\x20ids\x20row\x20is\x20buyer-submitted,\x20so\x20padding\x20it\x20with\x20foreign\x20approved\x20orders\x20would\x20be\x20trivial\x20—\x20the\x20vec_contains_address\x20pin\x20makes\x20padding\x20USELESS:\x20the\x20matched\x20set\x20must\x20contain\x20the\x20SUBMITTED\x20order\x20(identifier\x200),\x20and\x20a\x20row\x20for\x20that\x20order\x20exists\x20only\x20if\x20the\x20merchant\x20approved\x20it.\x20Never\x20replace\x20the\x20pin\x20with\x20a\x20bare\x20count\x20>=\x201\x20over\x20the\x20candidates\x20(that\x20reopens\x20the\x20borrowed-approval\x20hole).','WRITE\x20SIDE\x20(compile-emitted,\x20do\x20not\x20hand-build):\x20the\x20plan\x20emits\x20guard\x20\x27guard_review_decision\x27\x20(service-provider\x20identity:\x20submitted\x20order\x20belongs\x20to\x20this\x20service,\x20submitted\x20Permission\x20==\x20service.permission,\x20signer\x20is\x20owner/admin)\x20and\x20the\x20repository\x20policy\x20\x27review_decision\x27\x20(id_from=None,\x20value_type=U64,\x20write_guard\x20bound).\x20The\x20merchant\x20approves\x20an\x20order\x20with\x20repository.data_add\x20{name:\x27review_decision\x27,\x20items:[{write_guard:\x27<guard_review_decision>\x27,\x20data:[{id:<order\x20address>,\x20data:<payout\x20U64>}]}]}\x20+\x20a\x20passport\x20submission\x20carrying\x20the\x20order\x20and\x20the\x20permission.','REPOSITORY\x20ROW\x20IS\x20PLAN-BOUND:\x20identifier\x201\x20is\x20a\x20static\x20row\x20resolved\x20to\x20the\x20plan-emitted\x20\x27_review\x27\x20repository\x20—\x20a\x20buyer-submitted\x20repository\x20row\x20would\x20let\x20the\x20claimant\x20present\x20a\x20self-controlled\x20repository\x20with\x20self-written\x20approvals\x20(fail-open).\x20Keep\x20it\x20static/plan-bound.','NO\x20QUOTE_GUARD\x20on\x20\x27review_decision\x27:\x20the\x20where-scan\x20(1176)\x20aborts\x20if\x20the\x20scanned\x20policy\x20is\x20quote-guard-protected\x20and\x20the\x20claim\x20passport\x20does\x20not\x20carry\x20it\x20in\x20its\x20impack\x20list.\x20Decision\x20rows\x20are\x20payout\x20amounts,\x20not\x20secrets\x20—\x20leave\x20the\x20policy\x20unprotected\x20so\x20claims\x20stay\x20simple.','UPPER\x20BOUND\x20IS\x20THE\x20PROMISE:\x20a\x20decision\x20row\x20value\x20BELOW\x20min_payout\x20does\x20not\x20pass\x20(partial\x20approval),\x20and\x20the\x20claim\x20pays\x20the\x20reward\x27s\x20fixed\x20per-claim\x20amount\x20regardless\x20—\x20set\x20min_payout\x20equal\x20to\x20the\x20promised\x20bounty\x20so\x20\x27approved\x27\x20and\x20\x27paid\x27\x20never\x20diverge.\x20Zero-value\x20rows\x20approve\x20nothing\x20(BKN-P2\x20keeps\x20zero-total\x20orders\x20out\x20entirely).'],'example_use_case':'Travel\x20service\x20with\x20a\x20review\x20bounty:\x20after\x20delivery\x20the\x20merchant\x20checks\x20the\x20review\x20and\x20writes\x20a\x20U64\x20approval\x20row\x20for\x20the\x20order\x20(>=\x20the\x20promised\x20bounty).\x20The\x20buyer\x27s\x20claim\x20passes\x20only\x20when\x20that\x20row\x20exists\x20for\x20THEIR\x20order\x20—\x20no\x20approval,\x20no\x20payout;\x20a\x20padded\x20candidate\x20list\x20borrows\x20nothing.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_reward_not_claimed','scene_id':'reward_claim','name':'Reward\x20not-claimed\x20replay\x20gate','description':'Minimal\x20once-per-recipient\x20replay\x20gate\x20for\x20a\x20Reward\x20claim:\x20passes\x20only\x20when\x20no\x20reward\x20record\x20exists\x20yet\x20for\x20the\x20claiming\x20signer\x20on\x20the\x20submitted\x20Reward\x20object.\x20Zero-parameter\x20building\x20block\x20—\x20compose\x20with\x20progress-node\x20and\x20identity\x20legs\x20(see\x20tpl_combined_reward_guard)\x20for\x20a\x20production\x20claim\x20guard.','recommended_patterns':['P13'],'parameters':[],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Reward','name':'Reward\x20object\x20being\x20claimed\x20from\x20(submitted\x20by\x20verifier\x20at\x20runtime)'}],'example_root':{'type':'logic_not','node':{'type':'query_reward_record_exists','object':{'identifier':0x0},'where':{}}},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01'],'creation_notes':['REPLAY\x20GATE\x20ONLY\x20(C11):\x20this\x20root\x20answers\x20exactly\x20one\x20question\x20—\x20has\x20THIS\x20signer\x20already\x20claimed\x20THIS\x20Reward?\x20It\x20carries\x20no\x20workflow\x20or\x20identity\x20teeth;\x20a\x20guard\x20made\x20of\x20only\x20this\x20leg\x20lets\x20any\x20address\x20holding\x20any\x20order\x20at\x20any\x20node\x20claim\x20first.\x20Compose\x20with\x20a\x20progress-node\x20leg\x20and\x20a\x20Signer==order.owner\x20leg\x20(see\x20tpl_combined_reward_guard)\x20before\x20binding\x20a\x20funded\x20pool.','STRUCTURED\x20NODE\x20FORM\x20(klk-mn-261013\x20F-05):\x20the\x20SDK\x20encodes\x20where:{}\x20as\x20[VecU8\x20marker][all-None\x20RecordQueryConditions];\x20recipient\x20defaults\x20to\x20the\x20Signer,\x20so\x20no\x20recipient\x20submission\x20row\x20is\x20needed.\x20NEVER\x20hand-write\x20the\x20raw\x20identifier\x20form\x20with\x20an\x20empty\x20VecU8\x20constant\x20—\x20empty\x20query\x20bytes\x20are\x20rejected\x20by\x20the\x20native\x20with\x20an\x20uncoded\x20MovePrimitiveRuntimeError\x20(\x27Query\x20bytes\x20is\x20empty\x27).','STAMP\x20(UPW-K7,\x20slot-aware):\x20even\x20a\x20once-per-recipient\x20gate\x20consumes\x20claim\x20records,\x20so\x20its\x20reward\x20guard_add\x20entry\x20needs\x20a\x20store_from_id\x20—\x20the\x20MCP\x20stamp\x20gate\x20rejects\x20unstamped\x20record-consuming\x20entries.\x20For\x20THIS\x20template\x27s\x20lifetime-once\x20scope\x20the\x20stamp\x20slot\x20is\x20the\x20submitted\x20Reward\x20address\x20(slot\x200\x20—\x20a\x20constant\x20per\x20pool,\x20so\x20the\x20native\x20once-slot\x20stays\x20per-(recipient,\x20guard));\x20for\x20PER-ORDER\x20scope\x20use\x20the\x20order-scoped\x20variant\x20instead\x20(where.storeFromId\x20+\x20the\x20submitted\x20Order\x20address\x20stamp\x20—\x20see\x20tpl_reward_one_time_claim\x20/\x20tpl_combined_reward_guard,\x20SV-2).\x20On-chain\x20an\x20unstamped\x20entry\x20is\x20accepted\x20but\x20writes\x20records\x20with\x20store_from\x20=\x20none,\x20which\x20matches\x20no\x20storeFromId\x20predicate\x20—\x20that\x20unstamped\x20shape\x20is\x20the\x20ONLY\x20context\x20where\x20the\x20ofn-mn-261012\x20F-01\x20\x27filter\x20is\x20inert\x27\x20verdict\x20ever\x20held\x20(azx7-mn-261014\x20live\x20T8\x20disproved\x20the\x20blanket\x20retraction).','Reward\x20guard\x20is\x20immutable\x20once\x20the\x20Reward\x20object\x20is\x20published\x20—\x20verify\x20this\x20guard\x20against\x20a\x20realistic\x20passport\x20BEFORE\x20publish\x20(F-03:\x20a\x20wrong\x20bound\x20guard\x20can\x20permanently\x20brick\x20the\x20claim\x20path).'],'example_use_case':'A\x20referral\x20bounty\x20pool:\x20the\x20first\x20claim\x20from\x20any\x20given\x20address\x20passes\x20the\x20not-claimed\x20gate;\x20a\x20second\x20claim\x20attempt\x20by\x20the\x20same\x20address\x20aborts\x20because\x20a\x20reward\x20record\x20already\x20exists\x20for\x20that\x20recipient.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_combined_reward_guard','scene_id':'reward_claim','name':'Combined\x20reward\x20claim\x20guard\x20(node\x20+\x20owner\x20+\x20not-claimed)','description':'Production\x20reward\x20claim\x20gate:\x20order\x20at\x20the\x20expected\x20progress\x20node\x20+\x20signer\x20is\x20the\x20order\x20owner\x20+\x20order\x20belongs\x20to\x20THIS\x20store\x27s\x20Service\x20(KTT3-F15)\x20+\x20reward\x20not\x20yet\x20claimed\x20by\x20this\x20signer.\x20The\x20four\x20legs\x20of\x20tpl_reward_one_time_claim\x27s\x20order-state\x20family,\x20as\x20a\x20standalone\x20composable\x20template.','recommended_patterns':['P07','P13'],'parameters':[{'name':'expected_node','type':'string','description':'Machine\x20node\x20name\x20at\x20which\x20claiming\x20is\x20allowed\x20(e.g.\x20\x27reviewed\x27)','required':!![]},{'name':'service_name','type':'address','description':'Host\x20Service\x20object\x20name\x20or\x20address\x20(P16\x20circular\x20ref\x20—\x20resolved\x20by\x20the\x20SDK\x20after\x20the\x20Service\x20exists).\x20KTT3-F15\x20STORE\x20BINDING:\x20a\x20reward\x20claim\x20has\x20no\x20chain-side\x20Service\x20context,\x20so\x20without\x20this\x20leg\x20any\x20order\x20at\x20the\x20expected\x20node\x20from\x20ANY\x20store\x20passes\x20the\x20node/owner\x20legs\x20and\x20drains\x20the\x20pool\x20cross-store.\x20The\x20kernel\x20seeds\x20the\x20plan\x27s\x20service\x20name\x20automatically;\x20hand-fills\x20MUST\x20pass\x20it','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Expected\x20pre-claim\x20node\x20name\x20(e.g.\x20\x27reviewed\x27)'},{'identifier':0x2,'b_submission':!![],'value_type':'Address','object_type':'Reward','name':'Reward\x20object\x20being\x20claimed\x20from\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x3,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Host\x20Service\x20object\x20(KTT3-F15\x20store\x20binding\x20—\x20the\x20bounty\x20pays\x20only\x20for\x20THIS\x20store\x27s\x20orders)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.service','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_not','node':{'type':'query_reward_record_exists','object':{'identifier':0x2},'where':{'storeFromId':{'identifier':0x0}}}}]},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01','R-X1-10'],'creation_notes':['FOUR\x20LEGS,\x20FOUR\x20THEFT\x20PATHS\x20CLOSED:\x20the\x20progress-node\x20leg\x20blocks\x20claiming\x20before\x20the\x20workflow\x20reaches\x20the\x20claim\x20point;\x20the\x20identity\x20leg\x20blocks\x20a\x20non-owner\x20holding/forwarding\x20an\x20order\x20at\x20the\x20right\x20node\x20from\x20draining\x20the\x20pool\x20(audit-261012\x20B5);\x20the\x20KTT3-F15\x20store-binding\x20leg\x20blocks\x20a\x20completed\x20order\x20from\x20ANOTHER\x20store\x20passing\x20the\x20node/owner\x20legs\x20and\x20draining\x20this\x20pool\x20cross-store\x20(a\x20reward\x20claim\x20has\x20no\x20chain-side\x20Service\x20context\x20—\x20v148\x20does\x20not\x20cover\x20the\x20claim\x20path);\x20the\x20not-claimed\x20leg\x20blocks\x20a\x20second\x20claim\x20by\x20the\x20same\x20signer.\x20Dropping\x20any\x20single\x20leg\x20reopens\x20its\x20path.','ZERO-VALUE\x20ORDER\x20CAUTION\x20(BKN-P2):\x20unlike\x20tpl_reward_one_time_claim\x20this\x20root\x20does\x20NOT\x20carry\x20the\x20order.amount\x20>=\x201\x20positive-amount\x20leg\x20—\x20add\x20it\x20when\x20the\x20pool\x20pays\x20per\x20order\x20and\x20zero-total\x20orders\x20(100%-off\x20coupons)\x20must\x20never\x20trigger\x20the\x20incentive.','REPLAY\x20GATE\x20(SV-2,\x20azx7-mn-261014\x20live\x20T8):\x20this\x20root\x20scopes\x20the\x20claim-records\x20query\x20BY\x20THE\x20ORDER\x20—\x20where.storeFromId\x20references\x20slot\x200\x20(the\x20submitted\x20Order\x20address),\x20the\x20same\x20slot\x20the\x20guard_add\x20entry\x20stamps:\x20once\x20per\x20buyer\x20per\x20ORDER.\x20NEVER\x20hand-write\x20the\x20raw\x20identifier\x20form\x20with\x20an\x20empty\x20VecU8\x20constant\x20(uncoded\x20MovePrimitiveRuntimeError\x20\x27Query\x20bytes\x20is\x20empty\x27\x20at\x20first\x20verification).','STAMP\x20+\x20FILTER\x20PAIR\x20(SV-2):\x20the\x20reward.guard_add\x20store_from_id\x20STAMP\x20and\x20the\x20where.storeFromId\x20QUERY\x20FILTER\x20are\x20DIFFERENT\x20fields\x20and\x20BOTH\x20are\x20required\x20for\x20the\x20per-order\x20scope\x20—\x20the\x20STAMP\x20makes\x20each\x20claim\x20record\x20key\x20on\x20the\x20submitted\x20Order\x20address;\x20the\x20FILTER\x20matches\x20records\x20by\x20that\x20same\x20value.\x20A\x20record-consuming\x20guard\x20(this\x20template)\x20MUST\x20be\x20added\x20with\x20store_from_id\x20=\x200\x20(the\x20submitted\x20Order/claimant\x20slot)\x20—\x20the\x20MCP\x20guard_add\x20stamp\x20gate\x20(UPW-K7)\x20REJECTS\x20the\x20unstamped\x20entry;\x20on-chain\x20the\x20unstamped\x20entry\x20is\x20accepted\x20but\x20writes\x20records\x20with\x20store_from\x20=\x20none,\x20which\x20matches\x20no\x20storeFromId\x20predicate\x20—\x20that\x20unstamped\x20shape\x20is\x20the\x20ONLY\x20context\x20where\x20the\x20ofn-mn-261012\x20F-01\x20\x27filter\x20is\x20inert\x27\x20verdict\x20ever\x20held\x20(azx7-mn-261014\x20live\x20T8\x20disproved\x20the\x20blanket\x20retraction).\x20Re-adding\x20the\x20SAME\x20guard\x20overwrites\x20its\x20slot\x20in\x20place,\x20so\x20live\x20pools\x20are\x20repairable.','IDENTITY\x20LEG\x20(mandatory\x20regardless\x20of\x20chain\x20patch\x20state):\x20claim()\x20pays\x20Recipient::Signer\x20(tx_context::sender)\x20with\x20no\x20order\x20binding\x20of\x20its\x20own\x20—\x20without\x20the\x20order.owner\x20identity\x20leg\x20any\x20address\x20holding\x20any\x20order\x20at\x20the\x20required\x20node\x20drains\x20the\x20pool\x20(audit-261012\x20B5).\x20The\x20MOV-PROTOCOL-1212\x20chain\x20patch\x20adds\x20recipient==signer\x20and\x20a\x20per-(recipient,\x20guard,\x20store_from)\x20once-slot\x20as\x20the\x20SECOND\x20line\x20—\x20a\x20replay\x20with\x20the\x20registered\x20guard\x20still\x20aborts\x20at\x20the\x20passport\x20layer\x20FIRST\x20(E_VERIFY_FAILED=7);\x20check\x20the\x20patch\x27s\x20deployment\x20freshness\x20via\x20wowok_buildin_info\x20upgrade_check\x20(DEPLOY-K1).','Reward\x20guard\x20is\x20immutable\x20once\x20the\x20Reward\x20object\x20is\x20published\x20—\x20verify\x20this\x20guard\x20against\x20a\x20realistic\x20passport\x20BEFORE\x20publish\x20(F-03:\x20a\x20wrong\x20bound\x20guard\x20can\x20permanently\x20brick\x20the\x20claim\x20path).','ADJUDICATED\x20DESIGN\x20(upwc-mn-261013\x20③)\x20—\x20REVIEW-THEN-CLAIM-THEN-COMPLETE\x20ordering:\x20the\x20standard\x20flow\x20writes\x20the\x20repository\x20review\x20row\x20FIRST,\x20fires\x20the\x20reward\x20claim\x20SECOND,\x20and\x20only\x20then\x20advances\x20the\x20machine\x20to\x20completed.\x20A\x20test/report\x20line\x20reading\x20\x27review\x20written\x20before\x20complete\x27\x20describes\x20the\x20designed\x20order,\x20not\x20a\x20defect\x20(KL-C5\x20review-window\x20idiom\x20family).','SCOPE\x20SPLIT\x20(SV-2):\x20this\x20root\x27s\x20order-scoped\x20gate\x20=\x20once\x20per\x20buyer\x20per\x20ORDER\x20(the\x20buyer\x27s\x20next\x20order\x20still\x20claims);\x20swap\x20where.storeFromId\x20for\x20an\x20EMPTY\x20where\x20({})\x20ONLY\x20for\x20deliberate\x20one-bounty-per-buyer\x20designs\x20—\x20it\x20silently\x20kills\x20the\x20buyer\x27s\x20second\x20order\x20(upw-mn-261014\x20F-48).\x20For\x20a\x20chain-enforced\x20per-order\x20once\x20immune\x20to\x20guard-tree\x20mistakes,\x20route\x20the\x20incentive\x20through\x20an\x20Allocation\x20leg\x20gated\x20on\x20protocol\x20slot\x20254\x20instead.'],'example_use_case':'Review\x20bounty\x20with\x20full\x20protection:\x20fan\x20finishes\x20review\x20(node\x20\x27reviewed\x27),\x20submits\x20the\x20Order\x20and\x20the\x20Reward\x20address;\x20the\x20claim\x20passes\x20only\x20for\x20the\x20order\x20owner\x20at\x20the\x20reviewed\x20node\x20who\x20has\x20never\x20claimed\x20this\x20pool.\x20Every\x20other\x20path\x20aborts\x20and\x20the\x20balance\x20stays.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_write_guard_type_check','scene_id':'repository_write_guard','name':'Storage\x20write\x20type\x20validation','description':'Verifies\x20that\x20the\x20data\x20type\x20written\x20to\x20the\x20Repository\x20matches\x20the\x20declaration\x20and\x20that\x20the\x20writer\x27s\x20identity\x20is\x20legitimate.','recommended_patterns':['P08','P11'],'parameters':[{'name':'repository_address','type':'address','description':'Repository\x20object\x20address','required':![],'constraint':'Must\x20be\x20the\x20address\x20of\x20an\x20already-published\x20Repository'},{'name':'entity_registrar','type':'address','description':'System\x20Entity\x20object\x20address\x20(Move\x20WOW_ENTITY_OBJECT_ID,\x20fixed\x200xaab;\x20SDK\x20alias\x20ENTITY_REGISTRAR_ADDRESS)','required':![],'default':'0xaab'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Writer\x20address\x20(submitted\x20by\x20caller)','binding_constraint':'Must\x20be\x20a\x20valid\x20Entity\x20address'},{'identifier':0x1,'b_submission':!![],'value_type':'String','name':'Write\x20data\x20key\x20name\x20(submitted\x20by\x20caller)','binding_constraint':'Key\x20name\x20format\x20must\x20be\x20\x27category:key\x27'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${entity_registrar}','name':'Entity\x20system\x20object\x20(SDK\x20alias:\x20EntityRegistrar)','is_system_address':!![]}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x0}]},{'type':'logic_not','node':{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0x0},{'type':'identifier','identifier':0x2}]}}]},'applicable_industries':['ecommerce','education','travel','subscription','rental'],'relevant_risks':['R-C1-02','R-C3-03','R-C3-04'],'creation_notes':['id_from_submission\x20in\x20write_guard\x20must\x20be\x20of\x20Address\x20type','data_from_submission\x20must\x20match\x20the\x20Repository\x20value_type','System\x20singletons\x20(fixed\x20at\x20chain\x20deployment):\x20Entity\x20object\x20=\x200xaab\x20(SDK\x20alias\x20ENTITY_REGISTRAR_ADDRESS),\x20Registrar\x20=\x200xaaa\x20(SDK\x20alias\x20ENTITY_LINKER_ADDRESS)'],'example_use_case':'E-commerce\x20platform\x20merchant\x20writes\x20product\x20review\x20data;\x20the\x20Guard\x20verifies\x20that\x20the\x20writer\x20is\x20a\x20registered\x20Entity\x20and\x20not\x20a\x20system\x20address.','verifier_constraint_level':'level1_strict'},{'id':'tpl_repository_write_order_holder','scene_id':'repository_write_guard','name':'Order-holder\x20write\x20authorization\x20(order-keyed\x20rows)','description':'Executable\x20write_guard\x20for\x20an\x20ORDER-KEYED\x20repository\x20policy\x20(policy\x20id_from\x20UNSET\x20—\x20row\x20id\x20=\x20the\x20caller-supplied\x20Order\x20address):\x20the\x20Signer\x20must\x20be\x20the\x20ORDER\x27s\x20owner\x20OR\x20a\x20registered\x20order\x20agent,\x20with\x20Service\x20scoping\x20chain-side\x20since\x20protocol\x20v148\x20(bsw4\x20F-06\x20removed\x20the\x20host-binding\x20leg).\x20'+'The\x20identity\x20leaf\x20reads\x20the\x20SAME\x20submitted\x20Order\x20slot\x20the\x20row\x20is\x20keyed\x20by,\x20so\x20a\x20writer\x20cannot\x20author\x20(or\x20resurrect)\x20a\x20row\x20under\x20an\x20order\x20they\x20do\x20not\x20hold.\x20'+'Instantiable\x20form\x20of\x20pattern.repository_write_authorization\x27s\x20identity\x20leaf\x20(order.owner\x20==\x20Signer\x20/\x20order.agent\x20has\x20Signer)\x20—\x20the\x20crowdfunding\x20contribution-ledger\x20shape\x20(R-X1-17:\x20existence-is-not-trust).','recommended_patterns':['P08','P11'],'parameters':[],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'The\x20Order\x20the\x20row\x20is\x20keyed\x20by\x20(row\x20id)\x20—\x20the\x20writer\x20submits\x20the\x20Order\x20address\x20their\x20tooling\x20writes\x20for'},{'identifier':0x1,'b_submission':!![],'value_type':'U64','name':'Row\x20value\x20(bound\x20via\x20policy\x20data_from_submission:\x201;\x20retype\x20to\x20match\x20the\x20policy\x20value_type)'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},'applicable_industries':['crowdfunding','ecommerce','education','retail'],'relevant_risks':['R-X1-17','R-C1-03','R-C3-05'],'creation_notes':['ORDER-KEYED\x20PAIRING\x20(v110,\x20ksc-tn-261024\x20F-01/F-05):\x20the\x20policy\x20declares\x20NO\x20id_from,\x20so\x20the\x20row\x20id\x20is\x20the\x20caller-supplied\x20Order\x20address;\x20this\x20guard\x27s\x20identity\x20leaf\x20reads\x20THE\x20SAME\x20submitted\x20slot\x20(identifier\x200),\x20so\x20write\x20authorization\x20and\x20row\x20keying\x20cannot\x20diverge\x20—\x20a\x20writer\x20may\x20only\x20create,\x20update\x20or\x20ZERO\x20rows\x20under\x20an\x20Order\x20they\x20hold\x20(or\x20their\x20agent\x20holds).\x20Wallet-keyed\x20routing\x20(id_from\x20signer/clock)\x20is\x20the\x20RETIRED\x20pre-v110\x20shape\x20and\x20compile\x20blocks\x20it\x20(CROWDFUNDING_SIGNER_KEYED_ROWS)\x20—\x20never\x20pair\x20this\x20guard\x20with\x20a\x20signer-keyed\x20policy:\x20the\x20escrow-bound\x20aggregate\x20reads\x20such\x20rows\x20as\x200\x20and\x20the\x20goal\x20gate\x20silently\x20bricks.','VALUE\x20BINDING:\x20declare\x20data_from_submission:\x201\x20on\x20the\x20GuardSpec\x20policy\x20so\x20the\x20written\x20VALUE\x20is\x20taken\x20from\x20the\x20verified\x20passport\x20submission\x20(identifier\x201)\x20—\x20the\x20row\x20carries\x20exactly\x20the\x20value\x20the\x20guard-verified\x20write\x20submitted\x20(BK15-F13\x20/\x20R-X1-17\x20row-key\x20automation).\x20Keep\x20the\x20slot\x27s\x20value_type\x20equal\x20to\x20the\x20policy\x20value_type\x20(U64\x20for\x20contribution\x20ledgers).','id_from_submission\x20STAYS\x20UNSET\x20on\x20the\x20policy:\x20with\x20id_from\x20unset\x20the\x20row\x20id\x20is\x20the\x20caller-supplied\x20Order-address\x20string,\x20and\x20an\x20id_from_submission\x20leg\x20is\x20only\x20legal\x20under\x20signer/clock\x20routing\x20(E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN\x20=\x2023)\x20—\x20and\x20would\x20re-key\x20rows\x20by\x20wallet.','NEVER\x20arm\x20identifier\x20254\x20on\x20a\x20repository\x20write\x20guard:\x20it\x20is\x20not\x20forward-bound\x20(no\x20task-binding\x20requirement),\x20and\x20a\x20254\x20ONCE-FOR-OBJECT\x20slot\x20would\x20abort\x20the\x20SECOND\x20write\x20—\x20the\x20withdrawal\x20ZEROING\x20(an\x20upsert\x20of\x200\x20through\x20the\x20same\x20guard,\x20the\x20idempotent\x20retraction)\x20—\x20bricking\x20the\x20F-05\x20retraction\x20with\x20E_ONCE_TRIGGERED.','write_once\x20discipline:\x20leave\x20FALSE\x20on\x20a\x20contribution\x20ledger\x20—\x20the\x20zeroing\x20upsert\x20legitimately\x20overwrites;\x20arm\x20write_once\x20only\x20on\x20append-only\x20evidence\x20where\x20no\x20retraction\x20exists\x20(one-review-per-account\x20shapes).','MIXED\x20RETURN-TYPE\x20CONSTRUCTION\x20(same\x20as\x20tpl_allocator_identity_set_order_holder):\x20query\x201562\x20(order.owner)\x20returns\x20Address\x20→\x20wrap\x20in\x20logic_equal\x20with\x20context(Signer);\x20query\x201567\x20(order.agent\x20has)\x20returns\x20Bool\x20→\x20use\x20directly\x20as\x20the\x20logic_or\x20child\x20with\x20parameters:\x20[context(Signer)].\x20Compose\x20by\x20COPY.','PAIR,\x20NOT\x20SUBSTITUTE:\x20the\x20escrow-bound\x20aggregate\x20(query\x201179\x20per-row\x20min(row_value,\x20order.amount\x20of\x20the\x20row\x20id))\x20is\x20the\x20VALUE-truth\x20backstop;\x20this\x20guard\x20is\x20the\x20ATTRIBUTION\x20boundary\x20(who\x20may\x20write/zero\x20the\x20row).\x20Ship\x20both\x20—\x20an\x20unbound\x20write_guard\x20makes\x20the\x20aggregate\x20forgeable\x20(R-X1-17),\x20and\x20the\x20guard\x20alone\x20without\x20the\x20bound\x20aggregate\x20still\x20lets\x20an\x20inflated\x20row\x20flip\x20a\x20GO\x20decision\x20(F-01).','Residual\x20boundary\x20(disclose,\x20do\x20not\x20hide):\x20the\x20row\x20id\x20is\x20a\x20caller-supplied\x20STRING,\x20so\x20the\x20chain\x20cannot\x20express\x20\x27row\x20id\x20==\x20the\x20submitted\x20Order\x20address\x27\x20inside\x20the\x20guard\x20—\x20a\x20holder\x20could\x20key\x20THEIR\x20row\x20under\x20ANOTHER\x20order\x27s\x20address.\x20The\x201179\x20bound\x20aggregate\x20caps\x20any\x20such\x20row\x20at\x20that\x20order\x27s\x20escrowed\x20amount\x20and\x20the\x201051\x20live-escrow\x20leg\x20keeps\x20drained\x20orders\x20out\x20of\x20the\x20candidate\x20set,\x20so\x20the\x20mis-key\x20cannot\x20mint\x20value;\x20it\x20can\x20only\x20misplace\x20attribution.\x20Zeroing\x20stays\x20holder-gated\x20by\x20this\x20leaf.'],'example_use_case':'All-or-nothing\x20campaign\x20contribution\x20ledger:\x20a\x20backer\x27s\x20tooling\x20writes\x20(or\x20zeroes)\x20the\x20contribution\x20row\x20keyed\x20by\x20THEIR\x20Order\x20address\x20through\x20the\x20passport-bearing\x20data\x20write;\x20this\x20guard\x20proves\x20the\x20writer\x20holds\x20that\x20Order\x20(owner\x20or\x20agent)\x20—\x20a\x20forged\x20row\x20under\x20anyone\x20else\x27s\x20order\x20aborts\x20at\x20the\x20write.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_repository_mutual_consent','scene_id':'repository_write_guard','name':'Mutual-consent\x20acceptance\x20write\x20guard\x20(byte-equal\x20to\x20the\x20offer\x20row)','description':'Write_guard\x20for\x20the\x20RESPONSE\x20policy\x20of\x20a\x20multi-party\x20consent\x20Repository\x20(partial-refund\x20amount,\x20settlement\x20split,\x20'+'order\x20amendment,\x20delivery\x20acceptance\x20—\x20any\x20negotiated\x20value):\x20the\x20value\x20the\x20responding\x20party\x20writes\x20is\x20taken\x20from\x20'+'their\x20passport\x20submission\x20slot,\x20and\x20this\x20guard\x20reads\x20the\x20PROPOSAL\x20row\x20(query_repository_data,\x201167)\x20with\x20the\x20'+'submitted\x20VecU8\x20as\x20a\x20condition\x20—\x20the\x20builder\x20folds\x20both\x20into\x20ONE\x20multi-operand\x20TypeLogicEqual(90)\x20(all-equal\x20BCS\x20'+'byte\x20comparison),\x20so\x20the\x20kernel\x20ABORTS\x20the\x20response\x20write\x20unless\x20the\x20accepted\x20bytes\x20equal\x20the\x20proposal\x20row\x20'+'byte-for-byte.\x20The\x20response\x20row\x20is\x20therefore\x20chain-proof\x20consent\x20to\x20exactly\x20what\x20was\x20proposed,\x20readable\x20at\x20'+'settlement\x20time\x20by\x20mere\x20row\x20existence\x20(query_repository_data_has,\x201166).','recommended_patterns':['P13','P15'],'parameters':[{'name':'repository_name','type':'string','description':'Consent\x20Repository\x20object\x20name\x20(hosts\x20BOTH\x20the\x20offer\x20and\x20acceptance\x20policies;\x20circular\x20ref\x20via\x20P16)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'offer_writer','type':'address','description':'The\x20proposing\x20party\x27s\x20account\x20address\x20(the\x20merchant\x20in\x20a\x20refund\x20flow;\x20the\x20counterparty\x20in\x20any\x20other\x20consent\x20flow)','required':!![],'constraint':'Must\x20be\x20the\x20account\x20that\x20writes\x20the\x20proposal\x20row\x20(the\x20proposal\x20policy\x20keys\x20rows\x20by\x20signer)'},{'name':'offer_key','type':'string','description':'Offer\x20policy\x20key\x20(e.g.\x20\x27refund_offer\x27)','required':!![],'default':'refund_offer','constraint':'Must\x20exactly\x20match\x20the\x20offer\x20policy\x20name\x20on\x20the\x20Repository\x20(case-sensitive)'}],'example_table':[{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Consent\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${offer_writer}','name':'Offer\x20writer\x20(row\x20id\x20under\x20the\x20offer\x20policy\x27s\x20id_from=Signer\x20routing)'},{'identifier':0x3,'b_submission':!![],'value_type':'VecU8','name':'Accepted\x20bytes\x20—\x20the\x20acceptor\x27s\x20submission\x20slot;\x20bind\x20the\x20acceptance\x20policy\x20with\x20data_from_submission:\x203'}],'example_root':{'type':'query_repository_data','object':{'identifier':0x1},'id':{'identifier':0x2},'key':'${offer_key}','conditions':[{'identifier':0x3}]},'applicable_industries':['delivery','group_buy','retail','general'],'relevant_risks':['R-X1-17','R-C1-03'],'creation_notes':['THREE-STAGE\x20WIRING\x20(pattern.mutual_consent_attestation):\x20(1)\x20PROPOSAL\x20policy\x20on\x20the\x20same\x20Repository\x20—\x20id_from=Signer,\x20write_once=true,\x20NO\x20write_guard\x20(each\x20writer\x20owns\x20their\x20row;\x20the\x20flag\x20makes\x20the\x20proposal\x20immutable).\x20(2)\x20RESPONSE\x20policy\x20—\x20id_from=Signer,\x20data_from_submission:\x203,\x20write_guard\x20=\x20THIS\x20guard.\x20(3)\x20EXECUTION\x20—\x20the\x20allocator-or-keeper\x20gate\x20is\x20the\x20bare\x20query_repository_data_has\x20over\x20the\x20response\x20key\x20(Bool,\x20direct\x20root\x20leg):\x20settlement\x20pays\x20ONLY\x20when\x20the\x20response\x20row\x20exists.\x20N-PARTY:\x20additional\x20parties\x20each\x20get\x20their\x20own\x20signer-keyed\x20policy\x20row;\x20quorum/total\x20predicates\x20over\x20rows\x20fold\x20into\x20the\x20execution\x20leg\x20via\x20the\x20where-family\x20(count_where/sum_where,\x201179\x20for\x20order-bound\x20real\x20values).','WHAT\x20IS\x20CHAIN-ENFORCED\x20vs\x20SELF-DISCIPLINED:\x20the\x20byte\x20equality\x20of\x20stage\x20(2)\x20is\x20kernel-forced\x20(a\x20mismatched\x20acceptance\x20cannot\x20exist);\x20the\x20OFFER\x27s\x20fairness\x20is\x20NOT\x20—\x20\x27an\x20offer\x20exists\x27\x20never\x20proves\x20the\x20amount\x20is\x20right\x20(R-X1-17).\x20Disclose\x20which\x20links\x20are\x20enforced\x20and\x20which\x20are\x20discipline\x20in\x20the\x20build\x20notes.','BYTE\x20EQUALITY\x20ONLY:\x20the\x20consent\x20check\x20is\x20full-byte\x20BCS\x20comparison\x20(TypeLogicEqual\x2090,\x20all-equal).\x20Numeric\x20predicates\x20on\x20the\x20accept\x20leg\x20(amount\x20<=\x20X)\x20are\x20NOT\x20expressible\x20—\x20enumerate\x20the\x20negotiated\x20amounts\x20as\x20discrete\x20byte\x20values\x20or\x20route\x20to\x20arbitration.','OFFER\x20ROW\x20MUST\x20EXIST:\x20query_repository_data\x20on\x20a\x20MISSING\x20(id,\x20key)\x20returns\x20an\x20EMPTY\x20blob\x20and\x20an\x20empty\x20blob\x20equals\x20an\x20empty\x20submission\x20—\x20this\x20guard\x20must\x20query\x20the\x20OFFER\x20row\x20(write_once\x20guarantees\x20it\x20exists\x20and\x20is\x20immutable\x20once\x20the\x20flow\x20reaches\x20acceptance),\x20never\x20the\x20acceptance\x20row\x20itself.','LEGACY\x20QUERIES,\x20NO\x20PROTOCOL\x20GATE:\x201166/1167\x20predate\x20the\x20v136\x20sentinel\x20protocol\x20—\x20a\x20tombstoned\x20row\x20reads\x20as\x20false\x20(1166)\x20/\x20empty\x20blob\x20(1167)\x20instead\x20of\x20aborting,\x20and\x20neither\x20query\x20carries\x20the\x20quote_guard\x20impack\x20gate\x20(unlike\x201173-1177),\x20so\x20no\x20passport\x20bundling\x20is\x20required.','PASSPORT-ISSUER\x20TRUST\x20BOUNDARY:\x20the\x20equality\x20is\x20enforced\x20against\x20the\x20passport\x20BUILDER\x27s\x20bytes\x20—\x20the\x20issuer\x20is\x20normally\x20the\x20acceptor\x27s\x20own\x20client;\x20delegating\x20issuance\x20to\x20a\x20third\x20party\x20reintroduces\x20trust.\x20State\x20this\x20in\x20the\x20build\x20notes.','NO\x20SLOT\x20254:\x20a\x20repository\x20write\x20guard\x20is\x20not\x20forward-bound\x20—\x20the\x20task-binding\x20slot\x20is\x20neither\x20required\x20nor\x20harmless\x20here\x20(see\x20tpl_repository_write_order_holder\x27s\x20once-slot\x20discipline).\x20Arm\x20write_once=true\x20on\x20the\x20acceptance\x20policy\x20too:\x20a\x20consent\x20must\x20not\x20be\x20silently\x20rewritable\x20—\x20a\x20changed\x20deal\x20is\x20a\x20NEW\x20offer\x20plus\x20a\x20NEW\x20acceptance,\x20never\x20an\x20overwrite.'],'example_use_case':'Partial-refund\x20consent\x20ledger\x20(the\x20worked\x20instance\x20of\x20the\x20general\x20shape\x20—\x20the\x20same\x20wiring\x20serves\x20settlement\x20splits,\x20order\x20amendments,\x20acceptance\x20sign-offs\x20and\x20batch\x20terms\x20with\x20renamed\x20keys):\x20the\x20merchant\x20writes\x20the\x20quoted\x20amount\x20bytes\x20under\x20\x27refund_offer\x27\x20(write_once,\x20signer-keyed);\x20the\x20buyer\x20writes\x20\x27refund_accept\x27\x20through\x20this\x20guard\x20—\x20the\x20kernel\x20aborts\x20unless\x20the\x20buyer\x27s\x20submitted\x20bytes\x20equal\x20the\x20merchant\x27s\x20offer\x20byte-for-byte;\x20the\x20refund\x20allocator\x27s\x20gate\x20reads\x20response\x20existence\x20(1166)\x20before\x20paying.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_usage_guard_threshold','scene_id':'arbitration_usage_guard','name':'Dispute\x20initiation\x20threshold\x20validation','description':'Verifies\x20that\x20the\x20dispute\x20initiator\x20meets\x20minimum\x20conditions\x20(e.g.\x20order\x20amount,\x20time\x20window),\x20filtering\x20out\x20meaningless\x20disputes.','recommended_patterns':['P02','P10'],'parameters':[{'name':'min_amount','type':'number','description':'Minimum\x20dispute\x20amount\x20threshold','required':!![],'constraint':'A\x20reasonable\x20threshold\x20is\x20recommended;\x20too\x20high\x20hinders\x20user\x20rights\x20protection,\x20too\x20low\x20produces\x20many\x20invalid\x20disputes'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Dispute-related\x20Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'U64','value':'${min_amount}','name':'Minimum\x20dispute\x20amount\x20threshold'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x1}]},'applicable_industries':['ecommerce','rental','education','travel'],'relevant_risks':['R-X1-01','R-X1-07','R-C3-03'],'creation_notes':['usage_guard\x20is\x20iterable\x20(Arbitration\x20can\x20be\x20updated)','AND\x20conditions\x20should\x20not\x20be\x20too\x20many\x20(R-X1-07);\x20≤3\x20conditions\x20recommended','When\x20Arbitration\x20bPaused=true,\x20blocking\x20takes\x20priority\x20(checked\x20before\x20Guard)'],'example_use_case':'Rental\x20service\x20dispute:\x20only\x20disputes\x20with\x20order\x20amount\x20≥\x2010\x20WOW\x20are\x20accepted,\x20filtering\x20out\x20small-amount\x20conflicts.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_voting_guard_numeric_weight','scene_id':'arbitration_voting_guard','name':'Numeric\x20voting\x20weight\x20validation','description':'Panel-membership\x20voting_guard\x20for\x20weighted\x20arbitration\x20panels:\x20the\x20vote\x20passes\x20only\x20when\x20the\x20tx\x20signer\x20is\x20on\x20the\x20authorized\x20arbitrator\x20list\x20(vec_contains_address\x20over\x20the\x20panel\x20vector\x20—\x20the\x20writer-set\x20identity\x20idiom).\x20CHAIN\x20FACT:\x20no\x20address-to-weight\x20lookup\x20primitive\x20exists\x20—\x20the\x20per-vote\x20WEIGHT\x20rides\x20the\x20vote-time\x20binding\x20(FixedValue\x20flat\x20weight,\x20or\x20GuardIdentifier\x20extracting\x20the\x20voter\x27s\x20own\x20submitted\x20value,\x20forgery-prone\x20R-C3-02);\x20arb.voted.weight\x20(id\x201407,\x20U32)\x20only\x20reads\x20back\x20the\x20weight\x20of\x20an\x20ALREADY-CAST\x20vote\x20(audit\x20leg),\x20it\x20cannot\x20assign\x20one.','recommended_patterns':['P12'],'parameters':[{'name':'arbiter_panel','type':'vec_address','description':'Authorized\x20arbitrator\x20address\x20list\x20(VecAddress)\x20the\x20vote\x20caller\x20is\x20checked\x20against','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Vec<Address>','value':'${arbiter_panel}','name':'Authorized\x20arbitrator\x20address\x20list'}],'example_root':{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x0},{'type':'context','context':'Signer'}]},'applicable_industries':['ecommerce','rental','education','travel'],'relevant_risks':['R-C3-02','R-C2-01','R-C2-02'],'creation_notes':['The\x20GuardIdentifier\x20for\x20voting_guard\x20must\x20be\x20numeric\x20(U8-U256),\x20otherwise\x20E_GUARD_IDENTIFIER_NOT_NUMBER','Caller\x20identity\x20is\x20the\x20tx\x20Signer\x20context\x20—\x20never\x20a\x20voter-submitted\x20address\x20row\x20(a\x20b_submission=true\x20identity\x20carries\x20forgery\x20risk,\x20R-C3-02\x20critical)','SHAPE:\x20vec_contains_address\x20takes\x20a\x20NODES\x20ARRAY\x20—\x20nodes[0]\x20the\x20VecAddress\x20panel\x20vector,\x20nodes[1]\x20the\x20Signer\x20context.\x20The\x20former\x20vec/target\x20key\x20shape\x20was\x20never\x20a\x20chain\x20or\x20schema\x20shape\x20(batch-26\x20③-d\x20B-2\x20allowlist\x20exit)','Weight\x20sources\x20on\x20chain:\x20FixedValue\x20(flat)\x20or\x20GuardIdentifier\x20(per-voter\x20submitted,\x20R-C3-02);\x20arb.voted.weight\x20(1407)\x20is\x20a\x20post-vote\x20readback\x20—\x20tiered\x20panels\x20express\x20rank\x20through\x20the\x20vote\x20binding\x20/\x20the\x20machine\x20flow\x20(tpl_machine_weighted_voting),\x20never\x20through\x20a\x20lookup\x20in\x20this\x20guard'],'example_use_case':'3-person\x20arbitration\x20panel:\x20only\x20listed\x20arbitrators\x20may\x20vote\x20(this\x20guard);\x20the\x20chief-3\x20/\x20regular-1\x20weights\x20ride\x20the\x20vote-time\x20binding,\x20and\x20the\x20majority\x20threshold\x20is\x20counted\x20Arb-side.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_voting_guard_open_vote','scene_id':'arbitration_voting_guard','name':'Open-vote\x20gate\x20(any\x20Passport\x20holder,\x20flat\x20fixed\x20weight)','description':'The\x20standard\x20voting_guard\x20for\x20a\x20PUBLIC\x20arbitration\x20venue:\x20an\x20always-true\x20guard\x20paired\x20with\x20a\x20'+'FixedValue\x20weight,\x20so\x20every\x20Passport\x20holder\x20may\x20vote\x20and\x20every\x20vote\x20counts\x20at\x20the\x20same\x20weight.\x20'+'This\x20is\x20the\x20sanctioned\x20fix\x20for\x20the\x20F-36\x20vote-lock:\x20an\x20Arbitration\x20whose\x20voting_guard\x20is\x20EMPTY\x20'+'does\x20NOT\x20have\x20open\x20voting\x20—\x20plain\x20votes\x20then\x20hard-require\x20the\x20vote\x20permission\x20(358)\x20on\x20the\x20'+'arbitration\x27s\x20Permission,\x20which\x20by\x20default\x20only\x20the\x20creator-admin\x20holds,\x20so\x20a\x20dispute\x20'+'dead-locks\x20when\x20that\x20admin\x20is\x20unresponsive\x20(R-ARB-VOTE-LOCK\x20blocks\x20the\x20service\x20publish).\x20'+'Binding\x20this\x20guard\x20is\x20the\x20honest,\x20explicit\x20way\x20to\x20declare\x20\x27the\x20voter\x20universe\x20is\x20everyone\x27.','recommended_patterns':['P12'],'parameters':[{'name':'vote_weight','type':'number','description':'FixedValue\x20vote\x20weight\x20per\x20passing\x20voter','required':!![],'default':'1','constraint':'u32\x20range\x201-4294967295;\x201\x20=\x20one\x20person\x20one\x20vote.\x20Weighted\x20panels\x20(rank/token\x20tiers)\x20need\x20tpl_voting_guard_numeric_weight\x20instead'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Bool','value':!![],'name':'Open\x20vote\x20—\x20every\x20Passport\x20holder\x20passes\x20(Bool\x20table\x20constants\x20are\x20RAW\x20booleans;\x20the\x20string\x20\x22true\x22\x20fails\x20creation:\x20value_type=0\x20requires\x20a\x20boolean\x20—\x20klook-mn-261019\x20KLM-FIND-04)'}],'example_root':{'type':'identifier','identifier':0x0},'applicable_industries':['community','public_goods','ecommerce','rental','travel','education'],'relevant_risks':['R-X1-17'],'creation_notes':['R-ARB-VOTE-LOCK:\x20an\x20EMPTY\x20voting_guard\x20is\x20NOT\x20open\x20voting\x20—\x20plain\x20votes\x20hard-require\x20the\x20vote\x20permission\x20(358),\x20admin-only\x20by\x20default,\x20and\x20a\x20dispute\x20dead-locks\x20when\x20the\x20admin\x20is\x20unresponsive\x20(crs9-F-36).\x20This\x20guard\x20is\x20the\x20declared\x20fix;\x20the\x20voting_guard\x20field\x20stays\x20mutable\x20after\x20publish\x20(op=\x27set\x27)','DEFAULT\x20PRESCRIPTION\x20(B10,\x20ksg-mn-261022):\x20build\x20plans\x20treat\x20binding\x20THIS\x20guard\x20as\x20the\x20default\x20post-deploy\x20step\x20for\x20any\x20venue\x20meant\x20to\x20accept\x20community\x20votes\x20(arbitration_unpause\x20then\x20voting_guard_open_vote);\x20a\x20deliberately\x20closed\x20panel\x20is\x20the\x20exception\x20and\x20binds\x20tpl_voting_guard_numeric_weight\x20instead\x20—\x20never\x20leave\x20the\x20field\x20empty\x20by\x20omission','Once\x20voting_guard\x20is\x20non-empty,\x20every\x20vote\x20call\x20MUST\x20carry\x20the\x20voting_guard\x20in\x20its\x20payload\x20(guard\x20reference\x20+\x20the\x20voter\x27s\x20Passport\x20credential);\x20a\x20plain\x20vote\x20aborts\x20on-chain\x20with\x20E_VOTING_GUARD_USED\x20(abort\x202)','The\x20constant-true\x20root\x20is\x20a\x20TAUTOLOGY\x20BY\x20DESIGN\x20—\x20under\x20the\x20vote\x20binding\x20hint\x20the\x20analyzer\x20grades\x20it\x20low/info\x20(the\x20declared\x20voter\x20universe);\x20without\x20a\x20binding\x20hint\x20the\x20generic\x20R-X1-17\x20warning\x20fires,\x20which\x20is\x20expected\x20for\x20an\x20unbound\x20draft','Weight\x20semantics:\x20FixedValue\x20=\x20flat\x20weight\x20per\x20passing\x20voter;\x20GuardIdentifier\x20would\x20extract\x20a\x20per-voter\x20weight\x20from\x20the\x20voter\x27s\x20own\x20submission\x20(forgery-prone\x20—\x20prefer\x20FixedValue\x20for\x20open\x20votes,\x20R-C3-02).\x20Weighted\x20panels\x20(rank/token\x20tiers)\x20belong\x20in\x20tpl_voting_guard_numeric_weight','Mainnet-verified\x20(crs9\x20D3,\x202026-10-15):\x20a\x20guard\x20of\x20exactly\x20this\x20shape\x20carried\x20the\x20arbitration\x20vote;\x20ballots\x20counted\x20at\x20weight\x201\x20through\x20the\x20open\x20voting_guard'],'example_use_case':'A\x20third-party\x20arbitration\x20venue\x20for\x20a\x20marketplace\x20service:\x20any\x20community\x20member\x20may\x20vote\x20on\x20disputes,\x20one\x20vote\x20each,\x20and\x20vote\x20counting\x20never\x20depends\x20on\x20a\x20single\x20admin\x20staying\x20responsive.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_arb_ruling_won','scene_id':'machine_forward_guard','name':'Arbitration\x20ruling-won\x20refund\x20gate\x20(stable\x20indemnity\x20state,\x20two-slot\x20order+arb)','description':'Guard\x20for\x20a\x20Machine\x20forward\x20that\x20pays\x20a\x20refund\x20when\x20the\x20buyer\x20WON\x20the\x20arbitration\x20'+'(e.g.\x20a\x20booking\x20\x27arb_refund\x27\x20edge\x20from\x20disputed\x20→\x20refunded).\x20The\x20verifier\x20submits\x20BOTH\x20'+'the\x20Order\x20address\x20(slot\x200)\x20and\x20the\x20Arb\x20case\x20object\x20address\x20(slot\x201);\x20the\x20gate\x20checks:\x20'+'(1)\x20arb.order\x20==\x20order\x20—\x20the\x20Arb\x20case\x20IS\x20this\x20order\x27s\x20dispute,\x20(2)\x20arb.indemnity\x20some\x20==\x20true\x20'+'(Bool\x20—\x20set\x20by\x20the\x20ruling;\x20arb_withdraw\x20sweeps\x20ONLY\x20the\x20fee\x20balance\x20and\x20never\x20touches\x20it,\x20so\x20a\x20fee\x20'+'withdrawal\x20cannot\x20clear\x20it;\x20a\x20reset\x20(objection\x20cycle)\x20clears\x20it,\x20correctly\x20re-gating\x20an\x20'+'overturned\x20ruling),\x20and\x20(3)\x20arb.indemnity.amount\x20!=\x200\x20—\x20a\x20Some(0)\x20MERCHANT-favor\x20ruling\x20passes\x20'+'presence\x20but\x20is\x20rejected\x20here\x20(rex-mn-261021\x20T5\x20live:\x20a\x20presence-only\x20root\x20let\x20the\x20defeated\x20buyer\x20'+'pull\x20the\x20refund),\x20so\x20the\x20edge\x20opens\x20only\x20on\x20an\x20ENFORCED\x20buyer\x20award;\x20a\x20None\x20amount\x20fails\x20closed\x20'+'via\x20the\x20native\x20query\x20error.\x20The\x20two-slot\x20form\x20makes\x20the\x20pair\x20'+'self-certifying:\x20a\x20merchant\x20holding\x20a\x20favourable\x20ruling\x20on\x20their\x20own\x20order\x20cannot\x20pair\x20it\x20'+'with\x20a\x20victim\x20order\x27s\x20address\x20to\x20redirect\x20that\x20victim\x27s\x20escrow\x20(F-02).\x20A\x20FOURTH\x20leg\x20(4R-03b\x20'+'sequence,\x20h1q\x20F-ARB-03)\x20requires\x20order.claimed_by\x20some\x20==\x20true\x20on\x20the\x20Order:\x20the\x20award\x20must\x20'+'be\x20ENFORCED\x20first\x20(compensation\x20claimed\x20or\x20keeper\x20conclude\x20stamped\x20claimed_by)\x20before\x20the\x20'+'refund\x20edge\x20can\x20open\x20—\x20closing\x20the\x20ruled-but-unclaimed\x20refund\x20window\x20(R2-F1\x20double-dip).\x20'+'A\x20FIFTH\x20leg\x20(5R-07②\x20F-54,\x202026-10-28)\x20prices\x20the\x20award:\x20arb.indemnity.amount\x20must\x20be\x20'+'STRICTLY\x20GREATER\x20than\x20min_indemnity_floor\x20(identifier\x205,\x20default\x200)\x20—\x20at\x20the\x20default\x20the\x20leg\x20'+'re-states\x20the\x20zero-award\x20exclusion\x20(amount\x20>\x200\x20==\x20!=\x200\x20on\x20U64,\x20harmless\x20redundancy\x20by\x20design);\x20'+'raised\x20to\x20refund_amount\x20×\x20arb_indemnity_floor_bps\x20/\x2010000\x20it\x20bars\x20a\x20TOKEN\x20indemnity\x20from\x20'+'unlocking\x20the\x20full\x20refund\x20rail\x20(tbp\x20F-54\x20live:\x20a\x200.001\x20award\x20opened\x20a\x202.0\x20refund).\x20A\x20SIXTH\x20leg\x20'+'(tbs7\x20F-02,\x202026-10-29)\x20binds\x20the\x20VENUE:\x20arb.arbitration\x20must\x20equal\x20bound_arbitration_address\x20'+'(identifier\x204\x20—\x20the\x20arbitration\x20venue\x20the\x20Service\x20is\x20published\x20with).\x20arb.order\x20is\x20a\x20'+'case-creator-filled\x20field,\x20so\x20without\x20the\x20venue\x20leg\x20anyone\x20can\x20mint\x20a\x20self-arbitrated\x20case\x20'+'(self\x20as\x20sole\x20arbiter,\x20arb.order\x20pointing\x20at\x20the\x20victim\x20order,\x20a\x20self-ruled\x20indemnity)\x20and\x20'+'drive\x20this\x20refund\x20edge;\x20with\x20it\x20only\x20cases\x20heard\x20by\x20the\x20store\x27s\x20designated\x20venue\x20qualify.','recommended_patterns':['P06','P09'],'parameters':[{'name':'min_indemnity_floor','type':'number','required':![],'default':'0','description':'F-54\x20indemnity\x20FLOOR\x20(smallest\x20units):\x20arb.indemnity.amount\x20must\x20EXCEED\x20this\x20for\x20the\x20refund\x20edge\x20to\x20open.\x200\x20(default)\x20=\x20any\x20non-zero\x20award\x20qualifies;\x20set\x20to\x20refund_amount\x20×\x20arb_indemnity_floor_bps\x20/\x2010000\x20to\x20bar\x20token\x20indemnities\x20from\x20unlocking\x20the\x20full\x20refund\x20rail','constraint':'Must\x20be\x20>=\x200\x20and\x20STRICTLY\x20BELOW\x20the\x20expected\x20award\x20—\x20a\x20floor\x20>=\x20the\x20smallest\x20legitimate\x20award\x20bricks\x20the\x20refund\x20edge;\x20the\x20floor\x20is\x20a\x20build-time\x20constant\x20(guards\x20are\x20immutable\x20after\x20publish)'},{'name':'bound_arbitration_address','type':'address','required':!![],'default':'${arbitration_name}','description':'tbs7\x20F-02\x20VENUE\x20BINDING:\x20the\x20Arbitration\x20object\x20the\x20Service\x20is\x20published\x20with\x20(NAME\x20or\x20address).\x20arb.arbitration\x20must\x20equal\x20it\x20for\x20the\x20refund\x20edge\x20to\x20open','constraint':'Name\x20form\x20(kernel\x20builds):\x20resolves\x20to\x20the\x20plan-created\x20\x27<base>_arbitration\x27\x20object.\x20Address\x20form\x20(hand\x20builds):\x20the\x20exact\x20Arbitration\x20address\x20bound\x20at\x20service\x20publish.\x20Guards\x20are\x20immutable\x20after\x20publish,\x20so\x20a\x20wrong\x20value\x20bricks\x20the\x20edge'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20address\x20(recipient\x20—\x20must\x20equal\x20payment_info.for_object;\x20submitted\x20by\x20the\x20forward\x20executor)'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','object_type':'Arb','name':'Arb\x20case\x20object\x20address\x20(submitted\x20by\x20the\x20forward\x20executor\x20at\x20runtime)'},{'identifier':0x2,'b_submission':![],'value_type':'Bool','value':!![],'name':'Expected\x20indemnity\x20PRESENCE\x20(true\x20=\x20a\x20ruling\x20exists).\x20PAIRED\x20with\x20the\x20zero-award\x20exclusion\x20leg\x20(id\x203):\x20presence\x20alone\x20let\x20a\x20Some(0)\x20merchant-favor\x20ruling\x20through\x20(rex-mn-261021\x20T5),\x20so\x20the\x20shipped\x20amount\x20!=\x200\x20leg\x20makes\x20this\x20gate\x20buyer-won-only'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'0','name':'Zero-award\x20constant\x20—\x20the\x20excluded\x20amount\x20(0\x20=\x20merchant-favor\x20ruling)'},{'identifier':0x5,'b_submission':![],'value_type':'U64','value':'${min_indemnity_floor}','name':'F-54\x20indemnity\x20FLOOR\x20(default\x200\x20=\x20any\x20non-zero\x20award\x20qualifies;\x20raise\x20to\x20refund_amount\x20×\x20arb_indemnity_floor_bps\x20/\x2010000\x20to\x20bar\x20token\x20indemnities\x20from\x20unlocking\x20the\x20refund\x20rail)'},{'identifier':0x4,'b_submission':![],'value_type':'Address','value':'${bound_arbitration_address}','name':'Store-bound\x20arbitration\x20venue\x20(tbs7\x20F-02):\x20arb.arbitration\x20must\x20equal\x20it\x20—\x20only\x20cases\x20heard\x20by\x20the\x20designated\x20venue\x20qualify'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'arb.order','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x0}]},{'type':'logic_equal','nodes':[{'type':'query','query':'arb.indemnity\x20some','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_not','node':{'type':'logic_as_u256_equal','nodes':[{'type':'query','query':'arb.indemnity.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x3}]}},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_as_u256_greater','nodes':[{'type':'query','query':'arb.indemnity.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_equal','nodes':[{'type':'query','query':'arb.arbitration','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x4}]}]},'applicable_industries':['travel','ecommerce','rental','education','subscription','licensing'],'relevant_risks':['R-X1-16'],'creation_notes':['⚠️\x20TRANSIENT-STATE\x20TRAP\x20(verified\x20on\x20testnet,\x20booking\x20o10):\x20gating\x20on\x20arb.status\x20==\x205\x20(Finished)\x20is\x20WRONG\x20—\x20arb.status\x20is\x20transient:\x20after\x20the\x20award\x20is\x20settled,\x20a\x20legitimate\x20arb_withdraw\x20by\x20the\x20arbitrator\x20advances\x20the\x20case\x205\x20(Finished)\x20→\x206\x20(Withdrawn),\x20permanently\x20killing\x20the\x20refund\x20edge.\x20Because\x20Guard\x20AND\x20Machine\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001),\x20a\x20mistyped\x20arb.status\x20gate\x20strands\x20the\x20refund\x20funds\x20forever\x20(o10:\x201.5\x20WOW\x20locked\x20with\x20no\x20on-chain\x20exit).','arb.indemnity\x20some\x20(Bool)\x20is\x20a\x20PRESENCE\x20signal\x20—\x20\x27a\x20ruling\x20is\x20on\x20chain\x27\x20(klk-ln-261011\x20F18:\x20the\x20ruling\x27s\x20indemnity\x20presence\x20check\x20tests\x20the\x20Option\x20field,\x20NOT\x20the\x20amount;\x20a\x20zero-award\x20merchant-favor\x20ruling\x20ALSO\x20sets\x20Some(0)\x20and\x20passes\x20a\x20some==true\x20leg,\x20verified\x20in\x20T5).\x20It\x20is\x20NOT\x20by\x20itself\x20a\x20\x27buyer\x20won\x27\x20proof:\x20the\x20SHIPPED\x20zero-award\x20exclusion\x20leg\x20(logic_not\x20over\x20logic_as_u256_equal[arb.indemnity.amount,\x200])\x20IS\x20the\x20actual-award\x20requirement\x20in\x20canonical\x20form\x20—\x20compose\x20by\x20COPY,\x20never\x20by\x20hand\x20(rex-mn-261021\x20T5\x20mainnet:\x20a\x20presence-only\x20root\x20let\x20the\x20DEFEATED\x20buyer\x20pull\x20the\x20refund).\x20Never\x20touched\x20by\x20arb_withdraw\x20(the\x20fee\x20sweep\x20pulls\x20only\x20from\x20the\x20fee\x20balance);\x20cleared\x20by\x20a\x20reset\x20(objection\x20cycle)\x20—\x20the\x20gate\x20fails\x20shut\x20during\x20the\x20objection\x20cycle\x20and\x20re-arms\x20only\x20after\x20a\x20fresh\x20ruling.','Time-sensitive\x20alternative:\x20arb.indemnity.time\x20(U64\x20ruling\x20timestamp)\x20combined\x20with\x20a\x20deadline\x20—\x20also\x20survives\x20fee\x20withdrawal.','arb.indemnity.amount\x20(U64)\x20exposes\x20the\x20awarded\x20amount\x20if\x20the\x20refund\x20leg\x20must\x20match\x20the\x20ruling\x20exactly;\x20the\x20native\x20query\x20errors\x20on\x20a\x20None\x20field,\x20so\x20an\x20amount-equality\x20leg\x20is\x20fail-closed\x20against\x20never-ruled\x20and\x20reset\x20states.','A\x20reset\x20(state\x204\x20objection\x20cycle)\x20CLEARS\x20the\x20indemnity\x20—\x20arb.indemnity\x20some\x20correctly\x20re-gates\x20to\x20false,\x20so\x20a\x20voided\x20ruling\x20cannot\x20trigger\x20the\x20refund\x20edge.','TWO-SLOT\x20DESIGN\x20(F-02\x20fix):\x20the\x20refund\x20rail\x20has\x20TWO\x20consumers\x20of\x20the\x20same\x20submission\x20—\x20the\x20forward\x20guard\x20needs\x20the\x20Arb\x20object\x20(to\x20read\x20the\x20ruling),\x20while\x20the\x20allocator\x20recipient\x20GuardIdentifier(0)\x20needs\x20the\x20Order\x20object\x20(payment_info.for_object\x20binding).\x20A\x20single\x20slot\x20cannot\x20satisfy\x20both.\x20This\x20two-slot\x20form\x20(slot\x200\x20=\x20Order,\x20slot\x201\x20=\x20Arb)\x20makes\x20the\x20pair\x20self-certifying\x20via\x20the\x20arb.order\x20==\x20order\x20binding\x20assertion,\x20closing\x20the\x20redirect\x20attack\x20where\x20a\x20merchant\x20pairs\x20their\x20own\x20favourable\x20ruling\x20with\x20a\x20victim\x20order\x27s\x20address.','The\x20allocator\x20only\x20reads\x20slot\x200\x20(GuardIdentifier(0)\x20→\x20Order),\x20so\x20the\x20refund\x20recipient\x20resolves\x20correctly;\x20the\x20forward\x20guard\x20reads\x20slot\x201\x20(Arb)\x20for\x20the\x20ruling\x20state.','4R-03b\x20SEQUENCE\x20DISCLOSURE\x20(OF2-02\x20precedent\x20—\x20disclose\x20to\x20keepers,\x20do\x20not\x20hide):\x20the\x20claimed_by\x20some==true\x20leg\x20makes\x20conclude-or-claim\x20a\x20HARD\x20PREREQUISITE\x20of\x20node\x20movement.\x20A\x20ruling\x20that\x20has\x20not\x20yet\x20paid\x20(claim)\x20or\x20stamped\x20(conclude)\x20BLOCKS\x20this\x20edge\x20—\x20that\x20is\x20the\x20intended\x20semantics\x20(the\x20ruled-but-unclaimed\x20refund\x20window\x20must\x20not\x20drain\x20the\x20escrow\x20ahead\x20of\x20the\x20award),\x20but\x20operators\x20MUST\x20sequence\x20their\x20runbook:\x20claim/conclude\x20FIRST,\x20drive\x20the\x20forward\x20edge\x20SECOND.\x20Driving\x20the\x20edge\x20before\x20the\x20stamp\x20fails\x20the\x20guard\x20and\x20the\x20machine\x20position\x20stays\x20put\x20(retry\x20after\x20the\x20stamp\x20—\x20no\x20state\x20is\x20lost).','F-54\x20INDEMNITY\x20FLOOR\x20(5R-07②\x20ruling\x202026-10-28\x20—\x20award\x20must\x20carry\x20weight):\x20a\x20token\x20award\x20unlocks\x20the\x20FULL\x20refund\x20rail\x20(tbp\x20live:\x200.001\x20indemnity\x20→\x202.0\x20refund)\x20because\x20the\x20canonical\x20legs\x20only\x20exclude\x20Some(0).\x20The\x20floor\x20leg\x20(identifier\x205,\x20default\x200)\x20prices\x20the\x20award:\x20set\x20min_indemnity_floor\x20=\x20refund_amount\x20×\x20arb_indemnity_floor_bps\x20/\x2010000\x20at\x20build\x20time\x20—\x20benchmark\x20arb_indemnity_floor_bps\x203000\x20(30%:\x20below\x20that\x20the\x20award\x20reads\x20as\x20a\x20face-saving\x20token,\x20not\x20a\x20buyer-won\x20ruling).\x20Compute\x20the\x20ABSOLUTE\x20floor\x20yourself\x20(fillGuardTemplate\x20has\x20no\x20arithmetic);\x200\x20keeps\x20today\x27s\x20semantics\x20and\x20must\x20be\x20DISCLOSED\x20as\x20\x27no\x20award\x20floor\x27\x20in\x20the\x20build.\x20The\x20floor\x20is\x20a\x20GUARD-level\x20default,\x20never\x20an\x20on-chain\x20forcing\x20function:\x20the\x20chain\x20pays\x20whatever\x20the\x20arbitrator\x20ruled;\x20this\x20leg\x20only\x20re-gates\x20the\x20refund\x20EDGE.\x20Zero-award\x20(Some(0))\x20rulings\x20keep\x20the\x20BF-14\x20branch\x20—\x20they\x20NEVER\x20qualify\x20for\x20the\x20refund\x20edge,\x20floor\x20or\x20no\x20floor.','VENUE\x20BINDING\x20(tbs7\x20F-02,\x202026-10-29):\x20there\x20is\x20NO\x20on-chain\x20check\x20tying\x20an\x20Arb\x20case\x20to\x20the\x20Service\x27s\x20designated\x20arbitration\x20—\x20arb.order\x20is\x20a\x20case-creator-filled\x20field,\x20so\x20a\x20self-built\x20Arbitration\x20(self\x20as\x20sole\x20arbiter)\x20can\x20carry\x20arb.order\x20==\x20victim\x20order\x20and\x20rule\x20an\x20indemnity.\x20The\x20venue\x20leg\x20(identifier\x204)\x20closes\x20that\x20class:\x20fill\x20it\x20with\x20the\x20SAME\x20Arbitration\x20address\x20the\x20Service\x20is\x20published\x20with\x20and\x20accept\x20only\x20cases\x20heard\x20there.\x20A\x20case\x20from\x20any\x20other\x20venue\x20fails\x20this\x20leg\x20—\x20route\x20those\x20to\x20keeper\x20review\x20instead\x20of\x20the\x20machine\x20edge.','KEEPER\x20EXECUTION\x20RIGHT\x20(tbs7\x20F-02):\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20the\x20store\x27s\x20KEEPER\x20permission\x20entity.\x20Merchant-only\x20execution\x20is\x20the\x20loser\x20enforcing\x20against\x20themselves\x20—\x20an\x20adverse\x20ruling\x20simply\x20never\x20advances\x20(bs29:\x20judgments\x20without\x20enforcement).\x20Open\x20namedOperator\x20execution\x20lets\x20ANYONE\x20drive\x20the\x20edge\x20—\x20combined\x20with\x20a\x20forged\x20venue\x20it\x20was\x20a\x20unilateral\x20force-refund.\x20Keeper\x20execution\x20+\x20the\x20venue\x20leg\x20means\x20only\x20the\x20designated\x20venue\x27s\x20rulings,\x20concluded\x20and\x20stamped,\x20move\x20the\x20escrow;\x20disclose\x20the\x20runbook:\x20conclude/claim\x20FIRST,\x20keeper\x20drives\x20the\x20edge\x20SECOND.','claimed_by\x20IS\x20THE\x20SEAL,\x20NOT\x20NODE\x20POSITION\x20(tbs7\x20F-02\x20mutual-exclusion\x20face):\x20read\x20order.claimed_by\x20(as\x20the\x204R-03b\x20leg\x20does),\x20never\x20infer\x20enforcement\x20from\x20the\x20machine\x20node\x20alone\x20—\x20a\x20node\x20named\x20refunded/disputed\x20carries\x20no\x20chain\x20truth.\x20Mutual\x20exclusion\x20lives\x20at\x20the\x20polarity\x20level:\x20any\x20PARALLEL\x20pre-award\x20refund\x20leg\x20on\x20the\x20same\x20machine\x20must\x20gate\x20order.claimed_by\x20some\x20==\x20FALSE\x20so\x20a\x20stamped\x20award\x20closes\x20it\x20(D-BUG-2\x20polarity\x20twin),\x20and\x20post-stamp\x20this\x20edge\x20alone\x20owns\x20the\x20escrow\x20exit\x20—\x20the\x20arbitrator\x27s\x20award\x20payout\x20(the\x20buyer\x27s\x20separate\x20compensation\x20pool)\x20and\x20this\x20escrow\x20refund\x20are\x20different\x20pools\x20by\x20design\x20(sanctioned\x20pairing;\x20disclose\x20acknowledge_dual_payout\x20where\x20both\x20fire).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Accommodation\x20overbooking\x20dispute:\x20buyer\x20files,\x20arbitrators\x20rule\x20in\x20favor\x20(indemnity\x20=\x20fund\x20boundary);\x20the\x20merchant\x27s\x20refund\x20forward\x20opens\x20only\x20while\x20arb.indemnity\x20some\x20==\x20true,\x20regardless\x20of\x20whether\x20the\x20arbitrator\x20has\x20already\x20withdrawn\x20the\x20case\x20fee.\x20The\x20forward\x20executor\x20submits\x20the\x20Order\x20and\x20Arb\x20addresses\x20together;\x20the\x20allocator\x20pays\x20the\x20Order-anchored\x20recipient\x20only\x20when\x20the\x20binding\x20assertion\x20holds.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_arb_ruling_dismissed','scene_id':'machine_forward_guard','name':'Arbitration\x20ruling-dismissed\x20gate\x20(a\x20real\x20ruling\x20exists\x20AND\x20it\x20favoured\x20the\x20merchant,\x20two-slot\x20order+arb)','description':'Guard\x20for\x20a\x20Machine\x20forward\x20that\x20closes\x20a\x20claim\x20when\x20the\x20arbitration\x20DISMISSED\x20it\x20'+'(e.g.\x20\x27claim_dismissed\x27\x20edge\x20from\x20a\x20post-stay\x20claim\x20node\x20to\x20payout,\x20or\x20\x27claim_dismissed_resume\x27\x20'+'restoring\x20the\x20booking).\x20The\x20verifier\x20submits\x20BOTH\x20the\x20Order\x20address\x20(slot\x200)\x20and\x20the\x20Arb\x20case\x20'+'object\x20address\x20(slot\x201);\x20the\x20gate\x20checks:\x20(1)\x20arb.order\x20==\x20order\x20—\x20the\x20Arb\x20case\x20IS\x20this\x20order\x27s\x20'+'dispute,\x20and\x20(2)\x20arb.indemnity.amount\x20==\x200\x20—\x20the\x20ruling\x20awarded\x20the\x20buyer\x20NOTHING\x20'+'(the\x20merchant-favor\x20outcome;\x20the\x20buyer-favor\x20outcome\x20is\x20indemnity.amount\x20>\x200,\x20which\x20gates\x20the\x20'+'companion\x20tpl_forward_arb_ruling_won\x20refund\x20edge).\x20Without\x20this\x20gate\x20a\x20bare-permission\x20dismissal\x20'+'edge\x20lets\x20the\x20platform\x20kill\x20a\x20buyer\x27s\x20claim\x20and\x20release\x20the\x20pool\x20with\x20zero\x20on-chain\x20ruling\x20'+'evidence\x20(N-T2\x20/\x20D2-DISMISS-EDGE-GUARD).\x20A\x20THIRD\x20leg\x20(4R-03b\x20sequence,\x20h1q\x20F-ARB-03)\x20requires\x20'+'order.claimed_by\x20some\x20==\x20true\x20on\x20the\x20Order:\x20the\x20dismissal\x20must\x20be\x20CONCLUDED\x20(the\x20permissionless\x20'+'keeper\x20conclude\x20stamps\x20claimed_by\x20on\x20protocol\x20>=\x20154,\x20arx\x20batch)\x20before\x20the\x20movement\x20edge\x20opens\x20—\x20'+'forcing\x20the\x20conclude-then-move\x20sequence\x20instead\x20of\x20the\x20whoever-moves-first\x20race\x20(bs29\x20R-02).\x20A\x20'+'FOURTH\x20leg\x20(tbs7\x20F-02,\x202026-10-29)\x20binds\x20the\x20VENUE:\x20arb.arbitration\x20must\x20equal\x20'+'bound_arbitration_address\x20(identifier\x203)\x20—\x20arb.order\x20is\x20case-creator-filled,\x20so\x20without\x20the\x20'+'venue\x20leg\x20a\x20forged\x20self-arbitrated\x20case\x20with\x20a\x20zero\x20indemnity\x20could\x20dismiss\x20a\x20live\x20claim\x20and\x20'+'release\x20the\x20pool;\x20only\x20cases\x20heard\x20by\x20the\x20store\x27s\x20designated\x20venue\x20qualify.','recommended_patterns':['P06','P09'],'parameters':[{'name':'bound_arbitration_address','type':'address','required':!![],'default':'${arbitration_name}','description':'tbs7\x20F-02\x20VENUE\x20BINDING:\x20the\x20Arbitration\x20object\x20the\x20Service\x20is\x20published\x20with\x20(NAME\x20or\x20address).\x20arb.arbitration\x20must\x20equal\x20it\x20for\x20the\x20dismissal\x20edge\x20to\x20open','constraint':'Name\x20form\x20(kernel\x20builds):\x20resolves\x20to\x20the\x20plan-created\x20\x27<base>_arbitration\x27\x20object.\x20Address\x20form\x20(hand\x20builds):\x20the\x20exact\x20Arbitration\x20address\x20bound\x20at\x20service\x20publish.\x20Guards\x20are\x20immutable\x20after\x20publish,\x20so\x20a\x20wrong\x20value\x20bricks\x20the\x20edge'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20address\x20(must\x20equal\x20arb.order;\x20submitted\x20by\x20the\x20forward\x20executor)'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','object_type':'Arb','name':'Arb\x20case\x20object\x20address\x20(submitted\x20by\x20the\x20forward\x20executor\x20at\x20runtime)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':'0','name':'Expected\x20indemnity\x20amount\x20(0\x20=\x20ruling\x20favoured\x20the\x20merchant)'},{'identifier':0x4,'b_submission':![],'value_type':'Bool','value':!![],'name':'Expected\x20claimed_by\x20STAMP\x20(true\x20=\x20the\x20case\x20was\x20concluded\x20—\x20the\x204R-03b\x20sequence\x20prerequisite)'},{'identifier':0x3,'b_submission':![],'value_type':'Address','value':'${bound_arbitration_address}','name':'Store-bound\x20arbitration\x20venue\x20(tbs7\x20F-02):\x20arb.arbitration\x20must\x20equal\x20it\x20—\x20only\x20cases\x20heard\x20by\x20the\x20designated\x20venue\x20qualify'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'arb.order','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x0}]},{'type':'logic_as_u256_equal','nodes':[{'type':'query','query':'arb.indemnity.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'arb.arbitration','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x3}]}]},'applicable_industries':['travel','ecommerce','rental','education','subscription'],'relevant_risks':['R-X1-16','R-C3-05'],'creation_notes':['WHY\x20amount\x20==\x200\x20alone\x20is\x20decisive:\x20the\x20native\x20arb.indemnity.amount\x20query\x20ERRORS\x20on\x20a\x20None\x20field,\x20and\x20a\x20guard-query\x20error\x20fails\x20the\x20verification\x20closed\x20—\x20so\x20the\x20leg\x20passes\x20ONLY\x20when\x20indemnity\x20is\x20Some(0),\x20and\x20indemnity\x20is\x20Some\x20ONLY\x20after\x20a\x20ruling\x20(the\x20state\x20machine\x27s\x20reset\x20path\x20clears\x20the\x20indemnity\x20on\x20an\x20overturned\x20ruling\x20—\x20no\x20separate\x20generation\x20counter\x20is\x20needed).\x20A\x20case\x20nobody\x20ever\x20ruled\x20on\x20(None)\x20and\x20a\x20reset/objection\x20case\x20(None)\x20both\x20fail\x20shut,\x20so\x20the\x20platform\x20can\x20never\x20dismiss\x20with\x20zero\x20ruling\x20evidence.','OVERTURN\x20SEMANTICS:\x20a\x20reset\x20clears\x20indemnity,\x20so\x20the\x20amount\x20==\x200\x20leg\x20errors\x20on\x20the\x20None\x20field\x20and\x20the\x20guard\x20verification\x20fails\x20closed.\x20After\x20a\x20re-ruling\x20the\x20gate\x20reads\x20the\x20NEW\x20amount,\x20so\x20the\x20gate\x20reflects\x20the\x20standing\x20ruling\x20—\x20the\x20correct\x20business\x20semantics:\x20a\x20fresh\x20merchant-favor\x20ruling\x20justifies\x20dismissal\x20exactly\x20as\x20much\x20as\x20the\x20overturned\x20one\x20did.','Same\x20two-slot\x20shape\x20as\x20tpl_forward_arb_ruling_won\x20(slot\x200\x20=\x20Order\x20for\x20the\x20arb.order\x20binding,\x20slot\x201\x20=\x20Arb\x20for\x20the\x20ruling\x20state)\x20—\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE,\x20never\x20share\x20a\x20guard\x20between\x20two\x20forwards.','NEVER\x20express\x20\x27favoured\x20the\x20merchant\x27\x20as\x20arb.indemnity\x20some\x20==\x20false:\x20it\x20conflates\x20never-ruled,\x20reset,\x20and\x20ruled-zero\x20states.\x20The\x20single\x20decisive\x20form\x20is\x20arb.indemnity.amount\x20==\x200\x20(fail-closed\x20on\x20None\x20via\x20the\x20native\x20query\x20error).','4R-03b\x20SEQUENCE\x20DISCLOSURE\x20(OF2-02\x20precedent\x20—\x20disclose\x20to\x20keepers,\x20do\x20not\x20hide):\x20the\x20claimed_by\x20some==true\x20leg\x20BREAKS\x20the\x20dismissed-but-unconcluded\x20path\x20BY\x20DESIGN\x20—\x20the\x20movement\x20edge\x20cannot\x20open\x20until\x20the\x20keeper\x20conclude\x20runs\x20and\x20stamps\x20claimed_by\x20(protocol\x20>=\x20154).\x20Sequence\x20the\x20runbook:\x20conclude\x20FIRST,\x20drive\x20the\x20edge\x20SECOND;\x20driving\x20first\x20fails\x20the\x20guard\x20with\x20the\x20position\x20intact\x20(retry\x20after\x20the\x20stamp).\x20A\x20keeper\x20bypassing\x20conclude\x20leaves\x20the\x20claim\x20stuck\x20at\x20this\x20node\x20—\x20that\x20is\x20the\x20guard\x20working\x20as\x20intended\x20(bs29\x20R-02:\x20the\x20permissionless\x20conclude\x20was\x20the\x20whoever-moves-first\x20race).','VENUE\x20BINDING\x20+\x20KEEPER\x20EXECUTION\x20(tbs7\x20F-02,\x202026-10-29):\x20arb.order\x20is\x20case-creator-filled\x20—\x20a\x20forged\x20self-arbitrated\x20case\x20with\x20a\x20Some(0)\x20ruling\x20passes\x20the\x20amount==0\x20leg\x20and\x20dismisses\x20a\x20LIVE\x20claim.\x20The\x20venue\x20leg\x20(identifier\x203,\x20filled\x20with\x20the\x20Arbitration\x20address\x20the\x20Service\x20is\x20published\x20with)\x20closes\x20that\x20class.\x20Bind\x20the\x20guard\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20the\x20store\x27s\x20KEEPER\x20permission\x20entity:\x20merchant-only\x20execution\x20lets\x20the\x20winner\x20simply\x20never\x20dismiss\x20(claim\x20stuck\x20forever),\x20open\x20namedOperator\x20execution\x20lets\x20anyone\x20force-dismiss\x20with\x20a\x20forged\x20venue;\x20keeper\x20+\x20venue\x20leg\x20means\x20only\x20the\x20designated\x20venue\x27s\x20concluded\x20rulings\x20move\x20the\x20machine.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Post-stay\x20claim\x20dismissed:\x20the\x20arbitrator\x20ruled\x20the\x20evidence\x20does\x20not\x20support\x20the\x20guest\x27s\x20claim\x20(indemnity\x200);\x20the\x20platform\x27s\x20claim_dismissed\x20forward\x20opens\x20only\x20when\x20THAT\x20ruling\x20is\x20on-chain\x20and\x20unoverturned,\x20then\x20the\x20settlement\x20release\x20pays\x20out\x20of\x20the\x20intact\x20pool.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_gen_passport_identity','scene_id':'gen_passport_guard','name':'Passport\x20identity\x20credential\x20generation\x20validation','description':'Standalone\x20Guard;\x20after\x20verifying\x20the\x20user\x27s\x20identity,\x20generates\x20a\x20Passport\x20with\x20a\x20credential,\x20used\x20as\x20submission\x20data\x20for\x20subsequent\x20operations.','recommended_patterns':['P03','P14'],'parameters':[{'name':'authorized_address','type':'address','description':'Authorized\x20address\x20(or\x20use\x20Vec<Address>\x20whitelist)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${authorized_address}','name':'Authorized\x20address'}],'example_root':{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x0}]},'applicable_industries':['ecommerce','education','travel','subscription','rental'],'relevant_risks':['R-C1-01','R-X1-10','R-X1-13'],'creation_notes':['gen_passport\x20is\x20a\x20standalone\x20Guard;\x20it\x20does\x20not\x20bind\x20a\x20Host\x20Object\x20(host_object:\x20Standalone)','quote_guard\x20is\x20a\x20rigid\x20requirement:\x20if\x20the\x20Guard\x20queries\x20Repository\x20data\x20with\x20quote_guard\x20set,\x20the\x20quote_guard\x20must\x20be\x20verified\x20(see\x20R-X1-10)','The\x20Guard\x20can\x20be\x20depended\x20on\x20by\x20other\x20Guards\x20via\x20rely\x20(requires\x20rep=true)','The\x20generated\x20Passport\x20can\x20be\x20used\x20as\x20submission\x20data\x20for\x20subsequent\x20operations'],'example_use_case':'After\x20the\x20user\x20passes\x20identity\x20verification,\x20a\x20Passport\x20is\x20generated;\x20this\x20Passport\x20is\x20then\x20submitted\x20as\x20an\x20identity\x20credential\x20in\x20subsequent\x20service\x20purchases.','verifier_constraint_level':'level1_strict'},{'id':'tpl_repository_quote_guard_subscription','scene_id':'repository_write','name':'Repository\x20data\x20subscription\x20with\x20payment\x20verification','description':'Repository\x20quote_guard\x20requires\x20payment\x20proof\x20for\x20data\x20access.\x20When\x20any\x20Guard\x20queries\x20this\x20Repository\x27s\x20data\x20(query\x201167),\x20the\x20quote_guard\x20is\x20rigidly\x20verified.\x20Enables\x20data\x20subscription\x20revenue\x20model\x20(e.g.,\x20weather\x20data,\x20market\x20oracle\x20data).','recommended_patterns':['P03','P07'],'parameters':[{'name':'repository_address','type':'address','description':'Repository\x20object\x20address','required':!![]},{'name':'subscription_price','type':'number','description':'Subscription\x20payment\x20amount\x20required\x20for\x20data\x20access','required':!![]},{'name':'payment_for_object','type':'address','description':'Payment\x20for_object\x20(Repository\x20address)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${repository_address}','name':'Repository\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'U256','value':'${subscription_price}','name':'Subscription\x20price'},{'identifier':0x2,'b_submission':!![],'value_type':'Address','name':'Submitted\x20Payment\x20(for_object\x20verification)'},{'identifier':0x3,'b_submission':!![],'value_type':'U256','name':'Submitted\x20Payment\x20amount'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.for','object':{'identifier':0x2}},{'type':'identifier','identifier':0x0}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'payment.amount','object':{'identifier':0x2}},{'type':'identifier','identifier':0x1}]}]},'applicable_industries':['subscription','travel','rental','education'],'relevant_risks':['R-X1-10'],'creation_notes':['VERIFIER-EVIDENCE\x20DESIGN:\x20user\x20submits\x20valid\x20Payment\x20via\x20Passport\x20(b_submission=true),\x20quote_guard\x20verifies\x20Payment\x20fields','quote_guard\x20must\x20be\x20a\x20standalone\x20repository-backed\x20guard:\x20immutable=true,\x20relies\x20empty,\x20rep=true','Repository.owner_receive<T>\x20accepts\x20Payment\x20as\x20subscription\x20revenue','Rigid\x20verification:\x20any\x20guard\x20querying\x20this\x20Repository\x27s\x20data\x20MUST\x20satisfy\x20the\x20quote_guard','Two-phase:\x20passport\x20generation\x20scans\x20+\x20prepares,\x20passport\x20verification\x20re-checks\x20+\x20verifies','VERIFIED\x20QUERY\x20NAMES:\x20payment.info.for\x20(id\x201107,\x20Address),\x20payment.amount\x20(id\x201100,\x20U256)'],'example_use_case':'Weather\x20data\x20provider\x20publishes\x20daily\x20temperature\x20data\x20to\x20Repository.\x20Insurance\x20Machine\x20queries\x20weather\x20data;\x20user\x20must\x20pay\x20subscription\x20(Payment)\x20to\x20access\x20data\x20in\x20their\x20insurance\x20claim\x20flow.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_buy_guard_order_holder','scene_id':'service_buy_guard','name':'Supply\x20chain\x20sub-order\x20purchase\x20verification','description':'Sub-service\x20buy_guard\x20verifies\x20the\x20user\x20owns\x20a\x20main\x20service\x20order.\x20Enables\x20supply\x20chain\x20milestone\x20unlock:\x20each\x20milestone\x20=\x20one\x20sub-order,\x20sub-service\x20only\x20purchasable\x20by\x20users\x20who\x20bought\x20the\x20main\x20service.','recommended_patterns':['P03','P04'],'parameters':[{'name':'main_service_address','type':'address','description':'Main\x20Service\x20object\x20address','required':!![]},{'name':'main_order_address','type':'address','description':'Submitted\x20main\x20Order\x20address\x20(b_submission=true)','required':![],'constraint':'If\x20using\x20P16\x20circular\x20reference,\x20use\x20service\x20name\x20instead\x20of\x20address'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${main_service_address}','name':'Main\x20service\x20address'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','name':'Submitted\x20main\x20Order\x20(ownership\x20verification)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x1}},{'type':'context','context':'Signer'}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.service','object':{'identifier':0x1}},{'type':'identifier','identifier':0x0}]}]},'applicable_industries':['travel','rental','education','freelance'],'relevant_risks':['R-C3-05'],'creation_notes':['VERIFIER-EVIDENCE\x20DESIGN:\x20user\x20submits\x20main\x20Order\x20as\x20evidence\x20(b_submission=true),\x20buy_guard\x20verifies\x20ownership\x20+\x20service\x20match','No\x20parent_order\x20field\x20needed\x20—\x20relationship\x20verified\x20via\x20buy_guard\x20querying\x20submitted\x20Order\x20fields','Each\x20milestone\x20=\x20one\x20sub-order\x20with\x20its\x20own\x20Service\x20+\x20buy_guard','Main\x20flow\x20can\x20branch\x20to\x20different\x20sub-services\x20based\x20on\x20Machine\x20node\x20progression','VERIFIED\x20QUERY\x20NAMES:\x20order.owner\x20(id\x201562,\x20Address),\x20order.service\x20(id\x201203,\x20Address)'],'example_use_case':'Travel\x20package:\x20main\x20service\x20=\x20tour\x20booking.\x20Sub-services\x20=\x20hotel,\x20guide,\x20transfer\x20—\x20each\x20with\x20buy_guard\x20verifying\x20the\x20user\x20purchased\x20the\x20main\x20tour\x20order.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_payment_exception_compensation','scene_id':'machine_forward_guard','name':'Exception\x20branch\x20compensation\x20Payment','description':'Machine\x20forward\x20guard\x20for\x20exception\x20handling:\x20verifies\x20a\x20compensation\x20Payment\x20bound\x20to\x20specific\x20order\x20+\x20guard\x20+\x20unique\x20progress\x20step\x20(history\x20count)\x20+\x20node\x20name.\x20Enables\x20user-friendly\x20exception\x20branches\x20(e.g.,\x20delivery\x20delay\x20>\x2030min\x20triggers\x20auto-compensation).','recommended_patterns':['P03','P07','P09'],'parameters':[{'name':'order_address','type':'address','description':'Order\x20object\x20address\x20(Payment\x20for_object\x20target)','required':!![]},{'name':'this_guard_address','type':'address','description':'This\x20guard\x27s\x20own\x20address\x20(Payment\x20for_guard\x20target)','required':!![]},{'name':'compensation_amount','type':'number','description':'Minimum\x20compensation\x20amount','required':!![]},{'name':'expected_node_name','type':'string','description':'Expected\x20node\x20name\x20(stored\x20in\x20PaymentInfo.remark,\x20compared\x20with\x20progress.current)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${order_address}','name':'Order\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${this_guard_address}','name':'This\x20guard\x20address'},{'identifier':0x2,'b_submission':![],'value_type':'U256','value':'${compensation_amount}','name':'Compensation\x20amount'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${expected_node_name}','name':'Expected\x20node\x20name\x20(for\x20remark\x20comparison)'},{'identifier':0x4,'b_submission':!![],'value_type':'Address','name':'Submitted\x20Payment\x20(compensation\x20proof)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.for','object':{'identifier':0x4}},{'type':'identifier','identifier':0x0}]},{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.guard','object':{'identifier':0x4}},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'payment.amount','object':{'identifier':0x4}},{'type':'identifier','identifier':0x2}]},{'type':'logic_as_u256_equal','nodes':[{'type':'query','query':'payment.info.index','object':{'identifier':0x4}},{'type':'query','query':'progress.history\x20count','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]},{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'payment.info.remark','object':{'identifier':0x4}},{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]}]},'applicable_industries':['rental','travel','ecommerce','freelance'],'relevant_risks':[],'creation_notes':['VERIFIED:\x20PaymentInfo\x20(for_object,\x20for_guard,\x20remark,\x20index),\x20payment_info_with_guard','VERIFIED:\x20withdraw\x20creates\x20the\x20Payment\x20as\x20a\x20fresh\x20singleton\x20object\x20from\x20the\x20withdrawn\x20object\x20set','VERIFIED\x20QUERY\x20NAMES:\x20payment.info.for\x20(id\x201107,\x20Address),\x20payment.info.guard\x20(id\x201109,\x20Address),\x20payment.info.index\x20(id\x201111,\x20U64),\x20payment.info.remark\x20(id\x201110,\x20String),\x20payment.amount\x20(id\x201100,\x20U64;\x20logic_as_u256_ge\x20casts\x20U64→U256\x20for\x20comparison)','VERIFIED\x20INDEX:\x20progress.history\x20count\x20(id\x201273,\x20U64)\x20=\x20unique\x20monotonically\x20increasing\x20step\x20index.\x20Even\x20in\x20cycles,\x20each\x20entry\x20has\x20a\x20different\x20count.','VERIFIED\x20NODE\x20NAME:\x20progress.current\x20(id\x201253,\x20String)\x20=\x20current\x20node\x20name.\x20A\x20node\x20can\x20be\x20entered\x20multiple\x20times\x20in\x20cycles,\x20but\x20the\x20history\x20count\x20is\x20unique\x20each\x20time.','DESIGN:\x20payment.info.index\x20stores\x20the\x20step\x20index\x20set\x20by\x20Treasury\x20at\x20creation\x20time;\x20progress.history\x20count\x20provides\x20the\x20current\x20unique\x20step.\x20Comparing\x20them\x20ensures\x20the\x20Payment\x20was\x20created\x20for\x20THIS\x20specific\x20progress\x20step.','DESIGN:\x20payment.info.remark\x20stores\x20the\x20node\x20name;\x20progress.current\x20provides\x20the\x20current\x20node\x20name.\x20Comparing\x20them\x20provides\x20semantic\x20verification\x20of\x20which\x20node\x20triggered\x20the\x20compensation.','ANTI-REUSE:\x204-dimensional\x20binding:\x20for_object\x20(Order)\x20+\x20for_guard\x20(Guard)\x20+\x20index\x20(unique\x20step)\x20+\x20remark\x20(node\x20name).\x20Same\x20Payment\x20cannot\x20be\x20reused\x20in\x20other\x20contexts.','Payment\x20is\x20freeze_object\x20(immutable)\x20—\x20cannot\x20be\x20modified\x20after\x20creation','VERIFIER-EVIDENCE\x20DESIGN:\x20customer\x20submits\x20Payment,\x20guard\x20verifies\x20binding\x20fields\x20match\x20current\x20context','Treasury\x20withdraws\x20compensation\x20with\x20PaymentInfo(for_object=order,\x20for_guard=this,\x20index=history_count_at_creation,\x20remark=node_name)',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Food\x20delivery:\x20if\x20delivery\x20delayed\x20>\x2030min\x20at\x20node\x20\x27delayed\x27\x20(history\x20count=5),\x20restaurant\x20Treasury\x20auto-compensates\x20$5\x20to\x20customer\x20with\x20PaymentInfo(for_object=order,\x20for_guard=this,\x20index=5,\x20remark=\x27delayed\x27).\x20Customer\x20submits\x20Payment\x20via\x20Passport,\x20guard\x20verifies\x20index\x20matches\x20current\x20history\x20count\x20AND\x20remark\x20matches\x20current\x20node\x20name.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_content_subscription_deliver','scene_id':'machine_forward_guard','name':'Content\x20subscription\x20delivery\x20verification\x20(Substack-style)','description':'Forward\x20guard\x20for\x20content\x20subscription\x20delivery\x20flow.\x20Verifies\x20that\x20(1)\x20the\x20order\x20is\x20at\x20the\x20expected\x20pre-delivery\x20node\x20'+'(e.g.\x20\x27Ordered\x27),\x20AND\x20(2)\x20the\x20Signer\x20holds\x20the\x20author\x27s\x20permission\x20index\x20on\x20the\x20bound\x20Permission\x20object.\x20'+'Prevents\x20unauthorized\x20parties\x20from\x20publishing\x20content\x20on\x20behalf\x20of\x20the\x20author.\x20'+'Designed\x20for\x20Substack-style\x20content\x20subscription:\x20Paid\x20→\x20ContentPublished\x20→\x20Completed\x20(success\x20path),\x20'+'with\x20Cancelled\x20and\x20Disputed\x20branches\x20using\x20separate\x20guards\x20(tpl_forward_content_subscription_cancel,\x20'+'tpl_forward_content_subscription_refund).','recommended_patterns':['P06','P09'],'parameters':[{'name':'expected_pre_delivery_node','type':'string','description':'Expected\x20current\x20node\x20name\x20BEFORE\x20delivery\x20(e.g.\x20\x27Ordered\x27)','required':!![],'default':'Ordered','constraint':'Must\x20exactly\x20match\x20the\x20name\x20defined\x20in\x20Machine\x20nodes\x20(case-sensitive).\x20This\x20is\x20the\x20node\x20from\x20which\x20the\x20\x27Deliver\x27\x20forward\x20advances.'},{'name':'permission_object','type':'address','description':'Permission\x20object\x20address\x20bound\x20to\x20the\x20Machine\x20(author\x20role\x20lives\x20here)','required':!![],'constraint':'Must\x20be\x20the\x20same\x20Permission\x20object\x20bound\x20to\x20the\x20Machine.\x20Use\x20name\x20(not\x20address)\x20if\x20Permission\x20is\x20not\x20yet\x20created.'},{'name':'author_permission_index','type':'number','description':'Permission\x20index\x20reserved\x20for\x20the\x20author\x20role\x20(who\x20can\x20publish\x20content)','required':!![],'default':'1000','constraint':'Must\x20match\x20the\x20index\x20configured\x20in\x20the\x20Permission\x20object.\x20Substack\x20convention:\x201000=author,\x201500=arbitrator,\x20reader\x20uses\x20namedOperator=\x27\x27\x20(no\x20specific\x20operator).'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)','binding_constraint':'Must\x20be\x20an\x20Order\x20belonging\x20to\x20the\x20bound\x20Service;\x20progress.current\x20must\x20match\x20expected_pre_delivery_node'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_pre_delivery_node}','name':'Expected\x20pre-delivery\x20node\x20name\x20(e.g.\x20\x27Ordered\x27)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${permission_object}','name':'Permission\x20object\x20address\x20(bound\x20to\x20Machine,\x20holds\x20author\x20role)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${author_permission_index}','name':'Author\x20permission\x20index\x20(e.g.\x201000)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'query','query':'permission.entity.perm\x20has','object':{'identifier':0x2},'parameters':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x3}]}]},'applicable_industries':['subscription','content','newsletter','media'],'relevant_risks':['R-C2-01','R-C2-03','R-X1-08'],'creation_notes':['VERIFIED\x20QUERY\x20NAMES:\x20progress.current\x20(id\x201253,\x20String)\x20—\x20current\x20node\x20name;\x20permission.entity.perm\x20has\x20(id\x201008,\x20Bool:\x20params\x20[user/guard\x20Address,\x20permission\x20index\x20U16])\x20—\x20direct\x20logic_and\x20child','SUBSTACK\x20DEPLOYMENT:\x20this\x20guard\x20was\x20used\x20in\x20Substack\x20v2\x20Service.\x20Original\x20v1\x20Service\x20was\x20published\x20without\x20arbitrations\x20—\x20had\x20to\x20be\x20recreated\x20as\x20v2\x20with\x20arbitrations\x20bound\x20BEFORE\x20publish\x20(F-S-21).','AUTHOR\x20ROLE:\x20permission\x20index\x201000\x20=\x20author\x20(publish\x20+\x20cancel).\x20namedOperator=\x27\x27\x20for\x20reader\x20role\x20(open\x20—\x20any\x20subscriber).\x20Arbitrator\x20uses\x20index\x201500.','FORWARD\x20DESIGN:\x20\x27Deliver\x27\x20forward\x20advances\x20from\x20\x27Ordered\x27\x20→\x20\x27ContentPublished\x27.\x20Threshold=1,\x20weight=1,\x20permissionIndex=1000\x20(author\x20only).','GUARD-FIRST-WINS:\x20when\x20\x27Ordered\x27\x20has\x20competing\x20forwards\x20(Deliver|Cancel|Dispute),\x20each\x20with\x20its\x20own\x20guard,\x20the\x20first\x20guard\x20to\x20verify\x20wins.\x20Subscribers\x20cannot\x20double-claim\x20by\x20triggering\x20multiple\x20forwards.','IMMUTABILITY:\x20Forward.guard\x20cannot\x20be\x20modified\x20after\x20Machine\x20publish.\x20Verify\x20all\x203\x20guards\x20(deliver/cancel/refund)\x20are\x20correctly\x20bound\x20BEFORE\x20publishing\x20the\x20Machine.','CIRCULAR\x20REF:\x20if\x20Permission\x20is\x20not\x20yet\x20created,\x20use\x20its\x20name\x20(not\x20address)\x20in\x20value\x20field\x20—\x20Guard\x20resolves\x20names\x20at\x20evaluation\x20time,\x20not\x20at\x20creation\x20time.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Substack\x20newsletter:\x20subscriber\x20pays\x20$5/month.\x20Author\x20publishes\x20content\x20→\x20\x27Deliver\x27\x20forward\x20advances\x20Ordered→ContentPublished.\x20'+'This\x20guard\x20verifies\x20(1)\x20order\x20is\x20at\x20\x27Ordered\x27\x20node\x20(not\x20already\x20delivered),\x20AND\x20(2)\x20Signer\x20holds\x20permission\x20index\x201000\x20on\x20author\x27s\x20Permission\x20object.\x20'+'Prevents\x20a\x20malicious\x20party\x20from\x20publishing\x20fake\x20content.\x20Subscriber\x20cannot\x20trigger\x20\x27Deliver\x27\x20(lacks\x20permission).','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_forward_content_subscription_cancel','scene_id':'machine_forward_guard','name':'Content\x20subscription\x20cancel\x20verification\x20(Substack-style)','description':'Forward\x20guard\x20for\x20content\x20subscription\x20cancel\x20flow.\x20Verifies\x20that\x20(1)\x20the\x20order\x20is\x20at\x20the\x20expected\x20pre-cancel\x20node\x20'+'(e.g.\x20\x27Ordered\x27),\x20AND\x20(2)\x20the\x20Signer\x20is\x20the\x20order\x20owner\x20(subscriber).\x20Allows\x20subscriber\x20to\x20cancel\x20within\x20grace\x20period\x20'+'for\x20full\x20refund.\x20Designed\x20for\x20Substack-style:\x20Paid\x20→\x20Cancelled\x20(terminal-cancel),\x20with\x20refund\x20via\x20Allocation\x20template.','recommended_patterns':['P06','P09'],'parameters':[{'name':'expected_pre_cancel_node','type':'string','description':'Expected\x20current\x20node\x20name\x20BEFORE\x20cancel\x20(e.g.\x20\x27Ordered\x27)','required':!![],'default':'Ordered','constraint':'Must\x20exactly\x20match\x20the\x20name\x20defined\x20in\x20Machine\x20nodes\x20(case-sensitive).'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_pre_cancel_node}','name':'Expected\x20pre-cancel\x20node\x20name\x20(e.g.\x20\x27Ordered\x27)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]}]}]},'applicable_industries':['subscription','content','newsletter','media'],'relevant_risks':['R-C2-01','R-C2-03'],'creation_notes':['VERIFIED\x20QUERY\x20NAMES:\x20progress.current\x20(id\x201253,\x20String);\x20order.owner\x20(id\x201562,\x20Address)\x20—\x20order\x20holder\x20(subscriber).','SUBSCRIBER-ONLY:\x20only\x20the\x20order\x20owner\x20can\x20cancel\x20—\x20prevents\x20third-party\x20griefing.\x20Author\x20cannot\x20cancel\x20on\x20behalf\x20of\x20subscriber.','GRACE\x20PERIOD:\x20this\x20guard\x20does\x20NOT\x20enforce\x20a\x20time\x20window.\x20If\x20a\x20grace\x20period\x20is\x20needed\x20(e.g.\x20cancel\x20within\x2024h\x20of\x20payment),\x20add\x20a\x20third\x20condition:\x20context(Clock)\x20<=\x20order.time\x20+\x20grace_period.','REFUND\x20ALLOCATION:\x20pair\x20this\x20guard\x20with\x20an\x20Allocation\x20template\x20that\x20refunds\x20100%\x20to\x20the\x20subscriber\x20(order.owner).\x20Trigger\x20node\x20=\x20\x27Cancelled\x27.','GUARD-FIRST-WINS:\x20when\x20\x27Ordered\x27\x20has\x20competing\x20forwards\x20(Deliver|Cancel|Dispute),\x20each\x20with\x20its\x20own\x20guard,\x20the\x20first\x20guard\x20to\x20verify\x20wins.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Substack\x20newsletter:\x20subscriber\x20pays\x20$5,\x20then\x20changes\x20mind\x20before\x20content\x20is\x20published.\x20\x27Cancel\x27\x20forward\x20advances\x20Ordered→Cancelled.\x20'+'This\x20guard\x20verifies\x20(1)\x20order\x20is\x20at\x20\x27Ordered\x27\x20(not\x20yet\x20delivered),\x20AND\x20(2)\x20Signer\x20is\x20the\x20order\x20owner.\x20'+'Author\x20cannot\x20cancel\x20on\x20behalf\x20of\x20subscriber.\x20Refund\x20triggers\x20automatically\x20via\x20Allocation\x20on\x20\x27Cancelled\x27\x20node.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_forward_content_subscription_refund','scene_id':'machine_forward_guard','name':'Content\x20subscription\x20refund\x20verification\x20(Substack-style,\x20arbitration-triggered)','description':'Forward\x20guard\x20for\x20content\x20subscription\x20dispute/refund\x20flow.\x20Verifies\x20that\x20(1)\x20the\x20order\x20is\x20at\x20the\x20expected\x20pre-dispute\x20node\x20'+'(e.g.\x20\x27Disputed\x27),\x20AND\x20(2)\x20the\x20Signer\x20holds\x20the\x20arbitrator\x27s\x20permission\x20index\x20on\x20the\x20bound\x20Permission\x20object.\x20'+'Only\x20the\x20arbitrator\x20can\x20advance\x20Disputed→Refunded,\x20ensuring\x20dispute\x20resolution\x20is\x20impartial.\x20'+'Designed\x20for\x20Substack-style:\x20Paid\x20→\x20Disputed\x20→\x20Refunded\x20(terminal-dispute).','recommended_patterns':['P06','P09'],'parameters':[{'name':'expected_pre_refund_node','type':'string','description':'Expected\x20current\x20node\x20name\x20BEFORE\x20refund\x20(e.g.\x20\x27Disputed\x27)','required':!![],'default':'Disputed','constraint':'Must\x20exactly\x20match\x20the\x20name\x20defined\x20in\x20Machine\x20nodes\x20(case-sensitive).'},{'name':'permission_object','type':'address','description':'Permission\x20object\x20address\x20bound\x20to\x20the\x20Machine\x20(arbitrator\x20role\x20lives\x20here)','required':!![],'constraint':'Must\x20be\x20the\x20same\x20Permission\x20object\x20bound\x20to\x20the\x20Machine.\x20Use\x20name\x20(not\x20address)\x20if\x20Permission\x20is\x20not\x20yet\x20created.'},{'name':'arbitrator_permission_index','type':'number','description':'Permission\x20index\x20reserved\x20for\x20the\x20arbitrator\x20role\x20(who\x20can\x20resolve\x20disputes)','required':!![],'default':'1500','constraint':'Must\x20match\x20the\x20index\x20configured\x20in\x20the\x20Permission\x20object.\x20Substack\x20convention:\x201000=author,\x201500=arbitrator.'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_pre_refund_node}','name':'Expected\x20pre-refund\x20node\x20name\x20(e.g.\x20\x27Disputed\x27)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${permission_object}','name':'Permission\x20object\x20address\x20(bound\x20to\x20Machine,\x20holds\x20arbitrator\x20role)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${arbitrator_permission_index}','name':'Arbitrator\x20permission\x20index\x20(e.g.\x201500)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'query','query':'permission.entity.perm\x20has','object':{'identifier':0x2},'parameters':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x3}]}]},'applicable_industries':['subscription','content','newsletter','media'],'relevant_risks':['R-C2-01','R-C2-03','R-X1-08'],'creation_notes':['VERIFIED\x20QUERY\x20NAMES:\x20progress.current\x20(id\x201253,\x20String)\x20—\x20current\x20node\x20name;\x20permission.entity.perm\x20has\x20(id\x201008,\x20Bool:\x20params\x20[user/guard\x20Address,\x20permission\x20index\x20U16])\x20—\x20direct\x20logic_and\x20child','ARBITRATOR-ONLY:\x20only\x20the\x20arbitrator\x20(permission\x20index\x201500)\x20can\x20advance\x20Disputed→Refunded.\x20Neither\x20author\x20nor\x20subscriber\x20can\x20self-resolve.','ARBITRATIONS\x20BINDING:\x20Service\x20MUST\x20have\x20arbitrations\x20bound\x20BEFORE\x20publish\x20(F-S-21\x20—\x20post-publish\x20immutable).\x20ConfirmGate\x20C-S-19\x20+\x20QS11\x20will\x20warn\x20if\x20publish\x20is\x20attempted\x20without\x20arbitrations.','DISPUTE\x20ENTRY:\x20\x27Dispute\x27\x20forward\x20(Ordered→Disputed)\x20is\x20triggered\x20by\x20subscriber\x20(order.owner).\x20After\x20Disputed,\x20only\x20arbitrator\x20can\x20resolve.','REFUND\x20ALLOCATION:\x20pair\x20this\x20guard\x20with\x20an\x20Allocation\x20template\x20that\x20refunds\x20100%\x20to\x20the\x20subscriber\x20(order.owner).\x20Trigger\x20node\x20=\x20\x27Refunded\x27.','GUARD-FIRST-WINS:\x20when\x20\x27Disputed\x27\x20has\x20competing\x20forwards\x20(Resolve-Refund|Resolve-Reject),\x20each\x20with\x20its\x20own\x20guard.\x20First\x20guard\x20to\x20verify\x20wins.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Substack\x20newsletter:\x20subscriber\x20disputes\x20content\x20quality.\x20Subscriber\x20triggers\x20\x27Dispute\x27\x20forward\x20(Ordered→Disputed).\x20'+'Arbitrator\x20reviews\x20evidence\x20and\x20triggers\x20\x27Resolve-Refund\x27\x20forward\x20(Disputed→Refunded).\x20'+'This\x20guard\x20verifies\x20(1)\x20order\x20is\x20at\x20\x27Disputed\x27\x20(dispute\x20properly\x20opened),\x20AND\x20(2)\x20Signer\x20holds\x20arbitrator\x20permission\x20index\x201500.\x20'+'Author\x20cannot\x20self-resolve.\x20Subscriber\x20cannot\x20self-refund.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_required_info_present','scene_id':'machine_forward_guard','name':'Required-info\x20presence\x20gate','description':'Presence-only\x20gate\x20on\x20the\x20fulfilment\x20forward:\x20order.required_info\x20must\x20be\x20recorded\x20(Option\x20some,\x20query\x201572)\x20'+'before\x20the\x20forward\x20that\x20needs\x20the\x20data\x20can\x20advance.\x20This\x20is\x20the\x20ONLY\x20on-chain\x20enforcement\x20of\x20'+'Service.customer_required\x20—\x20the\x20purchase\x20entry\x20never\x20reads\x20the\x20list\x20(declarative-only,\x20testnet\x20HIGH-05).\x20'+'Presence-only\x20by\x20design:\x201573\x20aborts\x20while\x20the\x20Option\x20is\x20empty,\x20and\x20the\x20recorded\x20address\x20is\x20unvalidated\x20'+'buyer\x20input\x20with\x20no\x20on-chain\x20meaning\x20—\x20acceptance\x20is\x20the\x20merchant\x27s\x20confirming\x20forward,\x20never\x20the\x20value.','recommended_patterns':['P09'],'parameters':[],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Submitted\x20Order\x20—\x20protocol\x20slot\x20254\x20task\x20binding\x20(written\x20by\x20order\x20creation)'}],'example_root':{'type':'query','query':'order.required_info\x20some','object':{'identifier':0xfe},'parameters':[]},'applicable_industries':['retail','travel','education','rental','general'],'relevant_risks':[],'creation_notes':['GATE\x20PRESENCE\x20(1572)\x20FIRST:\x20query\x201573\x20returns\x20the\x20Option\x27s\x20inner\x20address\x20and\x20ABORTS\x20the\x20guard\x20evaluation\x20when\x20nothing\x20is\x20recorded\x20—\x201573\x20is\x20for\x20reading/comparing\x20AFTER\x20the\x20presence\x20gate\x20passed.','No\x20parameters\x20by\x20design:\x20presence-only.\x20Never\x20make\x20the\x20recorded\x20address\x20(or\x20a\x20Proof\x27s\x20content)\x20a\x20guard\x20decision\x20condition\x20—\x20the\x20credential\x20is\x20buyer-writable\x20and\x20unvalidated;\x20route\x20content-grade\x20checks\x20through\x20a\x20Repository\x20with\x20a\x20quote_guard.','Gate\x20the\x20forward\x20that\x20DEPENDS\x20on\x20the\x20information\x20(ship\x20/\x20hand-over\x20/\x20accept-before-crafting),\x20never\x20the\x20buy:\x20a\x20buy_guard\x20cannot\x20query\x20the\x20Order\x20—\x20it\x20does\x20not\x20exist\x20yet\x20at\x20buy\x20time.','DUAL\x20MOUNT\x20WHEN\x20COLLECTION\x20AND\x20CONSUMPTION\x20SPLIT\x20(ksk4\x20F-06):\x20when\x20the\x20information\x20is\x20COLLECTED\x20on\x20one\x20edge\x20(a\x20survey\x20/\x20proof-upload\x20/\x20required-info\x20submission\x20forward)\x20and\x20CONSUMED\x20on\x20a\x20LATER\x20one\x20(fulfilment\x20/\x20ship),\x20mount\x20this\x20gate\x20on\x20the\x20COLLECTION\x20edge\x20AS\x20WELL\x20—\x20gating\x20only\x20the\x20consumer\x20lets\x20the\x20order\x20rest\x20past\x20the\x20collection\x20point\x20with\x20NOTHING\x20recorded,\x20and\x20the\x20failure\x20surfaces\x20one\x20node\x20later\x20as\x20the\x20wrong\x20party\x27s\x20blocker\x20(the\x20creator\x20cannot\x20start\x20work\x20instead\x20of\x20the\x20buyer\x20being\x20refused\x20at\x20submission\x20time).\x20The\x20collection\x20edge\x20is\x20not\x20statically\x20identifiable\x20in\x20general\x20(a\x20node\x20name\x20proves\x20nothing),\x20so\x20there\x20is\x20NO\x20scanner\x20rule\x20for\x20this\x20—\x20it\x20is\x20a\x20build-time\x20mounting\x20discipline:\x20every\x20edge\x20whose\x20forward\x20WRITES\x20the\x20required\x20info\x20carries\x20the\x20presence\x20gate,\x20every\x20edge\x20whose\x20forward\x20READS\x20it\x20carries\x20the\x20gate\x20too.','Slot\x20254\x20is\x20declared\x20here\x20(the\x20kernel\x20skips\x20its\x20injection\x20when\x20a\x20guard\x20already\x20declares\x20it):\x20the\x20trigger\x20passport\x20submits\x20{254:\x20order}.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Handmade/custom\x20storefront:\x20the\x20shop\x20declares\x20customer_required\x20(personalisation\x20spec,\x20measurements).\x20'+'The\x20\x27confirmed\x27\x20(seller\x20acceptance)\x20or\x20\x27ship\x27\x20forward\x20carries\x20this\x20gate,\x20so\x20an\x20order\x20whose\x20buyer\x20never\x20'+'recorded\x20the\x20required\x20credential\x20cannot\x20advance\x20—\x20without\x20the\x20gate\x20such\x20an\x20order\x20is\x20created\x20and\x20'+'progresses\x20silently\x20(the\x20purchase\x20entry\x20never\x20reads\x20the\x20list).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_lock_progress','scene_id':'machine_forward_guard','name':'Time-lock\x20node-entry\x20gate\x20(opening\x20window)','description':'Gates\x20a\x20forward\x20on\x20elapsed\x20time\x20since\x20node\x20entry:\x20the\x20chain\x20Clock\x20must\x20be\x20>=\x20the\x20source\x20node\x27s\x20'+'entry\x20time\x20(query\x201280\x20progress.history.time)\x20+\x20duration_ms.\x20Opening-gate\x20direction\x20(greater_or_equal):\x20the\x20forward\x20stays\x20'+'BLOCKED\x20until\x20the\x20duration\x20elapses\x20—\x20settlement\x20delays,\x20acceptance\x20timeouts,\x20keeper\x20auto-advance\x20rails.\x20'+'Executable\x20form\x20of\x20pattern.time_lock_progress;\x20the\x20closing-window\x20twin\x20(act\x20only\x20UNTIL\x20entry+N)\x20is\x20'+'tpl_time_window_upper.\x20Anchor\x20semantics:\x20the\x20anchor\x20is\x20the\x20IMMUTABLE\x20recorded\x20entry\x20moment\x20of\x20the\x20'+'source\x20node\x20(witness-derived\x20via\x20OrderProgress),\x20so\x20one\x20Guard\x20serves\x20every\x20order;\x20a\x20re-entered\x20node\x20'+'appends\x20a\x20fresh\x20entry\x20and\x20restarts\x20the\x20lock\x20(find=last).\x20For\x20a\x20window\x20measured\x20from\x20purchase\x20use\x20an\x20'+'order.time\x20anchor\x20instead\x20(TIME-ANCHOR-01).','recommended_patterns':['P06'],'parameters':[{'name':'duration_ms','type':'number','description':'Time-lock\x20duration\x20in\x20milliseconds\x20(measured\x20from\x20the\x20source\x20node\x27s\x20entry)','required':!![],'constraint':'Plain\x20integer\x20milliseconds;\x20test\x20with\x20small\x20values\x20first\x20—\x20chain\x20Clock\x20is\x20block-driven,\x20not\x20wall\x20time'},{'name':'expected_node','type':'string','description':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(the\x20node\x20whose\x20entry\x20anchors\x20the\x20clock)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(clock\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${duration_ms}','name':'Time-lock\x20duration\x20in\x20milliseconds'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'last'},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['rental','ecommerce','education','travel','subscription','freelance'],'relevant_risks':[],'creation_notes':['DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20entry+N]\x20encodes\x20an\x20OPENING\x20gate\x20(blocked\x20until\x20entry+N).\x20For\x20a\x20CLOSING\x20window\x20(action\x20allowed\x20only\x20until\x20entry+N)\x20use\x20tpl_time_window_upper\x20—\x20inverting\x20the\x20comparison\x20makes\x20every\x20window\x20permanently\x20open.','ENTRY-TIME\x20ANCHOR\x20(v76):\x20the\x20clock\x20anchors\x20on\x20the\x20source\x20node\x27s\x20recorded\x20entry\x20moment\x20—\x20query\x201280\x20progress.history.time\x20filtered\x20by\x20where.nextNode\x20=\x20${expected_node},\x20find=last.\x20The\x20record\x20is\x20written\x20once\x20on\x20entering\x20the\x20node\x20and\x20never\x20rewritten\x20(drift-immune);\x20a\x20RE-ENTERED\x20node\x20appends\x20a\x20fresh\x20entry,\x20so\x20find=last\x20picks\x20the\x20latest\x20entry\x20and\x20the\x20lock\x20restarts\x20—\x20intended\x20semantics\x20for\x20entry-anchored\x20locks\x20(settle\x20N\x20days\x20after\x20delivery,\x20auto-confirm\x20N\x20days\x20after\x20shipment).\x20A\x20window\x20measured\x20from\x20PURCHASE\x20must\x20anchor\x20on\x20order.time\x20via\x20the\x20order\x20witness\x20instead\x20(TIME-ANCHOR-01);\x20order.time\x20is\x20path-independent.','DOUBLE-MOUNT\x20DOUBLING\x20(az3-mn-261013\x20F-18,\x20mainnet-timed):\x20mounting\x20ONE\x20time-lock\x20Guard\x20on\x20BOTH\x20a\x20forward\x20AND\x20the\x20allocator\x20riding\x20the\x20SAME\x20transition\x20makes\x20the\x20caller\x20wait\x20TWICE\x20—\x20the\x20forward\x20waits\x20N\x20anchored\x20on\x20the\x20source\x20node\x20entry,\x20then\x20the\x20allocator\x20RE-ANCHORS\x20on\x20the\x20destination\x20node\x20entry\x20and\x20waits\x20N\x20again\x20(az3\x20T1:\x20abort\x207\x20twice,\x20effective\x202x\x20dwell).\x20Remedies\x20at\x20build\x20time:\x20(a)\x20put\x20the\x20time\x20lower\x20bound\x20ONLY\x20on\x20the\x20allocator\x20(the\x20forward\x20advances\x20as\x20soon\x20as\x20its\x20non-time\x20legs\x20pass;\x20settlement\x20still\x20waits\x20a\x20single\x20N\x20from\x20the\x20destination\x20entry),\x20or\x20(b)\x20mount\x20two\x20SEPARATE\x20Guard\x20instances\x20with\x20durations\x20that\x20sum\x20to\x20the\x20intended\x20total\x20(N_forward\x20from\x20the\x20source\x20entry\x20+\x20N_alloc\x20from\x20the\x20destination\x20entry).\x20Never\x20reuse\x20one\x20instance\x20across\x20both\x20mounts.','TIME\x20SOURCE\x20DUALITY:\x20chain\x20Clock\x20is\x20native\x20but\x20block-driven\x20and\x20independent\x20of\x20wall\x20time\x20—\x20fine\x20for\x20relative\x20locks;\x20for\x20real-world\x20deadlines\x20use\x20the\x20repository\x20time-oracle\x20recipe\x20(pattern.time_source_repository_oracle)\x20and\x20document\x20which\x20source\x20a\x20published\x20Guard\x20relies\x20on.','OWNER-ONLY\x20STRENGTHENING:\x20this\x20root\x20binds\x20no\x20Signer\x20(keeper\x20slots\x20advance\x20it).\x20For\x20a\x20buyer-advanced\x20forward,\x20AND\x20the\x20identity\x20leg\x20logic_equal[context(Signer),\x20query\x20order.owner]\x20—\x20an\x20unbound\x20keeper\x20edge\x20must\x20never\x20be\x20the\x20only\x20rail\x20out\x20of\x20a\x20locked\x20node\x20(pair\x20with\x20an\x20expiry\x20forward\x20or\x20a\x20recover\x20allocator).','Forward.guard\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20Machine\x20publish);\x20verify\x20the\x20node\x20name\x20and\x20duration\x20against\x20the\x20Machine\x20before\x20publishing.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Long-stay\x20rental:\x20the\x20\x27month\x20settled\x27\x20forward\x20out\x20of\x20the\x20settlement\x20node\x20advances\x20only\x20after\x20the\x20'+'30-day\x20settlement\x20delay\x20elapsed\x20since\x20handover\x20entry\x20—\x20the\x20keeper\x20rail\x20cannot\x20release\x20rent\x20early,\x20'+'and\x20one\x20Guard\x20serves\x20every\x20order\x20(entry\x20time\x20is\x20per-order\x20state,\x20not\x20a\x20Guard\x20constant).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_window_upper','scene_id':'machine_forward_guard','name':'Time-window\x20upper\x20bound\x20+\x20order-holder\x20identity\x20(closing\x20window)','description':'Gates\x20a\x20forward\x20to\x20a\x20window\x20that\x20CLOSES:\x20the\x20chain\x20Clock\x20must\x20be\x20<=\x20the\x20source\x20node\x27s\x20'+'entry\x20time\x20(query\x201280\x20progress.history.time)\x20+\x20duration_ms,\x20ANDed\x20with\x20the\x20order-holder\x20'+'identity\x20set\x20(owner\x20or\x20agent,\x20read\x20at\x20the\x20254\x20task-binding\x20slot).\x20Closing-window\x20'+'direction\x20(lesser_or_equal):\x20the\x20forward\x20is\x20allowed\x20only\x20WHILE\x20the\x20window\x20is\x20open\x20—\x20return\x20'+'windows,\x20claim\x20windows,\x20review\x20windows;\x20after\x20expiry\x20the\x20forward\x20aborts.\x20The\x20identity\x20leg\x20is\x20'+'NOT\x20optional\x20(etsy-aurelia\x20F-01):\x20an\x20edge\x27s\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20'+'authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20time-only\x20guard\x20on\x20'+'a\x20buyer\x20window\x20is\x20callable\x20by\x20ANY\x20signer.\x20Executable\x20form\x20of\x20pattern.time_window_upper_bound\x20'+'+\x20pattern.identity_check_order_holder;\x20the\x20opening-gate\x20twin\x20is\x20tpl_time_lock_progress.\x20'+'Anchor\x20semantics:\x20the\x20anchor\x20is\x20the\x20IMMUTABLE\x20recorded\x20entry\x20moment\x20of\x20the\x20source\x20node\x20'+'(witness-derived\x20via\x20OrderProgress),\x20taken\x20as\x20find=FIRST\x20(tbs7\x20F-03/O16/O17):\x20the\x20window\x20opens\x20'+'once\x20at\x20the\x20ORIGINAL\x20entry\x20and\x20can\x20never\x20be\x20re-armed\x20—\x20a\x20party\x20that\x20re-enters\x20the\x20source\x20node\x20'+'after\x20expiry\x20stays\x20blocked\x20by\x20this\x20same\x20leg;\x20the\x20current-node\x20leg\x20plus\x20the\x20first-entry\x20anchor\x20'+'make\x20the\x20two\x20conditions\x20contradictory.\x20For\x20a\x20window\x20that\x20LEGITIMATELY\x20renews\x20per\x20period\x20'+'(subscription\x20claims)\x20anchor\x20per-period\x20instead;\x20for\x20a\x20window\x20measured\x20from\x20purchase\x20use\x20an\x20'+'order.time\x20anchor\x20(TIME-ANCHOR-01).','recommended_patterns':['P06'],'parameters':[{'name':'duration_ms','type':'number','description':'Window\x20length\x20in\x20milliseconds\x20(measured\x20from\x20the\x20source\x20node\x27s\x20entry)','required':!![],'constraint':'Plain\x20integer\x20milliseconds;\x20test\x20with\x20small\x20values\x20first\x20—\x20chain\x20Clock\x20is\x20block-driven,\x20not\x20wall\x20time'},{'name':'expected_node','type':'string','description':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(the\x20node\x20whose\x20entry\x20opens\x20the\x20window)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(window\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${duration_ms}','name':'Window\x20length\x20in\x20milliseconds'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'first'},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['rental','ecommerce','education','travel','subscription','freelance'],'relevant_risks':[],'creation_notes':['DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06,\x20live-confirmed\x20on\x20a\x2030-day-return\x20migration):\x20lesser_or_equal[Clock,\x20entry+N]\x20closes\x20the\x20window;\x20the\x20opening-gate\x20twin\x27s\x20greater_or_equal\x20would\x20REOPEN\x20it\x20forever.\x20Opening\x20gate\x20(wait\x20N\x20before\x20acting)\x20=\x20tpl_time_lock_progress;\x20closing\x20window\x20(act\x20before\x20N\x20elapses)\x20=\x20THIS\x20template.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20time-only\x20guard\x20on\x20a\x20buyer\x20window\x20is\x20callable\x20by\x20ANY\x20signer.\x20The\x20owner/agent\x20identity\x20legs\x20ship\x20IN\x20example_root\x20over\x20the\x20254\x20task-binding\x20slot;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.','EXPIRY\x20SEMANTICS:\x20an\x20expired\x20window\x20only\x20fails\x20the\x20forward\x20it\x20gates\x20—\x20it\x20does\x20not\x20refund\x20or\x20cancel\x20by\x20itself.\x20Pair\x20the\x20window\x20with\x20a\x20machine\x20expiry\x20forward\x20(keeper-advanced)\x20or\x20an\x20allocator\x20recover\x20rail\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).','ENTRY-TIME\x20ANCHOR\x20(v76,\x20find=FIRST\x20since\x20tbs7\x20F-03/O16/O17):\x20the\x20window\x20anchors\x20on\x20the\x20source\x20node\x27s\x20recorded\x20entry\x20moment\x20—\x20query\x201280\x20progress.history.time\x20filtered\x20by\x20where.nextNode\x20=\x20${expected_node},\x20find=FIRST.\x20The\x20record\x20is\x20immutable\x20(drift-immune)\x20and\x20the\x20FIRST\x20entry\x20never\x20moves,\x20so\x20re-entering\x20the\x20source\x20node\x20can\x20NOT\x20re-arm\x20the\x20window\x20(the\x20old\x20find=last\x20default\x20let\x20the\x20party\x20that\x20controls\x20re-entry\x20restart\x20the\x20window\x20forever\x20—\x20the\x20tbs7\x20live\x20reset\x20exploit).\x20For\x20a\x20window\x20that\x20legitimately\x20renews\x20per\x20period\x20(subscription\x20claims)\x20anchor\x20per-period\x20with\x20find=last\x20on\x20the\x20period\x27s\x20own\x20entry;\x20for\x20a\x20window\x20measured\x20from\x20PURCHASE\x20(e.g.\x20\x27return\x20within\x2030\x20days\x20of\x20buying\x27)\x20anchor\x20on\x20order.time\x20via\x20the\x20order\x20witness\x20instead\x20(TIME-ANCHOR-01).','TIME\x20SOURCE\x20DUALITY:\x20chain\x20Clock\x20is\x20block-driven\x20—\x20use\x20the\x20repository\x20time-oracle\x20recipe\x20(pattern.time_source_repository_oracle)\x20for\x20real-world\x20deadlines.','Forward.guard\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20Machine\x20publish);\x20verify\x20the\x20node\x20name\x20and\x20window\x20against\x20the\x20Machine\x20before\x20publishing.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Retail\x20return\x20rail:\x20the\x20\x27return\x20requested\x27\x20forward\x20out\x20of\x20\x27delivered\x27\x20advances\x20only\x20for\x20the\x20'+'order\x20holder\x20and\x20only\x20within\x2030\x20days\x20of\x20the\x20delivered\x20entry;\x20after\x20expiry\x20the\x20buyer\x27s\x20route\x20'+'is\x20the\x20keeper\x20expiry\x20rail,\x20not\x20this\x20forward.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_forward_order_holder','scene_id':'machine_forward_guard','name':'Order-holder\x20identity\x20gate\x20(buyer\x20self-advance;\x20254-anchored)','description':'Instantiable\x20form\x20of\x20pattern.identity_check_order_holder:\x20the\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20'+'the\x20order\x20owner\x20OR\x20a\x20registered\x20order\x20agent.\x20All\x20identity\x20legs\x20'+'read\x20the\x20254\x20task-binding\x20slot\x20(T10,\x20rex-mn-261021)\x20—\x20a\x20free\x20submission\x20slot\x20is\x20hijackable,\x20because\x20the\x20'+'caller\x20fills\x20free\x20slots\x20and\x20could\x20submit\x20their\x20OWN\x20order\x20there.\x20Pair\x20with\x20operator\x20order_payer\x20'+'(namedOperator\x20\x22\x22)\x20on\x20the\x20edge:\x20a\x20permissionIndex\x20rail\x20has\x20a\x20disjoint\x20signer\x20set\x20and\x20nobody\x20passes\x20'+'both\x20layers\x20(bkng\x20F23).','recommended_patterns':['P10','P16'],'parameters':[],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},'applicable_industries':['travel','rental','ecommerce','education','freelance'],'relevant_risks':['R-C3-01','R-C3-05','R-C3-06','R-C4-04'],'creation_notes':['T10\x20HIJACK\x20ANCHOR\x20(rex-mn-261021):\x20the\x20identity\x20legs\x20MUST\x20read\x20the\x20order\x20at\x20slot\x20254\x20—\x20the\x20caller\x20fills\x20free\x20slots,\x20so\x20reading\x20order.owner\x20off\x20a\x20free\x20submission\x20slot\x20lets\x20an\x20attacker\x20submit\x20their\x20OWN\x20order\x20(signer\x20==\x20order.owner\x20passes\x20against\x20it)\x20and\x20advance\x20the\x20VICTIM\x27s\x20order\x20carried\x20by\x20254.\x20The\x20compile\x20blocker\x20GUARD_IDENTITY_SLOT_NOT_TASKBOUND\x20enforces\x20the\x20anchor\x20on\x20resolved\x20trees.','EDGE\x20OPERATOR\x20PAIRING\x20(bkng\x20F23):\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20order_payer\x20(namedOperator\x20\x22\x22).\x20The\x20identity\x20layer\x20runs\x20BEFORE\x20the\x20guard;\x20a\x20permissionIndex\x20rail\x27s\x20signer\x20set\x20is\x20disjoint\x20from\x20the\x20order\x20holder\x27s,\x20so\x20the\x20pair\x20can\x20never\x20both\x20pass.\x20The\x20compile\x20blocker\x20FORWARD_GUARD_IDENTITY_PERM_CONFLICT\x20enforces\x20this\x20for\x20this\x20template\x20id.','MIXED\x20RETURN-TYPE\x20CONSTRUCTION:\x20order.owner\x20(1562)\x20returns\x20Address\x20→\x20wrapped\x20in\x20logic_equal\x20with\x20context(Signer);\x20order.agent\x20has\x20(1567)\x20returns\x20Bool\x20→\x20used\x20directly\x20as\x20the\x20logic_or\x20child\x20with\x20parameters\x20[context(Signer)].','An\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive\x20BY\x20ITSELF:\x20whoever\x20holds\x20the\x20order\x20may\x20drive\x20the\x20forward\x20—\x20exactly\x20the\x20buyer\x20self-advance\x20semantic.\x20WITHOUT\x20this\x20guard\x20the\x20empty\x20operator\x20admits\x20ANY\x20caller\x20(the\x20on-chain\x20forward\x20entry\x20never\x20checks\x20the\x20caller),\x20so\x20the\x20guard\x20is\x20the\x20sole\x20identity\x20leg\x20(bkg15\x20F05:\x20forged\x20guest\x20check-in).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20stay:\x20the\x20guest\x20check-in\x20confirmation\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20the\x20booking\x27s\x20order\x20'+'owner\x20or\x20a\x20registered\x20agent\x20—\x20the\x20platform\x20cannot\x20fabricate\x20the\x20buyer\x20half\x20of\x20the\x20dual\x20confirmation.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_review_submit_content_gate','scene_id':'machine_forward_guard','name':'Review\x20content\x20gate\x20(order-holder\x20identity\x20+\x20order-keyed\x20rating-row\x20presence)','description':'SubmitReview\x20twin\x20of\x20tpl_forward_order_holder:\x20the\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20the\x20'+'order\x20owner\x20OR\x20a\x20registered\x20agent\x20(identical\x20254-anchored\x20identity\x20legs),\x20AND\x20the\x20plan\x27s\x20review\x20'+'repository\x20holds\x20a\x20\x27rating\x27\x20row\x20for\x20THIS\x20order\x20(query_repository_data_has,\x20legacy\x201166\x20—\x20missing\x20'+'row\x20yields\x20false,\x20never\x20aborts),\x20and\x20—\x20⑧\x20ktt3\x20F04,\x20only\x20when\x20delivered_node\x20is\x20set\x20—\x20the\x20order\x20'+'ENTERED\x20the\x20delivery\x20node\x20at\x20least\x20once\x20(query\x201274\x20existence\x20probe,\x20aborts\x20when\x20absent),\x20and\x20—\x20'+'F-17\x20ktt3,\x20only\x20when\x20review_window_days\x20is\x20also\x20set\x20—\x20Clock\x20<=\x20the\x20delivery\x20node\x27s\x20FIRST\x20entry\x20'+'(query\x201280\x20find:first)\x20+\x20review_window_days:\x20the\x20review\x20rail\x20CLOSES\x20after\x20the\x20window\x20(快团团\x20'+'semantic:\x20reviews\x20close\x2015\x20days\x20after\x20delivery).\x20Binds\x20'+'the\x20review\x20rail\x20to\x20real\x20content:\x20the\x20credential\x20write\x20side\x20'+'(compile-emitted\x20guard_review_write)\x20is\x20order-keyed,\x20so\x20a\x20review\x20that\x20never\x20landed\x20cannot\x20be\x20'+'reviewed\x20past.\x20Pairs\x20with\x20operator\x20order_payer\x20on\x20the\x20edge\x20(bkng\x20F23\x20rail-split\x20discipline).','recommended_patterns':['P10','P13','P16'],'parameters':[{'name':'review_repository','type':'string','description':'The\x20plan\x27s\x20buyer-review\x20Repository\x20(\x27<base>_review\x27,\x20emitted\x20by\x20the\x20compile\x20review\x20component)\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20on\x20the\x20fill\x20path;\x20only\x20review_mode\x20\x27none\x27\x20plans\x20lack\x20it','required':!![],'constraint':'Must\x20be\x20a\x20name\x20(P16\x20late-binding),\x20not\x20an\x20address.\x20Seeded\x20by\x20the\x20kernel\x20as\x20\x27<base>_review\x27;\x20do\x20NOT\x20mount\x20this\x20gate\x20on\x20a\x20review_mode\x20\x27none\x27\x20plan\x20—\x20there\x20is\x20no\x20such\x20repository\x20and\x20the\x201166\x20probe\x20yields\x20false,\x20welding\x20the\x20edge\x20shut'},{'name':'delivered_node','type':'string','description':'⑧\x20ktt3\x20F04:\x20the\x20machine\x20node\x20whose\x20PAST\x20ENTRY\x20marks\x20\x27the\x20goods\x20were\x20handed\x20over\x27\x20(semantic_role\x20\x27delivered\x27\x20—\x20e.g.\x20\x27picked_up\x27,\x20\x27delivered\x27).\x20Non-empty\x20=\x20the\x20gate\x20grows\x20a\x20history-EXISTENCE\x20leg\x20(query\x201274\x20find\x20over\x20where.nextNode,\x20which\x20ABORTS\x20when\x20no\x20entry\x20matches\x20—\x20fail-closed):\x20only\x20orders\x20that\x20entered\x20the\x20delivery\x20node\x20at\x20least\x20once\x20may\x20review,\x20so\x20a\x20refunded\x20order\x20keeps\x20its\x20review\x20right\x20while\x20a\x20never-delivered\x20one\x20cannot.\x20EMPTY/omitted\x20=\x20the\x20leg\x20is\x20omitted\x20(the\x20shipped\x20two-leg\x20shape:\x20identity\x20+\x20rating-row\x20presence)','required':![],'constraint':'Must\x20be\x20a\x20real\x20node\x20name\x20of\x20the\x20SAME\x20machine,\x20never\x20a\x20terminal\x20—\x20the\x20delivery\x20moment\x20itself.\x20Pairs\x20with\x20SubmitReview\x20edges\x20mounted\x20from\x20refund\x20terminals\x20(the\x20⑧\x20edge\x20family).\x20ALSO\x20the\x20anchor\x20of\x20the\x20F-17\x20review\x20window:\x20review_window_days\x20cannot\x20be\x20used\x20without\x20it'},{'name':'review_window_days','type':'number','description':'F-17\x20(ktt3-tn-261028):\x20closing\x20window\x20on\x20the\x20review\x20rail\x20—\x20Clock\x20<=\x20delivery\x20node\x27s\x20FIRST\x20entry\x20(query\x201280\x20find:first)\x20+\x20N\x20days.\x20The\x20快团团\x20semantic:\x20reviews\x20close\x2015\x20days\x20after\x20delivery;\x20afterwards\x20the\x20SubmitReview\x20edge\x20is\x20fail-closed.\x20EMPTY/omitted/\x270\x27\x20=\x20no\x20window\x20(reviews\x20stay\x20open\x20forever\x20—\x20the\x20ktt3\x20F17\x20defect\x20the\x20param\x20cures).\x20REQUIRES\x20delivered_node\x20—\x20the\x20window\x20anchors\x20on\x20its\x20entry;\x20fill\x20REJECTS\x20a\x20window\x20without\x20the\x20anchor','required':![],'default':'','constraint':'Whole\x20days\x20(x\x2086400000\x20ms).\x20Use\x20the\x20store\x27s\x20real\x20after-sales\x20review\x20bound\x20(快团团:\x2015).\x20Window\x20length\x20counts\x20from\x20the\x20FIRST\x20delivery\x20entry\x20—\x20a\x20re-delivery\x20does\x20not\x20re-arm\x20the\x20deadline.\x20REQUIRES\x20delivered_node\x20(the\x20anchor):\x20fill\x20rejects\x20a\x20window\x20without\x20it'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${review_repository}','name':'Plan\x20review\x20repository\x20(\x27<base>_review\x27\x20—\x20kernel-seeded\x20late-binding;\x20holds\x20the\x20\x27rating\x27\x20rows)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'0','name':'Zero\x20floor\x20of\x20the\x20delivered-entry\x20existence\x20leg\x20(delivered_node=${delivered_node};\x20this\x20row\x20drops\x20WITH\x20the\x20leg\x20when\x20the\x20param\x20is\x20empty)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${review_window_days}','name':'F-17\x20review\x20window\x20length\x20in\x20days\x20(review_window_days=${review_window_days};\x20this\x20row\x20drops\x20WITH\x20the\x20leg\x20when\x20the\x20param\x20is\x20empty)'},{'identifier':0x5,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant\x20of\x20the\x20F-17\x20review\x20window\x20leg\x20(review_window_days=${review_window_days};\x20drops\x20WITH\x20the\x20leg\x20when\x20the\x20param\x20is\x20empty)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'query_repository_data_has','object':{'identifier':0x2},'id':{'identifier':0xfe},'key':'rating'},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query_progress_history_find','object':{'identifier':0xfe,'convert_witness':'OrderProgress'},'where':{'nextNode':'${delivered_node}'},'find':'last'},{'type':'identifier','identifier':0x3}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0xfe,'convert_witness':'OrderProgress'},'where':{'nextNode':'${delivered_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x4},{'type':'identifier','identifier':0x5}]}]}]}]},'applicable_industries':['retail','ecommerce','education','travel','delivery'],'relevant_risks':['R-C3-01','R-C3-05'],'creation_notes':['F-07\x20PROVENANCE\x20(ddmc2-tn-261028):\x20the\x20shipped\x20catalog\x20mounted\x20tpl_forward_order_holder\x20on\x20every\x20SubmitReview\x20edge\x20—\x20the\x20review\x20credential\x20(kernel\x20guard_review_write)\x20enforced\x20WHO\x20writes,\x20but\x20NOTHING\x20enforced\x20THAT\x20a\x20row\x20was\x20written,\x20so\x20a\x20buyer\x20whose\x20review\x20writes\x20failed\x20(envelope\x20format\x20errors\x20in\x20the\x20live\x20run)\x20still\x20advanced\x20completed\x20->\x20reviewed\x20and\x20the\x20rating\x20consumers\x20(reward\x20rating\x20floor,\x20scorecard\x20aggregators)\x20silently\x20ran\x20on\x20an\x20empty\x20set.','ORDER-KEYED\x20BY\x20CONSTRUCTION:\x20the\x20rating\x20row\x20id\x20IS\x20the\x20order\x20address\x20(compile\x20repository_review\x20policy\x20\x27rating\x27,\x20id_from\x20none)\x20and\x20the\x20buyer\x20writes\x20it\x20through\x20the\x20review\x20credential\x20(repository.data_add\x20name\x20\x27rating\x27,\x20id\x20<order\x20address>)\x20—\x20the\x201166\x20probe\x20therefore\x20reads\x20exactly\x20THIS\x20order\x27s\x20cell;\x20no\x20candidate\x20list\x20exists\x20to\x20pad\x20(the\x20ddmc2\x20F-10\x20borrowed-evidence\x20hole\x20is\x20structurally\x20absent\x20here).','REVIEW_MODE\x20PAIRING:\x20mount\x20ONLY\x20where\x20review_mode\x20!==\x20\x27none\x27\x20(the\x20repository_review\x20step\x20emits\x20\x27<base>_review\x27\x20unconditionally\x20otherwise\x20absent).\x20The\x20kernel\x20seeds\x20review_repository\x20on\x20the\x20fill\x20path\x20under\x20the\x20same\x20condition\x20—\x20a\x20review_mode\x20\x27none\x27\x20plan\x20never\x20reaches\x20this\x20template,\x20and\x20a\x20hand-mount\x20over\x20one\x20welds\x20the\x20edge\x20shut\x20(1166\x20missing-repo\x20yields\x20false,\x20fail-closed).','REWARD\x20FLOOR\x20COMPOSITION:\x20this\x20gate\x20says\x20\x27a\x20rating\x20row\x20exists\x27\x20(content\x20presence),\x20NOT\x20\x27rating\x20>=\x20floor\x27\x20—\x20the\x20reward\x20claim\x20side\x20keeps\x20its\x20own\x20tpl_repository_review_threshold_gate/one-time-claim\x20rating\x20leg\x20for\x20the\x20floor.\x20Do\x20not\x20collapse\x20the\x20two:\x20submit-time\x20presence\x20and\x20claim-time\x20quality\x20are\x20different\x20business\x20moments.','⑧\x20DELIVERED-ENTRY\x20GATE\x20(ktt3\x20F04,\x202026-10-29):\x20with\x20delivered_node\x20set\x20the\x20gate\x20demands\x20the\x20order\x20ENTERED\x20the\x20delivery\x20node\x20at\x20least\x20once\x20(query\x201274\x20aborts\x20on\x20no-match,\x20fail-closed)\x20—\x20the\x20review\x20right\x20survives\x20a\x20REFUND\x20(the\x20rating\x20cohort\x20and\x20reward\x20eligibility\x20keep\x20the\x20after-sales\x20buyers),\x20while\x20a\x20never-delivered\x20order\x20(pre-cutoff\x20cancel,\x20unclaimed\x20goods)\x20stays\x20excluded.\x20Mount\x20the\x20companion\x20SubmitReview\x20edges\x20from\x20the\x20refund\x20terminals\x20on\x20the\x20SAME\x20guard\x20key;\x20the\x20empty\x20default\x20preserves\x20every\x20pre-⑧\x20build\x20byte-for-byte\x20(the\x20pruner\x20drops\x20the\x20leg\x20AND\x20its\x20zero-slot\x20before\x20substitution).','F-17\x20REVIEW\x20WINDOW\x20(ktt3-tn-261028\x20F-17,\x202026-10-29):\x20with\x20review_window_days\x20set\x20(non-empty,\x20non-\x270\x27)\x20AND\x20delivered_node\x20set,\x20the\x20gate\x20ALSO\x20demands\x20Clock\x20<=\x20delivery-first-entry\x20+\x20N\x20days\x20—\x20the\x20review\x20rail\x20CLOSES\x20(快团团\x20real\x20semantic:\x2015\x20days\x20after\x20confirmation\x20of\x20receipt,\x20then\x20shut).\x20The\x20anchor\x20reads\x20find:\x27first\x27\x20so\x20a\x20re-entered\x20delivery\x20node\x20cannot\x20re-arm\x20the\x20deadline\x20(ktt3\x20F-16\x20discipline);\x20the\x20closing\x20direction\x20is\x20lesser_or_equal\x20(etm\x20A-06)\x20so\x20expiry\x20welds\x20the\x20edge\x20shut\x20fail-closed.\x20fill\x20REJECTS\x20a\x20window\x20without\x20the\x20anchor\x20—\x20review_window_days\x20needs\x20delivered_node\x20to\x20exist.\x20Empty/\x270\x27/omitted\x20ships\x20the\x20windowless\x20⑧\x20shape\x20byte-for-byte\x20(the\x20pruner\x20drops\x20the\x20leg\x20AND\x20its\x20slots\x204-5).\x20Without\x20a\x20window\x20the\x20completed->reviewed\x20loop\x20is\x20infinitely\x20re-enterable:\x20each\x20pass\x20writes\x20another\x20History\x20record\x20(buyer\x20pays\x20storage),\x20re-jitters\x20progress.current\x20for\x20node-keyed\x20downstream\x20risk\x20logic,\x20and\x20(pre\x20F-16)\x20reset\x20the\x20reward\x20claim\x20clock\x20—\x20prefer\x20the\x20windowed\x20form\x20on\x20every\x20real\x20store.'],'example_use_case':'Community\x20group-buy:\x20the\x20buyer\x27s\x20SubmitReview\x20advances\x20only\x20when\x20the\x20caller\x20owns\x20the\x20order\x20AND\x20the\x20'+'plan\x20review\x20repository\x20holds\x20this\x20order\x27s\x20rating\x20row\x20—\x20an\x20order\x20whose\x20review\x20writes\x20failed\x20can\x20no\x20'+'longer\x20masquerade\x20as\x20reviewed.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_holder_confirm_evidence_gate','scene_id':'machine_forward_guard','name':'Holder\x20confirm\x20with\x20redemption\x20row\x20(order-holder\x20identity\x20+\x20order-keyed\x20evidence-row\x20presence)','description':'Redemption\x20twin\x20of\x20tpl_forward_order_holder:\x20the\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20the\x20'+'order\x20owner\x20OR\x20a\x20registered\x20agent\x20(identical\x20254-anchored\x20identity\x20legs),\x20AND\x20the\x20plan\x27s\x20evidence\x20'+'repository\x20holds\x20an\x20order-keyed\x20row\x20for\x20THIS\x20order\x20whose\x20value\x20contains\x20the\x20marker\x20'+'(query_repository_data_find_where\x20stringContains\x20+\x20the\x20F-10\x20vec_contains_address\x20order\x20pin\x20over\x20'+'the\x20matched\x20id\x20set)\x20—\x20the\x20counterparty\x27s\x20writer-bound\x20redemption\x20row\x20must\x20exist\x20before\x20the\x20'+'buyer\x27s\x20own\x20confirmation\x20can\x20pass.\x20DUAL\x20CONFIRMATION:\x20the\x20row\x20proves\x20the\x20handover\x20happened,\x20the\x20'+'identity\x20set\x20proves\x20the\x20collector\x20performed\x20it;\x20neither\x20side\x20alone\x20advances\x20the\x20edge.\x20Pairs\x20with\x20'+'operator\x20order_payer\x20on\x20the\x20edge\x20(bkng\x20F23\x20rail-split\x20discipline).','recommended_patterns':['P07','P10','P15','P16'],'parameters':[{'name':'repository_name','type':'string','description':'Evidence\x20Repository\x20object\x20name\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20with\x20the\x20plan\x27s\x20evidence\x20repository\x20(\x27<base>_evidence\x27,\x20A5\x20late-binding\x20like\x20service_name)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'row_name','type':'string','description':'Policy\x20key\x20under\x20which\x20the\x20redemption\x20rows\x20are\x20stored\x20(the\x20writer-bound\x20evidence\x20policy,\x20e.g.\x20\x27evidence\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Repository\x20policy\x20name\x20(case-sensitive)\x20AND\x20the\x20write\x20side\x27s\x20policy\x20—\x20a\x20key\x20no\x20repository\x20step\x20defines\x20fails\x20the\x20probe\x20closed'},{'name':'evidence_marker','type':'string','description':'Substring\x20the\x20redemption\x20row\x20value\x20must\x20contain\x20(typically\x20the\x20guarded\x20forward\x27s\x20own\x20name,\x20e.g.\x20\x27ConfirmPickup\x27)\x20—\x20an\x20arrival/distribution\x20row\x20tagged\x20with\x20a\x20DIFFERENT\x20forward\x27s\x20marker\x20cannot\x20open\x20this\x20gate','required':!![],'constraint':'Written\x20by\x20the\x20counterparty\x27s\x20writer-bound\x20write\x20guard\x20at\x20the\x20handover\x20moment;\x20use\x20the\x20guarded\x20forward\x27s\x20own\x20name\x20so\x20stage\x20evidence\x20(arrival,\x20distribution)\x20never\x20doubles\x20as\x20redemption'}],'example_table':[{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Evidence\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${row_name}','name':'Evidence\x20policy\x20key'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${evidence_marker}','name':'Marker\x20substring\x20the\x20row\x20value\x20must\x20contain'},{'identifier':0x5,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20evidence\x20row\x20ids\x20submitted\x20by\x20the\x20verifier\x20(max\x20100,\x20deduped)'},{'identifier':0x6,'b_submission':![],'value_type':'U64','value':0x1,'name':'Minimum\x20matching\x20row\x20count\x20(superseded\x20by\x20the\x20F-10\x20order-pin\x20leg\x20—\x20order-keyed\x20policies\x20hold\x20ONE\x20row\x20per\x20order;\x20kept\x20for\x20table-layout\x20stability)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x1},'key':{'identifier':0x2},'ids':{'identifier':0x5},'where':{'kind':'stringContains','value':'${evidence_marker}'}},{'type':'identifier','identifier':0xfe}]}]},'applicable_industries':['retail','ecommerce','education','travel','delivery'],'relevant_risks':['R-C3-01','R-C3-05','R-X1-17'],'creation_notes':['F-BIZ-02\x20PROVENANCE\x20(ddmc3-tn-261029):\x20the\x20shipped\x20pickup_confirm\x20/\x20deliver_confirm\x20were\x20identity-ONLY\x20—\x20the\x20buyer\x27s\x20self-attestation\x20was\x20the\x20whole\x20record\x20of\x20handover,\x20so\x20the\x20dispute\x20surface\x20had\x20NO\x20counterparty-authored\x20baseline\x20(\x27did\x20the\x20point\x20release\x20the\x20goods?\x27)\x20and\x20a\x20confirmation\x20could\x20fire\x20before\x20any\x20physical\x20release.\x20This\x20gate\x20welds\x20the\x20redemption\x20row\x20onto\x20the\x20buyer\x27s\x20confirm;\x20the\x20pattern.*\x20prose\x20design\x20stays\x20the\x20DESIGN\x20language,\x20this\x20template\x20is\x20its\x20executable\x20form.','ORDER-KEYED\x20BY\x20CONSTRUCTION:\x20the\x20evidence\x20write\x20side\x20declares\x20id_from\x20none,\x20so\x20the\x20row\x20id\x20IS\x20the\x20order\x20address.\x20The\x20candidate\x20slot\x20stays\x20verifier-attested\x20(the\x20advancing\x20buyer\x20submits\x20the\x20row\x20ids\x20they\x20can\x20see),\x20which\x20is\x20exactly\x20why\x20the\x20pin\x20is\x20load-bearing:\x20padding\x20the\x20candidates\x20with\x20ANOTHER\x20order\x27s\x20redemption\x20row\x20cannot\x20pass\x20—\x20the\x20matched\x20set\x20must\x20contain\x20the\x20chain-written\x20254\x20anchor,\x20which\x20the\x20caller\x20can\x20neither\x20fill\x20nor\x20forge\x20(strictly\x20stronger\x20than\x20a\x20free-submission-slot\x20pin,\x20T10).','MARKER\x20SEMANTIC\x20—\x20REDEMPTION\x20IS\x20NOT\x20ARRIVAL:\x20the\x20marker\x20must\x20be\x20the\x20guarded\x20forward\x27s\x20own\x20name\x20(ConfirmPickup\x20/\x20ConfirmReceipt),\x20while\x20stage\x20rows\x20carry\x20THEIR\x20forward\x27s\x20marker\x20(ShelveAtPoint,\x20DepositToLocker,\x20HandoverByPoint,\x20DistributeGoods).\x20An\x20order\x20parked\x20at\x20the\x20point\x20with\x20arrival\x20evidence\x20but\x20no\x20handover\x20record\x20can\x20NOT\x20pass\x20this\x20gate.','WRITE\x20SIDE\x20IS\x20THE\x20COUNTERPARTY\x20(R-X1-17,\x20existence-is-not\x20trust):\x20the\x20row\x20MUST\x20be\x20written\x20under\x20the\x20writer-bound\x20evidence\x20write\x20guard\x20(a\x20registered\x20Entity\x20—\x20point\x20staff\x20/\x20leader\x20staff),\x20never\x20an\x20open\x20policy\x20—\x20the\x20on-chain\x20repository\x20only\x20asserts\x20a\x20non-empty\x20write-guard\x20list\x20(E_POLICY_WRITE_GUARD_REQUIRED=22),\x20and\x20an\x20open\x20write\x20lets\x20the\x20COUNTERPARTY\x20pre-write\x20the\x20redemption\x20the\x20buyer\x20never\x20performed.','RESIDUAL\x20DISCLOSURE\x20(keeper\x20duty\x20presses\x20it,\x20never\x20chains\x20it):\x20if\x20the\x20point\x20forgets\x20the\x20row,\x20a\x20buyer\x20HOLDING\x20the\x20goods\x20cannot\x20confirm\x20—\x20the\x20order\x20stalls\x20at\x20the\x20rest\x20node\x20until\x20the\x20pickup\x20window\x20closes\x20and\x20the\x20unclaimed\x20exit\x20refunds\x20a\x20buyer\x20who\x20already\x20has\x20the\x20goods.\x20That\x20cost\x20sits\x20on\x20the\x20keeper\x20duty\x20entry,\x20is\x20disclosed\x20on\x20the\x20trust\x20face,\x20and\x20is\x20the\x20accepted\x20price\x20of\x20not\x20letting\x20either\x20party\x20advance\x20alone.','DUAL,\x20NEVER\x20REPLACED:\x20this\x20template\x20ADDS\x20the\x20row\x20leg\x20to\x20the\x20buyer\x27s\x20identity\x20confirm\x20—\x20never\x20swap\x20the\x20edge\x20to\x20a\x20staff-only\x20confirmation\x20(a\x20point\x20fabricating\x20pickup\x20would\x20force\x20settlement\x20over\x20a\x20buyer\x20who\x20never\x20collected\x20—\x20the\x20anti-pattern\x20the\x20double\x20confirmation\x20exists\x20to\x20prevent).','EDGE\x20OPERATOR\x20PAIRING\x20(bkng\x20F23):\x20bind\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20order_payer\x20(namedOperator\x20\x22\x22).\x20The\x20identity\x20layer\x20runs\x20BEFORE\x20the\x20guard;\x20a\x20permissionIndex\x20rail\x27s\x20signer\x20set\x20is\x20disjoint\x20from\x20the\x20order\x20holder\x27s,\x20so\x20the\x20pair\x20can\x20never\x20both\x20pass.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Community\x20self-pickup:\x20the\x20neighbor\x27s\x20ConfirmPickup\x20advances\x20at_point\x20->\x20picked_up\x20only\x20when\x20the\x20'+'caller\x20owns\x20the\x20order\x20AND\x20the\x20point\x27s\x20writer-bound\x20redemption\x20row\x20(value\x20tagged\x20ConfirmPickup)\x20'+'exists\x20for\x20this\x20order\x20—\x20handover\x20and\x20collection\x20are\x20separately\x20proven,\x20neither\x20party\x20alone.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_identity_check_single','scene_id':'machine_forward_guard','name':'Single\x20pinned-identity\x20gate\x20(Signer\x20==\x20fixed\x20judge\x20address)','description':'The\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20ONE\x20concrete\x20pinned\x20account\x20address\x20(the\x20independent\x20'+'judge/evaluator).\x20The\x20pinned\x20address\x20is\x20the\x20maximum-security\x20identity\x20form\x20(level1_strict,\x20R-C4-04)\x20'+'and\x20is\x20IMMUTABLE\x20after\x20publish\x20—\x20swapping\x20the\x20judge\x20means\x20a\x20new\x20Machine\x20build,\x20so\x20pin\x20a\x20long-lived\x20'+'account.\x20RAIL\x20SPLIT:\x20the\x20address\x20leg\x20rides\x20THIS\x20guard\x20while\x20the\x20entity\x20rail\x20rides\x20the\x20forward\x27s\x20'+'permission_index\x20—\x20guard\x20AND\x20permission\x20must\x20BOTH\x20hold,\x20and\x20the\x20guard\x20alone\x20never\x20grants\x20the\x20index.','recommended_patterns':['P10','P16'],'parameters':[{'name':'pinned_address','type':'address','description':'The\x20single\x20authorized\x20account\x20address\x20(the\x20judge/evaluator).\x20EMPTY\x20default\x20is\x20deliberately\x20UNSATISFIABLE\x20—\x20a\x20template\x20declaration\x20cannot\x20know\x20the\x20judge\x27s\x20address;\x20override\x20it\x20at\x20generation\x20(guard\x20params\x20/\x20inputs)\x20or\x20the\x20edge\x20stays\x20dead','required':![],'default':'','constraint':'Must\x20be\x20the\x20judge\x27s\x20long-lived\x20account\x20address\x20(immutable\x20after\x20publish).\x20Never\x20ship\x20a\x20production\x20build\x20with\x20the\x20empty\x20pin'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${pinned_address}','name':'The\x20pinned\x20judge/evaluator\x20address\x20(the\x20only\x20authorized\x20forward\x20caller)'}],'example_root':{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x1}]},'applicable_industries':['freelance','ecommerce','education'],'relevant_risks':['R-C3-05','R-C4-04'],'creation_notes':['RAIL\x20SPLIT\x20(alg2-tn-261025\x20F-05):\x20the\x20judge\x27s\x20ADDRESS\x20leg\x20rides\x20this\x20guard;\x20the\x20entity\x20rail\x20rides\x20the\x20forward\x27s\x20permissionIndex.\x20Guard\x20AND\x20permission\x20must\x20BOTH\x20hold\x20—\x20the\x20guard\x20alone\x20is\x20NOT\x20what\x20grants\x20the\x20index.\x20The\x20judge\x20is\x20a\x20third\x20party\x20disjoint\x20from\x20both\x20the\x20client\x20(order\x20payer)\x20and\x20the\x20provider\x20(service\x20permission);\x20the\x20payout-owing\x20party\x20never\x20decides\x20the\x20payout.','TASK-BOUND\x20READS\x20(rex-mn-261021\x20T10):\x20all\x20order\x20reads\x20anchor\x20the\x20protocol-254\x20task-binding\x20slot\x20—\x20a\x20free\x20submission\x20slot\x20is\x20caller-fillable\x20and\x20hijackable.\x20The\x20legacy\x20order.service\x20project-binding\x20leg\x20was\x20removed\x20(v148\x20chain-side\x20task\x20binding\x20—\x20bsw4\x20F-06).','IMMUTABILITY\x20(IMMUT-001):\x20Guard\x20AND\x20Machine\x20are\x20immutable\x20after\x20publish\x20—\x20a\x20judge\x20swap\x20means\x20a\x20NEW\x20Machine\x20build.\x20Pin\x20the\x20judge\x27s\x20long-lived\x20account,\x20never\x20a\x20rotating\x20key.','EMPTY-PIN\x20DISCIPLINE:\x20pinned_address\x20defaults\x20to\x20the\x20EMPTY\x20string\x20so\x20a\x20template-level\x20zero-input\x20build\x20compiles\x20(no\x20address\x20is\x20knowable\x20in-declaration).\x20An\x20unfilled\x20pin\x20makes\x20the\x20identity\x20leg\x20UNSATISFIABLE\x20—\x20the\x20edge\x20is\x20dead\x20until\x20the\x20builder\x20overrides\x20the\x20param\x20with\x20the\x20real\x20judge\x20address\x20at\x20generation.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Agent\x20task:\x20the\x20independent\x20Evaluator\x27s\x20account\x20is\x20pinned\x20as\x20the\x20only\x20caller\x20of\x20the\x20accept/reject\x20forwards,\x20so\x20neither\x20the\x20client\x20nor\x20the\x20provider\x20can\x20rule\x20on\x20their\x20own\x20escrow\x20(INV-A3).','verifier_constraint_level':'level1_strict'},{'id':'tpl_time_window_upper_order_holder','scene_id':'machine_forward_guard','name':'Order-time\x20closing\x20window\x20+\x20order-holder\x20identity\x20(free-cancellation\x20form)','description':'The\x20buyer-side\x20window\x20that\x20CLOSES:\x20Clock\x20<=\x20order.time\x20+\x20hours\x20x\x203600000,\x20ANDed\x20with\x20the\x20order-holder\x20'+'identity\x20set\x20(owner\x20or\x20agent,\x20254-anchored).\x20The\x20canonical\x20free-'+'cancellation\x20gate\x20—\x20buyer-triggered\x20cancel\x20rails\x20must\x20carry\x20the\x20identity\x20leg,\x20because\x20an\x20empty\x20'+'namedOperator\x20is\x20NOT\x20buyer-exclusive\x20(bkg15\x20F05)\x20and\x20the\x20platform\x20could\x20otherwise\x20drive\x20the\x20\x27buyer\x27\x20'+'forward\x20itself.\x20Instantiable\x20form\x20of\x20pattern.time_window_upper_bound\x20+\x20pattern.identity_check_order_holder.','recommended_patterns':['P06','P10','P16'],'parameters':[{'name':'free_cancel_hours','type':'number','description':'Window\x20length\x20in\x20hours,\x20measured\x20from\x20order.time\x20(booking\x20moment)','required':!![],'constraint':'Plain\x20number\x20of\x20hours\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x203600000).\x20order.time\x20is\x20the\x20BOOKING\x20moment,\x20not\x20the\x20stay\x20start;\x20a\x20faithful\x20per-stay\x20deadline\x20rides\x20a\x20stay-date\x20Repository\x20row'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':'${free_cancel_hours}','name':'Window\x20length\x20in\x20hours\x20(booking-time\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':0x36ee80,'name':'Hours-to-milliseconds\x20constant'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query','query':'order.time','object':{'identifier':0xfe},'parameters':[]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0x3}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','education'],'relevant_risks':['R-C3-01','R-C3-05','R-C4-04'],'creation_notes':['DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(bkd8\x20BK-02):\x20lesser_or_equal[Clock,\x20order.time\x20+\x20N]\x20CLOSES\x20the\x20window\x20—\x20cancel\x20admitted\x20inside,\x20refused\x20after.\x20Inverting\x20the\x20comparison\x20(the\x20opening-gate\x20twin)\x20makes\x20every\x20window\x20permanently\x20open:\x20cancel\x20aborts\x20inside\x20the\x20window\x20and\x20is\x20ADMITTED\x20after\x20it\x20closed.','ANCHOR\x20(TIME-ANCHOR-01):\x20order.time\x20is\x20the\x20BOOKING\x20moment,\x20written\x20once\x20at\x20creation\x20and\x20immutable\x20—\x20path-independent\x20by\x20construction.\x20It\x20is\x20NOT\x20the\x20stay\x20start:\x20no\x20check-in\x20date\x20exists\x20on\x20chain,\x20so\x20\x27free\x20cancel\x20until\x2072h\x20before\x20arrival\x27\x20needs\x20the\x20stay-date\x20Repository\x20row\x20prescription\x20(STAY-DATE\x20CORE);\x20this\x20template\x20ships\x20the\x20zero-addition\x20booking-time\x20default.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(bkg15\x20F05):\x20attaching\x20a\x20Progress\x20to\x20an\x20Order\x20is\x20permissionless\x20and\x20an\x20empty\x20namedOperator\x20admits\x20ANY\x20caller\x20—\x20without\x20the\x20owner/agent\x20leg\x20the\x20platform\x20can\x20drive\x20the\x20\x27buyer\x27\x20cancel\x20forward\x20itself.\x20Legs\x20anchor\x20slot\x20254\x20(T10,\x20see\x20tpl_forward_order_holder).','EDGE\x20OPERATOR\x20PAIRING\x20(bkng\x20F23):\x20the\x20edge\x20rides\x20operator\x20order_payer;\x20a\x20permissionIndex\x20rail\x20conflicts\x20(disjoint\x20signer\x20sets).\x20FORWARD_GUARD_IDENTITY_PERM_CONFLICT\x20enforces\x20this\x20for\x20this\x20template\x20id.','EXPIRY\x20SEMANTICS:\x20an\x20expired\x20window\x20only\x20fails\x20the\x20forward\x20it\x20gates\x20—\x20pair\x20with\x20a\x20keeper\x20timeout\x20rail\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20free\x20cancellation:\x20the\x20paid\x20->\x20free_cancel\x20forward\x20advances\x20only\x20for\x20the\x20order\x20holder,\x20within\x2072h\x20'+'of\x20booking;\x20after\x20the\x20window\x20closes\x20the\x20buyer\x27s\x20route\x20is\x20the\x20cancel-policy\x20/\x20arb\x20rails,\x20not\x20this\x20edge.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_lock_order_time','scene_id':'machine_forward_guard','name':'Order-time\x20opening\x20lock\x20(keeper\x20timeout\x20form)','description':'The\x20keeper-side\x20timeout\x20that\x20OPENS:\x20Clock\x20>=\x20order.time\x20+\x20hours\x20x\x203600000.\x20'+'Deliberately\x20carries\x20NO\x20identity\x20leg\x20—\x20it\x20rides\x20a\x20permissionIndex\x20keeper\x20rail,\x20and\x20an\x20'+'order-holder\x20identity\x20would\x20make\x20the\x20two\x20layers\x20disjoint\x20(nobody\x20passes\x20both,\x20bkng\x20F23).\x20Canonical\x20'+'confirm-timeout\x20gate:\x20the\x20supplier\x20must\x20confirm\x20within\x20N\x20hours\x20of\x20booking\x20or\x20the\x20keeper\x20releases\x20the\x20'+'order\x20to\x20the\x20refund\x20rail.\x20Instantiable\x20form\x20of\x20pattern.time_lock_progress\x20anchored\x20on\x20order.time.','recommended_patterns':['P06'],'parameters':[{'name':'confirm_timeout_hours','type':'number','description':'Lock\x20duration\x20in\x20hours,\x20measured\x20from\x20order.time\x20(booking\x20moment)','required':!![],'constraint':'Plain\x20number\x20of\x20hours\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x203600000)'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':'${confirm_timeout_hours}','name':'Lock\x20duration\x20in\x20hours\x20(booking-time\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':0x36ee80,'name':'Hours-to-milliseconds\x20constant'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query','query':'order.time','object':{'identifier':0xfe},'parameters':[]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['travel','rental','ecommerce','education'],'relevant_risks':['R-C3-05'],'creation_notes':['DIRECTION\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20order.time\x20+\x20N]\x20is\x20the\x20OPENING\x20gate\x20—\x20the\x20keeper\x20rail\x20stays\x20blocked\x20until\x20the\x20timeout\x20elapses.\x20Never\x20invert\x20it.','NO\x20IDENTITY\x20LEG\x20—\x20DELIBERATE\x20(bkng\x20F23):\x20this\x20guard\x20rides\x20a\x20keeper\x20permissionIndex\x20rail.\x20Adding\x20an\x20order-holder\x20identity\x20would\x20intersect\x20a\x20merchant-side\x20slot\x20with\x20the\x20buyer\x27s\x20signer\x20set\x20—\x20the\x20edge\x20could\x20never\x20advance.\x20Buyer-advanced\x20edges\x20take\x20tpl_forward_order_holder\x20instead.','ANCHOR\x20(TIME-ANCHOR-01):\x20order.time\x20is\x20the\x20BOOKING\x20moment,\x20immutable\x20and\x20path-independent.\x20For\x20a\x20lock\x20anchored\x20on\x20a\x20NODE\x20ENTRY\x20(e.g.\x20N\x20days\x20after\x20delivery)\x20use\x20tpl_time_lock_progress_days\x20instead\x20—\x20booking-time\x20anchors\x20expire\x20before\x20the\x20stay\x20even\x20starts\x20when\x20the\x20lead\x20time\x20is\x20long.','KEEPER\x20COVERAGE:\x20the\x20timeout\x20releases\x20the\x20order\x20to\x20the\x20refund/cancel\x20rail\x20—\x20pair\x20with\x20a\x20fund\x20exit\x20on\x20the\x20timeout\x20node\x20(FUND-EXIT-01)\x20so\x20the\x20released\x20order\x20never\x20strands.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20supplier\x20confirm:\x20the\x20paid\x20->\x20confirm_timeout\x20keeper\x20forward\x20advances\x2048h\x20after\x20booking\x20if\x20the\x20'+'property\x20never\x20confirmed,\x20releasing\x20the\x20order\x20to\x20the\x20refund\x20rail.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_lock_progress_days','scene_id':'machine_forward_guard','name':'Node-entry\x20opening\x20lock\x20in\x20days\x20(claim-window\x20opener)','description':'Opening\x20gate\x20measured\x20in\x20DAYS\x20from\x20a\x20node\x27s\x20entry:\x20Clock\x20>=\x20progress.history.time(nextNode\x20=\x20'+'expected_node,\x20find=last)\x20+\x20days\x20x\x2086400000,\x20plus\x20the\x20node\x20gate.\x20The\x20'+'claim-window\x20opener:\x20a\x20keeper\x20forward\x20may\x20close\x20the\x20window\x20only\x20N\x20days\x20after\x20the\x20claim\x20window\x20opened.\x20'+'The\x201280\x20history\x20anchor\x20is\x20the\x20node\x27s\x20IMMUTABLE\x20recorded\x20entry\x20moment\x20—\x20later\x20advances\x20cannot\x20shift\x20it.\x20'+'Instantiable\x20form\x20of\x20pattern.time_lock_progress\x20with\x20a\x20day-fee\x20param\x20instead\x20of\x20raw\x20milliseconds.','recommended_patterns':['P06'],'parameters':[{'name':'expected_node','type':'string','description':'Node\x20whose\x20ENTRY\x20anchors\x20the\x20lock\x20(the\x20recorded\x20nextNode\x20of\x20the\x201280\x20history\x20row)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'claim_window_days','type':'number','description':'Lock\x20duration\x20in\x20days\x20from\x20the\x20node\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Anchor\x20node\x20(clock\x20starts\x20at\x20its\x20entry)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Lock\x20duration\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'last'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','education'],'relevant_risks':['R-C3-05'],'creation_notes':['DIRECTION\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20entry\x20+\x20N\x20days]\x20OPENS\x20the\x20gate\x20after\x20the\x20lock\x20—\x20the\x20closing-window\x20twin\x20is\x20tpl_time_window_upper_progress_days.\x20Inverting\x20it\x20reopens\x20the\x20window\x20forever.','ENTRY-TIME\x20ANCHOR\x20(v76):\x20query\x201280\x20progress.history.time\x20filtered\x20by\x20where.nextNode\x20=\x20the\x20anchor\x20node,\x20find=last.\x20The\x20record\x20is\x20written\x20once\x20on\x20entering\x20the\x20node\x20and\x20never\x20rewritten\x20(drift-immune);\x20a\x20re-entered\x20node\x20appends\x20a\x20fresh\x20entry\x20and\x20restarts\x20the\x20lock.','EDGE-PREV\x20DISCIPLINE\x20(bkng\x20F22):\x20the\x20node\x20gate\x20here\x20pins\x20progress.current\x20==\x20the\x20anchor\x20node\x20—\x20bind\x20this\x20guard\x20ONLY\x20to\x20a\x20forward\x20whose\x20PREV\x20is\x20the\x20anchor\x20node\x20(the\x20order\x20still\x20sits\x20there\x20while\x20the\x20guard\x20evaluates,\x20before\x20the\x20advance).\x20A\x20pin\x20on\x20any\x20other\x20node\x20welds\x20the\x20edge\x20shut.','FORWARD\x20vs\x20ALLOCATOR\x20MOUNTS\x20(az3-mn-261013\x20F-18):\x20mounting\x20ONE\x20time\x20guard\x20on\x20BOTH\x20the\x20forward\x20and\x20the\x20allocator\x20riding\x20the\x20same\x20transition\x20doubles\x20the\x20dwell\x20(the\x20allocator\x20re-anchors\x20on\x20the\x20destination\x20entry).\x20Put\x20the\x20time\x20lower\x20bound\x20on\x20ONE\x20mount\x20only.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20claim\x20window:\x20the\x20release_no_claim\x20keeper\x20forward\x20(claim_window\x20->\x20payout_released)\x20advances\x20only\x20'+'7\x20days\x20after\x20the\x20claim\x20window\x20opened\x20—\x20disputes\x20have\x20their\x20window,\x20untouched\x20funds\x20then\x20release.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_window_upper_node_order_holder','scene_id':'machine_forward_guard','name':'Node-entry\x20closing\x20window\x20+\x20order-holder\x20identity\x20(buyer\x20after-sales\x20window)','description':'The\x20CLOSING\x20window\x20a\x20buyer\x20may\x20act\x20in,\x20with\x20the\x20identity\x20leg\x20the\x20time-only\x20twin\x20lacks:\x20Clock\x20<=\x20'+'progress.history.time(nextNode\x20=\x20expected_node,\x20find=last)\x20+\x20duration_ms,\x20AND\x20the\x20node\x20gate\x20'+'(progress.current\x20==\x20expected_node),\x20AND\x20the\x20order-holder\x20identity\x20set\x20'+'(owner\x20or\x20registered\x20agent,\x20both\x20read\x20at\x20the\x20254\x20task-binding\x20slot).\x20The\x201280\x20history\x20anchor\x20is\x20the\x20'+'node\x27s\x20IMMUTABLE\x20recorded\x20entry\x20moment\x20—\x20keeper\x20timing\x20cannot\x20shift\x20the\x20window.\x20Instantiable\x20form\x20of\x20'+'pattern.time_window_upper_bound\x20+\x20pattern.identity_check_order_holder\x20fused\x20into\x20ONE\x20guard,\x20for\x20the\x20'+'buyer-side\x20windowed\x20acts\x20(after-sales\x20return\x20/\x20compensation\x20filing,\x20in-window\x20review):\x20a\x20time-only\x20'+'guard\x20on\x20such\x20an\x20edge\x20is\x20callable\x20by\x20anyone\x20(F-17:\x20the\x20edge\x20operator\x20is\x20metadata,\x20never\x20an\x20'+'authorization),\x20and\x20splitting\x20identity\x20and\x20window\x20across\x20two\x20edges\x20leaves\x20an\x20eternal\x20claim\x20right.','recommended_patterns':['P06','P10','P16'],'parameters':[{'name':'expected_node','type':'string','description':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(window\x20anchor\x20and\x20node\x20gate)','required':!![],'constraint':'Bind\x20ONLY\x20to\x20a\x20forward\x20whose\x20prev\x20is\x20this\x20node\x20—\x20the\x20guard\x20pins\x20progress.current,\x20so\x20binding\x20it\x20to\x20any\x20other\x20edge\x20welds\x20that\x20edge\x20shut'},{'name':'duration_ms','type':'number','description':'Window\x20length\x20in\x20milliseconds\x20from\x20the\x20node\x27s\x20entry\x20moment','required':!![],'constraint':'Plain\x20integer\x20milliseconds\x20(e.g.\x2048h\x20=\x20172800000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(progress\x20witness\x20holder;\x20the\x20caller\x20submits\x20the\x20Order\x20they\x20act\x20on)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(window\x20anchor\x20+\x20node\x20gate)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${duration_ms}','name':'Window\x20length\x20in\x20milliseconds'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation\x20—\x20identity\x20legs\x20read\x20THIS\x20slot)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'first'},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['ecommerce','retail','group_buy','food','freelance','education'],'relevant_risks':['R-C3-01','R-C3-05','R-C4-04'],'creation_notes':['WHY\x20THE\x20FUSION\x20(F-17\x20/\x20bkg15\x20F05,\x20R-AFTER-SALES-RAIL\x20cure\x202026-10-28):\x20the\x20edge\x20operator\x20on\x20a\x20buyer\x20forward\x20is\x20metadata,\x20not\x20an\x20authorization\x20—\x20a\x20guard\x20with\x20only\x20the\x20window\x20admits\x20ANY\x20signer,\x20and\x20a\x20guard\x20with\x20only\x20the\x20identity\x20has\x20no\x20deadline.\x20Splitting\x20them\x20across\x20two\x20edges\x20into\x20the\x20same\x20node\x20creates\x20an\x20un-windowed\x20twin.\x20Bind\x20THIS\x20template\x20to\x20the\x20buyer\x20forward\x20instead:\x20one\x20guard\x20carries\x20both\x20legs.','DIRECTION:\x20lesser_or_equal\x20closes\x20the\x20window\x20(act\x20before\x20N\x20elapses).\x20For\x20the\x20OPPOSITE\x20direction\x20(wait\x20N\x20before\x20acting\x20—\x20an\x20opening\x20gate)\x20use\x20tpl_time_lock_progress;\x20a\x20greater_or_equal\x20here\x20would\x20REOPEN\x20the\x20window\x20forever\x20(etm-mn-261013\x20A-06).','ENTRY-TIME\x20ANCHOR\x20(v76,\x20TIME-ANCHOR-01;\x20find=FIRST\x20since\x20tbs7\x20F-03):\x20the\x20window\x20anchors\x20on\x20the\x20source\x20node\x27s\x20recorded\x20entry\x20—\x20progress.history.time\x20(query\x201280)\x20filtered\x20where.nextNode\x20=\x20${expected_node},\x20find=FIRST.\x20The\x20record\x20is\x20immutable\x20and\x20the\x20FIRST\x20entry\x20never\x20moves,\x20so\x20a\x20re-entered\x20node\x20can\x20NOT\x20re-arm\x20the\x20window\x20(the\x20old\x20find=last\x20let\x20re-entry\x20reopen\x20it\x20—\x20account\x20for\x20renewal\x20semantics\x20in\x20any\x20keeper-driven\x20resume\x20edge\x20by\x20anchoring\x20per-period\x20instead).','T10\x20HIJACK\x20ANCHOR\x20(rex-mn-261021):\x20the\x20identity\x20legs\x20read\x20the\x20order\x20at\x20slot\x20254\x20—\x20the\x20caller\x20fills\x20free\x20slots,\x20so\x20reading\x20order.owner\x20off\x20a\x20free\x20slot\x20lets\x20an\x20attacker\x20submit\x20their\x20OWN\x20order\x20and\x20advance\x20a\x20victim\x27s\x20order\x20carried\x20by\x20254.\x20Slot\x200\x20stays\x20the\x20Order\x20the\x20caller\x20acts\x20on\x20(the\x20progress\x20witness\x20holder).','EDGE\x20OPERATOR\x20PAIRING\x20(bkng\x20F23):\x20bind\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20order_payer\x20(namedOperator\x20\x22\x22);\x20the\x20identity\x20layer\x20runs\x20before\x20the\x20guard\x20and\x20a\x20permissionIndex\x20rail\x20has\x20a\x20disjoint\x20signer\x20set.','MIXED\x20RETURN-TYPE\x20CONSTRUCTION:\x20order.owner\x20(1562)\x20returns\x20Address\x20→\x20wrapped\x20in\x20logic_equal\x20with\x20context(Signer);\x20order.agent\x20has\x20(1567)\x20returns\x20Bool\x20→\x20used\x20directly\x20as\x20the\x20logic_or\x20child\x20with\x20parameters\x20[context(Signer)].',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Community\x20group-buy\x20after-sales:\x20the\x20buyer\x27s\x20\x27return\x20requested\x27\x20forward\x20out\x20of\x20\x27picked_up\x27\x20advances\x20only\x20'+'the\x20ORDER\x20HOLDER\x20and\x20only\x20within\x2048h\x20of\x20the\x20pickup\x20entry\x20—\x20the\x20point\x20staff\x20cannot\x20drive\x20the\x20buyer\x27s\x20'+'claim,\x20and\x20an\x20unrelated\x20signer\x20cannot\x20file\x20one\x20at\x20all.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_upper_progress_days','scene_id':'machine_forward_guard','name':'Node-entry\x20closing\x20window\x20in\x20days\x20+\x20order-holder\x20identity\x20(claim\x20filing\x20deadline)','description':'Closing\x20window\x20measured\x20in\x20DAYS\x20from\x20a\x20node\x27s\x20entry:\x20Clock\x20<=\x20progress.history.time(nextNode\x20=\x20'+'expected_node,\x20find=first)\x20+\x20days\x20x\x2086400000,\x20plus\x20the\x20order-holder\x20identity\x20set\x20(owner\x20or\x20agent,\x20'+'254-anchored)\x20and\x20the\x20node\x20gate.\x20The\x20post-stay\x20claim\x20deadline:\x20a\x20buyer\x20'+'may\x20file\x20a\x20claim\x20only\x20N\x20days\x20after\x20the\x20claim\x20window\x20opened\x20—\x20and\x20ONLY\x20the\x20order\x20holder\x20may\x20file\x20it\x20'+'(etsy-aurelia\x20F-01:\x20the\x20edge\x27s\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization;\x20an\x20'+'empty\x20namedOperator\x20passes\x20anyone,\x20so\x20the\x20window\x20alone\x20would\x20let\x20the\x20platform\x20file\x20claims\x20on\x20the\x20'+'buyer\x27s\x20behalf).\x20The\x201280\x20anchor\x20is\x20read\x20with\x20find=FIRST\x20(tbs7\x20F-03):\x20the\x20FIRST\x20recorded\x20entry\x20'+'never\x20moves,\x20so\x20re-entering\x20the\x20node\x20cannot\x20re-arm\x20the\x20window\x20—\x20keeper\x20timing\x20cannot\x20shift\x20it.\x20'+'Instantiable\x20form\x20of\x20pattern.time_window_upper_bound\x20+\x20'+'pattern.identity_check_order_holder\x20with\x20a\x20day-fee\x20param\x20instead\x20of\x20raw\x20milliseconds.','recommended_patterns':['P06'],'parameters':[{'name':'expected_node','type':'string','description':'Node\x20whose\x20ENTRY\x20opens\x20the\x20window\x20(the\x20recorded\x20nextNode\x20of\x20the\x201280\x20history\x20row)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'claim_window_days','type':'number','description':'Window\x20length\x20in\x20days\x20from\x20the\x20node\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Anchor\x20node\x20(window\x20opens\x20at\x20its\x20entry)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Window\x20length\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','education'],'relevant_risks':['R-C3-05'],'creation_notes':['DIRECTION\x20(etm-mn-261013\x20A-06,\x20bkd8\x20BK-04):\x20lesser_or_equal[Clock,\x20entry\x20+\x20N\x20days]\x20CLOSES\x20the\x20window\x20—\x20filing\x20admitted\x20inside,\x20refused\x20after.\x20The\x20opening-gate\x20twin\x20(greater_or_equal)\x20inverts\x20the\x20policy:\x20the\x20window\x20is\x20shut\x20while\x20open\x20and\x20stays\x20open\x20after\x20it\x20closed.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through.\x20The\x20owner/agent\x20identity\x20legs\x20ship\x20IN\x20example_root\x20over\x20the\x20254\x20task-binding\x20slot;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.','EXPIRY\x20SEMANTICS:\x20an\x20expired\x20window\x20only\x20fails\x20the\x20forward\x20it\x20gates\x20—\x20pair\x20with\x20the\x20keeper\x20release\x20rail\x20(tpl_time_lock_progress_days)\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).','ENTRY-TIME\x20ANCHOR\x20(v76,\x20TIME-ANCHOR-01;\x20find=FIRST\x20since\x20tbs7\x20F-03):\x20the\x20window\x20anchors\x20on\x20the\x20anchor\x20node\x27s\x20FIRST\x20recorded\x20entry\x20—\x20progress.history.time\x20(query\x201280)\x20filtered\x20where.nextNode\x20=\x20${expected_node},\x20find=FIRST.\x20The\x20FIRST\x20entry\x20never\x20moves,\x20so\x20a\x20re-entered\x20node\x20can\x20NOT\x20re-arm\x20the\x20window\x20(the\x20old\x20find=last\x20let\x20re-entry\x20reopen\x20the\x20deadline\x20—\x20tbs7\x20O16/O17).\x20If\x20the\x20business\x20INTENDS\x20renewal\x20semantics,\x20anchor\x20each\x20period\x20on\x20its\x20own\x20node\x20instead.','EDGE-PREV\x20DISCIPLINE\x20(bkng\x20F22):\x20bind\x20only\x20to\x20a\x20forward\x20whose\x20PREV\x20is\x20the\x20anchor\x20node\x20—\x20the\x20order\x20sits\x20at\x20PREV\x20while\x20a\x20forward\x20guard\x20evaluates,\x20so\x20the\x20pin\x20must\x20equal\x20edge.prev.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20post-stay\x20claim:\x20the\x20claim_window\x20->\x20poststay_claim\x20buyer\x20forward\x20advances\x20only\x20for\x20the\x20'+'order\x20holder\x20and\x20only\x20within\x207\x20days\x20of\x20the\x20claim\x20window\x20opening;\x20after\x20expiry\x20the\x20buyer\x27s\x20'+'route\x20is\x20arbitration,\x20not\x20this\x20edge.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_upper_pair_nodes','scene_id':'machine_forward_guard','name':'Node-entry\x20closing\x20window\x20in\x20days\x20+\x20order-holder\x20identity\x20(pin\x20node\x20!=\x20anchor\x20node)','description':'Closing\x20window\x20measured\x20in\x20DAYS\x20from\x20an\x20ANCHOR\x20node\x27s\x20entry,\x20pinned\x20on\x20a\x20(possibly\x20DIFFERENT)\x20'+'PIN\x20node:\x20Clock\x20<=\x20progress.history.time(nextNode\x20=\x20anchor_node,\x20find=first)\x20+\x20days\x20x\x2086400000,\x20'+'progress.current\x20==\x20pin_node,\x20the\x20order-holder\x20identity\x20set\x20(owner\x20or\x20agent,\x20254-anchored).\x20'+'Use\x20this\x20variant\x20when\x20the\x20edge\x20lives\x20on\x20a\x20node\x20reached\x20AFTER\x20the\x20'+'window\x27s\x20economic\x20origin\x20(rex5\x20T-01:\x20a\x20cancel-out-of-return\x20hop\x20is\x20mounted\x20at\x20return_requested\x20'+'but\x20the\x20inspection\x20window\x20counts\x20from\x20the\x20terms_delivered\x20entry)\x20—\x20the\x20single-node\x20template\x20'+'cannot\x20express\x20pin\x20!=\x20anchor\x20and\x20compiles\x20a\x20permanently-false\x20leg.\x20The\x201280\x20anchor\x20is\x20read\x20with\x20'+'find=FIRST\x20(tbs7\x20F-03):\x20the\x20FIRST\x20recorded\x20entry\x20never\x20moves,\x20so\x20a\x20re-entered\x20anchor\x20cannot\x20'+'re-arm\x20the\x20window;\x201272\x20current_time\x20drifts\x20every\x20migration\x20(ETS-C).','recommended_patterns':['P06'],'parameters':[{'name':'pin_node','type':'string','description':'Node\x20the\x20order\x20SITS\x20on\x20while\x20this\x20guard\x20evaluates\x20—\x20MUST\x20equal\x20the\x20guarded\x20edge\x27s\x20prev\x20node\x20(NODE-MATCH-01)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive);\x20a\x20pin\x20that\x20differs\x20from\x20edge.prev\x20compiles\x20a\x20dead\x20guard'},{'name':'anchor_node','type':'string','description':'Node\x20whose\x20ENTRY\x20opens\x20the\x20window\x20(the\x20economic\x20origin;\x20the\x20recorded\x20nextNode\x20of\x20the\x201280\x20history\x20row)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'claim_window_days','type':'number','description':'Window\x20length\x20in\x20days\x20from\x20the\x20anchor\x20node\x27s\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${pin_node}','name':'Pin\x20node\x20(edge.prev\x20—\x20where\x20the\x20order\x20sits\x20at\x20eval\x20time)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Window\x20length\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${anchor_node}','name':'Anchor\x20node\x20(window\x20opens\x20at\x20its\x20entry)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${anchor_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]}]},'applicable_industries':['licensing','ecommerce','retail','travel','rental'],'relevant_risks':['R-C3-05'],'creation_notes':['PIN\x20!=\x20ANCHOR\x20is\x20the\x20REASON\x20this\x20template\x20exists\x20(rex5\x20T-01):\x20pin_node\x20must\x20equal\x20the\x20guarded\x20edge\x27s\x20prev\x20(the\x20order\x20sits\x20there\x20at\x20eval\x20time\x20—\x20NODE-MATCH-01);\x20anchor_node\x20is\x20the\x20economic\x20window\x20origin\x20and\x20may\x20be\x20an\x20EARLIER\x20node.\x20Never\x20fold\x20them\x20back\x20into\x20one\x20param\x20—\x20that\x20re-creates\x20the\x20dead-pin\x20class.','DIRECTION:\x20lesser_or_equal[Clock,\x20anchor\x20entry\x20+\x20N\x20days]\x20CLOSES\x20the\x20window\x20—\x20admitted\x20inside,\x20refused\x20after.\x20Pair\x20with\x20a\x20keeper\x20rail\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(etsy-aurelia\x20F-01):\x20edge\x20operator\x20is\x20metadata,\x20never\x20an\x20authorization;\x20the\x20owner/agent\x20legs\x20ship\x20IN\x20example_root\x20—\x20do\x20NOT\x20strip\x20them.','ANCHOR\x20SEMANTICS\x20(find=FIRST\x20since\x20tbs7\x20F-03):\x20the\x20window\x20counts\x20from\x20the\x20anchor\x27s\x20FIRST\x20recorded\x20entry\x20—\x20a\x20re-entered\x20anchor\x20appends\x20later\x201280\x20rows\x20but\x20the\x20anchor\x20does\x20NOT\x20move,\x20so\x20the\x20class\x20where\x20re-entry\x20reopened\x20the\x20window\x20(ddmc2\x20F-13:\x20RejectReturn\x20re-opened\x20the\x20return\x20window)\x20is\x20cured\x20at\x20template\x20level.\x20If\x20the\x20business\x20INTENDS\x20per-period\x20renewal,\x20anchor\x20each\x20period\x20on\x20its\x20own\x20node\x20instead.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Licensing\x20CancelReturn:\x20the\x20buyer\x20abandons\x20a\x20return\x20request\x20—\x20the\x20forward\x20lives\x20at\x20'+'return_requested\x20(pin)\x20but\x20the\x20inspection\x20window\x20counts\x20from\x20the\x20terms_delivered\x20entry\x20'+'(anchor);\x20after\x20expiry\x20the\x20escrow\x20is\x20about\x20to\x20settle\x20and\x20the\x20void\x20is\x20refused.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_upper_history_days','scene_id':'machine_forward_guard','name':'History-anchored\x20closing\x20window\x20in\x20days\x20+\x20order-holder\x20identity\x20(multi-mount)','description':'Closing\x20window\x20measured\x20in\x20DAYS\x20from\x20the\x20FIRST\x20recorded\x20entry\x20of\x20an\x20anchor\x20node,\x20with\x20NO\x20'+'progress.current\x20pin:\x20Clock\x20<=\x20progress.history.time(nextNode\x20=\x20anchor_node,\x20find=first)\x20+\x20days\x20x\x20'+'86400000,\x20ANDed\x20with\x20the\x20order-holder\x20identity\x20set\x20(owner\x20or\x20agent,\x20254-anchored).\x20Use\x20it\x20when\x20ONE\x20'+'window\x20must\x20gate\x20several\x20forwards\x20into\x20the\x20same\x20target\x20node\x20(return\x20requested\x20from\x20delivered\x20or\x20'+'from\x20reviewed;\x20refund\x20requested\x20from\x20any\x20pre-delivery\x20stage;\x20review\x20after\x20the\x20claim\x20window\x20'+'opened)\x20—\x20the\x20pinned\x20twins\x20cannot\x20serve\x20more\x20than\x20one\x20prev,\x20and\x20mounting\x20a\x20pinned\x20guard\x20twice\x20'+'leaves\x20the\x20second\x20mount\x20permanently\x20unsatisfiable.\x20The\x20identity\x20leg\x20is\x20NOT\x20optional\x20'+'(etsy-aurelia\x20F-01):\x20the\x20edge\x27s\x20`operator:\x20order_payer`\x20is\x20metadata,\x20an\x20empty\x20namedOperator\x20'+'admits\x20anyone,\x20so\x20the\x20window\x20alone\x20would\x20let\x20the\x20platform\x20file\x20on\x20the\x20buyer\x27s\x20behalf.','recommended_patterns':['P06'],'parameters':[{'name':'anchor_node','type':'string','description':'Node\x20whose\x20FIRST\x20recorded\x20entry\x20opens\x20the\x20window\x20(the\x20economic\x20origin,\x20not\x20necessarily\x20the\x20edge\x27s\x20prev)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive);\x20it\x20must\x20be\x20an\x20ancestor\x20of\x20every\x20guarded\x20forward'},{'name':'claim_window_days','type':'number','description':'Window\x20length\x20in\x20days\x20from\x20the\x20anchor\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${anchor_node}','name':'Anchor\x20node\x20(window\x20opens\x20at\x20its\x20first\x20entry)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Window\x20length\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${anchor_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]}]},'applicable_industries':['ecommerce','education','rental','retail','travel','licensing'],'relevant_risks':['R-C3-05'],'creation_notes':['NO\x20PIN\x20IS\x20THE\x20REASON\x20THIS\x20TEMPLATE\x20EXISTS\x20(2026-10-29):\x20the\x20pinned\x20twins\x20assert\x20progress.current\x20==\x20pin,\x20and\x20one\x20Guard\x20object\x20cannot\x20pin\x20two\x20different\x20prev\x20nodes.\x20Declaring\x20a\x20window\x20on\x20two\x20forwards\x20of\x20the\x20same\x20key\x20therefore\x20left\x20the\x20SECOND\x20mount\x20unsatisfiable\x20once\x20resolved,\x20or\x20(as\x20shipped)\x20left\x20the\x20window\x20unenforced\x20entirely.\x20Do\x20NOT\x20add\x20a\x20progress.current\x20leg\x20here\x20—\x20a\x20caller\x20that\x20needs\x20one\x20takes\x20tpl_time_window_upper_progress_days\x20(single\x20mount)\x20or\x20tpl_time_window_upper_pair_nodes\x20(pin\x20!=\x20anchor)\x20instead.','DIRECTION\x20(etm-mn-261013\x20A-06,\x20bkd8\x20BK-04):\x20lesser_or_equal[Clock,\x20anchor\x20entry\x20+\x20N\x20days]\x20CLOSES\x20the\x20window\x20—\x20admitted\x20inside,\x20refused\x20after.\x20The\x20opening-gate\x20twin\x20(greater_or_equal)\x20inverts\x20the\x20policy:\x20the\x20lane\x20is\x20shut\x20while\x20the\x20window\x20is\x20open.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20time-only\x20guard\x20on\x20a\x20buyer\x20window\x20is\x20callable\x20by\x20ANY\x20signer.\x20The\x20owner/agent\x20legs\x20ship\x20IN\x20example_root\x20over\x20slot\x20254;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.','ANCHOR\x20SEMANTICS\x20(find=FIRST,\x20tbs7\x20F-03):\x20the\x20window\x20counts\x20from\x20the\x20anchor\x27s\x20FIRST\x20recorded\x20entry,\x20so\x20re-entering\x20the\x20anchor\x20node\x20cannot\x20re-arm\x20it.\x20Every\x20guarded\x20forward\x20must\x20sit\x20at\x20or\x20after\x20the\x20anchor\x20in\x20the\x20graph,\x20or\x20the\x20history\x20lookup\x20returns\x20no\x20row\x20and\x20the\x20window\x20never\x20opens.','EXPIRY\x20SEMANTICS:\x20an\x20expired\x20window\x20only\x20fails\x20the\x20forwards\x20it\x20gates\x20—\x20it\x20does\x20not\x20cancel\x20or\x20refund\x20by\x20itself.\x20Pair\x20the\x20window\x20with\x20a\x20keeper\x20expiry\x20forward\x20or\x20an\x20allocator\x20recover\x20rail\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Education\x20refund\x20window:\x20the\x20buyer\x20requests\x20a\x20refund\x20from\x20paid,\x20enrolled\x20or\x20assessing\x20—\x20all\x20'+'three\x20forwards\x20ride\x20one\x20guard\x20anchored\x20on\x20the\x20paid\x20entry\x20with\x20a\x2014-day\x20clock;\x20after\x20expiry\x20the\x20'+'buyer\x27s\x20route\x20is\x20the\x20arbitration\x20rail,\x20not\x20a\x20refund\x20request.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_lock_history_days','scene_id':'machine_forward_guard','name':'History-anchored\x20opening\x20lock\x20in\x20days\x20(multi-mount)','description':'Opening\x20gate\x20measured\x20in\x20DAYS\x20from\x20the\x20FIRST\x20recorded\x20entry\x20of\x20an\x20anchor\x20node,\x20with\x20NO\x20'+'progress.current\x20pin:\x20Clock\x20>=\x20progress.history.time(nextNode\x20=\x20anchor_node,\x20find=first)\x20+\x20days\x20x\x20'+'86400000.\x20Use\x20it\x20when\x20ONE\x20clock\x20must\x20gate\x20several\x20keeper\x20forwards\x20into\x20the\x20same\x20target\x20node\x20'+'(a\x20subscription\x20period\x20expiring\x20from\x20the\x20delivered\x20state\x20OR\x20from\x20the\x20optional\x20reviewed\x20'+'side-stop)\x20—\x20the\x20pinned\x20twin\x20asserts\x20the\x20order\x20is\x20AT\x20the\x20anchor,\x20which\x20is\x20true\x20of\x20exactly\x20one\x20'+'mount.\x20Ships\x20NO\x20signer\x20leg\x20on\x20purpose:\x20it\x20is\x20meant\x20for\x20permission-index\x20keeper\x20rails,\x20where\x20an\x20'+'order-holder\x20leg\x20would\x20be\x20unsatisfiable;\x20a\x20buyer-triggered\x20opening\x20clock\x20takes\x20'+'tpl_time_lock_progress_days\x20instead.','recommended_patterns':['P06'],'parameters':[{'name':'anchor_node','type':'string','description':'Node\x20whose\x20FIRST\x20recorded\x20entry\x20starts\x20the\x20clock\x20(the\x20economic\x20origin,\x20not\x20necessarily\x20the\x20edge\x27s\x20prev)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive);\x20it\x20must\x20be\x20an\x20ancestor\x20of\x20every\x20guarded\x20forward'},{'name':'claim_window_days','type':'number','description':'Lock\x20duration\x20in\x20days\x20from\x20the\x20anchor\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${anchor_node}','name':'Anchor\x20node\x20(clock\x20starts\x20at\x20its\x20first\x20entry)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Lock\x20duration\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${anchor_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]},'applicable_industries':['subscription','ecommerce','education','travel'],'relevant_risks':['R-C3-05'],'creation_notes':['NO\x20PIN\x20IS\x20THE\x20REASON\x20THIS\x20TEMPLATE\x20EXISTS\x20(2026-10-29):\x20the\x20pinned\x20opening\x20twins\x20assert\x20progress.current\x20==\x20expected_node,\x20and\x20one\x20Guard\x20object\x20cannot\x20pin\x20two\x20different\x20prev\x20nodes.\x20Declaring\x20one\x20expiry\x20clock\x20on\x20several\x20keeper\x20forwards\x20therefore\x20left\x20every\x20mount\x20unsatisfiable\x20except\x20one.\x20Do\x20NOT\x20add\x20a\x20progress.current\x20leg\x20here\x20—\x20a\x20single-mount\x20caller\x20takes\x20tpl_time_lock_progress_days.','DIRECTION\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20anchor\x20entry\x20+\x20N\x20days]\x20OPENS\x20the\x20gate\x20after\x20the\x20lock.\x20The\x20closing-window\x20twin\x20is\x20tpl_time_window_upper_history_days\x20—\x20inverting\x20the\x20comparison\x20lets\x20the\x20locked\x20action\x20fire\x20immediately.','NO\x20SIGNER\x20LEG,\x20KEEPER\x20RAILS\x20ONLY:\x20this\x20is\x20the\x20opening\x20counterpart\x20of\x20the\x20closing\x20twin,\x20but\x20the\x20identity\x20set\x20is\x20deliberately\x20absent\x20—\x20it\x20exists\x20to\x20time-gate\x20a\x20permission-index\x20forward\x20(a\x20keeper\x20clock\x20advance).\x20Mounting\x20it\x20on\x20an\x20order_payer\x20forward\x20leaves\x20the\x20buyer\x20rail\x20with\x20no\x20identity\x20leg;\x20that\x20caller\x20wants\x20tpl_time_lock_progress_days\x20(which\x20ships\x20the\x20identity\x20set).','ANCHOR\x20SEMANTICS\x20(find=FIRST,\x20tbs7\x20F-03):\x20the\x20clock\x20counts\x20from\x20the\x20anchor\x27s\x20FIRST\x20recorded\x20entry,\x20so\x20re-entering\x20the\x20anchor\x20cannot\x20restart\x20it.\x20Every\x20guarded\x20forward\x20must\x20sit\x20at\x20or\x20after\x20the\x20anchor,\x20or\x20the\x20history\x20lookup\x20returns\x20no\x20row\x20and\x20the\x20lock\x20never\x20opens.','ANCHOR\x20MUST\x20EXIST\x20ON\x20EVERY\x20PATH\x20CLASS\x20(ofn5\x20F-01\x20rule):\x20a\x20forward\x20whose\x20prev\x20path\x20never\x20passes\x20the\x20anchor\x20makes\x20the\x20history\x20lookup\x20abort\x20(W_FIELD_NOT_FOUND)\x20and\x20welds\x20the\x20edge\x20shut.\x20Keep\x20a\x20no-anchor\x20path\x20on\x20a\x20plain\x20permission\x20rail\x20instead\x20of\x20mounting\x20this\x20guard\x20there.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Subscription\x20period\x20expiry:\x20the\x20keeper\x20advances\x20delivered\x20->\x20expired\x20OR\x20reviewed\x20->\x20expired,\x20'+'both\x20clocks\x20counting\x20from\x20the\x20delivery\x20entry\x20(period_days\x20+\x20grace_days);\x20before\x20that\x20moment\x20'+'the\x20member\x27s\x20refund\x20right\x20stands.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_serial_window_release','scene_id':'service_order_allocators_guard','name':'Serial\x20settlement\x20release\x20(reached-node\x20pin\x20+\x20window-closed\x20lock)','description':'Settlement\x20allocator\x20gate\x20for\x20the\x20serial\x20release\x20pattern:\x20progress.current\x20==\x20release_node\x20(the\x20pin\x20is\x20'+'correct\x20on\x20an\x20ALLOCATOR\x20—\x20it\x20evaluates\x20at\x20alloc\x20time\x20when\x20current\x20is\x20the\x20REACHED\x20node)\x20AND\x20Clock\x20>=\x20'+'progress.history.time(nextNode\x20=\x20window_node,\x20find=last)\x20+\x20days\x20x\x2086400000.\x20The\x20money\x20moves\x20only\x20after\x20'+'the\x20dispute\x20window\x20closed\x20with\x20no\x20upheld\x20claim\x20—\x20the\x20pool\x20is\x20intact\x20and\x20undisputed\x20when\x20it\x20does.\x20'+'Deliberately\x20arms\x20NO\x20254\x20slot:\x20a\x20Rate-10000\x20plan\x20self-limits\x20by\x20pool\x20exhaustion\x20(the\x20next\x20run\x20aborts),\x20'+'and\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20an\x20allocator\x20share\x20does\x20not\x20consume.\x20Instantiable\x20form\x20of\x20'+'the\x20global-ota\x20settlement_release\x20design\x20(v30/v68).','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'release_node','type':'string','description':'Machine\x20node\x20at\x20which\x20the\x20release\x20fires\x20(the\x20REACHED\x20node\x20at\x20alloc\x20time,\x20e.g.\x20\x27payout_released\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'window_node','type':'string','description':'Node\x20whose\x20ENTRY\x20anchors\x20the\x20window\x20lock\x20(the\x201280\x20history\x20nextNode,\x20e.g.\x20\x27claim_window\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'claim_window_days','type':'number','description':'Window\x20length\x20in\x20days\x20from\x20the\x20window\x20node\x27s\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${release_node}','name':'Release\x20node\x20(the\x20REACHED\x20node\x20at\x20alloc\x20time)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${window_node}','name':'Window\x20anchor\x20node\x20(lock\x20starts\x20at\x20its\x20entry)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Window\x20length\x20in\x20days'},{'identifier':0x5,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${window_node}'},'find':'last'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x4},{'type':'identifier','identifier':0x5}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','education','freelance'],'relevant_risks':['R-C3-05','R-X1-08'],'creation_notes':['ALLOCATOR-ONLY\x20MOUNT\x20(bkng\x20F22):\x20allocator\x20guards\x20evaluate\x20AT\x20ALLOC\x20TIME,\x20when\x20progress.current\x20is\x20the\x20REACHED\x20node\x20—\x20so\x20the\x20release_node\x20pin\x20is\x20correct\x20here.\x20NEVER\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20edge:\x20a\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance\x20(current\x20==\x20PREV),\x20so\x20the\x20pin\x20would\x20weld\x20the\x20edge\x20shut\x20(dead\x20rail).\x20The\x20forward\x20side\x20takes\x20the\x20TIME-ONLY\x20leg\x20(tpl_time_lock_progress_days)\x20—\x20belt\x20and\x20suspenders:\x20the\x20forward\x20cannot\x20fire\x20before\x20the\x20window\x20closes,\x20and\x20the\x20allocator\x20cannot\x20pay\x20outside\x20the\x20release\x20node.','NO\x20254\x20SLOT\x20—\x20DELIBERATE:\x20a\x20Rate-10000\x20plan\x20self-limits\x20by\x20pool\x20exhaustion;\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20an\x20allocator\x20share\x20never\x20consumes.\x20Adding\x20254\x20aborts\x20E_ONCE_TRIGGERED(16)\x20from\x20the\x20second\x20share\x20payment.','SERIAL\x20WINDOW\x20(ABNB2\x20mainnet-validated):\x20release\x20is\x20gated\x20on\x20payout_released,\x20reachable\x20only\x20after\x20the\x20claim\x20window\x20closed\x20with\x20no\x20upheld\x20claim\x20—\x20the\x20pool\x20is\x20always\x20intact\x20and\x20undisputed\x20when\x20money\x20moves.\x20Pin-vs-previous\x20discipline:\x20v25\x27s\x20order.time\x20anchor\x20was\x20vacuous\x20(booking-time\x20delays\x20expire\x20before\x20checkout);\x20the\x20serial\x20claim\x20window\x20is\x20the\x20real\x20post-stay\x20protection.','PAIR\x20WITH\x20THE\x20EXIT\x20COVERAGE:\x20every\x20rest\x20state\x20needs\x20a\x20defined\x20withdrawal\x20AND\x20refund\x20rule\x20(FUND-EXIT-01\x20/\x20R-M5-03)\x20—\x20this\x20rail\x20is\x20the\x20settlement\x20exit;\x20the\x20refund\x20and\x20recovery\x20rails\x20cover\x20the\x20cancel\x20and\x20awarded\x20exits.'],'example_use_case':'OTA\x20settlement:\x20the\x20property\x20Surplus\x20+\x20platform\x20commission\x20+\x20payment-fee\x20legs\x20share\x20ONE\x20allocator,\x20all\x20'+'gated\x20by\x20this\x20guard\x20—\x20money\x20moves\x20at\x20payout_released,\x20N\x20days\x20after\x20the\x20claim\x20window\x20opened.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_repository_row_present','scene_id':'machine_forward_guard','name':'Evidence\x20row\x20presence\x20gate\x20(find-where\x20count\x20>=\x201)','description':'Gates\x20a\x20machine\x20forward\x20on\x20evidence\x20IN\x20THE\x20PLAN\x27S\x20REPOSITORY:\x20at\x20least\x20one\x20row\x20under\x20the\x20named\x20policy\x20'+'whose\x20value\x20contains\x20the\x20marker,\x20among\x20the\x20candidate\x20row\x20ids\x20the\x20verifier\x20submits.\x20The\x20forward\x27s\x20own\x20'+'permission\x20rail\x20authenticates\x20WHO\x20advances;\x20the\x20candidate-list\x20convention\x20is\x20the\x20same\x20as\x20the\x20review\x20'+'threshold\x20gate\x20(verifier-enumerated\x20row\x20ids\x20—\x20the\x20writer\x20advancing\x20the\x20edge\x20submits\x20its\x20own\x20evidence).\x20'+'Optional\x20NOT-BEFORE\x20floor\x20(not_before_hours\x20>\x200):\x20ANDs\x20Clock\x20>=\x20order.time\x20+\x20N\x20hours\x20so\x20a\x20charge\x20can\x20'+'never\x20file\x20before\x20arrival\x20(the\x20canonical\x20no-show\x20floor).\x20Pairs\x20with\x20a\x20write-guarded\x20evidence\x20policy\x20'+'so\x20the\x20rows\x20cannot\x20be\x20forged\x20by\x20a\x20counterparty\x20(R-X1-17:\x20existence\x20is\x20not\x20trust\x20—\x20the\x20WRITE\x20side\x20'+'must\x20bind\x20the\x20writer).\x20CANDIDATE-LIST\x20PIN\x20(ddmc2\x20F-10):\x20the\x20matched\x20set\x20must\x20ALSO\x20contain\x20THIS\x20'+'order\x27s\x20address\x20(vec_contains_address\x20over\x20the\x20task-binding\x20order\x20anchor)\x20—\x20a\x20verifier-submitted\x20'+'candidate\x20list\x20can\x20no\x20longer\x20satisfy\x20the\x20gate\x20with\x20ANOTHER\x20order\x27s\x20marker\x20row\x20(live\x20ddmc2\x20o6\x20'+'advanced\x20on\x20o2\x27s\x20evidence\x20row\x20before\x20the\x20pin).','recommended_patterns':['P07','P15'],'parameters':[{'name':'repository_name','type':'string','description':'Evidence\x20Repository\x20object\x20name\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20with\x20the\x20plan\x27s\x20evidence\x20repository\x20(\x27<base>_evidence\x27,\x20A5\x20late-binding\x20like\x20service_name)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'row_name','type':'string','description':'Policy\x20key\x20under\x20which\x20the\x20evidence\x20rows\x20are\x20stored\x20(e.g.\x20\x27no_show_evidence\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Repository\x20policy\x20name\x20(case-sensitive)'},{'name':'evidence_marker','type':'string','description':'Substring\x20the\x20evidence\x20row\x20value\x20must\x20contain\x20(e.g.\x20the\x20node\x20or\x20event\x20name\x20that\x20marks\x20the\x20evidence)\x20—\x20the\x20row\x20without\x20the\x20marker\x20does\x20not\x20open\x20the\x20gate','required':!![]},{'name':'not_before_hours','type':'number','description':'Optional\x20NOT-BEFORE\x20floor:\x20Clock\x20>=\x20order.time\x20+\x20N\x20hours\x20x\x203600000\x20—\x20\x270\x27\x20(default)\x20ships\x20WITHOUT\x20the\x20floor\x20leg\x20(pure\x20presence\x20gate).\x20The\x20canonical\x20no-show\x20charge\x20floor','required':![],'default':'0'},{'name':'not_before_ms','type':'number','description':'Internal:\x20hours-to-milliseconds\x20constant\x20for\x20the\x20floor\x20leg\x20—\x20omitted\x20together\x20with\x20the\x20floor','required':![],'default':'3600000'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Evidence\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${row_name}','name':'Evidence\x20policy\x20key'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${evidence_marker}','name':'Marker\x20substring\x20the\x20row\x20value\x20must\x20contain'},{'identifier':0x5,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20evidence\x20row\x20ids\x20submitted\x20by\x20the\x20verifier\x20(max\x20100,\x20deduped)'},{'identifier':0x6,'b_submission':![],'value_type':'U64','value':0x1,'name':'Minimum\x20matching\x20row\x20count\x20(superseded\x20by\x20the\x20F-10\x20order-pin\x20leg\x20—\x20order-keyed\x20policies\x20hold\x20ONE\x20row\x20per\x20order;\x20kept\x20for\x20table-layout\x20stability)'},{'identifier':0x7,'b_submission':![],'value_type':'U64','value':'${not_before_hours}','name':'NOT-BEFORE\x20floor\x20in\x20hours\x20(0\x20=\x20the\x20floor\x20leg\x20and\x20this\x20row\x20are\x20omitted)'},{'identifier':0x8,'b_submission':![],'value_type':'U64','value':'${not_before_ms}','name':'Hours-to-milliseconds\x20constant\x20(floor-leg\x20companion;\x20omitted\x20with\x20the\x20floor)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x1},'key':{'identifier':0x2},'ids':{'identifier':0x5},'where':{'kind':'stringContains','value':'${evidence_marker}'}},{'type':'identifier','identifier':0x0}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query','query':'order.time','object':{'identifier':0xfe},'parameters':[]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x7},{'type':'identifier','identifier':0x8}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','logistics'],'relevant_risks':['R-C3-05','R-X1-17','R-X1-12'],'creation_notes':['STRONG\x20FORM\x20(recommended):\x20key\x20the\x20evidence\x20rows\x20BY\x20THE\x20ORDER\x20(policy\x20id_from\x20none,\x20row\x20id\x20=\x20the\x20order\x20address)\x20and\x20submit\x20exactly\x20[order]\x20as\x20the\x20candidate\x20ids\x20—\x20the\x20candidate\x20set\x20is\x20then\x20chain-bound\x20to\x20this\x20order\x20and\x20cannot\x20be\x20padded\x20with\x20foreign\x20rows.\x20The\x20verifier-supplied\x20candidate\x20list\x20in\x20the\x20weak\x20form\x20is\x20ATTESTED\x20(L-04),\x20never\x20chain-derived:\x20only\x20ship\x20it\x20behind\x20a\x20permissioned\x20forward\x20whose\x20operator\x20is\x20the\x20credentialed\x20writer.','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17,\x20existence-is-not-trust):\x20a\x20presence\x20gate\x20over\x20an\x20UNGUARDED\x20policy\x20is\x20satisfied\x20by\x20ANY\x20pre-written\x20row,\x20including\x20a\x20forged\x20one\x20(test-14\x20HIGH-04,\x20live).\x20Bind\x20the\x20policy\x27s\x20write_guard\x20to\x20the\x20writer\x20identity\x20(pattern.repository_write_authorization)\x20—\x20the\x20write\x20credential,\x20not\x20this\x20gate,\x20is\x20what\x20makes\x20the\x20evidence\x20trustworthy.','MARKER\x20SEMANTICS:\x20the\x20row\x20value\x20must\x20CONTAIN\x20the\x20marker\x20(byte\x20substring,\x20case-sensitive).\x20Mark\x20the\x20evidence\x20payload\x20with\x20the\x20canonical\x20event\x20token\x20when\x20writing\x20it\x20(e.g.\x20a\x20no-show\x20record\x20carries\x20\x27no_show\x27)\x20—\x20an\x20unmarked\x20or\x20foreign-policy\x20row\x20never\x20opens\x20the\x20gate.','ORDER-BINDING:\x20the\x20gate\x20pins\x20the\x20ORDER\x20via\x20the\x20order-pin\x20(vec_contains_address\x20over\x20the\x20task\x20anchor)\x20and\x20the\x20forward\x27s\x20task\x20slot\x20—\x20the\x20legacy\x20order.service\x20host-binding\x20leg\x20was\x20removed\x20(v148\x20chain-side\x20task\x20binding,\x20bsw4\x20F-06);\x20the\x20row\x20itself\x20is\x20found\x20among\x20SUBMITTED\x20candidate\x20ids\x20—\x20for\x20buyer-advanceable\x20edges\x20prefer\x20the\x20strong\x20form\x20above,\x20or\x20tpl_repository_row_equals_order_field\x20(the\x20row\x20read\x20is\x20keyed\x20by\x20the\x20order\x20directly).','QUOTE_GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20evidence\x20policy\x20is\x20quote-guard-protected,\x20the\x20advancing\x20passport\x20MUST\x20carry\x20that\x20quote_guard\x20in\x20its\x20impack\x20list\x20—\x20the\x201176\x20read\x20aborts\x20otherwise\x20(fail-closed).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20no-show:\x20the\x20confirmed\x20->\x20no_show_charged\x20property\x20forward\x20advances\x20only\x20when\x20a\x20no_show_evidence\x20'+'row\x20(value\x20containing\x20\x27no_show\x27)\x20exists\x20in\x20the\x20plan\x27s\x20evidence\x20repository.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_repository_row_equals_order_field','scene_id':'machine_forward_guard','name':'Evidence\x20row\x20equals\x20order-derived\x20field\x20(commitment\x20comparison)','description':'Gates\x20a\x20machine\x20forward\x20on\x20an\x20ORDER-KEYED\x20evidence\x20row\x20matching\x20an\x20order-derived\x20commitment:\x20query\x201167\x20'+'repository.data(policy\x20key,\x20THE\x20SUBMITTED\x20ORDER)\x20compared\x20against\x20the\x20order\x27s\x20own\x20field\x20(default\x20'+'order.item.wip_hash\x20—\x20the\x20listing\x27s\x20WIP\x20commitment).\x20The\x20row\x20id\x20IS\x20the\x20order\x20address\x20(B-3\x20per-order\x20'+'tier-grid\x20convention),\x20so\x20the\x20read\x20is\x20chain-bound\x20to\x20this\x20order\x20—\x20no\x20candidate\x20list,\x20nothing\x20the\x20'+'verifier\x20can\x20pad.\x20The\x20canonical\x20check-in\x20dual-confirmation\x20gate:\x20the\x20property\x27s\x20redemption\x20evidence\x20'+'must\x20equal\x20the\x20commitment\x20the\x20buyer\x20actually\x20paid\x20against.','recommended_patterns':['P07','P15'],'parameters':[{'name':'repository_name','type':'string','description':'Evidence\x20Repository\x20object\x20name\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20with\x20the\x20plan\x27s\x20evidence\x20repository\x20(\x27<base>_evidence\x27,\x20A5\x20late-binding\x20like\x20service_name)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'row_name','type':'string','description':'Policy\x20key\x20under\x20which\x20the\x20order-keyed\x20evidence\x20rows\x20are\x20stored\x20(e.g.\x20\x27checkin_evidence\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Repository\x20policy\x20name\x20(case-sensitive)'},{'name':'order_field','type':'string','description':'Order\x20query\x20whose\x20value\x20the\x20row\x20must\x20equal\x20(default\x20\x27order.item.wip_hash\x27\x20—\x20the\x20listing\x20commitment;\x20the\x20example_root\x20ships\x20this\x20default\x20verbatim)','required':!![],'constraint':'Must\x20be\x20a\x20GUARDQUERY\x20name\x20returning\x20a\x20comparable\x20scalar\x20(e.g.\x20order.item.wip_hash,\x20order.item.price,\x20order.amount)\x20—\x20substituted\x20for\x20the\x20default\x20comparison\x20leg\x20at\x20fill\x20time','default':'order.item.wip_hash'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(also\x20the\x20evidence\x20row\x20id\x20—\x20order-keyed\x20row)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Evidence\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${row_name}','name':'Evidence\x20policy\x20key'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_equal','nodes':[{'type':'query','query':'repository.data','object':{'identifier':0x1},'parameters':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0x0}]},{'type':'query','query':'order.item.wip_hash','object':{'identifier':0x0},'parameters':[]}]},'applicable_industries':['travel','rental','ecommerce','logistics'],'relevant_risks':['R-C3-05','R-X1-17','R-X1-12'],'creation_notes':['ORDER-KEYED\x20READ\x20(B-3,\x20verified\x20convention):\x20query\x201167\x20accepts\x20the\x20ORDER\x20address\x20as\x20the\x20row\x20key\x20—\x20the\x20property\x20writes\x20the\x20evidence\x20under\x20id\x20=\x20the\x20order\x20address,\x20and\x20the\x20guard\x20reads\x20it\x20back\x20with\x20the\x20SAME\x20submitted\x20order\x20(slot\x200).\x20The\x20read\x20fails\x20closed\x20when\x20the\x20row\x20is\x20missing:\x20an\x20order\x20without\x20evidence\x20cannot\x20advance\x20(never\x20a\x20silent\x20pass).','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17):\x20bind\x20the\x20policy\x27s\x20write_guard\x20to\x20the\x20property\x27s\x20write\x20credential\x20(pattern.repository_write_authorization)\x20—\x20the\x20comparison\x20only\x20proves\x20the\x20row\x20MATCHES,\x20not\x20who\x20wrote\x20it.\x20An\x20unguarded\x20policy\x20lets\x20a\x20counterparty\x20pre-write\x20a\x20matching\x20row\x20(they\x20know\x20the\x20wip_hash\x20too).','COMMITMENT\x20SEMANTICS:\x20default\x20order.item.wip_hash\x20is\x20the\x20listing\x27s\x20WIP\x20commitment\x20the\x20buyer\x20paid\x20against\x20—\x20the\x20check-in\x20evidence\x20must\x20equal\x20it\x20(dual\x20confirmation\x20R4:\x20the\x20buyer\x27s\x20identity\x20half\x20rides\x20the\x20sibling\x20order-holder\x20forward).\x20Comparing\x20against\x20order.amount\x20or\x20another\x20scalar\x20works\x20the\x20same\x20way;\x20never\x20compare\x20against\x20a\x20passport-supplied\x20constant\x20(the\x20CONSTANT\x20opcode\x20prefers\x20passport\x20values\x20—\x20forgeable).','QUOTE_GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20evidence\x20policy\x20is\x20quote-guard-protected,\x20the\x20advancing\x20passport\x20MUST\x20carry\x20that\x20quote_guard\x20in\x20its\x20impack\x20list\x20—\x20the\x201167\x20read\x20aborts\x20otherwise\x20(fail-closed).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20check-in:\x20the\x20confirmed\x20->\x20in_stay\x20property\x20forward\x20advances\x20only\x20when\x20the\x20checkin_evidence\x20row\x20'+'keyed\x20by\x20THIS\x20order\x20equals\x20the\x20listing\x27s\x20wip_hash\x20commitment;\x20the\x20buyer\x27s\x20identity\x20forward\x20completes\x20'+'the\x20dual\x20confirmation.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_order_holder_or_time','scene_id':'machine_forward_guard','name':'Order-holder\x20OR\x20time-fallback\x20checkout\x20gate\x20(anti-strand\x20form)','description':'The\x20checkout/departure\x20gate\x20that\x20cannot\x20strand\x20the\x20escrow:\x20the\x20buyer\x20(order\x20owner\x20or\x20agent,\x20254-anchored)\x20'+'confirms\x20check-out,\x20OR\x20—\x20when\x20the\x20buyer\x20never\x20returns\x20—\x20the\x20keeper\x20time-fallback\x20opens\x20after\x20order.time\x20'+'+\x20nights\x20x\x2086400000.\x20The\x20pure\x20identity\x20form\x20deadlocks\x20when\x20the\x20buyer\x20walks\x20away\x20post-checkout:\x20no\x20'+'advance,\x20no\x20settlement,\x20funds\x20locked\x20in_stay\x20forever.\x20The\x20fallback\x20leg\x20keeps\x20a\x20keeper\x20rail\x20under\x20the\x20'+'SAME\x20guard,\x20so\x20one\x20instance\x20serves\x20both\x20callers.\x20Instantiable\x20form\x20of\x20the\x20global-ota\x20checkout_gate\x20'+'design\x20(P1-3:\x20the\x20departure\x20date\x20is\x20not\x20on\x20chain,\x20so\x20nights\x20from\x20booking\x20is\x20the\x20zero-addition\x20anchor).','recommended_patterns':['P06','P10','P16'],'parameters':[{'name':'stay_nights','type':'number','description':'Fallback\x20lock\x20length\x20in\x20nights,\x20measured\x20from\x20order.time\x20(booking\x20moment)','required':!![],'constraint':'Plain\x20number\x20of\x20nights\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000).\x20A\x20faithful\x20per-stay\x20anchor\x20rides\x20a\x20stay-date\x20Repository\x20row'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':'${stay_nights}','name':'Fallback\x20lock\x20length\x20in\x20nights\x20(booking-time\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Nights-to-milliseconds\x20constant'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query','query':'order.time','object':{'identifier':0xfe},'parameters':[]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0x3}]}]}]}]},'applicable_industries':['travel','rental','ecommerce'],'relevant_risks':['R-C3-01','R-C3-05','R-C4-04'],'creation_notes':['WHY\x20THE\x20OR\x20(anti-strand):\x20a\x20pure\x20identity\x20gate\x20needs\x20the\x20buyer\x20to\x20come\x20back\x20—\x20a\x20buyer\x20who\x20never\x20confirms\x20check-out\x20deadlocks\x20the\x20escrow\x20in_stay\x20with\x20no\x20rail\x20out\x20(FUND-EXIT-01).\x20The\x20time-fallback\x20leg\x20gives\x20the\x20keeper\x20the\x20same\x20advance\x20once\x20the\x20stay\x20window\x20has\x20plausibly\x20elapsed.\x20The\x20buyer\x20leg\x20runs\x20FIRST\x20on\x20the\x20edge\x20(namedOperator\x20check),\x20the\x20keeper\x20leg\x20rides\x20the\x20permission\x20rail\x20—\x20with\x20namedOperator\x20\x22\x22\x20the\x20permission\x20layer\x20passes\x20for\x20anyone,\x20so\x20BOTH\x20legs\x20stay\x20gated\x20here.','LEG\x20PAIRING\x20ON\x20THE\x20EDGE\x20(bkng\x20F23\x20nuance):\x20this\x20guard\x20is\x20designed\x20for\x20an\x20edge\x20whose\x20operator\x20is\x20order_payer\x20—\x20the\x20identity\x20layer\x20(empty\x20namedOperator)\x20and\x20the\x20buyer\x20leg\x20coincide,\x20while\x20the\x20time\x20leg\x20covers\x20the\x20absent-buyer\x20case.\x20On\x20a\x20permissionIndex\x20edge\x20the\x20buyer\x20leg\x20is\x20unreachable\x20and\x20only\x20the\x20fallback\x20can\x20ever\x20fire\x20—\x20acceptable\x20only\x20when\x20the\x20buyer\x20advance\x20is\x20not\x20part\x20of\x20the\x20design.','FALLBACK\x20LATENCY:\x20the\x20anchor\x20is\x20order.time\x20(BOOKING),\x20so\x20lead\x20time\x20shifts\x20the\x20fallback\x20late\x20—\x20the\x20keeper\x20may\x20release\x20days\x20after\x20the\x20actual\x20departure\x20for\x20short-notice\x20bookings.\x20Tighten\x20with\x20the\x20stay-date\x20Repository\x20row\x20prescription\x20when\x20the\x20business\x20needs\x20the\x20real\x20date\x20(STAY-DATE\x20CORE).','T10\x20HIJACK\x20ANCHOR:\x20the\x20identity\x20legs\x20read\x20slot\x20254\x20(see\x20tpl_forward_order_holder)\x20—\x20never\x20a\x20free\x20submission\x20slot.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20checkout:\x20the\x20in_stay\x20->\x20completed\x20forward\x20advances\x20for\x20the\x20returning\x20buyer\x20immediately,\x20or\x20for\x20'+'the\x20keeper\x20once\x20booking\x20+\x20nights\x20has\x20elapsed\x20—\x20the\x20escrow\x20never\x20strands\x20on\x20an\x20absent\x20buyer.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_buy_guard_payment_voucher','scene_id':'service_buy_guard','name':'Membership\x20gate\x20via\x20Payment\x20voucher\x20(prepaid\x20proof)','description':'Buy\x20gate\x20that\x20accepts\x20a\x20caller-submitted\x20Payment\x20object\x20as\x20a\x20membership/access\x20voucher:\x20the\x20payer\x20must\x20be\x20'+'the\x20buyer,\x20the\x20merchant\x20must\x20be\x20a\x20recipient,\x20and\x20the\x20amount\x20must\x20cover\x20the\x20membership\x20price.\x20'+'Membership\x20Plan\x20B\x20(K3\x202026-10-29):\x20real-time\x20—\x20validity\x20starts\x20the\x20moment\x20the\x20Payment\x20exists\x20on-chain,\x20'+'no\x20roster\x20import\x20needed.\x20Pair\x20with\x20a\x20member-roster\x20Repository\x20(Plan\x20A,\x20tpl\x20family\x20of\x20'+'subscription/delivery-membership)\x20when\x20the\x20business\x20needs\x20time-based\x20lapse\x20or\x20tier\x20metadata.','recommended_patterns':['P03','P04'],'parameters':[{'name':'membership_price','type':'number','description':'Minimum\x20Payment\x20amount\x20that\x20proves\x20membership\x20(in\x20the\x20token\x27s\x20base\x20units)','required':!![]},{'name':'merchant_address','type':'address','description':'Address\x20that\x20must\x20appear\x20among\x20the\x20Payment\x20recipients\x20(the\x20membership\x20seller)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U256','value':'${membership_price}','name':'Membership\x20price\x20(minimum\x20voucher\x20amount)'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','object_type':'Payment','name':'Submitted\x20membership\x20Payment\x20(voucher)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${merchant_address}','name':'Membership\x20seller\x20(required\x20recipient)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'payment.signer','object':{'identifier':0x1},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'payment.recipient\x20has','object':{'identifier':0x1},'parameters':[{'type':'identifier','identifier':0x2}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'payment.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x0}]}]},'applicable_industries':['subscription','retail','ecommerce','education'],'relevant_risks':['R-C1-01','R-C4-01'],'creation_notes':['TIMING:\x20buy_guard\x20evaluates\x20BEFORE\x20the\x20order\x20exists\x20(passport\x20gate\x20verification\x20precedes\x20order\x20creation)\x20—\x20'+'the\x20voucher\x20Payment\x20must\x20be\x20created\x20before\x20the\x20buy\x20call\x20(prepaid\x20flow).\x20The\x20guard\x20itself\x20never\x20moves\x20money;\x20it\x20only\x20attests.','BUY-GUARD\x20SLOT-0\x20FORBIDDEN\x20(E_BUY_GUARD_ORDER_SLOT):\x20the\x20submission\x20rides\x20identifier\x201,\x20never\x200.','NOT\x20TIME-BOUNDED:\x20this\x20template\x20proves\x20payment,\x20not\x20validity\x20window.\x20For\x20\x27paid\x20N\x20days,\x20lapses\x20at\x20T\x27\x20either\x20'+'import\x20the\x20payment\x20into\x20a\x20member-roster\x20Repository\x20whose\x20lapse\x20guard\x20reads\x20Clock\x20against\x20the\x20expiry\x20value\x20'+'(Plan\x20A\x20hybrid\x20—\x20the\x20roster\x20row\x20can\x20be\x20written\x20from\x20this\x20voucher),\x20or\x20require\x20a\x20fresh\x20voucher\x20per\x20period.','ONE\x20VOUCHER,\x20MANY\x20BUYS:\x20nothing\x20here\x20burns\x20the\x20Payment\x20—\x20a\x20membership\x20SHOULD\x20gate\x20many\x20purchases.\x20Add\x20'+'identifier\x20255\x20(byte-key\x20once\x20slot\x20pinned\x20to\x20a\x20per-buy\x20value)\x20only\x20for\x20single-admission\x20gates.','RECIPIENT\x20SET\x20IS\x20OPEN:\x20\x27recipient\x20has\x27\x20checks\x20membership\x20in\x20the\x20recipient\x20list\x20—\x20co-recipients\x20are\x20allowed\x20'+'by\x20design\x20(split\x20payouts).\x20Exact-single-recipient\x20businesses\x20add\x20a\x20count\x20leg.'],'example_use_case':'Warehouse-club\x20store:\x20the\x20buyer\x20pays\x20the\x20annual\x20membership\x20fee\x20to\x20the\x20merchant\x27s\x20wallet\x20(on-chain\x20or\x20any\x20'+'issuer\x20that\x20mints\x20a\x20Payment\x20object),\x20then\x20every\x20store\x20purchase\x20verifies\x20the\x20voucher\x20in\x20buy_guard\x20—\x20the\x20'+'forced-membership\x20model\x20without\x20circular\x20guard\x20dependencies.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_penalty_payment','scene_id':'machine_forward_guard','name':'In-flow\x20real-time\x20penalty\x20payout\x20(verified\x20Payment\x20compensation)','description':'Forward\x20guard\x20that\x20advances\x20only\x20when\x20the\x20liable\x20party\x20(e.g.\x20a\x20late\x20courier)\x20has\x20compensated\x20the\x20buyer\x20with\x20'+'an\x20on-chain\x20Payment:\x20the\x20payment\x20is\x20bound\x20to\x20THIS\x20order\x20(info.for),\x20to\x20THIS\x20obligation\x20(info.remark\x20marker),\x20'+'its\x20recipient\x20is\x20the\x20order\x20owner,\x20and\x20the\x20amount\x20covers\x20the\x20penalty.\x20One-order-one-matter-one-verification:\x20'+'the\x20protocol-255\x20byte-key\x20slot\x20burns\x20the\x20proof\x20so\x20the\x20same\x20Payment\x20can\x20never\x20re-verify\x20—\x20'+'no\x20reusable-voucher\x20hole.\x20Enables\x20SLA\x20clauses\x20like\x20\x272h\x20late\x20→\x2010\x20WOW\x20instant\x20compensation\x27\x20expressed\x20'+'entirely\x20in\x20workflow\x20guards.','recommended_patterns':['P02','P06','P10'],'parameters':[{'name':'penalty_marker','type':'string','description':'Obligation\x20marker\x20that\x20must\x20equal\x20the\x20Payment\x27s\x20info.remark\x20(e.g.\x20\x27late-2h-penalty-v1\x27)','required':!![],'constraint':'Bump\x20the\x20version\x20suffix\x20when\x20the\x20clause\x20amount\x20changes\x20—\x20old\x20payments\x20must\x20not\x20satisfy\x20a\x20new\x20clause'},{'name':'penalty_amount','type':'number','description':'Minimum\x20compensation\x20amount\x20the\x20Payment\x20must\x20deliver\x20to\x20the\x20order\x20owner\x20(base\x20units)','required':!![]}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','object_type':'Payment','name':'Submitted\x20penalty\x20Payment'},{'identifier':0x2,'b_submission':!![],'value_type':'Address','name':'Submitted\x20beneficiary\x20address\x20(must\x20equal\x20order.owner\x20AND\x20be\x20a\x20Payment\x20recipient)'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${penalty_marker}','name':'Obligation\x20marker\x20(payment.info.remark\x20must\x20equal)'},{'identifier':0x4,'b_submission':![],'value_type':'U256','value':'${penalty_amount}','name':'Minimum\x20compensation\x20amount'},{'identifier':0xff,'b_submission':!![],'value_type':'U64','name':'ONCE\x20byte-key\x20slot\x20(protocol\x20255):\x20caller\x20submits\x20the\x20current\x20progress.history\x20count;\x20the\x20guard\x20leg\x20pins\x20it\x20so\x20the\x20proof\x20burns\x20after\x20one\x20verification'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.for','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0xfe}]},{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.remark','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'query','query':'payment.recipient\x20has','object':{'identifier':0x1},'parameters':[{'type':'identifier','identifier':0x2}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'payment.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0xff},{'type':'query','query':'progress.history\x20count','object':{'identifier':0xfe,'convert_witness':'OrderProgress'},'parameters':[]}]}]},'applicable_industries':['delivery','logistics','local_life','rental','travel'],'relevant_risks':['R-C1-01','R-C3-05','R-X1-13'],'creation_notes':['PAYER\x20ANONYMITY\x20IS\x20INTENTIONAL:\x20no\x20payment.signer\x20==\x20Signer\x20leg\x20—\x20a\x20keeper\x20or\x20platform\x20delegate\x20may\x20drive\x20'+'the\x20compensation\x20forward\x20on\x20the\x20liable\x20party\x27s\x20behalf.\x20Strict\x20payer-is-driver\x20flows\x20add\x20the\x20'+'logic_equal[payment.signer,\x20context\x20Signer]\x20leg.','ISSUER\x20CONTRACT:\x20the\x20payment\x20must\x20be\x20minted\x20with\x20info.for\x20=\x20the\x20order\x20address\x20and\x20info.remark\x20=\x20the\x20exact\x20'+'marker;\x20the\x20beneficiary\x20address\x20is\x20submitted\x20at\x20drive\x20time\x20and\x20proven\x20against\x20order.owner\x20—\x20a\x20wrong\x20payee\x20'+'fails\x20the\x20gate\x20with\x20the\x20payment\x20unconsumed\x20(255\x20not\x20yet\x20keyed),\x20so\x20the\x20liable\x20party\x20can\x20retry\x20with\x20a\x20'+'corrected\x20payment.','ONE-SHOT\x20SCOPE:\x20255\x20pins\x20to\x20progress.history\x20count,\x20so\x20the\x20proof\x20burns\x20for\x20THIS\x20forward\x20firing.\x20A\x20second,\x20'+'independent\x20penalty\x20on\x20the\x20same\x20order\x20(later\x20breach,\x20different\x20marker)\x20is\x20a\x20NEW\x20marker\x20+\x20NEW\x20count\x20key\x20—\x20'+'by\x20design:\x20the\x20once-slot\x20kills\x20REPLAY,\x20not\x20distinct\x20obligations.','EDGE\x20PLACEMENT:\x20mount\x20on\x20the\x20\x27compensation\x20settled\x27\x20edge\x20AFTER\x20the\x20breach\x20node\x20(e.g.\x20delivered_late\x20→\x20'+'compensated);\x20the\x20order\x20rests\x20at\x20the\x20breach\x20node\x20with\x20funds\x20intact\x20until\x20the\x20payment\x20verifies\x20—\x20instant,\x20'+'trustless,\x20no\x20arbitration\x20needed\x20for\x20admitted\x20breaches.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20'+'task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20'+'an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Delivery\x20SLA:\x20the\x20machine\x20promises\x20\x27courier\x202h\x20past\x20the\x20promised\x20window\x20→\x2010\x20WOW\x20to\x20the\x20buyer\x20instantly\x27.\x20'+'The\x20courier\x20mints\x20the\x20compensation\x20Payment\x20(for=order,\x20remark=\x27late-2h-penalty-v1\x27)\x20and\x20drives\x20the\x20breach\x20→\x20'+'compensated\x20edge;\x20the\x20guard\x20proves\x20order-binding,\x20marker,\x20payee=buyer,\x20amount,\x20and\x20burns\x20the\x20proof\x20—\x20the\x20'+'order\x20proceeds\x20and\x20the\x20same\x20payment\x20can\x20never\x20settle\x20a\x20second\x20breach.','verifier_constraint_level':'level3_scene_combined'}];export function getTemplatesByScene(a){return GUARD_TEMPLATES['filter'](b=>b['scene_id']===a);}export function getTemplateById(a){return GUARD_TEMPLATES['find'](b=>b['id']===a);}export function getTemplatesByIndustry(a){return GUARD_TEMPLATES['filter'](b=>b['applicable_industries']['includes'](a));}export function getTemplatesByPattern(a){return GUARD_TEMPLATES['filter'](b=>b['recommended_patterns']['includes'](a));}export function listGuardTemplates(){return GUARD_TEMPLATES;}export function suggestTemplateForScene(a){return GUARD_TEMPLATES['find'](b=>b['scene_id']===a);}export function getTemplateParameters(a){const b=getTemplateById(a);return b?.['parameters']??[];}export function validateTemplateParams(a,b){const c=getTemplateById(a);if(!c)return{'valid':![],'missing':['template_not_found']};const d=c['parameters']['filter'](e=>e['required']&&e['default']===undefined&&!(e['name']in b))['map'](e=>e['name']);return{'valid':d['length']===0x0,'missing':d};}function deepSubstitute(a,b){if(typeof a==='string'){const c=a['match'](/^\$\{(\w+)\}$/);if(c&&c[0x1]in b)return b[c[0x1]];return a['replace'](/\$\{(\w+)\}/g,(d,e)=>e in b?String(b[e]):'${'+e+'}');}if(Array['isArray'](a))return a['map'](d=>deepSubstitute(d,b));if(a&&typeof a==='object'){const d={};for(const [e,f]of Object['entries'](a)){d[e]=deepSubstitute(f,b);}return d;}return a;}export function fillGuardTemplate(a,b){const c=getTemplateById(a);if(!c)return{'ok':![],'error':'Template\x20not\x20found:\x20'+a};const {valid:d,missing:e}=validateTemplateParams(a,b);if(!d)return{'ok':![],'error':'Missing\x20required\x20parameters:\x20'+e['join'](',\x20'),'missing':e};const f={...b};for(const o of c['parameters']){!(o['name']in f)&&o['default']!==undefined&&(f[o['name']]=o['default']);}for(const q of Object['keys'](f)){const r=f[q];if(typeof r==='string'){const s=r['match'](/^\$\{(\w+)\}$/);if(s&&s[0x1]!==q&&s[0x1]in f)f[q]=f[s[0x1]];}}if(c['parameters']['some'](t=>t['name']==='review_window_days')){const t=f['review_window_days'],u=t!==undefined&&String(t)!==''&&String(t)!=='0',w=f['delivered_node'];if(u&&(w===undefined||String(w)===''))return{'ok':![],'error':'review_window_days\x20requires\x20delivered_node:\x20the\x20closing\x20window\x20anchors\x20on\x20the\x20delivery\x20node\x27s\x20FIRST\x20entry\x20(query\x201280\x20find:first).\x20Pass\x20delivered_node,\x20or\x20clear\x20review_window_days\x20to\x20ship\x20the\x20windowless\x20gate'};}const g=new Set();if(c['parameters']['some'](x=>x['name']==='rating_repository')){const x=f['rating_repository'],y=f['rating_floor'];(!x||x===''||String(y)==='0')&&(g['add']('rating_repository'),g['add']('rating_policy_name'),g['add']('rating_floor'));}if(c['parameters']['some'](A=>A['name']==='not_before_hours')){const A=f['not_before_hours'];(A===undefined||String(A)===''||String(A)==='0')&&(g['add']('not_before_hours'),g['add']('not_before_ms'));}if(c['parameters']['some'](B=>B['name']==='upper_hours')){const B=f['upper_hours'];(B===undefined||String(B)===''||String(B)==='0')&&g['add']('upper_hours');}if(c['parameters']['some'](C=>C['name']==='closes_after_days')){const C=f['closes_after_days'];(C===undefined||String(C)===''||String(C)==='0')&&g['add']('closes_after_days');}if(c['parameters']['some'](D=>D['name']==='delivered_node')){const D=f['delivered_node'];(D===undefined||String(D)==='')&&g['add']('delivered_node');}if(c['parameters']['some'](E=>E['name']==='review_window_days')){const E=f['review_window_days'];(E===undefined||String(E)===''||String(E)==='0')&&g['add']('review_window_days');}let h=c['example_table'],i=c['example_root'];if(g['size']>0x0){const F=J=>typeof J==='string'&&[...g]['some'](K=>J['includes']('${'+K+'}'));h=c['example_table']['filter'](J=>!Object['values'](J)['some'](F));const G=new Set(h['map'](J=>J['identifier'])),H=J=>{if(F(J))return!![];if(Array['isArray'](J))return J['some'](H);if(J&&typeof J==='object'){const K=J;if(K['type']==='identifier'&&!G['has'](K['identifier']))return!![];return Object['values'](K)['some'](H);}return![];},I=c['example_root'];if(Array['isArray'](I['nodes']))i={...I,'nodes':I['nodes']['filter'](J=>!H(J))};else I['node']!==undefined&&H(I['node'])&&(i={});}const j=deepSubstitute(h,f),l=deepSubstitute(i,f),n=JSON['stringify']({'table':j,'root':l})['match'](/\$\{(\w+)\}/);if(n)return{'ok':![],'error':'Unresolved\x20placeholder\x20${'+n[0x1]+'}\x20—\x20not\x20declared\x20in\x20template\x20parameters'};return{'ok':!![],'table':j,'root':l};}import{z}from'zod';const GuardTemplateParamSchema=z['object']({'name':z['string']()['min'](0x1),'type':z['enum'](['address','string','number','boolean','vec_address']),'description':z['string']()['min'](0x1),'required':z['boolean'](),'default':z['string']()['optional'](),'constraint':z['string']()['optional']()})['strict'](),GuardTemplateSchema=z['object']({'id':z['string']()['regex'](/^tpl_[a-z0-9_]+$/,'guard\x20template\x20id\x20must\x20be\x20\x27tpl_*\x27'),'scene_id':z['string']()['min'](0x1),'name':z['string']()['min'](0x1),'description':z['string']()['min'](0x1),'recommended_patterns':z['array'](z['string']()['min'](0x1)),'parameters':z['array'](GuardTemplateParamSchema),'example_table':z['array'](z['record'](z['string'](),z['unknown']())),'example_root':z['record'](z['string'](),z['unknown']()),'applicable_industries':z['array'](z['string']()['min'](0x1)),'relevant_risks':z['array'](z['string']()['min'](0x1)),'creation_notes':z['array'](z['string']()['min'](0x1)),'example_use_case':z['string']()['min'](0x1),'verifier_constraint_level':z['enum'](['level1_strict','level2_identity_set','level3_scene_combined'])['optional']()})['strict']();function validateGuardTemplates(){for(const a of GUARD_TEMPLATES){const b=GuardTemplateSchema['safeParse'](a);if(!b['success']){const f=b['error']['issues']['map'](g=>'\x20\x20'+g['path']['join']('.')+':\x20'+g['message'])['join']('\x0a');throw new Error('[guard-templates]\x20\x27'+a['id']+'\x27\x20fails\x20schema\x20validation:\x0a'+f+'\x0a'+'Fix\x20the\x20entry\x20—\x20the\x20schema\x20is\x20the\x20single\x20source\x20of\x20truth\x20for\x20guard-template\x20validity.');}const c=new Set(a['parameters']['map'](g=>g['name'])),d=JSON['stringify']({'table':a['example_table'],'root':a['example_root']}),e=new Set([...d['matchAll'](/\$\{(\w+)\}/g)]['map'](g=>g[0x1]));for(const g of e){if(!c['has'](g))throw new Error('[guard-templates]\x20\x27'+a['id']+'\x27\x20references\x20${'+g+'}\x20in\x20example_table/example_root\x20'+('but\x20\x27'+g+'\x27\x20is\x20not\x20declared\x20in\x20parameters\x20—\x20fillGuardTemplate\x20would\x20leave\x20it\x20unresolved.'));}}}validateGuardTemplates();export const GUARD_TEMPLATES_VERSION='1.27.0';export const GUARD_TEMPLATES_COUNT=GUARD_TEMPLATES['length'];
+export const PROTOCOL_SLOT_254_NOTE='PROTOCOL\x20SLOT\x20254:\x20the\x20task-binding\x20row\x20is\x20mandatory\x20on\x20every\x20forward-bound\x20guard\x20—\x20the\x20chain-side\x20task-binding\x20check\x20aborts\x20(code\x2011)\x20without\x20it;\x20the\x20value\x20is\x20written\x20by\x20order\x20creation,\x20never\x20submitted\x20by\x20hand';export const GUARD_TEMPLATES=[{'id':'tpl_buy_guard_whitelist','scene_id':'service_buy_guard','name':'Whitelist\x20purchase\x20validation','description':'Only\x20addresses\x20in\x20the\x20whitelist\x20can\x20purchase\x20the\x20service.\x20Suitable\x20for\x20limited-time\x20sales,\x20VIP\x20exclusives,\x20internal\x20testing\x20eligibility,\x20etc.','recommended_patterns':['P04','P03'],'parameters':[{'name':'whitelist','type':'vec_address','description':'List\x20of\x20authorized\x20addresses','required':!![],'constraint':'Each\x20address\x20must\x20be\x20valid\x20and\x20unique'},{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(used\x20for\x20circular\x20references)','required':![],'constraint':'If\x20P16\x20circular\x20reference\x20is\x20used,\x20a\x20name\x20must\x20be\x20provided\x20rather\x20than\x20an\x20address'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'VecAddress','value':'${whitelist}','name':'Authorized\x20purchase\x20whitelist'}],'example_root':{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x0},{'type':'context','context':'Signer'}]},'applicable_industries':['rental','ecommerce','education','travel','subscription'],'relevant_risks':['R-C1-01','R-C3-01','R-C4-01'],'creation_notes':['Updating\x20the\x20whitelist\x20requires\x20rebuilding\x20the\x20Guard\x20(buy_guard\x20is\x20iterable)','If\x20the\x20Service\x20is\x20already\x20published,\x20the\x20table\x20can\x20use\x20the\x20address\x20directly;\x20otherwise\x20use\x20the\x20name\x20(P16\x20circular\x20reference)'],'example_use_case':'Internal\x20testing\x20phase\x20for\x20camera\x20equipment\x20rental,\x20allowing\x20only\x20the\x20first\x2050\x20seed\x20users\x20to\x20place\x20rental\x20orders.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_buy_guard_blocklist','scene_id':'service_buy_guard','name':'Blocklist\x20purchase\x20validation','description':'Denies\x20purchase\x20to\x20addresses\x20on\x20the\x20blocklist;\x20an\x20EMPTY\x20blocklist\x20is\x20an\x20OPEN\x20store\x20(anyone\x20may\x20buy).\x20'+'Instantiable\x20form\x20of\x20pattern.buy_guard_blocklist\x20—\x20arm\x20a\x20self-purchase\x20ban\x20by\x20listing\x20the\x20provider\x27s\x20'+'own\x20account(s),\x20or\x20a\x20territory\x20embargo\x20by\x20listing\x20barred\x20buyers.\x20The\x20polarity\x20twin\x20of\x20'+'tpl_buy_guard_whitelist:\x20a\x20blocklist\x20can\x20default\x20empty\x20(open),\x20an\x20allowlist\x20cannot\x20(an\x20empty\x20'+'whitelist\x20denies\x20everyone),\x20which\x20is\x20why\x20the\x20open-store\x20default\x20is\x20expressible\x20only\x20here.','recommended_patterns':['P04','P03'],'parameters':[{'name':'blocklist','type':'vec_address','description':'Addresses\x20denied\x20purchase\x20(empty\x20vector\x20=\x20open\x20store)','required':![],'default':'[]','constraint':'Each\x20address\x20must\x20be\x20valid\x20and\x20unique;\x20an\x20empty\x20list\x20leaves\x20the\x20store\x20open\x20to\x20every\x20buyer'},{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(used\x20for\x20circular\x20references)','required':![],'constraint':'If\x20P16\x20circular\x20reference\x20is\x20used,\x20a\x20name\x20must\x20be\x20provided\x20rather\x20than\x20an\x20address'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'VecAddress','value':'${blocklist}','name':'Denied-purchase\x20blocklist'}],'example_root':{'type':'logic_not','node':{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x0},{'type':'context','context':'Signer'}]}},'applicable_industries':['freelance','ecommerce','education','licensing'],'relevant_risks':['R-C1-01','R-C3-01','R-C4-01'],'creation_notes':['EMPTY-BLOCKLIST\x20DEFAULT:\x20an\x20empty\x20blocklist\x20makes\x20vec_contains_address\x20false\x20for\x20every\x20signer,\x20so\x20the\x20inverted\x20gate\x20passes\x20for\x20everyone\x20—\x20the\x20OPEN\x20store.\x20This\x20is\x20the\x20safe\x20instanceable\x20default\x20the\x20ALLOWLIST\x20twin\x20can\x20never\x20have\x20(an\x20empty\x20whitelist\x20would\x20brick\x20every\x20purchase),\x20which\x20is\x20why\x20a\x20blocklist\x20buy\x20gate\x20converts\x20to\x20an\x20instantiable\x20tpl\x20while\x20an\x20opt-in\x20territory\x20allowlist\x20stays\x20a\x20generation-resolved\x20design.','POLARITY:\x20the\x20root\x20is\x20logic_not\x20over\x20vec_contains_address[blocklist,\x20Signer]\x20—\x20compose\x20by\x20COPY.\x20Do\x20NOT\x20hand-flatten\x20into\x20per-address\x20logic_not(logic_equal)\x20chains;\x20the\x20single\x20vector\x20table\x20slot\x20stays\x20authoritative\x20and\x20is\x20editable\x20until\x20publish\x20(guards\x20are\x20immutable\x20after\x20—\x20IMMUT-001).','SELF-PURCHASE\x20BAN\x20(the\x20agent-task\x20use):\x20list\x20the\x20provider-side\x20account(s)\x20so\x20the\x20seller\x20of\x20the\x20work\x20cannot\x20buy\x20their\x20own\x20escrowed\x20task\x20and\x20rule\x20on\x20it.\x20Passport-gated\x20purchase\x20(once\x20a\x20Passport\x20gate\x20is\x20set)\x20rides\x20the\x20Service-level\x20gate,\x20not\x20this\x20vector.'],'example_use_case':'Agent\x20task:\x20the\x20task\x27s\x20provider\x20account\x20is\x20blocked\x20from\x20purchasing\x20its\x20own\x20listing\x20while\x20every\x20other\x20buyer\x20can\x20fund\x20the\x20bounty\x20—\x20the\x20blocklist\x20ships\x20empty\x20(open\x20store)\x20until\x20the\x20builder\x20lists\x20the\x20provider\x20identity.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_allocator_threshold','scene_id':'service_order_allocators_guard','name':'Allocation\x20amount\x20threshold\x20validation','description':'Selects\x20different\x20allocation\x20strategies\x20based\x20on\x20the\x20order\x20amount.\x20When\x20the\x20amount\x20exceeds\x20the\x20threshold,\x20advanced\x20allocation\x20is\x20used;\x20otherwise,\x20default\x20allocation\x20applies.\x20Caller-authorization\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②):\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20merchant-or-keeper\x20dynamic-permission\x20leg\x20(service.permission\x20==\x20the\x20submitted\x20Permission\x20slot,\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer)\x20—\x20a\x20stranger\x20can\x20no\x20longer\x20fire\x20the\x20threshold\x20rail.\x20The\x20BUYER\x20leg\x20is\x20NOT\x20expressible\x20on\x20this\x20template:\x20its\x20table\x20has\x20no\x20Order\x20slot\x20(a\x20legacy\x20gap\x20this\x20ruling\x20leaves\x20in\x20place)\x20—\x20build\x20a\x20buyer-triggerable\x20threshold\x20rail\x20from\x20tpl_allocator_identity_set_order_holder\x20plus\x20the\x20threshold\x20leg\x20instead.','recommended_patterns':['P02','P10'],'parameters':[{'name':'threshold','type':'number','description':'Allocation\x20threshold\x20(unit:\x20smallest\x20precision)','required':!![],'constraint':'Must\x20be\x20>\x200;\x20a\x20reasonable\x20range\x20is\x20recommended\x20to\x20avoid\x20boundary\x20gaming'},{'name':'service_name','type':'string','description':'Service\x20object\x20name','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object'},{'identifier':0x1,'b_submission':![],'value_type':'U64','value':'${threshold}','name':'Allocation\x20threshold'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]},{'type':'logic_as_u256_greater','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x1}]}]},'applicable_industries':['ecommerce','rental','education','travel'],'relevant_risks':['R-X1-01','R-X1-05','R-X1-08'],'creation_notes':['order_allocators\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20publish)','A\x20distribution\x20call\x20submits\x20ONE\x20guard;\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20fires\x20in\x20vector\x20order\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20the\x20whole\x20bound\x20vector\x20on\x20each\x20call)','Threshold\x20boundary\x20must\x20be\x20tested:\x20behavior\x20when\x20exactly\x20equal\x20to\x20the\x20threshold\x20(>\x20vs\x20>=)','CALLER-AUTHORIZATION\x20LIMITATION:\x20this\x20template\x20predates\x20the\x20Order\x20submission\x20slot,\x20so\x20the\x20buyer-side\x20leg\x20(order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer)\x20is\x20NOT\x20expressible\x20—\x20the\x20shipped\x20caller\x20leg\x20is\x20merchant-or-keeper-only\x20(gf30\x20A2\x20/\x20rex5\x20T-27).\x20A\x20buyer-triggerable\x20threshold\x20rail\x20needs\x20an\x20Order\x20slot\x20plus\x20the\x20order-holder\x20union;\x20build\x20it\x20from\x20tpl_allocator_identity_set_order_holder\x20and\x20copy\x20the\x20threshold\x20leg\x20in.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.'],'example_use_case':'E-commerce\x20platform:\x20order\x20amount\x20>\x201000\x20WOW\x20triggers\x203-way\x20allocation\x20(platform\x20+\x20merchant\x20+\x20logistics);\x20otherwise\x202-way\x20allocation\x20(platform\x20+\x20merchant).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_treasury_personal','scene_id':'service_order_allocators_guard','name':'Treasury\x20+\x20personal\x20address\x20allocation\x20(Entity\x20sharing)','description':'2\x20allocators\x20representing\x202\x20merchant\x20collection\x20approaches:\x20(1)\x20named\x20Treasury\x20address\x20for\x20public\x20fund\x20aggregation,\x20(2)\x20fixed\x20personal\x20address.\x20'+'Uses\x20sharing.who=Entity\x20so\x20funds\x20always\x20flow\x20to\x20the\x20legitimate\x20RECIPIENT\x20regardless\x20of\x20caller,\x20while\x20the\x20CALLER\x20is\x20authorized\x20by\x20the\x20shipped\x20caller-authorization\x20leg\x20(buyer\x20order-holder\x20OR\x20merchant-or-keeper\x20dynamic\x20permission;\x20gf30\x20A2\x20/\x20rex5\x20T-27).\x20'+'Guards\x20verify\x20the\x20order\x20is\x20at\x20the\x20Complete\x20node\x20(Service\x20scoping\x20is\x20chain-side\x20since\x20protocol\x20v148\x20—\x20bsw4\x20F-06\x20removed\x20the\x20host-binding\x20leg).','recommended_patterns':['P02','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'complete_node_name','type':'string','description':'Expected\x20node\x20name\x20that\x20triggers\x20allocation\x20(e.g.\x20\x27Complete\x27)','required':!![],'default':'Complete','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'treasury_name','type':'string','description':'Named\x20Treasury\x20object\x20(created\x20with\x20the\x20Service\x27s\x20permission)','required':!![],'constraint':'Treasury\x20must\x20be\x20created\x20before\x20the\x20Service;\x20use\x20the\x20SAME\x20permission\x20as\x20the\x20Service\x20for\x20consistency'},{'name':'personal_address','type':'address','description':'Fixed\x20personal\x20collection\x20address\x20(e.g.\x20the\x20permission\x20creator\x27s\x20address)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${complete_node_name}','name':'Expected\x20Complete\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['insurance','ecommerce','travel','rental','subscription'],'relevant_risks':['R-C3-05','R-C3-06','R-X1-05','R-X1-01'],'creation_notes':['2\x20Guard\x20objects\x20with\x20IDENTICAL\x20root/table\x20but\x20DIFFERENT\x20descriptions\x20(allocators\x20require\x20unique\x20guard\x20addresses\x20—\x20no\x20two\x20allocators\x20may\x20reference\x20the\x20same\x20Guard).','sharing.who=Entity\x20(Treasury/personal)\x20binds\x20only\x20the\x20RECIPIENT\x20(R-C3-06\x20safe)\x20—\x20it\x20NEVER\x20authorized\x20the\x20caller:\x20the\x20shipped\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20gates\x20WHO\x20may\x20fire\x20the\x20allocation\x20(buyer\x20order-holder\x20OR\x20merchant-or-keeper\x20dynamic\x20permission),\x20so\x20Entity-sharing\x20and\x20caller\x20authorization\x20are\x20orthogonal\x20layers.','Each\x20allocator\x20is\x20bound\x20to\x20a\x20DIFFERENT\x20guard\x20—\x20the\x20caller\x27s\x20submitted\x20guard\x20selects\x20which\x20path\x20fires.\x20To\x20switch\x20from\x20Treasury\x20to\x20personal\x20collection,\x20submit\x20the\x20personal\x20allocator\x27s\x20guard\x20instead','Treasury\x20should\x20be\x20created\x20with\x20the\x20SAME\x20permission\x20as\x20the\x20Service\x20(permission\x20consistency\x20—\x20different\x20permissions\x20=\x20minor\x20risk).','HOST-BINDING\x20REMOVED\x20(bsw4\x20F-05/F-06\x20sweep):\x20the\x20legacy\x20order.service\x20==\x20<service>\x20leg\x20no\x20longer\x20ships\x20—\x20since\x20protocol\x20v148\x20the\x20Progress\x20layer\x20rejects\x20cross-order\x20submissions\x20chain-side,\x20and\x20the\x20leg\x20pinned\x20the\x20Machine\x20to\x20one\x20Service\x20instance\x20(republishing\x20the\x20Service\x20stranded\x20every\x20guard).','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20is\x20immutable\x20after\x20Service\x20publish\x20—\x20verify\x20the\x20Guard\x20logic\x20and\x20sharing\x20config\x20before\x20publishing.'],'example_use_case':'Insurance\x20service:\x20after\x20a\x20claim\x20reaches\x20the\x20Complete\x20node,\x20order\x20funds\x20are\x20allocated\x20to\x20the\x20insurance\x20Treasury\x20'+'(approach\x201,\x20for\x20operational\x20fund\x20aggregation)\x20or\x20to\x20the\x20provider\x27s\x20personal\x20address\x20(approach\x202,\x20for\x20direct\x20income).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_identity_set_order_holder','scene_id':'service_order_allocators_guard','name':'Order-holder\x20identity-set\x20allocation\x20(Level\x202)','description':'Level\x202\x20identity-set\x20binding:\x20Signer\x20is\x20order.owner\x20(1562,\x20Address)\x20OR\x20order.agent\x20(1567,\x20Bool\x20with\x20[Signer]\x20param).\x20'+'Demonstrates\x20the\x20mixed\x20return-type\x20construction\x20pattern\x20—\x20Address-returning\x20queries\x20are\x20wrapped\x20in\x20logic_equal,\x20'+'while\x20Bool-returning\x20queries\x20(suffix\x20\x27has\x27)\x20are\x20used\x20directly\x20as\x20logic_or\x20children.\x20'+'Cross-service\x20theft\x20prevention\x20is\x20chain-side\x20since\x20protocol\x20v148\x20(no\x20host-Service\x20pin\x20—\x20bsw4\x20F-06).\x20'+'Use\x20when\x20either\x20the\x20order\x20owner\x20or\x20an\x20authorized\x20agent\x20should\x20be\x20able\x20to\x20trigger\x20allocation\x20(e.g.\x20refund\x20to\x20caller).','recommended_patterns':['P02','P10','P16'],'parameters':[],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},'applicable_industries':['ecommerce','rental','travel','subscription'],'relevant_risks':['R-C3-01','R-C3-05','R-C3-06','R-C4-04'],'creation_notes':['MIXED\x20RETURN-TYPE\x20CONSTRUCTION\x20(key\x20Level\x202\x20pattern):\x20query\x201562\x20(order.owner)\x20returns\x20Address\x20→\x20wrap\x20in\x20logic_equal\x20with\x20context(Signer);\x20query\x201567\x20(order.agent\x20has)\x20returns\x20Bool\x20→\x20use\x20directly\x20as\x20logic_or\x20child\x20with\x20parameters:\x20[context(Signer)].','logic_or\x20wrapping\x20of\x20the\x20Signer\x20check\x20suppresses\x20R-C4-04\x20(Level\x201\x20strict\x20binding\x20convenience\x20warning)\x20—\x20this\x20is\x20the\x20recommended\x20Level\x202\x20alternative.','Use\x20this\x20pattern\x20when\x20sharing.who=Signer\x20(funds\x20flow\x20to\x20caller)\x20AND\x20either\x20the\x20owner\x20or\x20an\x20agent\x20should\x20be\x20authorized\x20to\x20trigger\x20allocation.','HOST-BINDING\x20REMOVED\x20(bsw4\x20F-06):\x20no\x20order.service\x20leg\x20—\x20protocol\x20v148\x27s\x20chain-side\x20task-binding\x20check\x20scopes\x20every\x20submission\x20to\x20the\x20originating\x20Service.','If\x20agents\x20are\x20not\x20needed,\x20use\x20the\x20simpler\x20Level\x202\x20dynamic\x20pattern:\x20logic_equal[query(1562),\x20context(Signer)]\x20without\x20logic_or.'],'example_use_case':'Refund\x20allocation:\x20when\x20an\x20order\x20is\x20cancelled,\x20either\x20the\x20order\x20owner\x20or\x20an\x20authorized\x20agent\x20can\x20trigger\x20the\x20refund.\x20'+'The\x20Guard\x20verifies\x20Signer\x20is\x20order.owner\x20OR\x20order.agent;\x20Service\x20scoping\x20is\x20chain-side\x20(protocol\x20v148).','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_allocator_identity_set_service_provider_dynamic','scene_id':'service_order_allocators_guard','name':'Service-provider\x20identity-set\x20allocation\x20with\x20dynamic\x20permission\x20(Level\x202)','description':'Level\x202\x20identity-set\x20binding\x20with\x20DYNAMIC\x20permission\x20address:\x20Signer\x20is\x20permission.owner\x20(1002,\x20Address)\x20OR\x20'+'has\x20admin\x20(1004,\x20Bool\x20with\x20[Signer]\x20param).\x20The\x20permission\x20address\x20is\x20submitted\x20by\x20the\x20caller\x20and\x20verified\x20'+'against\x20service.permission\x20(1488)\x20—\x20this\x20survives\x20permission\x20rotation\x20without\x20rebuilding\x20the\x20Guard.\x20'+'Use\x20when\x20the\x20Service\x20may\x20rotate\x20its\x20permission\x20(like\x20a\x20company\x20changing\x20its\x20board)\x20and\x20a\x20static\x20permission\x20'+'address\x20would\x20break\x20the\x20Guard.','recommended_patterns':['P02','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20caller\x20—\x20must\x20equal\x20service.permission)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x2},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x2},'parameters':[{'type':'context','context':'Signer'}]}]}]},'applicable_industries':['ecommerce','rental','insurance','travel','subscription'],'relevant_risks':['R-C3-01','R-C3-05','R-C3-06','R-C4-04'],'creation_notes':['DYNAMIC\x20PERMISSION\x20VERIFICATION\x20(key\x20pattern):\x20caller\x20submits\x20a\x20Permission\x20address\x20(identifier\x202);\x20Guard\x20verifies\x20query(1488:\x20service.permission)\x20==\x20submitted\x20permission,\x20then\x20checks\x201002/1004\x20against\x20the\x20submitted\x20permission.\x20This\x20survives\x20permission\x20rotation\x20—\x20if\x20the\x20Service\x20changes\x20its\x20permission,\x20the\x20Guard\x20still\x20works\x20without\x20rebuilding.','MIXED\x20RETURN-TYPE\x20CONSTRUCTION:\x20query\x201002\x20(permission.owner)\x20returns\x20Address\x20→\x20wrap\x20in\x20logic_equal;\x20query\x201004\x20(permission.admin\x20has)\x20returns\x20Bool\x20→\x20use\x20directly\x20as\x20logic_or\x20child\x20with\x20parameters:\x20[context(Signer)].','logic_or\x20wrapping\x20of\x20the\x20Signer\x20check\x20suppresses\x20R-C4-04\x20(Level\x201\x20strict\x20binding\x20convenience\x20warning).','TWO\x20conditions\x20in\x20logic_and:\x20(1)\x20dynamic\x20permission\x20verification,\x20(2)\x20identity\x20set\x20(owner\x20OR\x20admin).\x20The\x20legacy\x20order.service\x20host-binding\x20leg\x20was\x20removed\x20(v148\x20chain-side\x20task\x20binding\x20—\x20bsw4\x20F-06).','Static\x20permission\x20alternative\x20(simpler\x20but\x20breaks\x20on\x20rotation):\x20use\x20a\x20table\x20constant\x20for\x20the\x20permission\x20address\x20instead\x20of\x20b_submission=true\x20+\x201488\x20verification.','Repository-based\x20address\x20set\x20(most\x20flexible,\x20most\x20complex):\x20store\x20the\x20permission\x20address\x20set\x20in\x20a\x20Repository\x20and\x20query\x20dynamically\x20—\x20only\x20for\x20extreme\x20flexibility\x20needs.'],'example_use_case':'Merchant\x20allocation:\x20the\x20Service\x20may\x20rotate\x20its\x20permission\x20(like\x20a\x20company\x20changing\x20its\x20board).\x20'+'The\x20caller\x20submits\x20the\x20current\x20permission\x20address;\x20the\x20Guard\x20verifies\x20it\x20matches\x20service.permission\x20(1488),\x20'+'then\x20checks\x20that\x20Signer\x20is\x20the\x20permission\x20owner\x20or\x20has\x20admin\x20rights.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_allocator_node_gate_settle','scene_id':'service_order_allocators_guard','name':'Node-gated\x20settlement\x20rail\x20(node\x20gate\x20+\x20order\x20anchor\x20+\x20period\x20once-key)','description':'Settlement\x20allocator\x20guard\x20for\x20rails\x20that\x20legitimately\x20run\x20once\x20per\x20RENEWAL\x20PERIOD:\x20progress.current\x20==\x20settle_node,\x20'+'the\x20protocol-255\x20once-per-period\x20key\x20pinned\x20to\x20the\x20monotonic\x20'+'progress.history\x20count\x20(replay-proof\x20on\x20renewal\x20loops;\x20OFN\x20#P-04,\x20mainnet-proven).\x20For\x20ONE-SHOT\x20per-order\x20escrow\x20'+'(the\x20order\x20settles\x20at\x20most\x20once\x20in\x20its\x20lifetime)\x20use\x20tpl_allocator_node_gate_settle_once\x20instead\x20—\x20the\x20history\x20'+'count\x20is\x20PUBLICLY\x20READABLE\x20(zero\x20replay\x20protection\x20on\x20a\x20single-shot\x20rail)\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20'+'locks\x20the\x20key\x20(klook\x20KL-LIVE-01,\x20261014).\x20Canonical\x20guard\x20design\x20for\x20settlement\x20'+'allocator\x20rows\x20(catalog-tiers\x20style)\x20—\x20do\x20NOT\x20borrow\x20tpl_forward_node_check\x20(machine_forward\x20scene).\x20Caller-authorization\x20leg\x20REQUIRED\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20buyer\x20or\x20merchant-or-keeper\x20dynamic-permission\x20caller\x20leg\x20—\x20never\x20strip\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27completed\x27)','required':!![],'default':'completed','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0xff,'b_submission':!![],'value_type':'U64','name':'ONCE\x20byte-key\x20slot\x20(protocol\x20255):\x20caller\x20submits\x20the\x20current\x20period\x20step;\x20the\x20guard\x20leg\x20pins\x20it\x20to\x20the\x20monotonic\x20progress.history\x20count\x20so\x20each\x20period\x20gets\x20a\x20fresh\x20key'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0xff},{'type':'query','query':'progress.history\x20count','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['FOUR\x20legs\x20in\x20logic_and:\x20(1)\x20node\x20gate\x20progress.current\x20==\x20settle_node\x20(the\x20arrival\x20precondition),\x20(2)\x20caller-authorization\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20logic_or[buyer\x20order-holder,\x20merchant-or-keeper\x20dynamic\x20permission]\x20—\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20(3)\x20protocol-255\x20once\x20leg\x20pinned\x20to\x20progress.history\x20count\x20(monotonic,\x20unforgeable\x20—\x20each\x20period\x20gets\x20a\x20fresh\x20OnceKey;\x20OFN\x20#P-04,\x20mainnet-proven\x20261010).','The\x20guard\x20table\x20MUST\x20declare\x20identifier\x20255\x20(b_submission:\x20true)\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport\x20from\x20the\x20guard\x20table,\x20so\x20the\x20once\x20leg\x20could\x20never\x20pass\x20without\x20the\x20declaration.','Pair\x20the\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20this\x20guard_key,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20and\x20a\x20sibling\x20period\x27s\x20passport\x20satisfies\x20nothing\x20(testnet\x20CR-01).','Drop\x20the\x20255\x20leg\x20ONLY\x20when\x20the\x20settle\x20node\x20is\x20reachable\x20exactly\x20once\x20per\x20order\x20lifetime\x20AND\x20no\x20renewal\x20loop\x20exists\x20(single-shot\x20services);\x20a\x20re-enterable\x20settle\x20node\x20without\x20it\x20is\x20replayable.\x20A\x20SINGLE-SHOT\x20service\x20should\x20NOT\x20use\x20this\x20template\x20at\x20all\x20—\x20use\x20tpl_allocator_node_gate_settle_once\x20(chain-derived\x20254\x20key):\x20a\x20single-shot\x20rail\x20keyed\x20to\x20the\x20publicly\x20readable\x20history\x20count\x20has\x20zero\x20replay\x20protection\x20and\x20a\x20keeper\x20off-by-one\x20permanently\x20locks\x20it\x20(klook\x20KL-LIVE-01,\x20261014).','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Subscription\x20settlement:\x20each\x20period\x20settles\x20to\x20the\x20creator\x20when\x20the\x20fan\x20confirms\x20(completed);\x20the\x20255\x20leg\x20keyed\x20to\x20the\x20period\x27s\x20history\x20count\x20lets\x20periods\x201..N\x20each\x20settle\x20exactly\x20once.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_settle_nodes','scene_id':'service_order_allocators_guard','name':'Node-SET\x20staged\x20settlement\x20rail\x20(multi-fire,\x20per-stage\x20255\x20once\x20key)','description':'Settlement\x20allocator\x20guard\x20for\x20rails\x20that\x20fire\x20ONCE\x20PER\x20STAGE\x20across\x20a\x20node\x20lineage\x20(degree\x20terms,\x20course\x20'+'sessions,\x20milestone\x20stages):\x20progress.current\x20in\x20the\x20settle-eligible\x20NODE\x20SET\x20{settle_node,\x20alt,\x20alt2,\x20alt3}\x20'+'plus\x20the\x20protocol-255\x20once-per-stage\x20key\x20pinned\x20to\x20the\x20monotonic\x20progress.history\x20count\x20(each\x20stage\x27s\x20entry\x20'+'grows\x20the\x20count,\x20so\x20every\x20fire\x20gets\x20a\x20fresh\x20chain\x20OnceKey\x20and\x20a\x20repeat\x20at\x20the\x20SAME\x20node\x20aborts\x2016\x20—\x20'+'OFN\x20#P-04\x20mainnet-proven).\x20Caller-authorization\x20leg\x20REQUIRED\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20alloc_by_guard\x20has\x20NO\x20'+'chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20buyer\x20or\x20merchant-or-keeper\x20dynamic-permission\x20caller\x20leg\x20—\x20'+'never\x20strip\x20it.\x20Deliberately\x20NO\x20claimed_by\x20leg\x20(decision\x2011\x20two-rail\x20independence\x20—\x20NO\x20fund\x20rail\x20reads\x20'+'order.claimed_by\x20at\x20all):\x20the\x20escrow\x20track\x20completes\x20by\x20order-level\x20node\x20state\x20alone,\x20and\x20an\x20award\x20paying\x20'+'one\x20stage\x20must\x20not\x20weld\x20the\x20REMAINING\x20stages\x20shut\x20—\x20the\x20terminal\x20residual\x20sweep\x20+\x20its\x20recover\x20twin\x20remain\x20'+'the\x20awarded\x20order\x27s\x20exits.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'First\x20stage\x20node\x20whose\x20arrival\x20releases\x20the\x20stage\x20Amount\x20(e.g.\x20\x27semester_1\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'settle_node_alt','type':'string','description':'Second\x20stage\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20program\x20has\x20a\x20single\x20stage','required':![],'default':'${settle_node}','constraint':'Every\x20stage\x20the\x20Amount\x20must\x20release\x20from\x20—\x20omitting\x20one\x20strands\x20that\x20stage\x27s\x20escrow'},{'name':'settle_node_alt2','type':'string','description':'Third\x20stage\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${settle_node}'},{'name':'settle_node_alt3','type':'string','description':'Fourth\x20stage\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${settle_node}','constraint':'Five-plus\x20stages:\x20add\x20per-node\x20String\x20table\x20slots\x20(identifier\x208,\x209,\x20...\x20—\x20slots\x200/6/255\x20are\x20taken)\x20and\x20extend\x20the\x20node-set\x20logic_or\x20by\x20COPY\x20of\x20the\x20shipped\x20four-child\x20form'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'First\x20stage\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${settle_node_alt}','name':'Second\x20stage\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${settle_node_alt2}','name':'Third\x20stage\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x7,'b_submission':![],'value_type':'String','value':'${settle_node_alt3}','name':'Fourth\x20stage\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0xff,'b_submission':!![],'value_type':'U64','name':'ONCE\x20byte-key\x20slot\x20(protocol\x20255):\x20the\x20caller\x20submits\x20the\x20current\x20progress.history\x20count;\x20the\x20guard\x20leg\x20pins\x20it,\x20so\x20each\x20stage\x20gets\x20a\x20fresh\x20OnceKey\x20and\x20a\x20replay\x20at\x20the\x20same\x20stage\x20aborts\x2016'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x7}]}]},{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0xff},{'type':'query','query':'progress.history\x20count','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['education','ecommerce','rental','freelance','travel'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['THREE\x20logic\x20legs\x20in\x20logic_and:\x20(1)\x20the\x20node-SET\x20gate\x20—\x20progress.current\x20in\x20{settle_node,\x20alt,\x20alt2,\x20alt3}\x20as\x20ONE\x20top-level\x20logic_or,\x20(2)\x20the\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20—\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20(3)\x20the\x20protocol-255\x20once\x20leg\x20pinned\x20to\x20progress.history\x20count\x20(monotonic,\x20unforgeable\x20—\x20each\x20stage\x20gets\x20a\x20fresh\x20OnceKey;\x20OFN\x20#P-04,\x20mainnet-proven\x20261010).\x20The\x20guard\x20table\x20MUST\x20declare\x20identifier\x20255\x20(b_submission:\x20true)\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport\x20from\x20the\x20guard\x20table.','WHY\x20NOT\x20254\x20(single-shot\x20key):\x20254\x20keys\x20on\x20payment_info.for_object,\x20which\x20never\x20changes\x20across\x20stages\x20—\x20the\x20SECOND\x20stage\x20fire\x20would\x20abort\x2016\x20forever\x20and\x20strand\x20the\x20remaining\x20stages\x20(OFN\x20#P-04).\x20The\x20255\x20history-count\x20pin\x20is\x20the\x20only\x20per-fire\x20key\x20that\x20advances\x20with\x20the\x20order.','WHY\x20NOT\x20a\x20claimed_by\x20leg\x20(decision\x2011\x20two-rail\x20independence\x20—\x20no\x20fund\x20rail\x20reads\x20order.claimed_by):\x20a\x20staged\x20rail\x20MUST\x20keep\x20firing\x20after\x20an\x20award\x20pays\x20—\x20the\x20payout\x20is\x20the\x20indemnity\x20track\x27s\x20business,\x20not\x20a\x20state\x20condition\x20on\x20this\x20rail,\x20and\x20welding\x20stages\x202..N\x20shut\x20strands\x20the\x20program.\x20The\x20awarded\x20order\x27s\x20exits\x20are\x20the\x20terminal\x20residual\x20sweep\x20and\x20its\x20recover\x20twin,\x20not\x20this\x20rail.','PER-STAGE\x20CAP:\x20the\x20Amount\x20leg\x20is\x20a\x20fixed\x20per-stage\x20figure;\x20the\x20node\x20set\x20+\x20once\x20key\x20bound\x20the\x20fires\x20to\x20one\x20per\x20stage\x20entry,\x20so\x20an\x20N-stage\x20program\x20releases\x20at\x20most\x20N\x20x\x20Amount.\x20A\x20stage\x20expanded\x20beyond\x20the\x20four\x20shipped\x20slots\x20needs\x20extra\x20String\x20table\x20slots\x20(identifier\x208,\x209,\x20...)\x20and\x20one\x20more\x20logic_or\x20child\x20per\x20slot.','Pair\x20the\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20sharing\x20this\x20guard_key\x20when\x20the\x20allocator\x20pays\x20a\x20third\x20party,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20(testnet\x20CR-01).\x20An\x20Amount-mode\x20allocator\x20with\x20a\x20Rate-0\x20leg\x20aborts\x20ERATE_NOT_10000\x20—\x20order\x20binding\x20then\x20rides\x20the\x20guard\x27s\x20own\x20slot-0\x20submission\x20instead.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20progress\x20handler\x20injects\x20the\x20order-holder\x20rail\x20on\x20forward\x20ops\x20only,\x20but\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Degree\x20tuition:\x20each\x20completed\x20term\x20(semester_1..3,\x20graduation_ready)\x20releases\x20one\x20per-term\x20Amount\x20exactly\x20once;\x20the\x20255\x20leg\x20keyed\x20to\x20the\x20stage\x27s\x20history\x20count\x20lets\x20every\x20term\x20fire\x20while\x20a\x20replay\x20at\x20the\x20same\x20term\x20aborts\x2016.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_settle_once','scene_id':'service_order_allocators_guard','name':'Node-gated\x20SINGLE-SHOT\x20settlement\x20rail\x20(node\x20gate\x20+\x20order\x20anchor\x20+\x20chain-derived\x20254\x20once)','description':'Settlement\x20allocator\x20guard\x20for\x20ONE-SHOT\x20per-order\x20escrow\x20(the\x20order\x20settles\x20at\x20most\x20once\x20in\x20its\x20lifetime):\x20'+'progress.current\x20in\x20the\x20settle-eligible\x20NODE\x20SET\x20{settle_node,\x20settle_node_alt,\x20settle_node_alt2}\x20—\x20the\x20final\x20'+'node\x20plus\x20every\x20optional\x20post-settlement\x20side\x20node\x20(UPWC-K2/CAT-C1:\x20a\x20buyer\x20Praise\x20moved\x20progress.current\x20to\x20'+'\x27wonder\x27\x20and\x20the\x20completed-only\x20pin\x20aborted\x20the\x20merchant\x27s\x20alloc,\x20stranding\x20the\x20escrow)\x20—\x20plus\x20the\x20protocol-254\x20'+'chain-derived\x20once\x20key\x20—\x20bcs(payment_info.for_object)\x20derived\x20on-chain,\x20submitted\x20bytes\x20ignored,\x20exactly-once\x20'+'per\x20paying\x20order\x20enforced\x20by\x20the\x20chain\x20(aborts\x2016\x20on\x20replay,\x2021\x20when\x20the\x20order\x20declares\x20no\x20for_object).\x20'+'TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20the\x20escrow/settlement\x20track\x20and\x20the\x20arbitration-indemnity\x20track\x20are\x20'+'INDEPENDENT\x20at\x20the\x20buyer-seller\x20consensus\x20layer\x20—\x20the\x20escrow\x20track\x20settles\x20per\x20ORDER-level\x20node\x20state\x20and\x20'+'never\x20reads\x20order.claimed_by;\x20an\x20arbitration\x20award\x20is\x20a\x20separate\x20commercial\x20indemnity\x20payment,\x20and\x20the\x20'+'arbitrator\x20rules\x20on\x20the\x20order\x27s\x20CURRENT\x20state\x20and\x20where\x20the\x20funds\x20went.\x20A\x20settle-plus-indemnity\x20double-dip\x20'+'is\x20a\x20legitimate\x20commercial\x20outcome,\x20disclosed\x20to\x20both\x20parties\x20at\x20the\x20MCP\x20confirmation\x20gate.\x20'+'For\x20rails\x20that\x20legitimately\x20run\x20once\x20per\x20RENEWAL\x20PERIOD\x20use\x20tpl_allocator_node_gate_settle\x20(255\x20+\x20period\x20key)\x20instead.\x20Caller-authorization\x20leg\x20REQUIRED\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20buyer\x20or\x20merchant-or-keeper\x20dynamic-permission\x20caller\x20leg\x20—\x20never\x20strip\x20it.\x20DISPUTE\x20FREEZE\x20LEG\x20REQUIRED\x20(W5-14\x20/\x20h1w9\x20F-02):\x20the\x20root\x20also\x20ships\x20logic_not[query(1576\x20order.dispute.open)]\x20—\x20the\x20rail\x20cannot\x20pay\x20while\x20a\x20dispute\x20case\x20is\x20on\x20file\x20with\x20the\x20claim\x20slot\x20unspent\x20(LIVE\x20and\x20decided-unstamped\x20ALIKE);\x20query\x201578\x20(order.dispute.unstamped)\x20tells\x20the\x20keeper\x20WHICH\x20state\x20holds\x20(in-flight\x20=\x20wait,\x20resolved-awaiting-stamp\x20=\x20one\x20arb_case_conclude\x20tx).\x20PROTOCOL\x20GATE\x20(v139):\x201576/1577/1578\x20are\x20flag-gated\x20(enable_order_dispute_state)\x20—\x20on\x20an\x20older\x20binary\x201576\x20reads\x20false\x20and\x20logic_not[false]\x20admits\x20(the\x20freeze\x20silently\x20degrades\x20open);\x20check\x20upgrade_check\x20(DEPLOY-K1)\x20before\x20relying\x20on\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27completed\x27)','required':!![],'default':'completed','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'settle_node_alt','type':'string','description':'Second\x20settle-eligible\x20node\x20—\x20the\x20template\x27s\x20post-settlement\x20OPTIONAL\x20side\x20node\x20(e.g.\x20\x27wonder\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20no\x20side\x20nodes','required':![],'default':'completed','constraint':'UPWC-K2\x20(upwc-cat-261017\x20CAT-C1):\x20a\x20settlement\x20gate\x20pinned\x20to\x20the\x20final\x20node\x20ALONE\x20strands\x20the\x20escrow\x20the\x20moment\x20a\x20buyer\x20uses\x20an\x20optional\x20post-settlement\x20side\x20action\x20(Praise/Complain\x20move\x20progress.current\x20off\x20completed\x20BEFORE\x20the\x20merchant\x27s\x20alloc\x20runs).\x20Pass\x20every\x20node\x20settlement\x20must\x20still\x20fire\x20from'},{'name':'settle_node_alt2','type':'string','description':'Third\x20settle-eligible\x20node\x20(e.g.\x20\x27no_wonder\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'completed'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${settle_node_alt}','name':'Second\x20settle-eligible\x20node\x20(optional\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${settle_node_alt2}','name':'Third\x20settle-eligible\x20node\x20(optional\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','name':'CHAIN-DERIVED\x20ONCE\x20slot\x20(protocol\x20254):\x20the\x20once\x20key\x20is\x20derived\x20on-chain\x20from\x20the\x20paying\x20order\x20(bcs(payment_info.for_object));\x20the\x20submitted\x20bytes\x20are\x20ignored,\x20so\x20exactly-once\x20per\x20order\x20is\x20chain-enforced\x20and\x20publicly\x20unforgeable'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]},{'type':'logic_not','node':{'type':'query','query':'order.dispute.open','object':{'identifier':0x0},'parameters':[]}}]},'applicable_industries':['ecommerce','rental','education','travel','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['THREE\x20logic\x20legs\x20in\x20logic_and\x20(node-SET\x20gate\x20+\x20caller-authorization\x20+\x20the\x20W5-14\x20dispute-freeze\x20leg\x20logic_not[query(1576\x20order.dispute.open)]\x20at\x20identifier\x200;\x20the\x20legacy\x20order.service\x20host-binding\x20leg\x20was\x20removed\x20—\x20v148\x20chain-side\x20task\x20binding,\x20bsw4\x20F-06;\x20the\x20claimed_by\x20polarity\x20leg\x20was\x20removed\x20—\x20decision\x2011\x20two-rail\x20independence:\x20the\x20escrow\x20track\x20never\x20reads\x20order.claimed_by);\x20the\x20caller\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20is\x20logic_or[buyer\x20order-holder,\x20merchant-or-keeper\x20dynamic\x20permission]\x20—\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check;\x20the\x20ONCE\x20semantics\x20is\x20NOT\x20a\x20logic\x20leg\x20—\x20it\x20is\x20the\x20declared\x20254\x20submission\x20slot:\x20alloc()\x20derives\x20the\x20key\x20on-chain\x20as\x20bcs(payment_info.for_object)\x20and\x20a\x20second\x20alloc\x20for\x20the\x20same\x20order\x20aborts\x2016\x20(E_ONCE_TRIGGERED)\x20before\x20any\x20distribution.','NODE-SET\x20SHAPE\x20(klook-mn-261019\x20KLM-FIND-02):\x20the\x20node-set\x20leg\x20is\x20a\x20logic_or\x20ONLY\x20when\x20the\x20settled\x20set\x20has\x202+\x20nodes\x20—\x20logic_or\x20requires\x20at\x20least\x202\x20children\x20(\x27logic_or\x20requires\x20at\x20least\x202\x20child\x20nodes\x27),\x20so\x20a\x20SINGLE-node\x20rail\x20uses\x20the\x20bare\x20logic_equal[progress.current\x20==\x20<node>]\x20as\x20the\x20leg;\x20wrapping\x20one\x20node\x20in\x20logic_or\x20fails\x20guard\x20creation.','The\x20guard\x20table\x20MUST\x20declare\x20{identifier:\x20254,\x20b_submission:\x20true,\x20value_type:\x20\x27Address\x27}\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport\x20from\x20the\x20guard\x20table.','WHY\x20NOT\x20255\x20+\x20history\x20count\x20on\x20a\x20single-shot\x20rail\x20(klook\x20KL-LIVE-01):\x20the\x20history\x20count\x20is\x20PUBLICLY\x20READABLE\x20(anyone\x20pre-computes\x20the\x20next\x20value\x20—\x20zero\x20replay\x20protection)\x20and\x20a\x20keeper\x20off-by-one\x20pins\x20the\x20wrong\x20key\x20and\x20permanently\x20locks\x20the\x20rail;\x20254\x20is\x20chain-derived\x20from\x20the\x20paying\x20order\x20and\x20immune\x20to\x20both.','Pair\x20the\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20this\x20guard_key,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20(testnet\x20CR-01).','Renewal/subscription\x20settlement\x20(once\x20per\x20PERIOD)\x20must\x20use\x20tpl_allocator_node_gate_settle\x20—\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes\x20across\x20periods,\x20so\x20a\x20renewal\x20rail\x20with\x20254\x20aborts\x2016\x20forever\x20from\x20period\x202\x20(OFN\x20#P-04).','DISPUTE\x20FREEZE\x20LEG\x20(W5-14\x20/\x20h1w9\x20F-02;\x20ships\x20IN\x20example_root):\x20the\x20third\x20leg\x20is\x20logic_not[query(1576\x20order.dispute.open)]\x20at\x20the\x20slot-0\x20Order\x20anchor\x20—\x20a\x20settlement\x20rail\x20must\x20not\x20pay\x20while\x20a\x20dispute\x20case\x20is\x20on\x20file\x20with\x20the\x20claim\x20slot\x20unspent,\x20covering\x20BOTH\x20the\x20live\x20case\x20and\x20the\x20decided-but-unstamped\x20window\x20(releasing\x20the\x20latter\x20was\x20the\x20F-aj\x20hole).\x20The\x20stamp\x20is\x20never\x20read\x20as\x20a\x20leg:\x201576\x27s\x20claimed_by\x20half\x20is\x20chain-side\x20query\x20semantics\x20(the\x20sanctioned\x20exception\x20to\x20decision\x2011),\x20the\x20guard\x20mounts\x20only\x20the\x20Bool.\x20Keeper\x20precision\x20comes\x20from\x20query\x201578\x20(order.dispute.unstamped):\x20in-flight\x20=\x20wait,\x20resolved-awaiting-stamp\x20=\x20ONE\x20arb_case_conclude\x20tx\x20releases\x20the\x20rail\x20by\x20itself.\x20PROTOCOL\x20GATE\x20(v139):\x201576/1577/1578\x20are\x20flag-gated\x20(enable_order_dispute_state)\x20—\x20on\x20an\x20older\x20binary\x201576\x20reads\x20false\x20and\x20the\x20leg\x20admits\x20(the\x20freeze\x20silently\x20degrades\x20open);\x20check\x20upgrade_check\x20(DEPLOY-K1)\x20before\x20relying\x20on\x20it,\x20and\x20keep\x20the\x20keeper-conclude\x20duty\x20regardless.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Travel\x20single-shot\x20settlement:\x20each\x20order\x20settles\x20exactly\x20once\x20when\x20the\x20last\x20segment\x20is\x20redeemed\x20(completed);\x20a\x20replayed\x20alloc\x20for\x20the\x20same\x20order\x20aborts\x2016\x20via\x20the\x20chain-derived\x20254\x20key\x20—\x20no\x20keeper-computed\x20key\x20to\x20guess\x20or\x20mistype.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_settle_band_once','scene_id':'service_order_allocators_guard','name':'Severity-band\x20single-shot\x20settlement\x20rail\x20(triage\x20band\x20+\x20report\x20signer\x20binding\x20+\x20node\x20gate)','description':'Settlement\x20allocator\x20guard\x20for\x20triage-priced\x20work\x20(bug\x20bounty,\x20security\x20review,\x20bountied\x20triage):\x20the\x20'+'tpl_allocator_node_gate_settle_once\x20rail\x20(node-set\x20gate\x20+\x20caller\x20authorization\x20+\x20'+'chain-derived\x20254\x20once)\x20wrapped\x20in\x20TWO\x20evidence\x20legs\x20that\x20make\x20the\x20payout\x20amount-triaged\x20and\x20'+'author-bound\x20—\x20(1)\x20SEVERITY-BAND\x20leg:\x20a\x20vec_contains_address-pinned\x20find_where\x20over\x20the\x20SINGLE\x20'+'write-once\x20\x27triage_band\x27\x20policy\x20requires\x20a\x20U64\x20band\x20row\x20FOR\x20THE\x20SUBMITTED\x20ORDER\x20inside\x20[band_min,\x20'+'band_max)\x20(the\x20review-decision\x20anti-forge\x20shape:\x20the\x20value\x20is\x20bound\x20to\x20the\x20order,\x20so\x20a\x20foreign\x20or\x20'+'re-keyed\x20row\x20changes\x20nothing);\x20(2)\x20SIGNER-BINDING\x20leg:\x20the\x20firing\x20signer\x20must\x20own\x20the\x20report\x20row\x20—\x20'+'report\x20policy\x20rows\x20are\x20ORDER-keyed\x20(id_from\x20none:\x20the\x20row\x20key\x20IS\x20the\x20order\x20address)\x20whose\x20Address\x20'+'value\x20records\x20the\x20report\x20author,\x20so\x20keys_where\x20probing\x20THIS\x20order\x27s\x20key\x20for\x20a\x20value\x20addressEq-equal\x20'+'to\x20the\x20firing\x20signer\x20returns\x20the\x20report\x20policy\x20key\x20only\x20for\x20the\x20report\x27s\x20author.\x20With\x20one\x20policy\x20key,\x20'+'one\x20U64\x20row\x20per\x20order,\x20write_once:true\x20and\x20four\x20non-overlapping\x20[min,max)\x20band\x20constants,\x20a\x20re-grade\x20'+'is\x20blocked\x20by\x20E_POLICY_WRITE_ONCE_CONFLICT\x20and\x20exactly\x20ONE\x20band\x20guard\x20can\x20ever\x20pass\x20(the\x20O13\x20re-key\x20upgrade\x20is\x20closed\x20by\x20'+'construction).\x20The\x20band\x20proves\x20the\x20TRIAGED\x20severity,\x20not\x20the\x20amount\x20—\x20the\x20Amount\x20row\x20stays\x20the\x20'+'merchant\x27s\x20pricing\x20knob.','recommended_patterns':['P02','P06','P10','P13','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27completed\x27)','required':!![],'default':'completed','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'settle_node_alt','type':'string','description':'Second\x20settle-eligible\x20node\x20(optional\x20side\x20node).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20no\x20side\x20nodes','required':![],'default':'completed'},{'name':'settle_node_alt2','type':'string','description':'Third\x20settle-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'completed'},{'name':'decision_repository','type':'address','description':'The\x20triage-decision\x20Repository\x20(plan-emitted;\x20pass\x20its\x20LocalMark\x20name\x20or\x20address)\x20holding\x20the\x20single\x20\x27triage_band\x27\x20policy','required':!![],'constraint':'Plan-bound\x20static\x20row\x20—\x20NEVER\x20a\x20runtime-submitted\x20repository\x20(a\x20claimant-controlled\x20repo\x20would\x20self-approve\x20bands)'},{'name':'decision_policy_key','type':'string','description':'The\x20single\x20band\x20policy\x20key.\x20MUST\x20equal\x20the\x20host:\x22repository\x22\x20write\x20guard\x27s\x20policy\x20name\x20verbatim\x20(case-sensitive)','required':![],'default':'triage_band','constraint':'ONE\x20key\x20for\x20the\x20whole\x20ladder:\x20per-order\x20write_once\x20on\x20this\x20key\x20is\x20what\x20makes\x20a\x20re-grade\x20impossible\x20—\x20one\x20key\x20per\x20band\x20reopens\x20the\x20O13\x20re-key\x20upgrade\x20hole'},{'name':'band_min','type':'number','description':'Inclusive\x20lower\x20bound\x20of\x20the\x20triage\x20band\x20this\x20guard\x20settles\x20(U64)','required':!![],'constraint':'Plain\x20number\x20string.\x20Band\x20ladders\x20must\x20tile\x20seamlessly\x20WITHOUT\x20overlap\x20(e.g.\x201/2/3/4\x20for\x20four\x20bands)\x20—\x20the\x20scanner\x27s\x20band-coverage\x20check\x20(R-SETTLE-BAND-LADDER)\x20refuses\x20gaps\x20and\x20overlaps'},{'name':'band_max','type':'number','description':'EXCLUSIVE\x20upper\x20bound\x20of\x20the\x20triage\x20band\x20this\x20guard\x20settles\x20(U64)\x20—\x20the\x20band\x20is\x20[band_min,\x20band_max)','required':!![],'constraint':'Plain\x20number\x20string,\x20strictly\x20greater\x20than\x20band_min.\x20Adjacent\x20bands\x20must\x20share\x20edges:\x20[1,2)\x20and\x20[2,3)\x20tile;\x20[1,2)\x20and\x20[2.5,3)\x20leaves\x20a\x20gap\x20the\x20scanner\x20flags'},{'name':'report_repository','type':'address','description':'The\x20report\x20Repository\x20(plan-emitted)\x20whose\x20\x27report\x27\x20policy\x20rows\x20are\x20ORDER-keyed\x20(id_from\x20none)\x20with\x20the\x20report\x20author\x27s\x20Address\x20as\x20value,\x20written\x20under\x20the\x20hunter-bound\x20write\x20guard;\x20may\x20be\x20the\x20SAME\x20repository\x20as\x20decision_repository\x20(single-repo\x20dual-policy\x20shape)','required':!![],'constraint':'Plan-bound\x20static\x20row;\x20its\x20policy\x20name\x20must\x20equal\x20report_policy_key\x20verbatim'},{'name':'report_policy_key','type':'string','description':'The\x20report\x20policy\x20key\x20whose\x20rows\x20bind\x20report\x20authors\x20to\x20orders','required':![],'default':'report','constraint':'MUST\x20equal\x20the\x20host:\x22repository\x22\x20write\x20guard\x27s\x20policy\x20name\x20verbatim\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime\x20—\x20the\x20band-row\x20key\x20AND\x20the\x20report-value\x20anchor)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${settle_node_alt}','name':'Second\x20settle-eligible\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${settle_node_alt2}','name':'Third\x20settle-eligible\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0x7,'b_submission':![],'value_type':'Address','value':'${decision_repository}','name':'Triage-decision\x20Repository\x20(plan-bound\x20—\x20NEVER\x20a\x20runtime-submitted\x20row)'},{'identifier':0x8,'b_submission':![],'value_type':'String','value':'${decision_policy_key}','name':'Band\x20policy\x20key\x20(verbatim-equals\x20the\x20write-side\x20policy\x20name;\x20ONE\x20key\x20for\x20the\x20whole\x20ladder)'},{'identifier':0x9,'b_submission':![],'value_type':'Address','value':'${report_repository}','name':'Report\x20Repository\x20(plan-bound)'},{'identifier':0xa,'b_submission':![],'value_type':'String','value':'${report_policy_key}','name':'Report\x20policy\x20key\x20(verbatim-equals\x20the\x20write-side\x20policy\x20name)'},{'identifier':0xb,'b_submission':!![],'value_type':'Address','name':'Report-author\x20probe:\x20the\x20firing\x20signer\x20self-submits\x20their\x20own\x20address\x20(logic_equal\x20pins\x20it\x20to\x20context(Signer);\x20the\x20report\x20leg\x20requires\x20the\x20order-keyed\x20report\x20row\x27s\x20VALUE\x20to\x20equal\x20it,\x20so\x20a\x20third\x20party\x20cannot\x20pass)'},{'identifier':0xc,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20band\x20rows\x20(fill\x20[the\x20order\x20address];\x20padding\x20is\x20neutralized\x20by\x20the\x20membership\x20pin\x20to\x20identifier\x200)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','name':'CHAIN-DERIVED\x20ONCE\x20slot\x20(protocol\x20254):\x20the\x20once\x20key\x20is\x20derived\x20on-chain\x20from\x20the\x20paying\x20order;\x20exactly-once\x20per\x20order\x20is\x20chain-enforced'}],'example_root':{'type':'logic_and','nodes':[{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x7},'key':{'identifier':0x8},'ids':{'identifier':0xc},'where':{'kind':'range','valueMin':'${band_min}','valueMax':'${band_max}','maxInclusive':![]}},{'type':'identifier','identifier':0x0}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0xb}]},{'type':'vec_contains_string','nodes':[{'type':'query_repository_data_keys_where','object':{'identifier':0x9},'id':{'identifier':0x0},'where':{'kind':'addressEq','identifier':0xb}},{'type':'identifier','identifier':0xa}]}]},{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]},{'type':'logic_not','node':{'type':'query','query':'order.dispute.open','object':{'identifier':0x0},'parameters':[]}}]}]},'applicable_industries':['ecommerce','freelance','education'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01','R-X1-17'],'creation_notes':['FIVE\x20logic\x20legs\x20in\x20two\x20nested\x20logic_and\x20rings\x20(band\x20+\x20signer-binding,\x20then\x20the\x20settle_once\x20trio:\x20node-SET\x20gate\x20+\x20caller-authorization\x20+\x20the\x20W5-14\x20dispute-freeze\x20leg\x20logic_not[query(1576\x20order.dispute.open)]\x20at\x20identifier\x200\x20—\x20the\x20claimed_by\x20polarity\x20leg\x20was\x20removed,\x20decision\x2011\x20two-rail\x20independence;\x20query\x201578\x20order.dispute.unstamped\x20stays\x20the\x20keeper\x27s\x20advisory\x20and\x20one\x20arb_case_conclude\x20tx\x20releases\x20the\x20decided-unstamped\x20window;\x20on\x20a\x20binary\x20without\x20the\x20v139\x20enable_order_dispute_state\x20flag\x201576\x20reads\x20false\x20and\x20the\x20freeze\x20silently\x20degrades\x20open\x20—\x20run\x20upgrade_check\x20(DEPLOY-K1));\x20the\x20ONCE\x20semantics\x20is\x20the\x20declared\x20254\x20submission\x20slot\x20(chain-derived\x20bcs(payment_info.for_object),\x20aborts\x2016\x20on\x20replay).','SINGLE-KEY\x20MUTUAL\x20EXCLUSION\x20(h1z9\x20O13,\x20the\x20whole\x20point\x20of\x20this\x20template):\x20instantiate\x20ONE\x20guard\x20PER\x20BAND\x20over\x20the\x20SAME\x20decision_policy_key\x20with\x20disjoint\x20[min,max)\x20constants\x20(e.g.\x20[1,2)/[2,3)/[3,4)/[4,5));\x20the\x20triage\x20policy\x20ships\x20write_once:true\x20with\x20id_from\x20none\x20(row\x20key\x20=\x20the\x20Order\x20address,\x20value\x20=\x20the\x20U64\x20band).\x20A\x20re-grade\x20then\x20REQUIRES\x20overwriting\x20that\x20row\x20—\x20E_POLICY_WRITE_ONCE_CONFLICT\x20(write-once)\x20—\x20and\x20swapping\x20keys\x20is\x20impossible\x20because\x20every\x20band\x20guard\x20reads\x20the\x20SAME\x20key.\x20\x27Exactly\x20one\x20band\x20guard\x20can\x20ever\x20pass\x27\x20is\x20a\x20chain\x20property\x20here,\x20not\x20prose.','BAND\x20ROW\x20=\x20THE\x20ORDER\x20(T-19):\x20the\x20band\x20leg\x20pins\x20the\x20SUBMITTED\x20order\x20into\x20the\x20matched\x20set\x20(vec_contains_address\x20over\x20find_where)\x20—\x20a\x20forged\x20row\x20keyed\x20by\x20an\x20arbitrary\x2032-byte\x20value\x20changes\x20nothing,\x20because\x20only\x20rows\x20keyed\x20by\x20the\x20order\x20itself\x20can\x20match.\x20The\x20report\x20leg\x20likewise\x20pins\x20the\x20row\x20key\x20to\x20THIS\x20order\x20(keys_where\x20id\x20==\x20the\x20order)\x20and\x20its\x20VALUE\x20to\x20the\x20firing\x20signer\x20(addressEq)\x20—\x20not\x20by\x20key\x20trust.','WRITE\x20GUARDS\x20ARE\x20MANDATORY\x20(R-X1-17):\x20write\x20guards\x20ship\x20for\x20BOTH\x20policies\x20—\x20\x27report\x27\x20bound\x20to\x20the\x20HUNTER\x20(tpl_write_guard_type_check:\x20Signer\x20==\x20the\x20submitted\x20writer),\x20\x27triage_band\x27\x20bound\x20to\x20the\x20TRIAGER\x20(tpl_identity_check_single\x20pinned\x20account)\x20—\x20policy\x20names\x20VERBATIM-equal\x20the\x20read-side\x20keys\x20(report_policy_key\x20/\x20decision_policy_key),\x20both\x20ORDER-domain\x20(id_from\x20none)\x20with\x20write_once:true.\x20Without\x20the\x20write\x20guards\x20anyone\x20writes\x20bands\x20and\x20reports\x20and\x20both\x20legs\x20become\x20decoration.\x20Write\x20authority\x20is\x20split\x20at\x20the\x20POLICY\x20level;\x20both\x20policies\x20may\x20live\x20in\x20ONE\x20evidence\x20repository.','THE\x20BAND\x20IS\x20NOT\x20THE\x20AMOUNT:\x20the\x20band\x20leg\x20proves\x20the\x20TRIAGED\x20severity\x20class;\x20the\x20allocator\x20Amount\x20row\x20remains\x20the\x20merchant\x27s\x20pricing\x20knob\x20(fee_params\x20band\x20→\x20bps/amount\x20tables).\x20Disclose\x20both\x20in\x20the\x20template\x20body\x20—\x20a\x20payout\x20promise\x20without\x20the\x20Amount\x20row\x20is\x20still\x20not\x20chain-enforced.','CLAIMANT\x20=\x20RECORDED\x20REPORT\x20AUTHOR:\x20the\x20signer\x20leg\x20requires\x20the\x20firing\x20signer\x20to\x20equal\x20the\x20report\x20row\x27s\x20recorded\x20reporter\x20value,\x20so\x20ONLY\x20the\x20hunter\x20who\x20filed\x20THIS\x20report\x20can\x20fire\x20the\x20settle\x20alloc\x20(the\x20caller-auth\x20leg\x20stays\x20for\x20defense-in-depth).\x20The\x20report\x20write\x20guard\x20decides\x20WHO\x20that\x20author\x20is\x20—\x20bind\x20it\x20to\x20the\x20reporting\x20party\x20BEFORE\x20publish\x20—\x20Guards\x20and\x20allocators\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001).','Pair\x20the\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20this\x20guard_key,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20(testnet\x20CR-01).','The\x20scanner\x20twin\x20R-SETTLE-BAND-LADDER\x20refuses\x20band\x20ladders\x20with\x20gaps\x20or\x20overlaps\x20—\x20instantiate\x20every\x20band\x20in\x20the\x20ladder;\x20a\x20missing\x20band\x20strands\x20its\x20orders\x27\x20payouts.'],'example_use_case':'Bug-bounty\x20store:\x20the\x20hunter\x20writes\x20the\x20report\x20row\x20keyed\x20by\x20the\x20order\x20(value\x20=\x20their\x20own\x20address,\x20'+'hunter-bound\x20write\x20guard)\x20and\x20the\x20triager\x20sets\x20the\x20U64\x20band\x20row\x20(write_once,\x20triager-bound);\x20the\x20'+'band-matched\x20guard\x20fires\x20—\x20payout\x20passes\x20only\x20for\x20the\x20order\x20at\x20the\x20settle\x20node,\x20inside\x20the\x20band,\x20fired\x20'+'by\x20the\x20recorded\x20report\x20author,\x20exactly\x20once\x20per\x20order.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_prize_settle_once','scene_id':'service_order_allocators_guard','name':'Prize\x20settlement\x20rail\x20(node\x20gate\x20+\x20placement\x20signer-binding\x20+\x20chain-derived\x20254\x20once)','description':'Single-shot\x20prize/settlement\x20allocator\x20guard\x20for\x20judged\x20work\x20(design\x20contests,\x20awards,\x20placed\x20bounties):\x20the\x20'+'tpl_allocator_node_gate_settle_once\x20rail\x20(node-set\x20gate\x20+\x20caller\x20authorization\x20+\x20'+'chain-derived\x20254\x20once)\x20wrapped\x20in\x20ONE\x20evidence\x20leg\x20that\x20makes\x20the\x20payout\x20winner-bound\x20—\x20the\x20SIGNER-BINDING\x20'+'placement\x20leg:\x20placement\x20rows\x20are\x20ORDER-keyed\x20(id_from\x20none:\x20the\x20row\x20key\x20IS\x20the\x20order\x20address)\x20whose\x20Address\x20'+'value\x20records\x20the\x20judge\x27s\x20winner,\x20so\x20keys_where\x20probing\x20THIS\x20order\x27s\x20key\x20for\x20a\x20row\x20addressEq-equal\x20to\x20the\x20'+'firing\x20signer\x20returns\x20the\x20placement\x20policy\x20key\x20only\x20for\x20the\x20recorded\x20winner.\x20Combined\x20with\x20the\x20buyer\x20leg\x20of\x20'+'the\x20caller\x20authorization\x20the\x20rail\x20is\x20winner-claimed:\x20the\x20winning\x20order\x27s\x20owner\x20collects\x20their\x20own\x20prize,\x20and\x20'+'nobody\x20—\x20not\x20even\x20the\x20keeper\x20—\x20can\x20aim\x20the\x20payout\x20at\x20a\x20different\x20address.\x20The\x20winner\x20identity\x20is\x20NOT\x20a\x20'+'hand-typed\x20parameter:\x20it\x20is\x20read\x20back\x20from\x20the\x20judge-written\x20placement\x20row\x20(written\x20by\x20a\x20host:\x22repository\x22\x20'+'placement_write\x20guard),\x20so\x20a\x20re-judging\x20(appeal\x20overturned)\x20rewrites\x20the\x20row\x20and\x20the\x20SAME\x20rail\x20pays\x20the\x20NEW\x20'+'winner\x20—\x20no\x20guard\x20rebuild.','recommended_patterns':['P02','P06','P10','P13','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27settled\x27)','required':!![],'default':'settled','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'settle_node_alt','type':'string','description':'Second\x20settle-eligible\x20node\x20(optional\x20side\x20node).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20no\x20side\x20nodes','required':![],'default':'settled'},{'name':'settle_node_alt2','type':'string','description':'Third\x20settle-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'settled'},{'name':'placement_repository','type':'address','description':'The\x20placement\x20Repository\x20(plan-emitted;\x20pass\x20its\x20LocalMark\x20name\x20or\x20address)\x20whose\x20\x27placement\x27\x20policy\x20rows\x20are\x20ORDER-keyed\x20with\x20the\x20winner\x27s\x20Address\x20as\x20value,\x20written\x20by\x20the\x20judge-bound\x20placement_write\x20guard','required':!![],'constraint':'Plan-bound\x20static\x20row\x20—\x20NEVER\x20a\x20runtime-submitted\x20repository\x20(a\x20winner-controlled\x20repo\x20would\x20self-record\x20the\x20placement)'},{'name':'placement_policy_key','type':'string','description':'The\x20placement\x20policy\x20key\x20whose\x20rows\x20bind\x20winners\x20to\x20orders','required':![],'default':'placement','constraint':'MUST\x20equal\x20the\x20host:\x22repository\x22\x20placement_write\x20guard\x27s\x20policy\x20name\x20verbatim\x20(case-sensitive).\x20Deliberately\x20NOT\x20write_once:\x20an\x20appeal\x20overturning\x20the\x20judging\x20must\x20be\x20able\x20to\x20RE-record\x20the\x20placement\x20row\x20for\x20the\x20same\x20order'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime\x20—\x20the\x20placement-row\x20key\x20AND\x20the\x20settlement\x20anchor)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${settle_node_alt}','name':'Second\x20settle-eligible\x20node\x20(optional\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${settle_node_alt2}','name':'Third\x20settle-eligible\x20node\x20(optional\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0x9,'b_submission':![],'value_type':'Address','value':'${placement_repository}','name':'Placement\x20Repository\x20(plan-bound\x20—\x20NEVER\x20a\x20runtime-submitted\x20row)'},{'identifier':0xa,'b_submission':![],'value_type':'String','value':'${placement_policy_key}','name':'Placement\x20policy\x20key\x20(verbatim-equals\x20the\x20placement_write\x20policy\x20name)'},{'identifier':0xb,'b_submission':!![],'value_type':'Address','name':'Winner\x20probe:\x20the\x20firing\x20signer\x20self-submits\x20their\x20own\x20address\x20(logic_equal\x20pins\x20it\x20to\x20context(Signer);\x20the\x20placement\x20leg\x20requires\x20the\x20order-keyed\x20placement\x20row\x27s\x20VALUE\x20to\x20equal\x20it,\x20so\x20a\x20third\x20party\x20cannot\x20pass)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','name':'CHAIN-DERIVED\x20ONCE\x20slot\x20(protocol\x20254):\x20the\x20once\x20key\x20is\x20derived\x20on-chain\x20from\x20the\x20paying\x20order\x20(bcs(payment_info.for_object));\x20the\x20submitted\x20bytes\x20are\x20ignored,\x20so\x20exactly-once\x20per\x20order\x20is\x20chain-enforced\x20and\x20publicly\x20unforgeable'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0xb}]},{'type':'vec_contains_string','nodes':[{'type':'query_repository_data_keys_where','object':{'identifier':0x9},'id':{'identifier':0x0},'where':{'kind':'addressEq','identifier':0xb}},{'type':'identifier','identifier':0xa}]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]},{'type':'logic_not','node':{'type':'query','query':'order.dispute.open','object':{'identifier':0x0},'parameters':[]}}]}]},'applicable_industries':['freelance','education','ecommerce'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['THREE\x20logic\x20legs\x20in\x20logic_and\x20(node-SET\x20gate\x20+\x20SIGNER-BINDING\x20placement\x20+\x20caller-authorization;\x20the\x20legacy\x20order.service\x20host-binding\x20leg\x20was\x20removed\x20—\x20v148\x20chain-side\x20task\x20binding,\x20bsw4\x20F-06;\x20the\x20claimed_by\x20polarity\x20leg\x20was\x20removed\x20—\x20decision\x2011\x20two-rail\x20independence:\x20the\x20escrow\x20track\x20never\x20reads\x20order.claimed_by).\x20The\x20ONCE\x20semantics\x20is\x20NOT\x20a\x20logic\x20leg\x20—\x20it\x20is\x20the\x20declared\x20254\x20submission\x20slot:\x20alloc()\x20derives\x20the\x20key\x20on-chain\x20as\x20bcs(payment_info.for_object)\x20and\x20a\x20second\x20alloc\x20for\x20the\x20same\x20order\x20aborts\x2016\x20(E_ONCE_TRIGGERED)\x20before\x20any\x20distribution.\x20The\x20verbatim\x20settle-once\x20block\x20also\x20carries\x20the\x20W5-14\x20DISPUTE\x20FREEZE\x20LEG\x20(h1w9\x20F-02):\x20logic_not[query(1576\x20order.dispute.open)]\x20at\x20identifier\x200\x20—\x20the\x20triaged\x20payout\x20is\x20frozen\x20while\x20a\x20dispute\x20case\x20is\x20on\x20file\x20with\x20the\x20claim\x20slot\x20unspent\x20(live\x20AND\x20decided-unstamped);\x20query\x201578\x20(order.dispute.unstamped)\x20tells\x20the\x20keeper\x20which\x20state\x20holds,\x20and\x20the\x20v139\x20flag\x20enable_order_dispute_state\x20gates\x20all\x20three\x20queries\x20(on\x20an\x20older\x20binary\x20the\x20leg\x20admits\x20—\x20the\x20freeze\x20degrades\x20open;\x20check\x20upgrade_check).','SIGNER-BINDING\x20PLACEMENT\x20LEG\x20(card\x2015,\x20band_once\x20LEG\x202\x20shape):\x20the\x20placement\x20rows\x20are\x20ORDER-keyed\x20(id_from\x20none\x20—\x20the\x20row\x20key\x20IS\x20the\x20order\x20address)\x20and\x20their\x20Address\x20value\x20records\x20the\x20judge\x27s\x20winner;\x20keys_where\x20probing\x20THIS\x20order\x27s\x20key\x20for\x20a\x20row\x20addressEq-equal\x20to\x20the\x20firing\x20signer\x20returns\x20the\x20placement\x20policy\x20key\x20ONLY\x20for\x20the\x20recorded\x20winner.\x20PAIR\x20with\x20a\x20host:\x22repository\x22\x20placement_write\x20guard\x20(tpl_identity_check_single\x20pinning\x20the\x20judge\x20address)\x20on\x20the\x20SAME\x20policy\x20name\x20—\x20the\x20write\x20guard\x20makes\x20row\x20forgery\x20judge-impossible,\x20the\x20read\x20leg\x20makes\x20the\x20payout\x20winner-bound.\x20Write\x20the\x20policy\x20with\x20write_once\x20FALSE:\x20an\x20appeal\x20overturning\x20the\x20judging\x20must\x20RE-record\x20the\x20placement\x20for\x20the\x20same\x20order\x20(write_once\x20would\x20strand\x20the\x20appeal\x20at\x20E_POLICY_WRITE_ONCE_CONFLICT)\x20—\x20exactly-once\x20payout\x20is\x20enforced\x20by\x20the\x20254\x20slot,\x20not\x20by\x20the\x20policy.','NODE-SET\x20SHAPE\x20(klook-mn-261019\x20KLM-FIND-02):\x20the\x20node-set\x20leg\x20is\x20a\x20logic_or\x20ONLY\x20when\x20the\x20settled\x20set\x20has\x202+\x20nodes\x20—\x20logic_or\x20requires\x20at\x20least\x202\x20children\x20(\x27logic_or\x20requires\x20at\x20least\x202\x20child\x20nodes\x27),\x20so\x20a\x20SINGLE-node\x20rail\x20uses\x20the\x20bare\x20logic_equal[progress.current\x20==\x20<node>]\x20as\x20the\x20leg;\x20wrapping\x20one\x20node\x20in\x20logic_or\x20fails\x20guard\x20creation.','The\x20guard\x20table\x20MUST\x20declare\x20{identifier:\x20254,\x20b_submission:\x20true,\x20value_type:\x20\x27Address\x27}\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport\x20from\x20the\x20guard\x20table.','WHY\x20NOT\x20255\x20+\x20history\x20count\x20on\x20a\x20single-shot\x20rail\x20(klook\x20KL-LIVE-01):\x20the\x20history\x20count\x20is\x20PUBLICLY\x20READABLE\x20(anyone\x20pre-computes\x20the\x20next\x20value\x20—\x20zero\x20replay\x20protection)\x20and\x20a\x20keeper\x20off-by-one\x20pins\x20the\x20wrong\x20key\x20and\x20permanently\x20locks\x20the\x20rail;\x20254\x20is\x20chain-derived\x20from\x20the\x20paying\x20order\x20and\x20immune\x20to\x20both.','Pair\x20the\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20this\x20guard_key,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20(testnet\x20CR-01).','Renewal/subscription\x20settlement\x20(once\x20per\x20PERIOD)\x20must\x20use\x20tpl_allocator_node_gate_settle\x20—\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes\x20across\x20periods,\x20so\x20a\x20renewal\x20rail\x20with\x20254\x20aborts\x2016\x20forever\x20from\x20period\x202\x20(OFN\x20#P-04).\x20A\x20prize\x20rail\x20is\x20inherently\x20single-shot\x20per\x20contest\x20order,\x20so\x20254\x20is\x20correct\x20here.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/polarity/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.\x20With\x20the\x20placement\x20leg\x20shipped,\x20the\x20BUYER\x20side\x20is\x20the\x20live\x20path\x20—\x20the\x20winner\x20claims\x20their\x20own\x20prize;\x20the\x20keeper\x20side\x20only\x20fires\x20when\x20the\x20judge-recorded\x20winner\x20IS\x20the\x20keeper\x20actor.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Design\x20contest:\x20after\x20judging,\x20the\x20judge\x20records\x20the\x20winner\x20under\x20the\x20winning\x20entry\x27s\x20order\x20(placement_write);\x20the\x20winner\x20then\x20claims\x20the\x20prize\x20at\x20the\x20\x27settled\x27\x20node\x20—\x20the\x20rail\x20pays\x20exactly\x20once\x20per\x20order\x20(chain-derived\x20254)\x20and\x20ONLY\x20to\x20the\x20recorded\x20winner,\x20even\x20across\x20a\x20re-judging\x20(the\x20rewritten\x20placement\x20row\x20re-aims\x20the\x20SAME\x20rail).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_refund','scene_id':'service_order_allocators_guard','name':'Node-gated\x20refund\x20rail\x20(node\x20gate\x20+\x20order\x20anchor;\x20NEVER\x20slot\x20254)','description':'Refund\x20allocator\x20guard\x20over\x20a\x20refund\x20NODE\x20SET\x20{refund_node,\x20refund_node_alt,\x20refund_node_alt2,\x20refund_node_alt3}:\x20'+'progress.current\x20in\x20the\x20set.\x20TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20the\x20refund\x20track\x20settles\x20per\x20ORDER-level\x20node\x20'+'state\x20and\x20never\x20reads\x20order.claimed_by\x20—\x20an\x20arbitration\x20award\x20is\x20a\x20separate\x20commercial\x20indemnity\x20payment\x20ruled\x20on\x20'+'the\x20order\x27s\x20CURRENT\x20state\x20and\x20fund\x20destinations;\x20a\x20refund-plus-indemnity\x20double-dip\x20is\x20a\x20legitimate\x20commercial\x20'+'outcome\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate.\x20Designed\x20for\x20order-anchored\x20refund\x20rows\x20(recipient\x20'+'GuardIdentifier(0)\x20—\x20funds\x20land\x20on\x20the\x20Order,\x20extracted\x20by\x20a\x20separate\x20owner_receive\x20step).\x20Deliberately\x20arms\x20NO\x20254\x20slot:\x20'+'254\x20keys\x20on\x20payment_info.for_object\x20which\x20never\x20changes\x20across\x20renewal\x20periods,\x20so\x20a\x20refund\x20rail\x20with\x20254\x20aborts\x20'+'E_ONCE_TRIGGERED(16)\x20forever\x20from\x20period\x202\x20(OFN\x20#P-04).\x20Once-semantics\x20comes\x20from\x20the\x20terminal-node\x20topology\x20instead.\x20Caller-authorization\x20leg\x20REQUIRED\x20(gf30\x20A2\x20/\x20rex5\x20T-27):\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20the\x20root\x20ships\x20the\x20buyer\x20or\x20merchant-or-keeper\x20dynamic-permission\x20caller\x20leg\x20—\x20never\x20strip\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'refund_node','type':'string','description':'Machine\x20node\x20at\x20which\x20the\x20refund\x20fires\x20(e.g.\x20\x27closed_cancel\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive).\x20Pass\x20every\x20extra\x20refundable\x20terminal\x20via\x20refund_node_alt\x20—\x20never\x20AND-prepend\x20one\x20node\x20gate\x20beside\x20extra\x20node\x20literals'},{'name':'refund_node_alt','type':'string','description':'Second\x20refund-eligible\x20node\x20(e.g.\x20\x27rejected\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20a\x20single\x20refund\x20terminal','required':![],'default':'${refund_node}','constraint':'Cover\x20EVERY\x20refundable\x20terminal\x20—\x20omitting\x20one\x20deadlocks\x20the\x20escrow\x20(OFN\x20#P-02).\x20A\x20third\x20refund\x20node\x20ships\x20as\x20refund_node_alt2\x20(table\x20identifier\x205);\x20a\x20FOURTH\x20as\x20refund_node_alt3\x20(identifier\x207\x20—\x20slot\x206\x20is\x20the\x20caller-auth\x20Permission\x20slot);\x20five-plus\x20nodes:\x20add\x20per-node\x20String\x20table\x20slots\x20(identifier\x208,\x209,\x20...)\x20and\x20extend\x20the\x20node-set\x20logic_or\x20by\x20COPY\x20of\x20the\x20shipped\x20four-child\x20form'},{'name':'refund_node_alt2','type':'string','description':'Third\x20refund-eligible\x20node\x20(e.g.\x20\x27closed_cancel\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${refund_node}'},{'name':'refund_node_alt3','type':'string','description':'Fourth\x20refund-eligible\x20node\x20(e.g.\x20\x27withdrawn\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${refund_node}'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${refund_node}','name':'Primary\x20refund\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${refund_node_alt}','name':'Second\x20refund-eligible\x20node\x20(optional;\x20duplicates\x20the\x20primary\x20when\x20the\x20machine\x20has\x20one\x20refund\x20terminal)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${refund_node_alt2}','name':'Third\x20refund-eligible\x20node\x20(optional;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x7,'b_submission':![],'value_type':'String','value':'${refund_node_alt3}','name':'Fourth\x20refund-eligible\x20node\x20(optional;\x20duplicates\x20the\x20primary\x20when\x20unused\x20—\x20slot\x206\x20stays\x20the\x20caller-auth\x20Permission\x20slot)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x7}]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]},{'type':'logic_not','node':{'type':'query','query':'order.dispute.open','object':{'identifier':0x0},'parameters':[]}}]}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-08'],'creation_notes':['FOUR\x20legs\x20in\x20logic_and:\x20(1)\x20the\x20node-SET\x20gate\x20—\x20progress.current\x20in\x20{refund_node,\x20refund_node_alt,\x20refund_node_alt2,\x20refund_node_alt3}\x20as\x20ONE\x20top-level\x20logic_or\x20child,\x20(2)\x20the\x20CALLER-AUTHORIZATION\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②)\x20—\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20stranger\x20could\x20fire\x20the\x20rail\x20against\x20someone\x20else\x27s\x20escrow:\x20the\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20dynamic\x20permission\x20—\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20(K-4:\x20rails\x20are\x20keeper-fired;\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation);\x20an\x20order-anchored\x20recipient\x20(GuardIdentifier(0))\x20binds\x20WHERE\x20funds\x20land,\x20never\x20WHO\x20may\x20fire],\x20(3)\x20the\x20order-anchored\x20recipient\x20(GuardIdentifier(0))\x20—\x20refund\x20lands\x20on\x20the\x20ORDER,\x20extracted\x20by\x20owner_receive,\x20(4)\x20the\x20W5-14\x20DISPUTE\x20FREEZE\x20leg\x20logic_not[query(1576\x20order.dispute.open)]\x20at\x20the\x20slot-0\x20Order\x20anchor.\x20TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20NO\x20claimed_by\x20leg\x20—\x20the\x20refund\x20track\x20reads\x20ORDER-LEVEL\x20NODE\x20STATE\x20only;\x20an\x20arbitration\x20award\x20is\x20a\x20separate\x20commercial\x20indemnity,\x20and\x20a\x20refund-plus-indemnity\x20double-dip\x20is\x20a\x20legitimate\x20outcome\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate.\x20(Historical:\x20the\x20removed\x20claimed_by\x20some\x20==\x20false\x20leg\x20was\x20once\x20shipped\x20IN\x20example_root\x20—\x20the\x20synthesized\x20anti-pattern\x20logic_equal[logic_not(query\x20\x27order.claimed_by\x20some\x27),\x20false]\x20is\x20a\x20DOUBLE\x20NEGATION\x20that\x20bricks\x20the\x20rail\x20(coursera-mn-261014\x20F-30);\x20keep\x20any\x20future\x20leg\x20IN\x20the\x20root,\x20never\x20prose-only.)','DISPUTE\x20FREEZE\x20LEG\x20(W5-14\x20/\x20h1w9\x20F-02;\x20ships\x20IN\x20example_root):\x20the\x20rail\x20must\x20not\x20pay\x20while\x20a\x20dispute\x20case\x20is\x20on\x20file\x20with\x20the\x20claim\x20slot\x20unspent\x20—\x20covering\x20BOTH\x20the\x20live\x20case\x20and\x20the\x20decided-but-unstamped\x20window\x20(releasing\x20the\x20latter\x20was\x20the\x20F-aj\x20hole).\x201576\x27s\x20claimed_by\x20half\x20is\x20chain-side\x20query\x20semantics\x20(the\x20sanctioned\x20exception\x20to\x20decision\x2011\x20—\x20the\x20guard\x20mounts\x20only\x20the\x20Bool,\x20never\x20order.claimed_by\x20itself).\x20Keeper\x20precision\x20comes\x20from\x20query\x201578\x20(order.dispute.unstamped):\x20in-flight\x20=\x20wait,\x20resolved-awaiting-stamp\x20=\x20ONE\x20arb_case_conclude\x20tx\x20releases\x20the\x20rail\x20by\x20itself.\x20PROTOCOL\x20GATE\x20(v139):\x201576/1577/1578\x20are\x20flag-gated\x20(enable_order_dispute_state)\x20—\x20on\x20an\x20older\x20binary\x201576\x20reads\x20false\x20and\x20the\x20leg\x20admits\x20(the\x20freeze\x20silently\x20degrades\x20open);\x20check\x20upgrade_check\x20(DEPLOY-K1)\x20before\x20relying\x20on\x20it,\x20and\x20keep\x20the\x20keeper-conclude\x20duty\x20regardless.','NEVER\x20arm\x20identifier\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object,\x20which\x20the\x20order\x27s\x20payment\x20intake\x20never\x20rewrites\x20—\x20the\x20OnceKey\x20is\x20identical\x20in\x20every\x20renewal\x20period,\x20so\x20refund\x20period\x202+\x20aborts\x20and\x20the\x20escrow\x20strands\x20with\x20no\x20recovery\x20(OFN\x20#P-04).\x20OBSERVABILITY:\x20on\x20a\x20full-drain\x20rail\x20the\x20EMPTIED-POOL\x20abort\x20(14,\x20when\x20the\x20distribution\x20entry\x20finds\x20the\x20pool\x20already\x20empty)\x20fires\x20BEFORE\x20the\x20once\x20slot\x20is\x20read\x20—\x2014\x20on\x20a\x20refund\x20replay\x20IS\x20the\x20254-replay\x20signature;\x2016\x20(E_ONCE_TRIGGERED)\x20only\x20surfaces\x20when\x20a\x20residual\x20balance\x20keeps\x20the\x20pool\x20alive.\x20Once-semantics\x20on\x20refunds\x20comes\x20from\x20the\x20terminal-node\x20topology\x20(a\x20cancelled\x20terminal\x20is\x20reachable\x20once),\x20not\x20from\x20a\x20once\x20slot.','Renewal\x20loops\x20that\x20legitimately\x20RE-ENTER\x20a\x20refund\x20node\x20(cancel\x20in\x20period\x201,\x20cancel\x20again\x20in\x20period\x203)\x20arm\x20identifier\x20255\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count])\x20instead\x20—\x20byte-keyed,\x20fresh\x20per\x20period.','MULTI-NODE\x20refund\x20(e.g.\x20{closed_cancel,\x20returned,\x20item_lost}):\x20hoist\x20the\x20node\x20predicate\x20to\x20ONE\x20top-level\x20n-ary\x20logic_or\x20as\x20a\x20single\x20logic_and\x20child\x20(the\x20chain\x20grammar\x20accepts\x20>2\x20logic_or\x20children):\x20{\x20type:\x20\x27logic_or\x27,\x20nodes:\x20[\x20{\x20type:\x20\x27logic_equal\x27,\x20nodes:\x20[{\x20type:\x20\x27query\x27,\x20query:\x20\x27progress.current\x27,\x20object:\x20{\x20identifier:\x200,\x20convert_witness:\x20\x27OrderProgress\x27\x20},\x20parameters:\x20[]\x20},\x20{\x20type:\x20\x27identifier\x27,\x20identifier:\x201\x20}]\x20},\x20...one\x20equality\x20per\x20node...\x20]\x20}\x20—\x20each\x20node\x20needs\x20its\x20OWN\x20String\x20table\x20slot\x20(identifiers\x201,\x204,\x205\x20and\x207\x20ship\x20in\x20the\x20template;\x20manual\x20extension\x20starts\x20at\x208,\x209,\x20...\x20-\x20slot\x206\x20is\x20the\x20caller-auth\x20Permission\x20slot).\x20NEVER\x20AND-prepend\x20a\x20single-node\x20gate\x20next\x20to\x20extra\x20node\x20literals:\x20the\x20pinned\x20node\x20contradicts\x20its\x20AND-siblings\x20and\x20they\x20become\x20DEAD\x20literals\x20—\x20azx7-mn-261014\x20CR-azx7-01\x20shipped\x20logic_and[equal(current,\x27returned\x27),\x20...,\x20or[...,\x20equal(current,\x27closed_cancel\x27)],\x20...]\x20where\x20the\x20\x27returned\x27\x20pin\x20made\x20the\x20closed_cancel/item_lost\x20equalities\x20unreachable\x20(both\x20legs\x20dead,\x20escrow\x20stranded\x20twice\x20on\x20mainnet).\x20Cover\x20EVERY\x20refundable\x20node\x20—\x20omitting\x20the\x20mid-period\x20cancel\x20node\x20deadlocks\x20the\x20escrow\x20(OFN\x20#P-02);\x20every\x20terminal\x20must\x20keep\x20a\x20fund\x20exit.\x20The\x20SHIPPED\x20example\x20is\x20the\x20four-node\x20form\x20(identifiers\x201,\x204,\x205\x20and\x207):\x20with\x20the\x20alt\x20params\x20left\x20at\x20their\x20defaults\x20the\x20extra\x20legs\x20duplicate\x20the\x20primary\x20—\x20a\x20legal\x20tautology,\x20never\x20a\x20dead\x20literal.','ESCROW-EXIT\x20COVERAGE\x20(decision\x2011):\x20every\x20terminal\x20the\x20refund\x20rail\x20does\x20NOT\x20cover\x20must\x20still\x20carry\x20a\x20fund\x20exit\x20—\x20pair\x20a\x20merchant-side\x20recovery\x20rail\x20(tpl_allocator_node_gate_recover,\x20terminal-node-gated)\x20so\x20no\x20stop\x20node\x20strands\x20the\x20principal\x20(az-mn-261007).\x20TWO-RAIL\x20INDEPENDENCE:\x20refund\x20and\x20recovery\x20are\x20INDEPENDENT\x20commercial\x20tracks\x20—\x20an\x20arbitration\x20award\x20(indemnity)\x20never\x20welds\x20either\x20track\x20shut;\x20the\x20arbitrator\x20weighs\x20the\x20order\x27s\x20CURRENT\x20state\x20and\x20where\x20the\x20funds\x20went\x20when\x20ruling,\x20and\x20both\x20parties\x20see\x20the\x20double-dip\x20exposure\x20at\x20the\x20MCP\x20confirmation\x20gate.\x20Award-amount\x20polarity\x20is\x20not\x20expressible\x20on\x20either\x20track\x20—\x20commercial\x20judgment,\x20not\x20guard\x20logic.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'Fan\x20cancels\x20mid-period:\x20the\x20refund\x20rail\x20fires\x20at\x20closed_cancel,\x20paying\x20100%\x20back\x20to\x20the\x20subscriber\x27s\x20Order\x20(two-step\x20owner_receive\x20payout);\x20the\x20mid-period\x20node\x20rail\x20is\x20mandatory\x20—\x20omitting\x20it\x20strands\x20the\x20escrow.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_recover','scene_id':'service_order_allocators_guard','name':'Merchant\x20recovery\x20rail\x20(terminal-node-gated\x20sweep;\x20254\x20once-armed)','description':'Merchant-side\x20recovery\x20allocator\x20guard\x20over\x20a\x20recover\x20NODE\x20SET\x20{recover_node,\x20recover_node_alt,\x20recover_node_alt2,\x20recover_node_alt3}:\x20'+'progress.current\x20in\x20the\x20set\x20—\x20the\x20node-set\x20twin\x20of\x20tpl_allocator_node_gate_refund.\x20The\x20paired\x20Allocator\x20row\x20sweeps\x20the\x20'+'remaining\x20escrow\x20principal\x20to\x20the\x20merchant/creator\x20ENTITY\x20wherever\x20the\x20order\x20rests\x20at\x20a\x20terminal\x20the\x20refund\x20and\x20settle\x20'+'rails\x20do\x20not\x20cover\x20(escrow-exit\x20invariant,\x20az-mn-261007:\x20every\x20stop\x20node\x20needs\x20a\x20fund\x20exit).\x20TWO-RAIL\x20INDEPENDENCE\x20'+'(decision\x2011):\x20the\x20recovery\x20track\x20is\x20a\x20BUSINESS\x20track\x20—\x20it\x20fires\x20per\x20ORDER-LEVEL\x20NODE\x20STATE\x20and\x20never\x20reads\x20'+'order.claimed_by;\x20whether\x20the\x20merchant\x20keeps\x20the\x20principal\x20after\x20an\x20arbitration\x20award\x20is\x20a\x20COMMERCIAL\x20ruling\x20the\x20'+'arbitrator\x20makes\x20with\x20the\x20order\x27s\x20current\x20state\x20and\x20fund\x20destinations\x20in\x20view,\x20and\x20the\x20resulting\x20recover/indemnity\x20'+'combination\x20is\x20disclosed\x20to\x20both\x20parties\x20at\x20the\x20MCP\x20confirmation\x20gate\x20—\x20the\x20guard\x20itself\x20carries\x20no\x20polarity.\x20'+'Deliberately\x20NO\x20caller-authorization\x20leg\x20(upw-mn-261014\x20F-52a):\x20the\x20rail\x20pays\x20a\x20FIXED\x20merchant\x20Entity\x20and\x20permissionless\x20'+'keeper\x20firing\x20is\x20the\x20intended\x20model\x20—\x20the\x20legless\x20shape\x20ships\x20under\x20the\x20template\x27s\x20explicit\x20identity_leg_exempt\x20declare\x20'+'(MN5-7R-261102\x20A1,\x20ks11),\x20so\x20it\x20carries\x20a\x20permanent\x20non-blocking\x20disclosure\x20instead\x20of\x20blocking\x20compile\x20or\x20publish.\x20'+'ONCE-ARMED\x20by\x20the\x20compile\x20kernel\x20(MN5-7R-261102\x20A2,\x20ks11:\x20the\x20same\x20sweep\x20paying\x20twice\x20on\x20one\x20order):\x20a\x20kernel\x20build\x20'+'appends\x20the\x20slot-254\x20per-order\x20submission\x20row\x20to\x20this\x20rail\x27s\x20table\x20—\x20the\x20second\x20allocation\x20draw\x20aborts\x20on\x20the\x20consumed\x20'+'once-key\x20instead\x20of\x20paying\x20out\x20again.\x20A\x20MANUAL\x20fill\x20outside\x20the\x20compile\x20kernel\x20carries\x20NO\x20254\x20row:\x20add\x20the\x20settle-once\x20'+'twin\x27s\x20slot-254\x20row\x20by\x20hand\x20when\x20sweeping\x20a\x20PARTIAL\x20residual\x20balance\x20(on\x20a\x20full-drain\x20sweep\x20the\x20emptied-pool\x20abort\x20'+'already\x20stops\x20the\x20second\x20fire).\x20Refund\x20rails\x20keep\x20the\x20OFN\x20#P-04\x20ban\x20—\x20a\x20refund\x20may\x20fire\x20on\x20several\x20terminal\x20legs\x20and\x20a\x20'+'per-order\x20once\x20anchor\x20would\x20deadlock\x20the\x20second\x20leg.\x20DISPUTE\x20FREEZE\x20LEG\x20REQUIRED\x20(W5-14\x20/\x20h1w9\x20F-02):\x20the\x20root\x20also\x20'+'ships\x20logic_not[query(1576\x20order.dispute.open)]\x20at\x20the\x20slot-0\x20Order\x20anchor\x20—\x20the\x20sweep\x20cannot\x20move\x20the\x20principal\x20while\x20a\x20'+'dispute\x20case\x20is\x20on\x20file\x20with\x20the\x20claim\x20slot\x20unspent\x20(LIVE\x20and\x20decided-unstamped\x20ALIKE;\x20query\x201578\x20order.dispute.unstamped\x20'+'tells\x20the\x20keeper\x20which\x20state\x20holds).\x20PROTOCOL\x20GATE\x20(v139):\x201576/1577/1578\x20are\x20flag-gated\x20(enable_order_dispute_state)\x20—\x20on\x20'+'an\x20older\x20binary\x201576\x20reads\x20false\x20and\x20the\x20leg\x20admits\x20(the\x20freeze\x20silently\x20degrades\x20open);\x20check\x20upgrade_check\x20(DEPLOY-K1).','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'recover_node','type':'string','description':'Machine\x20node\x20at\x20which\x20the\x20merchant\x20sweep\x20fires\x20(e.g.\x20\x27rejected\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive).\x20Pass\x20every\x20extra\x20recoverable\x20terminal\x20via\x20recover_node_alt\x20—\x20never\x20AND-prepend\x20one\x20node\x20gate\x20beside\x20extra\x20node\x20literals'},{'name':'recover_node_alt','type':'string','description':'Second\x20recover-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20a\x20single\x20recover\x20terminal','required':![],'default':'${recover_node}','constraint':'Cover\x20EVERY\x20merchant-side\x20terminal\x20the\x20refund/settle\x20rails\x20do\x20not\x20—\x20omitting\x20one\x20deadlocks\x20the\x20escrow\x20(OFN\x20#P-02).\x20A\x20third\x20ships\x20as\x20recover_node_alt2\x20(identifier\x205);\x20a\x20FOURTH\x20as\x20recover_node_alt3\x20(identifier\x207);\x20five-plus\x20nodes:\x20add\x20per-node\x20String\x20table\x20slots\x20(identifier\x208,\x209,\x20...)\x20and\x20extend\x20the\x20node-set\x20logic_or\x20by\x20COPY\x20of\x20the\x20shipped\x20four-child\x20form'},{'name':'recover_node_alt2','type':'string','description':'Third\x20recover-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${recover_node}'},{'name':'recover_node_alt3','type':'string','description':'Fourth\x20recover-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${recover_node}'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${recover_node}','name':'Primary\x20recover\x20node\x20name\x20(case-sensitive)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${recover_node_alt}','name':'Second\x20recover-eligible\x20node\x20(optional;\x20duplicates\x20the\x20primary\x20when\x20the\x20machine\x20has\x20one\x20recover\x20terminal)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${recover_node_alt2}','name':'Third\x20recover-eligible\x20node\x20(optional;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x7,'b_submission':![],'value_type':'String','value':'${recover_node_alt3}','name':'Fourth\x20recover-eligible\x20node\x20(optional;\x20duplicates\x20the\x20primary\x20when\x20unused)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x7}]}]},{'type':'logic_not','node':{'type':'query','query':'order.dispute.open','object':{'identifier':0x0},'parameters':[]}}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-08'],'creation_notes':['TWO\x20logic\x20legs\x20in\x20logic_and:\x20(1)\x20the\x20node-SET\x20gate\x20—\x20progress.current\x20in\x20{recover_node,\x20recover_node_alt,\x20recover_node_alt2,\x20recover_node_alt3}\x20as\x20ONE\x20four-child\x20logic_or\x20child\x20(KLM-FIND-02:\x20logic_or\x20needs\x202+\x20children;\x20with\x20the\x20alts\x20at\x20their\x20defaults\x20the\x20extra\x20legs\x20duplicate\x20the\x20primary\x20—\x20a\x20legal\x20tautology),\x20(2)\x20the\x20W5-14\x20DISPUTE\x20FREEZE\x20leg\x20logic_not[query(1576\x20order.dispute.open)]\x20at\x20the\x20slot-0\x20Order\x20anchor\x20—\x20the\x20sweep\x20cannot\x20move\x20the\x20principal\x20while\x20a\x20dispute\x20case\x20is\x20on\x20file\x20with\x20the\x20claim\x20slot\x20unspent\x20(live\x20AND\x20decided-unstamped).\x20TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20NO\x20claimed_by\x20leg\x20—\x20whether\x20the\x20merchant\x20keeps\x20the\x20principal\x20after\x20an\x20award\x20is\x20COMMERCIAL\x20(the\x20arbitrator\x20rules\x20on\x20the\x20order\x27s\x20current\x20state\x20and\x20fund\x20destinations),\x20never\x20a\x20guard\x20polarity;\x20a\x20recover/indemnity\x20combination\x20is\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate.\x20(Historical:\x20the\x20removed\x20claimed_by\x20some\x20==\x20true\x20leg\x20made\x20the\x20rail\x20direction-blind\x20—\x20a\x20BUYER-side\x20award\x20could\x20fire\x20the\x20MERCHANT\x20sweep\x20(ddmc4\x20D9/D10);\x20the\x20terminal-node\x20gate\x20replaces\x20the\x20polarity\x20as\x20the\x20state\x20condition.)','DISPUTE\x20FREEZE\x20LEG\x20(W5-14\x20/\x20h1w9\x20F-02;\x20ships\x20IN\x20example_root):\x201576\x27s\x20claimed_by\x20half\x20is\x20chain-side\x20query\x20semantics\x20(the\x20sanctioned\x20exception\x20to\x20decision\x2011\x20—\x20the\x20guard\x20mounts\x20only\x20the\x20Bool,\x20never\x20order.claimed_by\x20itself),\x20and\x20the\x20freeze\x20does\x20NOT\x20reintroduce\x20a\x20caller\x20leg\x20(F-52a\x20stands:\x20permissionless\x20keeper\x20firing\x20stays\x20the\x20model\x20—\x20the\x20freeze\x20conditions\x20on\x20DISPUTE\x20STATE,\x20not\x20on\x20caller\x20identity).\x20Keeper\x20precision\x20comes\x20from\x20query\x201578\x20(order.dispute.unstamped):\x20in-flight\x20=\x20wait,\x20resolved-awaiting-stamp\x20=\x20ONE\x20arb_case_conclude\x20tx\x20releases\x20the\x20rail\x20by\x20itself.\x20PROTOCOL\x20GATE\x20(v139):\x201576/1577/1578\x20are\x20flag-gated\x20(enable_order_dispute_state)\x20—\x20on\x20an\x20older\x20binary\x201576\x20reads\x20false\x20and\x20the\x20leg\x20admits\x20(the\x20freeze\x20silently\x20degrades\x20open);\x20check\x20upgrade_check\x20(DEPLOY-K1)\x20before\x20relying\x20on\x20it,\x20and\x20keep\x20the\x20keeper-conclude\x20duty\x20regardless.','NODE-SET\x20COVERAGE\x20DISCIPLINE\x20(decision\x2011,\x20mirrors\x20the\x20refund\x20twin):\x20the\x20builder\x20MUST\x20cover\x20every\x20machine\x20terminal\x20the\x20refund/settle\x20rails\x20do\x20not\x20—\x20an\x20uncovered\x20terminal\x20strands\x20the\x20principal\x20(OFN\x20#P-02;\x20stop-node\x20fund-exit\x20coverage\x20R-M5-03/R-M5-09).\x20MULTI-NODE\x20extension\x20identical\x20to\x20the\x20refund\x20twin:\x20one\x20equality\x20per\x20node,\x20each\x20with\x20its\x20OWN\x20String\x20table\x20slot\x20(identifiers\x201,\x204,\x205,\x207\x20ship;\x20manual\x20extension\x20starts\x20at\x208,\x209,\x20...);\x20NEVER\x20AND-prepend\x20a\x20single-node\x20gate\x20beside\x20extra\x20node\x20literals\x20(azx7-mn-261014\x20CR-azx7-01\x20dead-literal\x20lesson).','CALLER-BINDING\x20gap\x20(upw-mn-261014\x20F-52a;\x20MN5-7R-261102\x20A1):\x20this\x20rail\x20pays\x20a\x20FIXED\x20merchant\x20Entity,\x20so\x20nothing\x20else\x20binds\x20the\x20caller\x20—\x20any\x20account\x20that\x20knows\x20the\x20guard\x20address\x20can\x20sweep\x20the\x20escrow\x20principal\x20to\x20the\x20merchant.\x20The\x20refund\x20twin\x20is\x20implicitly\x20bound\x20(its\x20GuardIdentifier(0)\x20recipient\x20hard-binds\x20the\x20payee\x20to\x20the\x20order\x20owner);\x20this\x20one\x20is\x20not.\x20Kernel\x20builds\x20ship\x20this\x20template\x20under\x20the\x20template\x27s\x20identity_leg_exempt\x20declare:\x20the\x20legless\x20shape\x20is\x20the\x20sanctioned\x20keeper\x20model\x20(payee\x20bound\x20by\x20the\x20paired\x20allocator\x20row),\x20graded\x20as\x20a\x20permanent\x20non-blocking\x20disclosure\x20instead\x20of\x20the\x20RAIL_NO_CALLER_IDENTITY_BOUND\x20block.\x20A\x20HAND-built\x20variant\x20that\x20reuses\x20this\x20template\x20for\x20a\x20NON-merchant-recovery\x20face\x20carries\x20NO\x20such\x20declare\x20and\x20blocks\x20at\x20compile\x20—\x20bind\x20a\x20caller\x20leg\x20there\x20(order.owner\x20==\x20context(Signer)\x20is\x20wrong\x20here\x20—\x20the\x20MERCHANT\x20sweeps;\x20use\x20the\x20merchant\x20identity\x20or\x20a\x20Permission-staff\x20check),\x20or\x20supply\x20guard_resolutions\x20{kind:\x27declare\x27,\x20reason}\x20for\x20a\x20deliberate\x20keeper\x20face\x20of\x20your\x20own.','The\x20Guard\x20only\x20GATES\x20—\x20the\x20money\x20shape\x20lives\x20on\x20the\x20paired\x20Allocator\x20row:\x20Rate\x2010000\x20to\x20the\x20merchant/creator\x20ENTITY\x20(an\x20empty\x20Entity\x20never\x20reaches\x20the\x20deployer;\x20on\x20chain\x20a\x20zero-address\x20recipient\x20burns\x20the\x20share\x20permanently).\x20Pair\x20with\x20the\x20refund\x20rail\x20so\x20EVERY\x20terminal\x20has\x20a\x20fund\x20exit\x20(escrow-exit\x20invariant,\x20az-mn-261007).','ONCE-ARMED\x20(MN5-7R-261102\x20A2,\x20ks11):\x20the\x20compile\x20kernel\x20appends\x20the\x20slot-254\x20per-order\x20submission\x20row\x20to\x20every\x20kernel\x20build\x20of\x20this\x20rail\x20—\x20the\x20once\x20key\x20derives\x20on-chain\x20from\x20the\x20paying\x20order,\x20so\x20a\x20second\x20allocation\x20draw\x20on\x20the\x20SAME\x20order\x20aborts\x20on\x20the\x20consumed\x20once-key\x20instead\x20of\x20paying\x20the\x20merchant\x20twice.\x20A\x20MANUAL\x20fill\x20outside\x20the\x20compile\x20kernel\x20carries\x20NO\x20254\x20row:\x20copy\x20the\x20settle-once\x20twin\x27s\x20slot-254\x20row\x20when\x20the\x20sweep\x20can\x20leave\x20a\x20live\x20residual\x20balance\x20(a\x20full-drain\x20sweep\x20is\x20stopped\x20by\x20the\x20emptied-pool\x20abort\x20before\x20the\x20once\x20slot\x20is\x20even\x20read).\x20The\x20refund\x20twin\x20keeps\x20the\x20OPPOSITE\x20rule\x20—\x20NEVER\x20arm\x20254\x20on\x20a\x20refund\x20rail\x20(the\x20refund\x20may\x20fire\x20on\x20several\x20terminal\x20legs\x20and\x20a\x20per-order\x20once\x20anchor\x20deadlocks\x20the\x20second\x20leg);\x20renewal\x20loops\x20that\x20re-enter\x20a\x20refund\x20node\x20arm\x20identifier\x20255\x20with\x20a\x20\x27period-<N>\x27\x20equality\x20leg\x20(logic_equal[id255,\x20progress.history\x20count])\x20instead\x20—\x20byte-keyed,\x20fresh\x20per\x20period.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20the\x20recover\x20node\x20set\x20against\x20the\x20Machine\x20before\x20publishing.'],'example_use_case':'A\x20ruling\x20lands\x20while\x20the\x20order\x20rests\x20at\x20a\x20terminal\x20the\x20refund\x20rail\x20does\x20not\x20cover\x20(e.g.\x20\x27rejected\x27):\x20the\x20recovery\x20rail\x20fires\x20there\x20and\x20sweeps\x20the\x20remaining\x20principal\x20to\x20the\x20merchant\x20Entity,\x20so\x20every\x20contested\x20order\x20still\x20exits\x20with\x20a\x20zero\x20balance\x20—\x20and\x20the\x20arbitrator,\x20seeing\x20the\x20sweep\x20destination,\x20prices\x20the\x20indemnity\x20accordingly.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_settle_tier_small','scene_id':'service_order_allocators_guard','name':'Tiered\x20settlement\x20rail\x20—\x20SMALL-order\x20leg\x20(node\x20gate\x20+\x20order.amount\x20<=\x20tier\x20+\x20NOT\x20item-flag)','description':'SMALL\x20leg\x20of\x20a\x20tiered\x20settlement\x20fee:\x20fires\x20only\x20while\x20order.amount\x20<=\x20tier_amount\x20AND\x20the\x20order\x20does\x20NOT\x20hold\x20the\x20flag\x20item.\x20A\x20single\x20Amount\x20allocator\x20row\x20cannot\x20switch\x20per\x20order\x20—\x20but\x20guards\x20CAN\x20read\x20the\x20order\x20(ctra-mn-261019\x20F-04,\x20live-proven:\x20both\x20tiers\x20fired\x20with\x20per-unit\x20reconciliation\x20exact),\x20so\x20a\x20tiered\x20fee\x20ships\x20as\x20DISJOINT\x20self-selecting\x20rails,\x20each\x20its\x20own\x20guard_key\x20+\x20allocator:\x20this\x20small\x20rail,\x20its\x20tpl_allocator_node_gate_settle_tier_large\x20twin\x20(order.amount\x20>\x20tier),\x20and\x20optionally\x20a\x20flag\x20rail\x20(query\x201551\x20\x27order.item\x20has\x27\x20—\x20flagged\x20items\x20route\x20to\x20their\x20own\x20rail\x20regardless\x20of\x20size,\x20which\x20is\x20why\x20the\x20small\x20leg\x20carries\x20the\x20NOT-flag\x20leg).\x20MUTUAL\x20EXCLUSION\x20LIVES\x20INSIDE\x20THE\x20GUARDS:\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins\x20—\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20on\x20each\x20distribution\x20call)\x20—\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS.\x20Root\x20shape\x20matches\x20tpl_allocator_node_gate_settle_once\x20(node\x20gate\x20+\x20caller-authorization\x20+\x20the\x20chain-derived\x20254\x20once\x20slot;\x20the\x20claimed_by\x20polarity\x20leg\x20is\x20removed\x20—\x20decision\x2011\x20two-rail\x20independence);\x20the\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20ships\x20IN\x20the\x20root\x20-\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20never\x20strip\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27completed\x27)','required':!![],'default':'completed','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'tier_amount','type':'number','description':'Tier\x20upper\x20boundary\x20in\x20the\x20SAME\x20smallest-unit\x20space\x20as\x20order.amount\x20(convert\x20the\x20USD\x20fee_param\x20at\x20the\x20token\x27s\x20decimals)','required':!![],'constraint':'Must\x20be\x20>\x200;\x20boundary\x20membership\x20is\x20<=\x20(an\x20order\x20exactly\x20at\x20the\x20tier\x20settles\x20SMALL)'},{'name':'flag_item_name','type':'string','description':'Item\x20name\x20carrying\x20the\x20routing\x20flag\x20—\x20an\x20order\x20holding\x20this\x20item\x20(query\x201551\x20\x27order.item\x20has\x27)\x20routes\x20to\x20its\x20own\x20rail,\x20never\x20the\x20small\x20rail','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20flagged\x20sale\x20item\x27s\x20name\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${tier_amount}','name':'Tier\x20upper\x20bound\x20—\x20the\x20small\x20rail\x20fires\x20only\x20while\x20order.amount\x20<=\x20this\x20(same\x20smallest-unit\x20space\x20as\x20order.amount)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${flag_item_name}','name':'Flag\x20item\x20name:\x20an\x20order\x20holding\x20this\x20item\x20is\x20excluded\x20from\x20the\x20small\x20rail\x20(it\x20routes\x20to\x20the\x20flag\x20rail)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','name':'CHAIN-DERIVED\x20ONCE\x20slot\x20(protocol\x20254):\x20the\x20once\x20key\x20is\x20derived\x20on-chain\x20from\x20the\x20paying\x20order\x20(bcs(payment_info.for_object));\x20submitted\x20bytes\x20ignored\x20—\x20exactly-once\x20per\x20order\x20is\x20chain-enforced'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_not','node':{'type':'query','query':'order.item\x20has','object':{'identifier':0x0},'parameters':[{'type':'identifier','identifier':0x5}]}},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['TIER\x20EXPRESSION\x20(ctra-mn-261019\x20F-04):\x20a\x20single\x20Amount\x20row\x20cannot\x20switch\x20per\x20order,\x20but\x20the\x20guard\x20reads\x20the\x20order\x20and\x20selects\x20the\x20rail\x20—\x20tiers\x20ship\x20as\x20DISJOINT\x20self-selecting\x20settlement\x20rails\x20(small\x20=\x20order.amount\x20<=\x20tier\x20AND\x20NOT\x20flag;\x20large\x20=\x20order.amount\x20>\x20tier;\x20flag/digital\x20=\x20\x27order.item\x20has\x27\x20the\x20flag\x20item),\x20each\x20its\x20own\x20guard_key\x20+\x20allocator.\x20Both\x20tiers\x20fired\x20live\x20with\x20per-unit\x20reconciliation\x20exact.','DISJOINTNESS\x20IS\x20THE\x20BUILDER\x27S\x20DUTY,\x20INSIDE\x20THE\x20GUARDS:\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins\x20—\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20on\x20each\x20distribution\x20call)\x20—\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS.\x20A\x20flagged\x20LARGE\x20order\x20satisfies\x20both\x20the\x20large\x20tier\x20and\x20the\x20flag\x20rail\x20unless\x20the\x20flag\x20only\x20ever\x20marks\x20sub-tier\x20items\x20or\x20the\x20large\x20leg\x20ALSO\x20carries\x20the\x20NOT-flag\x20leg\x20—\x20make\x20the\x20three\x20roots\x20pairwise-exclusive\x20by\x20construction\x20and\x20test\x20the\x20boundary\x20(exactly\x20at\x20tier_amount\x20settles\x20SMALL,\x20<=;\x20the\x20twin\x20uses\x20strict\x20>).','The\x20guard\x20table\x20MUST\x20declare\x20{identifier:\x20254,\x20b_submission:\x20true,\x20value_type:\x20\x27Address\x27}\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport;\x20a\x20replayed\x20alloc\x20for\x20the\x20same\x20order\x20aborts\x2016\x20before\x20any\x20distribution.','Pair\x20EACH\x20tier\x27s\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20THAT\x20tier\x27s\x20guard_key,\x20so\x20the\x20submitted\x20ORDER\x20becomes\x20the\x20binding\x20target\x20and\x20a\x20sibling\x20order\x27s\x20passport\x20satisfies\x20nothing\x20(testnet\x20CR-01).\x20Keep\x20each\x20tier\x20allocator\x27s\x20Rate\x20legs\x20summing\x20to\x20exactly\x2010000\x20(no\x20Surplus\x20leg).','TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20NO\x20claimed_by\x20leg\x20in\x20a\x20tier\x20rail\x20—\x20the\x20settlement\x20track\x20reads\x20ORDER-LEVEL\x20NODE\x20STATE\x20(+\x20amount\x20tier)\x20only;\x20an\x20arbitration\x20award\x20is\x20a\x20separate\x20commercial\x20indemnity\x20ruled\x20on\x20the\x20order\x27s\x20current\x20state\x20and\x20fund\x20destinations,\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20and\x20the\x20tier\x20constant\x20against\x20the\x20Machine\x20and\x20the\x20token\x27s\x20decimals\x20BEFORE\x20publishing;\x20the\x20tier\x20lives\x20in\x20the\x20SAME\x20smallest-unit\x20space\x20as\x20order.amount.'],'example_use_case':'Tiered\x20contract\x20fee\x20(fixed-fee\x20marketplace\x20style):\x20an\x20order\x20of\x20400\x20(tier\x20500,\x20flag\x20\x27KIT\x27)\x20settles\x20via\x20THIS\x20small\x20rail\x20—\x20order.amount\x20<=\x20500\x20AND\x20the\x20order\x20holds\x20no\x20KIT\x20item\x20—\x20paying\x20the\x20$15\x20Amount\x20leg\x20then\x20the\x20net\x20Rate\x20split;\x20a\x20900\x20order\x20fails\x20the\x20lesser_or_equal\x20leg\x20and\x20settles\x20via\x20the\x20large\x20twin\x20instead.\x20Live-proven\x20ctra-mn-261019\x20F-04.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_settle_tier_large','scene_id':'service_order_allocators_guard','name':'Tiered\x20settlement\x20rail\x20—\x20LARGE-order\x20leg\x20(node\x20gate\x20+\x20order.amount\x20>\x20tier)','description':'LARGE\x20leg\x20of\x20a\x20tiered\x20settlement\x20fee:\x20fires\x20only\x20while\x20order.amount\x20>\x20tier_amount.\x20The\x20strict->\x20twin\x20of\x20tpl_allocator_node_gate_settle_tier_small\x20(which\x20carries\x20<=\x20tier\x20AND\x20the\x20NOT-item-flag\x20leg);\x20together\x20they\x20partition\x20the\x20order\x20space\x20at\x20the\x20tier\x20boundary\x20—\x20but\x20the\x20mutual\x20exclusion\x20is\x20carried\x20ENTIRELY\x20by\x20these\x20roots,\x20because\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins:\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20on\x20each\x20distribution\x20call),\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS\x20(ctra-mn-261019\x20F-04,\x20live-proven:\x20both\x20tiers\x20fired\x20with\x20per-unit\x20reconciliation\x20exact).\x20Root\x20shape\x20matches\x20tpl_allocator_node_gate_settle_once\x20(node\x20gate\x20+\x20caller-authorization\x20+\x20the\x20chain-derived\x20254\x20once\x20slot;\x20the\x20claimed_by\x20polarity\x20leg\x20is\x20removed\x20—\x20decision\x2011\x20two-rail\x20independence);\x20the\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20ships\x20IN\x20the\x20root\x20-\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check,\x20never\x20strip\x20it.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Machine\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27completed\x27)','required':!![],'default':'completed','constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'tier_amount','type':'number','description':'Tier\x20boundary\x20in\x20the\x20SAME\x20smallest-unit\x20space\x20as\x20order.amount\x20(convert\x20the\x20USD\x20fee_param\x20at\x20the\x20token\x27s\x20decimals)','required':!![],'constraint':'Must\x20be\x20>\x200;\x20the\x20large\x20rail\x20fires\x20only\x20STRICTLY\x20above\x20it\x20(the\x20small\x20twin\x20owns\x20the\x20==\x20boundary\x20via\x20<=)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Settlement\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${tier_amount}','name':'Tier\x20bound\x20—\x20the\x20large\x20rail\x20fires\x20only\x20while\x20order.amount\x20>\x20this'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','name':'CHAIN-DERIVED\x20ONCE\x20slot\x20(protocol\x20254):\x20the\x20once\x20key\x20is\x20derived\x20on-chain\x20from\x20the\x20paying\x20order\x20(bcs(payment_info.for_object));\x20submitted\x20bytes\x20ignored\x20—\x20exactly-once\x20per\x20order\x20is\x20chain-enforced'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_greater','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['ecommerce','rental','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-01'],'creation_notes':['STRICT->\x20TWIN:\x20this\x20rail\x20owns\x20the\x20order.amount\x20>\x20tier\x20space;\x20the\x20small\x20twin\x20(tpl_allocator_node_gate_settle_tier_small)\x20owns\x20<=\x20tier\x20minus\x20flagged\x20items.\x20The\x20boundary\x20is\x20disjoint\x20BY\x20ARITHMETIC\x20(an\x20order\x20is\x20never\x20both\x20>\x20and\x20<=)\x20—\x20but\x20when\x20a\x20flag/digital\x20rail\x20exists,\x20a\x20flagged\x20LARGE\x20order\x20satisfies\x20BOTH\x20this\x20root\x20and\x20the\x20flag\x20rail:\x20close\x20that\x20hole\x20by\x20keeping\x20the\x20flag\x20only\x20on\x20sub-tier\x20items\x20or\x20by\x20ANDing\x20this\x20root\x20with\x20the\x20same\x20NOT-flag\x20leg\x20(logic_not\x20over\x20query\x201551\x20\x27order.item\x20has\x27).','DISJOINTNESS\x20IS\x20THE\x20BUILDER\x27S\x20DUTY,\x20INSIDE\x20THE\x20GUARDS\x20(ctra-mn-261019\x20F-04):\x20the\x20allocator\x20vector\x20is\x20NOT\x20first-match-wins\x20—\x20a\x20distribution\x20call\x20submits\x20ONE\x20guard\x20and\x20EVERY\x20allocator\x20bound\x20to\x20it\x20fires,\x20in\x20vector\x20order,\x20against\x20the\x20shrinking\x20pool\x20(the\x20chain\x20runs\x20every\x20allocator\x20bound\x20to\x20that\x20guard\x20on\x20each\x20distribution\x20call)\x20—\x20so\x20an\x20unguarded\x20second\x20rail\x20DOUBLE-PAYS.\x20Never\x20\x27add\x20a\x20second\x20Amount\x20row\x20and\x20hope\x20the\x20chain\x20picks\x20one\x27.','The\x20guard\x20table\x20MUST\x20declare\x20{identifier:\x20254,\x20b_submission:\x20true,\x20value_type:\x20\x27Address\x27}\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport;\x20a\x20replayed\x20alloc\x20for\x20the\x20same\x20order\x20aborts\x2016\x20before\x20any\x20distribution.','Pair\x20THIS\x20tier\x27s\x20settlement\x20rows\x20with\x20a\x20Rate-0\x20{GuardIdentifier:\x200}\x20ORDER\x20anchor\x20row\x20(pattern.allocator_order_anchor)\x20sharing\x20the\x20LARGE\x20tier\x27s\x20guard_key\x20(each\x20tier\x20is\x20its\x20OWN\x20allocator;\x20the\x20small\x20twin\x27s\x20rows\x20share\x20the\x20small\x20key).\x20Keep\x20each\x20tier\x20allocator\x27s\x20Rate\x20legs\x20summing\x20to\x20exactly\x2010000\x20(no\x20Surplus\x20leg).','TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20NO\x20claimed_by\x20leg\x20in\x20a\x20tier\x20rail\x20—\x20the\x20settlement\x20track\x20reads\x20ORDER-LEVEL\x20NODE\x20STATE\x20(+\x20amount\x20tier)\x20only;\x20an\x20arbitration\x20award\x20is\x20a\x20separate\x20commercial\x20indemnity\x20ruled\x20on\x20the\x20order\x27s\x20current\x20state\x20and\x20fund\x20destinations,\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27,\x20user\x20ruling\x202026-10-28\x20②;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20on-chain\x20forward\x20entry\x20only\x20injects\x20the\x20order-holder\x20guard\x20on\x20forward\x20ops,\x20and\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node/service/once\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder\x20(settle_BY_OUTSIDER_v2\x20drained\x20o4;\x20rex-buy2\x20drained\x20a\x20third\x20party\x27s\x20escrow).\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation].\x20Never\x20strip\x20it:\x20the\x20once\x20slot\x20(254/255)\x20stops\x20replays,\x20NOT\x20strangers.','order_allocators\x20cannot\x20be\x20modified\x20after\x20Service\x20publish\x20(immutable)\x20—\x20verify\x20node\x20names\x20and\x20the\x20tier\x20constant\x20against\x20the\x20Machine\x20and\x20the\x20token\x27s\x20decimals\x20BEFORE\x20publishing.'],'example_use_case':'Tiered\x20contract\x20fee\x20(fixed-fee\x20marketplace\x20style):\x20an\x20order\x20of\x20900\x20(tier\x20500)\x20fails\x20the\x20small\x20rail\x27s\x20lesser_or_equal\x20leg\x20and\x20settles\x20via\x20THIS\x20large\x20rail\x20—\x20paying\x20the\x20$29\x20Amount\x20leg\x20then\x20the\x20net\x20Rate\x20split;\x20boundary\x20order\x20500\x20settles\x20SMALL\x20(<=).\x20Live-proven\x20ctra-mn-261019\x20F-04.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_node_check','scene_id':'machine_forward_guard','name':'Workflow\x20node\x20state\x20validation','description':'Verifies\x20that\x20the\x20order\x20is\x20currently\x20at\x20the\x20correct\x20Machine\x20node\x20before\x20advancing\x20to\x20the\x20next\x20step.\x20Prevents\x20skipping\x20nodes\x20or\x20reverse\x20operations.','recommended_patterns':['P06','P09'],'parameters':[{'name':'expected_node','type':'string','description':'Expected\x20current\x20node\x20name','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20name\x20defined\x20in\x20Machine\x20nodes\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Expected\x20current\x20node\x20name'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},'applicable_industries':['rental','ecommerce','education','travel','subscription'],'relevant_risks':['R-C2-01','R-C2-03','R-X1-08'],'creation_notes':['Forward.guard\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20Machine\x20publish)','witness\x20100\x20(Order→Progress)\x20is\x20a\x20single\x20hop;\x20no\x20risk\x20of\x20chained-derivation\x20breakage','Node\x20names\x20are\x20case-sensitive;\x20query\x20returns\x20a\x20String\x20type',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Camera\x20equipment\x20rental\x20flow:\x20the\x20user\x20must\x20be\x20at\x20the\x20\x27pending\x20return\x27\x20node\x20to\x20perform\x20the\x20return\x20operation.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_fund_gate','scene_id':'machine_forward_guard','name':'Escrow\x20fund\x20gate\x20(order-anchored\x20balance\x20check\x20on\x20a\x20forward)','description':'Gates\x20a\x20forward\x20on\x20the\x20order\x27s\x20COMMITTED\x20escrow\x20balance:\x20allocation.balance\x20(query\x201051)\x20derived\x20from\x20the\x20'+'submitted\x20Order\x20via\x20witness\x20TypeOrderAllocation(109)\x20must\x20be\x20>=\x20the\x20declared\x20threshold.\x20PRE-STATE\x20CONSTRAINT\x20'+'(esound-mn-261021\x20B-1,\x20mainnet-verified):\x20guard\x20predicates\x20read\x20the\x20pre-transaction\x20balance,\x20so\x20this\x20gate\x20is\x20'+'satisfiable\x20only\x20against\x20funds\x20committed\x20in\x20a\x20PRIOR\x20transaction\x20—\x20NEVER\x20bind\x20it\x20on\x20a\x20forward\x20that\x20the\x20one-PTB\x20'+'order_renew\x20advances\x20in\x20the\x20same\x20PTB\x20(the\x20same-PTB\x20payment\x20is\x20invisible\x20to\x20the\x20gate;\x20the\x20forward\x20always\x20aborts).\x20'+'Valid\x20homes:\x20the\x20second\x20hop\x20of\x20a\x20fund-then-advance\x20pair\x20(funding\x20TX\x20commits,\x20this\x20gate-bearing\x20TX\x20advances),\x20or\x20'+'prepaid\x20builds\x20where\x20the\x20price\x20was\x20escrowed\x20at\x20buy.','recommended_patterns':['P02','P06','P10'],'parameters':[{'name':'min_balance','type':'number','description':'Minimum\x20committed\x20escrow\x20balance\x20in\x20smallest\x20units','required':!![],'constraint':'Must\x20be\x20a\x20plain\x20integer\x20in\x20smallest\x20units\x20(no\x20decimals,\x20no\x20unit\x20suffix)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'U64','value':'${min_balance}','name':'Minimum\x20committed\x20escrow\x20balance\x20(smallest\x20units)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'allocation.balance','object':{'identifier':0x0,'convert_witness':'OrderAllocation'},'parameters':[]},{'type':'identifier','identifier':0x1}]},'applicable_industries':['subscription','rental','education','travel','ecommerce','freelance'],'relevant_risks':['R-X1-01','R-C2-03'],'creation_notes':['PRE-STATE\x20CONSTRAINT\x20(esound-mn-261021\x20B-1,\x20mainnet-verified):\x20the\x20balance\x20read\x20is\x20the\x20COMMITTED\x20pre-transaction\x20state.\x20NEVER\x20bind\x20this\x20gate\x20on\x20a\x20forward\x20advanced\x20by\x20the\x20same-PTB\x20order_renew\x20call\x20—\x20the\x20payment\x20half\x20of\x20that\x20call\x20is\x20invisible\x20to\x20the\x20gate\x20and\x20the\x20forward\x20ALWAYS\x20aborts.','witness\x20109\x20(Order→Allocation)\x20is\x20a\x20single\x20hop\x20via\x20order.allocation\x20(query\x201569);\x20it\x20resolves\x20at\x20verification\x20time,\x20so\x20the\x20guard\x20is\x20authored\x20on\x20the\x20Order\x20address\x20and\x20never\x20needs\x20the\x20Allocation\x20address.','Valid\x20pairings:\x20(a)\x20fund-then-advance\x20across\x20TWO\x20transactions\x20—\x20TX1\x20commits\x20funds\x20(allocation\x20top-up\x20primitive,\x20pending),\x20TX2\x20advances\x20this\x20gate-bearing\x20forward;\x20(b)\x20prepaid\x20builds\x20—\x20the\x20full\x20price\x20was\x20escrowed\x20at\x20buy,\x20so\x20any\x20later\x20gate\x20read\x20sees\x20it;\x20(c)\x20on\x20a\x20gate-LESS\x20renewal\x20loop,\x20order_renew\x20itself\x20carries\x20the\x20funding\x20(zero-value\x20protection\x20rides\x20the\x20routing,\x20not\x20this\x20gate).','The\x20balance\x20check\x20is\x20a\x20GATE,\x20not\x20a\x20debit\x20—\x20distribution\x20still\x20runs\x20through\x20the\x20allocators\x20(allocation.alloc)\x20bound\x20to\x20their\x20own\x20guards.','Forward.guard\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20Machine\x20publish);\x20verify\x20the\x20renewal\x20node\x20names\x20against\x20the\x20Machine\x20before\x20publishing.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Monthly\x20subscription\x20(two-TX\x20shape):\x20TX1\x20commits\x20the\x20new\x20period\x27s\x20funds\x20into\x20the\x20Allocation;\x20TX2\x20advances\x20\x27completed\x27\x20->\x20\x27working\x27\x20(period\x202)\x20through\x20this\x20gate\x20(committed\x20balance\x20>=\x20one\x20period\x20price).\x20Do\x20NOT\x20bind\x20this\x20gate\x20on\x20an\x20order_renew-advanced\x20edge\x20—\x20the\x20same-PTB\x20deposit\x20is\x20invisible\x20to\x20it\x20(esound-mn-261021\x20B-1).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_privacy_delivery_proof','scene_id':'machine_forward_guard','name':'Privacy-delivery\x20Proof\x20verification\x20(strict\x20mode,\x20Messenger\x20→\x20on-chain\x20Proof)','description':'Strict-mode\x20guard\x20for\x20\x27privacy\x20information\x20delivered\x20via\x20Messenger\x20but\x20not\x20suitable\x20for\x20on-chain\x20publication\x27\x20'+'(e.g.\x20shipping\x20details,\x20return\x20addresses,\x20private\x20credentials).\x20The\x20verifier\x20submits\x20BOTH\x20a\x20Proof\x20object\x20address\x20'+'(generated\x20by\x20messenger.submitChainProof)\x20AND\x20the\x20Order\x20object\x20address.\x20Two\x20conditions\x20verify:\x20'+'(1)\x20Signer\x20==\x20proof.signer\x20(submitter\x20accountability\x20—\x20\x27whoever\x20benefits\x20bears\x20the\x20burden\x20of\x20proof\x27),\x20'+'(2)\x20proof.time\x20>\x20order.time\x20(proof\x20created\x20after\x20the\x20order\x20—\x20freshness,\x20prevents\x20stale-proof\x20replay).\x20'+'No\x20content\x20verification\x20—\x20only\x20submission\x20responsibility.\x20The\x20counterparty\x20can\x20dispute\x20by\x20checking\x20their\x20own\x20'+'Messenger\x20conversation.\x20Broad-mode\x20alternative\x20(verify\x20Merkle\x20Root\x20string\x20length\x20==\x2066\x20via\x20P15)\x20is\x20documented\x20'+'in\x20creation_notes\x20—\x20broad\x20mode\x20trusts\x20the\x20submitter\x27s\x20honesty\x20and\x20is\x20suitable\x20when\x20the\x20Guard\x20is\x20mainly\x20an\x20'+'arbitration\x20basis\x20rather\x20than\x20a\x20fund-flow\x20gate.','recommended_patterns':['P10','P15'],'parameters':[],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_object\x20(protocol\x20slot\x200\x20—\x20the\x20SDK\x20slot\x20consensus\x20resolves\x20slot\x200\x20to\x20the\x20submitted\x20Order;\x20klook-mn-261019\x20KLM-FIND-01)','binding_constraint':'Service\x20scoping\x20is\x20chain-side\x20(protocol\x20v148\x20task\x20binding)'},{'identifier':0x5,'b_submission':!![],'value_type':'Address','object_type':'Proof','name':'proof_object\x20(Proof\x20address\x20generated\x20by\x20messenger.submitChainProof,\x20submitted\x20by\x20verifier\x20at\x20runtime)','binding_constraint':'Must\x20be\x20a\x20Proof\x20object\x20created\x20AFTER\x20the\x20order;\x20signer\x20must\x20equal\x20the\x20transaction\x20Signer.\x20SLOT\x20CONSENSUS\x20(klook-mn-261019\x20KLM-FIND-01,\x20live\x20mainnet):\x20a\x20non-Order\x20submission\x20must\x20occupy\x20its\x20OWN\x20free\x20slot\x20—\x20the\x20slot-254\x20row\x27s\x20Order\x20type\x20makes\x20the\x20SDK\x20resolve\x20slot\x200\x20as\x20the\x20Order,\x20so\x20mounting\x20proof.*\x20queries\x20on\x20slot\x200\x20fails\x20creation\x20with\x20\x27witness\x20object\x20type(Proof)\x20not\x20consistent\x20with\x20query\x20object\x20type(Order)\x27'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'query','query':'proof.signer','object':{'identifier':0x5},'parameters':[]}]},{'type':'logic_as_u256_greater','nodes':[{'type':'query','query':'proof.time','object':{'identifier':0x5},'parameters':[]},{'type':'query','query':'order.time','object':{'identifier':0x0},'parameters':[]}]}]},'applicable_industries':['ecommerce','logistics','service','privacy\x20delivery'],'relevant_risks':['R-C3-01','R-C3-05','R-X1-12'],'creation_notes':['STRICT\x20MODE\x20(this\x20template):\x20verifier\x20submits\x20Proof\x20+\x20Order\x20addresses.\x20Two\x20conditions:\x20Signer==proof.signer\x20(submitter\x20accountability),\x20proof.time>order.time\x20(freshness).\x20The\x20legacy\x20order.service\x20project-binding\x20leg\x20was\x20removed\x20(v148\x20chain-side\x20task\x20binding\x20—\x20bsw4\x20F-06).\x20No\x20content\x20verification\x20—\x20only\x20submission\x20responsibility\x20(\x27beneficiary\x20bears\x20burden\x20of\x20proof\x27\x20principle).','BROAD\x20MODE\x20ALTERNATIVE:\x20use\x20P15\x20retained_submission\x20with\x20a\x20String\x20submission\x20(the\x20Merkle\x20Root)\x20and\x20verify\x20calc_string_length\x20==\x2066\x20(0x\x20prefix\x20+\x2064\x20hex\x20chars).\x20Broad\x20mode\x20trusts\x20the\x20submitter\x27s\x20honesty;\x20the\x20counterparty\x20can\x20dispute\x20by\x20checking\x20their\x20own\x20Messenger\x20conversation.\x20Broad\x20mode\x20is\x20suitable\x20when\x20the\x20Guard\x20is\x20mainly\x20an\x20arbitration\x20basis,\x20not\x20a\x20fund-flow\x20gate.','Guard\x20table\x20supports\x20MULTIPLE\x20b_submission=true\x20Address\x20identifiers\x20(no\x20submission\x20count\x20limit)\x20—\x20this\x20template\x20uses\x20two:\x20Order\x20(protocol\x20slot\x200)\x20and\x20Proof\x20(slot\x205).\x20SLOT\x20CONSENSUS\x20(klook-mn-261019\x20KLM-FIND-01):\x20slot\x200\x20always\x20resolves\x20to\x20the\x20submitted\x20ORDER\x20(the\x20slot-254\x20task-binding\x20row\x27s\x20Order\x20type\x20anchors\x20the\x20SDK\x27s\x20type\x20resolution)\x20—\x20never\x20mount\x20a\x20non-Order\x20query\x20on\x20slot\x200;\x20give\x20every\x20non-Order\x20submission\x20its\x20own\x20free\x20slot.','submitChainProof(env,\x20peerAddress,\x20description?)\x20records\x20the\x20counterparty\x27s\x20address\x20as\x20the\x20proof\x27s\x20about\x20value.\x20PRIVACY:\x20about\x20records\x20ONLY\x20the\x20contact\x20—\x20it\x20has\x20no\x20on-chain-enforced\x20meaning\x20and\x20must\x20NEVER\x20be\x20a\x20guard\x20decision\x20condition;\x20NEVER\x20pass\x20an\x20order\x20id\x20or\x20any\x20order\x20reference\x20in\x20the\x20description\x20(a\x20description\x20like\x20\x27order:0x…\x27\x20would\x20publicly\x20link\x20the\x20Proof\x20to\x20the\x20Order\x20on\x20chain).\x20All\x20order/business\x20linkage\x20stays\x20inside\x20the\x20Messenger\x20conversation;\x20acceptance\x20of\x20delivered\x20info\x20is\x20the\x20merchant\x27s\x20confirming\x20forward,\x20not\x20the\x20recorded\x20about\x20value.','Query\x20IDs\x20(all\x20zero-parameter):\x20proof.signer=1958,\x20proof.time=1960\x20(invariant\x20clock_derived,\x20always\x20>0),\x20order.time=1574.','Forward.guard\x20is\x20immutable\x20after\x20Machine\x20publish\x20—\x20choose\x20broad\x20vs\x20strict\x20before\x20publishing.',PROTOCOL_SLOT_254_NOTE,'The\x20same\x20strict\x20Guard\x20can\x20be\x20reused\x20across\x20ALL\x20Machine\x20forwards\x20that\x20need\x20merkle-root\x20verification\x20(shipping,\x20lost,\x20returns,\x20etc.)\x20—\x20the\x20verifier\x20just\x20submits\x20the\x20relevant\x20Proof\x20+\x20Order\x20each\x20time.','Condition\x20(1)\x20Signer==proof.signer\x20suppresses\x20R-C3-01\x20(submission\x20not\x20bound\x20to\x20Signer).\x20Cross-project\x20submission\x20bypass\x20(R-C3-05)\x20is\x20closed\x20chain-side\x20since\x20v148\x20—\x20no\x20template\x20leg\x20needed\x20(bsw4\x20F-06).'],'example_use_case':'MyShop\x20e-commerce:\x20after\x20delivering\x20shipping\x20details\x20/\x20return\x20addresses\x20via\x20Messenger\x20(privacy\x20info\x20not\x20suitable\x20for\x20on-chain\x20publication),\x20'+'the\x20provider\x20generates\x20a\x20Proof\x20via\x20submitChainProof\x20and\x20submits\x20it\x20with\x20the\x20Order\x20address\x20to\x20advance\x20the\x20Machine\x20forward.\x20'+'The\x20Guard\x20verifies\x20the\x20submitter\x20is\x20the\x20Proof\x27s\x20signer,\x20the\x20Proof\x20was\x20created\x20after\x20the\x20order;\x20Service\x20scoping\x20is\x20chain-side\x20(protocol\x20v148).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_submission_signer_binding','scene_id':'progress_submission_guard','name':'Submission\x20data\x20signer\x20binding\x20validation','description':'Verifies\x20that\x20the\x20user\x20submitting\x20the\x20data\x20is\x20a\x20legitimate\x20Progress\x20participant\x20and\x20that\x20the\x20submitted\x20value\x20matches\x20expectations.','recommended_patterns':['P08','P15'],'parameters':[{'name':'expected_value','type':'string','description':'Expected\x20submitted\x20value\x20(e.g.\x20node\x20name,\x20status\x20code)','required':!![]},{'name':'provider_address','type':'address','description':'Service\x20provider\x20address\x20(used\x20for\x20identity\x20verification)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'String','name':'User-submitted\x20operation\x20type\x20(e.g.\x20\x27return\x27\x20/\x20\x27damage\x27)','binding_constraint':'Must\x20be\x20one\x20of\x20the\x20predefined\x20operation\x20types'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${provider_address}','name':'Service\x20provider\x20address'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${expected_value}','name':'Expected\x20submitted\x20value'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0x0},{'type':'identifier','identifier':0x2}]},{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x1}]}]},'applicable_industries':['rental','ecommerce','education','travel'],'relevant_risks':['R-C3-01','R-C3-03','R-X1-12'],'creation_notes':['submission\x20guard\x20cannot\x20be\x20modified\x20after\x20binding','The\x20name\x20of\x20b_submission=true\x20entries\x20must\x20be\x20a\x20complete\x20natural-language\x20description\x20(≥10\x20characters)','Providing\x20a\x20binding_constraint\x20field\x20describing\x20value\x20rules\x20is\x20recommended\x20(R-X1-12)'],'example_use_case':'On\x20equipment\x20return,\x20the\x20user\x20submits\x20the\x20\x27return\x27\x20operation;\x20the\x20Guard\x20verifies\x20that\x20the\x20submitter\x20is\x20the\x20service\x20provider\x20and\x20that\x20the\x20operation\x20type\x20is\x20correct.','verifier_constraint_level':'level1_strict'},{'id':'tpl_reward_one_time_claim','scene_id':'reward_claim','name':'One-time\x20reward\x20claim\x20validation','description':'Verifies\x20a\x20reward\x20claim\x20is\x20first-time-only:\x20order\x20state\x20gate\x20+\x20order-holder\x20identity\x20+\x20order-scoped\x20record\x20replay\x20gate\x20(SV-2,\x20azx7-mn-261014\x20live\x20T8\x20—\x20supersedes\x20the\x20ofn-mn-261012\x20recipient-only\x20retraction;\x20the\x20ofn\x20\x27storeFromId\x20filter\x20is\x20inert\x27\x20verdict\x20described\x20unstamped/legacy\x20rewards\x20only),\x20plus\x20an\x20OPTIONAL\x20order-keyed\x20rating-floor\x20eligibility\x20leg\x20(upwk-mn-261017\x20F-62)\x20that\x20pays\x20the\x20bounty\x20only\x20above\x20a\x20minimum\x20review\x20rating.','recommended_patterns':['P07','P13'],'parameters':[{'name':'reward_address','type':'address','description':'Reward\x20object\x20address\x20(the\x20pool\x20being\x20claimed\x20from)','required':!![]},{'name':'service_name','type':'address','description':'Host\x20Service\x20object\x20name\x20or\x20address\x20(P16\x20circular\x20ref\x20—\x20resolved\x20by\x20the\x20SDK\x20after\x20the\x20Service\x20exists).\x20KTT3-F15\x20STORE\x20BINDING:\x20a\x20reward\x20claim\x20has\x20no\x20chain-side\x20Service\x20context\x20(the\x20PTB\x20carries\x20only\x20the\x20Reward),\x20so\x20WITHOUT\x20this\x20leg\x20any\x20completed\x20order\x20from\x20ANY\x20store\x20satisfies\x20the\x20node/owner/amount\x20legs\x20and\x20drains\x20the\x20pool\x20cross-store.\x20The\x20kernel\x20seeds\x20the\x20plan\x27s\x20service\x20name\x20automatically;\x20hand-fills\x20MUST\x20pass\x20it','required':!![]},{'name':'expected_pre_claim_node','type':'string','description':'Machine\x20node\x20name\x20at\x20which\x20claiming\x20is\x20allowed\x20(e.g.\x20\x27reviewed\x27)','required':!![]},{'name':'expected_pre_claim_node_alt','type':'string','description':'Second\x20acceptable\x20node\x20in\x20the\x20claim-allowed\x20SET\x20—\x20default\x20\x27completed\x27\x20(az3-mn-261013\x20F-16:\x20a\x20single\x20reviewed-only\x20leg\x20deadlocks\x20the\x20claim\x20whenever\x20settlement\x20wins\x20the\x20race\x20first\x20—\x20order\x20already\x20completed\x20when\x20the\x20review\x20lands;\x20the\x20resolved\x20root\x20admits\x20EITHER\x20node)','required':![],'default':'completed'},{'name':'expected_pre_claim_node_alt2','type':'string','description':'Third\x20acceptable\x20node\x20in\x20the\x20claim-allowed\x20SET\x20—\x20the\x20template\x27s\x20optional\x20post-settlement\x20side\x20node\x20(e.g.\x20\x27wonder\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20none.\x20UPWC-K3\x20(upwc-cat-261017\x20CAT-D1):\x20without\x20it,\x20a\x20buyer\x20who\x20praises\x20AFTER\x20reviewing\x20moves\x20progress.current\x20off\x20the\x20claim\x20set\x20and\x20voids\x20their\x20own\x20bounty\x20—\x20the\x20incentive\x20self-defeats','required':![],'default':'reviewed'},{'name':'expected_pre_claim_node_alt3','type':'string','description':'Fourth\x20acceptable\x20node\x20in\x20the\x20claim-allowed\x20SET\x20(e.g.\x20\x27no_wonder\x27).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'reviewed'},{'name':'opens_after_days','type':'number','description':'Days\x20AFTER\x20the\x20claim-allowed\x20node\x27s\x20entry\x20before\x20the\x20bounty\x20OPENS\x20(bkm4\x20BF-17;\x200\x20=\x20claimable\x20as\x20soon\x20as\x20the\x20order\x20reaches\x20the\x20claim-allowed\x20set).\x20tbs7\x20F-04\x20floor:\x20for\x20stores\x20with\x20an\x20after-sales\x20window\x20the\x20kernel\x20default\x20derives\x20max(14,\x20return_window_days/review_window_days\x20+\x201)\x20—\x20a\x20bounty\x20claimable\x20while\x20the\x20buyer\x20can\x20still\x20return\x20is\x20a\x20claim-and-return\x20rebate\x20arbitrage','required':![],'default':'0'},{'name':'closes_after_days','type':'number','description':'Days\x20the\x20bounty\x20stays\x20CLAIMABLE\x20once\x20opened\x20—\x20counted\x20from\x20the\x20window\x20OPEN,\x20so\x20an\x20opens\x20delay\x20can\x20never\x20swallow\x20the\x20claimable\x20span.\x20bsw4\x20F-11:\x20a\x20claim\x20window\x20MUST\x20close\x20(\x2714\x20days\x20to\x20claim\x27\x20must\x20be\x20a\x20real\x20deadline\x20—\x20the\x20v76\x20archetype\x20opened\x20at\x20day\x2014\x20and\x20never\x20closed,\x20the\x20disclosed\x20window\x20was\x20fictional).\x20\x270\x27\x20=\x20never\x20closes\x20(open-ended;\x20discouraged\x20—\x20disclose\x20it\x20explicitly\x20at\x20quote\x20time)','required':![],'default':'14'},{'name':'rating_repository','type':'address','description':'Repository\x20holding\x20the\x20order-keyed\x20rating\x20rows\x20—\x20the\x20build\x20plan\x27s\x20\x27_review\x27\x20repository\x20(same\x20one\x20the\x20review\x20text\x20rows\x20live\x20in).\x20Empty/absent\x20=\x20ship\x20WITHOUT\x20the\x20rating\x20leg\x20(plain\x20praise\x20bounty,\x20no\x20rating\x20floor)','required':![],'default':''},{'name':'rating_policy_name','type':'string','description':'Policy\x20key\x20of\x20the\x20order-keyed\x20U64\x20rating\x20rows\x20—\x20MUST\x20equal\x20the\x20compile-emitted\x20rating\x20policy\x20name\x20(\x27rating\x27,\x20review\x20component)','required':![],'default':'rating'},{'name':'rating_floor','type':'number','description':'Minimum\x20rating\x20the\x20bounty\x20pays\x20above\x20(e.g.\x20\x274\x27).\x20\x270\x27\x20=\x20no\x20floor\x20—\x20omit\x20the\x20leg\x20same\x20as\x20an\x20empty\x20rating_repository','required':![],'default':'4','constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x274\x27'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${reward_address}','name':'Reward\x20object\x20(claim\x20pool)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${expected_pre_claim_node}','name':'Expected\x20pre-claim\x20node\x20name\x20(e.g.\x20\x27reviewed\x27)'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${expected_pre_claim_node_alt}','name':'Alternate\x20pre-claim\x20node\x20in\x20the\x20allowed\x20SET\x20(e.g.\x20\x27completed\x27)'},{'identifier':0x9,'b_submission':![],'value_type':'String','value':'${expected_pre_claim_node_alt2}','name':'Third\x20claim-allowed\x20node\x20(optional\x20post-settlement\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0xa,'b_submission':![],'value_type':'String','value':'${expected_pre_claim_node_alt3}','name':'Fourth\x20claim-allowed\x20node\x20(optional\x20post-settlement\x20side\x20node;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'1','name':'Minimum\x20PAID\x20order\x20amount\x20(1\x20smallest\x20unit\x20—\x20BKN-P2\x20positive-amount\x20leg)'},{'identifier':0x5,'b_submission':![],'value_type':'U64','value':'${opens_after_days}','name':'OPENS\x20delay\x20in\x20DAYS\x20(bounty\x20opens\x20after\x20this\x20many\x20days\x20elapse\x20from\x20the\x20claim-allowed\x20node\x20entry;\x200\x20=\x20opens\x20at\x20entry)'},{'identifier':0xc,'b_submission':![],'value_type':'U64','value':'${closes_after_days}','name':'CLOSES\x20span\x20in\x20DAYS\x20(claimable\x20for\x20this\x20many\x20days\x20once\x20opened,\x20counted\x20from\x20the\x20window\x20open;\x200\x20=\x20never\x20closes\x20—\x20the\x20row\x20AND\x20the\x20closing\x20leg\x20are\x20omitted)'},{'identifier':0xd,'b_submission':![],'value_type':'U64','value':'86400000','name':'Milliseconds\x20per\x20day\x20(opens/closes\x20day-to-ms\x20conversion\x20constant)'},{'identifier':0x6,'b_submission':![],'value_type':'Address','value':'${rating_repository}','name':'Rating\x20repository\x20(PLAN-BOUND\x20\x27_review\x27\x20repository\x20—\x20NEVER\x20a\x20buyer-submitted\x20row;\x20omit\x20slots\x206-8\x20AND\x20the\x20rating\x20leg\x20when\x20rating_repository\x20is\x20empty)'},{'identifier':0x7,'b_submission':![],'value_type':'String','value':'${rating_policy_name}','name':'Rating\x20policy\x20key\x20(must\x20equal\x20the\x20compile-emitted\x20\x27rating\x27\x20policy)'},{'identifier':0x8,'b_submission':![],'value_type':'U64','value':'${rating_floor}','name':'Rating\x20floor\x20—\x20the\x20bounty\x20pays\x20only\x20when\x20the\x20order-keyed\x20rating\x20row\x20is\x20>=\x20this'},{'identifier':0xe,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Host\x20Service\x20object\x20(KTT3-F15\x20store\x20binding\x20—\x20the\x20bounty\x20pays\x20only\x20for\x20THIS\x20store\x27s\x20orders;\x20a\x20reward\x20claim\x20has\x20no\x20chain-side\x20Service\x20context\x20so\x20this\x20leg\x20is\x20the\x20only\x20store\x20scoping)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x9}]},{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0xa}]}]},{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.service','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0xe}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_pre_claim_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x5},{'type':'identifier','identifier':0xd}]}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_pre_claim_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x5},{'type':'identifier','identifier':0xd}]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0xc},{'type':'identifier','identifier':0xd}]}]}]},{'type':'logic_not','node':{'type':'query_reward_record_exists','object':{'identifier':0x1},'where':{'storeFromId':{'identifier':0x0}}}},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'repository.data','object':{'identifier':0x6},'parameters':[{'type':'identifier','identifier':0x7},{'type':'identifier','identifier':0x0}]},{'type':'identifier','identifier':0x8}]}]},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01','R-X1-10'],'creation_notes':['POSITIVE-AMOUNT\x20LEG\x20(BKN-P2,\x20v55):\x20the\x20order.amount\x20>=\x201\x20leg\x20is\x20MANDATORY\x20—\x20a\x20zero-total\x20order\x20(e.g.\x20a\x20100%-off\x20coupon\x20buy)\x20holds\x20an\x20EMPTY\x20escrow\x20and\x20must\x20never\x20trigger\x20incentives\x20(zero-cost\x20buy\x20->\x20review\x20node\x20->\x20bounty\x20claim\x20is\x20the\x20arbitrage\x20the\x20leg\x20closes).\x20Never\x20issue\x20a\x20zeroing\x20coupon\x20at\x20all:\x20the\x20issuance\x20floor\x20blocks\x20it\x20unconditionally\x20(BSX-F07\x20—\x20allow_zero_total\x20waives\x20nothing),\x20so\x20a\x20deliberate\x20free\x20tier\x20is\x20priced\x20at\x201\x20smallest\x20unit\x20(which\x20this\x20leg\x20then\x20admits).\x20Never\x20drop\x20this\x20leg\x20when\x20specializing\x20the\x20root.','REPLAY\x20GATE\x20(SV-2,\x20azx7-mn-261014\x20live\x20T8):\x20this\x20template\x27s\x20root\x20scopes\x20the\x20claim-records\x20query\x20BY\x20THE\x20ORDER\x20—\x20where.storeFromId\x20references\x20slot\x200\x20(the\x20submitted\x20Order\x20address),\x20the\x20same\x20slot\x20the\x20guard_add\x20entry\x20stamps,\x20so\x20the\x20gate\x20reads\x20\x27this\x20recipient\x20has\x20never\x20claimed\x20for\x20THIS\x20order\x27\x20—\x20once\x20per\x20buyer\x20per\x20ORDER.\x20An\x20EMPTY\x20where\x20({})\x20is\x20the\x20deliberate\x20once-per-buyer-FOR-LIFE\x20variant\x20(recipient\x20defaults\x20to\x20the\x20Signer;\x20klk-mn-261014\x20live:\x20replay\x20aborts\x20at\x20the\x20passport\x20layer,\x20E_VERIFY_FAILED=7)\x20—\x20choose\x20it\x20ONLY\x20for\x20one-bounty-per-buyer\x20designs,\x20never\x20for\x20per-order\x20bounty\x20wording\x20(upw-mn-261014\x20F-48:\x20it\x20silently\x20kills\x20the\x20buyer\x27s\x20second\x20order).','NEVER\x20hand-write\x20the\x20raw\x20query\x20form\x20with\x20an\x20empty\x20VecU8\x20parameter\x20(klk-mn-261013\x20F-05,\x20mainnet-probed):\x20empty\x20query\x20bytes\x20reach\x20the\x20native\x20untranslated\x20and\x20abort\x20with\x20an\x20uncoded\x20MovePrimitiveRuntimeError\x20(\x27Query\x20bytes\x20is\x20empty\x27)\x20—\x20no\x20abort\x20code,\x20no\x20diagnosis.\x20The\x20deployed\x20guard\x20entry\x20(pre\x20A-5)\x20accepts\x20the\x20empty\x20constant\x20at\x20creation,\x20so\x20the\x20failure\x20surfaces\x20only\x20at\x20first\x20verification.\x20If\x20a\x20raw\x20form\x20is\x20ever\x20required,\x20the\x20parameter\x20MUST\x20carry\x20the\x20[value_type\x20marker\x20+\x20BCS\x20conditions]\x20header\x20bytes\x20—\x20which\x20is\x20exactly\x20what\x20the\x20structured\x20node\x20emits\x20for\x20you.','STAMP\x20+\x20FILTER\x20PAIR\x20(SV-2):\x20the\x20reward.guard_add\x20store_from_id\x20STAMP\x20and\x20the\x20where.storeFromId\x20QUERY\x20FILTER\x20are\x20DIFFERENT\x20fields\x20and\x20BOTH\x20are\x20required\x20for\x20the\x20per-order\x20scope\x20—\x20the\x20STAMP\x20makes\x20each\x20claim\x20record\x20key\x20on\x20the\x20submitted\x20Order\x20address;\x20the\x20FILTER\x20matches\x20records\x20by\x20that\x20same\x20value.\x20A\x20record-consuming\x20guard\x20(this\x20template)\x20MUST\x20be\x20added\x20with\x20store_from_id\x20=\x200\x20(the\x20submitted\x20Order/claimant\x20slot)\x20—\x20the\x20MCP\x20guard_add\x20stamp\x20gate\x20(UPW-K7)\x20REJECTS\x20the\x20unstamped\x20entry;\x20on-chain\x20the\x20unstamped\x20entry\x20is\x20accepted\x20but\x20writes\x20records\x20with\x20store_from\x20=\x20none,\x20which\x20matches\x20no\x20storeFromId\x20predicate\x20—\x20that\x20unstamped\x20shape\x20is\x20the\x20ONLY\x20context\x20where\x20the\x20ofn-mn-261012\x20F-01\x20\x27filter\x20is\x20inert\x27\x20verdict\x20ever\x20held\x20(azx7-mn-261014\x20live\x20T8\x20disproved\x20the\x20blanket\x20retraction).\x20Re-adding\x20the\x20SAME\x20guard\x20overwrites\x20its\x20slot\x20in\x20place,\x20so\x20live\x20pools\x20are\x20repairable.','POST-STATE\x20UPDATE\x20(MOV-PROTOCOL-1212):\x20in\x20the\x20HEAD\x20framework\x20source\x20guard\x20queries\x20observe\x20same-transaction\x20writes\x20(post-state),\x20so\x20write-then-verify\x20within\x20one\x20PTB\x20sees\x20its\x20own\x20write\x20—\x20DEPLOYMENT-GATED\x20(DEPLOY-K1):\x20not\x20yet\x20confirmed\x20on\x20the\x20deployed\x20binary;\x20verify\x20via\x20wowok_buildin_info\x20info=\x27upgrade_check\x27\x20(build_stamp.chain_stamp)\x20before\x20relying\x20on\x20it.\x20This\x20does\x20NOT\x20revive\x20\x27repository.data\x20count\x20==\x200\x27\x20as\x20a\x20first-claim\x20gate:\x20repository.data\x20is\x20an\x20upsert\x20key-value\x20store\x20—\x20a\x20repeat\x20write\x20overwrites\x20the\x20row\x20instead\x20of\x20growing\x20the\x20count.\x20Keep\x20the\x20exists_where\x20replay\x20gate.','IDENTITY\x20LEG\x20(mandatory\x20regardless\x20of\x20chain\x20patch\x20state):\x20claim()\x20pays\x20Recipient::Signer\x20(tx_context::sender)\x20with\x20no\x20order\x20binding\x20of\x20its\x20own\x20—\x20without\x20the\x20order.owner\x20identity\x20leg\x20any\x20address\x20holding\x20any\x20order\x20at\x20the\x20required\x20node\x20drains\x20the\x20pool\x20(audit-261012\x20B5).\x20The\x20MOV-PROTOCOL-1212\x20chain\x20patch\x20adds\x20recipient==signer\x20(E_CLAIM_RECIPIENT_NOT_SIGNER=14)\x20and\x20a\x20per-(recipient,\x20guard,\x20bcs(store_from))\x20once-slot\x20(E_CLAIM_ALREADY_MADE=13)\x20as\x20the\x20SECOND\x20line\x20—\x20a\x20replay\x20with\x20the\x20registered\x20guard\x20still\x20aborts\x20at\x20the\x20passport\x20layer\x20FIRST\x20(E_VERIFY_FAILED=7),\x20so\x20observing\x20abort\x207\x20says\x20nothing\x20about\x20the\x20patch\x27s\x20deployment;\x20check\x20freshness\x20via\x20wowok_buildin_info\x20upgrade_check\x20(build_stamp.chain_stamp,\x20DEPLOY-K1).','RECIPIENT\x20SEMANTICS\x20(crs-mn-261015\x20F-12,\x20live\x20mainnet):\x20the\x20reward.guard_add\x20ENTRY\x20recipient\x20MUST\x20be\x20{Signer:\x27signer\x27}\x20—\x20the\x20claim\x20entry\x20requires\x20recipient\x20==\x20tx_context::sender\x20(abort\x2014,\x20E_CLAIM_RECIPIENT_NOT_SIGNER),\x20and\x20a\x20{GuardIdentifier}\x20recipient\x20resolves\x20from\x20the\x20passport\x20submission\x20(conventionally\x20the\x20submitted\x20Order\x20address)\x20which\x20can\x20never\x20be\x20the\x20signer:\x20the\x20pool\x20behind\x20it\x20is\x20structurally\x20unpayable\x20(a\x20live\x20funded\x20pool\x20paid\x20abort\x2014\x20on\x20every\x20claim).\x20The\x20order-anchored\x20GuardIdentifier(0)\x20idiom\x20is\x20an\x20ALLOCATION\x20push\x20rail\x20(money\x20lands\x20ON\x20the\x20Order;\x20for_object\x20anchors\x20it)\x20—\x20NEVER\x20copy\x20it\x20onto\x20the\x20reward\x20pull\x20rail.\x20An\x20{Entity}\x20recipient\x20also\x20passes\x20(the\x20SDK\x20replaces\x20it\x20with\x20the\x20claimant\x27s\x20local\x20account\x20when\x20building\x20the\x20claim\x20PTB).\x20The\x20MCP\x20guard_add\x20recipient\x20gate\x20rejects\x20the\x20GuardIdentifier\x20form\x20(crs\x20F-12).','SETTLEMENT-DRAINED\x20LEG\x20—\x20DELIBERATE\x20OPTION\x20(crs-mn-261015\x20F-16):\x20a\x20bounty\x20meant\x20as\x20the\x20follow-on\x20to\x20a\x20COMPLETED\x20purchase\x20adds\x20logic_as_u256_lesser[query(\x27allocation.balance\x27,\x20object:{identifier:0,\x20convert_witness:\x27OrderAllocation\x27}),\x20query(\x27order.amount\x27,\x20object:{identifier:0})]\x20—\x20the\x20escrow\x20must\x20be\x20at\x20least\x20partially\x20drained\x20(query\x201051\x20+\x20witness\x20109,\x20live-proven)\x20before\x20the\x20bounty\x20pays,\x20closing\x20both\x20the\x20unknown-commit\x20window\x20(a\x20claim\x20racing\x20an\x20in-flight\x20settlement)\x20and\x20the\x20stalling-merchant\x20hole\x20(no\x20release,\x20no\x20incentive).\x20Do\x20NOT\x20add\x20it\x20for\x20a\x20review-nudge\x20bounty\x20claimed\x20immediately\x20at\x20the\x20review\x20node\x20—\x20that\x20is\x20the\x20adjudicated\x20review→claim→complete\x20ordering\x20(upwc-mn-261013\x20③)\x20where\x20the\x20claim\x20deliberately\x20PRECEDES\x20settlement;\x20the\x20two\x20designs\x20are\x20mutually\x20exclusive,\x20choose\x20per\x20business\x20intent\x20and\x20state\x20the\x20choice\x20in\x20the\x20quote\x27s\x20reward\x20terms.','CLAIM-WINDOW\x20TIME\x20LEGS\x20(bkm4\x20BF-17,\x20v76;\x20re-anchored\x20UPWC-K4/CAT-D1;\x20opens/closes\x20split\x20bsw4\x20F-11,\x202026-10-29):\x20the\x20bounty\x20OPENS\x20only\x20after\x20opens_after_days\x20elapse\x20from\x20the\x20claim-allowed\x20node\x27s\x20entry\x20—\x20Clock\x20>=\x20entry\x20+\x20opens,\x20OPENING\x20direction\x20(etm\x20A-06;\x20never\x20invert\x20it\x20into\x20a\x20closing\x20gate)\x20—\x20and\x20CLOSES\x20at\x20entry\x20+\x20opens\x20+\x20closes_after_days\x20(Clock\x20<=,\x20CLOSING\x20direction),\x20the\x20closes\x20span\x20counted\x20FROM\x20THE\x20WINDOW\x20OPEN\x20so\x20an\x20opens\x20floor\x20can\x20never\x20swallow\x20the\x20claimable\x20span.\x20The\x20time\x20source\x20is\x20query\x201280\x20progress.history.time\x20via\x20the\x20structured\x20node\x20query_progress_history_time\x20(OrderProgress\x20witness),\x20FILTERED\x20by\x20where:{nextNode:\x20\x22${expected_pre_claim_node}\x22}\x20and\x20read\x20with\x20find:\x27first\x27\x20—\x20the\x20anchor\x20is\x20the\x20FIRST\x20recorded\x20entry\x20into\x20the\x20primary\x20claim\x20node,\x20i.e.\x20the\x20original\x20review\x20event\x20(ktt3-tn-261028\x20F-16:\x20find:\x27last\x27\x20let\x20a\x20buyer\x20loop\x20completed->reviewed->completed\x20and\x20each\x20re-entry\x20wrote\x20a\x20NEW\x201280\x20record,\x20silently\x20RESTARTING\x20the\x20window;\x20find:\x27first\x27\x20is\x20immune\x20—\x20same\x20semantics\x20as\x20tpl_time_window_upper_history_days).\x20The\x20old\x20empty-where\x20form\x20(where:{}\x20+\x20find:\x27last\x27,\x20v76\x20original)\x20resolved\x20to\x20the\x20LATEST\x20entry\x20of\x20whatever\x20node\x20the\x20order\x20currently\x20sits\x20at,\x20so\x20every\x20later\x20advance\x20(settlement,\x20praise,\x20revision)\x20silently\x20RESTARTED\x20the\x20window\x20and\x20a\x20post-review\x20advance\x20voided\x20the\x20bounty\x20—\x20that\x20form\x20is\x20superseded\x20and\x20must\x20not\x20be\x20re-introduced\x20(upwc-cat-261017\x20CAT-D1\x20live:\x200ms-window\x20probe).\x20The\x20claim-allowed\x20node\x20SET\x20is\x20NOT\x20the\x20filter\x27s\x20job\x20anymore:\x20it\x20is\x20carried\x20by\x20the\x20OR\x20legs\x20over\x20expected_pre_claim_node/alt/alt2/alt3\x20(see\x20NODE-SET\x20CLAIM\x20STATE\x20above);\x20keep\x20the\x20filter\x20pinned\x20to\x20the\x20primary\x20review\x20node\x20and\x20never\x20widen\x20it\x20to\x20the\x20set.\x20The\x20anchor\x20record\x20is\x20written\x20once\x20per\x20entry\x20and\x20never\x20rewritten\x20in\x20place,\x20so\x20with\x20find:\x27first\x27\x20a\x20settlement-race\x20re-entry\x20cannot\x20shift\x20the\x20window\x20mid-flight\x20(1272\x20progress.current_time\x20drift\x20class,\x20ETS-C,\x20is\x20eliminated\x20by\x20construction).\x20REQUIRES\x20an\x20execution\x20layer\x20with\x20the\x201280\x20primitive\x20(progress.history.time,\x20node-entry\x20timestamps)\x20—\x20shipped\x20with\x20the\x20current\x20buildin;\x20verify\x20freshness\x20via\x20wowok_buildin_info\x20info=\x27upgrade_check\x27\x20before\x20relying\x20on\x20it\x20on\x20an\x20old\x20binary.\x20On\x20builds\x20that\x20lack\x201280,\x20fall\x20back\x20to\x20pattern.time_source_repository_oracle.\x20The\x20day\x20knobs\x20pair\x20with\x20the\x20archetype\x20reward_claim_closes_after_days\x20fee_param\x20(default\x2014)\x20—\x20keep\x20the\x20two\x20in\x20sync\x20when\x20specializing\x20a\x20pack.\x20closes_after_days\x20\x270\x27\x20omits\x20the\x20closing\x20leg\x20AND\x20its\x20table\x20row\x20(open-ended\x20bounty\x20—\x20deliberate,\x20disclose\x20at\x20quote).','CLAIM-AND-RETURN\x20ARBITRAGE\x20CURE\x20(tbs7\x20F-04,\x202026-10-29\x20—\x20O17\x20live:\x20claim\x200.05\x20bounty\x20at\x20reviewed,\x20then\x20return\x20the\x20goods\x20for\x20a\x20full\x202.0\x20refund;\x20the\x20bounty\x20stayed\x20in\x20the\x20buyer\x27s\x20wallet\x20and\x20clawback\x20was\x20DECLINED\x20as\x20a\x20primitive):\x20the\x20cure\x20is\x20the\x20AFTER-SALES-EXPIRY\x20floor\x20on\x20opens_after_days\x20—\x20the\x20opening\x20delay\x20MUST\x20exceed\x20the\x20store\x27s\x20after-sales\x20closing\x20bound\x20(return_window_days\x20/\x20review_window_days):\x20while\x20the\x20return\x20window\x20is\x20still\x20open\x20the\x20buyer\x20has\x20NOT\x20yet\x20earned\x20the\x20bounty,\x20and\x20a\x20return\x20filed\x20before\x20claim\x20time\x20moves\x20progress.current\x20off\x20the\x20claim-allowed\x20SET\x20(return_requested/returned\x20are\x20never\x20in\x20the\x20set),\x20failing\x20the\x20root.\x20The\x20kernel\x20default\x20derives\x20max(14d,\x20afterSales+1d);\x20a\x20merchant\x20pinning\x20a\x20SHORTER\x20reward_claim_opens_after_days\x20than\x20the\x20store\x27s\x20return\x20window\x20re-opens\x20the\x20arbitrage\x20—\x20warn\x20at\x20quote\x20time.\x20TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20the\x20former\x20UNDISPUTED-ORDER\x20claimed_by\x20==\x20false\x20leg\x20was\x20REMOVED\x20—\x20the\x20incentive\x20track\x20and\x20the\x20indemnity\x20track\x20are\x20independent\x20commercial\x20tracks,\x20and\x20a\x20bounty\x20paid\x20on\x20an\x20order\x20that\x20also\x20drew\x20an\x20award\x20is\x20a\x20disclosed\x20double-dip\x20outcome\x20at\x20the\x20MCP\x20confirmation\x20gate,\x20not\x20a\x20guard\x20polarity.\x20Do\x20NOT\x20add\x20a\x20settlement-drain\x20leg\x20together\x20with\x20a\x20long\x20window\x20for\x20review-nudge\x20designs\x20—\x20the\x20adjudicated\x20review→claim→complete\x20ordering\x20(upwc-mn-261013\x20③)\x20is\x20unaffected\x20by\x20this\x20leg.','For\x20per-order\x20once\x20semantics\x20the\x20ORDER-SCOPED\x20gate\x20above\x20IS\x20the\x20primary\x20form\x20(SV-2).\x20Route\x20the\x20incentive\x20through\x20an\x20Allocation\x20leg\x20gated\x20on\x20protocol\x20slot\x20254\x20(chain-derived\x20bcs(payment_info.for_object),\x20unforgeable)\x20only\x20when\x20you\x20want\x20the\x20per-order\x20once\x20enforced\x20by\x20the\x20chain\x20itself,\x20immune\x20to\x20guard-tree\x20mistakes.','ADJUDICATED\x20DESIGN\x20(upwc-mn-261013\x20③)\x20—\x20REVIEW-THEN-CLAIM-THEN-COMPLETE\x20ordering:\x20the\x20standard\x20flow\x20writes\x20the\x20repository\x20review\x20row\x20FIRST,\x20fires\x20the\x20reward\x20claim\x20SECOND,\x20and\x20only\x20then\x20advances\x20the\x20machine\x20to\x20completed.\x20A\x20test/report\x20line\x20reading\x20\x27review\x20written\x20before\x20complete\x27\x20describes\x20the\x20designed\x20order,\x20not\x20a\x20defect\x20(KL-C5\x20review-window\x20idiom\x20family).','NODE-SET\x20CLAIM\x20STATE\x20(az3-mn-261013\x20F-16\x20+\x20UPWC-K3/CAT-D1):\x20expected_pre_claim_node\x20is\x20a\x20SET,\x20not\x20a\x20single\x20value\x20—\x20always\x20pass\x20expected_pre_claim_node_alt\x20(\x27completed\x27)\x20so\x20a\x20claim\x20filed\x20AFTER\x20settlement\x20wins\x20the\x20race\x20does\x20not\x20abort\x20(7),\x20AND\x20the\x20template\x27s\x20optional\x20post-settlement\x20side\x20nodes\x20as\x20alt2/alt3\x20(e.g.\x20\x27wonder\x27/\x27no_wonder\x27)\x20so\x20a\x20buyer\x20who\x20praises\x20after\x20reviewing\x20does\x20not\x20void\x20their\x20own\x20bounty.\x20A\x20reviewed-only\x20leg\x20went\x20live\x20dead\x20on\x20mainnet\x20the\x20moment\x20settlement\x20fired\x20first\x20(v2\x20root\x20dead,\x20v3\x20OR\x20leg\x20live).','WINDOW\x20ANCHOR\x20(UPWC-K4/CAT-D1\x20+\x20ktt3-tn-261028\x20F-16):\x20the\x20time\x20leg\x20anchors\x20the\x20PRIMARY\x20claim\x20node\x27s\x20FIRST\x20recorded\x20ENTRY\x20(where.nextNode\x20+\x20find:\x27first\x27)\x20—\x20later\x20advances\x20(settlement,\x20praise,\x20revision)\x20and\x20buyer\x20loop\x20re-entries\x20(completed->reviewed->completed)\x20no\x20longer\x20restart\x20the\x20window.\x20Pass\x20the\x20review\x20node\x20as\x20expected_pre_claim_node,\x20never\x20a\x20post-settlement\x20node:\x20the\x20anchor\x20IS\x20the\x20original\x20review\x20event.','RATING-FLOOR\x20ELIGIBILITY\x20LEG\x20(upwk-mn-261017\x20F-62):\x20the\x20leg\x20reads\x20the\x20ORDER-KEYED\x20U64\x20rating\x20row\x20—\x20query\x201167\x20(repository.data)\x20over\x20the\x20PLAN-BOUND\x20repository\x20(slot\x206)\x20with\x20the\x20policy\x20key\x20(slot\x207)\x20and\x20THE\x20SUBMITTED\x20ORDER\x20(slot\x200)\x20as\x20the\x20row\x20id,\x20compared\x20against\x20the\x20floor\x20(slot\x208).\x20The\x20buyer\x20writes\x20the\x20row\x20at\x20review\x20time\x20(repository.data_add\x20id\x20=\x20order\x20address,\x20value\x20=\x20stars\x20U64)\x20and\x20the\x20template\x20compiler\x20emits\x20the\x20matching\x20\x27rating\x27\x20policy\x20for\x20exactly\x20this\x20pairing\x20—\x20keep\x20rating_policy_name\x20in\x20lockstep\x20with\x20it.\x20THE\x20REVIEW\x20TEXT\x20ROW\x20IS\x20DISPLAY-ONLY\x20and\x20NEVER\x20keys\x20this\x20leg\x20(ORDER-keyed\x20since\x20F09,\x20yfd-ln-261024,\x20same\x20as\x20the\x20rating\x20row\x20—\x20the\x20duty\x20split\x20is\x20payload,\x20not\x20the\x20key):\x20keying\x20on\x20it\x20reads\x20the\x20wrong\x20record\x20or\x20dead-locks\x20the\x20claim\x20fail-closed\x20(F-62\x20four-layer\x20break\x20—\x20adjudication\x20right,\x20data\x20row\x20missing,\x20template\x20leg\x20missing,\x20scanner\x20blind;\x20this\x20leg\x20closes\x20layer\x203).','RATING-LEG\x20OMISSION\x20SEMANTICS:\x20rating_repository\x20empty/absent\x20=\x20omit\x20slots\x206-8\x20AND\x20the\x20rating\x20leg\x20(plain\x20praise\x20bounty\x20with\x20no\x20rating\x20floor);\x20rating_floor\x20\x270\x27\x20=\x20same\x20(a\x20>=\x200\x20floor\x20gates\x20nothing).\x20Never\x20ship\x20the\x20leg\x20with\x20a\x20dangling\x20slot\x20—\x20a\x201167\x20read\x20against\x20a\x20missing\x20row\x20fails\x20closed\x20and\x20bricks\x20the\x20claim\x20(F-03\x20class).','RATING-LEG\x20QUOTE-GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20\x27rating\x27\x20policy\x20is\x20quote-guard-protected,\x20the\x20claim\x20passport\x20MUST\x20carry\x20that\x20quote_guard\x20in\x20its\x20impack\x20list\x20—\x20the\x201167\x20read\x20aborts\x20otherwise\x20(fail-closed).\x20The\x20compile-emitted\x20rating\x20policy\x20ships\x20UNPROTECTED\x20(payout-relevant\x20amounts\x20are\x20not\x20secrets)\x20—\x20keep\x20it\x20that\x20way\x20unless\x20the\x20business\x20demands\x20secrecy,\x20and\x20then\x20disclose\x20the\x20carry\x20in\x20the\x20quote\x27s\x20reward\x20terms.','Reward\x20guard\x20is\x20immutable\x20once\x20the\x20Reward\x20object\x20is\x20published\x20—\x20verify\x20this\x20guard\x20against\x20a\x20realistic\x20passport\x20BEFORE\x20publish\x20(F-03:\x20a\x20wrong\x20bound\x20guard\x20can\x20permanently\x20brick\x20the\x20claim\x20path).'],'example_use_case':'Review\x20bounty:\x20fan\x20finishes\x20review\x20(node\x20\x27reviewed\x27),\x20submits\x20the\x20Order,\x20claims\x20the\x20praise\x20bounty.\x20The\x20identity\x20leg\x20binds\x20the\x20claim\x20to\x20the\x20order\x20holder;\x20the\x20logic_not(exists_where)\x20leg\x20rejects\x20a\x20second\x20claim\x20from\x20the\x20same\x20address.\x20A\x20replay\x20attempt\x20aborts\x20and\x20the\x20pool\x20keeps\x20its\x20balance.\x20With\x20the\x20rating\x20leg\x20armed,\x20a\x203-star\x20review\x20on\x20a\x204-floor\x20bounty\x20claims\x20nothing.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_repository_review_threshold_gate','scene_id':'reward_claim','name':'Positive-review\x20threshold\x20gate','description':'Gates\x20a\x20benefit\x20(reward\x20claim,\x20privilege,\x20milestone)\x20on\x20review\x20quality\x20recorded\x20in\x20a\x20Repository:\x20count-form\x20requires\x20at\x20least\x20N\x20reviews\x20rated\x20>=\x20a\x20minimum\x20star\x20level;\x20sum-form\x20requires\x20the\x20review-score\x20sum\x20to\x20reach\x20a\x20threshold.\x20Uses\x20the\x20repository\x20composite\x20where-queries\x20(count\x20where\x20/\x20sum\x20where)\x20with\x20a\x20verifier-supplied\x20candidate\x20list.','recommended_patterns':['P07','P13'],'parameters':[{'name':'review_repository','type':'address','description':'Repository\x20object\x20holding\x20the\x20review\x20rows','required':!![]},{'name':'review_key','type':'string','description':'Policy\x20key\x20under\x20which\x20review\x20rows\x20are\x20stored\x20(e.g.\x20\x27review\x27)','required':!![]},{'name':'min_star','type':'number','description':'Minimum\x20star\x20rating\x20that\x20counts\x20as\x20a\x20positive\x20review','required':!![],'constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x274\x27.\x20Predicate\x20bounds\x20are\x20numeric\x20strings,\x20never\x20JSON\x20numbers'},{'name':'min_review_count','type':'number','description':'Minimum\x20number\x20of\x20positive\x20reviews\x20required\x20(count\x20form)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Repository','name':'Review\x20Repository\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${review_key}','name':'Review\x20policy\x20key'},{'identifier':0x2,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20review\x20row\x20ids\x20supplied\x20by\x20the\x20verifier\x20(max\x20100,\x20deduped)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${min_review_count}','name':'Minimum\x20positive\x20review\x20count'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query_repository_data_count_where','object':{'identifier':0x0},'key':{'identifier':0x1},'ids':{'identifier':0x2},'where':{'kind':'range','valueMin':'${min_star}'}},{'type':'identifier','identifier':0x3}]},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01'],'creation_notes':['TWO\x20FORMS\x20—\x20COUNT\x20(this\x20example_root):\x20query_repository_data_count_where\x20with\x20where\x20{kind:\x27range\x27,\x20valueMin:\x27${min_star}\x27}\x20returns\x20U64\x20=\x20number\x20of\x20candidate\x20rows\x20rated\x20>=\x20min_star;\x20compare\x20logic_as_u256_greater_or_equal\x20against\x20the\x20count\x20threshold.','TWO\x20FORMS\x20—\x20SUM\x20(swap\x20the\x20query\x20node):\x20query_repository_data_sum_where\x20returns\x20U256\x20=\x20the\x20sum\x20of\x20the\x20numeric\x20payloads\x20of\x20matching\x20rows;\x20compare\x20it\x20against\x20a\x20total-score\x20threshold\x20with\x20logic_as_u256_greater_or_equal.\x20Use\x20the\x20sum\x20form\x20when\x20review\x20weight\x20should\x20scale\x20with\x20rating\x20(5-star\x20counts\x20more\x20than\x204-star);\x20use\x20the\x20count\x20form\x20for\x20a\x20flat\x20\x27N\x20positive\x20reviews\x27\x20rule.','U256\x20NUMBER-STRING\x20SEMANTICS:\x20every\x20predicate\x20bound\x20and\x20threshold\x20is\x20a\x20PLAIN\x20NUMBER\x20STRING\x20(e.g.\x20\x274\x27,\x20\x2720\x27)\x20with\x20U256\x20semantics\x20—\x20on-chain\x20comparison\x20widens\x20all\x20numeric\x20types\x20to\x20U256.\x20Predicate\x20kind\x20must\x20match\x20the\x20policy\x20value\x20type;\x20mismatching\x20rows\x20are\x20skipped\x20honestly\x20(never\x20an\x20error).','CANDIDATE\x20IDS:\x20the\x20ids\x20row\x20is\x20verifier-supplied\x20evidence\x20(b_submission\x20VecAddress,\x20max\x20100,\x20deduped).\x20For\x20per-user\x20review\x20rows\x20the\x20natural\x20candidate\x20set\x20is\x20the\x20user\x27s\x20review\x20row\x20ids;\x20enumerate\x20them\x20via\x20a\x20repository\x20data\x20query\x20or\x20derive\x20them\x20from\x20order\x20records\x20—\x20never\x20trust\x20a\x20count\x20over\x20ids\x20the\x20verifier\x20can\x20pad\x20with\x20foreign\x20rows\x20unless\x20each\x20row\x20id\x20is\x20bound\x20to\x20the\x20user.','QUOTE_GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20scanned\x20policy\x20key\x20is\x20protected\x20by\x20a\x20quote_guard,\x20the\x20passport\x20verifying\x20this\x20gate\x20MUST\x20carry\x20that\x20quote_guard\x20in\x20its\x20impack\x20list\x20—\x20the\x20fetch\x20(1167),\x20count/sum/find\x20(1173/1174/1176)\x20AND\x20the\x20keys-where\x20scan\x20(1177)\x20all\x20abort\x20otherwise.\x20A\x20gate\x20that\x20reads\x20protected\x20review\x20data\x20without\x20carrying\x20the\x20quote_guard\x20fails\x20closed.','Identity\x20anchor:\x20combine\x20with\x20an\x20order-owner\x20or\x20Signer\x20leg\x20(see\x20tpl_reward_one_time_claim)\x20so\x20the\x20benefit\x20goes\x20to\x20the\x20reviewer,\x20not\x20whoever\x20assembles\x20the\x20passport.'],'example_use_case':'Loyalty\x20perk:\x20a\x20fan\x20who\x20has\x20posted\x20at\x20least\x203\x20reviews\x20rated\x204\x20stars\x20or\x20higher\x20can\x20claim\x20a\x20bonus.\x20The\x20verifier\x20submits\x20the\x20fan\x27s\x20review\x20row\x20ids;\x20the\x20count-form\x20root\x20only\x20passes\x20when\x20at\x20least\x203\x20rows\x20carry\x20a\x20rating\x20>=\x204.\x20Swap\x20to\x20the\x20sum\x20form\x20to\x20require\x20the\x20fan\x27s\x20total\x20review\x20score\x20to\x20reach\x2015.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_crowdfunding_threshold_gate','scene_id':'machine_forward_guard','name':'Crowdfunding\x20threshold\x20settlement\x20gate\x20(release\x20/\x20refund\x20polarity)','description':'Gates\x20a\x20campaign\x20settlement\x20forward\x20on\x20the\x20ESCROW-BOUND\x20on-chain\x20raise:\x20logic_and[\x20sum-where-bound(1179)\x20over\x20'+'the\x20campaign\x27s\x20ORDER-KEYED\x20contribution\x20rows\x20>=\x20funding_threshold,\x20allocation.balance\x20>=\x20order.amount\x20on\x20the\x20'+'task-bound\x20order\x20(live-escrow\x20leg,\x20witness\x20OrderAllocation),\x20Clock\x20>=\x20campaign_deadline,\x20PLUS\x20the\x20roster-\x20'+'membership\x20pin\x20(vec_contains_address[candidate\x20ids,\x20task-bound\x20order]\x20—\x20the\x20advancing\x20order\x27s\x20OWN\x20row\x20id\x20'+'MUST\x20be\x20in\x20the\x20keeper-submitted\x20roster,\x20W5-04)\x20].\x20TWO-RAIL\x20'+'INDEPENDENCE\x20(decision\x2011):\x20NO\x20claimed_by\x20leg\x20—\x20the\x20funding\x20gate\x20reads\x20ORDER-LEVEL\x20state\x20only;\x20an\x20arbitration\x20'+'award\x20on\x20a\x20pledger\x27s\x20order\x20is\x20a\x20separate\x20commercial\x20indemnity,\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate.\x20'+'RELEASE\x20polarity\x20(this\x20example_root,\x20greater_or_equal)\x20fires\x20'+'the\x20release\x20leg\x20when\x20the\x20goal\x20is\x20met;\x20REFUND\x20polarity\x20(swap\x20the\x20FIRST\x20leaf\x20to\x20logic_as_u256_lesser)\x20fires\x20the\x20'+'per-contributor\x20refund\x20leg\x20when\x20the\x20goal\x20is\x20missed.\x20The\x20deadline\x20is\x20an\x20ABSOLUTE\x20campaign\x20timestamp\x20(shared\x20by\x20'+'every\x20funder),\x20NOT\x20a\x20per-order\x20entry+duration\x20lock.\x20Executable\x20form\x20of\x20the\x20crowdfunding_mode\x20threshold\x20gate;\x20'+'the\x20aggregate\x20is\x20a\x20read-only\x20bound\x20sum\x20over\x20keeper-supplied\x20candidate\x20ORDER\x20ids\x20(max\x20100;\x20the\x20per-row\x20'+'live-escrow\x20clamp\x20zeroes\x20withdrawn\x20contributions\x20on\x20chain)\x20—\x20roster\x20completeness\x20is\x20attested,\x20never\x20a\x20'+'chain-verified\x20total-custody\x20proof.','recommended_patterns':['P06','P07'],'parameters':[{'name':'campaign_repository','type':'address','description':'Repository\x20object\x20holding\x20the\x20campaign\x27s\x20contribution\x20rows.\x20Default\x20\x27${repository_name}\x27\x20=\x20the\x20plan\x27s\x20kernel-created\x20evidence\x20Repository\x20(compile\x20seeds\x20repository_name\x20like\x20service_name\x20—\x20late-bound\x20by\x20object\x20NAME\x20at\x20execution).\x20Pass\x20an\x20explicit\x20repository\x20name/address\x20to\x20read\x20a\x20different\x20ledger.','required':!![],'default':'${repository_name}'},{'name':'contribution_key','type':'string','description':'Policy\x20key\x20under\x20which\x20contribution\x20rows\x20are\x20stored\x20(default\x20\x27contribution\x27\x20—\x20the\x20canonical\x20crowdfunding\x20write-policy\x20name\x20declared\x20by\x20the\x20template\x27s\x20repository\x20write\x20guard)','required':!![],'default':'contribution'},{'name':'funding_threshold','type':'number','description':'Aggregate\x20funding\x20goal\x20the\x20sum-where\x20total\x20is\x20compared\x20against\x20(U256\x20semantics,\x20plain\x20number\x20string)','required':!![],'constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x271000\x27.\x20Predicate\x20bounds\x20and\x20thresholds\x20are\x20numeric\x20strings,\x20never\x20JSON\x20numbers'},{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20campaign\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20settlement\x20is\x20blocked\x20until\x20Clock\x20>=\x20it','required':!![],'constraint':'Shared\x20by\x20every\x20funder\x27s\x20order\x20—\x20one\x20campaign,\x20one\x20deadline.\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20a\x20repository\x20time-oracle\x20(pattern.time_source_repository_oracle)\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20date'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Repository','name':'Campaign\x20Repository\x20(submitted\x20by\x20the\x20keeper\x20at\x20settlement)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${contribution_key}','name':'Contribution\x20policy\x20key'},{'identifier':0x2,'b_submission':!![],'value_type':'VecAddress','name':'Contributor\x20ORDER\x20addresses\x20(row\x20id\x20=\x20funder\x27s\x20order)\x20enumerated\x20by\x20the\x20keeper\x20(find-where\x201176\x20/\x20keys-where\x201177;\x20max\x20100,\x20deduped).\x20Pre-filtering\x20to\x20LIVE\x20allocations\x20(balance\x20>\x200)\x20is\x20attestation\x20hygiene,\x20not\x20correctness\x20—\x20the\x20per-row\x20live-escrow\x20clamp\x20(v140)\x20already\x20makes\x20a\x20drained\x20order\x20contribute\x200.\x20The\x20campaign\x20roster\x20is\x20ATTESTED\x20by\x20this\x20set,\x20not\x20chain-derived.\x20The\x20advancing\x20order\x27s\x20OWN\x20row\x20id\x20MUST\x20be\x20in\x20this\x20set\x20(the\x20root\x27s\x20membership\x20pin\x20requires\x20it\x20—\x20W5-04)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${funding_threshold}','name':'Aggregate\x20funding\x20goal\x20(U256\x20comparison)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20campaign\x20deadline\x20(epoch\x20ms);\x20Clock\x20>=\x20it\x20opens\x20settlement'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query_repository_data_sum_where_bound','object':{'identifier':0x0},'key':{'identifier':0x1},'ids':{'identifier':0x2},'where':{'kind':'range','valueMin':'1'}},{'type':'identifier','identifier':0x3}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'allocation.balance','object':{'identifier':0xfe,'convert_witness':'OrderAllocation'},'parameters':[]},{'type':'query','query':'order.amount','object':{'identifier':0xfe},'parameters':[]}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x4}]},{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0xfe}]}]},'applicable_industries':['crowdfunding','retail','subscription'],'relevant_risks':['R-X1-17','R-C1-03'],'creation_notes':['TWO\x20POLARITIES,\x20ONE\x20AGGREGATE:\x20RELEASE\x20(this\x20example_root)\x20uses\x20logic_as_u256_greater_or_equal[sum_where_bound,\x20threshold];\x20REFUND\x20swaps\x20that\x20FIRST\x20leaf\x20to\x20logic_as_u256_lesser[sum_where_bound,\x20threshold].\x20Both\x20AND\x20the\x20SAME\x20live-escrow,\x20deadline\x20and\x20W5-04\x20membership-pin\x20leaves,\x20so\x20they\x20are\x20mutually\x20exclusive\x20—\x20exactly\x20one\x20is\x20satisfiable\x20once\x20Clock\x20>=\x20deadline\x20(the\x20escrow-exit\x20polarity\x20specialized\x20to\x20a\x20funding\x20gate).\x20Mount\x20the\x20release\x20polarity\x20on\x20the\x20→funded_released\x20forward\x20and\x20the\x20refund\x20polarity\x20on\x20the\x20→missed_refunded\x20forward.','LEGACY\x20SUM-FORM\x20(query\x201174,\x20do\x20NOT\x20ship):\x20query_repository_data_sum_where\x20sums\x20the\x20self-reported\x20row\x20payloads\x20—\x20a\x20row\x20can\x20claim\x20any\x20value,\x20which\x20made\x20the\x20gate\x20forgeable\x20(F-01).\x20Kept\x20only\x20to\x20teach\x20the\x20migration:\x20swap\x201174\x20→\x201179\x20TOGETHER\x20with\x20the\x20order-keyed\x20write\x20policy\x20(id_from\x20removed,\x20row\x20id\x20=\x20funder\x27s\x20order\x20address).\x20Half-migrating\x20bricks\x20the\x20gate\x20SILENTLY:\x20the\x20bound\x20query\x20reads\x200\x20for\x20signer-keyed\x20rows,\x20so\x20every\x20contribution\x20contributes\x200\x20and\x20the\x20threshold\x20can\x20never\x20be\x20met\x20—\x20with\x20NO\x20error\x20anywhere.\x20Predicate\x20bounds\x20and\x20the\x20threshold\x20remain\x20PLAIN\x20NUMBER\x20STRINGS\x20with\x20U256\x20semantics.','ESCROW-BOUND\x20FORM\x20(query\x201179,\x20LIVE\x20default\x20—\x20this\x20example_root):\x20query_repository_data_sum_where_bound\x20returns\x20per-row\x20min(row_value,\x20order.amount,\x20LIVE\x20allocation.balance\x20of\x20the\x20Order\x20the\x20row\x20id\x20names)\x20summed\x20as\x20U256\x20(checked_add,\x20overflow-safe;\x20v140\x20live\x20cap).\x20A\x20row\x20cannot\x20claim\x20more\x20than\x20its\x20Order\x20actually\x20escrowed\x20(F-01\x20closed),\x20AND\x20only\x20funds\x20still\x20in\x20escrow\x20right\x20now\x20count\x20—\x20a\x20refunded\x20or\x20already-disbursed\x20order\x20contributes\x200\x20naturally\x20(F-05\x20closed\x20on\x20chain);\x20a\x20missing\x20allocation\x20link\x20also\x20contributes\x200,\x20while\x20an\x20unreadable\x20allocation\x20object\x20aborts\x20the\x20query.\x20It\x20reads\x200\x20for\x20any\x20row\x20id\x20that\x20is\x20NOT\x20an\x20Order\x20(fail-closed)\x20—\x20which\x20is\x20why\x20the\x20write\x20side\x20MUST\x20key\x20rows\x20by\x20the\x20funder\x27s\x20ORDER:\x20id_from\x20removed\x20from\x20the\x20write\x20policy,\x20row\x20id\x20=\x20order\x20address,\x20candidate\x20ids\x20=\x20contributor\x20ORDER\x20addresses.\x20The\x20where\x20{kind:\x27range\x27,\x20valueMin:\x271\x27}\x20predicate\x20skips\x20zeroed\x20(withdrawn-cleared)\x20rows.','🔴\x20CANDIDATE\x20IDS\x20ARE\x20KEEPER-ATTESTED\x20(the\x20honest\x20boundary,\x20L-04);\x20pre-filtering\x20is\x20HYGIENE,\x20not\x20correctness\x20(F-05\x20closed\x20on\x20chain\x20by\x20the\x20v140\x20live\x20cap):\x20the\x20ids\x20row\x20(identifier\x202)\x20is\x20verifier-supplied\x20(b_submission\x20VecAddress,\x20max\x20100,\x20deduped).\x20Enumerate\x20via\x20find-where\x20(1176)\x20/\x20keys-where\x20(1177).\x20The\x20per-row\x20live\x20clamp\x20makes\x20a\x20withdrawn-but-undeleted\x20row\x20contribute\x200\x20to\x20the\x20bound\x20sum\x20automatically\x20(min\x20includes\x20the\x20LIVE\x20allocation.balance),\x20so\x20dropping\x20zero-balance\x20candidates\x20BEFORE\x20feeding\x201179\x20no\x20longer\x20flips\x20any\x20polarity\x20—\x20it\x20just\x20keeps\x20the\x20attested\x20roster\x20clean\x20and\x20the\x20gas\x20bill\x20down.\x20The\x20live-escrow\x20leg\x20still\x20guarantees\x20no\x20order\x20is\x20paid\x20from\x20a\x20drained\x20escrow.\x20A\x20campaign\x20with\x20>100\x20contributors\x20needs\x20the\x20roster\x20split\x20across\x20settlements.\x20Never\x20present\x20the\x20total\x20as\x20a\x20chain-verified\x20custody\x20proof.\x20W5-04\x20MEMBERSHIP\x20PIN\x20(2026-11-01):\x20the\x20root\x20ANDs\x20vec_contains_address[identifier\x202,\x20identifier\x20254]\x20—\x20the\x20advancing\x20order\x27s\x20OWN\x20row\x20id\x20must\x20sit\x20in\x20the\x20submitted\x20roster,\x20so\x20the\x20gate\x20always\x20reads\x20an\x20aggregate\x20the\x20settling\x20order\x27s\x20own\x20clamped\x20contribution\x20is\x20part\x20of;\x20roster\x20omission\x20can\x20only\x20DELAY\x20an\x20order\x27s\x20settlement\x20(its\x20gate\x20fails),\x20never\x20misprice\x20it.','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17,\x20existence-is-not-trust):\x20the\x20contribution\x20rows\x20MUST\x20be\x20written\x20under\x20pattern.repository_write_authorization\x20with\x20an\x20identity\x20leaf\x20(order.owner\x20==\x20Signer\x20/\x20order.agent\x20has\x20Signer)\x20and\x20NO\x20id_from\x20(order-keyed:\x20row\x20id\x20=\x20the\x20funder\x27s\x20order\x20address)\x20so\x20a\x20funder\x20can\x20only\x20record\x20a\x20contribution\x20bound\x20to\x20their\x20OWN\x20escrowed\x20order\x20—\x20an\x20unbound\x20write_guard\x20makes\x20the\x20aggregate\x20forgeable\x20and\x20the\x20threshold\x20meaningless.','ABSOLUTE\x20DEADLINE,\x20NOT\x20PER-ORDER:\x20identifier\x204\x20is\x20a\x20single\x20campaign-wide\x20epoch-ms\x20timestamp\x20(pattern.time_lock_absolute\x20shape).\x20Do\x20NOT\x20anchor\x20on\x20progress.history.time\x20(1280)\x20entry+duration\x20here\x20—\x20that\x20would\x20give\x20each\x20funder\x20a\x20different\x20deadline\x20measured\x20from\x20when\x20they\x20pledged.\x20For\x20a\x20real-world\x20calendar\x20deadline\x20bind\x20pattern.time_source_repository_oracle\x20and\x20document\x20the\x20time\x20source.','QUOTE_GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20contribution\x20policy\x20key\x20is\x20protected\x20by\x20a\x20quote_guard,\x20the\x20passport\x20verifying\x20this\x20gate\x20MUST\x20carry\x20it\x20in\x20its\x20impack\x20list\x20—\x20the\x20bound\x20sum\x20(1179)\x20and\x20the\x20keys-where\x20scan\x20(1177)\x20abort\x20otherwise.\x20Leave\x20the\x20contribution\x20policy\x20unprotected\x20(the\x20raise\x20total\x20is\x20public,\x20not\x20a\x20secret)\x20so\x20settlement\x20stays\x20simple.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'All-or-nothing\x20campaign:\x20200\x20backers\x20each\x20escrow\x20a\x20contribution\x20in\x20their\x20OWN\x20unpooled\x20Allocation\x20and\x20record\x20an\x20'+'order-keyed\x20row\x20(row\x20id\x20=\x20their\x20order\x20address)\x20in\x20the\x20campaign\x20Repository;\x20a\x20withdrawal\x20clears\x20the\x20row\x20to\x200\x20in\x20'+'the\x20same\x20PTB\x20as\x20the\x20refund.\x20At\x20the\x20deadline\x20a\x20keeper\x20enumerates\x20the\x20contributor\x20ORDER\x20addresses,\x20drops\x20'+'zero-balance\x20ones\x20(withdrawn/refunded),\x20and\x20advances\x20each\x20order:\x20the\x20release-polarity\x20gate\x20(bound\x20sum\x20>=\x20goal,\x20'+'allocation\x20still\x20live)\x20fires\x20→funded_released\x20for\x20every\x20backer\x20when\x20the\x20goal\x20is\x20met;\x20'+'the\x20refund-polarity\x20gate\x20(bound\x20sum\x20<\x20goal)\x20fires\x20→missed_refunded,\x20returning\x20each\x20contribution\x20to\x20its\x20own\x20'+'backer\x20(order-anchored\x20user\x20slot\x200,\x20the\x20submitted\x20Order)\x20when\x20the\x20goal\x20is\x20missed.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_crowdfunding_threshold_gate_refund','scene_id':'machine_forward_guard','name':'Crowdfunding\x20threshold\x20REFUND\x20gate\x20(goal-missed\x20polarity,\x20aggregate\x20<)','description':'REFUND\x20polarity\x20of\x20the\x20campaign\x20threshold\x20settlement:\x20logic_and[\x20sum-where-bound(1179)\x20over\x20the\x20'+'campaign\x27s\x20ORDER-keyed\x20contribution\x20rows\x20<\x20funding_threshold,\x20allocation.balance\x20>=\x20order.amount\x20'+'on\x20the\x20task-bound\x20order\x20(live-escrow\x20leg),\x20Clock\x20>=\x20'+'campaign_deadline,\x20PLUS\x20the\x20roster-membership\x20pin\x20(vec_contains_address[candidate\x20ids,\x20task-bound\x20'+'order]\x20—\x20the\x20advancing\x20order\x27s\x20OWN\x20row\x20id\x20MUST\x20be\x20in\x20the\x20keeper-submitted\x20roster,\x20W5-04)\x20].\x20'+'Fires\x20the\x20per-contributor\x20refund\x20leg\x20when\x20the\x20goal\x20is\x20MISSED;\x20the\x20RELEASE\x20'+'twin\x20(tpl_crowdfunding_threshold_gate,\x20aggregate\x20>=)\x20fires\x20the\x20release\x20leg\x20when\x20the\x20goal\x20is\x20met\x20—\x20'+'the\x20two\x20are\x20mutually\x20exclusive\x20on\x20the\x20same\x20aggregate,\x20so\x20exactly\x20one\x20passes\x20after\x20the\x20deadline\x20'+'(escrow-exit\x20polarity).\x20Distinct\x20template\x20ids,\x20not\x20a\x20param\x20swap:\x20guard\x20roots\x20are\x20'+'immutable\x20data\x20filled\x20from\x20example_root,\x20so\x20polarity\x20must\x20be\x20picked\x20at\x20BIND\x20time.\x20The\x20deadline\x20'+'is\x20an\x20ABSOLUTE\x20campaign\x20timestamp\x20shared\x20by\x20every\x20funder.\x20Keeper-attempted\x20OR\x20backer\x20self-heal\x20'+'(AbandonAfterDeadline)\x20may\x20drive\x20the\x20advance\x20—\x20the\x20aggregate\x20+\x20deadline\x20legs\x20make\x20'+'the\x20OUTCOME\x20state-determined,\x20so\x20the\x20driver\x20cannot\x20redirect\x20the\x20funds.','recommended_patterns':['P06','P07'],'parameters':[{'name':'campaign_repository','type':'address','description':'Repository\x20object\x20holding\x20the\x20campaign\x27s\x20contribution\x20rows.\x20Default\x20\x27${repository_name}\x27\x20=\x20the\x20plan\x27s\x20kernel-created\x20evidence\x20Repository\x20(compile\x20seeds\x20repository_name\x20like\x20service_name\x20—\x20late-bound\x20by\x20object\x20NAME\x20at\x20execution).\x20Pass\x20an\x20explicit\x20repository\x20name/address\x20to\x20read\x20a\x20different\x20ledger.','required':!![],'default':'${repository_name}'},{'name':'contribution_key','type':'string','description':'Policy\x20key\x20under\x20which\x20contribution\x20rows\x20are\x20stored\x20(default\x20\x27contribution\x27\x20—\x20the\x20canonical\x20crowdfunding\x20write-policy\x20name\x20declared\x20by\x20the\x20template\x27s\x20repository\x20write\x20guard)','required':!![],'default':'contribution'},{'name':'funding_threshold','type':'number','description':'Aggregate\x20funding\x20goal\x20the\x20sum-where\x20total\x20is\x20compared\x20against\x20(U256\x20semantics,\x20plain\x20number\x20string)','required':!![],'constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x271000\x27.\x20Predicate\x20bounds\x20and\x20thresholds\x20are\x20numeric\x20strings,\x20never\x20JSON\x20numbers'},{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20campaign\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20settlement\x20is\x20blocked\x20until\x20Clock\x20>=\x20it','required':!![],'constraint':'Shared\x20by\x20every\x20funder\x27s\x20order\x20—\x20one\x20campaign,\x20one\x20deadline.\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20a\x20repository\x20time-oracle\x20(pattern.time_source_repository_oracle)\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20date'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Repository','name':'Campaign\x20Repository\x20(submitted\x20by\x20the\x20keeper\x20at\x20settlement)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${contribution_key}','name':'Contribution\x20policy\x20key'},{'identifier':0x2,'b_submission':!![],'value_type':'VecAddress','name':'Contributor\x20ORDER\x20addresses\x20(row\x20id\x20=\x20funder\x27s\x20order)\x20enumerated\x20by\x20the\x20keeper\x20(find-where\x201176\x20/\x20keys-where\x201177;\x20max\x20100,\x20deduped).\x20Pre-filtering\x20to\x20LIVE\x20allocations\x20(balance\x20>\x200)\x20is\x20attestation\x20hygiene,\x20not\x20correctness\x20—\x20the\x20per-row\x20live-escrow\x20clamp\x20(v140)\x20already\x20makes\x20a\x20drained\x20order\x20contribute\x200.\x20The\x20campaign\x20roster\x20is\x20ATTESTED\x20by\x20this\x20set,\x20not\x20chain-derived.\x20The\x20advancing\x20order\x27s\x20OWN\x20row\x20id\x20MUST\x20be\x20in\x20this\x20set\x20(the\x20root\x27s\x20membership\x20pin\x20requires\x20it\x20—\x20W5-04)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${funding_threshold}','name':'Aggregate\x20funding\x20goal\x20(U256\x20comparison)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20campaign\x20deadline\x20(epoch\x20ms);\x20Clock\x20>=\x20it\x20opens\x20settlement'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_as_u256_lesser','nodes':[{'type':'query_repository_data_sum_where_bound','object':{'identifier':0x0},'key':{'identifier':0x1},'ids':{'identifier':0x2},'where':{'kind':'range','valueMin':'1'}},{'type':'identifier','identifier':0x3}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'allocation.balance','object':{'identifier':0xfe,'convert_witness':'OrderAllocation'},'parameters':[]},{'type':'query','query':'order.amount','object':{'identifier':0xfe},'parameters':[]}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x4}]},{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0xfe}]}]},'applicable_industries':['crowdfunding','retail','subscription'],'relevant_risks':['R-X1-17','R-C1-03'],'creation_notes':['BIND-TIME\x20POLARITY\x20(ktt2\x20F-01/F-02,\x202026-10-28):\x20bind\x20THIS\x20id\x20to\x20the\x20→missed_refunded\x20forward\x20and\x20tpl_crowdfunding_threshold_gate\x20(>=)\x20to\x20the\x20→funded_released\x20forward.\x20Binding\x20the\x20release\x20id\x20to\x20BOTH\x20forwards\x20compiles\x20two\x20byte-identical\x20>=\x20guards\x20—\x20a\x20met\x20goal\x20refunds\x20and\x20a\x20missed\x20goal\x20strands\x20(the\x20exact\x20ktt2\x20on-chain\x20failure).\x20There\x20is\x20no\x20runtime\x20or\x20fill-time\x20polarity\x20switch:\x20Guards\x20are\x20immutable\x20data,\x20so\x20the\x20polarity\x20is\x20the\x20template\x20id.','TWO\x20POLARITIES,\x20ONE\x20AGGREGATE:\x20REFUND\x20(this\x20example_root)\x20uses\x20logic_as_u256_lesser[sum_where_bound,\x20threshold];\x20RELEASE\x20swaps\x20that\x20FIRST\x20leaf\x20to\x20logic_as_u256_greater_or_equal.\x20Both\x20AND\x20the\x20SAME\x20live-escrow,\x20deadline\x20and\x20W5-04\x20membership-pin\x20leaves,\x20so\x20they\x20are\x20mutually\x20exclusive\x20—\x20exactly\x20one\x20is\x20satisfiable\x20once\x20Clock\x20>=\x20deadline\x20(the\x20escrow-exit\x20polarity\x20specialized\x20to\x20a\x20funding\x20gate).','ESCROW-BOUND\x20FORM\x20(query\x201179,\x20v140\x20live\x20cap):\x20per-row\x20min(row_value,\x20order.amount,\x20LIVE\x20allocation.balance\x20of\x20the\x20row\x20id\x27s\x20Order),\x20summed\x20U256\x20checked_add\x20—\x20a\x20row\x20cannot\x20claim\x20more\x20than\x20its\x20Order\x20escrowed,\x20only\x20funds\x20still\x20in\x20escrow\x20count\x20(a\x20refunded/drained\x20order\x20contributes\x200\x20naturally),\x20and\x20it\x20reads\x200\x20for\x20non-Order\x20row\x20ids\x20(fail-closed).\x20The\x20write\x20side\x20MUST\x20key\x20rows\x20by\x20the\x20funder\x27s\x20ORDER\x20(no\x20id_from)\x20—\x20signer-keyed\x20rows\x20read\x200\x20under\x20the\x20bound\x20form\x20and\x20silently\x20brick\x20the\x20gate\x20(CROWDFUNDING_SIGNER_KEYED_ROWS).','LIVE-ESCROW\x20LEG\x20keeps\x20an\x20already-drained\x20order\x20(refunded\x20via\x20withdrawal)\x20from\x20re-entering\x20the\x20refund\x20rail.\x20TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20NO\x20claimed_by\x20leg\x20—\x20an\x20arbitration\x20award\x20on\x20a\x20pledger\x27s\x20order\x20is\x20a\x20separate\x20commercial\x20indemnity\x20and\x20never\x20welds\x20the\x20refund\x20rail\x20shut;\x20the\x20arbitrator\x20rules\x20on\x20the\x20order\x27s\x20current\x20state\x20and\x20fund\x20destinations,\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate.','CANDIDATE\x20IDS\x20ARE\x20KEEPER-ATTESTED;\x20pre-filtering\x20is\x20HYGIENE,\x20not\x20correctness\x20(F-05\x20closed\x20on\x20chain\x20by\x20the\x20v140\x20live\x20cap):\x20drop\x20every\x20candidate\x20whose\x20live\x20allocation\x20balance\x20is\x200\x20BEFORE\x20feeding\x201179\x20only\x20to\x20keep\x20the\x20attested\x20roster\x20clean\x20—\x20the\x20per-row\x20live\x20clamp\x20already\x20makes\x20a\x20withdrawn-but-undeleted\x20row\x20contribute\x200\x20to\x20the\x20bound\x20sum,\x20so\x20it\x20can\x20no\x20longer\x20flip\x20the\x20GO/NO-GO\x20polarity.\x20Max\x20100\x20ids\x20per\x20settlement.\x20W5-04\x20MEMBERSHIP\x20PIN\x20(2026-11-01):\x20the\x20root\x20ANDs\x20vec_contains_address[identifier\x202,\x20identifier\x20254]\x20—\x20a\x20backer\x27s\x20own\x20refund\x20advance\x20requires\x20THEIR\x20row\x20id\x20in\x20the\x20keeper\x20roster\x20(the\x20GF2-30\x20self-heal\x20driver\x20included),\x20so\x20roster\x20omission\x20fail-closes\x20the\x20advance;\x20settlement\x20delay,\x20never\x20a\x20misprice.','SELF-HEAL\x20DRIVER-SAFETY\x20(GF2-30):\x20a\x20backer\x20may\x20drive\x20the\x20refund\x20advance\x20(AbandonAfterDeadline)\x20when\x20no\x20keeper\x20ran\x20—\x20safe\x20because\x20the\x20OUTCOME\x20is\x20state-determined\x20(aggregate\x20<\x20goal\x20AND\x20Clock\x20>=\x20deadline\x20forces\x20refund;\x20the\x20driver\x20cannot\x20redirect\x20funds).\x20No\x20identity\x20leg\x20by\x20design:\x20the\x20guard\x27s\x20state\x20legs\x20ARE\x20the\x20authorization.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'All-or-nothing\x20campaign,\x20goal\x20missed:\x20at\x20the\x20deadline\x20the\x20keeper\x20(or\x20any\x20backer,\x20self-heal)\x20advances\x20'+'each\x20pledger\x27s\x20order\x20through\x20→missed_refunded;\x20this\x20gate\x20passes\x20only\x20while\x20the\x20bound\x20aggregate\x20is\x20'+'STILL\x20below\x20the\x20goal,\x20returning\x20every\x20contribution\x20to\x20its\x20own\x20backer\x20(slot\x200).\x20A\x20keeper\x20cannot\x20'+'advance\x20a\x20MET\x20round\x20through\x20this\x20gate\x20(>=\x20fails\x20<),\x20and\x20a\x20backer\x20cannot\x20drain\x20a\x20MET\x20round\x20via\x20the\x20'+'release\x20twin\x27s\x20twin\x20polarity\x20—\x20the\x20two\x20gates\x20are\x20mutually\x20exclusive\x20on\x20one\x20aggregate.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_roster_member_gate','scene_id':'machine_forward_guard','name':'Named-operator\x20roster\x20admission\x20gate\x20(DM-P1\x20exclusive\x20forward\x20+\x20evidence)','description':'Gates\x20a\x20machine\x20forward\x20on\x20KERNEL-ENFORCED\x20roster\x20membership:\x20the\x20transaction\x20signer\x20must\x20be\x20on\x20the\x20'+'named-operator\x20roster\x20of\x20the\x20order\x27s\x20Progress\x20(query\x201575,\x20parameterless\x20—\x20the\x20signer\x20comes\x20from\x20the\x20tx\x20'+'context).\x20ANDed\x20with\x20the\x20same\x20evidence-row\x20presence\x20leg\x20as\x20'+'tpl_repository_row_present\x20(at\x20least\x20one\x20row\x20under\x20the\x20named\x20policy\x20whose\x20value\x20contains\x20the\x20marker,\x20'+'among\x20the\x20verifier-submitted\x20candidate\x20row\x20ids),\x20so\x20a\x20courier\x20handover\x20edge\x20requires\x20BOTH\x20the\x20roster\x20'+'predicate\x20AND\x20the\x20handover\x20evidence.\x20Gated\x20by\x20protocol\x20v138\x20—\x20on\x20a\x20chain\x20without\x20the\x20feature\x20flag\x20the\x20'+'guard\x20evaluation\x20aborts\x20(fail-closed),\x20so\x20verify\x20build_stamp.chain_stamp\x20via\x20upgrade_check\x20before\x20shipping.','recommended_patterns':['P06','P15'],'parameters':[{'name':'repository_name','type':'string','description':'Evidence\x20Repository\x20object\x20name\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20with\x20the\x20plan\x27s\x20evidence\x20repository\x20(\x27<base>_evidence\x27,\x20A5\x20late-binding\x20like\x20service_name)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'row_name','type':'string','description':'Policy\x20key\x20under\x20which\x20the\x20evidence\x20rows\x20are\x20stored\x20(e.g.\x20\x27evidence\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Repository\x20policy\x20name\x20(case-sensitive)'},{'name':'evidence_marker','type':'string','description':'Substring\x20the\x20evidence\x20row\x20value\x20must\x20contain\x20(e.g.\x20the\x20forward\x20name\x20that\x20marks\x20the\x20handover,\x20\x27PickupOrder\x27\x20/\x20\x27DeliverOrder\x27)\x20—\x20the\x20row\x20without\x20the\x20marker\x20does\x20not\x20open\x20the\x20gate','required':!![]}],'example_table':[{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Evidence\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${row_name}','name':'Evidence\x20policy\x20key'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${evidence_marker}','name':'Marker\x20substring\x20the\x20row\x20value\x20must\x20contain'},{'identifier':0x5,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20evidence\x20row\x20ids\x20submitted\x20by\x20the\x20verifier\x20(max\x20100,\x20deduped)'},{'identifier':0x6,'b_submission':![],'value_type':'U64','value':0x1,'name':'Minimum\x20matching\x20row\x20count\x20(superseded\x20by\x20the\x20F-10\x20order-pin\x20leg\x20—\x20order-keyed\x20policies\x20hold\x20ONE\x20row\x20per\x20order;\x20kept\x20for\x20table-layout\x20stability)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'query_order_named_operator_member','object':{'identifier':0xfe}},{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x1},'key':{'identifier':0x2},'ids':{'identifier':0x5},'where':{'kind':'stringContains','value':'${evidence_marker}'}},{'type':'identifier','identifier':0xfe}]}]},'applicable_industries':['delivery','logistics','local_life'],'relevant_risks':['R-X1-17','R-C3-05'],'creation_notes':['EXCLUSIVE\x20ADMISSION,\x20NOT\x20AUTHORIZATION:\x20the\x20edge\x27s\x20namedOperator\x20rail\x20(permission\x20layer)\x20and\x20this\x20guard\x20(guard\x20layer)\x20do\x20OPPOSITE\x20jobs\x20—\x20the\x20rail\x20lets\x20a\x20listed\x20rider\x20advance\x20WITHOUT\x20a\x20permission\x20entity;\x20the\x201575\x20predicate\x20BARS\x20every\x20unlisted\x20signer.\x20Ship\x20both:\x20the\x20rail\x20alone\x20is\x20authorization-only\x20(R-19:\x20an\x20unlisted\x20address\x20is\x20not\x20denied),\x20the\x20predicate\x20alone\x20is\x20meaningless\x20without\x20the\x20roster\x20rail\x20declaring\x20who\x20is\x20allowed\x20to\x20be\x20listed.','TASK-BINDING:\x20keep\x20the\x20order\x20object\x20on\x20slot\x20254\x20(b_submission=true,\x20object_type\x20Order).\x20Mounting\x20the\x201575\x20node\x20against\x20a\x20FREE\x20slot\x20is\x20the\x20T10\x20hijack\x20face\x20—\x20the\x20attacker\x20submits\x20their\x20OWN\x20rostered\x20order\x20and\x20advances\x20the\x20victim\x27s\x20forward\x20(compile\x20GUARD_IDENTITY_SLOT_NOT_TASKBOUND\x20now\x20covers\x20the\x20typed\x20node).','PROTOCOL\x20GATE\x20(v138):\x20query\x201575\x20is\x20behind\x20the\x20feature\x20flag\x20`enable_order_named_operator_member`\x20—\x20on\x20a\x20chain\x20without\x20it\x20the\x20guard\x20evaluation\x20aborts.\x20Check\x20wowok_buildin_info\x20info=\x27upgrade_check\x27\x20(build_stamp.chain_stamp)\x20before\x20building\x20on\x20it;\x20the\x20abort\x20is\x20fail-closed\x20(the\x20forward\x20freezes,\x20it\x20never\x20silently\x20opens).','WRITE-SIDE\x20BINDING\x20IS\x20STILL\x20MANDATORY\x20(R-X1-17):\x20the\x20evidence\x20leg\x20inherits\x20tpl_repository_row_present\x27s\x20discipline\x20—\x20bind\x20the\x20evidence\x20policy\x27s\x20write_guard\x20to\x20the\x20credentialed\x20writer\x20(merchant\x20staff),\x20the\x20RIDER\x20writes\x20nothing;\x20the\x20roster\x20authorizes\x20the\x20rider\x27s\x20FORWARD,\x20never\x20a\x20repository\x20write.','ROSTER\x20BUDGET:\x20the\x20per-order\x20namedOperator\x20roster\x20is\x20written\x20at\x20runtime\x20by\x20the\x20permission-221\x20holder\x20(max\x2060\x20rosters\x20/\x2080\x20addresses\x20per\x20Progress\x20object)\x20—\x20the\x20dispatch\x20duty\x20stays\x20an\x20OFF-CHAIN\x20keeper\x20task\x20(K-4);\x20disclose\x20it\x20(NAMED_OPERATOR_ROSTER_UNDISCLOSED).','INIT-NODE\x20ROSTER\x20ENTRY:\x20the\x20roster\x20the\x201575\x20predicate\x20reads\x20ALSO\x20contains\x20the\x20entry\x20seeded\x20at\x20Progress\x20creation\x20—\x20the\x20Progress-creation\x20entry\x20point\x20registers\x20the\x20calling\x20address\x20under\x20the\x20empty-string\x20init\x20node\x20name,\x20and\x20that\x20caller\x20is\x20usually\x20the\x20order\x20owner\x20side\x20—\x20so\x20the\x20predicate\x20passes\x20for\x20that\x20address\x20as\x20well.\x20The\x20forward\x27s\x20EXCLUSIVITY\x20therefore\x20still\x20leans\x20on\x20the\x20upstream\x20identity\x20rail\x20(the\x20namedOperator\x20rail\x20declaring\x20who\x20may\x20be\x20listed);\x20this\x20gate\x20bars\x20the\x20unlisted,\x20it\x20does\x20not\x20unseat\x20the\x20seeded\x20entry.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Food\x20delivery:\x20the\x20ready\x20->\x20picked_up\x20forward\x20(namedOperator\x20\x27courier\x27)\x20mounts\x20this\x20gate\x20—\x20the\x20dispatched\x20'+'rider\x20advances\x20only\x20when\x20(1)\x20the\x20kernel\x20sees\x20their\x20signer\x20on\x20the\x20order\x27s\x20\x27courier\x27\x20roster\x20(1575)\x20and\x20'+'(2)\x20the\x20merchant\x20staff\x27s\x20pickup\x20handover\x20row\x20(marker\x20\x27PickupOrder\x27)\x20exists\x20in\x20the\x20evidence\x20Repository.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_lock_absolute_ms','scene_id':'machine_forward_guard','name':'Absolute-deadline\x20time\x20lock\x20(opening\x20gate)','description':'Gates\x20a\x20forward\x20on\x20ONE\x20shared\x20absolute\x20timestamp:\x20the\x20chain\x20Clock\x20must\x20be\x20>=\x20a\x20fixed\x20epoch-ms\x20deadline\x20'+'(a\x20Guard\x20constant,\x20identical\x20for\x20every\x20order\x20—\x20a\x20campaign\x20end,\x20an\x20offer\x20expiry,\x20a\x20booking\x20close).\x20'+'Opening-gate\x20direction\x20(greater_or_equal):\x20the\x20forward\x20stays\x20BLOCKED\x20until\x20the\x20deadline\x20passes\x20—\x20'+'crowdfunding\x20release,\x20presale\x20settlement,\x20schedule\x20opening.\x20Executable\x20form\x20of\x20'+'pattern.time_lock_absolute;\x20the\x20closing-window\x20twin\x20(act\x20only\x20UNTIL\x20the\x20deadline)\x20is\x20'+'tpl_time_window_upper_absolute_ms,\x20and\x20the\x20per-order\x20entry-anchored\x20twin\x20is\x20tpl_time_lock_progress.','recommended_patterns':['P06'],'parameters':[{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20the\x20gated\x20action\x20opens\x20when\x20Clock\x20>=\x20it.\x20SAME\x20value\x20for\x20every\x20order\x20—\x20one\x20campaign,\x20one\x20deadline','required':!![],'constraint':'Plain\x20integer\x20epoch\x20milliseconds,\x20e.g.\x20\x271793100000000\x27.\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20pattern.time_source_repository_oracle\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20calendar\x20date\x20and\x20document\x20the\x20source'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20deadline\x20(epoch\x20ms)\x20—\x20ONE\x20shared\x20timestamp\x20for\x20every\x20order'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x0}]},'applicable_industries':['crowdfunding','retail','ecommerce','subscription'],'relevant_risks':[],'creation_notes':['ABSOLUTE,\x20NOT\x20PER-ORDER\x20(gfm31\x20T04\x20/\x20rex3\x20F-01):\x20identifier\x200\x20is\x20ONE\x20campaign-wide\x20epoch-ms\x20constant.\x20Do\x20NOT\x20bind\x20an\x20entry+duration\x20lock\x20(tpl_time_lock_progress,\x201280\x20anchor)\x20when\x20the\x20business\x20means\x20a\x20shared\x20deadline\x20—\x20per-order\x20anchoring\x20gives\x20every\x20participant\x20a\x20different\x20deadline\x20and\x20RE-ARMS\x20the\x20window\x20on\x20every\x20progress\x20write\x20(a\x20merchant-controlled\x20re-schedule\x20=\x20self-renewal).\x20For\x20a\x20real-world\x20calendar\x20deadline\x20bind\x20pattern.time_source_repository_oracle\x20and\x20document\x20the\x20time\x20source.','DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20deadline]\x20encodes\x20an\x20OPENING\x20gate\x20(blocked\x20until\x20the\x20deadline).\x20For\x20a\x20CLOSING\x20window\x20(act\x20only\x20UNTIL\x20the\x20deadline)\x20use\x20tpl_time_window_upper_absolute_ms\x20—\x20inverting\x20the\x20comparison\x20makes\x20the\x20gate\x20permanently\x20open.','ONE\x20GUARD\x20SERVES\x20EVERY\x20ORDER:\x20the\x20deadline\x20is\x20a\x20Guard\x20constant,\x20so\x20no\x20per-order\x20state\x20is\x20read\x20—\x20but\x20the\x20guard\x20is\x20still\x20task-bound\x20(slot\x20254)\x20and\x20fires\x20per\x20order.\x20A\x20deadline\x20CHANGE\x20after\x20publish\x20is\x20impossible\x20(Guards\x20are\x20immutable,\x20IMMUT-001):\x20freeze\x20the\x20timestamp\x20BEFORE\x20publish\x20(gfm31\x20P0①:\x20the\x20deadline\x20must\x20be\x20settled\x20at\x20build\x20time,\x20and\x20late-arriving\x20buys\x20are\x20intercepted\x20on\x20the\x20buy\x20side,\x20not\x20by\x20moving\x20this\x20gate).','CHAIN\x20CLOCK\x20IS\x20COARSE:\x20block-driven\x20Clock\x20can\x20lag\x20wall\x20time\x20by\x20seconds-to-minutes\x20—\x20never\x20gate\x20a\x20sub-minute\x20race\x20on\x20it.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Flexible\x20keep-it-all\x20campaign:\x20every\x20backer\x27s\x20release\x20advance\x20(pledged\x20→\x20released)\x20is\x20gated\x20on\x20Clock\x20>=\x20'+'campaign_deadline_ms\x20—\x20ONE\x20absolute\x20timestamp\x20shared\x20by\x20every\x20funder,\x20so\x20the\x20deadline\x20cannot\x20drift\x20per\x20'+'order\x20and\x20no\x20progress\x20write\x20can\x20re-arm\x20it;\x20the\x20paired\x20withdrawal\x20window\x20closes\x20on\x20the\x20SAME\x20timestamp\x20'+'(tpl_time_window_upper_absolute_ms),\x20making\x20release\x20and\x20withdrawal\x20mutually\x20exclusive\x20in\x20time\x20(D-BUG-2).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_order_holder_time_lock_absolute','scene_id':'machine_forward_guard','name':'Absolute-deadline\x20time\x20lock\x20+\x20order-holder\x20identity\x20(buyer-driven\x20release)','description':'Gates\x20a\x20forward\x20on\x20ONE\x20shared\x20absolute\x20timestamp\x20AND\x20the\x20order-holder\x20identity\x20set:\x20the\x20chain\x20Clock\x20must\x20'+'be\x20>=\x20a\x20fixed\x20epoch-ms\x20deadline\x20(a\x20Guard\x20constant,\x20identical\x20for\x20every\x20order)\x20AND\x20the\x20Signer\x20must\x20be\x20the\x20'+'order\x20owner\x20or\x20a\x20registered\x20agent\x20(read\x20at\x20the\x20254\x20task-binding\x20slot).\x20The\x20identity-bearing\x20twin\x20of\x20'+'tpl_time_lock_absolute_ms\x20for\x20buyer-driven\x20release/self-heal\x20edges\x20(force-release\x20after\x20deadline):\x20the\x20'+'identity\x20leg\x20is\x20NOT\x20optional\x20there\x20—\x20namedOperator\x20\x22\x22\x20is\x20metadata,\x20never\x20an\x20authorization,\x20and\x20a\x20'+'deadline-only\x20guard\x20lets\x20ANY\x20signer\x20advance\x20the\x20order\x27s\x20settlement\x20(gfm35\x20F02\x20live).\x20Mount\x20the\x20pure\x20'+'tpl_time_lock_absolute_ms\x20on\x20the\x20keeper/merchant\x20release\x20edge\x20under\x20a\x20DISTINCT\x20guard\x20key,\x20reading\x20the\x20'+'SAME\x20campaign_deadline_ms,\x20so\x20the\x20self-heal\x20opens\x20exactly\x20when\x20the\x20keeper\x20rail\x20does.','recommended_patterns':['P06','P16'],'parameters':[{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20the\x20gated\x20action\x20opens\x20when\x20Clock\x20>=\x20it.\x20SAME\x20value\x20for\x20every\x20order\x20—\x20one\x20campaign,\x20one\x20deadline','required':!![],'constraint':'Plain\x20integer\x20epoch\x20milliseconds,\x20e.g.\x20\x271793100000000\x27.\x20Bind\x20the\x20SAME\x20value\x20the\x20keeper-side\x20release\x20gate\x20reads\x20—\x20the\x20self-heal\x20and\x20the\x20keeper\x20advance\x20must\x20open\x20on\x20one\x20timestamp'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20deadline\x20(epoch\x20ms)\x20—\x20ONE\x20shared\x20timestamp\x20for\x20every\x20order'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation\x20—\x20the\x20identity\x20legs\x20read\x20THIS\x20slot)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x0}]}]},'applicable_industries':['crowdfunding','retail','ecommerce','subscription'],'relevant_risks':[],'creation_notes':['IDENTITY\x20IS\x20THE\x20AUTHORIZATION\x20on\x20a\x20buyer\x20release\x20edge\x20(gfm35-tn-261029\x20F02):\x20the\x20chain\x27s\x20passport-aware\x20permission\x20assert\x20is\x20SKIPPED\x20(permissionNeeded=false)\x20when\x20permissionIndex\x20is\x20none,\x20and\x20the\x20order_payer\x20rail\x20compiles\x20to\x20namedOperator\x20\x22\x22\x20with\x20no\x20index\x20—\x20the\x20guard\x20predicate\x20is\x20the\x20ONLY\x20gate.\x20Mounting\x20this\x20fused\x20form\x20on\x20the\x20force-release\x20edge\x20closes\x20it\x20to\x20everyone\x20but\x20the\x20order\x20holder;\x20compile\x20hard-blocks\x20the\x20pure\x20time\x20lock\x20there\x20(RELEASE_EDGE_NO_IDENTITY).','SPLIT\x20THE\x20KEYS\x20(compile\x20FORWARD_GUARD_IDENTITY_PERM_CONFLICT):\x20the\x20keeper/merchant\x20release\x20edge\x20rides\x20permission_index\x201002\x20—\x20an\x20order-holder\x20identity\x20guard\x20there\x20has\x20a\x20disjoint\x20signer\x20set\x20and\x20bricks\x20the\x20build.\x20Two\x20DISTINCT\x20guard\x20keys\x20over\x20ONE\x20campaign_deadline_ms:\x20pure\x20tpl_time_lock_absolute_ms\x20on\x20the\x20keeper\x20edge,\x20this\x20fused\x20twin\x20on\x20the\x20buyer\x20edge.','DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20deadline]\x20is\x20the\x20OPENING\x20gate\x20(blocked\x20until\x20the\x20deadline)\x20—\x20same\x20polarity\x20as\x20the\x20keeper\x20twin,\x20so\x20the\x20self-heal\x20opens\x20exactly\x20when\x20the\x20keeper\x20rail\x20does;\x20inverting\x20it\x20makes\x20the\x20gate\x20permanently\x20open.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20the\x20identity\x20legs\x20read\x20it\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Flexible\x20keep-it-all\x20campaign:\x20the\x20backer\x27s\x20force-release\x20self-heal\x20(pledged\x20->\x20released\x20once\x20Clock\x20>=\x20'+'campaign_deadline_ms,\x20when\x20no\x20keeper\x20ran)\x20is\x20gated\x20on\x20the\x20deadline\x20AND\x20Signer\x20∈\x20{order.owner,\x20order\x20'+'agents}\x20—\x20after\x20the\x20deadline\x20any\x20BACKER\x20can\x20drive\x20their\x20own\x20release,\x20but\x20no\x20stranger\x20can\x20force\x20'+'settlement\x20on\x20someone\x20else\x27s\x20pledge.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_lock_repository_oracle_ms','scene_id':'machine_forward_guard','name':'Repository-oracle\x20deadline\x20time\x20lock\x20(opening\x20gate,\x20ROLLING)','description':'Gates\x20a\x20forward\x20on\x20ONE\x20shared\x20deadline\x20read\x20from\x20a\x20Repository\x20ROW:\x20the\x20chain\x20Clock\x20must\x20be\x20>=\x20the\x20'+'epoch-ms\x20value\x20stored\x20under\x20the\x20\x27next_cycle_deadline\x27\x20policy\x20key\x20(query\x201167\x20repository.data).\x20The\x20'+'ROLLING\x20twin\x20of\x20tpl_time_lock_absolute_ms:\x20the\x20merchant\x20EXTENDS\x20a\x20live\x20campaign\x20by\x20upserting\x20the\x20row\x20'+'(one\x20repository.data_add)\x20instead\x20of\x20rebuilding\x20the\x20store\x20—\x20Guards\x20are\x20immutable,\x20the\x20ROW\x20is\x20mutable\x20'+'data.\x20Opening-gate\x20direction\x20(greater_or_equal):\x20settlement/release\x20stays\x20BLOCKED\x20until\x20the\x20row\x27s\x20'+'deadline\x20passes.\x20Executable\x20form\x20of\x20pattern.time_source_repository_oracle;\x20the\x20static\x20(stronger)\x20twin\x20'+'is\x20tpl_time_lock_absolute_ms,\x20the\x20BUY-side\x20closing\x20twin\x20is\x20tpl_buy_guard_campaign_window.','recommended_patterns':['P06','P16'],'parameters':[{'name':'campaign_repository','type':'address','description':'Repository\x20object\x20holding\x20the\x20deadline\x20row.\x20Default\x20\x27${repository_name}\x27\x20=\x20the\x20plan\x27s\x20kernel-created\x20evidence\x20Repository\x20(late-bound\x20by\x20object\x20NAME\x20at\x20execution)','required':!![],'default':'${repository_name}'},{'name':'deadline_key','type':'string','description':'Policy\x20key\x20the\x20deadline\x20epoch-ms\x20is\x20stored\x20under','required':!![],'default':'next_cycle_deadline'},{'name':'deadline_row_id','type':'address','description':'Row\x20id\x20the\x20deadline\x20is\x20written\x20under\x20—\x20use\x20a\x20well-known\x20constant\x20the\x20merchant\x27s\x20tooling\x20always\x20targets\x20(convention:\x20the\x20Service\x20object\x20address)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${campaign_repository}','name':'Campaign\x20Repository\x20(PLAN-BOUND\x20static\x20row\x20—\x20NEVER\x20a\x20driver\x20submission:\x20the\x20driver\x20must\x20not\x20choose\x20which\x20ledger\x20the\x20deadline\x20reads\x20from)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${deadline_key}','name':'Deadline\x20policy\x20key\x20(\x27next_cycle_deadline\x27\x20—\x20the\x20quote\x27s\x20CAMPAIGN_CLOSED\x20probe\x20recognizes\x20this\x20exact\x20key)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${deadline_row_id}','name':'Deadline\x20row\x20id\x20(convention:\x20the\x20Service\x20address\x20—\x20one\x20well-known\x20cell\x20the\x20merchant\x27s\x20tooling\x20upserts)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'query','query':'repository.data','object':{'identifier':0x0},'parameters':[{'type':'identifier','identifier':0x1},{'type':'identifier','identifier':0x2}]}]},'applicable_industries':['crowdfunding','retail','ecommerce','subscription','rental'],'relevant_risks':['R-X1-17'],'creation_notes':['ROLLING\x20VS\x20STATIC\x20(W5-22):\x20the\x20static\x20constant\x20(tpl_time_lock_absolute_ms)\x20is\x20the\x20STRONGER\x20guarantee\x20—\x20frozen\x20at\x20publish,\x20nobody\x20can\x20move\x20it;\x20THIS\x20row-read\x20trades\x20that\x20for\x20schedule\x20flexibility.\x20A\x20deadline\x20the\x20merchant\x20can\x20move\x20is\x20also\x20a\x20deadline\x20the\x20merchant\x20can\x20EXTEND\x20FOREVER:\x20disclose\x20at\x20quote\x20(L-04)\x20that\x20the\x20schedule\x20is\x20merchant-controlled,\x20and\x20bind\x20the\x20row\x27s\x20write_guard\x20to\x20the\x20MERCHANT\x20identity\x20(pattern.repository_write_authorization\x20—\x20R-X1-17:\x20an\x20unbound\x20write\x20guard\x20lets\x20ANYONE\x20close\x20or\x20extend\x20the\x20campaign).','ROLL\x20WORKFLOW:\x20extend\x20=\x20repository.data_add\x20upserting\x20the\x20row\x20to\x20a\x20LATER\x20epoch-ms\x20(every\x20gate\x20reading\x20the\x20row\x20follows\x20—\x20settlement,\x20refund\x20polarity\x20AND\x20the\x20buy-side\x20window\x20move\x20together,\x20one\x20write).\x20SHORTENING\x20below\x20the\x20current\x20Clock\x20instantly\x20CLOSES\x20the\x20campaign\x20(the\x20buy-side\x20twin\x20starts\x20refusing\x20every\x20order)\x20—\x20never\x20shorten\x20past\x20a\x20deadline\x20backers\x20funded\x20against\x20without\x20an\x20off-chain\x20announcement\x20(WTS\x20evidence).','MISSING\x20ROW\x20FAILS\x20CLOSED:\x20query\x201167\x20on\x20an\x20absent\x20(id,\x20key)\x20cell\x20yields\x20an\x20empty\x20blob\x20—\x20the\x20comparison\x20reads\x200,\x20so\x20Clock\x20>=\x200\x20passes\x20and\x20an\x20UNWRITTEN\x20deadline\x20row\x20OPENS\x20the\x20gate\x20at\x20genesis.\x20The\x20build\x20plan\x20MUST\x20seed\x20the\x20row\x20at\x20publish\x20(the\x20same\x20PTB\x20as\x20the\x20campaign\x20launch)\x20and\x20the\x20ops\x20checklist\x20asserts\x20the\x20row\x20exists\x20BEFORE\x20the\x20storefront\x20goes\x20live.\x20Pair\x20with\x20the\x20buy-side\x20twin\x20so\x20a\x20missing\x20row\x20cannot\x20silently\x20sell\x20into\x20an\x20uncapped\x20campaign.','PLAN-BOUND\x20REPOSITORY:\x20identifier\x200\x20is\x20a\x20STATIC\x20row\x20resolved\x20to\x20the\x20plan\x27s\x20repository\x20—\x20a\x20driver-submitted\x20repository\x20row\x20would\x20let\x20whoever\x20advances\x20the\x20edge\x20choose\x20the\x20ledger\x20the\x20deadline\x20reads\x20from\x20(self-extension).\x20Same\x20discipline\x20as\x20tpl_repository_review_decision_gate\x27s\x20identifier\x201.','DIRECTION:\x20greater_or_equal[Clock,\x20row]\x20is\x20the\x20OPENING\x20gate\x20(settlement/release).\x20The\x20CLOSING\x20buy-side\x20window\x20(orders\x20refused\x20once\x20now\x20passes\x20the\x20row)\x20is\x20tpl_buy_guard_campaign_window\x20—\x20same\x20row,\x20same\x20key,\x20so\x20one\x20upsert\x20rolls\x20BOTH\x20sides.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Group-buy\x20round:\x20settlement\x20opens\x20once\x20Clock\x20>=\x20the\x20epoch-ms\x20stored\x20at\x20repository(\x27next_cycle_deadline\x27,\x20'+'service-address).\x20The\x20round\x20under-delivers\x20and\x20the\x20merchant\x20announces\x20a\x2048h\x20extension\x20—\x20one\x20upsert\x20of\x20the\x20'+'row\x20moves\x20every\x20settlement\x20gate\x20AND\x20the\x20storefront\x20buy\x20window;\x20no\x20guard\x20rebuild,\x20no\x20store\x20re-issue.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_buy_guard_campaign_window','scene_id':'service_buy_guard','name':'Campaign\x20window\x20buy\x20gate\x20(closing,\x20repository-oracle\x20deadline)','description':'Buy\x20guard\x20that\x20CLOSES\x20the\x20storefront\x20when\x20the\x20campaign\x20window\x20ends:\x20the\x20chain\x20Clock\x20must\x20be\x20<=\x20the\x20'+'epoch-ms\x20deadline\x20stored\x20under\x20the\x20\x27next_cycle_deadline\x27\x20policy\x20key\x20(query\x201167\x20repository.data,\x20'+'plan-bound\x20Repository).\x20After\x20the\x20deadline\x20every\x20order_new\x20aborts\x20at\x20the\x20buy\x20guard.\x20The\x20BUY-side\x20twin\x20'+'of\x20tpl_time_lock_repository_oracle_ms\x20—\x20mount\x20both\x20on\x20the\x20SAME\x20row\x20so\x20one\x20merchant\x20upsert\x20rolls\x20the\x20'+'settlement\x20gates\x20AND\x20the\x20buy\x20window\x20together.\x20The\x20MCP\x20service_quote\x20recognizes\x20this\x20shape\x20and\x20reports\x20'+'CAMPAIGN_CLOSED\x20in\x20buyable_blockers\x20once\x20now\x20passes\x20the\x20row.','recommended_patterns':['P04','P06'],'parameters':[{'name':'campaign_repository','type':'address','description':'Repository\x20object\x20holding\x20the\x20deadline\x20row.\x20Default\x20\x27${repository_name}\x27\x20=\x20the\x20plan\x27s\x20kernel-created\x20evidence\x20Repository\x20(late-bound\x20by\x20object\x20NAME\x20at\x20execution)','required':!![],'default':'${repository_name}'},{'name':'deadline_key','type':'string','description':'Policy\x20key\x20the\x20deadline\x20epoch-ms\x20is\x20stored\x20under\x20—\x20keep\x20the\x20default\x20so\x20the\x20quote\x27s\x20CAMPAIGN_CLOSED\x20probe\x20recognizes\x20the\x20shape','required':!![],'default':'next_cycle_deadline'},{'name':'deadline_row_id','type':'address','description':'Row\x20id\x20the\x20deadline\x20is\x20written\x20under\x20—\x20MUST\x20be\x20the\x20SAME\x20cell\x20the\x20machine-side\x20oracle\x20lock\x20reads\x20(convention:\x20the\x20Service\x20object\x20address)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${campaign_repository}','name':'Campaign\x20Repository\x20(PLAN-BOUND\x20static\x20row\x20—\x20the\x20buyer\x20must\x20not\x20choose\x20the\x20deadline\x20ledger)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${deadline_key}','name':'Deadline\x20policy\x20key\x20(\x27next_cycle_deadline\x27)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${deadline_row_id}','name':'Deadline\x20row\x20id\x20(convention:\x20the\x20Service\x20address\x20—\x20the\x20SAME\x20cell\x20the\x20machine-side\x20oracle\x20lock\x20reads)'}],'example_root':{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'query','query':'repository.data','object':{'identifier':0x0},'parameters':[{'type':'identifier','identifier':0x1},{'type':'identifier','identifier':0x2}]}]},'applicable_industries':['crowdfunding','retail','ecommerce','subscription'],'relevant_risks':['R-X1-17'],'creation_notes':['THE\x20MISSING\x20CUTOFF\x20TEETH\x20(ddmc4\x20B-15):\x20the\x20threshold\x20machine\x27s\x20deadline\x20gates\x20fire\x20on\x20ORDER\x20ADVANCES\x20—\x20nothing\x20refused\x20a\x20NEW\x20order\x20after\x20the\x20cutoff,\x20so\x20a\x20late\x20buyer\x20funded\x20a\x20round\x20whose\x20settlement\x20had\x20already\x20decided.\x20This\x20guard\x20closes\x20the\x20STORE:\x20mount\x20it\x20on\x20the\x20Service\x20buy_guard\x20and\x20every\x20order_new\x20past\x20the\x20row\x27s\x20deadline\x20aborts.','ROLL\x20WORKFLOW:\x20one\x20upsert\x20of\x20the\x20SAME\x20row\x20extends\x20(or\x20closes)\x20both\x20this\x20window\x20and\x20the\x20machine-side\x20oracle\x20lock\x20(tpl_time_lock_repository_oracle_ms)\x20—\x20keep\x20the\x20two\x20on\x20one\x20row\x20and\x20one\x20key\x20or\x20the\x20storefront\x20and\x20the\x20settlement\x20clock\x20diverge.\x20EXTEND\x20=\x20later\x20epoch-ms;\x20SHORTEN\x20past\x20now\x20=\x20instant\x20close\x20(buyers\x20holding\x20an\x20open\x20checkout\x20lose\x20it\x20—\x20announce\x20first,\x20WTS\x20evidence).','MISSING\x20ROW\x20FAILS\x20OPEN\x20ON\x20THIS\x20SIDE:\x20query\x201167\x20on\x20an\x20absent\x20cell\x20reads\x200,\x20and\x20Clock\x20<=\x200\x20is\x20false\x20—\x20an\x20UNWRITTEN\x20row\x20REFUSES\x20EVERY\x20buy\x20(fail-closed\x20for\x20sales,\x20the\x20safe\x20direction\x20here;\x20the\x20machine-side\x20twin\x20is\x20the\x20one\x20that\x20fails\x20open,\x20which\x20is\x20why\x20its\x20note\x20demands\x20the\x20seed-at-publish\x20step).','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17):\x20the\x20deadline\x20row\x27s\x20write_guard\x20must\x20bind\x20the\x20MERCHANT\x20identity\x20(pattern.repository_write_authorization)\x20—\x20an\x20unbound\x20write\x20guard\x20lets\x20anyone\x20extend\x20or\x20close\x20the\x20storefront.\x20Disclose\x20at\x20quote\x20that\x20the\x20schedule\x20is\x20merchant-controlled\x20(L-04).','QUOTE\x20PAIRING:\x20the\x20MCP\x20service_quote\x20walks\x20the\x20mounted\x20buy\x20guard,\x20recognizes\x20logic_as_u256_lesser_or_equal[Clock,\x20repository.data(\x27next_cycle_deadline\x27)],\x20reads\x20the\x20row\x20and\x20reports\x20\x27CAMPAIGN_CLOSED\x27\x20in\x20buyable_blockers\x20once\x20now\x20passes\x20it\x20—\x20buyers\x20see\x20the\x20closure\x20before\x20checkout,\x20not\x20as\x20an\x20abort.'],'example_use_case':'All-or-nothing\x20campaign\x20storefront:\x20while\x20Clock\x20<=\x20repository(\x27next_cycle_deadline\x27,\x20service)\x20every\x20backer\x20'+'can\x20buy\x20pledge\x20tiers;\x20the\x20moment\x20the\x20row\x27s\x20deadline\x20passes\x20order_new\x20aborts\x20at\x20the\x20buy\x20guard,\x20and\x20the\x20quote\x20'+'shows\x20CAMPAIGN_CLOSED\x20instead\x20of\x20a\x20purchasable\x20basket.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_upper_absolute_ms','scene_id':'machine_forward_guard','name':'Absolute-deadline\x20window\x20bound\x20+\x20order-holder\x20identity\x20(closing\x20window)','description':'Gates\x20a\x20forward\x20to\x20a\x20window\x20that\x20CLOSES\x20on\x20ONE\x20shared\x20absolute\x20timestamp:\x20the\x20chain\x20Clock\x20must\x20be\x20<=\x20a\x20'+'fixed\x20epoch-ms\x20deadline\x20(a\x20Guard\x20constant,\x20identical\x20for\x20every\x20order),\x20ANDed\x20with\x20the\x20order-holder\x20'+'identity\x20set\x20(owner\x20or\x20registered\x20agent,\x20read\x20at\x20the\x20254\x20task-binding\x20slot).\x20Closing-window\x20direction\x20'+'(lesser_or_equal):\x20the\x20forward\x20is\x20allowed\x20only\x20WHILE\x20the\x20campaign/offer\x20is\x20live\x20—\x20pledge\x20withdrawal,\x20'+'claim\x20windows,\x20early-bird\x20pricing;\x20after\x20the\x20deadline\x20the\x20forward\x20aborts.\x20The\x20identity\x20leg\x20is\x20NOT\x20'+'optional\x20on\x20a\x20buyer\x20exit\x20(etsy-aurelia\x20F-01):\x20the\x20edge\x27s\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20'+'authorization\x20—\x20without\x20it\x20a\x20stranger\x20could\x20drive\x20the\x20withdrawal\x20for\x20a\x20backer\x20and\x20drain\x20the\x20pledge\x20'+'mid-campaign.\x20Executable\x20form\x20of\x20pattern.time_window_upper_bound\x20with\x20an\x20ABSOLUTE\x20anchor\x20+\x20'+'pattern.identity_check_order_holder;\x20the\x20opening-gate\x20twin\x20is\x20tpl_time_lock_absolute_ms,\x20and\x20the\x20'+'per-order\x20entry-anchored\x20twin\x20is\x20tpl_time_window_upper.','recommended_patterns':['P06'],'parameters':[{'name':'campaign_deadline_ms','type':'number','description':'Absolute\x20deadline\x20as\x20an\x20epoch-ms\x20timestamp;\x20the\x20gated\x20action\x20closes\x20when\x20Clock\x20>=\x20it.\x20SAME\x20value\x20for\x20every\x20order\x20—\x20one\x20campaign,\x20one\x20deadline','required':!![],'constraint':'Plain\x20integer\x20epoch\x20milliseconds,\x20e.g.\x20\x271793100000000\x27.\x20Chain\x20Clock\x20is\x20block-driven;\x20bind\x20pattern.time_source_repository_oracle\x20when\x20the\x20deadline\x20is\x20a\x20real-world\x20calendar\x20date\x20and\x20document\x20the\x20source'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U64','value':'${campaign_deadline_ms}','name':'Absolute\x20deadline\x20(epoch\x20ms)\x20—\x20ONE\x20shared\x20timestamp\x20closing\x20the\x20window\x20for\x20every\x20order'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation\x20—\x20the\x20identity\x20legs\x20read\x20THIS\x20slot)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'identifier','identifier':0x0}]}]},'applicable_industries':['crowdfunding','retail','ecommerce','subscription'],'relevant_risks':[],'creation_notes':['ABSOLUTE,\x20NOT\x20PER-ORDER\x20(gfm31\x20T04\x20/\x20rex3\x20F-01):\x20identifier\x200\x20is\x20ONE\x20campaign-wide\x20epoch-ms\x20constant.\x20Do\x20NOT\x20anchor\x20a\x20closing\x20window\x20on\x20node\x20entry+duration\x20when\x20the\x20business\x20means\x20a\x20shared\x20deadline\x20—\x20per-order\x20anchoring\x20reopens\x20the\x20window\x20on\x20every\x20re-entry\x20(rex3\x20F-03:\x20a\x20rejected\x20return\x20restarted\x20the\x20return\x20window).\x20The\x20closing\x20anchor\x20MUST\x20be\x20the\x20SAME\x20timestamp\x20the\x20paired\x20opening\x20gate\x20reads\x20(D-BUG-2:\x20release\x20opens\x20at\x20the\x20deadline\x20exactly\x20when\x20withdrawal\x20closes).','DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06):\x20lesser_or_equal[Clock,\x20deadline]\x20encodes\x20a\x20CLOSING\x20window\x20(allowed\x20only\x20until\x20the\x20deadline,\x20aborts\x20after).\x20For\x20an\x20OPENING\x20gate\x20use\x20tpl_time_lock_absolute_ms\x20—\x20inverting\x20the\x20comparison\x20makes\x20the\x20window\x20permanently\x20closed.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer\x20exits\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20deadline-only\x20guard\x20lets\x20ANY\x20signer\x20drive\x20the\x20backer\x27s\x20withdrawal\x20mid-campaign.\x20The\x20owner/agent\x20identity\x20legs\x20ship\x20IN\x20example_root\x20over\x20the\x20254\x20task-binding\x20slot;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.','PAIR\x20THE\x20POLARITIES\x20ON\x20ONE\x20TIMESTAMP\x20(gfm31\x20O5):\x20mount\x20this\x20closing\x20gate\x20on\x20the\x20buyer\x20exit\x20(pledged\x20→\x20withdrawn)\x20and\x20tpl_time_lock_absolute_ms\x20on\x20the\x20settlement\x20(pledged\x20→\x20released)\x20with\x20the\x20SAME\x20campaign_deadline_ms\x20—\x20after\x20the\x20deadline\x20the\x20exit\x20aborts\x20and\x20the\x20release\x20opens,\x20so\x20late\x20liquidity\x20cannot\x20dodge\x20the\x20keep-it-all\x20posture.\x20For\x20a\x20real-world\x20calendar\x20deadline\x20bind\x20pattern.time_source_repository_oracle\x20and\x20document\x20the\x20time\x20source.','CHAIN\x20CLOCK\x20IS\x20COARSE:\x20block-driven\x20Clock\x20can\x20lag\x20wall\x20time\x20by\x20seconds-to-minutes\x20—\x20never\x20gate\x20a\x20sub-minute\x20race\x20on\x20it.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Flexible\x20keep-it-all\x20campaign:\x20the\x20backer\x27s\x20withdrawal\x20(pledged\x20→\x20withdrawn)\x20is\x20gated\x20on\x20the\x20order\x20'+'holder\x20acting\x20while\x20Clock\x20<=\x20campaign_deadline_ms\x20—\x20the\x20window\x20closes\x20exactly\x20when\x20the\x20shared\x20'+'release\x20gate\x20opens,\x20so\x20a\x20backer\x20(and\x20only\x20the\x20backer)\x20can\x20exit\x20while\x20the\x20campaign\x20is\x20live\x20and\x20the\x20'+'keeper\x20self-heal\x20release\x20is\x20unreachable\x20before\x20the\x20deadline.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_band_abs_order_holder','scene_id':'machine_forward_guard','name':'Service-start\x20band\x20window\x20+\x20order-holder\x20identity\x20(tiered-exit\x20form)','description':'Gates\x20a\x20forward\x20to\x20ONE\x20band\x20of\x20the\x20notice\x20span\x20before\x20a\x20SHARED\x20absolute\x20service\x20start:\x20the\x20chain\x20Clock\x20'+'must\x20satisfy\x20[lower_hours\x20=\x200?]\x20...\x20start\x20-\x20upper_hours\x20<\x20Clock\x20<=\x20start\x20-\x20lower_hours,\x20ANDed\x20with\x20the\x20'+'order-holder\x20identity\x20set\x20(owner\x20or\x20registered\x20agent,\x20read\x20at\x20the\x20254\x20task-binding\x20slot).\x20The\x20'+'instantiable\x20form\x20of\x20a\x20cancellation\x20FEE\x20LADDER:\x20mount\x20one\x20forward\x20per\x20band,\x20each\x20with\x20its\x20own\x20charge\x20'+'allocator,\x20so\x20\x27cancel\x207+\x20days\x20out\x20=\x205%,\x203-7\x20days\x20=\x2020%,\x201-3\x20days\x20=\x2050%,\x20under\x2024h\x20=\x2070%\x27\x20is\x20four\x20'+'guards\x20over\x20one\x20anchor\x20instead\x20of\x20one\x20prose\x20formula\x20the\x20chain\x20cannot\x20enforce.\x20An\x20absolute\x20anchor\x20is\x20'+'what\x20makes\x20the\x20bands\x20stable\x20(re-entries\x20and\x20late\x20bookings\x20cannot\x20shift\x20them);\x20the\x20identity\x20leg\x20is\x20not\x20'+'optional\x20on\x20a\x20buyer\x20exit\x20(etsy-aurelia\x20F-01).\x20Instantiable\x20form\x20of\x20pattern.time_window_upper_bound\x20'+'with\x20two\x20bounds\x20+\x20pattern.identity_check_order_holder.','recommended_patterns':['P06','P10','P16'],'parameters':[{'name':'service_start_ms','type':'number','description':'Absolute\x20service/experience\x20start\x20as\x20an\x20epoch-ms\x20timestamp.\x20SAME\x20value\x20for\x20every\x20order\x20—\x20one\x20departure,\x20one\x20date\x20(the\x20crowdfunding\x20campaign_deadline_ms\x20doctrine)','required':!![],'constraint':'Plain\x20integer\x20epoch\x20milliseconds,\x20e.g.\x20\x271793100000000\x27.\x20NOT\x20a\x20per-order\x20duration:\x20a\x20per-order\x20anchor\x20lets\x20a\x20re-entry\x20(or\x20a\x20late\x20booking)\x20reopen\x20the\x20band.\x20Compile\x20names\x20merge\x20this\x20from\x20fee_params[\x27service_start_ms\x27];\x20a\x20default\x20of\x200\x20fails\x20every\x20band\x20closed,\x20so\x20the\x20builder\x20MUST\x20set\x20it'},{'name':'lower_hours','type':'number','description':'Lower\x20notice\x20bound\x20in\x20hours:\x20the\x20forward\x20passes\x20only\x20while\x20start\x20-\x20Clock\x20>=\x20lower_hours','required':!![],'constraint':'0\x20admits\x20the\x20whole\x20run-up\x20to\x20the\x20start\x20(the\x20innermost\x20band);\x20the\x20template\x20converts\x20to\x20ms\x20(x\x203600000)\x20and\x20ADDS\x20to\x20Clock\x20—\x20it\x20never\x20subtracts\x20from\x20the\x20anchor\x20(a\x20future\x20anchor\x20underflows\x20calc_number_subtract)'},{'name':'upper_hours','type':'number','description':'Upper\x20notice\x20bound\x20in\x20hours\x20(exclusive):\x20the\x20forward\x20passes\x20only\x20while\x20start\x20-\x20Clock\x20<\x20upper_hours.\x20Absent\x20or\x20\x270\x27\x20=\x20open-ended\x20band\x20(no\x20upper\x20leg)','required':![],'constraint':'Must\x20be\x20>\x20lower_hours\x20when\x20set;\x20equal\x20bounds\x20ship\x20an\x20empty\x20band\x20that\x20can\x20never\x20pass.\x20\x270\x27/omitted\x20drops\x20the\x20leg\x20AND\x20its\x20table\x20row\x20before\x20substitution'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U64','value':'${service_start_ms}','name':'Absolute\x20service\x20start\x20(epoch\x20ms)\x20—\x20ONE\x20shared\x20timestamp\x20for\x20every\x20order\x20of\x20this\x20departure'},{'identifier':0x1,'b_submission':![],'value_type':'U64','value':'${lower_hours}','name':'Lower\x20notice\x20bound\x20in\x20hours\x20(start\x20-\x20Clock\x20>=\x20this)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':0x36ee80,'name':'Hours-to-milliseconds\x20constant'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${upper_hours}','name':'Upper\x20notice\x20bound\x20in\x20hours\x20(start\x20-\x20Clock\x20<\x20this;\x20row\x20dropped\x20when\x20open-ended)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation\x20—\x20the\x20identity\x20legs\x20read\x20THIS\x20slot)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'calc_number_add','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x1},{'type':'identifier','identifier':0x2}]}]},{'type':'identifier','identifier':0x0}]},{'type':'logic_as_u256_lesser','nodes':[{'type':'identifier','identifier':0x0},{'type':'calc_number_add','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x2}]}]}]}]},'applicable_industries':['travel','rental','ecommerce'],'relevant_risks':['R-C3-01','R-C3-05'],'creation_notes':['ABSOLUTE,\x20SHARED\x20START\x20(crowdfunding\x20campaign_deadline_ms\x20doctrine):\x20identifier\x200\x20is\x20ONE\x20epoch-ms\x20timestamp\x20for\x20the\x20whole\x20Service/departure,\x20read\x20from\x20fee_params[\x27service_start_ms\x27]\x20by\x20name\x20merge.\x20Do\x20NOT\x20re-anchor\x20a\x20band\x20on\x20order.time\x20or\x20on\x20node\x20entry:\x20a\x20per-order\x20anchor\x20rotates\x20with\x20every\x20booking\x20(a\x20late\x20booker\x20would\x20land\x20in\x20the\x20cheap\x20band,\x20klk15-ln-261023)\x20and\x20a\x20node\x20anchor\x20reopens\x20the\x20band\x20on\x20every\x20re-entry.\x20One\x20date,\x20four\x20bands,\x20one\x20immutable\x20anchor.','BAND\x20ALGEBRA\x20(all\x20four\x20tiers,\x20one\x20anchor):\x20T1\x20notice\x20>=\x20L_1\x20and\x20open-ended;\x20T2\x20L_2\x20<=\x20notice\x20<\x20L_1;\x20T3\x20L_3\x20<=\x20notice\x20<\x20L_2;\x20T4\x200\x20<=\x20notice\x20<\x20L_3\x20—\x20where\x20notice\x20=\x20start\x20-\x20Clock.\x20Each\x20row\x20is\x20ONE\x20forward\x20with\x20ONE\x20band;\x20the\x20tiers\x20are\x20distinguished\x20by\x20their\x20GUARDS,\x20never\x20by\x20a\x20`tier`\x20parameter\x20inside\x20one\x20guard\x20(the\x20chain\x20has\x20no\x20per-call\x20dispatch:\x20a\x20single\x20guard\x20admitting\x20all\x20four\x20would\x20charge\x20one\x20price).\x20Ship\x20a\x20charge\x20allocator\x20per\x20band\x20so\x20the\x20fee\x20ladder\x20is\x20executable.','ADD-ONLY\x20ARITHMETIC:\x20the\x20comparison\x20is\x20calc_number_add[Clock,\x20hours*3600000]\x20<=\x20start.\x20NEVER\x20rewrite\x20it\x20as\x20start\x20-\x20Clock:\x20start\x20is\x20in\x20the\x20FUTURE,\x20so\x20calc_number_subtract\x20underflows\x20a\x20U64\x20and\x20the\x20leg\x20fails\x20closed\x20forever\x20(klk15-ln-261023\x20§F).\x20Never\x20use\x20logic_as_u256_greater_or_equal\x20with\x20a\x20subtraction\x20either.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer\x20exits\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20band-only\x20guard\x20lets\x20ANY\x20signer\x20drive\x20the\x20buyer\x27s\x20cancel\x20(and\x20pick\x20the\x20cheapest\x20band).\x20The\x20owner/agent\x20legs\x20ship\x20IN\x20example_root\x20over\x20the\x20254\x20task-binding\x20slot;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.\x20Bind\x20this\x20guard\x20to\x20an\x20order_payer\x20edge:\x20the\x20identity\x20layer\x20runs\x20BEFORE\x20the\x20guard,\x20so\x20a\x20permissionIndex\x20or\x20named_operator\x20rail\x20is\x20disjoint\x20and\x20nobody\x20could\x20pass\x20both\x20(FORWARD_GUARD_IDENTITY_PERM_CONFLICT).','zero\x20service_start_ms\x20FAILS\x20EVERY\x20BAND\x20CLOSED:\x20the\x20fee_param\x20ships\x200\x20(a\x20template\x20cannot\x20know\x20the\x20date)\x20and\x20Clock\x20+\x20N\x20hours\x20<=\x200\x20is\x20false,\x20so\x20all\x20tier\x20rails\x20abort\x20until\x20the\x20builder\x20sets\x20the\x20real\x20start.\x20That\x20is\x20the\x20intended\x20fail-closed\x20default\x20—\x20the\x20build\x20note\x20must\x20disclose\x20it.\x20Set\x20the\x20value\x20at\x20generation\x20(fee_overrides[\x27service_start_ms\x27]\x20=\x20<epoch\x20ms>).','CHAIN\x20CLOCK\x20IS\x20COARSE:\x20block-driven\x20Clock\x20can\x20lag\x20wall\x20time\x20by\x20seconds-to-minutes\x20—\x20never\x20gate\x20a\x20sub-minute\x20race\x20on\x20it,\x20and\x20keep\x20band\x20boundaries\x20at\x20least\x20a\x20few\x20minutes\x20apart.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Dated\x20experience\x20with\x20a\x20cancellation\x20fee\x20ladder:\x20paid\x20->\x20cancelled_t1\x20(>=\x207\x20days\x20out,\x205%\x20charge),\x20'+'cancelled_t2\x20(3-7\x20days,\x2020%),\x20cancelled_t3\x20(1-3\x20days,\x2050%),\x20cancelled_t4\x20(<\x2024h,\x2070%)\x20—\x20four\x20forwards,\x20'+'four\x20band\x20guards\x20over\x20the\x20SAME\x20service_start_ms,\x20four\x20charge\x20allocators;\x20the\x20buyer\x20keeps\x20the\x20remainder\x20'+'and\x20only\x20the\x20order\x20holder\x20(or\x20their\x20agent)\x20can\x20drive\x20any\x20of\x20the\x20four.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_repository_review_decision_gate','scene_id':'reward_claim','name':'Merchant\x20review-decision\x20gate','description':'Gates\x20a\x20review\x20bounty\x20on\x20an\x20explicit\x20merchant\x20approval:\x20the\x20claim\x20passes\x20only\x20when\x20the\x20review\x20repository\x27s\x20\x27review_decision\x27\x20policy\x20holds\x20a\x20U64\x20decision\x20row\x20FOR\x20THE\x20SUBMITTED\x20ORDER\x20with\x20value\x20>=\x20the\x20promised\x20payout.\x20The\x20matched-row\x20set\x20is\x20pinned\x20to\x20the\x20submitted\x20order\x20via\x20vec_contains_address,\x20so\x20candidate-list\x20padding\x20cannot\x20borrow\x20another\x20order\x27s\x20approval.\x20Pairs\x20with\x20the\x20compile-emitted\x20write\x20side\x20(review_mode\x20\x27review_reward\x27\x20professional\x20form).','recommended_patterns':['P13'],'parameters':[{'name':'review_repository','type':'address','description':'The\x20review\x20Repository\x20emitted\x20by\x20the\x20build\x20plan\x20(name\x20suffix\x20\x27_review\x27);\x20pass\x20its\x20LocalMark\x20name\x20or\x20address','required':!![]},{'name':'min_payout','type':'number','description':'Approved-payout\x20floor\x20(U64,\x20smallest\x20units)\x20a\x20decision\x20row\x20must\x20carry\x20to\x20count\x20as\x20approval\x20—\x20set\x20it\x20to\x20the\x20promised\x20per-order\x20bounty','required':!![],'constraint':'Plain\x20number\x20string\x20(U256\x20semantics),\x20e.g.\x20\x271000000000\x27.\x20Must\x20equal\x20the\x20payout\x20the\x20reward\x20claim\x20actually\x20pays'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Claimed\x20order\x20(submission\x20slot\x200\x20—\x20also\x20the\x20replay\x20stamp\x20slot)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${review_repository}','name':'Review\x20Repository\x20(plan-bound\x20—\x20NEVER\x20a\x20buyer-submitted\x20row)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'review_decision','name':'Decision\x20policy\x20key'},{'identifier':0x3,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20decision\x20rows\x20(buyer\x20submits\x20[order];\x20padding\x20is\x20neutralized\x20by\x20the\x20membership\x20pin)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${min_payout}','name':'Approved-payout\x20floor'}],'example_root':{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x1},'key':{'identifier':0x2},'ids':{'identifier':0x3},'where':{'kind':'range','valueMin':'${min_payout}'}},{'type':'identifier','identifier':0x0}]},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01'],'creation_notes':['COMPOSITION\x20(professional\x20review_reward\x20claim\x20root):\x20logic_and[\x20identity\x20leg\x20(Signer\x20==\x20order.owner),\x20THIS\x20decision\x20leg,\x20replay\x20leg\x20(structured\x20query_reward_record_exists\x20with\x20the\x20SV-2\x20per-order\x20stamp),\x20BKN-P2\x20positive-amount\x20leg\x20(order.amount\x20>=\x201)\x20].\x20The\x20decision\x20leg\x20ADDS\x20the\x20approval\x20requirement\x20on\x20top\x20of\x20the\x20mandatory\x20replay/idempotency\x20legs\x20—\x20it\x20replaces\x20nothing.','SUBSTITUTION-PROOF\x20BY\x20CONSTRUCTION:\x20the\x20ids\x20row\x20is\x20buyer-submitted,\x20so\x20padding\x20it\x20with\x20foreign\x20approved\x20orders\x20would\x20be\x20trivial\x20—\x20the\x20vec_contains_address\x20pin\x20makes\x20padding\x20USELESS:\x20the\x20matched\x20set\x20must\x20contain\x20the\x20SUBMITTED\x20order\x20(identifier\x200),\x20and\x20a\x20row\x20for\x20that\x20order\x20exists\x20only\x20if\x20the\x20merchant\x20approved\x20it.\x20Never\x20replace\x20the\x20pin\x20with\x20a\x20bare\x20count\x20>=\x201\x20over\x20the\x20candidates\x20(that\x20reopens\x20the\x20borrowed-approval\x20hole).','WRITE\x20SIDE\x20(compile-emitted,\x20do\x20not\x20hand-build):\x20the\x20plan\x20emits\x20guard\x20\x27guard_review_decision\x27\x20(service-provider\x20identity:\x20submitted\x20order\x20belongs\x20to\x20this\x20service,\x20submitted\x20Permission\x20==\x20service.permission,\x20signer\x20is\x20owner/admin)\x20and\x20the\x20repository\x20policy\x20\x27review_decision\x27\x20(id_from=None,\x20value_type=U64,\x20write_guard\x20bound).\x20The\x20merchant\x20approves\x20an\x20order\x20with\x20repository.data_add\x20{name:\x27review_decision\x27,\x20items:[{write_guard:\x27<guard_review_decision>\x27,\x20data:[{id:<order\x20address>,\x20data:<payout\x20U64>}]}]}\x20+\x20a\x20passport\x20submission\x20carrying\x20the\x20order\x20and\x20the\x20permission.','REPOSITORY\x20ROW\x20IS\x20PLAN-BOUND:\x20identifier\x201\x20is\x20a\x20static\x20row\x20resolved\x20to\x20the\x20plan-emitted\x20\x27_review\x27\x20repository\x20—\x20a\x20buyer-submitted\x20repository\x20row\x20would\x20let\x20the\x20claimant\x20present\x20a\x20self-controlled\x20repository\x20with\x20self-written\x20approvals\x20(fail-open).\x20Keep\x20it\x20static/plan-bound.','NO\x20QUOTE_GUARD\x20on\x20\x27review_decision\x27:\x20the\x20where-scan\x20(1176)\x20aborts\x20if\x20the\x20scanned\x20policy\x20is\x20quote-guard-protected\x20and\x20the\x20claim\x20passport\x20does\x20not\x20carry\x20it\x20in\x20its\x20impack\x20list.\x20Decision\x20rows\x20are\x20payout\x20amounts,\x20not\x20secrets\x20—\x20leave\x20the\x20policy\x20unprotected\x20so\x20claims\x20stay\x20simple.','UPPER\x20BOUND\x20IS\x20THE\x20PROMISE:\x20a\x20decision\x20row\x20value\x20BELOW\x20min_payout\x20does\x20not\x20pass\x20(partial\x20approval),\x20and\x20the\x20claim\x20pays\x20the\x20reward\x27s\x20fixed\x20per-claim\x20amount\x20regardless\x20—\x20set\x20min_payout\x20equal\x20to\x20the\x20promised\x20bounty\x20so\x20\x27approved\x27\x20and\x20\x27paid\x27\x20never\x20diverge.\x20Zero-value\x20rows\x20approve\x20nothing\x20(BKN-P2\x20keeps\x20zero-total\x20orders\x20out\x20entirely).'],'example_use_case':'Travel\x20service\x20with\x20a\x20review\x20bounty:\x20after\x20delivery\x20the\x20merchant\x20checks\x20the\x20review\x20and\x20writes\x20a\x20U64\x20approval\x20row\x20for\x20the\x20order\x20(>=\x20the\x20promised\x20bounty).\x20The\x20buyer\x27s\x20claim\x20passes\x20only\x20when\x20that\x20row\x20exists\x20for\x20THEIR\x20order\x20—\x20no\x20approval,\x20no\x20payout;\x20a\x20padded\x20candidate\x20list\x20borrows\x20nothing.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_reward_not_claimed','scene_id':'reward_claim','name':'Reward\x20not-claimed\x20replay\x20gate','description':'Minimal\x20once-per-recipient\x20replay\x20gate\x20for\x20a\x20Reward\x20claim:\x20passes\x20only\x20when\x20no\x20reward\x20record\x20exists\x20yet\x20for\x20the\x20claiming\x20signer\x20on\x20the\x20submitted\x20Reward\x20object.\x20Zero-parameter\x20building\x20block\x20—\x20compose\x20with\x20progress-node\x20and\x20identity\x20legs\x20(see\x20tpl_combined_reward_guard)\x20for\x20a\x20production\x20claim\x20guard.','recommended_patterns':['P13'],'parameters':[],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Reward','name':'Reward\x20object\x20being\x20claimed\x20from\x20(submitted\x20by\x20verifier\x20at\x20runtime)'}],'example_root':{'type':'logic_not','node':{'type':'query_reward_record_exists','object':{'identifier':0x0},'where':{}}},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01'],'creation_notes':['REPLAY\x20GATE\x20ONLY\x20(C11):\x20this\x20root\x20answers\x20exactly\x20one\x20question\x20—\x20has\x20THIS\x20signer\x20already\x20claimed\x20THIS\x20Reward?\x20It\x20carries\x20no\x20workflow\x20or\x20identity\x20teeth;\x20a\x20guard\x20made\x20of\x20only\x20this\x20leg\x20lets\x20any\x20address\x20holding\x20any\x20order\x20at\x20any\x20node\x20claim\x20first.\x20Compose\x20with\x20a\x20progress-node\x20leg\x20and\x20a\x20Signer==order.owner\x20leg\x20(see\x20tpl_combined_reward_guard)\x20before\x20binding\x20a\x20funded\x20pool.','STRUCTURED\x20NODE\x20FORM\x20(klk-mn-261013\x20F-05):\x20the\x20SDK\x20encodes\x20where:{}\x20as\x20[VecU8\x20marker][all-None\x20RecordQueryConditions];\x20recipient\x20defaults\x20to\x20the\x20Signer,\x20so\x20no\x20recipient\x20submission\x20row\x20is\x20needed.\x20NEVER\x20hand-write\x20the\x20raw\x20identifier\x20form\x20with\x20an\x20empty\x20VecU8\x20constant\x20—\x20empty\x20query\x20bytes\x20are\x20rejected\x20by\x20the\x20native\x20with\x20an\x20uncoded\x20MovePrimitiveRuntimeError\x20(\x27Query\x20bytes\x20is\x20empty\x27).','STAMP\x20(UPW-K7,\x20slot-aware):\x20even\x20a\x20once-per-recipient\x20gate\x20consumes\x20claim\x20records,\x20so\x20its\x20reward\x20guard_add\x20entry\x20needs\x20a\x20store_from_id\x20—\x20the\x20MCP\x20stamp\x20gate\x20rejects\x20unstamped\x20record-consuming\x20entries.\x20For\x20THIS\x20template\x27s\x20lifetime-once\x20scope\x20the\x20stamp\x20slot\x20is\x20the\x20submitted\x20Reward\x20address\x20(slot\x200\x20—\x20a\x20constant\x20per\x20pool,\x20so\x20the\x20native\x20once-slot\x20stays\x20per-(recipient,\x20guard));\x20for\x20PER-ORDER\x20scope\x20use\x20the\x20order-scoped\x20variant\x20instead\x20(where.storeFromId\x20+\x20the\x20submitted\x20Order\x20address\x20stamp\x20—\x20see\x20tpl_reward_one_time_claim\x20/\x20tpl_combined_reward_guard,\x20SV-2).\x20On-chain\x20an\x20unstamped\x20entry\x20is\x20accepted\x20but\x20writes\x20records\x20with\x20store_from\x20=\x20none,\x20which\x20matches\x20no\x20storeFromId\x20predicate\x20—\x20that\x20unstamped\x20shape\x20is\x20the\x20ONLY\x20context\x20where\x20the\x20ofn-mn-261012\x20F-01\x20\x27filter\x20is\x20inert\x27\x20verdict\x20ever\x20held\x20(azx7-mn-261014\x20live\x20T8\x20disproved\x20the\x20blanket\x20retraction).','Reward\x20guard\x20is\x20immutable\x20once\x20the\x20Reward\x20object\x20is\x20published\x20—\x20verify\x20this\x20guard\x20against\x20a\x20realistic\x20passport\x20BEFORE\x20publish\x20(F-03:\x20a\x20wrong\x20bound\x20guard\x20can\x20permanently\x20brick\x20the\x20claim\x20path).'],'example_use_case':'A\x20referral\x20bounty\x20pool:\x20the\x20first\x20claim\x20from\x20any\x20given\x20address\x20passes\x20the\x20not-claimed\x20gate;\x20a\x20second\x20claim\x20attempt\x20by\x20the\x20same\x20address\x20aborts\x20because\x20a\x20reward\x20record\x20already\x20exists\x20for\x20that\x20recipient.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_combined_reward_guard','scene_id':'reward_claim','name':'Combined\x20reward\x20claim\x20guard\x20(node\x20+\x20owner\x20+\x20not-claimed)','description':'Production\x20reward\x20claim\x20gate:\x20order\x20at\x20the\x20expected\x20progress\x20node\x20+\x20signer\x20is\x20the\x20order\x20owner\x20+\x20order\x20belongs\x20to\x20THIS\x20store\x27s\x20Service\x20(KTT3-F15)\x20+\x20reward\x20not\x20yet\x20claimed\x20by\x20this\x20signer.\x20The\x20four\x20legs\x20of\x20tpl_reward_one_time_claim\x27s\x20order-state\x20family,\x20as\x20a\x20standalone\x20composable\x20template.','recommended_patterns':['P07','P13'],'parameters':[{'name':'expected_node','type':'string','description':'Machine\x20node\x20name\x20at\x20which\x20claiming\x20is\x20allowed\x20(e.g.\x20\x27reviewed\x27)','required':!![]},{'name':'service_name','type':'address','description':'Host\x20Service\x20object\x20name\x20or\x20address\x20(P16\x20circular\x20ref\x20—\x20resolved\x20by\x20the\x20SDK\x20after\x20the\x20Service\x20exists).\x20KTT3-F15\x20STORE\x20BINDING:\x20a\x20reward\x20claim\x20has\x20no\x20chain-side\x20Service\x20context,\x20so\x20without\x20this\x20leg\x20any\x20order\x20at\x20the\x20expected\x20node\x20from\x20ANY\x20store\x20passes\x20the\x20node/owner\x20legs\x20and\x20drains\x20the\x20pool\x20cross-store.\x20The\x20kernel\x20seeds\x20the\x20plan\x27s\x20service\x20name\x20automatically;\x20hand-fills\x20MUST\x20pass\x20it','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Expected\x20pre-claim\x20node\x20name\x20(e.g.\x20\x27reviewed\x27)'},{'identifier':0x2,'b_submission':!![],'value_type':'Address','object_type':'Reward','name':'Reward\x20object\x20being\x20claimed\x20from\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x3,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Host\x20Service\x20object\x20(KTT3-F15\x20store\x20binding\x20—\x20the\x20bounty\x20pays\x20only\x20for\x20THIS\x20store\x27s\x20orders)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.service','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_not','node':{'type':'query_reward_record_exists','object':{'identifier':0x2},'where':{'storeFromId':{'identifier':0x0}}}}]},'applicable_industries':['ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C1-03','R-X1-01','R-X1-10'],'creation_notes':['FOUR\x20LEGS,\x20FOUR\x20THEFT\x20PATHS\x20CLOSED:\x20the\x20progress-node\x20leg\x20blocks\x20claiming\x20before\x20the\x20workflow\x20reaches\x20the\x20claim\x20point;\x20the\x20identity\x20leg\x20blocks\x20a\x20non-owner\x20holding/forwarding\x20an\x20order\x20at\x20the\x20right\x20node\x20from\x20draining\x20the\x20pool\x20(audit-261012\x20B5);\x20the\x20KTT3-F15\x20store-binding\x20leg\x20blocks\x20a\x20completed\x20order\x20from\x20ANOTHER\x20store\x20passing\x20the\x20node/owner\x20legs\x20and\x20draining\x20this\x20pool\x20cross-store\x20(a\x20reward\x20claim\x20has\x20no\x20chain-side\x20Service\x20context\x20—\x20v148\x20does\x20not\x20cover\x20the\x20claim\x20path);\x20the\x20not-claimed\x20leg\x20blocks\x20a\x20second\x20claim\x20by\x20the\x20same\x20signer.\x20Dropping\x20any\x20single\x20leg\x20reopens\x20its\x20path.','ZERO-VALUE\x20ORDER\x20CAUTION\x20(BKN-P2):\x20unlike\x20tpl_reward_one_time_claim\x20this\x20root\x20does\x20NOT\x20carry\x20the\x20order.amount\x20>=\x201\x20positive-amount\x20leg\x20—\x20add\x20it\x20when\x20the\x20pool\x20pays\x20per\x20order\x20and\x20zero-total\x20orders\x20(100%-off\x20coupons)\x20must\x20never\x20trigger\x20the\x20incentive.','REPLAY\x20GATE\x20(SV-2,\x20azx7-mn-261014\x20live\x20T8):\x20this\x20root\x20scopes\x20the\x20claim-records\x20query\x20BY\x20THE\x20ORDER\x20—\x20where.storeFromId\x20references\x20slot\x200\x20(the\x20submitted\x20Order\x20address),\x20the\x20same\x20slot\x20the\x20guard_add\x20entry\x20stamps:\x20once\x20per\x20buyer\x20per\x20ORDER.\x20NEVER\x20hand-write\x20the\x20raw\x20identifier\x20form\x20with\x20an\x20empty\x20VecU8\x20constant\x20(uncoded\x20MovePrimitiveRuntimeError\x20\x27Query\x20bytes\x20is\x20empty\x27\x20at\x20first\x20verification).','STAMP\x20+\x20FILTER\x20PAIR\x20(SV-2):\x20the\x20reward.guard_add\x20store_from_id\x20STAMP\x20and\x20the\x20where.storeFromId\x20QUERY\x20FILTER\x20are\x20DIFFERENT\x20fields\x20and\x20BOTH\x20are\x20required\x20for\x20the\x20per-order\x20scope\x20—\x20the\x20STAMP\x20makes\x20each\x20claim\x20record\x20key\x20on\x20the\x20submitted\x20Order\x20address;\x20the\x20FILTER\x20matches\x20records\x20by\x20that\x20same\x20value.\x20A\x20record-consuming\x20guard\x20(this\x20template)\x20MUST\x20be\x20added\x20with\x20store_from_id\x20=\x200\x20(the\x20submitted\x20Order/claimant\x20slot)\x20—\x20the\x20MCP\x20guard_add\x20stamp\x20gate\x20(UPW-K7)\x20REJECTS\x20the\x20unstamped\x20entry;\x20on-chain\x20the\x20unstamped\x20entry\x20is\x20accepted\x20but\x20writes\x20records\x20with\x20store_from\x20=\x20none,\x20which\x20matches\x20no\x20storeFromId\x20predicate\x20—\x20that\x20unstamped\x20shape\x20is\x20the\x20ONLY\x20context\x20where\x20the\x20ofn-mn-261012\x20F-01\x20\x27filter\x20is\x20inert\x27\x20verdict\x20ever\x20held\x20(azx7-mn-261014\x20live\x20T8\x20disproved\x20the\x20blanket\x20retraction).\x20Re-adding\x20the\x20SAME\x20guard\x20overwrites\x20its\x20slot\x20in\x20place,\x20so\x20live\x20pools\x20are\x20repairable.','IDENTITY\x20LEG\x20(mandatory\x20regardless\x20of\x20chain\x20patch\x20state):\x20claim()\x20pays\x20Recipient::Signer\x20(tx_context::sender)\x20with\x20no\x20order\x20binding\x20of\x20its\x20own\x20—\x20without\x20the\x20order.owner\x20identity\x20leg\x20any\x20address\x20holding\x20any\x20order\x20at\x20the\x20required\x20node\x20drains\x20the\x20pool\x20(audit-261012\x20B5).\x20The\x20MOV-PROTOCOL-1212\x20chain\x20patch\x20adds\x20recipient==signer\x20and\x20a\x20per-(recipient,\x20guard,\x20store_from)\x20once-slot\x20as\x20the\x20SECOND\x20line\x20—\x20a\x20replay\x20with\x20the\x20registered\x20guard\x20still\x20aborts\x20at\x20the\x20passport\x20layer\x20FIRST\x20(E_VERIFY_FAILED=7);\x20check\x20the\x20patch\x27s\x20deployment\x20freshness\x20via\x20wowok_buildin_info\x20upgrade_check\x20(DEPLOY-K1).','Reward\x20guard\x20is\x20immutable\x20once\x20the\x20Reward\x20object\x20is\x20published\x20—\x20verify\x20this\x20guard\x20against\x20a\x20realistic\x20passport\x20BEFORE\x20publish\x20(F-03:\x20a\x20wrong\x20bound\x20guard\x20can\x20permanently\x20brick\x20the\x20claim\x20path).','ADJUDICATED\x20DESIGN\x20(upwc-mn-261013\x20③)\x20—\x20REVIEW-THEN-CLAIM-THEN-COMPLETE\x20ordering:\x20the\x20standard\x20flow\x20writes\x20the\x20repository\x20review\x20row\x20FIRST,\x20fires\x20the\x20reward\x20claim\x20SECOND,\x20and\x20only\x20then\x20advances\x20the\x20machine\x20to\x20completed.\x20A\x20test/report\x20line\x20reading\x20\x27review\x20written\x20before\x20complete\x27\x20describes\x20the\x20designed\x20order,\x20not\x20a\x20defect\x20(KL-C5\x20review-window\x20idiom\x20family).','SCOPE\x20SPLIT\x20(SV-2):\x20this\x20root\x27s\x20order-scoped\x20gate\x20=\x20once\x20per\x20buyer\x20per\x20ORDER\x20(the\x20buyer\x27s\x20next\x20order\x20still\x20claims);\x20swap\x20where.storeFromId\x20for\x20an\x20EMPTY\x20where\x20({})\x20ONLY\x20for\x20deliberate\x20one-bounty-per-buyer\x20designs\x20—\x20it\x20silently\x20kills\x20the\x20buyer\x27s\x20second\x20order\x20(upw-mn-261014\x20F-48).\x20For\x20a\x20chain-enforced\x20per-order\x20once\x20immune\x20to\x20guard-tree\x20mistakes,\x20route\x20the\x20incentive\x20through\x20an\x20Allocation\x20leg\x20gated\x20on\x20protocol\x20slot\x20254\x20instead.'],'example_use_case':'Review\x20bounty\x20with\x20full\x20protection:\x20fan\x20finishes\x20review\x20(node\x20\x27reviewed\x27),\x20submits\x20the\x20Order\x20and\x20the\x20Reward\x20address;\x20the\x20claim\x20passes\x20only\x20for\x20the\x20order\x20owner\x20at\x20the\x20reviewed\x20node\x20who\x20has\x20never\x20claimed\x20this\x20pool.\x20Every\x20other\x20path\x20aborts\x20and\x20the\x20balance\x20stays.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_write_guard_type_check','scene_id':'repository_write_guard','name':'Storage\x20write\x20type\x20validation','description':'Verifies\x20that\x20the\x20data\x20type\x20written\x20to\x20the\x20Repository\x20matches\x20the\x20declaration\x20and\x20that\x20the\x20writer\x27s\x20identity\x20is\x20legitimate.','recommended_patterns':['P08','P11'],'parameters':[{'name':'repository_address','type':'address','description':'Repository\x20object\x20address','required':![],'constraint':'Must\x20be\x20the\x20address\x20of\x20an\x20already-published\x20Repository'},{'name':'entity_registrar','type':'address','description':'System\x20Entity\x20object\x20address\x20(Move\x20WOW_ENTITY_OBJECT_ID,\x20fixed\x200xaab;\x20SDK\x20alias\x20ENTITY_REGISTRAR_ADDRESS)','required':![],'default':'0xaab'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Writer\x20address\x20(submitted\x20by\x20caller)','binding_constraint':'Must\x20be\x20a\x20valid\x20Entity\x20address'},{'identifier':0x1,'b_submission':!![],'value_type':'String','name':'Write\x20data\x20key\x20name\x20(submitted\x20by\x20caller)','binding_constraint':'Key\x20name\x20format\x20must\x20be\x20\x27category:key\x27'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${entity_registrar}','name':'Entity\x20system\x20object\x20(SDK\x20alias:\x20EntityRegistrar)','is_system_address':!![]}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x0}]},{'type':'logic_not','node':{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0x0},{'type':'identifier','identifier':0x2}]}}]},'applicable_industries':['ecommerce','education','travel','subscription','rental'],'relevant_risks':['R-C1-02','R-C3-03','R-C3-04'],'creation_notes':['id_from_submission\x20in\x20write_guard\x20must\x20be\x20of\x20Address\x20type','data_from_submission\x20must\x20match\x20the\x20Repository\x20value_type','System\x20singletons\x20(fixed\x20at\x20chain\x20deployment):\x20Entity\x20object\x20=\x200xaab\x20(SDK\x20alias\x20ENTITY_REGISTRAR_ADDRESS),\x20Registrar\x20=\x200xaaa\x20(SDK\x20alias\x20ENTITY_LINKER_ADDRESS)'],'example_use_case':'E-commerce\x20platform\x20merchant\x20writes\x20product\x20review\x20data;\x20the\x20Guard\x20verifies\x20that\x20the\x20writer\x20is\x20a\x20registered\x20Entity\x20and\x20not\x20a\x20system\x20address.','verifier_constraint_level':'level1_strict'},{'id':'tpl_repository_write_order_holder','scene_id':'repository_write_guard','name':'Order-holder\x20write\x20authorization\x20(order-keyed\x20rows)','description':'Executable\x20write_guard\x20for\x20an\x20ORDER-KEYED\x20repository\x20policy\x20(policy\x20id_from\x20UNSET\x20—\x20row\x20id\x20=\x20the\x20caller-supplied\x20Order\x20address):\x20the\x20Signer\x20must\x20be\x20the\x20ORDER\x27s\x20owner\x20OR\x20a\x20registered\x20order\x20agent,\x20with\x20Service\x20scoping\x20chain-side\x20since\x20protocol\x20v148\x20(bsw4\x20F-06\x20removed\x20the\x20host-binding\x20leg).\x20'+'The\x20identity\x20leaf\x20reads\x20the\x20SAME\x20submitted\x20Order\x20slot\x20the\x20row\x20is\x20keyed\x20by,\x20so\x20a\x20writer\x20cannot\x20author\x20(or\x20resurrect)\x20a\x20row\x20under\x20an\x20order\x20they\x20do\x20not\x20hold.\x20'+'Instantiable\x20form\x20of\x20pattern.repository_write_authorization\x27s\x20identity\x20leaf\x20(order.owner\x20==\x20Signer\x20/\x20order.agent\x20has\x20Signer)\x20—\x20the\x20crowdfunding\x20contribution-ledger\x20shape\x20(R-X1-17:\x20existence-is-not-trust).','recommended_patterns':['P08','P11'],'parameters':[],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'The\x20Order\x20the\x20row\x20is\x20keyed\x20by\x20(row\x20id)\x20—\x20the\x20writer\x20submits\x20the\x20Order\x20address\x20their\x20tooling\x20writes\x20for'},{'identifier':0x1,'b_submission':!![],'value_type':'U64','name':'Row\x20value\x20(bound\x20via\x20policy\x20data_from_submission:\x201;\x20retype\x20to\x20match\x20the\x20policy\x20value_type)'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},'applicable_industries':['crowdfunding','ecommerce','education','retail'],'relevant_risks':['R-X1-17','R-C1-03','R-C3-05'],'creation_notes':['ORDER-KEYED\x20PAIRING\x20(v110,\x20ksc-tn-261024\x20F-01/F-05):\x20the\x20policy\x20declares\x20NO\x20id_from,\x20so\x20the\x20row\x20id\x20is\x20the\x20caller-supplied\x20Order\x20address;\x20this\x20guard\x27s\x20identity\x20leaf\x20reads\x20THE\x20SAME\x20submitted\x20slot\x20(identifier\x200),\x20so\x20write\x20authorization\x20and\x20row\x20keying\x20cannot\x20diverge\x20—\x20a\x20writer\x20may\x20only\x20create,\x20update\x20or\x20ZERO\x20rows\x20under\x20an\x20Order\x20they\x20hold\x20(or\x20their\x20agent\x20holds).\x20Wallet-keyed\x20routing\x20(id_from\x20signer/clock)\x20is\x20the\x20RETIRED\x20pre-v110\x20shape\x20and\x20compile\x20blocks\x20it\x20(CROWDFUNDING_SIGNER_KEYED_ROWS)\x20—\x20never\x20pair\x20this\x20guard\x20with\x20a\x20signer-keyed\x20policy:\x20the\x20escrow-bound\x20aggregate\x20reads\x20such\x20rows\x20as\x200\x20and\x20the\x20goal\x20gate\x20silently\x20bricks.','VALUE\x20BINDING:\x20declare\x20data_from_submission:\x201\x20on\x20the\x20GuardSpec\x20policy\x20so\x20the\x20written\x20VALUE\x20is\x20taken\x20from\x20the\x20verified\x20passport\x20submission\x20(identifier\x201)\x20—\x20the\x20row\x20carries\x20exactly\x20the\x20value\x20the\x20guard-verified\x20write\x20submitted\x20(BK15-F13\x20/\x20R-X1-17\x20row-key\x20automation).\x20Keep\x20the\x20slot\x27s\x20value_type\x20equal\x20to\x20the\x20policy\x20value_type\x20(U64\x20for\x20contribution\x20ledgers).','id_from_submission\x20STAYS\x20UNSET\x20on\x20the\x20policy\x20—\x20a\x20DESIGN\x20choice,\x20not\x20a\x20legality\x20requirement,\x20and\x20the\x20chain\x20polarity\x20is\x20the\x20reverse\x20of\x20what\x20this\x20note\x20used\x20to\x20say:\x20with\x20id_from\x20unset\x20the\x20row\x20id\x20is\x20the\x20caller-supplied\x20Order-address\x20string,\x20and\x20the\x20policy-add\x20validation\x20asserts\x20ONLY\x20that\x20write_guard\x20is\x20non-empty\x20there,\x20so\x20an\x20id_from_submission\x20leg\x20is\x20PERMITTED\x20under\x20id_from\x20none;\x20it\x20is\x20signer/clock\x20routing\x20that\x20FORBIDS\x20it\x20(the\x20id\x20is\x20auto-generated,\x20E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN\x20=\x2023\x20—\x20compile\x20enforces\x20that\x20polarity\x20as\x20REPO_GUARD_SUBMISSION_ID_FORBIDDEN).\x20Leave\x20it\x20unset\x20here\x20because\x20a\x20submission-derived\x20id\x20would\x20re-key\x20rows\x20by\x20wallet\x20and\x20break\x20the\x20order-keyed\x20pairing\x20above.','NEVER\x20arm\x20identifier\x20254\x20on\x20a\x20repository\x20write\x20guard:\x20it\x20is\x20not\x20forward-bound\x20(no\x20task-binding\x20requirement),\x20and\x20a\x20254\x20ONCE-FOR-OBJECT\x20slot\x20would\x20abort\x20the\x20SECOND\x20write\x20—\x20the\x20withdrawal\x20ZEROING\x20(an\x20upsert\x20of\x200\x20through\x20the\x20same\x20guard,\x20the\x20idempotent\x20retraction)\x20—\x20bricking\x20the\x20F-05\x20retraction\x20with\x20E_ONCE_TRIGGERED.','write_once\x20discipline:\x20leave\x20FALSE\x20on\x20a\x20contribution\x20ledger\x20—\x20the\x20zeroing\x20upsert\x20legitimately\x20overwrites;\x20arm\x20write_once\x20only\x20on\x20append-only\x20evidence\x20where\x20no\x20retraction\x20exists\x20(one-review-per-account\x20shapes).','MIXED\x20RETURN-TYPE\x20CONSTRUCTION\x20(same\x20as\x20tpl_allocator_identity_set_order_holder):\x20query\x201562\x20(order.owner)\x20returns\x20Address\x20→\x20wrap\x20in\x20logic_equal\x20with\x20context(Signer);\x20query\x201567\x20(order.agent\x20has)\x20returns\x20Bool\x20→\x20use\x20directly\x20as\x20the\x20logic_or\x20child\x20with\x20parameters:\x20[context(Signer)].\x20Compose\x20by\x20COPY.','PAIR,\x20NOT\x20SUBSTITUTE:\x20the\x20escrow-bound\x20aggregate\x20(query\x201179\x20per-row\x20min(row_value,\x20order.amount\x20of\x20the\x20row\x20id))\x20is\x20the\x20VALUE-truth\x20backstop;\x20this\x20guard\x20is\x20the\x20ATTRIBUTION\x20boundary\x20(who\x20may\x20write/zero\x20the\x20row).\x20Ship\x20both\x20—\x20an\x20unbound\x20write_guard\x20makes\x20the\x20aggregate\x20forgeable\x20(R-X1-17),\x20and\x20the\x20guard\x20alone\x20without\x20the\x20bound\x20aggregate\x20still\x20lets\x20an\x20inflated\x20row\x20flip\x20a\x20GO\x20decision\x20(F-01).','Residual\x20boundary\x20(disclose,\x20do\x20not\x20hide):\x20the\x20row\x20id\x20is\x20a\x20caller-supplied\x20STRING,\x20so\x20the\x20chain\x20cannot\x20express\x20\x27row\x20id\x20==\x20the\x20submitted\x20Order\x20address\x27\x20inside\x20the\x20guard\x20—\x20a\x20holder\x20could\x20key\x20THEIR\x20row\x20under\x20ANOTHER\x20order\x27s\x20address.\x20The\x201179\x20bound\x20aggregate\x20caps\x20any\x20such\x20row\x20at\x20that\x20order\x27s\x20escrowed\x20amount\x20and\x20the\x201051\x20live-escrow\x20leg\x20keeps\x20drained\x20orders\x20out\x20of\x20the\x20candidate\x20set,\x20so\x20the\x20mis-key\x20cannot\x20mint\x20value;\x20it\x20can\x20only\x20misplace\x20attribution.\x20Zeroing\x20stays\x20holder-gated\x20by\x20this\x20leaf.'],'example_use_case':'All-or-nothing\x20campaign\x20contribution\x20ledger:\x20a\x20backer\x27s\x20tooling\x20writes\x20(or\x20zeroes)\x20the\x20contribution\x20row\x20keyed\x20by\x20THEIR\x20Order\x20address\x20through\x20the\x20passport-bearing\x20data\x20write;\x20this\x20guard\x20proves\x20the\x20writer\x20holds\x20that\x20Order\x20(owner\x20or\x20agent)\x20—\x20a\x20forged\x20row\x20under\x20anyone\x20else\x27s\x20order\x20aborts\x20at\x20the\x20write.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_repository_write_allowlist','scene_id':'repository_write_guard','name':'Allowlist\x20write\x20authorization\x20(repository\x20rows)','description':'Executable\x20write_guard\x20that\x20binds\x20WHO\x20may\x20write\x20a\x20repository\x20policy\x20to\x20a\x20publish-time\x20address\x20'+'allowlist:\x20vec_contains_address[allowlist_vec,\x20context(Signer)].\x20The\x20writer\x20identity\x20is\x20chosen\x20by\x20'+'the\x20merchant\x20BEFORE\x20publish\x20(staff\x20accounts,\x20registered\x20hunters,\x20institution\x20signers)\x20and\x20freezes\x20'+'with\x20the\x20Guard\x20(IMMUT-001)\x20—\x20the\x20submitted-writer\x20self-report\x20shape\x20(tpl_write_guard_type_check)\x20'+'proves\x20nothing,\x20because\x20the\x20caller\x20fills\x20their\x20own\x20address.\x20Pair\x20ONE\x20instance\x20per\x20EVIDENCE\x20KIND:\x20'+'rows\x20under\x20an\x20order-keyed\x20policy\x20share\x20ONE\x20row\x20id\x20(the\x20order\x20address),\x20so\x20two\x20kinds\x20on\x20one\x20policy\x20'+'overwrite\x20each\x20other\x20(pdd\x20F-04)\x20—\x20one\x20evidence\x20kind,\x20one\x20policy,\x20one\x20write\x20guard.','recommended_patterns':['P08','P11'],'parameters':[{'name':'allowed_writers','type':'vec_address','description':'Addresses\x20authorized\x20to\x20write\x20the\x20paired\x20policy\x20(JSON\x20array\x20of\x20address\x20strings).\x20The\x20default\x20is\x20a\x20PLACEHOLDER\x20that\x20fails\x20loud\x20at\x20publish\x20—\x20override\x20it\x20at\x20generation\x20with\x20the\x20real\x20writer\x20set','required':![],'default':'[\x22WRITER_ACCOUNT_ADDRESS\x22]','constraint':'Each\x20entry\x20must\x20be\x20a\x20valid\x20address;\x20an\x20EMPTY\x20list\x20makes\x20the\x20guard\x20constant-false\x20and\x20welds\x20every\x20write\x20shut\x20(compile\x20hard-blocks\x20an\x20empty\x20vec\x20on\x20repository\x20mounts\x20—\x20F-04\x20polarity)'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'VecAddress','value':'${allowed_writers}','name':'Authorized\x20writer\x20allowlist\x20(Signer\x20must\x20be\x20a\x20member;\x20frozen\x20at\x20publish\x20—\x20IMMUT-001)'}],'example_root':{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x0},{'type':'context','context':'Signer'}]},'applicable_industries':['ecommerce','education','travel','freelance','rental','crowdfunding'],'relevant_risks':['R-C1-02','R-C3-03','R-C3-05','R-X1-17'],'creation_notes':['TAUTOLOGY\x20ANTI-PATTERN\x20(why\x20this\x20exists):\x20a\x20write\x20guard\x20whose\x20only\x20Signer\x20leg\x20compares\x20against\x20a\x20b_submission:true\x20slot\x20(the\x20caller\x27s\x20own\x20address)\x20or\x20excludes\x20a\x20system\x20constant\x20authorizes\x20EVERYONE\x20—\x20audit\x20rule\x20WRITE-GUARD-TAUTOLOGY-01\x20blocks\x20it\x20at\x20plan\x20time.\x20Identity\x20chosen\x20at\x20WRITE\x20time\x20is\x20not\x20identity.','POLARITY\x20(F-04,\x20algr9):\x20vec_contains_address\x20over\x20an\x20EMPTY\x20vector\x20is\x20constant-false\x20—\x20the\x20guard\x20welds\x20every\x20write\x20shut\x20(fail-closed),\x20and\x20compile\x20hard-blocks\x20the\x20empty-vec\x20shape\x20on\x20repository\x20mounts\x20with\x20both\x20legal\x20exits.\x20The\x20shipped\x20default\x20is\x20a\x20single\x20PLACEHOLDER\x20string\x20that\x20also\x20fails\x20loud\x20at\x20publish\x20(invalid\x20address)\x20—\x20an\x20unpublishable\x20guard\x20beats\x20a\x20silently-open\x20one;\x20override\x20allowed_writers\x20at\x20generation.','ONE\x20EVIDENCE\x20KIND,\x20ONE\x20POLICY\x20(pdd\x20F-04):\x20an\x20order-keyed\x20policy\x20(id_from\x20unset/none)\x20keys\x20every\x20row\x20by\x20the\x20SUBMITTED\x20order\x20address\x20—\x20one\x20row\x20id\x20per\x20order.\x20Two\x20evidence\x20kinds\x20on\x20one\x20policy\x20overwrite\x20each\x20other\x20(the\x20later\x20write\x20replaces\x20the\x20earlier\x20row),\x20and\x20write_once\x20then\x20bricks\x20the\x20second\x20kind\x20instead.\x20Split\x20kinds\x20into\x20distinct\x20policies\x20(\x27sourcing\x27\x20/\x20\x27distribution\x27\x20/\x20\x27return_receipt\x27\x20...)\x20and\x20mount\x20ONE\x20allowlist\x20guard\x20instance\x20per\x20policy.','WRITE_ONCE\x20DISCIPLINE\x20(W5-13):\x20final\x20evidence\x20—\x20a\x20record\x20whose\x20rewrite\x20is\x20the\x20attack\x20(report\x20rows,\x20triage\x20bands,\x20RMA\x20receipts,\x20sourcing/distribution\x20records)\x20—\x20pairs\x20with\x20policy\x20write_once:true\x20so\x20even\x20an\x20ALLOWLISTED\x20writer\x20cannot\x20overwrite\x20history\x20(pdd\x20F-18\x27s\x20overwrite\x20half).\x20Deliberate\x20exceptions:\x20revision-round\x20deliverables\x20(design-contest\x20final_files\x20re-writes\x20on\x20Redeliver)\x20and\x20renewal-period\x20content\x20rows\x20(OFN5-10\x20known\x20face)\x20stay\x20rewriteable\x20—\x20write_once\x20there\x20would\x20brick\x20the\x20business\x20loop.','PAIR\x20WITH\x20THE\x20READER\x27S\x20ORDER-PIN:\x20an\x20order-keyed\x20evidence\x20policy\x20is\x20read\x20by\x20the\x20row-presence\x20twins\x20(tpl_repository_row_present\x20/\x20tpl_holder_confirm_evidence_gate)\x20whose\x20candidate\x20set\x20carries\x20the\x20order\x20pin\x20—\x20the\x20write\x20guard\x20decides\x20WHO\x20authors,\x20the\x20pin\x20decides\x20WHICH\x20order\x27s\x20row\x20counts\x20(R-X1-17:\x20existence\x20is\x20not\x20trust).','CHAIN\x20RESIDUALS\x20(registered\x20protocol\x20asks\x20—\x20no\x20harness\x20workaround\x20exists):\x20(1)\x20writer\x20∈\x20permission-entity\x20membership\x20as\x20a\x20native\x20write-guard\x20primitive\x20(the\x20allowlist\x20vector\x20freezes\x20at\x20publish;\x20staff\x20ROTATION\x20needs\x20a\x20rebuild);\x20(2)\x20composite\x20row\x20keys\x20(order\x20+\x20tag)\x20so\x20one\x20policy\x20could\x20hold\x20several\x20kinds\x20without\x20collision;\x20(3)\x20data_remove\x20must\x20REFUSE\x20to\x20delete\x20a\x20write_once\x20row\x20and\x20emit\x20an\x20event\x20—\x20the\x20on-chain\x20remove\x20path\x20checks\x20neither\x20today,\x20so\x20\x27差评/证据永久公开\x27\x20is\x20not\x20yet\x20protocol-true\x20(W5-13/ks7\x20F-16).'],'example_use_case':'Bug-bounty\x20evidence\x20repository:\x20the\x20\x27report\x27\x20policy\x20(order-keyed,\x20value\x20=\x20the\x20recorded\x20reporter\x20address,\x20write_once)\x20mounts\x20this\x20guard\x20with\x20the\x20program\x27s\x20registered\x20hunter\x20addresses\x20—\x20an\x20outsider\x20can\x20no\x20longer\x20pre-write\x20the\x20reporter\x20row\x20and\x20front-run\x20the\x20real\x20hunter\x27s\x20bounty\x20(h1w9\x20F-03);\x20the\x20triage\x20\x27triage_band\x27\x20policy\x20mounts\x20its\x20own\x20instance\x20pinned\x20to\x20the\x20triager.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_repository_mutual_consent','scene_id':'repository_write_guard','name':'Mutual-consent\x20acceptance\x20write\x20guard\x20(byte-equal\x20to\x20the\x20offer\x20row)','description':'Write_guard\x20for\x20the\x20RESPONSE\x20policy\x20of\x20a\x20multi-party\x20consent\x20Repository\x20(partial-refund\x20amount,\x20settlement\x20split,\x20'+'order\x20amendment,\x20delivery\x20acceptance\x20—\x20any\x20negotiated\x20value):\x20the\x20value\x20the\x20responding\x20party\x20writes\x20is\x20taken\x20from\x20'+'their\x20passport\x20submission\x20slot,\x20and\x20this\x20guard\x20reads\x20the\x20PROPOSAL\x20row\x20(query_repository_data,\x201167)\x20with\x20the\x20'+'submitted\x20VecU8\x20as\x20a\x20condition\x20—\x20the\x20builder\x20folds\x20both\x20into\x20ONE\x20multi-operand\x20TypeLogicEqual(90)\x20(all-equal\x20BCS\x20'+'byte\x20comparison),\x20so\x20the\x20kernel\x20ABORTS\x20the\x20response\x20write\x20unless\x20the\x20accepted\x20bytes\x20equal\x20the\x20proposal\x20row\x20'+'byte-for-byte.\x20The\x20response\x20row\x20is\x20therefore\x20chain-proof\x20consent\x20to\x20exactly\x20what\x20was\x20proposed,\x20readable\x20at\x20'+'settlement\x20time\x20by\x20mere\x20row\x20existence\x20(query_repository_data_has,\x201166).','recommended_patterns':['P13','P15'],'parameters':[{'name':'repository_name','type':'string','description':'Consent\x20Repository\x20object\x20name\x20(hosts\x20BOTH\x20the\x20offer\x20and\x20acceptance\x20policies;\x20circular\x20ref\x20via\x20P16)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'offer_writer','type':'address','description':'The\x20proposing\x20party\x27s\x20account\x20address\x20(the\x20merchant\x20in\x20a\x20refund\x20flow;\x20the\x20counterparty\x20in\x20any\x20other\x20consent\x20flow)','required':!![],'constraint':'Must\x20be\x20the\x20account\x20that\x20writes\x20the\x20proposal\x20row\x20(the\x20proposal\x20policy\x20keys\x20rows\x20by\x20signer)'},{'name':'offer_key','type':'string','description':'Offer\x20policy\x20key\x20(e.g.\x20\x27refund_offer\x27)','required':!![],'default':'refund_offer','constraint':'Must\x20exactly\x20match\x20the\x20offer\x20policy\x20name\x20on\x20the\x20Repository\x20(case-sensitive)'}],'example_table':[{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Consent\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${offer_writer}','name':'Offer\x20writer\x20(row\x20id\x20under\x20the\x20offer\x20policy\x27s\x20id_from=Signer\x20routing)'},{'identifier':0x3,'b_submission':!![],'value_type':'VecU8','name':'Accepted\x20bytes\x20—\x20the\x20acceptor\x27s\x20submission\x20slot;\x20bind\x20the\x20acceptance\x20policy\x20with\x20data_from_submission:\x203'}],'example_root':{'type':'query_repository_data','object':{'identifier':0x1},'id':{'identifier':0x2},'key':'${offer_key}','conditions':[{'identifier':0x3}]},'applicable_industries':['delivery','group_buy','retail','general'],'relevant_risks':['R-X1-17','R-C1-03'],'creation_notes':['THREE-STAGE\x20WIRING\x20(pattern.mutual_consent_attestation):\x20(1)\x20PROPOSAL\x20policy\x20on\x20the\x20same\x20Repository\x20—\x20id_from=Signer,\x20write_once=true,\x20NO\x20write_guard\x20(each\x20writer\x20owns\x20their\x20row;\x20the\x20flag\x20makes\x20the\x20proposal\x20immutable).\x20(2)\x20RESPONSE\x20policy\x20—\x20id_from=Signer,\x20data_from_submission:\x203,\x20write_guard\x20=\x20THIS\x20guard.\x20(3)\x20EXECUTION\x20—\x20the\x20allocator-or-keeper\x20gate\x20is\x20the\x20bare\x20query_repository_data_has\x20over\x20the\x20response\x20key\x20(Bool,\x20direct\x20root\x20leg):\x20settlement\x20pays\x20ONLY\x20when\x20the\x20response\x20row\x20exists.\x20N-PARTY:\x20additional\x20parties\x20each\x20get\x20their\x20own\x20signer-keyed\x20policy\x20row;\x20quorum/total\x20predicates\x20over\x20rows\x20fold\x20into\x20the\x20execution\x20leg\x20via\x20the\x20where-family\x20(count_where/sum_where,\x201179\x20for\x20order-bound\x20real\x20values).','WHAT\x20IS\x20CHAIN-ENFORCED\x20vs\x20SELF-DISCIPLINED:\x20the\x20byte\x20equality\x20of\x20stage\x20(2)\x20is\x20kernel-forced\x20(a\x20mismatched\x20acceptance\x20cannot\x20exist);\x20the\x20OFFER\x27s\x20fairness\x20is\x20NOT\x20—\x20\x27an\x20offer\x20exists\x27\x20never\x20proves\x20the\x20amount\x20is\x20right\x20(R-X1-17).\x20Disclose\x20which\x20links\x20are\x20enforced\x20and\x20which\x20are\x20discipline\x20in\x20the\x20build\x20notes.','BYTE\x20EQUALITY\x20ONLY:\x20the\x20consent\x20check\x20is\x20full-byte\x20BCS\x20comparison\x20(TypeLogicEqual\x2090,\x20all-equal).\x20Numeric\x20predicates\x20on\x20the\x20accept\x20leg\x20(amount\x20<=\x20X)\x20are\x20NOT\x20expressible\x20—\x20enumerate\x20the\x20negotiated\x20amounts\x20as\x20discrete\x20byte\x20values\x20or\x20route\x20to\x20arbitration.','OFFER\x20ROW\x20MUST\x20EXIST:\x20query_repository_data\x20on\x20a\x20MISSING\x20(id,\x20key)\x20returns\x20an\x20EMPTY\x20blob\x20and\x20an\x20empty\x20blob\x20equals\x20an\x20empty\x20submission\x20—\x20this\x20guard\x20must\x20query\x20the\x20OFFER\x20row\x20(write_once\x20guarantees\x20it\x20exists\x20and\x20is\x20immutable\x20once\x20the\x20flow\x20reaches\x20acceptance),\x20never\x20the\x20acceptance\x20row\x20itself.','LEGACY\x20QUERIES,\x20NO\x20PROTOCOL\x20GATE:\x201166/1167\x20predate\x20the\x20v136\x20sentinel\x20protocol\x20—\x20a\x20tombstoned\x20row\x20reads\x20as\x20false\x20(1166)\x20/\x20empty\x20blob\x20(1167)\x20instead\x20of\x20aborting,\x20and\x20neither\x20query\x20carries\x20the\x20quote_guard\x20impack\x20gate\x20(unlike\x201173-1177),\x20so\x20no\x20passport\x20bundling\x20is\x20required.','PASSPORT-ISSUER\x20TRUST\x20BOUNDARY:\x20the\x20equality\x20is\x20enforced\x20against\x20the\x20passport\x20BUILDER\x27s\x20bytes\x20—\x20the\x20issuer\x20is\x20normally\x20the\x20acceptor\x27s\x20own\x20client;\x20delegating\x20issuance\x20to\x20a\x20third\x20party\x20reintroduces\x20trust.\x20State\x20this\x20in\x20the\x20build\x20notes.','NO\x20SLOT\x20254:\x20a\x20repository\x20write\x20guard\x20is\x20not\x20forward-bound\x20—\x20the\x20task-binding\x20slot\x20is\x20neither\x20required\x20nor\x20harmless\x20here\x20(see\x20tpl_repository_write_order_holder\x27s\x20once-slot\x20discipline).\x20Arm\x20write_once=true\x20on\x20the\x20acceptance\x20policy\x20too:\x20a\x20consent\x20must\x20not\x20be\x20silently\x20rewritable\x20—\x20a\x20changed\x20deal\x20is\x20a\x20NEW\x20offer\x20plus\x20a\x20NEW\x20acceptance,\x20never\x20an\x20overwrite.'],'example_use_case':'Partial-refund\x20consent\x20ledger\x20(the\x20worked\x20instance\x20of\x20the\x20general\x20shape\x20—\x20the\x20same\x20wiring\x20serves\x20settlement\x20splits,\x20order\x20amendments,\x20acceptance\x20sign-offs\x20and\x20batch\x20terms\x20with\x20renamed\x20keys):\x20the\x20merchant\x20writes\x20the\x20quoted\x20amount\x20bytes\x20under\x20\x27refund_offer\x27\x20(write_once,\x20signer-keyed);\x20the\x20buyer\x20writes\x20\x27refund_accept\x27\x20through\x20this\x20guard\x20—\x20the\x20kernel\x20aborts\x20unless\x20the\x20buyer\x27s\x20submitted\x20bytes\x20equal\x20the\x20merchant\x27s\x20offer\x20byte-for-byte;\x20the\x20refund\x20allocator\x27s\x20gate\x20reads\x20response\x20existence\x20(1166)\x20before\x20paying.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_usage_guard_threshold','scene_id':'arbitration_usage_guard','name':'Dispute\x20initiation\x20threshold\x20validation','description':'Verifies\x20that\x20the\x20dispute\x20initiator\x20meets\x20minimum\x20conditions\x20(e.g.\x20order\x20amount,\x20time\x20window),\x20filtering\x20out\x20meaningless\x20disputes.','recommended_patterns':['P02','P10'],'parameters':[{'name':'min_amount','type':'number','description':'Minimum\x20dispute\x20amount\x20threshold','required':!![],'constraint':'A\x20reasonable\x20threshold\x20is\x20recommended;\x20too\x20high\x20hinders\x20user\x20rights\x20protection,\x20too\x20low\x20produces\x20many\x20invalid\x20disputes'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Dispute-related\x20Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'U64','value':'${min_amount}','name':'Minimum\x20dispute\x20amount\x20threshold'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'order.amount','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x1}]},'applicable_industries':['ecommerce','rental','education','travel'],'relevant_risks':['R-X1-01','R-X1-07','R-C3-03'],'creation_notes':['usage_guard\x20is\x20iterable\x20(Arbitration\x20can\x20be\x20updated)','AND\x20conditions\x20should\x20not\x20be\x20too\x20many\x20(R-X1-07);\x20≤3\x20conditions\x20recommended','When\x20Arbitration\x20bPaused=true,\x20blocking\x20takes\x20priority\x20(checked\x20before\x20Guard)'],'example_use_case':'Rental\x20service\x20dispute:\x20only\x20disputes\x20with\x20order\x20amount\x20≥\x2010\x20WOW\x20are\x20accepted,\x20filtering\x20out\x20small-amount\x20conflicts.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_voting_guard_numeric_weight','scene_id':'arbitration_voting_guard','name':'Numeric\x20voting\x20weight\x20validation','description':'Panel-membership\x20voting_guard\x20for\x20weighted\x20arbitration\x20panels:\x20the\x20vote\x20passes\x20only\x20when\x20the\x20tx\x20signer\x20is\x20on\x20the\x20authorized\x20arbitrator\x20list\x20(vec_contains_address\x20over\x20the\x20panel\x20vector\x20—\x20the\x20writer-set\x20identity\x20idiom).\x20CHAIN\x20FACT:\x20no\x20address-to-weight\x20lookup\x20primitive\x20exists\x20—\x20the\x20per-vote\x20WEIGHT\x20rides\x20the\x20vote-time\x20binding\x20(FixedValue\x20flat\x20weight,\x20or\x20GuardIdentifier\x20extracting\x20the\x20voter\x27s\x20own\x20submitted\x20value,\x20forgery-prone\x20R-C3-02);\x20arb.voted.weight\x20(id\x201407,\x20U32)\x20only\x20reads\x20back\x20the\x20weight\x20of\x20an\x20ALREADY-CAST\x20vote\x20(audit\x20leg),\x20it\x20cannot\x20assign\x20one.','recommended_patterns':['P12'],'parameters':[{'name':'arbiter_panel','type':'vec_address','description':'Authorized\x20arbitrator\x20address\x20list\x20(VecAddress)\x20the\x20vote\x20caller\x20is\x20checked\x20against','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Vec<Address>','value':'${arbiter_panel}','name':'Authorized\x20arbitrator\x20address\x20list'}],'example_root':{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x0},{'type':'context','context':'Signer'}]},'applicable_industries':['ecommerce','rental','education','travel'],'relevant_risks':['R-C3-02','R-C2-01','R-C2-02'],'creation_notes':['The\x20GuardIdentifier\x20for\x20voting_guard\x20must\x20be\x20numeric\x20(U8-U256),\x20otherwise\x20E_GUARD_IDENTIFIER_NOT_NUMBER','Caller\x20identity\x20is\x20the\x20tx\x20Signer\x20context\x20—\x20never\x20a\x20voter-submitted\x20address\x20row\x20(a\x20b_submission=true\x20identity\x20carries\x20forgery\x20risk,\x20R-C3-02\x20critical)','SHAPE:\x20vec_contains_address\x20takes\x20a\x20NODES\x20ARRAY\x20—\x20nodes[0]\x20the\x20VecAddress\x20panel\x20vector,\x20nodes[1]\x20the\x20Signer\x20context.\x20The\x20former\x20vec/target\x20key\x20shape\x20was\x20never\x20a\x20chain\x20or\x20schema\x20shape\x20(batch-26\x20③-d\x20B-2\x20allowlist\x20exit)','Weight\x20sources\x20on\x20chain:\x20FixedValue\x20(flat)\x20or\x20GuardIdentifier\x20(per-voter\x20submitted,\x20R-C3-02);\x20arb.voted.weight\x20(1407)\x20is\x20a\x20post-vote\x20readback\x20—\x20tiered\x20panels\x20express\x20rank\x20through\x20the\x20vote\x20binding\x20/\x20the\x20machine\x20flow\x20(tpl_machine_weighted_voting),\x20never\x20through\x20a\x20lookup\x20in\x20this\x20guard'],'example_use_case':'3-person\x20arbitration\x20panel:\x20only\x20listed\x20arbitrators\x20may\x20vote\x20(this\x20guard);\x20the\x20chief-3\x20/\x20regular-1\x20weights\x20ride\x20the\x20vote-time\x20binding,\x20and\x20the\x20majority\x20threshold\x20is\x20counted\x20Arb-side.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_voting_guard_open_vote','scene_id':'arbitration_voting_guard','name':'Open-vote\x20gate\x20(any\x20Passport\x20holder,\x20flat\x20fixed\x20weight)','description':'The\x20standard\x20voting_guard\x20for\x20a\x20PUBLIC\x20arbitration\x20venue:\x20an\x20always-true\x20guard\x20paired\x20with\x20a\x20'+'FixedValue\x20weight,\x20so\x20every\x20Passport\x20holder\x20may\x20vote\x20and\x20every\x20vote\x20counts\x20at\x20the\x20same\x20weight.\x20'+'This\x20is\x20the\x20sanctioned\x20fix\x20for\x20the\x20F-36\x20vote-lock:\x20an\x20Arbitration\x20whose\x20voting_guard\x20is\x20EMPTY\x20'+'does\x20NOT\x20have\x20open\x20voting\x20—\x20plain\x20votes\x20then\x20hard-require\x20the\x20vote\x20permission\x20(358)\x20on\x20the\x20'+'arbitration\x27s\x20Permission,\x20which\x20by\x20default\x20only\x20the\x20creator-admin\x20holds,\x20so\x20a\x20dispute\x20'+'dead-locks\x20when\x20that\x20admin\x20is\x20unresponsive\x20(R-ARB-VOTE-LOCK\x20blocks\x20the\x20service\x20publish).\x20'+'Binding\x20this\x20guard\x20is\x20the\x20honest,\x20explicit\x20way\x20to\x20declare\x20\x27the\x20voter\x20universe\x20is\x20everyone\x27.','recommended_patterns':['P12'],'parameters':[{'name':'vote_weight','type':'number','description':'FixedValue\x20vote\x20weight\x20per\x20passing\x20voter','required':!![],'default':'1','constraint':'u32\x20range\x201-4294967295;\x201\x20=\x20one\x20person\x20one\x20vote.\x20Weighted\x20panels\x20(rank/token\x20tiers)\x20need\x20tpl_voting_guard_numeric_weight\x20instead'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Bool','value':!![],'name':'Open\x20vote\x20—\x20every\x20Passport\x20holder\x20passes\x20(Bool\x20table\x20constants\x20are\x20RAW\x20booleans;\x20the\x20string\x20\x22true\x22\x20fails\x20creation:\x20value_type=0\x20requires\x20a\x20boolean\x20—\x20klook-mn-261019\x20KLM-FIND-04)'}],'example_root':{'type':'identifier','identifier':0x0},'applicable_industries':['community','public_goods','ecommerce','rental','travel','education'],'relevant_risks':['R-X1-17'],'creation_notes':['R-ARB-VOTE-LOCK:\x20an\x20EMPTY\x20voting_guard\x20is\x20NOT\x20open\x20voting\x20—\x20plain\x20votes\x20hard-require\x20the\x20vote\x20permission\x20(358),\x20admin-only\x20by\x20default,\x20and\x20a\x20dispute\x20dead-locks\x20when\x20the\x20admin\x20is\x20unresponsive\x20(crs9-F-36).\x20This\x20guard\x20is\x20the\x20declared\x20fix;\x20the\x20voting_guard\x20field\x20stays\x20mutable\x20after\x20publish\x20(op=\x27set\x27)','DEFAULT\x20PRESCRIPTION\x20(B10,\x20ksg-mn-261022):\x20build\x20plans\x20treat\x20binding\x20THIS\x20guard\x20as\x20the\x20default\x20post-deploy\x20step\x20for\x20any\x20venue\x20meant\x20to\x20accept\x20community\x20votes\x20(arbitration_unpause\x20then\x20voting_guard_open_vote);\x20a\x20deliberately\x20closed\x20panel\x20is\x20the\x20exception\x20and\x20binds\x20tpl_voting_guard_numeric_weight\x20instead\x20—\x20never\x20leave\x20the\x20field\x20empty\x20by\x20omission','Once\x20voting_guard\x20is\x20non-empty,\x20every\x20vote\x20call\x20MUST\x20carry\x20the\x20voting_guard\x20in\x20its\x20payload\x20(guard\x20reference\x20+\x20the\x20voter\x27s\x20Passport\x20credential);\x20a\x20plain\x20vote\x20aborts\x20on-chain\x20with\x20E_VOTING_GUARD_USED\x20(abort\x202)','The\x20constant-true\x20root\x20is\x20a\x20TAUTOLOGY\x20BY\x20DESIGN\x20—\x20under\x20the\x20vote\x20binding\x20hint\x20the\x20analyzer\x20grades\x20it\x20low/info\x20(the\x20declared\x20voter\x20universe);\x20without\x20a\x20binding\x20hint\x20the\x20generic\x20R-X1-17\x20warning\x20fires,\x20which\x20is\x20expected\x20for\x20an\x20unbound\x20draft','Weight\x20semantics:\x20FixedValue\x20=\x20flat\x20weight\x20per\x20passing\x20voter;\x20GuardIdentifier\x20would\x20extract\x20a\x20per-voter\x20weight\x20from\x20the\x20voter\x27s\x20own\x20submission\x20(forgery-prone\x20—\x20prefer\x20FixedValue\x20for\x20open\x20votes,\x20R-C3-02).\x20Weighted\x20panels\x20(rank/token\x20tiers)\x20belong\x20in\x20tpl_voting_guard_numeric_weight','Mainnet-verified\x20(crs9\x20D3,\x202026-10-15):\x20a\x20guard\x20of\x20exactly\x20this\x20shape\x20carried\x20the\x20arbitration\x20vote;\x20ballots\x20counted\x20at\x20weight\x201\x20through\x20the\x20open\x20voting_guard'],'example_use_case':'A\x20third-party\x20arbitration\x20venue\x20for\x20a\x20marketplace\x20service:\x20any\x20community\x20member\x20may\x20vote\x20on\x20disputes,\x20one\x20vote\x20each,\x20and\x20vote\x20counting\x20never\x20depends\x20on\x20a\x20single\x20admin\x20staying\x20responsive.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_voting_guard_party_only','scene_id':'arbitration_voting_guard','name':'Party-only\x20vote\x20gate\x20(buyer\x20of\x20the\x20disputed\x20order,\x20or\x20the\x20venue\x20panel)','description':'The\x20voting_guard\x20for\x20a\x20CLOSED\x20arbitration\x20venue\x20where\x20only\x20the\x20DISPUTE\x20PARTIES\x20may\x20vote:\x20the\x20tx\x20'+'signer\x20passes\x20as\x20(a)\x20a\x20member\x20of\x20the\x20declared\x20panel\x20vector\x20(venue\x20arbitrators\x20+\x20permission\x20'+'owner/admin),\x20OR\x20(b)\x20the\x20OWNER\x20of\x20the\x20disputed\x20Order\x20—\x20and\x20the\x20submitted\x20order\x20is\x20bound\x20to\x20the\x20'+'case\x20by\x20an\x20arb.order\x20==\x20order\x20leg,\x20so\x20a\x20voter\x20cannot\x20pose\x20as\x20a\x20party\x20by\x20submitting\x20an\x20unrelated\x20'+'order\x20they\x20happen\x20to\x20own.\x20This\x20is\x20the\x20anti-shape\x20of\x20tpl_voting_guard_open_vote:\x20an\x20ALWAYS-TRUE\x20'+'voting_guard\x20declares\x20\x27the\x20voter\x20universe\x20is\x20everyone\x27,\x20which\x20on\x20a\x20commercial\x20venue\x20let\x20ANY\x20'+'outsider\x20vote\x20on\x20a\x20live\x20case\x20(upw2-mn\x20F-37\x20sibling\x20report\x20TBPM9\x20O6-02:\x20mainnet\x20pddk-b4,\x20a\x20'+'stranger\x20swung\x20a\x20party\x20ballot).\x20Use\x20open_vote\x20only\x20for\x20deliberately\x20public\x20venues;\x20use\x20THIS\x20'+'guard\x20whenever\x20ballots\x20should\x20track\x20the\x20parties\x27\x20commercial\x20stakes.','recommended_patterns':['P12','P02'],'parameters':[{'name':'party_panel','type':'vec_address','description':'Voting\x20panel\x20(VecAddress):\x20venue\x20arbitrators\x20+\x20the\x20Arbitration\x20permission\x27s\x20owner/admin\x20addresses','required':!![],'constraint':'Each\x20address\x20valid\x20and\x20unique;\x20the\x20panel\x20covers\x20the\x20STAFF\x20face\x20of\x20the\x20venue\x20—\x20the\x20buyer\x20face\x20is\x20chain-derived\x20from\x20the\x20disputed\x20order,\x20never\x20listed\x20here'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'The\x20disputed\x20Order\x20(submitted\x20at\x20vote\x20time\x20—\x20the\x20client\x20pre-fills\x20it\x20from\x20the\x20case\x27s\x20order\x20field;\x20the\x20guard\x20reads\x20its\x20on-chain\x20owner,\x20so\x20submitting\x20someone\x20else\x27s\x20order\x20only\x20proves\x20THEIR\x20ownership,\x20never\x20the\x20submitter\x27s)'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','object_type':'Arb','name':'The\x20Arb\x20case\x20object\x20(submitted\x20at\x20vote\x20time\x20—\x20the\x20vote\x20target;\x20the\x20arb.order\x20leg\x20pins\x20the\x20order\x20to\x20THIS\x20case)'},{'identifier':0x2,'b_submission':![],'value_type':'Vec<Address>','value':'${party_panel}','name':'Voting\x20panel:\x20venue\x20arbitrators\x20+\x20permission\x20owner/admin'}],'example_root':{'type':'logic_or','nodes':[{'type':'vec_contains_address','nodes':[{'type':'identifier','identifier':0x2},{'type':'context','context':'Signer'}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'logic_equal','nodes':[{'type':'query','query':'arb.order','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x0}]}]}]},'applicable_industries':['ecommerce','rental','education','travel','freelance'],'relevant_risks':['R-C3-02','R-C2-01','R-C2-02'],'creation_notes':['UP9-VOTE\x20(tbpm9\x20O6-02):\x20an\x20always-true\x20voting_guard\x20makes\x20EVERY\x20Passport\x20holder\x20a\x20voter\x20—\x20on\x20a\x20party-intended\x20venue\x20that\x20is\x20a\x20ballot-integrity\x20hole\x20(mainnet\x20pddk-b4:\x20an\x20outsider\x20voted\x20on\x20a\x20live\x20case).\x20The\x20voter\x20universe\x20must\x20be\x20DECLARED,\x20and\x20a\x20commercial\x20venue\x27s\x20universe\x20is\x20the\x20parties\x20+\x20the\x20venue\x20staff,\x20which\x20is\x20exactly\x20this\x20guard\x27s\x20two\x20legs','THE\x20ORDER\x20LEG\x20IS\x20THE\x20ANTI-SPOOF:\x20order.owner\x20is\x20a\x20chain\x20read\x20against\x20the\x20SUBMITTED\x20order\x20address,\x20so\x20leg\x20(b)\x20alone\x20would\x20pass\x20any\x20buyer\x20on\x20ANY\x20of\x20their\x20own\x20orders\x20—\x20the\x20paired\x20arb.order\x20==\x20order\x20leg\x20pins\x20the\x20submitted\x20order\x20to\x20the\x20case\x20being\x20voted.\x20Both\x20submitted\x20slots\x20(0:\x20Order,\x201:\x20Arb)\x20are\x20client-prefilled\x20from\x20the\x20case,\x20never\x20typed\x20by\x20hand','Panel\x20leg\x20=\x20the\x20STAFF\x20face:\x20venue\x20arbitrators\x20AND\x20the\x20Arbitration\x20permission\x27s\x20owner/admin\x20(the\x20accounts\x20that\x20could\x20otherwise\x20vote\x20through\x20permission\x20358\x20on\x20the\x20empty-guard\x20path).\x20Address-list\x20it\x20explicitly\x20—\x20the\x20permission-index\x20identity\x20is\x20NOT\x20expressible\x20inside\x20a\x20voting_guard\x20root','Weight\x20semantics\x20are\x20unchanged\x20from\x20the\x20other\x20voting_guard\x20templates:\x20the\x20WEIGHT\x20rides\x20the\x20vote-time\x20binding\x20(FixedValue\x20flat\x20=\x20one\x20person\x20one\x20vote\x20among\x20the\x20parties,\x20or\x20per-binding\x20weights\x20for\x20weighted\x20panels\x20—\x20no\x20address-to-weight\x20lookup\x20exists\x20on\x20chain,\x20R-C3-02);\x20this\x20guard\x20only\x20constrains\x20WHO\x20may\x20vote','Once\x20voting_guard\x20is\x20non-empty,\x20every\x20vote\x20call\x20MUST\x20carry\x20the\x20voting_guard\x20and\x20the\x20voter\x27s\x20Passport\x20credential\x20(E_VOTING_GUARD_USED\x20on\x20the\x20plain\x20path,\x20abort\x202);\x20the\x20field\x20stays\x20mutable\x20after\x20publish\x20(op=\x27set\x27)','CHOOSING\x20BETWEEN\x20THE\x20TWINS:\x20deliberately\x20public/community\x20venue\x20→\x20tpl_voting_guard_open_vote;\x20closed\x20commercial\x20venue\x20where\x20ballots\x20should\x20track\x20the\x20disputing\x20parties\x20→\x20THIS\x20guard;\x20pure\x20staff\x20panel\x20with\x20no\x20buyer\x20voice\x20→\x20tpl_voting_guard_numeric_weight'],'example_use_case':'A\x20marketplace\x20venue\x20ruling\x20refund\x20disputes:\x20only\x20the\x20buyer\x20of\x20the\x20disputed\x20order\x20and\x20the\x20venue\x27s\x20listed\x20arbitrators/admin\x20may\x20vote\x20—\x20a\x20stranger\x20holding\x20a\x20passport\x20is\x20rejected\x20at\x20ballot\x20time,\x20and\x20a\x20buyer\x20cannot\x20vote\x20on\x20a\x20case\x20that\x20is\x20not\x20theirs.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_forward_arb_ruling_won','scene_id':'machine_forward_guard','name':'Arbitration\x20ruling-won\x20refund\x20gate\x20(stable\x20indemnity\x20state,\x20two-slot\x20order+arb)','description':'Guard\x20for\x20a\x20Machine\x20forward\x20that\x20pays\x20a\x20refund\x20when\x20the\x20buyer\x20WON\x20the\x20arbitration\x20'+'(e.g.\x20a\x20booking\x20\x27arb_refund\x27\x20edge\x20from\x20disputed\x20→\x20refunded).\x20The\x20verifier\x20submits\x20BOTH\x20'+'the\x20Order\x20address\x20(slot\x200)\x20and\x20the\x20Arb\x20case\x20object\x20address\x20(slot\x201);\x20the\x20gate\x20checks:\x20'+'(1)\x20arb.order\x20==\x20order\x20—\x20the\x20Arb\x20case\x20IS\x20this\x20order\x27s\x20dispute,\x20(2)\x20arb.indemnity\x20some\x20==\x20true\x20'+'(Bool\x20—\x20set\x20by\x20the\x20ruling;\x20arb_withdraw\x20sweeps\x20ONLY\x20the\x20fee\x20balance\x20and\x20never\x20touches\x20it,\x20so\x20a\x20fee\x20'+'withdrawal\x20cannot\x20clear\x20it;\x20a\x20reset\x20(objection\x20cycle)\x20clears\x20it,\x20correctly\x20re-gating\x20an\x20'+'overturned\x20ruling),\x20and\x20(3)\x20arb.indemnity.amount\x20!=\x200\x20—\x20a\x20Some(0)\x20MERCHANT-favor\x20ruling\x20passes\x20'+'presence\x20but\x20is\x20rejected\x20here\x20(rex-mn-261021\x20T5\x20live:\x20a\x20presence-only\x20root\x20let\x20the\x20defeated\x20buyer\x20'+'pull\x20the\x20refund),\x20so\x20the\x20edge\x20opens\x20only\x20on\x20an\x20ENFORCED\x20buyer\x20award;\x20a\x20None\x20amount\x20fails\x20closed\x20'+'via\x20the\x20native\x20query\x20error.\x20The\x20two-slot\x20form\x20makes\x20the\x20pair\x20'+'self-certifying:\x20a\x20merchant\x20holding\x20a\x20favourable\x20ruling\x20on\x20their\x20own\x20order\x20cannot\x20pair\x20it\x20'+'with\x20a\x20victim\x20order\x27s\x20address\x20to\x20redirect\x20that\x20victim\x27s\x20escrow\x20(F-02).\x20A\x20FOURTH\x20leg\x20(4R-03b\x20'+'sequence,\x20h1q\x20F-ARB-03)\x20requires\x20order.claimed_by\x20some\x20==\x20true\x20on\x20the\x20Order:\x20the\x20award\x20must\x20'+'be\x20ENFORCED\x20first\x20(compensation\x20claimed\x20or\x20keeper\x20conclude\x20stamped\x20claimed_by)\x20before\x20the\x20'+'refund\x20edge\x20can\x20open\x20—\x20closing\x20the\x20ruled-but-unclaimed\x20refund\x20window\x20(R2-F1\x20double-dip).\x20'+'A\x20FIFTH\x20leg\x20(5R-07②\x20F-54,\x202026-10-28)\x20prices\x20the\x20award:\x20arb.indemnity.amount\x20must\x20be\x20'+'STRICTLY\x20GREATER\x20than\x20min_indemnity_floor\x20(identifier\x205,\x20default\x200)\x20—\x20at\x20the\x20default\x20the\x20leg\x20'+'re-states\x20the\x20zero-award\x20exclusion\x20(amount\x20>\x200\x20==\x20!=\x200\x20on\x20U64,\x20harmless\x20redundancy\x20by\x20design);\x20'+'raised\x20to\x20refund_amount\x20×\x20arb_indemnity_floor_bps\x20/\x2010000\x20it\x20bars\x20a\x20TOKEN\x20indemnity\x20from\x20'+'unlocking\x20the\x20full\x20refund\x20rail\x20(tbp\x20F-54\x20live:\x20a\x200.001\x20award\x20opened\x20a\x202.0\x20refund).\x20A\x20SIXTH\x20leg\x20'+'(tbs7\x20F-02,\x202026-10-29)\x20binds\x20the\x20VENUE:\x20arb.arbitration\x20must\x20equal\x20bound_arbitration_address\x20'+'(identifier\x204\x20—\x20the\x20arbitration\x20venue\x20the\x20Service\x20is\x20published\x20with).\x20arb.order\x20is\x20a\x20'+'case-creator-filled\x20field,\x20so\x20without\x20the\x20venue\x20leg\x20anyone\x20can\x20mint\x20a\x20self-arbitrated\x20case\x20'+'(self\x20as\x20sole\x20arbiter,\x20arb.order\x20pointing\x20at\x20the\x20victim\x20order,\x20a\x20self-ruled\x20indemnity)\x20and\x20'+'drive\x20this\x20refund\x20edge;\x20with\x20it\x20only\x20cases\x20heard\x20by\x20the\x20store\x27s\x20designated\x20venue\x20qualify.','recommended_patterns':['P06','P09'],'parameters':[{'name':'min_indemnity_floor','type':'number','required':![],'default':'0','description':'F-54\x20indemnity\x20FLOOR\x20(smallest\x20units):\x20arb.indemnity.amount\x20must\x20EXCEED\x20this\x20for\x20the\x20refund\x20edge\x20to\x20open.\x200\x20(default)\x20=\x20any\x20non-zero\x20award\x20qualifies;\x20set\x20to\x20refund_amount\x20×\x20arb_indemnity_floor_bps\x20/\x2010000\x20to\x20bar\x20token\x20indemnities\x20from\x20unlocking\x20the\x20full\x20refund\x20rail','constraint':'Must\x20be\x20>=\x200\x20and\x20STRICTLY\x20BELOW\x20the\x20expected\x20award\x20—\x20a\x20floor\x20>=\x20the\x20smallest\x20legitimate\x20award\x20bricks\x20the\x20refund\x20edge;\x20the\x20floor\x20is\x20a\x20build-time\x20constant\x20(guards\x20are\x20immutable\x20after\x20publish)'},{'name':'bound_arbitration_address','type':'address','required':!![],'default':'${arbitration_name}','description':'tbs7\x20F-02\x20VENUE\x20BINDING:\x20the\x20Arbitration\x20object\x20the\x20Service\x20is\x20published\x20with\x20(NAME\x20or\x20address).\x20arb.arbitration\x20must\x20equal\x20it\x20for\x20the\x20refund\x20edge\x20to\x20open','constraint':'Name\x20form\x20(kernel\x20builds):\x20resolves\x20to\x20the\x20plan-created\x20\x27<base>_arbitration\x27\x20object.\x20Address\x20form\x20(hand\x20builds):\x20the\x20exact\x20Arbitration\x20address\x20bound\x20at\x20service\x20publish.\x20Guards\x20are\x20immutable\x20after\x20publish,\x20so\x20a\x20wrong\x20value\x20bricks\x20the\x20edge'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20address\x20(recipient\x20—\x20must\x20equal\x20payment_info.for_object;\x20submitted\x20by\x20the\x20forward\x20executor)'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','object_type':'Arb','name':'Arb\x20case\x20object\x20address\x20(submitted\x20by\x20the\x20forward\x20executor\x20at\x20runtime)'},{'identifier':0x2,'b_submission':![],'value_type':'Bool','value':!![],'name':'Expected\x20indemnity\x20PRESENCE\x20(true\x20=\x20a\x20ruling\x20exists).\x20PAIRED\x20with\x20the\x20zero-award\x20exclusion\x20leg\x20(id\x203):\x20presence\x20alone\x20let\x20a\x20Some(0)\x20merchant-favor\x20ruling\x20through\x20(rex-mn-261021\x20T5),\x20so\x20the\x20shipped\x20amount\x20!=\x200\x20leg\x20makes\x20this\x20gate\x20buyer-won-only'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'0','name':'Zero-award\x20constant\x20—\x20the\x20excluded\x20amount\x20(0\x20=\x20merchant-favor\x20ruling)'},{'identifier':0x5,'b_submission':![],'value_type':'U64','value':'${min_indemnity_floor}','name':'F-54\x20indemnity\x20FLOOR\x20(default\x200\x20=\x20any\x20non-zero\x20award\x20qualifies;\x20raise\x20to\x20refund_amount\x20×\x20arb_indemnity_floor_bps\x20/\x2010000\x20to\x20bar\x20token\x20indemnities\x20from\x20unlocking\x20the\x20refund\x20rail)'},{'identifier':0x4,'b_submission':![],'value_type':'Address','value':'${bound_arbitration_address}','name':'Store-bound\x20arbitration\x20venue\x20(tbs7\x20F-02):\x20arb.arbitration\x20must\x20equal\x20it\x20—\x20only\x20cases\x20heard\x20by\x20the\x20designated\x20venue\x20qualify'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'arb.order','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x0}]},{'type':'logic_equal','nodes':[{'type':'query','query':'arb.indemnity\x20some','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_not','node':{'type':'logic_as_u256_equal','nodes':[{'type':'query','query':'arb.indemnity.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x3}]}},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_as_u256_greater','nodes':[{'type':'query','query':'arb.indemnity.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_equal','nodes':[{'type':'query','query':'arb.arbitration','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x4}]}]},'applicable_industries':['travel','ecommerce','rental','education','subscription','licensing'],'relevant_risks':['R-X1-16'],'creation_notes':['⚠️\x20TRANSIENT-STATE\x20TRAP\x20(verified\x20on\x20testnet,\x20booking\x20o10):\x20gating\x20on\x20arb.status\x20==\x205\x20(Finished)\x20is\x20WRONG\x20—\x20arb.status\x20is\x20transient:\x20after\x20the\x20award\x20is\x20settled,\x20a\x20legitimate\x20arb_withdraw\x20by\x20the\x20arbitrator\x20advances\x20the\x20case\x205\x20(Finished)\x20→\x206\x20(Withdrawn),\x20permanently\x20killing\x20the\x20refund\x20edge.\x20Because\x20Guard\x20AND\x20Machine\x20are\x20immutable\x20after\x20publish\x20(IMMUT-001),\x20a\x20mistyped\x20arb.status\x20gate\x20strands\x20the\x20refund\x20funds\x20forever\x20(o10:\x201.5\x20WOW\x20locked\x20with\x20no\x20on-chain\x20exit).','arb.indemnity\x20some\x20(Bool)\x20is\x20a\x20PRESENCE\x20signal\x20—\x20\x27a\x20ruling\x20is\x20on\x20chain\x27\x20(klk-ln-261011\x20F18:\x20the\x20ruling\x27s\x20indemnity\x20presence\x20check\x20tests\x20the\x20Option\x20field,\x20NOT\x20the\x20amount;\x20a\x20zero-award\x20merchant-favor\x20ruling\x20ALSO\x20sets\x20Some(0)\x20and\x20passes\x20a\x20some==true\x20leg,\x20verified\x20in\x20T5).\x20It\x20is\x20NOT\x20by\x20itself\x20a\x20\x27buyer\x20won\x27\x20proof:\x20the\x20SHIPPED\x20zero-award\x20exclusion\x20leg\x20(logic_not\x20over\x20logic_as_u256_equal[arb.indemnity.amount,\x200])\x20IS\x20the\x20actual-award\x20requirement\x20in\x20canonical\x20form\x20—\x20compose\x20by\x20COPY,\x20never\x20by\x20hand\x20(rex-mn-261021\x20T5\x20mainnet:\x20a\x20presence-only\x20root\x20let\x20the\x20DEFEATED\x20buyer\x20pull\x20the\x20refund).\x20Never\x20touched\x20by\x20arb_withdraw\x20(the\x20fee\x20sweep\x20pulls\x20only\x20from\x20the\x20fee\x20balance);\x20cleared\x20by\x20a\x20reset\x20(objection\x20cycle)\x20—\x20the\x20gate\x20fails\x20shut\x20during\x20the\x20objection\x20cycle\x20and\x20re-arms\x20only\x20after\x20a\x20fresh\x20ruling.','Time-sensitive\x20alternative:\x20arb.indemnity.time\x20(U64\x20ruling\x20timestamp)\x20combined\x20with\x20a\x20deadline\x20—\x20also\x20survives\x20fee\x20withdrawal.','arb.indemnity.amount\x20(U64)\x20exposes\x20the\x20awarded\x20amount\x20if\x20the\x20refund\x20leg\x20must\x20match\x20the\x20ruling\x20exactly;\x20the\x20native\x20query\x20errors\x20on\x20a\x20None\x20field,\x20so\x20an\x20amount-equality\x20leg\x20is\x20fail-closed\x20against\x20never-ruled\x20and\x20reset\x20states.','A\x20reset\x20(state\x204\x20objection\x20cycle)\x20CLEARS\x20the\x20indemnity\x20—\x20arb.indemnity\x20some\x20correctly\x20re-gates\x20to\x20false,\x20so\x20a\x20voided\x20ruling\x20cannot\x20trigger\x20the\x20refund\x20edge.','TWO-SLOT\x20DESIGN\x20(F-02\x20fix):\x20the\x20refund\x20rail\x20has\x20TWO\x20consumers\x20of\x20the\x20same\x20submission\x20—\x20the\x20forward\x20guard\x20needs\x20the\x20Arb\x20object\x20(to\x20read\x20the\x20ruling),\x20while\x20the\x20allocator\x20recipient\x20GuardIdentifier(0)\x20needs\x20the\x20Order\x20object\x20(payment_info.for_object\x20binding).\x20A\x20single\x20slot\x20cannot\x20satisfy\x20both.\x20This\x20two-slot\x20form\x20(slot\x200\x20=\x20Order,\x20slot\x201\x20=\x20Arb)\x20makes\x20the\x20pair\x20self-certifying\x20via\x20the\x20arb.order\x20==\x20order\x20binding\x20assertion,\x20closing\x20the\x20redirect\x20attack\x20where\x20a\x20merchant\x20pairs\x20their\x20own\x20favourable\x20ruling\x20with\x20a\x20victim\x20order\x27s\x20address.','The\x20allocator\x20only\x20reads\x20slot\x200\x20(GuardIdentifier(0)\x20→\x20Order),\x20so\x20the\x20refund\x20recipient\x20resolves\x20correctly;\x20the\x20forward\x20guard\x20reads\x20slot\x201\x20(Arb)\x20for\x20the\x20ruling\x20state.','4R-03b\x20SEQUENCE\x20DISCLOSURE\x20(OF2-02\x20precedent\x20—\x20disclose\x20to\x20keepers,\x20do\x20not\x20hide):\x20the\x20claimed_by\x20some==true\x20leg\x20makes\x20conclude-or-claim\x20a\x20HARD\x20PREREQUISITE\x20of\x20node\x20movement.\x20A\x20ruling\x20that\x20has\x20not\x20yet\x20paid\x20(claim)\x20or\x20stamped\x20(conclude)\x20BLOCKS\x20this\x20edge\x20—\x20that\x20is\x20the\x20intended\x20semantics\x20(the\x20ruled-but-unclaimed\x20refund\x20window\x20must\x20not\x20drain\x20the\x20escrow\x20ahead\x20of\x20the\x20award),\x20but\x20operators\x20MUST\x20sequence\x20their\x20runbook:\x20claim/conclude\x20FIRST,\x20drive\x20the\x20forward\x20edge\x20SECOND.\x20Driving\x20the\x20edge\x20before\x20the\x20stamp\x20fails\x20the\x20guard\x20and\x20the\x20machine\x20position\x20stays\x20put\x20(retry\x20after\x20the\x20stamp\x20—\x20no\x20state\x20is\x20lost).','F-54\x20INDEMNITY\x20FLOOR\x20(5R-07②\x20ruling\x202026-10-28\x20—\x20award\x20must\x20carry\x20weight):\x20a\x20token\x20award\x20unlocks\x20the\x20FULL\x20refund\x20rail\x20(tbp\x20live:\x200.001\x20indemnity\x20→\x202.0\x20refund)\x20because\x20the\x20canonical\x20legs\x20only\x20exclude\x20Some(0).\x20The\x20floor\x20leg\x20(identifier\x205,\x20default\x200)\x20prices\x20the\x20award:\x20set\x20min_indemnity_floor\x20=\x20refund_amount\x20×\x20arb_indemnity_floor_bps\x20/\x2010000\x20at\x20build\x20time\x20—\x20benchmark\x20arb_indemnity_floor_bps\x203000\x20(30%:\x20below\x20that\x20the\x20award\x20reads\x20as\x20a\x20face-saving\x20token,\x20not\x20a\x20buyer-won\x20ruling).\x20Compute\x20the\x20ABSOLUTE\x20floor\x20yourself\x20(fillGuardTemplate\x20has\x20no\x20arithmetic);\x200\x20keeps\x20today\x27s\x20semantics\x20and\x20must\x20be\x20DISCLOSED\x20as\x20\x27no\x20award\x20floor\x27\x20in\x20the\x20build.\x20The\x20floor\x20is\x20a\x20GUARD-level\x20default,\x20never\x20an\x20on-chain\x20forcing\x20function:\x20the\x20chain\x20pays\x20whatever\x20the\x20arbitrator\x20ruled;\x20this\x20leg\x20only\x20re-gates\x20the\x20refund\x20EDGE.\x20Zero-award\x20(Some(0))\x20rulings\x20keep\x20the\x20BF-14\x20branch\x20—\x20they\x20NEVER\x20qualify\x20for\x20the\x20refund\x20edge,\x20floor\x20or\x20no\x20floor.','VENUE\x20BINDING\x20(tbs7\x20F-02,\x202026-10-29):\x20there\x20is\x20NO\x20on-chain\x20check\x20tying\x20an\x20Arb\x20case\x20to\x20the\x20Service\x27s\x20designated\x20arbitration\x20—\x20arb.order\x20is\x20a\x20case-creator-filled\x20field,\x20so\x20a\x20self-built\x20Arbitration\x20(self\x20as\x20sole\x20arbiter)\x20can\x20carry\x20arb.order\x20==\x20victim\x20order\x20and\x20rule\x20an\x20indemnity.\x20The\x20venue\x20leg\x20(identifier\x204)\x20closes\x20that\x20class:\x20fill\x20it\x20with\x20the\x20SAME\x20Arbitration\x20address\x20the\x20Service\x20is\x20published\x20with\x20and\x20accept\x20only\x20cases\x20heard\x20there.\x20A\x20case\x20from\x20any\x20other\x20venue\x20fails\x20this\x20leg\x20—\x20route\x20those\x20to\x20keeper\x20review\x20instead\x20of\x20the\x20machine\x20edge.','KEEPER\x20EXECUTION\x20RIGHT\x20(tbs7\x20F-02):\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20the\x20store\x27s\x20KEEPER\x20permission\x20entity.\x20Merchant-only\x20execution\x20is\x20the\x20loser\x20enforcing\x20against\x20themselves\x20—\x20an\x20adverse\x20ruling\x20simply\x20never\x20advances\x20(bs29:\x20judgments\x20without\x20enforcement).\x20Open\x20namedOperator\x20execution\x20lets\x20ANYONE\x20drive\x20the\x20edge\x20—\x20combined\x20with\x20a\x20forged\x20venue\x20it\x20was\x20a\x20unilateral\x20force-refund.\x20Keeper\x20execution\x20+\x20the\x20venue\x20leg\x20means\x20only\x20the\x20designated\x20venue\x27s\x20rulings,\x20concluded\x20and\x20stamped,\x20move\x20the\x20escrow;\x20disclose\x20the\x20runbook:\x20conclude/claim\x20FIRST,\x20keeper\x20drives\x20the\x20edge\x20SECOND.','claimed_by\x20IS\x20THE\x20SEAL,\x20NOT\x20NODE\x20POSITION\x20(tbs7\x20F-02\x20mutual-exclusion\x20face):\x20read\x20order.claimed_by\x20(as\x20the\x204R-03b\x20leg\x20does),\x20never\x20infer\x20enforcement\x20from\x20the\x20machine\x20node\x20alone\x20—\x20a\x20node\x20named\x20refunded/disputed\x20carries\x20no\x20chain\x20truth.\x20Mutual\x20exclusion\x20lives\x20at\x20the\x20polarity\x20level:\x20any\x20PARALLEL\x20pre-award\x20refund\x20leg\x20on\x20the\x20same\x20machine\x20must\x20gate\x20order.claimed_by\x20some\x20==\x20FALSE\x20so\x20a\x20stamped\x20award\x20closes\x20it\x20(D-BUG-2\x20polarity\x20twin),\x20and\x20post-stamp\x20this\x20edge\x20alone\x20owns\x20the\x20escrow\x20exit\x20—\x20the\x20arbitrator\x27s\x20award\x20payout\x20(the\x20buyer\x27s\x20separate\x20compensation\x20pool)\x20and\x20this\x20escrow\x20refund\x20are\x20different\x20pools\x20by\x20design\x20(sanctioned\x20pairing;\x20disclose\x20acknowledge_dual_payout\x20where\x20both\x20fire).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Accommodation\x20overbooking\x20dispute:\x20buyer\x20files,\x20arbitrators\x20rule\x20in\x20favor\x20(indemnity\x20=\x20fund\x20boundary);\x20the\x20merchant\x27s\x20refund\x20forward\x20opens\x20only\x20while\x20arb.indemnity\x20some\x20==\x20true,\x20regardless\x20of\x20whether\x20the\x20arbitrator\x20has\x20already\x20withdrawn\x20the\x20case\x20fee.\x20The\x20forward\x20executor\x20submits\x20the\x20Order\x20and\x20Arb\x20addresses\x20together;\x20the\x20allocator\x20pays\x20the\x20Order-anchored\x20recipient\x20only\x20when\x20the\x20binding\x20assertion\x20holds.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_arb_ruling_dismissed','scene_id':'machine_forward_guard','name':'Arbitration\x20ruling-dismissed\x20gate\x20(a\x20real\x20ruling\x20exists\x20AND\x20it\x20favoured\x20the\x20merchant,\x20two-slot\x20order+arb)','description':'Guard\x20for\x20a\x20Machine\x20forward\x20that\x20closes\x20a\x20claim\x20when\x20the\x20arbitration\x20DISMISSED\x20it\x20'+'(e.g.\x20\x27claim_dismissed\x27\x20edge\x20from\x20a\x20post-stay\x20claim\x20node\x20to\x20payout,\x20or\x20\x27claim_dismissed_resume\x27\x20'+'restoring\x20the\x20booking).\x20The\x20verifier\x20submits\x20BOTH\x20the\x20Order\x20address\x20(slot\x200)\x20and\x20the\x20Arb\x20case\x20'+'object\x20address\x20(slot\x201);\x20the\x20gate\x20checks:\x20(1)\x20arb.order\x20==\x20order\x20—\x20the\x20Arb\x20case\x20IS\x20this\x20order\x27s\x20'+'dispute,\x20and\x20(2)\x20arb.indemnity.amount\x20==\x200\x20—\x20the\x20ruling\x20awarded\x20the\x20buyer\x20NOTHING\x20'+'(the\x20merchant-favor\x20outcome;\x20the\x20buyer-favor\x20outcome\x20is\x20indemnity.amount\x20>\x200,\x20which\x20gates\x20the\x20'+'companion\x20tpl_forward_arb_ruling_won\x20refund\x20edge).\x20Without\x20this\x20gate\x20a\x20bare-permission\x20dismissal\x20'+'edge\x20lets\x20the\x20platform\x20kill\x20a\x20buyer\x27s\x20claim\x20and\x20release\x20the\x20pool\x20with\x20zero\x20on-chain\x20ruling\x20'+'evidence\x20(N-T2\x20/\x20D2-DISMISS-EDGE-GUARD).\x20A\x20THIRD\x20leg\x20(4R-03b\x20sequence,\x20h1q\x20F-ARB-03)\x20requires\x20'+'order.claimed_by\x20some\x20==\x20true\x20on\x20the\x20Order:\x20the\x20dismissal\x20must\x20be\x20CONCLUDED\x20(the\x20permissionless\x20'+'keeper\x20conclude\x20stamps\x20claimed_by\x20on\x20protocol\x20>=\x20154,\x20arx\x20batch)\x20before\x20the\x20movement\x20edge\x20opens\x20—\x20'+'forcing\x20the\x20conclude-then-move\x20sequence\x20instead\x20of\x20the\x20whoever-moves-first\x20race\x20(bs29\x20R-02).\x20A\x20'+'FOURTH\x20leg\x20(tbs7\x20F-02,\x202026-10-29)\x20binds\x20the\x20VENUE:\x20arb.arbitration\x20must\x20equal\x20'+'bound_arbitration_address\x20(identifier\x203)\x20—\x20arb.order\x20is\x20case-creator-filled,\x20so\x20without\x20the\x20'+'venue\x20leg\x20a\x20forged\x20self-arbitrated\x20case\x20with\x20a\x20zero\x20indemnity\x20could\x20dismiss\x20a\x20live\x20claim\x20and\x20'+'release\x20the\x20pool;\x20only\x20cases\x20heard\x20by\x20the\x20store\x27s\x20designated\x20venue\x20qualify.','recommended_patterns':['P06','P09'],'parameters':[{'name':'bound_arbitration_address','type':'address','required':!![],'default':'${arbitration_name}','description':'tbs7\x20F-02\x20VENUE\x20BINDING:\x20the\x20Arbitration\x20object\x20the\x20Service\x20is\x20published\x20with\x20(NAME\x20or\x20address).\x20arb.arbitration\x20must\x20equal\x20it\x20for\x20the\x20dismissal\x20edge\x20to\x20open','constraint':'Name\x20form\x20(kernel\x20builds):\x20resolves\x20to\x20the\x20plan-created\x20\x27<base>_arbitration\x27\x20object.\x20Address\x20form\x20(hand\x20builds):\x20the\x20exact\x20Arbitration\x20address\x20bound\x20at\x20service\x20publish.\x20Guards\x20are\x20immutable\x20after\x20publish,\x20so\x20a\x20wrong\x20value\x20bricks\x20the\x20edge'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20address\x20(must\x20equal\x20arb.order;\x20submitted\x20by\x20the\x20forward\x20executor)'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','object_type':'Arb','name':'Arb\x20case\x20object\x20address\x20(submitted\x20by\x20the\x20forward\x20executor\x20at\x20runtime)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':'0','name':'Expected\x20indemnity\x20amount\x20(0\x20=\x20ruling\x20favoured\x20the\x20merchant)'},{'identifier':0x4,'b_submission':![],'value_type':'Bool','value':!![],'name':'Expected\x20claimed_by\x20STAMP\x20(true\x20=\x20the\x20case\x20was\x20concluded\x20—\x20the\x204R-03b\x20sequence\x20prerequisite)'},{'identifier':0x3,'b_submission':![],'value_type':'Address','value':'${bound_arbitration_address}','name':'Store-bound\x20arbitration\x20venue\x20(tbs7\x20F-02):\x20arb.arbitration\x20must\x20equal\x20it\x20—\x20only\x20cases\x20heard\x20by\x20the\x20designated\x20venue\x20qualify'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'arb.order','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x0}]},{'type':'logic_as_u256_equal','nodes':[{'type':'query','query':'arb.indemnity.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.claimed_by\x20some','object':{'identifier':0x0},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'arb.arbitration','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x3}]}]},'applicable_industries':['travel','ecommerce','rental','education','subscription'],'relevant_risks':['R-X1-16','R-C3-05'],'creation_notes':['WHY\x20amount\x20==\x200\x20alone\x20is\x20decisive:\x20the\x20native\x20arb.indemnity.amount\x20query\x20ERRORS\x20on\x20a\x20None\x20field,\x20and\x20a\x20guard-query\x20error\x20fails\x20the\x20verification\x20closed\x20—\x20so\x20the\x20leg\x20passes\x20ONLY\x20when\x20indemnity\x20is\x20Some(0),\x20and\x20indemnity\x20is\x20Some\x20ONLY\x20after\x20a\x20ruling\x20(the\x20state\x20machine\x27s\x20reset\x20path\x20clears\x20the\x20indemnity\x20on\x20an\x20overturned\x20ruling\x20—\x20no\x20separate\x20generation\x20counter\x20is\x20needed).\x20A\x20case\x20nobody\x20ever\x20ruled\x20on\x20(None)\x20and\x20a\x20reset/objection\x20case\x20(None)\x20both\x20fail\x20shut,\x20so\x20the\x20platform\x20can\x20never\x20dismiss\x20with\x20zero\x20ruling\x20evidence.','OVERTURN\x20SEMANTICS:\x20a\x20reset\x20clears\x20indemnity,\x20so\x20the\x20amount\x20==\x200\x20leg\x20errors\x20on\x20the\x20None\x20field\x20and\x20the\x20guard\x20verification\x20fails\x20closed.\x20After\x20a\x20re-ruling\x20the\x20gate\x20reads\x20the\x20NEW\x20amount,\x20so\x20the\x20gate\x20reflects\x20the\x20standing\x20ruling\x20—\x20the\x20correct\x20business\x20semantics:\x20a\x20fresh\x20merchant-favor\x20ruling\x20justifies\x20dismissal\x20exactly\x20as\x20much\x20as\x20the\x20overturned\x20one\x20did.','Same\x20two-slot\x20shape\x20as\x20tpl_forward_arb_ruling_won\x20(slot\x200\x20=\x20Order\x20for\x20the\x20arb.order\x20binding,\x20slot\x201\x20=\x20Arb\x20for\x20the\x20ruling\x20state)\x20—\x20ONE\x20INSTANCE\x20PER\x20EXIT\x20EDGE,\x20never\x20share\x20a\x20guard\x20between\x20two\x20forwards.','NEVER\x20express\x20\x27favoured\x20the\x20merchant\x27\x20as\x20arb.indemnity\x20some\x20==\x20false:\x20it\x20conflates\x20never-ruled,\x20reset,\x20and\x20ruled-zero\x20states.\x20The\x20single\x20decisive\x20form\x20is\x20arb.indemnity.amount\x20==\x200\x20(fail-closed\x20on\x20None\x20via\x20the\x20native\x20query\x20error).','4R-03b\x20SEQUENCE\x20DISCLOSURE\x20(OF2-02\x20precedent\x20—\x20disclose\x20to\x20keepers,\x20do\x20not\x20hide):\x20the\x20claimed_by\x20some==true\x20leg\x20BREAKS\x20the\x20dismissed-but-unconcluded\x20path\x20BY\x20DESIGN\x20—\x20the\x20movement\x20edge\x20cannot\x20open\x20until\x20the\x20keeper\x20conclude\x20runs\x20and\x20stamps\x20claimed_by\x20(protocol\x20>=\x20154).\x20Sequence\x20the\x20runbook:\x20conclude\x20FIRST,\x20drive\x20the\x20edge\x20SECOND;\x20driving\x20first\x20fails\x20the\x20guard\x20with\x20the\x20position\x20intact\x20(retry\x20after\x20the\x20stamp).\x20A\x20keeper\x20bypassing\x20conclude\x20leaves\x20the\x20claim\x20stuck\x20at\x20this\x20node\x20—\x20that\x20is\x20the\x20guard\x20working\x20as\x20intended\x20(bs29\x20R-02:\x20the\x20permissionless\x20conclude\x20was\x20the\x20whoever-moves-first\x20race).','VENUE\x20BINDING\x20+\x20KEEPER\x20EXECUTION\x20(tbs7\x20F-02,\x202026-10-29):\x20arb.order\x20is\x20case-creator-filled\x20—\x20a\x20forged\x20self-arbitrated\x20case\x20with\x20a\x20Some(0)\x20ruling\x20passes\x20the\x20amount==0\x20leg\x20and\x20dismisses\x20a\x20LIVE\x20claim.\x20The\x20venue\x20leg\x20(identifier\x203,\x20filled\x20with\x20the\x20Arbitration\x20address\x20the\x20Service\x20is\x20published\x20with)\x20closes\x20that\x20class.\x20Bind\x20the\x20guard\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20the\x20store\x27s\x20KEEPER\x20permission\x20entity:\x20merchant-only\x20execution\x20lets\x20the\x20winner\x20simply\x20never\x20dismiss\x20(claim\x20stuck\x20forever),\x20open\x20namedOperator\x20execution\x20lets\x20anyone\x20force-dismiss\x20with\x20a\x20forged\x20venue;\x20keeper\x20+\x20venue\x20leg\x20means\x20only\x20the\x20designated\x20venue\x27s\x20concluded\x20rulings\x20move\x20the\x20machine.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Post-stay\x20claim\x20dismissed:\x20the\x20arbitrator\x20ruled\x20the\x20evidence\x20does\x20not\x20support\x20the\x20guest\x27s\x20claim\x20(indemnity\x200);\x20the\x20platform\x27s\x20claim_dismissed\x20forward\x20opens\x20only\x20when\x20THAT\x20ruling\x20is\x20on-chain\x20and\x20unoverturned,\x20then\x20the\x20settlement\x20release\x20pays\x20out\x20of\x20the\x20intact\x20pool.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_gen_passport_identity','scene_id':'gen_passport_guard','name':'Passport\x20identity\x20credential\x20generation\x20validation','description':'Standalone\x20Guard;\x20after\x20verifying\x20the\x20user\x27s\x20identity,\x20generates\x20a\x20Passport\x20with\x20a\x20credential,\x20used\x20as\x20submission\x20data\x20for\x20subsequent\x20operations.','recommended_patterns':['P03','P14'],'parameters':[{'name':'authorized_address','type':'address','description':'Authorized\x20address\x20(or\x20use\x20Vec<Address>\x20whitelist)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${authorized_address}','name':'Authorized\x20address'}],'example_root':{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x0}]},'applicable_industries':['ecommerce','education','travel','subscription','rental'],'relevant_risks':['R-C1-01','R-X1-10','R-X1-13'],'creation_notes':['gen_passport\x20is\x20a\x20standalone\x20Guard;\x20it\x20does\x20not\x20bind\x20a\x20Host\x20Object\x20(host_object:\x20Standalone)','quote_guard\x20is\x20a\x20rigid\x20requirement:\x20if\x20the\x20Guard\x20queries\x20Repository\x20data\x20with\x20quote_guard\x20set,\x20the\x20quote_guard\x20must\x20be\x20verified\x20(see\x20R-X1-10)','The\x20Guard\x20can\x20be\x20depended\x20on\x20by\x20other\x20Guards\x20via\x20rely\x20(requires\x20rep=true)','The\x20generated\x20Passport\x20can\x20be\x20used\x20as\x20submission\x20data\x20for\x20subsequent\x20operations'],'example_use_case':'After\x20the\x20user\x20passes\x20identity\x20verification,\x20a\x20Passport\x20is\x20generated;\x20this\x20Passport\x20is\x20then\x20submitted\x20as\x20an\x20identity\x20credential\x20in\x20subsequent\x20service\x20purchases.','verifier_constraint_level':'level1_strict'},{'id':'tpl_repository_quote_guard_subscription','scene_id':'repository_write','name':'Repository\x20data\x20subscription\x20with\x20payment\x20verification','description':'Repository\x20quote_guard\x20requires\x20payment\x20proof\x20for\x20data\x20access.\x20When\x20any\x20Guard\x20queries\x20this\x20Repository\x27s\x20data\x20(query\x201167),\x20the\x20quote_guard\x20is\x20rigidly\x20verified.\x20Enables\x20data\x20subscription\x20revenue\x20model\x20(e.g.,\x20weather\x20data,\x20market\x20oracle\x20data).','recommended_patterns':['P03','P07'],'parameters':[{'name':'repository_address','type':'address','description':'Repository\x20object\x20address','required':!![]},{'name':'subscription_price','type':'number','description':'Subscription\x20payment\x20amount\x20required\x20for\x20data\x20access','required':!![]},{'name':'payment_for_object','type':'address','description':'Payment\x20for_object\x20(Repository\x20address)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${repository_address}','name':'Repository\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'U256','value':'${subscription_price}','name':'Subscription\x20price'},{'identifier':0x2,'b_submission':!![],'value_type':'Address','name':'Submitted\x20Payment\x20(for_object\x20verification)'},{'identifier':0x3,'b_submission':!![],'value_type':'U256','name':'Submitted\x20Payment\x20amount'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.for','object':{'identifier':0x2}},{'type':'identifier','identifier':0x0}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'payment.amount','object':{'identifier':0x2}},{'type':'identifier','identifier':0x1}]}]},'applicable_industries':['subscription','travel','rental','education'],'relevant_risks':['R-X1-10'],'creation_notes':['VERIFIER-EVIDENCE\x20DESIGN:\x20user\x20submits\x20valid\x20Payment\x20via\x20Passport\x20(b_submission=true),\x20quote_guard\x20verifies\x20Payment\x20fields','quote_guard\x20must\x20be\x20a\x20standalone\x20repository-backed\x20guard:\x20immutable=true,\x20relies\x20empty,\x20rep=true','Repository.owner_receive<T>\x20accepts\x20Payment\x20as\x20subscription\x20revenue','Rigid\x20verification:\x20any\x20guard\x20querying\x20this\x20Repository\x27s\x20data\x20MUST\x20satisfy\x20the\x20quote_guard','Two-phase:\x20passport\x20generation\x20scans\x20+\x20prepares,\x20passport\x20verification\x20re-checks\x20+\x20verifies','VERIFIED\x20QUERY\x20NAMES:\x20payment.info.for\x20(id\x201107,\x20Address),\x20payment.amount\x20(id\x201100,\x20U256)'],'example_use_case':'Weather\x20data\x20provider\x20publishes\x20daily\x20temperature\x20data\x20to\x20Repository.\x20Insurance\x20Machine\x20queries\x20weather\x20data;\x20user\x20must\x20pay\x20subscription\x20(Payment)\x20to\x20access\x20data\x20in\x20their\x20insurance\x20claim\x20flow.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_buy_guard_order_holder','scene_id':'service_buy_guard','name':'Supply\x20chain\x20sub-order\x20purchase\x20verification','description':'Sub-service\x20buy_guard\x20verifies\x20the\x20user\x20owns\x20a\x20main\x20service\x20order.\x20Enables\x20supply\x20chain\x20milestone\x20unlock:\x20each\x20milestone\x20=\x20one\x20sub-order,\x20sub-service\x20only\x20purchasable\x20by\x20users\x20who\x20bought\x20the\x20main\x20service.','recommended_patterns':['P03','P04'],'parameters':[{'name':'main_service_address','type':'address','description':'Main\x20Service\x20object\x20address','required':!![]},{'name':'main_order_address','type':'address','description':'Submitted\x20main\x20Order\x20address\x20(b_submission=true)','required':![],'constraint':'If\x20using\x20P16\x20circular\x20reference,\x20use\x20service\x20name\x20instead\x20of\x20address'}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${main_service_address}','name':'Main\x20service\x20address'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','name':'Submitted\x20main\x20Order\x20(ownership\x20verification)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x1}},{'type':'context','context':'Signer'}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.service','object':{'identifier':0x1}},{'type':'identifier','identifier':0x0}]}]},'applicable_industries':['travel','rental','education','freelance'],'relevant_risks':['R-C3-05'],'creation_notes':['VERIFIER-EVIDENCE\x20DESIGN:\x20user\x20submits\x20main\x20Order\x20as\x20evidence\x20(b_submission=true),\x20buy_guard\x20verifies\x20ownership\x20+\x20service\x20match','No\x20parent_order\x20field\x20needed\x20—\x20relationship\x20verified\x20via\x20buy_guard\x20querying\x20submitted\x20Order\x20fields','Each\x20milestone\x20=\x20one\x20sub-order\x20with\x20its\x20own\x20Service\x20+\x20buy_guard','Main\x20flow\x20can\x20branch\x20to\x20different\x20sub-services\x20based\x20on\x20Machine\x20node\x20progression','VERIFIED\x20QUERY\x20NAMES:\x20order.owner\x20(id\x201562,\x20Address),\x20order.service\x20(id\x201203,\x20Address)'],'example_use_case':'Travel\x20package:\x20main\x20service\x20=\x20tour\x20booking.\x20Sub-services\x20=\x20hotel,\x20guide,\x20transfer\x20—\x20each\x20with\x20buy_guard\x20verifying\x20the\x20user\x20purchased\x20the\x20main\x20tour\x20order.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_payment_exception_compensation','scene_id':'machine_forward_guard','name':'Exception\x20branch\x20compensation\x20Payment','description':'Machine\x20forward\x20guard\x20for\x20exception\x20handling:\x20verifies\x20a\x20compensation\x20Payment\x20bound\x20to\x20specific\x20order\x20+\x20guard\x20+\x20unique\x20progress\x20step\x20(history\x20count)\x20+\x20node\x20name.\x20Enables\x20user-friendly\x20exception\x20branches\x20(e.g.,\x20delivery\x20delay\x20>\x2030min\x20triggers\x20auto-compensation).','recommended_patterns':['P03','P07','P09'],'parameters':[{'name':'order_address','type':'address','description':'Order\x20object\x20address\x20(Payment\x20for_object\x20target)','required':!![]},{'name':'this_guard_address','type':'address','description':'This\x20guard\x27s\x20own\x20address\x20(Payment\x20for_guard\x20target)','required':!![]},{'name':'compensation_amount','type':'number','description':'Minimum\x20compensation\x20amount','required':!![]},{'name':'expected_node_name','type':'string','description':'Expected\x20node\x20name\x20(stored\x20in\x20PaymentInfo.remark,\x20compared\x20with\x20progress.current)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'Address','value':'${order_address}','name':'Order\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${this_guard_address}','name':'This\x20guard\x20address'},{'identifier':0x2,'b_submission':![],'value_type':'U256','value':'${compensation_amount}','name':'Compensation\x20amount'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${expected_node_name}','name':'Expected\x20node\x20name\x20(for\x20remark\x20comparison)'},{'identifier':0x4,'b_submission':!![],'value_type':'Address','name':'Submitted\x20Payment\x20(compensation\x20proof)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.for','object':{'identifier':0x4}},{'type':'identifier','identifier':0x0}]},{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.guard','object':{'identifier':0x4}},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'payment.amount','object':{'identifier':0x4}},{'type':'identifier','identifier':0x2}]},{'type':'logic_as_u256_equal','nodes':[{'type':'query','query':'payment.info.index','object':{'identifier':0x4}},{'type':'query','query':'progress.history\x20count','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]},{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'payment.info.remark','object':{'identifier':0x4}},{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]}]},'applicable_industries':['rental','travel','ecommerce','freelance'],'relevant_risks':[],'creation_notes':['VERIFIED:\x20PaymentInfo\x20(for_object,\x20for_guard,\x20remark,\x20index),\x20payment_info_with_guard','VERIFIED:\x20withdraw\x20creates\x20the\x20Payment\x20as\x20a\x20fresh\x20singleton\x20object\x20from\x20the\x20withdrawn\x20object\x20set','VERIFIED\x20QUERY\x20NAMES:\x20payment.info.for\x20(id\x201107,\x20Address),\x20payment.info.guard\x20(id\x201109,\x20Address),\x20payment.info.index\x20(id\x201111,\x20U64),\x20payment.info.remark\x20(id\x201110,\x20String),\x20payment.amount\x20(id\x201100,\x20U64;\x20logic_as_u256_ge\x20casts\x20U64→U256\x20for\x20comparison)','VERIFIED\x20INDEX:\x20progress.history\x20count\x20(id\x201273,\x20U64)\x20=\x20unique\x20monotonically\x20increasing\x20step\x20index.\x20Even\x20in\x20cycles,\x20each\x20entry\x20has\x20a\x20different\x20count.','VERIFIED\x20NODE\x20NAME:\x20progress.current\x20(id\x201253,\x20String)\x20=\x20current\x20node\x20name.\x20A\x20node\x20can\x20be\x20entered\x20multiple\x20times\x20in\x20cycles,\x20but\x20the\x20history\x20count\x20is\x20unique\x20each\x20time.','DESIGN:\x20payment.info.index\x20stores\x20the\x20step\x20index\x20set\x20by\x20Treasury\x20at\x20creation\x20time;\x20progress.history\x20count\x20provides\x20the\x20current\x20unique\x20step.\x20Comparing\x20them\x20ensures\x20the\x20Payment\x20was\x20created\x20for\x20THIS\x20specific\x20progress\x20step.','DESIGN:\x20payment.info.remark\x20stores\x20the\x20node\x20name;\x20progress.current\x20provides\x20the\x20current\x20node\x20name.\x20Comparing\x20them\x20provides\x20semantic\x20verification\x20of\x20which\x20node\x20triggered\x20the\x20compensation.','ANTI-REUSE:\x204-dimensional\x20binding:\x20for_object\x20(Order)\x20+\x20for_guard\x20(Guard)\x20+\x20index\x20(unique\x20step)\x20+\x20remark\x20(node\x20name).\x20Same\x20Payment\x20cannot\x20be\x20reused\x20in\x20other\x20contexts.','Payment\x20is\x20freeze_object\x20(immutable)\x20—\x20cannot\x20be\x20modified\x20after\x20creation','VERIFIER-EVIDENCE\x20DESIGN:\x20customer\x20submits\x20Payment,\x20guard\x20verifies\x20binding\x20fields\x20match\x20current\x20context','Treasury\x20withdraws\x20compensation\x20with\x20PaymentInfo(for_object=order,\x20for_guard=this,\x20index=history_count_at_creation,\x20remark=node_name)',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Food\x20delivery:\x20if\x20delivery\x20delayed\x20>\x2030min\x20at\x20node\x20\x27delayed\x27\x20(history\x20count=5),\x20restaurant\x20Treasury\x20auto-compensates\x20$5\x20to\x20customer\x20with\x20PaymentInfo(for_object=order,\x20for_guard=this,\x20index=5,\x20remark=\x27delayed\x27).\x20Customer\x20submits\x20Payment\x20via\x20Passport,\x20guard\x20verifies\x20index\x20matches\x20current\x20history\x20count\x20AND\x20remark\x20matches\x20current\x20node\x20name.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_content_subscription_deliver','scene_id':'machine_forward_guard','name':'Content\x20subscription\x20delivery\x20verification\x20(Substack-style)','description':'Forward\x20guard\x20for\x20content\x20subscription\x20delivery\x20flow.\x20Verifies\x20that\x20(1)\x20the\x20order\x20is\x20at\x20the\x20expected\x20pre-delivery\x20node\x20'+'(e.g.\x20\x27Ordered\x27),\x20AND\x20(2)\x20the\x20Signer\x20holds\x20the\x20author\x27s\x20permission\x20index\x20on\x20the\x20bound\x20Permission\x20object.\x20'+'Prevents\x20unauthorized\x20parties\x20from\x20publishing\x20content\x20on\x20behalf\x20of\x20the\x20author.\x20'+'Designed\x20for\x20Substack-style\x20content\x20subscription:\x20Paid\x20→\x20ContentPublished\x20→\x20Completed\x20(success\x20path),\x20'+'with\x20Cancelled\x20and\x20Disputed\x20branches\x20using\x20separate\x20guards\x20(tpl_forward_content_subscription_cancel,\x20'+'tpl_forward_content_subscription_refund).','recommended_patterns':['P06','P09'],'parameters':[{'name':'expected_pre_delivery_node','type':'string','description':'Expected\x20current\x20node\x20name\x20BEFORE\x20delivery\x20(e.g.\x20\x27Ordered\x27)','required':!![],'default':'Ordered','constraint':'Must\x20exactly\x20match\x20the\x20name\x20defined\x20in\x20Machine\x20nodes\x20(case-sensitive).\x20This\x20is\x20the\x20node\x20from\x20which\x20the\x20\x27Deliver\x27\x20forward\x20advances.'},{'name':'permission_object','type':'address','description':'Permission\x20object\x20address\x20bound\x20to\x20the\x20Machine\x20(author\x20role\x20lives\x20here)','required':!![],'constraint':'Must\x20be\x20the\x20same\x20Permission\x20object\x20bound\x20to\x20the\x20Machine.\x20Use\x20name\x20(not\x20address)\x20if\x20Permission\x20is\x20not\x20yet\x20created.'},{'name':'author_permission_index','type':'number','description':'Permission\x20index\x20reserved\x20for\x20the\x20author\x20role\x20(who\x20can\x20publish\x20content)','required':!![],'default':'1000','constraint':'Must\x20match\x20the\x20index\x20configured\x20in\x20the\x20Permission\x20object.\x20Substack\x20convention:\x201000=author,\x201500=arbitrator,\x20reader\x20uses\x20namedOperator=\x27\x27\x20(no\x20specific\x20operator).'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)','binding_constraint':'Must\x20be\x20an\x20Order\x20belonging\x20to\x20the\x20bound\x20Service;\x20progress.current\x20must\x20match\x20expected_pre_delivery_node'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_pre_delivery_node}','name':'Expected\x20pre-delivery\x20node\x20name\x20(e.g.\x20\x27Ordered\x27)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${permission_object}','name':'Permission\x20object\x20address\x20(bound\x20to\x20Machine,\x20holds\x20author\x20role)'},{'identifier':0x3,'b_submission':![],'value_type':'U16','value':'${author_permission_index}','name':'Author\x20permission\x20index\x20(e.g.\x201000)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'query','query':'permission.entity.perm\x20has','object':{'identifier':0x2},'parameters':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x3}]}]},'applicable_industries':['subscription','content','newsletter','media'],'relevant_risks':['R-C2-01','R-C2-03','R-X1-08'],'creation_notes':['VERIFIED\x20QUERY\x20NAMES:\x20progress.current\x20(id\x201253,\x20String)\x20—\x20current\x20node\x20name;\x20permission.entity.perm\x20has\x20(id\x201008,\x20Bool:\x20params\x20[user/guard\x20Address,\x20permission\x20index\x20U16])\x20—\x20direct\x20logic_and\x20child','SUBSTACK\x20DEPLOYMENT:\x20this\x20guard\x20was\x20used\x20in\x20Substack\x20v2\x20Service.\x20Original\x20v1\x20Service\x20was\x20published\x20without\x20arbitrations\x20—\x20had\x20to\x20be\x20recreated\x20as\x20v2\x20with\x20arbitrations\x20bound\x20BEFORE\x20publish\x20(F-S-21).','AUTHOR\x20ROLE:\x20permission\x20index\x201000\x20=\x20author\x20(publish\x20+\x20cancel).\x20namedOperator=\x27\x27\x20for\x20reader\x20role\x20(open\x20—\x20any\x20subscriber).\x20Arbitrator\x20uses\x20index\x201500.','FORWARD\x20DESIGN:\x20\x27Deliver\x27\x20forward\x20advances\x20from\x20\x27Ordered\x27\x20→\x20\x27ContentPublished\x27.\x20Threshold=1,\x20weight=1,\x20permissionIndex=1000\x20(author\x20only).','GUARD-FIRST-WINS:\x20when\x20\x27Ordered\x27\x20has\x20competing\x20forwards\x20(Deliver|Cancel|Dispute),\x20each\x20with\x20its\x20own\x20guard,\x20the\x20first\x20guard\x20to\x20verify\x20wins.\x20Subscribers\x20cannot\x20double-claim\x20by\x20triggering\x20multiple\x20forwards.','IMMUTABILITY:\x20Forward.guard\x20cannot\x20be\x20modified\x20after\x20Machine\x20publish.\x20Verify\x20all\x203\x20guards\x20(deliver/cancel/refund)\x20are\x20correctly\x20bound\x20BEFORE\x20publishing\x20the\x20Machine.','CIRCULAR\x20REF:\x20if\x20Permission\x20is\x20not\x20yet\x20created,\x20use\x20its\x20name\x20(not\x20address)\x20in\x20value\x20field\x20—\x20Guard\x20resolves\x20names\x20at\x20evaluation\x20time,\x20not\x20at\x20creation\x20time.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Substack\x20newsletter:\x20subscriber\x20pays\x20$5/month.\x20Author\x20publishes\x20content\x20→\x20\x27Deliver\x27\x20forward\x20advances\x20Ordered→ContentPublished.\x20'+'This\x20guard\x20verifies\x20(1)\x20order\x20is\x20at\x20\x27Ordered\x27\x20node\x20(not\x20already\x20delivered),\x20AND\x20(2)\x20Signer\x20holds\x20permission\x20index\x201000\x20on\x20author\x27s\x20Permission\x20object.\x20'+'Prevents\x20a\x20malicious\x20party\x20from\x20publishing\x20fake\x20content.\x20Subscriber\x20cannot\x20trigger\x20\x27Deliver\x27\x20(lacks\x20permission).','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_forward_content_subscription_cancel','scene_id':'machine_forward_guard','name':'Content\x20subscription\x20cancel\x20verification\x20(Substack-style)','description':'Forward\x20guard\x20for\x20content\x20subscription\x20cancel\x20flow.\x20Verifies\x20that\x20(1)\x20the\x20order\x20is\x20at\x20the\x20expected\x20pre-cancel\x20node\x20'+'(e.g.\x20\x27Ordered\x27),\x20AND\x20(2)\x20the\x20Signer\x20is\x20the\x20order\x20owner\x20(subscriber).\x20Allows\x20subscriber\x20to\x20cancel\x20within\x20grace\x20period\x20'+'for\x20full\x20refund.\x20Designed\x20for\x20Substack-style:\x20Paid\x20→\x20Cancelled\x20(terminal-cancel),\x20with\x20refund\x20via\x20Allocation\x20template.','recommended_patterns':['P06','P09'],'parameters':[{'name':'expected_pre_cancel_node','type':'string','description':'Expected\x20current\x20node\x20name\x20BEFORE\x20cancel\x20(e.g.\x20\x27Ordered\x27)','required':!![],'default':'Ordered','constraint':'Must\x20exactly\x20match\x20the\x20name\x20defined\x20in\x20Machine\x20nodes\x20(case-sensitive).'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_pre_cancel_node}','name':'Expected\x20pre-cancel\x20node\x20name\x20(e.g.\x20\x27Ordered\x27)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]}]}]},'applicable_industries':['subscription','content','newsletter','media'],'relevant_risks':['R-C2-01','R-C2-03'],'creation_notes':['VERIFIED\x20QUERY\x20NAMES:\x20progress.current\x20(id\x201253,\x20String);\x20order.owner\x20(id\x201562,\x20Address)\x20—\x20order\x20holder\x20(subscriber).','SUBSCRIBER-ONLY:\x20only\x20the\x20order\x20owner\x20can\x20cancel\x20—\x20prevents\x20third-party\x20griefing.\x20Author\x20cannot\x20cancel\x20on\x20behalf\x20of\x20subscriber.','GRACE\x20PERIOD:\x20this\x20guard\x20does\x20NOT\x20enforce\x20a\x20time\x20window.\x20If\x20a\x20grace\x20period\x20is\x20needed\x20(e.g.\x20cancel\x20within\x2024h\x20of\x20payment),\x20add\x20a\x20third\x20condition:\x20context(Clock)\x20<=\x20order.time\x20+\x20grace_period.','REFUND\x20ALLOCATION:\x20pair\x20this\x20guard\x20with\x20an\x20Allocation\x20template\x20that\x20refunds\x20100%\x20to\x20the\x20subscriber\x20(order.owner).\x20Trigger\x20node\x20=\x20\x27Cancelled\x27.','GUARD-FIRST-WINS:\x20when\x20\x27Ordered\x27\x20has\x20competing\x20forwards\x20(Deliver|Cancel|Dispute),\x20each\x20with\x20its\x20own\x20guard,\x20the\x20first\x20guard\x20to\x20verify\x20wins.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Substack\x20newsletter:\x20subscriber\x20pays\x20$5,\x20then\x20changes\x20mind\x20before\x20content\x20is\x20published.\x20\x27Cancel\x27\x20forward\x20advances\x20Ordered→Cancelled.\x20'+'This\x20guard\x20verifies\x20(1)\x20order\x20is\x20at\x20\x27Ordered\x27\x20(not\x20yet\x20delivered),\x20AND\x20(2)\x20Signer\x20is\x20the\x20order\x20owner.\x20'+'Author\x20cannot\x20cancel\x20on\x20behalf\x20of\x20subscriber.\x20Refund\x20triggers\x20automatically\x20via\x20Allocation\x20on\x20\x27Cancelled\x27\x20node.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_forward_content_subscription_refund','scene_id':'machine_forward_guard','name':'Content\x20subscription\x20refund\x20verification\x20(Substack-style,\x20arbitration-triggered)','description':'Forward\x20guard\x20for\x20content\x20subscription\x20dispute/refund\x20flow.\x20Verifies\x20that\x20(1)\x20the\x20order\x20is\x20at\x20the\x20expected\x20pre-dispute\x20node\x20'+'(e.g.\x20\x27Disputed\x27),\x20AND\x20(2)\x20the\x20Signer\x20holds\x20the\x20arbitrator\x27s\x20permission\x20index\x20on\x20the\x20bound\x20Permission\x20object.\x20'+'Only\x20the\x20arbitrator\x20can\x20advance\x20Disputed→Refunded,\x20ensuring\x20dispute\x20resolution\x20is\x20impartial.\x20'+'Designed\x20for\x20Substack-style:\x20Paid\x20→\x20Disputed\x20→\x20Refunded\x20(terminal-dispute).','recommended_patterns':['P06','P09'],'parameters':[{'name':'expected_pre_refund_node','type':'string','description':'Expected\x20current\x20node\x20name\x20BEFORE\x20refund\x20(e.g.\x20\x27Disputed\x27)','required':!![],'default':'Disputed','constraint':'Must\x20exactly\x20match\x20the\x20name\x20defined\x20in\x20Machine\x20nodes\x20(case-sensitive).'},{'name':'permission_object','type':'address','description':'Permission\x20object\x20address\x20bound\x20to\x20the\x20Machine\x20(arbitrator\x20role\x20lives\x20here)','required':!![],'constraint':'Must\x20be\x20the\x20same\x20Permission\x20object\x20bound\x20to\x20the\x20Machine.\x20Use\x20name\x20(not\x20address)\x20if\x20Permission\x20is\x20not\x20yet\x20created.'},{'name':'arbitrator_permission_index','type':'number','description':'Permission\x20index\x20reserved\x20for\x20the\x20arbitrator\x20role\x20(who\x20can\x20resolve\x20disputes)','required':!![],'default':'1500','constraint':'Must\x20match\x20the\x20index\x20configured\x20in\x20the\x20Permission\x20object.\x20Substack\x20convention:\x201000=author,\x201500=arbitrator.'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20by\x20verifier\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_pre_refund_node}','name':'Expected\x20pre-refund\x20node\x20name\x20(e.g.\x20\x27Disputed\x27)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${permission_object}','name':'Permission\x20object\x20address\x20(bound\x20to\x20Machine,\x20holds\x20arbitrator\x20role)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${arbitrator_permission_index}','name':'Arbitrator\x20permission\x20index\x20(e.g.\x201500)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_string_nocase_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'query','query':'permission.entity.perm\x20has','object':{'identifier':0x2},'parameters':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x3}]}]},'applicable_industries':['subscription','content','newsletter','media'],'relevant_risks':['R-C2-01','R-C2-03','R-X1-08'],'creation_notes':['VERIFIED\x20QUERY\x20NAMES:\x20progress.current\x20(id\x201253,\x20String)\x20—\x20current\x20node\x20name;\x20permission.entity.perm\x20has\x20(id\x201008,\x20Bool:\x20params\x20[user/guard\x20Address,\x20permission\x20index\x20U16])\x20—\x20direct\x20logic_and\x20child','ARBITRATOR-ONLY:\x20only\x20the\x20arbitrator\x20(permission\x20index\x201500)\x20can\x20advance\x20Disputed→Refunded.\x20Neither\x20author\x20nor\x20subscriber\x20can\x20self-resolve.','ARBITRATIONS\x20BINDING:\x20Service\x20MUST\x20have\x20arbitrations\x20bound\x20BEFORE\x20publish\x20(F-S-21\x20—\x20post-publish\x20immutable).\x20ConfirmGate\x20C-S-19\x20+\x20QS11\x20will\x20warn\x20if\x20publish\x20is\x20attempted\x20without\x20arbitrations.','DISPUTE\x20ENTRY:\x20\x27Dispute\x27\x20forward\x20(Ordered→Disputed)\x20is\x20triggered\x20by\x20subscriber\x20(order.owner).\x20After\x20Disputed,\x20only\x20arbitrator\x20can\x20resolve.','REFUND\x20ALLOCATION:\x20pair\x20this\x20guard\x20with\x20an\x20Allocation\x20template\x20that\x20refunds\x20100%\x20to\x20the\x20subscriber\x20(order.owner).\x20Trigger\x20node\x20=\x20\x27Refunded\x27.','GUARD-FIRST-WINS:\x20when\x20\x27Disputed\x27\x20has\x20competing\x20forwards\x20(Resolve-Refund|Resolve-Reject),\x20each\x20with\x20its\x20own\x20guard.\x20First\x20guard\x20to\x20verify\x20wins.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Substack\x20newsletter:\x20subscriber\x20disputes\x20content\x20quality.\x20Subscriber\x20triggers\x20\x27Dispute\x27\x20forward\x20(Ordered→Disputed).\x20'+'Arbitrator\x20reviews\x20evidence\x20and\x20triggers\x20\x27Resolve-Refund\x27\x20forward\x20(Disputed→Refunded).\x20'+'This\x20guard\x20verifies\x20(1)\x20order\x20is\x20at\x20\x27Disputed\x27\x20(dispute\x20properly\x20opened),\x20AND\x20(2)\x20Signer\x20holds\x20arbitrator\x20permission\x20index\x201500.\x20'+'Author\x20cannot\x20self-resolve.\x20Subscriber\x20cannot\x20self-refund.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_required_info_present','scene_id':'machine_forward_guard','name':'Required-info\x20presence\x20gate','description':'Presence-only\x20gate\x20on\x20the\x20fulfilment\x20forward:\x20order.required_info\x20must\x20be\x20recorded\x20(Option\x20some,\x20query\x201572)\x20'+'before\x20the\x20forward\x20that\x20needs\x20the\x20data\x20can\x20advance.\x20This\x20is\x20the\x20ONLY\x20on-chain\x20enforcement\x20of\x20'+'Service.customer_required\x20—\x20the\x20purchase\x20entry\x20never\x20reads\x20the\x20list\x20(declarative-only,\x20testnet\x20HIGH-05).\x20'+'Presence-only\x20by\x20design:\x201573\x20aborts\x20while\x20the\x20Option\x20is\x20empty,\x20and\x20the\x20recorded\x20address\x20is\x20unvalidated\x20'+'buyer\x20input\x20with\x20no\x20on-chain\x20meaning\x20—\x20acceptance\x20is\x20the\x20merchant\x27s\x20confirming\x20forward,\x20never\x20the\x20value.','recommended_patterns':['P09'],'parameters':[],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Submitted\x20Order\x20—\x20protocol\x20slot\x20254\x20task\x20binding\x20(written\x20by\x20order\x20creation)'}],'example_root':{'type':'query','query':'order.required_info\x20some','object':{'identifier':0xfe},'parameters':[]},'applicable_industries':['retail','travel','education','rental','general'],'relevant_risks':[],'creation_notes':['GATE\x20PRESENCE\x20(1572)\x20FIRST:\x20query\x201573\x20returns\x20the\x20Option\x27s\x20inner\x20address\x20and\x20ABORTS\x20the\x20guard\x20evaluation\x20when\x20nothing\x20is\x20recorded\x20—\x201573\x20is\x20for\x20reading/comparing\x20AFTER\x20the\x20presence\x20gate\x20passed.','No\x20parameters\x20by\x20design:\x20presence-only.\x20Never\x20make\x20the\x20recorded\x20address\x20(or\x20a\x20Proof\x27s\x20content)\x20a\x20guard\x20decision\x20condition\x20—\x20the\x20credential\x20is\x20buyer-writable\x20and\x20unvalidated;\x20route\x20content-grade\x20checks\x20through\x20a\x20Repository\x20with\x20a\x20quote_guard.','Gate\x20the\x20forward\x20that\x20DEPENDS\x20on\x20the\x20information\x20(ship\x20/\x20hand-over\x20/\x20accept-before-crafting),\x20never\x20the\x20buy:\x20a\x20buy_guard\x20cannot\x20query\x20the\x20Order\x20—\x20it\x20does\x20not\x20exist\x20yet\x20at\x20buy\x20time.','DUAL\x20MOUNT\x20WHEN\x20COLLECTION\x20AND\x20CONSUMPTION\x20SPLIT\x20(ksk4\x20F-06):\x20when\x20the\x20information\x20is\x20COLLECTED\x20on\x20one\x20edge\x20(a\x20survey\x20/\x20proof-upload\x20/\x20required-info\x20submission\x20forward)\x20and\x20CONSUMED\x20on\x20a\x20LATER\x20one\x20(fulfilment\x20/\x20ship),\x20mount\x20this\x20gate\x20on\x20the\x20COLLECTION\x20edge\x20AS\x20WELL\x20—\x20gating\x20only\x20the\x20consumer\x20lets\x20the\x20order\x20rest\x20past\x20the\x20collection\x20point\x20with\x20NOTHING\x20recorded,\x20and\x20the\x20failure\x20surfaces\x20one\x20node\x20later\x20as\x20the\x20wrong\x20party\x27s\x20blocker\x20(the\x20creator\x20cannot\x20start\x20work\x20instead\x20of\x20the\x20buyer\x20being\x20refused\x20at\x20submission\x20time).\x20The\x20collection\x20edge\x20is\x20not\x20statically\x20identifiable\x20in\x20general\x20(a\x20node\x20name\x20proves\x20nothing),\x20so\x20there\x20is\x20NO\x20scanner\x20rule\x20for\x20this\x20—\x20it\x20is\x20a\x20build-time\x20mounting\x20discipline:\x20every\x20edge\x20whose\x20forward\x20WRITES\x20the\x20required\x20info\x20carries\x20the\x20presence\x20gate,\x20every\x20edge\x20whose\x20forward\x20READS\x20it\x20carries\x20the\x20gate\x20too.','Slot\x20254\x20is\x20declared\x20here\x20(the\x20kernel\x20skips\x20its\x20injection\x20when\x20a\x20guard\x20already\x20declares\x20it):\x20the\x20trigger\x20passport\x20submits\x20{254:\x20order}.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Handmade/custom\x20storefront:\x20the\x20shop\x20declares\x20customer_required\x20(personalisation\x20spec,\x20measurements).\x20'+'The\x20\x27confirmed\x27\x20(seller\x20acceptance)\x20or\x20\x27ship\x27\x20forward\x20carries\x20this\x20gate,\x20so\x20an\x20order\x20whose\x20buyer\x20never\x20'+'recorded\x20the\x20required\x20credential\x20cannot\x20advance\x20—\x20without\x20the\x20gate\x20such\x20an\x20order\x20is\x20created\x20and\x20'+'progresses\x20silently\x20(the\x20purchase\x20entry\x20never\x20reads\x20the\x20list).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_lock_progress','scene_id':'machine_forward_guard','name':'Time-lock\x20node-entry\x20gate\x20(opening\x20window)','description':'Gates\x20a\x20forward\x20on\x20elapsed\x20time\x20since\x20node\x20entry:\x20the\x20chain\x20Clock\x20must\x20be\x20>=\x20the\x20source\x20node\x27s\x20'+'entry\x20time\x20(query\x201280\x20progress.history.time)\x20+\x20duration_ms.\x20Opening-gate\x20direction\x20(greater_or_equal):\x20the\x20forward\x20stays\x20'+'BLOCKED\x20until\x20the\x20duration\x20elapses\x20—\x20settlement\x20delays,\x20acceptance\x20timeouts,\x20keeper\x20auto-advance\x20rails.\x20'+'Executable\x20form\x20of\x20pattern.time_lock_progress;\x20the\x20closing-window\x20twin\x20(act\x20only\x20UNTIL\x20entry+N)\x20is\x20'+'tpl_time_window_upper.\x20Anchor\x20semantics:\x20the\x20anchor\x20is\x20the\x20IMMUTABLE\x20recorded\x20entry\x20moment\x20of\x20the\x20'+'source\x20node\x20(witness-derived\x20via\x20OrderProgress),\x20so\x20one\x20Guard\x20serves\x20every\x20order;\x20a\x20re-entered\x20node\x20'+'appends\x20a\x20fresh\x20entry\x20and\x20restarts\x20the\x20lock\x20(find=last).\x20For\x20a\x20window\x20measured\x20from\x20purchase\x20use\x20an\x20'+'order.time\x20anchor\x20instead\x20(TIME-ANCHOR-01).','recommended_patterns':['P06'],'parameters':[{'name':'duration_ms','type':'number','description':'Time-lock\x20duration\x20in\x20milliseconds\x20(measured\x20from\x20the\x20source\x20node\x27s\x20entry)','required':!![],'constraint':'Plain\x20integer\x20milliseconds;\x20test\x20with\x20small\x20values\x20first\x20—\x20chain\x20Clock\x20is\x20block-driven,\x20not\x20wall\x20time'},{'name':'expected_node','type':'string','description':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(the\x20node\x20whose\x20entry\x20anchors\x20the\x20clock)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(clock\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${duration_ms}','name':'Time-lock\x20duration\x20in\x20milliseconds'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'last'},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['rental','ecommerce','education','travel','subscription','freelance'],'relevant_risks':[],'creation_notes':['DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20entry+N]\x20encodes\x20an\x20OPENING\x20gate\x20(blocked\x20until\x20entry+N).\x20For\x20a\x20CLOSING\x20window\x20(action\x20allowed\x20only\x20until\x20entry+N)\x20use\x20tpl_time_window_upper\x20—\x20inverting\x20the\x20comparison\x20makes\x20every\x20window\x20permanently\x20open.','ENTRY-TIME\x20ANCHOR\x20(v76):\x20the\x20clock\x20anchors\x20on\x20the\x20source\x20node\x27s\x20recorded\x20entry\x20moment\x20—\x20query\x201280\x20progress.history.time\x20filtered\x20by\x20where.nextNode\x20=\x20${expected_node},\x20find=last.\x20The\x20record\x20is\x20written\x20once\x20on\x20entering\x20the\x20node\x20and\x20never\x20rewritten\x20(drift-immune);\x20a\x20RE-ENTERED\x20node\x20appends\x20a\x20fresh\x20entry,\x20so\x20find=last\x20picks\x20the\x20latest\x20entry\x20and\x20the\x20lock\x20restarts\x20—\x20intended\x20semantics\x20for\x20entry-anchored\x20locks\x20(settle\x20N\x20days\x20after\x20delivery,\x20auto-confirm\x20N\x20days\x20after\x20shipment).\x20A\x20window\x20measured\x20from\x20PURCHASE\x20must\x20anchor\x20on\x20order.time\x20via\x20the\x20order\x20witness\x20instead\x20(TIME-ANCHOR-01);\x20order.time\x20is\x20path-independent.','DOUBLE-MOUNT\x20DOUBLING\x20(az3-mn-261013\x20F-18,\x20mainnet-timed):\x20mounting\x20ONE\x20time-lock\x20Guard\x20on\x20BOTH\x20a\x20forward\x20AND\x20the\x20allocator\x20riding\x20the\x20SAME\x20transition\x20makes\x20the\x20caller\x20wait\x20TWICE\x20—\x20the\x20forward\x20waits\x20N\x20anchored\x20on\x20the\x20source\x20node\x20entry,\x20then\x20the\x20allocator\x20RE-ANCHORS\x20on\x20the\x20destination\x20node\x20entry\x20and\x20waits\x20N\x20again\x20(az3\x20T1:\x20abort\x207\x20twice,\x20effective\x202x\x20dwell).\x20Remedies\x20at\x20build\x20time:\x20(a)\x20put\x20the\x20time\x20lower\x20bound\x20ONLY\x20on\x20the\x20allocator\x20(the\x20forward\x20advances\x20as\x20soon\x20as\x20its\x20non-time\x20legs\x20pass;\x20settlement\x20still\x20waits\x20a\x20single\x20N\x20from\x20the\x20destination\x20entry),\x20or\x20(b)\x20mount\x20two\x20SEPARATE\x20Guard\x20instances\x20with\x20durations\x20that\x20sum\x20to\x20the\x20intended\x20total\x20(N_forward\x20from\x20the\x20source\x20entry\x20+\x20N_alloc\x20from\x20the\x20destination\x20entry).\x20Never\x20reuse\x20one\x20instance\x20across\x20both\x20mounts.','TIME\x20SOURCE\x20DUALITY:\x20chain\x20Clock\x20is\x20native\x20but\x20block-driven\x20and\x20independent\x20of\x20wall\x20time\x20—\x20fine\x20for\x20relative\x20locks;\x20for\x20real-world\x20deadlines\x20use\x20the\x20repository\x20time-oracle\x20recipe\x20(pattern.time_source_repository_oracle)\x20and\x20document\x20which\x20source\x20a\x20published\x20Guard\x20relies\x20on.','OWNER-ONLY\x20STRENGTHENING:\x20this\x20root\x20binds\x20no\x20Signer\x20(keeper\x20slots\x20advance\x20it).\x20For\x20a\x20buyer-advanced\x20forward,\x20AND\x20the\x20identity\x20leg\x20logic_equal[context(Signer),\x20query\x20order.owner]\x20—\x20an\x20unbound\x20keeper\x20edge\x20must\x20never\x20be\x20the\x20only\x20rail\x20out\x20of\x20a\x20locked\x20node\x20(pair\x20with\x20an\x20expiry\x20forward\x20or\x20a\x20recover\x20allocator).','Forward.guard\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20Machine\x20publish);\x20verify\x20the\x20node\x20name\x20and\x20duration\x20against\x20the\x20Machine\x20before\x20publishing.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Long-stay\x20rental:\x20the\x20\x27month\x20settled\x27\x20forward\x20out\x20of\x20the\x20settlement\x20node\x20advances\x20only\x20after\x20the\x20'+'30-day\x20settlement\x20delay\x20elapsed\x20since\x20handover\x20entry\x20—\x20the\x20keeper\x20rail\x20cannot\x20release\x20rent\x20early,\x20'+'and\x20one\x20Guard\x20serves\x20every\x20order\x20(entry\x20time\x20is\x20per-order\x20state,\x20not\x20a\x20Guard\x20constant).','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_window_upper','scene_id':'machine_forward_guard','name':'Time-window\x20upper\x20bound\x20+\x20order-holder\x20identity\x20(closing\x20window)','description':'Gates\x20a\x20forward\x20to\x20a\x20window\x20that\x20CLOSES:\x20the\x20chain\x20Clock\x20must\x20be\x20<=\x20the\x20source\x20node\x27s\x20'+'entry\x20time\x20(query\x201280\x20progress.history.time)\x20+\x20duration_ms,\x20ANDed\x20with\x20the\x20order-holder\x20'+'identity\x20set\x20(owner\x20or\x20agent,\x20read\x20at\x20the\x20254\x20task-binding\x20slot).\x20Closing-window\x20'+'direction\x20(lesser_or_equal):\x20the\x20forward\x20is\x20allowed\x20only\x20WHILE\x20the\x20window\x20is\x20open\x20—\x20return\x20'+'windows,\x20claim\x20windows,\x20review\x20windows;\x20after\x20expiry\x20the\x20forward\x20aborts.\x20The\x20identity\x20leg\x20is\x20'+'NOT\x20optional\x20(etsy-aurelia\x20F-01):\x20an\x20edge\x27s\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20'+'authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20time-only\x20guard\x20on\x20'+'a\x20buyer\x20window\x20is\x20callable\x20by\x20ANY\x20signer.\x20Executable\x20form\x20of\x20pattern.time_window_upper_bound\x20'+'+\x20pattern.identity_check_order_holder;\x20the\x20opening-gate\x20twin\x20is\x20tpl_time_lock_progress.\x20'+'Anchor\x20semantics:\x20the\x20anchor\x20is\x20the\x20IMMUTABLE\x20recorded\x20entry\x20moment\x20of\x20the\x20source\x20node\x20'+'(witness-derived\x20via\x20OrderProgress),\x20taken\x20as\x20find=FIRST\x20(tbs7\x20F-03/O16/O17):\x20the\x20window\x20opens\x20'+'once\x20at\x20the\x20ORIGINAL\x20entry\x20and\x20can\x20never\x20be\x20re-armed\x20—\x20a\x20party\x20that\x20re-enters\x20the\x20source\x20node\x20'+'after\x20expiry\x20stays\x20blocked\x20by\x20this\x20same\x20leg;\x20the\x20current-node\x20leg\x20plus\x20the\x20first-entry\x20anchor\x20'+'make\x20the\x20two\x20conditions\x20contradictory.\x20For\x20a\x20window\x20that\x20LEGITIMATELY\x20renews\x20per\x20period\x20'+'(subscription\x20claims)\x20anchor\x20per-period\x20instead;\x20for\x20a\x20window\x20measured\x20from\x20purchase\x20use\x20an\x20'+'order.time\x20anchor\x20(TIME-ANCHOR-01).','recommended_patterns':['P06'],'parameters':[{'name':'duration_ms','type':'number','description':'Window\x20length\x20in\x20milliseconds\x20(measured\x20from\x20the\x20source\x20node\x27s\x20entry)','required':!![],'constraint':'Plain\x20integer\x20milliseconds;\x20test\x20with\x20small\x20values\x20first\x20—\x20chain\x20Clock\x20is\x20block-driven,\x20not\x20wall\x20time'},{'name':'expected_node','type':'string','description':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(the\x20node\x20whose\x20entry\x20opens\x20the\x20window)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(window\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${duration_ms}','name':'Window\x20length\x20in\x20milliseconds'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'first'},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['rental','ecommerce','education','travel','subscription','freelance'],'relevant_risks':[],'creation_notes':['DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06,\x20live-confirmed\x20on\x20a\x2030-day-return\x20migration):\x20lesser_or_equal[Clock,\x20entry+N]\x20closes\x20the\x20window;\x20the\x20opening-gate\x20twin\x27s\x20greater_or_equal\x20would\x20REOPEN\x20it\x20forever.\x20Opening\x20gate\x20(wait\x20N\x20before\x20acting)\x20=\x20tpl_time_lock_progress;\x20closing\x20window\x20(act\x20before\x20N\x20elapses)\x20=\x20THIS\x20template.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20time-only\x20guard\x20on\x20a\x20buyer\x20window\x20is\x20callable\x20by\x20ANY\x20signer.\x20The\x20owner/agent\x20identity\x20legs\x20ship\x20IN\x20example_root\x20over\x20the\x20254\x20task-binding\x20slot;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.','EXPIRY\x20SEMANTICS:\x20an\x20expired\x20window\x20only\x20fails\x20the\x20forward\x20it\x20gates\x20—\x20it\x20does\x20not\x20refund\x20or\x20cancel\x20by\x20itself.\x20Pair\x20the\x20window\x20with\x20a\x20machine\x20expiry\x20forward\x20(keeper-advanced)\x20or\x20an\x20allocator\x20recover\x20rail\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).','ENTRY-TIME\x20ANCHOR\x20(v76,\x20find=FIRST\x20since\x20tbs7\x20F-03/O16/O17):\x20the\x20window\x20anchors\x20on\x20the\x20source\x20node\x27s\x20recorded\x20entry\x20moment\x20—\x20query\x201280\x20progress.history.time\x20filtered\x20by\x20where.nextNode\x20=\x20${expected_node},\x20find=FIRST.\x20The\x20record\x20is\x20immutable\x20(drift-immune)\x20and\x20the\x20FIRST\x20entry\x20never\x20moves,\x20so\x20re-entering\x20the\x20source\x20node\x20can\x20NOT\x20re-arm\x20the\x20window\x20(the\x20old\x20find=last\x20default\x20let\x20the\x20party\x20that\x20controls\x20re-entry\x20restart\x20the\x20window\x20forever\x20—\x20the\x20tbs7\x20live\x20reset\x20exploit).\x20For\x20a\x20window\x20that\x20legitimately\x20renews\x20per\x20period\x20(subscription\x20claims)\x20anchor\x20per-period\x20with\x20find=last\x20on\x20the\x20period\x27s\x20own\x20entry;\x20for\x20a\x20window\x20measured\x20from\x20PURCHASE\x20(e.g.\x20\x27return\x20within\x2030\x20days\x20of\x20buying\x27)\x20anchor\x20on\x20order.time\x20via\x20the\x20order\x20witness\x20instead\x20(TIME-ANCHOR-01).','TIME\x20SOURCE\x20DUALITY:\x20chain\x20Clock\x20is\x20block-driven\x20—\x20use\x20the\x20repository\x20time-oracle\x20recipe\x20(pattern.time_source_repository_oracle)\x20for\x20real-world\x20deadlines.','Forward.guard\x20cannot\x20be\x20modified\x20after\x20binding\x20(immutable\x20after\x20Machine\x20publish);\x20verify\x20the\x20node\x20name\x20and\x20window\x20against\x20the\x20Machine\x20before\x20publishing.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Retail\x20return\x20rail:\x20the\x20\x27return\x20requested\x27\x20forward\x20out\x20of\x20\x27delivered\x27\x20advances\x20only\x20for\x20the\x20'+'order\x20holder\x20and\x20only\x20within\x2030\x20days\x20of\x20the\x20delivered\x20entry;\x20after\x20expiry\x20the\x20buyer\x27s\x20route\x20'+'is\x20the\x20keeper\x20expiry\x20rail,\x20not\x20this\x20forward.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_goal_missed_refund_window','scene_id':'machine_forward_guard','name':'Goal-missed\x20refund\x20window\x20(no-match\x20tolerant;\x201287\x20anchor)','description':'Opens\x20a\x20rail\x20when\x20a\x20milestone\x20was\x20NEVER\x20reached,\x20or\x20once\x20a\x20window\x20has\x20elapsed\x20after\x20it\x20WAS\x20'+'reached:\x20logic_or[\x20equal(time_or_zero{nextNode:target},\x200),\x20Clock\x20>=\x20time_or_zero{target}\x20+\x20'+'window\x20].\x20Both\x20legs\x20read\x20query\x201287\x20progress.history.time_or_zero\x20(S17-D),\x20which\x20returns\x20the\x20'+'sentinel\x200\x20for\x20\x27anchor\x20node\x20never\x20entered\x27\x20instead\x20of\x20aborting\x20like\x201280\x20—\x20so\x20the\x20refund\x20rail\x20'+'survives\x20exactly\x20the\x20order\x20state\x20it\x20exists\x20to\x20protect\x20(rqd2\x20O2:\x20a\x20\x27refund\x20when\x20target\x20not\x20'+'reached\x27\x20rail\x20anchored\x20on\x20\x27funded\x27\x20crashed\x20for\x20the\x20never-funded\x20order\x20and\x20stranded\x206\x20WOW).\x20'+'Typical\x20mount:\x20the\x20→refunded\x20forward\x20or\x20the\x20claim\x20allocator\x20guard\x20of\x20a\x20crowdfunding/presale\x20'+'refund\x20path.\x20For\x20pure\x20closing\x20windows\x20where\x20a\x20missing\x20anchor\x20MUST\x20block,\x20use\x20'+'tpl_time_window_upper\x20(1280,\x20fail-closed)\x20instead.','recommended_patterns':['P06'],'parameters':[{'name':'target_node','type':'string','description':'The\x20milestone\x20node\x20whose\x20entry\x20anchors\x20the\x20window\x20(e.g.\x20the\x20\x27funded\x27\x20node\x20of\x20a\x20crowdfund\x20Machine)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'window_ms','type':'number','description':'Grace\x20window\x20in\x20milliseconds\x20measured\x20from\x20the\x20milestone\x20entry\x20(only\x20relevant\x20when\x20the\x20milestone\x20WAS\x20reached\x20—\x20the\x20never-reached\x20branch\x20opens\x20immediately)','required':!![],'constraint':'Plain\x20integer\x20milliseconds;\x20test\x20with\x20small\x20values\x20first\x20—\x20chain\x20Clock\x20is\x20block-driven,\x20not\x20wall\x20time'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${target_node}','name':'Milestone\x20node\x20(window\x20anchor;\x20\x27never\x20entered\x27\x20=\x20sentinel\x200)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${window_ms}','name':'Grace\x20window\x20in\x20milliseconds\x20after\x20the\x20milestone\x20entry'},{'identifier':0x5,'b_submission':![],'value_type':'U64','value':'0','name':'No-match\x20sentinel\x20(1287\x20returns\x200\x20=\x20milestone\x20never\x20entered)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query_progress_history_time_or_zero','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${target_node}'},'find':'first'},{'type':'identifier','identifier':0x5}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time_or_zero','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${target_node}'},'find':'first'},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['crowdfunding','retail','subscription','travel'],'relevant_risks':[],'creation_notes':['OR\x20DOES\x20NOT\x20SHORT-CIRCUIT\x20(ofn5\x20F-01/A-12):\x20both\x20legs\x20are\x20ALWAYS\x20evaluated,\x20which\x20is\x20why\x20BOTH\x20read\x20the\x20no-match\x20tolerant\x201287\x20—\x20a\x201280\x20leg\x20on\x20the\x20never-entered\x20branch\x20would\x20abort\x20the\x20whole\x20guard\x20even\x20when\x20the\x20other\x20leg\x20passes\x20(the\x20exact\x20rqd2\x20O2\x20crash).\x20Never\x20mix\x201280\x20into\x20this\x20root.','SENTINEL\x20POLARITY\x20(S17-D):\x201287\x20returns\x200\x20ONLY\x20for\x20\x27no\x20matching\x20history\x20entry\x27\x20—\x20a\x20matched\x20entry\x27s\x20time\x20is\x20always\x20a\x20real\x20validator-clock\x20timestamp\x20>\x200,\x20so\x20Leg\x20A\x20is\x20true\x20exactly\x20when\x20the\x20milestone\x20was\x20never\x20reached.\x20greater_or_equal\x20legs\x20on\x201287\x20FAIL\x20for\x20never-entered\x20anchors\x20(0\x20>=\x20T\x20is\x20false\x20for\x20T>0)\x20—\x20fail-closed\x20by\x20construction.','IDENTITY\x20LEG\x20for\x20buyer-claimable\x20mounts\x20(etsy-aurelia\x20F-01):\x20allocator\x20claims\x20are\x20recipient-bound\x20by\x20allocation\x20semantics,\x20but\x20a\x20forward\x20edge\x20carrying\x20this\x20root\x20is\x20callable\x20by\x20ANY\x20signer\x20—\x20AND\x20the\x20owner/agent\x20identity\x20legs\x20(tpl_forward_order_holder\x20shape\x20over\x20the\x20254\x20slot)\x20onto\x20the\x20OR\x20when\x20mounting\x20on\x20a\x20buyer-advanced\x20forward.','find=FIRST\x20(tbs7\x20F-03/O16/O17):\x20the\x20window\x20anchors\x20on\x20the\x20milestone\x27s\x20FIRST\x20entry\x20so\x20re-entry\x20can\x20never\x20re-arm\x20the\x20grace\x20window.','PAIR\x20WITH\x20THE\x20RELEASE\x20RAIL:\x20the\x20met-goal\x20path\x20keeps\x20its\x20own\x20>=\x20threshold\x20gate\x20(tpl_crowdfunding_threshold_gate)\x20on\x20the\x20release\x20edge\x20—\x20this\x20template\x20only\x20fixes\x20the\x20goal-MISSED\x20rail\x27s\x20polarity.\x20Binding\x20this\x20id\x20to\x20BOTH\x20edges\x20inverts\x20nothing\x20by\x20itself,\x20but\x20the\x20release\x20edge\x20must\x20NOT\x20gate\x20on\x20this\x20OR\x20(it\x20would\x20release\x20before\x20the\x20goal\x20on\x20never-entered).','TIME\x20SOURCE\x20DUALITY:\x20chain\x20Clock\x20is\x20block-driven\x20—\x20for\x20real-world\x20calendar\x20deadlines\x20bind\x20pattern.time_source_repository_oracle\x20and\x20document\x20the\x20source.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Crowdfunding\x20refund\x20rail:\x20the\x20→refunded\x20claim\x20opens\x20IMMEDIATELY\x20for\x20every\x20backer\x20of\x20a\x20campaign\x20'+'that\x20never\x20reached\x20\x27funded\x27\x20(sentinel\x20leg),\x20and\x20for\x20reached\x20campaigns\x20only\x20after\x20the\x2048h\x20'+'withdrawal\x20grace\x20window\x20from\x20the\x20funded\x20entry\x20—\x20the\x20same\x20guard\x20serves\x20both\x20orders\x20on\x20one\x20rail.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_order_holder','scene_id':'machine_forward_guard','name':'Order-holder\x20identity\x20gate\x20(buyer\x20self-advance;\x20254-anchored)','description':'Instantiable\x20form\x20of\x20pattern.identity_check_order_holder:\x20the\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20'+'the\x20order\x20owner\x20OR\x20a\x20registered\x20order\x20agent.\x20All\x20identity\x20legs\x20'+'read\x20the\x20254\x20task-binding\x20slot\x20(T10,\x20rex-mn-261021)\x20—\x20a\x20free\x20submission\x20slot\x20is\x20hijackable,\x20because\x20the\x20'+'caller\x20fills\x20free\x20slots\x20and\x20could\x20submit\x20their\x20OWN\x20order\x20there.\x20Pair\x20with\x20operator\x20order_payer\x20'+'(namedOperator\x20\x22\x22)\x20on\x20the\x20edge:\x20a\x20permissionIndex\x20rail\x20has\x20a\x20disjoint\x20signer\x20set\x20and\x20nobody\x20passes\x20'+'both\x20layers\x20(bkng\x20F23).','recommended_patterns':['P10','P16'],'parameters':[],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},'applicable_industries':['travel','rental','ecommerce','education','freelance'],'relevant_risks':['R-C3-01','R-C3-05','R-C3-06','R-C4-04'],'creation_notes':['T10\x20HIJACK\x20ANCHOR\x20(rex-mn-261021):\x20the\x20identity\x20legs\x20MUST\x20read\x20the\x20order\x20at\x20slot\x20254\x20—\x20the\x20caller\x20fills\x20free\x20slots,\x20so\x20reading\x20order.owner\x20off\x20a\x20free\x20submission\x20slot\x20lets\x20an\x20attacker\x20submit\x20their\x20OWN\x20order\x20(signer\x20==\x20order.owner\x20passes\x20against\x20it)\x20and\x20advance\x20the\x20VICTIM\x27s\x20order\x20carried\x20by\x20254.\x20The\x20compile\x20blocker\x20GUARD_IDENTITY_SLOT_NOT_TASKBOUND\x20enforces\x20the\x20anchor\x20on\x20resolved\x20trees.','EDGE\x20OPERATOR\x20PAIRING\x20(bkng\x20F23):\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20order_payer\x20(namedOperator\x20\x22\x22).\x20The\x20identity\x20layer\x20runs\x20BEFORE\x20the\x20guard;\x20a\x20permissionIndex\x20rail\x27s\x20signer\x20set\x20is\x20disjoint\x20from\x20the\x20order\x20holder\x27s,\x20so\x20the\x20pair\x20can\x20never\x20both\x20pass.\x20The\x20compile\x20blocker\x20FORWARD_GUARD_IDENTITY_PERM_CONFLICT\x20enforces\x20this\x20for\x20this\x20template\x20id.','MIXED\x20RETURN-TYPE\x20CONSTRUCTION:\x20order.owner\x20(1562)\x20returns\x20Address\x20→\x20wrapped\x20in\x20logic_equal\x20with\x20context(Signer);\x20order.agent\x20has\x20(1567)\x20returns\x20Bool\x20→\x20used\x20directly\x20as\x20the\x20logic_or\x20child\x20with\x20parameters\x20[context(Signer)].','An\x20empty\x20namedOperator\x20is\x20NOT\x20buyer-exclusive\x20BY\x20ITSELF:\x20whoever\x20holds\x20the\x20order\x20may\x20drive\x20the\x20forward\x20—\x20exactly\x20the\x20buyer\x20self-advance\x20semantic.\x20WITHOUT\x20this\x20guard\x20the\x20empty\x20operator\x20admits\x20ANY\x20caller\x20(the\x20on-chain\x20forward\x20entry\x20never\x20checks\x20the\x20caller),\x20so\x20the\x20guard\x20is\x20the\x20sole\x20identity\x20leg\x20(bkg15\x20F05:\x20forged\x20guest\x20check-in).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20stay:\x20the\x20guest\x20check-in\x20confirmation\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20the\x20booking\x27s\x20order\x20'+'owner\x20or\x20a\x20registered\x20agent\x20—\x20the\x20platform\x20cannot\x20fabricate\x20the\x20buyer\x20half\x20of\x20the\x20dual\x20confirmation.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_review_submit_content_gate','scene_id':'machine_forward_guard','name':'Review\x20content\x20gate\x20(order-holder\x20identity\x20+\x20order-keyed\x20rating-row\x20presence)','description':'SubmitReview\x20twin\x20of\x20tpl_forward_order_holder:\x20the\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20the\x20'+'order\x20owner\x20OR\x20a\x20registered\x20agent\x20(identical\x20254-anchored\x20identity\x20legs),\x20AND\x20the\x20plan\x27s\x20review\x20'+'repository\x20holds\x20a\x20\x27rating\x27\x20row\x20for\x20THIS\x20order\x20(query_repository_data_has,\x20legacy\x201166\x20—\x20missing\x20'+'row\x20yields\x20false,\x20never\x20aborts),\x20and\x20—\x20⑧\x20ktt3\x20F04,\x20only\x20when\x20delivered_node\x20is\x20set\x20—\x20the\x20order\x20'+'ENTERED\x20the\x20delivery\x20node\x20at\x20least\x20once\x20(query\x201274\x20existence\x20probe,\x20aborts\x20when\x20absent),\x20and\x20—\x20'+'F-17\x20ktt3,\x20only\x20when\x20review_window_days\x20is\x20also\x20set\x20—\x20Clock\x20<=\x20the\x20delivery\x20node\x27s\x20FIRST\x20entry\x20'+'(query\x201280\x20find:first)\x20+\x20review_window_days:\x20the\x20review\x20rail\x20CLOSES\x20after\x20the\x20window\x20(快团团\x20'+'semantic:\x20reviews\x20close\x2015\x20days\x20after\x20delivery).\x20Binds\x20'+'the\x20review\x20rail\x20to\x20real\x20content:\x20the\x20credential\x20write\x20side\x20'+'(compile-emitted\x20guard_review_write)\x20is\x20order-keyed,\x20so\x20a\x20review\x20that\x20never\x20landed\x20cannot\x20be\x20'+'reviewed\x20past.\x20Pairs\x20with\x20operator\x20order_payer\x20on\x20the\x20edge\x20(bkng\x20F23\x20rail-split\x20discipline).','recommended_patterns':['P10','P13','P16'],'parameters':[{'name':'review_repository','type':'string','description':'The\x20plan\x27s\x20buyer-review\x20Repository\x20(\x27<base>_review\x27,\x20emitted\x20by\x20the\x20compile\x20review\x20component)\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20on\x20the\x20fill\x20path;\x20only\x20review_mode\x20\x27none\x27\x20plans\x20lack\x20it','required':!![],'constraint':'Must\x20be\x20a\x20name\x20(P16\x20late-binding),\x20not\x20an\x20address.\x20Seeded\x20by\x20the\x20kernel\x20as\x20\x27<base>_review\x27;\x20do\x20NOT\x20mount\x20this\x20gate\x20on\x20a\x20review_mode\x20\x27none\x27\x20plan\x20—\x20there\x20is\x20no\x20such\x20repository\x20and\x20the\x201166\x20probe\x20yields\x20false,\x20welding\x20the\x20edge\x20shut'},{'name':'delivered_node','type':'string','description':'⑧\x20ktt3\x20F04:\x20the\x20machine\x20node\x20whose\x20PAST\x20ENTRY\x20marks\x20\x27the\x20goods\x20were\x20handed\x20over\x27\x20(semantic_role\x20\x27delivered\x27\x20—\x20e.g.\x20\x27picked_up\x27,\x20\x27delivered\x27).\x20Non-empty\x20=\x20the\x20gate\x20grows\x20a\x20history-EXISTENCE\x20leg\x20(query\x201274\x20find\x20over\x20where.nextNode,\x20which\x20ABORTS\x20when\x20no\x20entry\x20matches\x20—\x20fail-closed):\x20only\x20orders\x20that\x20entered\x20the\x20delivery\x20node\x20at\x20least\x20once\x20may\x20review,\x20so\x20a\x20never-delivered\x20order\x20cannot\x20(W5-03,\x202026-11-01:\x20the\x20leg\x20keeps\x20the\x20post-settlement\x20entry\x20REAL;\x20refund-terminal\x20review\x20entries\x20no\x20longer\x20exist\x20—\x20a\x20cancelled\x20terminal\x20must\x20not\x20mount\x20a\x20review/reward-class\x20advance\x20at\x20all).\x20EMPTY/omitted\x20=\x20the\x20leg\x20is\x20omitted\x20(the\x20shipped\x20two-leg\x20shape:\x20identity\x20+\x20rating-row\x20presence)','required':![],'constraint':'Must\x20be\x20a\x20real\x20node\x20name\x20of\x20the\x20SAME\x20machine,\x20never\x20a\x20terminal\x20—\x20the\x20delivery\x20moment\x20itself.\x20W5-03:\x20SubmitReview\x20edges\x20depart\x20the\x20post-settlement\x20node\x20ONLY\x20—\x20never\x20mount\x20one\x20from\x20a\x20cancelled/refund\x20terminal\x20(STATE-REFUNDED-REWARD-01\x20critical).\x20ALSO\x20the\x20anchor\x20of\x20the\x20F-17\x20review\x20window:\x20review_window_days\x20cannot\x20be\x20used\x20without\x20it'},{'name':'review_window_days','type':'number','description':'F-17\x20(ktt3-tn-261028):\x20closing\x20window\x20on\x20the\x20review\x20rail\x20—\x20Clock\x20<=\x20delivery\x20node\x27s\x20FIRST\x20entry\x20(query\x201280\x20find:first)\x20+\x20N\x20days.\x20The\x20快团团\x20semantic:\x20reviews\x20close\x2015\x20days\x20after\x20delivery;\x20afterwards\x20the\x20SubmitReview\x20edge\x20is\x20fail-closed.\x20EMPTY/omitted/\x270\x27\x20=\x20no\x20window\x20(reviews\x20stay\x20open\x20forever\x20—\x20the\x20ktt3\x20F17\x20defect\x20the\x20param\x20cures).\x20REQUIRES\x20delivered_node\x20—\x20the\x20window\x20anchors\x20on\x20its\x20entry;\x20fill\x20REJECTS\x20a\x20window\x20without\x20the\x20anchor','required':![],'default':'','constraint':'Whole\x20days\x20(x\x2086400000\x20ms).\x20Use\x20the\x20store\x27s\x20real\x20after-sales\x20review\x20bound\x20(快团团:\x2015).\x20Window\x20length\x20counts\x20from\x20the\x20FIRST\x20delivery\x20entry\x20—\x20a\x20re-delivery\x20does\x20not\x20re-arm\x20the\x20deadline.\x20REQUIRES\x20delivered_node\x20(the\x20anchor):\x20fill\x20rejects\x20a\x20window\x20without\x20it'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${review_repository}','name':'Plan\x20review\x20repository\x20(\x27<base>_review\x27\x20—\x20kernel-seeded\x20late-binding;\x20holds\x20the\x20\x27rating\x27\x20rows)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'0','name':'Zero\x20floor\x20of\x20the\x20delivered-entry\x20existence\x20leg\x20(delivered_node=${delivered_node};\x20this\x20row\x20drops\x20WITH\x20the\x20leg\x20when\x20the\x20param\x20is\x20empty)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${review_window_days}','name':'F-17\x20review\x20window\x20length\x20in\x20days\x20(review_window_days=${review_window_days};\x20this\x20row\x20drops\x20WITH\x20the\x20leg\x20when\x20the\x20param\x20is\x20empty)'},{'identifier':0x5,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant\x20of\x20the\x20F-17\x20review\x20window\x20leg\x20(review_window_days=${review_window_days};\x20drops\x20WITH\x20the\x20leg\x20when\x20the\x20param\x20is\x20empty)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'query_repository_data_has','object':{'identifier':0x2},'id':{'identifier':0xfe},'key':'rating'},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query_progress_history_find','object':{'identifier':0xfe,'convert_witness':'OrderProgress'},'where':{'nextNode':'${delivered_node}'},'find':'last'},{'type':'identifier','identifier':0x3}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0xfe,'convert_witness':'OrderProgress'},'where':{'nextNode':'${delivered_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x4},{'type':'identifier','identifier':0x5}]}]}]}]},'applicable_industries':['retail','ecommerce','education','travel','delivery'],'relevant_risks':['R-C3-01','R-C3-05'],'creation_notes':['F-07\x20PROVENANCE\x20(ddmc2-tn-261028):\x20the\x20shipped\x20catalog\x20mounted\x20tpl_forward_order_holder\x20on\x20every\x20SubmitReview\x20edge\x20—\x20the\x20review\x20credential\x20(kernel\x20guard_review_write)\x20enforced\x20WHO\x20writes,\x20but\x20NOTHING\x20enforced\x20THAT\x20a\x20row\x20was\x20written,\x20so\x20a\x20buyer\x20whose\x20review\x20writes\x20failed\x20(envelope\x20format\x20errors\x20in\x20the\x20live\x20run)\x20still\x20advanced\x20completed\x20->\x20reviewed\x20and\x20the\x20rating\x20consumers\x20(reward\x20rating\x20floor,\x20scorecard\x20aggregators)\x20silently\x20ran\x20on\x20an\x20empty\x20set.','ORDER-KEYED\x20BY\x20CONSTRUCTION:\x20the\x20rating\x20row\x20id\x20IS\x20the\x20order\x20address\x20(compile\x20repository_review\x20policy\x20\x27rating\x27,\x20id_from\x20none)\x20and\x20the\x20buyer\x20writes\x20it\x20through\x20the\x20review\x20credential\x20(repository.data_add\x20name\x20\x27rating\x27,\x20id\x20<order\x20address>)\x20—\x20the\x201166\x20probe\x20therefore\x20reads\x20exactly\x20THIS\x20order\x27s\x20cell;\x20no\x20candidate\x20list\x20exists\x20to\x20pad\x20(the\x20ddmc2\x20F-10\x20borrowed-evidence\x20hole\x20is\x20structurally\x20absent\x20here).','REVIEW_MODE\x20PAIRING:\x20mount\x20ONLY\x20where\x20review_mode\x20!==\x20\x27none\x27\x20(the\x20repository_review\x20step\x20emits\x20\x27<base>_review\x27\x20unconditionally\x20otherwise\x20absent).\x20The\x20kernel\x20seeds\x20review_repository\x20on\x20the\x20fill\x20path\x20under\x20the\x20same\x20condition\x20—\x20a\x20review_mode\x20\x27none\x27\x20plan\x20never\x20reaches\x20this\x20template,\x20and\x20a\x20hand-mount\x20over\x20one\x20welds\x20the\x20edge\x20shut\x20(1166\x20missing-repo\x20yields\x20false,\x20fail-closed).','REWARD\x20FLOOR\x20COMPOSITION:\x20this\x20gate\x20says\x20\x27a\x20rating\x20row\x20exists\x27\x20(content\x20presence),\x20NOT\x20\x27rating\x20>=\x20floor\x27\x20—\x20the\x20reward\x20claim\x20side\x20keeps\x20its\x20own\x20tpl_repository_review_threshold_gate/one-time-claim\x20rating\x20leg\x20for\x20the\x20floor.\x20Do\x20not\x20collapse\x20the\x20two:\x20submit-time\x20presence\x20and\x20claim-time\x20quality\x20are\x20different\x20business\x20moments.','⑧\x20DELIVERED-ENTRY\x20GATE\x20(ktt3\x20F04,\x202026-10-29):\x20with\x20delivered_node\x20set\x20the\x20gate\x20demands\x20the\x20order\x20ENTERED\x20the\x20delivery\x20node\x20at\x20least\x20once\x20(query\x201274\x20aborts\x20on\x20no-match,\x20fail-closed)\x20—\x20the\x20review\x20right\x20survives\x20a\x20REFUND\x20(the\x20rating\x20cohort\x20and\x20reward\x20eligibility\x20keep\x20the\x20after-sales\x20buyers),\x20while\x20a\x20never-delivered\x20order\x20(pre-cutoff\x20cancel,\x20unclaimed\x20goods)\x20stays\x20excluded.\x20Mount\x20the\x20companion\x20SubmitReview\x20edges\x20from\x20the\x20refund\x20terminals\x20on\x20the\x20SAME\x20guard\x20key;\x20the\x20empty\x20default\x20preserves\x20every\x20pre-⑧\x20build\x20byte-for-byte\x20(the\x20pruner\x20drops\x20the\x20leg\x20AND\x20its\x20zero-slot\x20before\x20substitution).','F-17\x20REVIEW\x20WINDOW\x20(ktt3-tn-261028\x20F-17,\x202026-10-29):\x20with\x20review_window_days\x20set\x20(non-empty,\x20non-\x270\x27)\x20AND\x20delivered_node\x20set,\x20the\x20gate\x20ALSO\x20demands\x20Clock\x20<=\x20delivery-first-entry\x20+\x20N\x20days\x20—\x20the\x20review\x20rail\x20CLOSES\x20(快团团\x20real\x20semantic:\x2015\x20days\x20after\x20confirmation\x20of\x20receipt,\x20then\x20shut).\x20The\x20anchor\x20reads\x20find:\x27first\x27\x20so\x20a\x20re-entered\x20delivery\x20node\x20cannot\x20re-arm\x20the\x20deadline\x20(ktt3\x20F-16\x20discipline);\x20the\x20closing\x20direction\x20is\x20lesser_or_equal\x20(etm\x20A-06)\x20so\x20expiry\x20welds\x20the\x20edge\x20shut\x20fail-closed.\x20fill\x20REJECTS\x20a\x20window\x20without\x20the\x20anchor\x20—\x20review_window_days\x20needs\x20delivered_node\x20to\x20exist.\x20Empty/\x270\x27/omitted\x20ships\x20the\x20windowless\x20⑧\x20shape\x20byte-for-byte\x20(the\x20pruner\x20drops\x20the\x20leg\x20AND\x20its\x20slots\x204-5).\x20Without\x20a\x20window\x20the\x20completed->reviewed\x20loop\x20is\x20infinitely\x20re-enterable:\x20each\x20pass\x20writes\x20another\x20History\x20record\x20(buyer\x20pays\x20storage),\x20re-jitters\x20progress.current\x20for\x20node-keyed\x20downstream\x20risk\x20logic,\x20and\x20(pre\x20F-16)\x20reset\x20the\x20reward\x20claim\x20clock\x20—\x20prefer\x20the\x20windowed\x20form\x20on\x20every\x20real\x20store.'],'example_use_case':'Community\x20group-buy:\x20the\x20buyer\x27s\x20SubmitReview\x20advances\x20only\x20when\x20the\x20caller\x20owns\x20the\x20order\x20AND\x20the\x20'+'plan\x20review\x20repository\x20holds\x20this\x20order\x27s\x20rating\x20row\x20—\x20an\x20order\x20whose\x20review\x20writes\x20failed\x20can\x20no\x20'+'longer\x20masquerade\x20as\x20reviewed.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_holder_confirm_evidence_gate','scene_id':'machine_forward_guard','name':'Holder\x20confirm\x20with\x20redemption\x20row\x20(order-holder\x20identity\x20+\x20order-keyed\x20evidence-row\x20presence)','description':'Redemption\x20twin\x20of\x20tpl_forward_order_holder:\x20the\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20the\x20'+'order\x20owner\x20OR\x20a\x20registered\x20agent\x20(identical\x20254-anchored\x20identity\x20legs),\x20AND\x20the\x20plan\x27s\x20evidence\x20'+'repository\x20holds\x20an\x20order-keyed\x20row\x20for\x20THIS\x20order\x20whose\x20value\x20contains\x20the\x20marker\x20'+'(query_repository_data_find_where\x20stringContains\x20+\x20the\x20F-10\x20vec_contains_address\x20order\x20pin\x20over\x20'+'the\x20matched\x20id\x20set)\x20—\x20the\x20counterparty\x27s\x20writer-bound\x20redemption\x20row\x20must\x20exist\x20before\x20the\x20'+'buyer\x27s\x20own\x20confirmation\x20can\x20pass.\x20DUAL\x20CONFIRMATION:\x20the\x20row\x20proves\x20the\x20handover\x20happened,\x20the\x20'+'identity\x20set\x20proves\x20the\x20collector\x20performed\x20it;\x20neither\x20side\x20alone\x20advances\x20the\x20edge.\x20Pairs\x20with\x20'+'operator\x20order_payer\x20on\x20the\x20edge\x20(bkng\x20F23\x20rail-split\x20discipline).','recommended_patterns':['P07','P10','P15','P16'],'parameters':[{'name':'repository_name','type':'string','description':'Evidence\x20Repository\x20object\x20name\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20with\x20the\x20plan\x27s\x20evidence\x20repository\x20(\x27<base>_evidence\x27,\x20A5\x20late-binding\x20like\x20service_name)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'row_name','type':'string','description':'Policy\x20key\x20under\x20which\x20the\x20redemption\x20rows\x20are\x20stored\x20(the\x20writer-bound\x20evidence\x20policy,\x20e.g.\x20\x27evidence\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Repository\x20policy\x20name\x20(case-sensitive)\x20AND\x20the\x20write\x20side\x27s\x20policy\x20—\x20a\x20key\x20no\x20repository\x20step\x20defines\x20fails\x20the\x20probe\x20closed'},{'name':'evidence_marker','type':'string','description':'Substring\x20the\x20redemption\x20row\x20value\x20must\x20contain\x20(typically\x20the\x20guarded\x20forward\x27s\x20own\x20name,\x20e.g.\x20\x27ConfirmPickup\x27)\x20—\x20an\x20arrival/distribution\x20row\x20tagged\x20with\x20a\x20DIFFERENT\x20forward\x27s\x20marker\x20cannot\x20open\x20this\x20gate','required':!![],'constraint':'Written\x20by\x20the\x20counterparty\x27s\x20writer-bound\x20write\x20guard\x20at\x20the\x20handover\x20moment;\x20use\x20the\x20guarded\x20forward\x27s\x20own\x20name\x20so\x20stage\x20evidence\x20(arrival,\x20distribution)\x20never\x20doubles\x20as\x20redemption'}],'example_table':[{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Evidence\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${row_name}','name':'Evidence\x20policy\x20key'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${evidence_marker}','name':'Marker\x20substring\x20the\x20row\x20value\x20must\x20contain'},{'identifier':0x5,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20evidence\x20row\x20ids\x20submitted\x20by\x20the\x20verifier\x20(max\x20100,\x20deduped)'},{'identifier':0x6,'b_submission':![],'value_type':'U64','value':0x1,'name':'Minimum\x20matching\x20row\x20count\x20(superseded\x20by\x20the\x20F-10\x20order-pin\x20leg\x20—\x20order-keyed\x20policies\x20hold\x20ONE\x20row\x20per\x20order;\x20kept\x20for\x20table-layout\x20stability)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x1},'key':{'identifier':0x2},'ids':{'identifier':0x5},'where':{'kind':'stringContains','value':'${evidence_marker}'}},{'type':'identifier','identifier':0xfe}]}]},'applicable_industries':['retail','ecommerce','education','travel','delivery'],'relevant_risks':['R-C3-01','R-C3-05','R-X1-17'],'creation_notes':['F-BIZ-02\x20PROVENANCE\x20(ddmc3-tn-261029):\x20the\x20shipped\x20pickup_confirm\x20/\x20deliver_confirm\x20were\x20identity-ONLY\x20—\x20the\x20buyer\x27s\x20self-attestation\x20was\x20the\x20whole\x20record\x20of\x20handover,\x20so\x20the\x20dispute\x20surface\x20had\x20NO\x20counterparty-authored\x20baseline\x20(\x27did\x20the\x20point\x20release\x20the\x20goods?\x27)\x20and\x20a\x20confirmation\x20could\x20fire\x20before\x20any\x20physical\x20release.\x20This\x20gate\x20welds\x20the\x20redemption\x20row\x20onto\x20the\x20buyer\x27s\x20confirm;\x20the\x20pattern.*\x20prose\x20design\x20stays\x20the\x20DESIGN\x20language,\x20this\x20template\x20is\x20its\x20executable\x20form.','ORDER-KEYED\x20BY\x20CONSTRUCTION:\x20the\x20evidence\x20write\x20side\x20declares\x20id_from\x20none,\x20so\x20the\x20row\x20id\x20IS\x20the\x20order\x20address.\x20The\x20candidate\x20slot\x20stays\x20verifier-attested\x20(the\x20advancing\x20buyer\x20submits\x20the\x20row\x20ids\x20they\x20can\x20see),\x20which\x20is\x20exactly\x20why\x20the\x20pin\x20is\x20load-bearing:\x20padding\x20the\x20candidates\x20with\x20ANOTHER\x20order\x27s\x20redemption\x20row\x20cannot\x20pass\x20—\x20the\x20matched\x20set\x20must\x20contain\x20the\x20chain-written\x20254\x20anchor,\x20which\x20the\x20caller\x20can\x20neither\x20fill\x20nor\x20forge\x20(strictly\x20stronger\x20than\x20a\x20free-submission-slot\x20pin,\x20T10).','MARKER\x20SEMANTIC\x20—\x20REDEMPTION\x20IS\x20NOT\x20ARRIVAL:\x20the\x20marker\x20must\x20be\x20the\x20guarded\x20forward\x27s\x20own\x20name\x20(ConfirmPickup\x20/\x20ConfirmReceipt),\x20while\x20stage\x20rows\x20carry\x20THEIR\x20forward\x27s\x20marker\x20(ShelveAtPoint,\x20DepositToLocker,\x20HandoverByPoint,\x20DistributeGoods).\x20An\x20order\x20parked\x20at\x20the\x20point\x20with\x20arrival\x20evidence\x20but\x20no\x20handover\x20record\x20can\x20NOT\x20pass\x20this\x20gate.','WRITE\x20SIDE\x20IS\x20THE\x20COUNTERPARTY\x20(R-X1-17,\x20existence-is-not\x20trust):\x20the\x20row\x20MUST\x20be\x20written\x20under\x20the\x20writer-bound\x20evidence\x20write\x20guard\x20(a\x20registered\x20Entity\x20—\x20point\x20staff\x20/\x20leader\x20staff),\x20never\x20an\x20open\x20policy\x20—\x20the\x20on-chain\x20repository\x20only\x20asserts\x20a\x20non-empty\x20write-guard\x20list\x20(E_POLICY_WRITE_GUARD_REQUIRED=22),\x20and\x20an\x20open\x20write\x20lets\x20the\x20COUNTERPARTY\x20pre-write\x20the\x20redemption\x20the\x20buyer\x20never\x20performed.','RESIDUAL\x20DISCLOSURE\x20(keeper\x20duty\x20presses\x20it,\x20never\x20chains\x20it):\x20if\x20the\x20point\x20forgets\x20the\x20row,\x20a\x20buyer\x20HOLDING\x20the\x20goods\x20cannot\x20confirm\x20—\x20the\x20order\x20stalls\x20at\x20the\x20rest\x20node\x20until\x20the\x20pickup\x20window\x20closes\x20and\x20the\x20unclaimed\x20exit\x20refunds\x20a\x20buyer\x20who\x20already\x20has\x20the\x20goods.\x20That\x20cost\x20sits\x20on\x20the\x20keeper\x20duty\x20entry,\x20is\x20disclosed\x20on\x20the\x20trust\x20face,\x20and\x20is\x20the\x20accepted\x20price\x20of\x20not\x20letting\x20either\x20party\x20advance\x20alone.','DUAL,\x20NEVER\x20REPLACED:\x20this\x20template\x20ADDS\x20the\x20row\x20leg\x20to\x20the\x20buyer\x27s\x20identity\x20confirm\x20—\x20never\x20swap\x20the\x20edge\x20to\x20a\x20staff-only\x20confirmation\x20(a\x20point\x20fabricating\x20pickup\x20would\x20force\x20settlement\x20over\x20a\x20buyer\x20who\x20never\x20collected\x20—\x20the\x20anti-pattern\x20the\x20double\x20confirmation\x20exists\x20to\x20prevent).','EDGE\x20OPERATOR\x20PAIRING\x20(bkng\x20F23):\x20bind\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20order_payer\x20(namedOperator\x20\x22\x22).\x20The\x20identity\x20layer\x20runs\x20BEFORE\x20the\x20guard;\x20a\x20permissionIndex\x20rail\x27s\x20signer\x20set\x20is\x20disjoint\x20from\x20the\x20order\x20holder\x27s,\x20so\x20the\x20pair\x20can\x20never\x20both\x20pass.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Community\x20self-pickup:\x20the\x20neighbor\x27s\x20ConfirmPickup\x20advances\x20at_point\x20->\x20picked_up\x20only\x20when\x20the\x20'+'caller\x20owns\x20the\x20order\x20AND\x20the\x20point\x27s\x20writer-bound\x20redemption\x20row\x20(value\x20tagged\x20ConfirmPickup)\x20'+'exists\x20for\x20this\x20order\x20—\x20handover\x20and\x20collection\x20are\x20separately\x20proven,\x20neither\x20party\x20alone.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_identity_check_single','scene_id':'machine_forward_guard','name':'Single\x20pinned-identity\x20gate\x20(Signer\x20==\x20fixed\x20judge\x20address)','description':'The\x20forward\x20advances\x20only\x20when\x20the\x20caller\x20is\x20ONE\x20concrete\x20pinned\x20account\x20address\x20(the\x20independent\x20'+'judge/evaluator).\x20The\x20pinned\x20address\x20is\x20the\x20maximum-security\x20identity\x20form\x20(level1_strict,\x20R-C4-04)\x20'+'and\x20is\x20IMMUTABLE\x20after\x20publish\x20—\x20swapping\x20the\x20judge\x20means\x20a\x20new\x20Machine\x20build,\x20so\x20pin\x20a\x20long-lived\x20'+'account.\x20RAIL\x20SPLIT:\x20the\x20address\x20leg\x20rides\x20THIS\x20guard\x20while\x20the\x20entity\x20rail\x20rides\x20the\x20forward\x27s\x20'+'permission_index\x20—\x20guard\x20AND\x20permission\x20must\x20BOTH\x20hold,\x20and\x20the\x20guard\x20alone\x20never\x20grants\x20the\x20index.','recommended_patterns':['P10','P16'],'parameters':[{'name':'pinned_address','type':'address','description':'The\x20single\x20authorized\x20account\x20address\x20(the\x20judge/evaluator).\x20REQUIRED\x20—\x20a\x20template\x20declaration\x20cannot\x20know\x20the\x20judge\x27s\x20address,\x20and\x20the\x20old\x20empty\x20default\x20shipped\x20a\x20silent\x20dead\x20edge\x20(algr9\x20F-01);\x20a\x20missing\x20pin\x20is\x20now\x20a\x20deterministic\x20fill\x20error.\x20A\x20literal\x200x\x20account\x20address\x20is\x20the\x20EXPECTED\x20form\x20here:\x20the\x20foreign-pin\x20rule\x20never\x20applies\x20to\x20Signer-pinning\x20legs\x20(algr9\x20F-02)','required':!![],'constraint':'Must\x20be\x20the\x20judge\x27s\x20long-lived\x20account\x20address\x20(immutable\x20after\x20publish).\x20Supply\x20at\x20generation\x20via\x20the\x20guard\x20spec\x27s\x20params\x20/\x20guard_resolutions'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${pinned_address}','name':'The\x20pinned\x20judge/evaluator\x20address\x20(the\x20only\x20authorized\x20forward\x20caller)'}],'example_root':{'type':'logic_equal','nodes':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x1}]},'applicable_industries':['freelance','ecommerce','education'],'relevant_risks':['R-C3-05','R-C4-04'],'creation_notes':['RAIL\x20SPLIT\x20(alg2-tn-261025\x20F-05):\x20the\x20judge\x27s\x20ADDRESS\x20leg\x20rides\x20this\x20guard;\x20the\x20entity\x20rail\x20rides\x20the\x20forward\x27s\x20permissionIndex.\x20Guard\x20AND\x20permission\x20must\x20BOTH\x20hold\x20—\x20the\x20guard\x20alone\x20is\x20NOT\x20what\x20grants\x20the\x20index.\x20The\x20judge\x20is\x20a\x20third\x20party\x20disjoint\x20from\x20both\x20the\x20client\x20(order\x20payer)\x20and\x20the\x20provider\x20(service\x20permission);\x20the\x20payout-owing\x20party\x20never\x20decides\x20the\x20payout.','TASK-BOUND\x20READS\x20(rex-mn-261021\x20T10):\x20all\x20order\x20reads\x20anchor\x20the\x20protocol-254\x20task-binding\x20slot\x20—\x20a\x20free\x20submission\x20slot\x20is\x20caller-fillable\x20and\x20hijackable.\x20The\x20legacy\x20order.service\x20project-binding\x20leg\x20was\x20removed\x20(v148\x20chain-side\x20task\x20binding\x20—\x20bsw4\x20F-06).','IMMUTABILITY\x20(IMMUT-001):\x20Guard\x20AND\x20Machine\x20are\x20immutable\x20after\x20publish\x20—\x20a\x20judge\x20swap\x20means\x20a\x20NEW\x20Machine\x20build.\x20Pin\x20the\x20judge\x27s\x20long-lived\x20account,\x20never\x20a\x20rotating\x20key.','REQUIRED-PIN\x20DISCIPLINE\x20(algr9\x20F-01):\x20pinned_address\x20is\x20REQUIRED\x20—\x20the\x20old\x20EMPTY\x20default\x20compiled\x20a\x20zero-input\x20build\x20whose\x20every\x20forward\x20then\x20died\x20on\x20the\x20unsatisfiable\x20Signer\x20==\x20\x22\x22\x20leg.\x20A\x20missing\x20pin\x20now\x20fails\x20the\x20fill\x20deterministically\x20with\x20the\x20supply\x20path;\x20a\x20filled\x20pin\x20is\x20a\x20plain\x20ACCOUNT\x20address\x20and\x20is\x20never\x20a\x20foreign-service\x20pin\x20(the\x20foreign-pin\x20blocker\x20fires\x20only\x20on\x20order.service\x20pins,\x20algr9\x20F-02).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Agent\x20task:\x20the\x20independent\x20Evaluator\x27s\x20account\x20is\x20pinned\x20as\x20the\x20only\x20caller\x20of\x20the\x20accept/reject\x20forwards,\x20so\x20neither\x20the\x20client\x20nor\x20the\x20provider\x20can\x20rule\x20on\x20their\x20own\x20escrow\x20(INV-A3).','verifier_constraint_level':'level1_strict'},{'id':'tpl_time_window_upper_order_holder','scene_id':'machine_forward_guard','name':'Order-time\x20closing\x20window\x20+\x20order-holder\x20identity\x20(free-cancellation\x20form)','description':'The\x20buyer-side\x20window\x20that\x20CLOSES:\x20Clock\x20<=\x20order.time\x20+\x20hours\x20x\x203600000,\x20ANDed\x20with\x20the\x20order-holder\x20'+'identity\x20set\x20(owner\x20or\x20agent,\x20254-anchored).\x20The\x20canonical\x20free-'+'cancellation\x20gate\x20—\x20buyer-triggered\x20cancel\x20rails\x20must\x20carry\x20the\x20identity\x20leg,\x20because\x20an\x20empty\x20'+'namedOperator\x20is\x20NOT\x20buyer-exclusive\x20(bkg15\x20F05)\x20and\x20the\x20platform\x20could\x20otherwise\x20drive\x20the\x20\x27buyer\x27\x20'+'forward\x20itself.\x20Instantiable\x20form\x20of\x20pattern.time_window_upper_bound\x20+\x20pattern.identity_check_order_holder.','recommended_patterns':['P06','P10','P16'],'parameters':[{'name':'free_cancel_hours','type':'number','description':'Window\x20length\x20in\x20hours,\x20measured\x20from\x20order.time\x20(booking\x20moment)','required':!![],'constraint':'Plain\x20number\x20of\x20hours\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x203600000).\x20order.time\x20is\x20the\x20BOOKING\x20moment,\x20not\x20the\x20stay\x20start;\x20a\x20faithful\x20per-stay\x20deadline\x20rides\x20a\x20stay-date\x20Repository\x20row'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':'${free_cancel_hours}','name':'Window\x20length\x20in\x20hours\x20(booking-time\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':0x36ee80,'name':'Hours-to-milliseconds\x20constant'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query','query':'order.time','object':{'identifier':0xfe},'parameters':[]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0x3}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','education'],'relevant_risks':['R-C3-01','R-C3-05','R-C4-04'],'creation_notes':['DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(bkd8\x20BK-02):\x20lesser_or_equal[Clock,\x20order.time\x20+\x20N]\x20CLOSES\x20the\x20window\x20—\x20cancel\x20admitted\x20inside,\x20refused\x20after.\x20Inverting\x20the\x20comparison\x20(the\x20opening-gate\x20twin)\x20makes\x20every\x20window\x20permanently\x20open:\x20cancel\x20aborts\x20inside\x20the\x20window\x20and\x20is\x20ADMITTED\x20after\x20it\x20closed.','ANCHOR\x20(TIME-ANCHOR-01):\x20order.time\x20is\x20the\x20BOOKING\x20moment,\x20written\x20once\x20at\x20creation\x20and\x20immutable\x20—\x20path-independent\x20by\x20construction.\x20It\x20is\x20NOT\x20the\x20stay\x20start:\x20no\x20check-in\x20date\x20exists\x20on\x20chain,\x20so\x20\x27free\x20cancel\x20until\x2072h\x20before\x20arrival\x27\x20needs\x20the\x20stay-date\x20Repository\x20row\x20prescription\x20(STAY-DATE\x20CORE);\x20this\x20template\x20ships\x20the\x20zero-addition\x20booking-time\x20default.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(bkg15\x20F05):\x20attaching\x20a\x20Progress\x20to\x20an\x20Order\x20is\x20permissionless\x20and\x20an\x20empty\x20namedOperator\x20admits\x20ANY\x20caller\x20—\x20without\x20the\x20owner/agent\x20leg\x20the\x20platform\x20can\x20drive\x20the\x20\x27buyer\x27\x20cancel\x20forward\x20itself.\x20Legs\x20anchor\x20slot\x20254\x20(T10,\x20see\x20tpl_forward_order_holder).','EDGE\x20OPERATOR\x20PAIRING\x20(bkng\x20F23):\x20the\x20edge\x20rides\x20operator\x20order_payer;\x20a\x20permissionIndex\x20rail\x20conflicts\x20(disjoint\x20signer\x20sets).\x20FORWARD_GUARD_IDENTITY_PERM_CONFLICT\x20enforces\x20this\x20for\x20this\x20template\x20id.','EXPIRY\x20SEMANTICS:\x20an\x20expired\x20window\x20only\x20fails\x20the\x20forward\x20it\x20gates\x20—\x20pair\x20with\x20a\x20keeper\x20timeout\x20rail\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20free\x20cancellation:\x20the\x20paid\x20->\x20free_cancel\x20forward\x20advances\x20only\x20for\x20the\x20order\x20holder,\x20within\x2072h\x20'+'of\x20booking;\x20after\x20the\x20window\x20closes\x20the\x20buyer\x27s\x20route\x20is\x20the\x20cancel-policy\x20/\x20arb\x20rails,\x20not\x20this\x20edge.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_lock_order_time','scene_id':'machine_forward_guard','name':'Order-time\x20opening\x20lock\x20(keeper\x20timeout\x20form)','description':'The\x20keeper-side\x20timeout\x20that\x20OPENS:\x20Clock\x20>=\x20order.time\x20+\x20hours\x20x\x203600000.\x20'+'Deliberately\x20carries\x20NO\x20identity\x20leg\x20—\x20it\x20rides\x20a\x20permissionIndex\x20keeper\x20rail,\x20and\x20an\x20'+'order-holder\x20identity\x20would\x20make\x20the\x20two\x20layers\x20disjoint\x20(nobody\x20passes\x20both,\x20bkng\x20F23).\x20Canonical\x20'+'confirm-timeout\x20gate:\x20the\x20supplier\x20must\x20confirm\x20within\x20N\x20hours\x20of\x20booking\x20or\x20the\x20keeper\x20releases\x20the\x20'+'order\x20to\x20the\x20refund\x20rail.\x20Instantiable\x20form\x20of\x20pattern.time_lock_progress\x20anchored\x20on\x20order.time.','recommended_patterns':['P06'],'parameters':[{'name':'confirm_timeout_hours','type':'number','description':'Lock\x20duration\x20in\x20hours,\x20measured\x20from\x20order.time\x20(booking\x20moment)','required':!![],'constraint':'Plain\x20number\x20of\x20hours\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x203600000)'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':'${confirm_timeout_hours}','name':'Lock\x20duration\x20in\x20hours\x20(booking-time\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':0x36ee80,'name':'Hours-to-milliseconds\x20constant'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query','query':'order.time','object':{'identifier':0xfe},'parameters':[]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['travel','rental','ecommerce','education'],'relevant_risks':['R-C3-05'],'creation_notes':['DIRECTION\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20order.time\x20+\x20N]\x20is\x20the\x20OPENING\x20gate\x20—\x20the\x20keeper\x20rail\x20stays\x20blocked\x20until\x20the\x20timeout\x20elapses.\x20Never\x20invert\x20it.','NO\x20IDENTITY\x20LEG\x20—\x20DELIBERATE\x20(bkng\x20F23):\x20this\x20guard\x20rides\x20a\x20keeper\x20permissionIndex\x20rail.\x20Adding\x20an\x20order-holder\x20identity\x20would\x20intersect\x20a\x20merchant-side\x20slot\x20with\x20the\x20buyer\x27s\x20signer\x20set\x20—\x20the\x20edge\x20could\x20never\x20advance.\x20Buyer-advanced\x20edges\x20take\x20tpl_forward_order_holder\x20instead.','ANCHOR\x20(TIME-ANCHOR-01):\x20order.time\x20is\x20the\x20BOOKING\x20moment,\x20immutable\x20and\x20path-independent.\x20For\x20a\x20lock\x20anchored\x20on\x20a\x20NODE\x20ENTRY\x20(e.g.\x20N\x20days\x20after\x20delivery)\x20use\x20tpl_time_lock_progress_days\x20instead\x20—\x20booking-time\x20anchors\x20expire\x20before\x20the\x20stay\x20even\x20starts\x20when\x20the\x20lead\x20time\x20is\x20long.','KEEPER\x20COVERAGE:\x20the\x20timeout\x20releases\x20the\x20order\x20to\x20the\x20refund/cancel\x20rail\x20—\x20pair\x20with\x20a\x20fund\x20exit\x20on\x20the\x20timeout\x20node\x20(FUND-EXIT-01)\x20so\x20the\x20released\x20order\x20never\x20strands.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20supplier\x20confirm:\x20the\x20paid\x20->\x20confirm_timeout\x20keeper\x20forward\x20advances\x2048h\x20after\x20booking\x20if\x20the\x20'+'property\x20never\x20confirmed,\x20releasing\x20the\x20order\x20to\x20the\x20refund\x20rail.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_lock_progress_days','scene_id':'machine_forward_guard','name':'Node-entry\x20opening\x20lock\x20in\x20days\x20(claim-window\x20opener)','description':'Opening\x20gate\x20measured\x20in\x20DAYS\x20from\x20a\x20node\x27s\x20entry:\x20Clock\x20>=\x20progress.history.time(nextNode\x20=\x20'+'expected_node,\x20find=last)\x20+\x20days\x20x\x2086400000,\x20plus\x20the\x20node\x20gate.\x20The\x20'+'claim-window\x20opener:\x20a\x20keeper\x20forward\x20may\x20close\x20the\x20window\x20only\x20N\x20days\x20after\x20the\x20claim\x20window\x20opened.\x20'+'The\x201280\x20history\x20anchor\x20is\x20the\x20node\x27s\x20IMMUTABLE\x20recorded\x20entry\x20moment\x20—\x20later\x20advances\x20cannot\x20shift\x20it.\x20'+'Instantiable\x20form\x20of\x20pattern.time_lock_progress\x20with\x20a\x20day-fee\x20param\x20instead\x20of\x20raw\x20milliseconds.','recommended_patterns':['P06'],'parameters':[{'name':'expected_node','type':'string','description':'Node\x20whose\x20ENTRY\x20anchors\x20the\x20lock\x20(the\x20recorded\x20nextNode\x20of\x20the\x201280\x20history\x20row)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'claim_window_days','type':'number','description':'Lock\x20duration\x20in\x20days\x20from\x20the\x20node\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Anchor\x20node\x20(clock\x20starts\x20at\x20its\x20entry)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Lock\x20duration\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'last'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','education'],'relevant_risks':['R-C3-05'],'creation_notes':['DIRECTION\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20entry\x20+\x20N\x20days]\x20OPENS\x20the\x20gate\x20after\x20the\x20lock\x20—\x20the\x20closing-window\x20twin\x20is\x20tpl_time_window_upper_progress_days.\x20Inverting\x20it\x20reopens\x20the\x20window\x20forever.','ENTRY-TIME\x20ANCHOR\x20(v76):\x20query\x201280\x20progress.history.time\x20filtered\x20by\x20where.nextNode\x20=\x20the\x20anchor\x20node,\x20find=last.\x20The\x20record\x20is\x20written\x20once\x20on\x20entering\x20the\x20node\x20and\x20never\x20rewritten\x20(drift-immune);\x20a\x20re-entered\x20node\x20appends\x20a\x20fresh\x20entry\x20and\x20restarts\x20the\x20lock.','EDGE-PREV\x20DISCIPLINE\x20(bkng\x20F22):\x20the\x20node\x20gate\x20here\x20pins\x20progress.current\x20==\x20the\x20anchor\x20node\x20—\x20bind\x20this\x20guard\x20ONLY\x20to\x20a\x20forward\x20whose\x20PREV\x20is\x20the\x20anchor\x20node\x20(the\x20order\x20still\x20sits\x20there\x20while\x20the\x20guard\x20evaluates,\x20before\x20the\x20advance).\x20A\x20pin\x20on\x20any\x20other\x20node\x20welds\x20the\x20edge\x20shut.','FORWARD\x20vs\x20ALLOCATOR\x20MOUNTS\x20(az3-mn-261013\x20F-18):\x20mounting\x20ONE\x20time\x20guard\x20on\x20BOTH\x20the\x20forward\x20and\x20the\x20allocator\x20riding\x20the\x20same\x20transition\x20doubles\x20the\x20dwell\x20(the\x20allocator\x20re-anchors\x20on\x20the\x20destination\x20entry).\x20Put\x20the\x20time\x20lower\x20bound\x20on\x20ONE\x20mount\x20only.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20claim\x20window:\x20the\x20release_no_claim\x20keeper\x20forward\x20(claim_window\x20->\x20payout_released)\x20advances\x20only\x20'+'7\x20days\x20after\x20the\x20claim\x20window\x20opened\x20—\x20disputes\x20have\x20their\x20window,\x20untouched\x20funds\x20then\x20release.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_window_upper_node_order_holder','scene_id':'machine_forward_guard','name':'Node-entry\x20closing\x20window\x20+\x20order-holder\x20identity\x20(buyer\x20after-sales\x20window)','description':'The\x20CLOSING\x20window\x20a\x20buyer\x20may\x20act\x20in,\x20with\x20the\x20identity\x20leg\x20the\x20time-only\x20twin\x20lacks:\x20Clock\x20<=\x20'+'progress.history.time(nextNode\x20=\x20expected_node,\x20find=last)\x20+\x20duration_ms,\x20AND\x20the\x20node\x20gate\x20'+'(progress.current\x20==\x20expected_node),\x20AND\x20the\x20order-holder\x20identity\x20set\x20'+'(owner\x20or\x20registered\x20agent,\x20both\x20read\x20at\x20the\x20254\x20task-binding\x20slot).\x20The\x201280\x20history\x20anchor\x20is\x20the\x20'+'node\x27s\x20IMMUTABLE\x20recorded\x20entry\x20moment\x20—\x20keeper\x20timing\x20cannot\x20shift\x20the\x20window.\x20Instantiable\x20form\x20of\x20'+'pattern.time_window_upper_bound\x20+\x20pattern.identity_check_order_holder\x20fused\x20into\x20ONE\x20guard,\x20for\x20the\x20'+'buyer-side\x20windowed\x20acts\x20(after-sales\x20return\x20/\x20compensation\x20filing,\x20in-window\x20review):\x20a\x20time-only\x20'+'guard\x20on\x20such\x20an\x20edge\x20is\x20callable\x20by\x20anyone\x20(F-17:\x20the\x20edge\x20operator\x20is\x20metadata,\x20never\x20an\x20'+'authorization),\x20and\x20splitting\x20identity\x20and\x20window\x20across\x20two\x20edges\x20leaves\x20an\x20eternal\x20claim\x20right.','recommended_patterns':['P06','P10','P16'],'parameters':[{'name':'expected_node','type':'string','description':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(window\x20anchor\x20and\x20node\x20gate)','required':!![],'constraint':'Bind\x20ONLY\x20to\x20a\x20forward\x20whose\x20prev\x20is\x20this\x20node\x20—\x20the\x20guard\x20pins\x20progress.current,\x20so\x20binding\x20it\x20to\x20any\x20other\x20edge\x20welds\x20that\x20edge\x20shut'},{'name':'duration_ms','type':'number','description':'Window\x20length\x20in\x20milliseconds\x20from\x20the\x20node\x27s\x20entry\x20moment','required':!![],'constraint':'Plain\x20integer\x20milliseconds\x20(e.g.\x2048h\x20=\x20172800000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(progress\x20witness\x20holder;\x20the\x20caller\x20submits\x20the\x20Order\x20they\x20act\x20on)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(window\x20anchor\x20+\x20node\x20gate)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${duration_ms}','name':'Window\x20length\x20in\x20milliseconds'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation\x20—\x20identity\x20legs\x20read\x20THIS\x20slot)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'first'},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['ecommerce','retail','group_buy','food','freelance','education'],'relevant_risks':['R-C3-01','R-C3-05','R-C4-04'],'creation_notes':['WHY\x20THE\x20FUSION\x20(F-17\x20/\x20bkg15\x20F05,\x20R-AFTER-SALES-RAIL\x20cure\x202026-10-28):\x20the\x20edge\x20operator\x20on\x20a\x20buyer\x20forward\x20is\x20metadata,\x20not\x20an\x20authorization\x20—\x20a\x20guard\x20with\x20only\x20the\x20window\x20admits\x20ANY\x20signer,\x20and\x20a\x20guard\x20with\x20only\x20the\x20identity\x20has\x20no\x20deadline.\x20Splitting\x20them\x20across\x20two\x20edges\x20into\x20the\x20same\x20node\x20creates\x20an\x20un-windowed\x20twin.\x20Bind\x20THIS\x20template\x20to\x20the\x20buyer\x20forward\x20instead:\x20one\x20guard\x20carries\x20both\x20legs.','DIRECTION:\x20lesser_or_equal\x20closes\x20the\x20window\x20(act\x20before\x20N\x20elapses).\x20For\x20the\x20OPPOSITE\x20direction\x20(wait\x20N\x20before\x20acting\x20—\x20an\x20opening\x20gate)\x20use\x20tpl_time_lock_progress;\x20a\x20greater_or_equal\x20here\x20would\x20REOPEN\x20the\x20window\x20forever\x20(etm-mn-261013\x20A-06).','ENTRY-TIME\x20ANCHOR\x20(v76,\x20TIME-ANCHOR-01;\x20find=FIRST\x20since\x20tbs7\x20F-03):\x20the\x20window\x20anchors\x20on\x20the\x20source\x20node\x27s\x20recorded\x20entry\x20—\x20progress.history.time\x20(query\x201280)\x20filtered\x20where.nextNode\x20=\x20${expected_node},\x20find=FIRST.\x20The\x20record\x20is\x20immutable\x20and\x20the\x20FIRST\x20entry\x20never\x20moves,\x20so\x20a\x20re-entered\x20node\x20can\x20NOT\x20re-arm\x20the\x20window\x20(the\x20old\x20find=last\x20let\x20re-entry\x20reopen\x20it\x20—\x20account\x20for\x20renewal\x20semantics\x20in\x20any\x20keeper-driven\x20resume\x20edge\x20by\x20anchoring\x20per-period\x20instead).','T10\x20HIJACK\x20ANCHOR\x20(rex-mn-261021):\x20the\x20identity\x20legs\x20read\x20the\x20order\x20at\x20slot\x20254\x20—\x20the\x20caller\x20fills\x20free\x20slots,\x20so\x20reading\x20order.owner\x20off\x20a\x20free\x20slot\x20lets\x20an\x20attacker\x20submit\x20their\x20OWN\x20order\x20and\x20advance\x20a\x20victim\x27s\x20order\x20carried\x20by\x20254.\x20Slot\x200\x20stays\x20the\x20Order\x20the\x20caller\x20acts\x20on\x20(the\x20progress\x20witness\x20holder).','EDGE\x20OPERATOR\x20PAIRING\x20(bkng\x20F23):\x20bind\x20to\x20a\x20forward\x20whose\x20operator\x20is\x20order_payer\x20(namedOperator\x20\x22\x22);\x20the\x20identity\x20layer\x20runs\x20before\x20the\x20guard\x20and\x20a\x20permissionIndex\x20rail\x20has\x20a\x20disjoint\x20signer\x20set.','MIXED\x20RETURN-TYPE\x20CONSTRUCTION:\x20order.owner\x20(1562)\x20returns\x20Address\x20→\x20wrapped\x20in\x20logic_equal\x20with\x20context(Signer);\x20order.agent\x20has\x20(1567)\x20returns\x20Bool\x20→\x20used\x20directly\x20as\x20the\x20logic_or\x20child\x20with\x20parameters\x20[context(Signer)].',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Community\x20group-buy\x20after-sales:\x20the\x20buyer\x27s\x20\x27return\x20requested\x27\x20forward\x20out\x20of\x20\x27picked_up\x27\x20advances\x20only\x20'+'the\x20ORDER\x20HOLDER\x20and\x20only\x20within\x2048h\x20of\x20the\x20pickup\x20entry\x20—\x20the\x20point\x20staff\x20cannot\x20drive\x20the\x20buyer\x27s\x20'+'claim,\x20and\x20an\x20unrelated\x20signer\x20cannot\x20file\x20one\x20at\x20all.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_upper_progress_days','scene_id':'machine_forward_guard','name':'Node-entry\x20closing\x20window\x20in\x20days\x20+\x20order-holder\x20identity\x20(claim\x20filing\x20deadline)','description':'Closing\x20window\x20measured\x20in\x20DAYS\x20from\x20a\x20node\x27s\x20entry:\x20Clock\x20<=\x20progress.history.time(nextNode\x20=\x20'+'expected_node,\x20find=first)\x20+\x20days\x20x\x2086400000,\x20plus\x20the\x20order-holder\x20identity\x20set\x20(owner\x20or\x20agent,\x20'+'254-anchored)\x20and\x20the\x20node\x20gate.\x20The\x20post-stay\x20claim\x20deadline:\x20a\x20buyer\x20'+'may\x20file\x20a\x20claim\x20only\x20N\x20days\x20after\x20the\x20claim\x20window\x20opened\x20—\x20and\x20ONLY\x20the\x20order\x20holder\x20may\x20file\x20it\x20'+'(etsy-aurelia\x20F-01:\x20the\x20edge\x27s\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization;\x20an\x20'+'empty\x20namedOperator\x20passes\x20anyone,\x20so\x20the\x20window\x20alone\x20would\x20let\x20the\x20platform\x20file\x20claims\x20on\x20the\x20'+'buyer\x27s\x20behalf).\x20The\x201280\x20anchor\x20is\x20read\x20with\x20find=FIRST\x20(tbs7\x20F-03):\x20the\x20FIRST\x20recorded\x20entry\x20'+'never\x20moves,\x20so\x20re-entering\x20the\x20node\x20cannot\x20re-arm\x20the\x20window\x20—\x20keeper\x20timing\x20cannot\x20shift\x20it.\x20'+'Instantiable\x20form\x20of\x20pattern.time_window_upper_bound\x20+\x20'+'pattern.identity_check_order_holder\x20with\x20a\x20day-fee\x20param\x20instead\x20of\x20raw\x20milliseconds.','recommended_patterns':['P06'],'parameters':[{'name':'expected_node','type':'string','description':'Node\x20whose\x20ENTRY\x20opens\x20the\x20window\x20(the\x20recorded\x20nextNode\x20of\x20the\x201280\x20history\x20row)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'claim_window_days','type':'number','description':'Window\x20length\x20in\x20days\x20from\x20the\x20node\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Anchor\x20node\x20(window\x20opens\x20at\x20its\x20entry)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Window\x20length\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','education'],'relevant_risks':['R-C3-05'],'creation_notes':['DIRECTION\x20(etm-mn-261013\x20A-06,\x20bkd8\x20BK-04):\x20lesser_or_equal[Clock,\x20entry\x20+\x20N\x20days]\x20CLOSES\x20the\x20window\x20—\x20filing\x20admitted\x20inside,\x20refused\x20after.\x20The\x20opening-gate\x20twin\x20(greater_or_equal)\x20inverts\x20the\x20policy:\x20the\x20window\x20is\x20shut\x20while\x20open\x20and\x20stays\x20open\x20after\x20it\x20closed.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through.\x20The\x20owner/agent\x20identity\x20legs\x20ship\x20IN\x20example_root\x20over\x20the\x20254\x20task-binding\x20slot;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.','EXPIRY\x20SEMANTICS:\x20an\x20expired\x20window\x20only\x20fails\x20the\x20forward\x20it\x20gates\x20—\x20pair\x20with\x20the\x20keeper\x20release\x20rail\x20(tpl_time_lock_progress_days)\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).','ENTRY-TIME\x20ANCHOR\x20(v76,\x20TIME-ANCHOR-01;\x20find=FIRST\x20since\x20tbs7\x20F-03):\x20the\x20window\x20anchors\x20on\x20the\x20anchor\x20node\x27s\x20FIRST\x20recorded\x20entry\x20—\x20progress.history.time\x20(query\x201280)\x20filtered\x20where.nextNode\x20=\x20${expected_node},\x20find=FIRST.\x20The\x20FIRST\x20entry\x20never\x20moves,\x20so\x20a\x20re-entered\x20node\x20can\x20NOT\x20re-arm\x20the\x20window\x20(the\x20old\x20find=last\x20let\x20re-entry\x20reopen\x20the\x20deadline\x20—\x20tbs7\x20O16/O17).\x20If\x20the\x20business\x20INTENDS\x20renewal\x20semantics,\x20anchor\x20each\x20period\x20on\x20its\x20own\x20node\x20instead.','EDGE-PREV\x20DISCIPLINE\x20(bkng\x20F22):\x20bind\x20only\x20to\x20a\x20forward\x20whose\x20PREV\x20is\x20the\x20anchor\x20node\x20—\x20the\x20order\x20sits\x20at\x20PREV\x20while\x20a\x20forward\x20guard\x20evaluates,\x20so\x20the\x20pin\x20must\x20equal\x20edge.prev.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20post-stay\x20claim:\x20the\x20claim_window\x20->\x20poststay_claim\x20buyer\x20forward\x20advances\x20only\x20for\x20the\x20'+'order\x20holder\x20and\x20only\x20within\x207\x20days\x20of\x20the\x20claim\x20window\x20opening;\x20after\x20expiry\x20the\x20buyer\x27s\x20'+'route\x20is\x20arbitration,\x20not\x20this\x20edge.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_upper_pair_nodes','scene_id':'machine_forward_guard','name':'Node-entry\x20closing\x20window\x20in\x20days\x20+\x20order-holder\x20identity\x20(pin\x20node\x20!=\x20anchor\x20node)','description':'Closing\x20window\x20measured\x20in\x20DAYS\x20from\x20an\x20ANCHOR\x20node\x27s\x20entry,\x20pinned\x20on\x20a\x20(possibly\x20DIFFERENT)\x20'+'PIN\x20node:\x20Clock\x20<=\x20progress.history.time(nextNode\x20=\x20anchor_node,\x20find=first)\x20+\x20days\x20x\x2086400000,\x20'+'progress.current\x20==\x20pin_node,\x20the\x20order-holder\x20identity\x20set\x20(owner\x20or\x20agent,\x20254-anchored).\x20'+'Use\x20this\x20variant\x20when\x20the\x20edge\x20lives\x20on\x20a\x20node\x20reached\x20AFTER\x20the\x20'+'window\x27s\x20economic\x20origin\x20(rex5\x20T-01:\x20a\x20cancel-out-of-return\x20hop\x20is\x20mounted\x20at\x20return_requested\x20'+'but\x20the\x20inspection\x20window\x20counts\x20from\x20the\x20terms_delivered\x20entry)\x20—\x20the\x20single-node\x20template\x20'+'cannot\x20express\x20pin\x20!=\x20anchor\x20and\x20compiles\x20a\x20permanently-false\x20leg.\x20The\x201280\x20anchor\x20is\x20read\x20with\x20'+'find=FIRST\x20(tbs7\x20F-03):\x20the\x20FIRST\x20recorded\x20entry\x20never\x20moves,\x20so\x20a\x20re-entered\x20anchor\x20cannot\x20'+'re-arm\x20the\x20window;\x201272\x20current_time\x20drifts\x20every\x20migration\x20(ETS-C).','recommended_patterns':['P06'],'parameters':[{'name':'pin_node','type':'string','description':'Node\x20the\x20order\x20SITS\x20on\x20while\x20this\x20guard\x20evaluates\x20—\x20MUST\x20equal\x20the\x20guarded\x20edge\x27s\x20prev\x20node\x20(NODE-MATCH-01)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive);\x20a\x20pin\x20that\x20differs\x20from\x20edge.prev\x20compiles\x20a\x20dead\x20guard'},{'name':'anchor_node','type':'string','description':'Node\x20whose\x20ENTRY\x20opens\x20the\x20window\x20(the\x20economic\x20origin;\x20the\x20recorded\x20nextNode\x20of\x20the\x201280\x20history\x20row)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'claim_window_days','type':'number','description':'Window\x20length\x20in\x20days\x20from\x20the\x20anchor\x20node\x27s\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${pin_node}','name':'Pin\x20node\x20(edge.prev\x20—\x20where\x20the\x20order\x20sits\x20at\x20eval\x20time)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Window\x20length\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${anchor_node}','name':'Anchor\x20node\x20(window\x20opens\x20at\x20its\x20entry)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${anchor_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]}]},'applicable_industries':['licensing','ecommerce','retail','travel','rental'],'relevant_risks':['R-C3-05'],'creation_notes':['PIN\x20!=\x20ANCHOR\x20is\x20the\x20REASON\x20this\x20template\x20exists\x20(rex5\x20T-01):\x20pin_node\x20must\x20equal\x20the\x20guarded\x20edge\x27s\x20prev\x20(the\x20order\x20sits\x20there\x20at\x20eval\x20time\x20—\x20NODE-MATCH-01);\x20anchor_node\x20is\x20the\x20economic\x20window\x20origin\x20and\x20may\x20be\x20an\x20EARLIER\x20node.\x20Never\x20fold\x20them\x20back\x20into\x20one\x20param\x20—\x20that\x20re-creates\x20the\x20dead-pin\x20class.','DIRECTION:\x20lesser_or_equal[Clock,\x20anchor\x20entry\x20+\x20N\x20days]\x20CLOSES\x20the\x20window\x20—\x20admitted\x20inside,\x20refused\x20after.\x20Pair\x20with\x20a\x20keeper\x20rail\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(etsy-aurelia\x20F-01):\x20edge\x20operator\x20is\x20metadata,\x20never\x20an\x20authorization;\x20the\x20owner/agent\x20legs\x20ship\x20IN\x20example_root\x20—\x20do\x20NOT\x20strip\x20them.','ANCHOR\x20SEMANTICS\x20(find=FIRST\x20since\x20tbs7\x20F-03):\x20the\x20window\x20counts\x20from\x20the\x20anchor\x27s\x20FIRST\x20recorded\x20entry\x20—\x20a\x20re-entered\x20anchor\x20appends\x20later\x201280\x20rows\x20but\x20the\x20anchor\x20does\x20NOT\x20move,\x20so\x20the\x20class\x20where\x20re-entry\x20reopened\x20the\x20window\x20(ddmc2\x20F-13:\x20RejectReturn\x20re-opened\x20the\x20return\x20window)\x20is\x20cured\x20at\x20template\x20level.\x20If\x20the\x20business\x20INTENDS\x20per-period\x20renewal,\x20anchor\x20each\x20period\x20on\x20its\x20own\x20node\x20instead.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Licensing\x20CancelReturn:\x20the\x20buyer\x20abandons\x20a\x20return\x20request\x20—\x20the\x20forward\x20lives\x20at\x20'+'return_requested\x20(pin)\x20but\x20the\x20inspection\x20window\x20counts\x20from\x20the\x20terms_delivered\x20entry\x20'+'(anchor);\x20after\x20expiry\x20the\x20escrow\x20is\x20about\x20to\x20settle\x20and\x20the\x20void\x20is\x20refused.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_window_upper_history_days','scene_id':'machine_forward_guard','name':'History-anchored\x20closing\x20window\x20in\x20days\x20+\x20order-holder\x20identity\x20(multi-mount)','description':'Closing\x20window\x20measured\x20in\x20DAYS\x20from\x20the\x20FIRST\x20recorded\x20entry\x20of\x20an\x20anchor\x20node,\x20with\x20NO\x20'+'progress.current\x20pin:\x20Clock\x20<=\x20progress.history.time(nextNode\x20=\x20anchor_node,\x20find=first)\x20+\x20days\x20x\x20'+'86400000,\x20ANDed\x20with\x20the\x20order-holder\x20identity\x20set\x20(owner\x20or\x20agent,\x20254-anchored).\x20Use\x20it\x20when\x20ONE\x20'+'window\x20must\x20gate\x20several\x20forwards\x20into\x20the\x20same\x20target\x20node\x20(return\x20requested\x20from\x20delivered\x20or\x20'+'from\x20reviewed;\x20refund\x20requested\x20from\x20any\x20pre-delivery\x20stage;\x20review\x20after\x20the\x20claim\x20window\x20'+'opened)\x20—\x20the\x20pinned\x20twins\x20cannot\x20serve\x20more\x20than\x20one\x20prev,\x20and\x20mounting\x20a\x20pinned\x20guard\x20twice\x20'+'leaves\x20the\x20second\x20mount\x20permanently\x20unsatisfiable.\x20The\x20identity\x20leg\x20is\x20NOT\x20optional\x20'+'(etsy-aurelia\x20F-01):\x20the\x20edge\x27s\x20`operator:\x20order_payer`\x20is\x20metadata,\x20an\x20empty\x20namedOperator\x20'+'admits\x20anyone,\x20so\x20the\x20window\x20alone\x20would\x20let\x20the\x20platform\x20file\x20on\x20the\x20buyer\x27s\x20behalf.','recommended_patterns':['P06'],'parameters':[{'name':'anchor_node','type':'string','description':'Node\x20whose\x20FIRST\x20recorded\x20entry\x20opens\x20the\x20window\x20(the\x20economic\x20origin,\x20not\x20necessarily\x20the\x20edge\x27s\x20prev)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive);\x20it\x20must\x20be\x20an\x20ancestor\x20of\x20every\x20guarded\x20forward'},{'name':'claim_window_days','type':'number','description':'Window\x20length\x20in\x20days\x20from\x20the\x20anchor\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${anchor_node}','name':'Anchor\x20node\x20(window\x20opens\x20at\x20its\x20first\x20entry)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Window\x20length\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${anchor_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]}]},'applicable_industries':['ecommerce','education','rental','retail','travel','licensing'],'relevant_risks':['R-C3-05'],'creation_notes':['NO\x20PIN\x20IS\x20THE\x20REASON\x20THIS\x20TEMPLATE\x20EXISTS\x20(2026-10-29):\x20the\x20pinned\x20twins\x20assert\x20progress.current\x20==\x20pin,\x20and\x20one\x20Guard\x20object\x20cannot\x20pin\x20two\x20different\x20prev\x20nodes.\x20Declaring\x20a\x20window\x20on\x20two\x20forwards\x20of\x20the\x20same\x20key\x20therefore\x20left\x20the\x20SECOND\x20mount\x20unsatisfiable\x20once\x20resolved,\x20or\x20(as\x20shipped)\x20left\x20the\x20window\x20unenforced\x20entirely.\x20Do\x20NOT\x20add\x20a\x20progress.current\x20leg\x20here\x20—\x20a\x20caller\x20that\x20needs\x20one\x20takes\x20tpl_time_window_upper_progress_days\x20(single\x20mount)\x20or\x20tpl_time_window_upper_pair_nodes\x20(pin\x20!=\x20anchor)\x20instead.','DIRECTION\x20(etm-mn-261013\x20A-06,\x20bkd8\x20BK-04):\x20lesser_or_equal[Clock,\x20anchor\x20entry\x20+\x20N\x20days]\x20CLOSES\x20the\x20window\x20—\x20admitted\x20inside,\x20refused\x20after.\x20The\x20opening-gate\x20twin\x20(greater_or_equal)\x20inverts\x20the\x20policy:\x20the\x20lane\x20is\x20shut\x20while\x20the\x20window\x20is\x20open.','IDENTITY\x20LEG\x20MANDATORY\x20on\x20buyer-triggered\x20rails\x20(etsy-aurelia\x20F-01,\x20bkg15\x20F05):\x20the\x20edge\x20`operator:\x20order_payer`\x20is\x20metadata,\x20never\x20an\x20authorization\x20—\x20the\x20forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through,\x20so\x20a\x20time-only\x20guard\x20on\x20a\x20buyer\x20window\x20is\x20callable\x20by\x20ANY\x20signer.\x20The\x20owner/agent\x20legs\x20ship\x20IN\x20example_root\x20over\x20slot\x20254;\x20do\x20NOT\x20strip\x20them\x20when\x20adapting.','ANCHOR\x20SEMANTICS\x20(find=FIRST,\x20tbs7\x20F-03):\x20the\x20window\x20counts\x20from\x20the\x20anchor\x27s\x20FIRST\x20recorded\x20entry,\x20so\x20re-entering\x20the\x20anchor\x20node\x20cannot\x20re-arm\x20it.\x20Every\x20guarded\x20forward\x20must\x20sit\x20at\x20or\x20after\x20the\x20anchor\x20in\x20the\x20graph,\x20or\x20the\x20history\x20lookup\x20returns\x20no\x20row\x20and\x20the\x20window\x20never\x20opens.','EXPIRY\x20SEMANTICS:\x20an\x20expired\x20window\x20only\x20fails\x20the\x20forwards\x20it\x20gates\x20—\x20it\x20does\x20not\x20cancel\x20or\x20refund\x20by\x20itself.\x20Pair\x20the\x20window\x20with\x20a\x20keeper\x20expiry\x20forward\x20or\x20an\x20allocator\x20recover\x20rail\x20so\x20the\x20post-window\x20fund\x20path\x20exists\x20(FUND-EXIT-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Education\x20refund\x20window:\x20the\x20buyer\x20requests\x20a\x20refund\x20from\x20paid,\x20enrolled\x20or\x20assessing\x20—\x20all\x20'+'three\x20forwards\x20ride\x20one\x20guard\x20anchored\x20on\x20the\x20paid\x20entry\x20with\x20a\x2014-day\x20clock;\x20after\x20expiry\x20the\x20'+'buyer\x27s\x20route\x20is\x20the\x20arbitration\x20rail,\x20not\x20a\x20refund\x20request.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_time_lock_history_days','scene_id':'machine_forward_guard','name':'History-anchored\x20opening\x20lock\x20in\x20days\x20(multi-mount)','description':'Opening\x20gate\x20measured\x20in\x20DAYS\x20from\x20the\x20FIRST\x20recorded\x20entry\x20of\x20an\x20anchor\x20node,\x20with\x20NO\x20'+'progress.current\x20pin:\x20Clock\x20>=\x20progress.history.time(nextNode\x20=\x20anchor_node,\x20find=first)\x20+\x20days\x20x\x20'+'86400000.\x20Use\x20it\x20when\x20ONE\x20clock\x20must\x20gate\x20several\x20keeper\x20forwards\x20into\x20the\x20same\x20target\x20node\x20'+'(a\x20subscription\x20period\x20expiring\x20from\x20the\x20delivered\x20state\x20OR\x20from\x20the\x20optional\x20reviewed\x20'+'side-stop)\x20—\x20the\x20pinned\x20twin\x20asserts\x20the\x20order\x20is\x20AT\x20the\x20anchor,\x20which\x20is\x20true\x20of\x20exactly\x20one\x20'+'mount.\x20Ships\x20NO\x20signer\x20leg\x20on\x20purpose:\x20it\x20is\x20meant\x20for\x20permission-index\x20keeper\x20rails,\x20where\x20an\x20'+'order-holder\x20leg\x20would\x20be\x20unsatisfiable;\x20a\x20buyer-triggered\x20opening\x20clock\x20takes\x20'+'tpl_time_lock_progress_days\x20instead.','recommended_patterns':['P06'],'parameters':[{'name':'anchor_node','type':'string','description':'Node\x20whose\x20FIRST\x20recorded\x20entry\x20starts\x20the\x20clock\x20(the\x20economic\x20origin,\x20not\x20necessarily\x20the\x20edge\x27s\x20prev)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive);\x20it\x20must\x20be\x20an\x20ancestor\x20of\x20every\x20guarded\x20forward'},{'name':'claim_window_days','type':'number','description':'Lock\x20duration\x20in\x20days\x20from\x20the\x20anchor\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${anchor_node}','name':'Anchor\x20node\x20(clock\x20starts\x20at\x20its\x20first\x20entry)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Lock\x20duration\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${anchor_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]},'applicable_industries':['subscription','ecommerce','education','travel'],'relevant_risks':['R-C3-05'],'creation_notes':['NO\x20PIN\x20IS\x20THE\x20REASON\x20THIS\x20TEMPLATE\x20EXISTS\x20(2026-10-29):\x20the\x20pinned\x20opening\x20twins\x20assert\x20progress.current\x20==\x20expected_node,\x20and\x20one\x20Guard\x20object\x20cannot\x20pin\x20two\x20different\x20prev\x20nodes.\x20Declaring\x20one\x20expiry\x20clock\x20on\x20several\x20keeper\x20forwards\x20therefore\x20left\x20every\x20mount\x20unsatisfiable\x20except\x20one.\x20Do\x20NOT\x20add\x20a\x20progress.current\x20leg\x20here\x20—\x20a\x20single-mount\x20caller\x20takes\x20tpl_time_lock_progress_days.','DIRECTION\x20(etm-mn-261013\x20A-06):\x20greater_or_equal[Clock,\x20anchor\x20entry\x20+\x20N\x20days]\x20OPENS\x20the\x20gate\x20after\x20the\x20lock.\x20The\x20closing-window\x20twin\x20is\x20tpl_time_window_upper_history_days\x20—\x20inverting\x20the\x20comparison\x20lets\x20the\x20locked\x20action\x20fire\x20immediately.','NO\x20SIGNER\x20LEG,\x20KEEPER\x20RAILS\x20ONLY:\x20this\x20is\x20the\x20opening\x20counterpart\x20of\x20the\x20closing\x20twin,\x20but\x20the\x20identity\x20set\x20is\x20deliberately\x20absent\x20—\x20it\x20exists\x20to\x20time-gate\x20a\x20permission-index\x20forward\x20(a\x20keeper\x20clock\x20advance).\x20Mounting\x20it\x20on\x20an\x20order_payer\x20forward\x20leaves\x20the\x20buyer\x20rail\x20with\x20no\x20identity\x20leg;\x20that\x20caller\x20wants\x20tpl_time_lock_progress_days\x20(which\x20ships\x20the\x20identity\x20set).','ANCHOR\x20SEMANTICS\x20(find=FIRST,\x20tbs7\x20F-03):\x20the\x20clock\x20counts\x20from\x20the\x20anchor\x27s\x20FIRST\x20recorded\x20entry,\x20so\x20re-entering\x20the\x20anchor\x20cannot\x20restart\x20it.\x20Every\x20guarded\x20forward\x20must\x20sit\x20at\x20or\x20after\x20the\x20anchor,\x20or\x20the\x20history\x20lookup\x20returns\x20no\x20row\x20and\x20the\x20lock\x20never\x20opens.','ANCHOR\x20MUST\x20EXIST\x20ON\x20EVERY\x20PATH\x20CLASS\x20(ofn5\x20F-01\x20rule):\x20a\x20forward\x20whose\x20prev\x20path\x20never\x20passes\x20the\x20anchor\x20makes\x20the\x20history\x20lookup\x20abort\x20(W_FIELD_NOT_FOUND)\x20and\x20welds\x20the\x20edge\x20shut.\x20Keep\x20a\x20no-anchor\x20path\x20on\x20a\x20plain\x20permission\x20rail\x20instead\x20of\x20mounting\x20this\x20guard\x20there.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Subscription\x20period\x20expiry:\x20the\x20keeper\x20advances\x20delivered\x20->\x20expired\x20OR\x20reviewed\x20->\x20expired,\x20'+'both\x20clocks\x20counting\x20from\x20the\x20delivery\x20entry\x20(period_days\x20+\x20grace_days);\x20before\x20that\x20moment\x20'+'the\x20member\x27s\x20refund\x20right\x20stands.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_serial_window_release','scene_id':'service_order_allocators_guard','name':'Serial\x20settlement\x20release\x20(reached-node\x20pin\x20+\x20window-closed\x20lock)','description':'Settlement\x20allocator\x20gate\x20for\x20the\x20serial\x20release\x20pattern:\x20progress.current\x20==\x20release_node\x20(the\x20pin\x20is\x20'+'correct\x20on\x20an\x20ALLOCATOR\x20—\x20it\x20evaluates\x20at\x20alloc\x20time\x20when\x20current\x20is\x20the\x20REACHED\x20node)\x20AND\x20Clock\x20>=\x20'+'progress.history.time(nextNode\x20=\x20window_node,\x20find=last)\x20+\x20days\x20x\x2086400000.\x20The\x20money\x20moves\x20only\x20after\x20'+'the\x20dispute\x20window\x20closed\x20with\x20no\x20upheld\x20claim\x20—\x20the\x20pool\x20is\x20intact\x20and\x20undisputed\x20when\x20it\x20does.\x20'+'Deliberately\x20arms\x20NO\x20254\x20slot:\x20a\x20Rate-10000\x20plan\x20self-limits\x20by\x20pool\x20exhaustion\x20(the\x20next\x20run\x20aborts),\x20'+'and\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20an\x20allocator\x20share\x20does\x20not\x20consume.\x20Instantiable\x20form\x20of\x20'+'the\x20global-ota\x20settlement_release\x20design\x20(v30/v68).','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'release_node','type':'string','description':'Machine\x20node\x20at\x20which\x20the\x20release\x20fires\x20(the\x20REACHED\x20node\x20at\x20alloc\x20time,\x20e.g.\x20\x27payout_released\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'window_node','type':'string','description':'Node\x20whose\x20ENTRY\x20anchors\x20the\x20window\x20lock\x20(the\x201280\x20history\x20nextNode,\x20e.g.\x20\x27claim_window\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'claim_window_days','type':'number','description':'Window\x20length\x20in\x20days\x20from\x20the\x20window\x20node\x27s\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${release_node}','name':'Release\x20node\x20(the\x20REACHED\x20node\x20at\x20alloc\x20time)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${window_node}','name':'Window\x20anchor\x20node\x20(lock\x20starts\x20at\x20its\x20entry)'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Window\x20length\x20in\x20days'},{'identifier':0x5,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${window_node}'},'find':'last'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x4},{'type':'identifier','identifier':0x5}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','education','freelance'],'relevant_risks':['R-C3-05','R-X1-08'],'creation_notes':['ALLOCATOR-ONLY\x20MOUNT\x20(bkng\x20F22):\x20allocator\x20guards\x20evaluate\x20AT\x20ALLOC\x20TIME,\x20when\x20progress.current\x20is\x20the\x20REACHED\x20node\x20—\x20so\x20the\x20release_node\x20pin\x20is\x20correct\x20here.\x20NEVER\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20edge:\x20a\x20forward\x20guard\x20evaluates\x20BEFORE\x20the\x20advance\x20(current\x20==\x20PREV),\x20so\x20the\x20pin\x20would\x20weld\x20the\x20edge\x20shut\x20(dead\x20rail).\x20The\x20forward\x20side\x20takes\x20the\x20TIME-ONLY\x20leg\x20(tpl_time_lock_progress_days)\x20—\x20belt\x20and\x20suspenders:\x20the\x20forward\x20cannot\x20fire\x20before\x20the\x20window\x20closes,\x20and\x20the\x20allocator\x20cannot\x20pay\x20outside\x20the\x20release\x20node.','NO\x20254\x20SLOT\x20—\x20DELIBERATE:\x20a\x20Rate-10000\x20plan\x20self-limits\x20by\x20pool\x20exhaustion;\x20254\x20keys\x20on\x20payment_info.for_object\x20which\x20an\x20allocator\x20share\x20never\x20consumes.\x20Adding\x20254\x20aborts\x20E_ONCE_TRIGGERED(16)\x20from\x20the\x20second\x20share\x20payment.','SERIAL\x20WINDOW\x20(ABNB2\x20mainnet-validated):\x20release\x20is\x20gated\x20on\x20payout_released,\x20reachable\x20only\x20after\x20the\x20claim\x20window\x20closed\x20with\x20no\x20upheld\x20claim\x20—\x20the\x20pool\x20is\x20always\x20intact\x20and\x20undisputed\x20when\x20money\x20moves.\x20Pin-vs-previous\x20discipline:\x20v25\x27s\x20order.time\x20anchor\x20was\x20vacuous\x20(booking-time\x20delays\x20expire\x20before\x20checkout);\x20the\x20serial\x20claim\x20window\x20is\x20the\x20real\x20post-stay\x20protection.','PAIR\x20WITH\x20THE\x20EXIT\x20COVERAGE:\x20every\x20rest\x20state\x20needs\x20a\x20defined\x20withdrawal\x20AND\x20refund\x20rule\x20(FUND-EXIT-01\x20/\x20R-M5-03)\x20—\x20this\x20rail\x20is\x20the\x20settlement\x20exit;\x20the\x20refund\x20and\x20recovery\x20rails\x20cover\x20the\x20cancel\x20and\x20awarded\x20exits.'],'example_use_case':'OTA\x20settlement:\x20the\x20property\x20Surplus\x20+\x20platform\x20commission\x20+\x20payment-fee\x20legs\x20share\x20ONE\x20allocator,\x20all\x20'+'gated\x20by\x20this\x20guard\x20—\x20money\x20moves\x20at\x20payout_released,\x20N\x20days\x20after\x20the\x20claim\x20window\x20opened.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_repository_row_present','scene_id':'machine_forward_guard','name':'Evidence\x20row\x20presence\x20gate\x20(find-where\x20count\x20>=\x201)','description':'Gates\x20a\x20machine\x20forward\x20on\x20evidence\x20IN\x20THE\x20PLAN\x27S\x20REPOSITORY:\x20at\x20least\x20one\x20row\x20under\x20the\x20named\x20policy\x20'+'whose\x20value\x20contains\x20the\x20marker,\x20among\x20the\x20candidate\x20row\x20ids\x20the\x20verifier\x20submits.\x20The\x20forward\x27s\x20own\x20'+'permission\x20rail\x20authenticates\x20WHO\x20advances;\x20the\x20candidate-list\x20convention\x20is\x20the\x20same\x20as\x20the\x20review\x20'+'threshold\x20gate\x20(verifier-enumerated\x20row\x20ids\x20—\x20the\x20writer\x20advancing\x20the\x20edge\x20submits\x20its\x20own\x20evidence).\x20'+'Optional\x20NOT-BEFORE\x20floor\x20(not_before_hours\x20>\x200):\x20ANDs\x20Clock\x20>=\x20order.time\x20+\x20N\x20hours\x20so\x20a\x20charge\x20can\x20'+'never\x20file\x20before\x20arrival\x20(the\x20canonical\x20no-show\x20floor).\x20Pairs\x20with\x20a\x20write-guarded\x20evidence\x20policy\x20'+'so\x20the\x20rows\x20cannot\x20be\x20forged\x20by\x20a\x20counterparty\x20(R-X1-17:\x20existence\x20is\x20not\x20trust\x20—\x20the\x20WRITE\x20side\x20'+'must\x20bind\x20the\x20writer).\x20CANDIDATE-LIST\x20PIN\x20(ddmc2\x20F-10):\x20the\x20matched\x20set\x20must\x20ALSO\x20contain\x20THIS\x20'+'order\x27s\x20address\x20(vec_contains_address\x20over\x20the\x20task-binding\x20order\x20anchor)\x20—\x20a\x20verifier-submitted\x20'+'candidate\x20list\x20can\x20no\x20longer\x20satisfy\x20the\x20gate\x20with\x20ANOTHER\x20order\x27s\x20marker\x20row\x20(live\x20ddmc2\x20o6\x20'+'advanced\x20on\x20o2\x27s\x20evidence\x20row\x20before\x20the\x20pin).\x20ABORT\x20CONTRACT\x20(MN5-5R,\x20bst5\x20F-BS5-13):\x20a\x20row\x20that\x20'+'exists\x20but\x20whose\x20VALUE\x20lacks\x20the\x20marker\x20does\x20not\x20open\x20the\x20gate\x20—\x20the\x20delivery\x20forward\x20ABORTS\x20'+'(guard\x20verification\x20failure,\x20abort\x207);\x20the\x20marker\x20substring\x20must\x20be\x20written\x20INTO\x20the\x20row\x20value\x20'+'string\x20itself,\x20e.g.\x20value\x20\x27{\x22grant\x22:\x22tier:premium\x22,\x22file_hash\x22:\x220x..\x22}\x27\x20satisfies\x20marker\x20\x27grant\x27.','recommended_patterns':['P07','P15'],'parameters':[{'name':'repository_name','type':'string','description':'Evidence\x20Repository\x20object\x20name\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20with\x20the\x20plan\x27s\x20evidence\x20repository\x20(\x27<base>_evidence\x27,\x20A5\x20late-binding\x20like\x20service_name)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'row_name','type':'string','description':'Policy\x20key\x20under\x20which\x20the\x20evidence\x20rows\x20are\x20stored\x20(e.g.\x20\x27no_show_evidence\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Repository\x20policy\x20name\x20(case-sensitive)'},{'name':'evidence_marker','type':'string','description':'Substring\x20the\x20evidence\x20row\x20value\x20must\x20contain\x20(e.g.\x20the\x20node\x20or\x20event\x20name\x20that\x20marks\x20the\x20evidence)\x20—\x20the\x20row\x20without\x20the\x20marker\x20does\x20not\x20open\x20the\x20gate;\x20a\x20present-but-unmarked\x20row\x20ABORTS\x20the\x20forward\x20(Verification\x20failed,\x20abort\x207),\x20so\x20write\x20the\x20marker\x20into\x20the\x20value\x20string\x20(e.g.\x20\x27{\x22grant\x22:\x22tier:premium\x22}\x27\x20contains\x20\x27grant\x27)','required':!![]},{'name':'not_before_hours','type':'number','description':'Optional\x20NOT-BEFORE\x20floor:\x20Clock\x20>=\x20order.time\x20+\x20N\x20hours\x20x\x203600000\x20—\x20\x270\x27\x20(default)\x20ships\x20WITHOUT\x20the\x20floor\x20leg\x20(pure\x20presence\x20gate).\x20The\x20canonical\x20no-show\x20charge\x20floor','required':![],'default':'0'},{'name':'not_before_ms','type':'number','description':'Internal:\x20hours-to-milliseconds\x20constant\x20for\x20the\x20floor\x20leg\x20—\x20omitted\x20together\x20with\x20the\x20floor','required':![],'default':'3600000'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Evidence\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${row_name}','name':'Evidence\x20policy\x20key'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${evidence_marker}','name':'Marker\x20substring\x20the\x20row\x20value\x20must\x20contain'},{'identifier':0x5,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20evidence\x20row\x20ids\x20submitted\x20by\x20the\x20verifier\x20(max\x20100,\x20deduped)'},{'identifier':0x6,'b_submission':![],'value_type':'U64','value':0x1,'name':'Minimum\x20matching\x20row\x20count\x20(superseded\x20by\x20the\x20F-10\x20order-pin\x20leg\x20—\x20order-keyed\x20policies\x20hold\x20ONE\x20row\x20per\x20order;\x20kept\x20for\x20table-layout\x20stability)'},{'identifier':0x7,'b_submission':![],'value_type':'U64','value':'${not_before_hours}','name':'NOT-BEFORE\x20floor\x20in\x20hours\x20(0\x20=\x20the\x20floor\x20leg\x20and\x20this\x20row\x20are\x20omitted)'},{'identifier':0x8,'b_submission':![],'value_type':'U64','value':'${not_before_ms}','name':'Hours-to-milliseconds\x20constant\x20(floor-leg\x20companion;\x20omitted\x20with\x20the\x20floor)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x1},'key':{'identifier':0x2},'ids':{'identifier':0x5},'where':{'kind':'stringContains','value':'${evidence_marker}'}},{'type':'identifier','identifier':0x0}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query','query':'order.time','object':{'identifier':0xfe},'parameters':[]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x7},{'type':'identifier','identifier':0x8}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','logistics'],'relevant_risks':['R-C3-05','R-X1-17','R-X1-12'],'creation_notes':['STRONG\x20FORM\x20(recommended):\x20key\x20the\x20evidence\x20rows\x20BY\x20THE\x20ORDER\x20(policy\x20id_from\x20none,\x20row\x20id\x20=\x20the\x20order\x20address)\x20and\x20submit\x20exactly\x20[order]\x20as\x20the\x20candidate\x20ids\x20—\x20the\x20candidate\x20set\x20is\x20then\x20chain-bound\x20to\x20this\x20order\x20and\x20cannot\x20be\x20padded\x20with\x20foreign\x20rows.\x20The\x20verifier-supplied\x20candidate\x20list\x20in\x20the\x20weak\x20form\x20is\x20ATTESTED\x20(L-04),\x20never\x20chain-derived:\x20only\x20ship\x20it\x20behind\x20a\x20permissioned\x20forward\x20whose\x20operator\x20is\x20the\x20credentialed\x20writer.','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17,\x20existence-is-not-trust):\x20a\x20presence\x20gate\x20over\x20an\x20UNGUARDED\x20policy\x20is\x20satisfied\x20by\x20ANY\x20pre-written\x20row,\x20including\x20a\x20forged\x20one\x20(test-14\x20HIGH-04,\x20live).\x20Bind\x20the\x20policy\x27s\x20write_guard\x20to\x20the\x20writer\x20identity\x20(pattern.repository_write_authorization)\x20—\x20the\x20write\x20credential,\x20not\x20this\x20gate,\x20is\x20what\x20makes\x20the\x20evidence\x20trustworthy.','MARKER\x20SEMANTICS:\x20the\x20row\x20value\x20must\x20CONTAIN\x20the\x20marker\x20(byte\x20substring,\x20case-sensitive).\x20Mark\x20the\x20evidence\x20payload\x20with\x20the\x20canonical\x20event\x20token\x20when\x20writing\x20it\x20(e.g.\x20a\x20no-show\x20record\x20carries\x20\x27no_show\x27)\x20—\x20an\x20unmarked\x20or\x20foreign-policy\x20row\x20never\x20opens\x20the\x20gate.','ORDER-BINDING:\x20the\x20gate\x20pins\x20the\x20ORDER\x20via\x20the\x20order-pin\x20(vec_contains_address\x20over\x20the\x20task\x20anchor)\x20and\x20the\x20forward\x27s\x20task\x20slot\x20—\x20the\x20legacy\x20order.service\x20host-binding\x20leg\x20was\x20removed\x20(v148\x20chain-side\x20task\x20binding,\x20bsw4\x20F-06);\x20the\x20row\x20itself\x20is\x20found\x20among\x20SUBMITTED\x20candidate\x20ids\x20—\x20for\x20buyer-advanceable\x20edges\x20prefer\x20the\x20strong\x20form\x20above,\x20or\x20tpl_repository_row_equals_order_field\x20(the\x20row\x20read\x20is\x20keyed\x20by\x20the\x20order\x20directly).','QUOTE_GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20evidence\x20policy\x20is\x20quote-guard-protected,\x20the\x20advancing\x20passport\x20MUST\x20carry\x20that\x20quote_guard\x20in\x20its\x20impack\x20list\x20—\x20the\x201176\x20read\x20aborts\x20otherwise\x20(fail-closed).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20no-show:\x20the\x20confirmed\x20->\x20no_show_charged\x20property\x20forward\x20advances\x20only\x20when\x20a\x20no_show_evidence\x20'+'row\x20(value\x20containing\x20\x27no_show\x27)\x20exists\x20in\x20the\x20plan\x27s\x20evidence\x20repository.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_repository_row_equals_order_field','scene_id':'machine_forward_guard','name':'Evidence\x20row\x20equals\x20order-derived\x20field\x20(commitment\x20comparison)','description':'Gates\x20a\x20machine\x20forward\x20on\x20an\x20ORDER-KEYED\x20evidence\x20row\x20matching\x20an\x20order-derived\x20commitment:\x20query\x201167\x20'+'repository.data(policy\x20key,\x20THE\x20SUBMITTED\x20ORDER)\x20compared\x20against\x20the\x20order\x27s\x20own\x20field\x20(default\x20'+'order.item.wip_hash\x20—\x20the\x20listing\x27s\x20WIP\x20commitment).\x20The\x20row\x20id\x20IS\x20the\x20order\x20address\x20(B-3\x20per-order\x20'+'tier-grid\x20convention),\x20so\x20the\x20read\x20is\x20chain-bound\x20to\x20this\x20order\x20—\x20no\x20candidate\x20list,\x20nothing\x20the\x20'+'verifier\x20can\x20pad.\x20The\x20canonical\x20check-in\x20dual-confirmation\x20gate:\x20the\x20property\x27s\x20redemption\x20evidence\x20'+'must\x20equal\x20the\x20commitment\x20the\x20buyer\x20actually\x20paid\x20against.','recommended_patterns':['P07','P15'],'parameters':[{'name':'repository_name','type':'string','description':'Evidence\x20Repository\x20object\x20name\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20with\x20the\x20plan\x27s\x20evidence\x20repository\x20(\x27<base>_evidence\x27,\x20A5\x20late-binding\x20like\x20service_name)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'row_name','type':'string','description':'Policy\x20key\x20under\x20which\x20the\x20order-keyed\x20evidence\x20rows\x20are\x20stored\x20(e.g.\x20\x27checkin_evidence\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Repository\x20policy\x20name\x20(case-sensitive)'},{'name':'order_field','type':'string','description':'Order\x20query\x20whose\x20value\x20the\x20row\x20must\x20equal\x20(default\x20\x27order.item.wip_hash\x27\x20—\x20the\x20listing\x20commitment;\x20the\x20example_root\x20ships\x20this\x20default\x20verbatim)','required':!![],'constraint':'Must\x20be\x20a\x20GUARDQUERY\x20name\x20returning\x20a\x20comparable\x20scalar\x20(e.g.\x20order.item.wip_hash,\x20order.item.price,\x20order.amount)\x20—\x20substituted\x20for\x20the\x20default\x20comparison\x20leg\x20at\x20fill\x20time','default':'order.item.wip_hash'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(also\x20the\x20evidence\x20row\x20id\x20—\x20order-keyed\x20row)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Evidence\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${row_name}','name':'Evidence\x20policy\x20key'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_equal','nodes':[{'type':'query','query':'repository.data','object':{'identifier':0x1},'parameters':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0x0}]},{'type':'query','query':'order.item.wip_hash','object':{'identifier':0x0},'parameters':[]}]},'applicable_industries':['travel','rental','ecommerce','logistics'],'relevant_risks':['R-C3-05','R-X1-17','R-X1-12'],'creation_notes':['ORDER-KEYED\x20READ\x20(B-3,\x20verified\x20convention):\x20query\x201167\x20accepts\x20the\x20ORDER\x20address\x20as\x20the\x20row\x20key\x20—\x20the\x20property\x20writes\x20the\x20evidence\x20under\x20id\x20=\x20the\x20order\x20address,\x20and\x20the\x20guard\x20reads\x20it\x20back\x20with\x20the\x20SAME\x20submitted\x20order\x20(slot\x200).\x20The\x20read\x20fails\x20closed\x20when\x20the\x20row\x20is\x20missing:\x20an\x20order\x20without\x20evidence\x20cannot\x20advance\x20(never\x20a\x20silent\x20pass).','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17):\x20bind\x20the\x20policy\x27s\x20write_guard\x20to\x20the\x20property\x27s\x20write\x20credential\x20(pattern.repository_write_authorization)\x20—\x20the\x20comparison\x20only\x20proves\x20the\x20row\x20MATCHES,\x20not\x20who\x20wrote\x20it.\x20An\x20unguarded\x20policy\x20lets\x20a\x20counterparty\x20pre-write\x20a\x20matching\x20row\x20(they\x20know\x20the\x20wip_hash\x20too).','COMMITMENT\x20SEMANTICS:\x20default\x20order.item.wip_hash\x20is\x20the\x20listing\x27s\x20WIP\x20commitment\x20the\x20buyer\x20paid\x20against\x20—\x20the\x20check-in\x20evidence\x20must\x20equal\x20it\x20(dual\x20confirmation\x20R4:\x20the\x20buyer\x27s\x20identity\x20half\x20rides\x20the\x20sibling\x20order-holder\x20forward).\x20Comparing\x20against\x20order.amount\x20or\x20another\x20scalar\x20works\x20the\x20same\x20way;\x20never\x20compare\x20against\x20a\x20passport-supplied\x20constant\x20(the\x20CONSTANT\x20opcode\x20prefers\x20passport\x20values\x20—\x20forgeable).','QUOTE_GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20evidence\x20policy\x20is\x20quote-guard-protected,\x20the\x20advancing\x20passport\x20MUST\x20carry\x20that\x20quote_guard\x20in\x20its\x20impack\x20list\x20—\x20the\x201167\x20read\x20aborts\x20otherwise\x20(fail-closed).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20check-in:\x20the\x20confirmed\x20->\x20in_stay\x20property\x20forward\x20advances\x20only\x20when\x20the\x20checkin_evidence\x20row\x20'+'keyed\x20by\x20THIS\x20order\x20equals\x20the\x20listing\x27s\x20wip_hash\x20commitment;\x20the\x20buyer\x27s\x20identity\x20forward\x20completes\x20'+'the\x20dual\x20confirmation.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_order_holder_or_time','scene_id':'machine_forward_guard','name':'Order-holder\x20OR\x20time-fallback\x20checkout\x20gate\x20(anti-strand\x20form)','description':'The\x20checkout/departure\x20gate\x20that\x20cannot\x20strand\x20the\x20escrow:\x20the\x20buyer\x20(order\x20owner\x20or\x20agent,\x20254-anchored)\x20'+'confirms\x20check-out,\x20OR\x20—\x20when\x20the\x20buyer\x20never\x20returns\x20—\x20the\x20keeper\x20time-fallback\x20opens\x20after\x20order.time\x20'+'+\x20nights\x20x\x2086400000.\x20The\x20pure\x20identity\x20form\x20deadlocks\x20when\x20the\x20buyer\x20walks\x20away\x20post-checkout:\x20no\x20'+'advance,\x20no\x20settlement,\x20funds\x20locked\x20in_stay\x20forever.\x20The\x20fallback\x20leg\x20keeps\x20a\x20keeper\x20rail\x20under\x20the\x20'+'SAME\x20guard,\x20so\x20one\x20instance\x20serves\x20both\x20callers.\x20Instantiable\x20form\x20of\x20the\x20global-ota\x20checkout_gate\x20'+'design\x20(P1-3:\x20the\x20departure\x20date\x20is\x20not\x20on\x20chain,\x20so\x20nights\x20from\x20booking\x20is\x20the\x20zero-addition\x20anchor).','recommended_patterns':['P06','P10','P16'],'parameters':[{'name':'stay_nights','type':'number','description':'Fallback\x20lock\x20length\x20in\x20nights,\x20measured\x20from\x20order.time\x20(booking\x20moment)','required':!![],'constraint':'Plain\x20number\x20of\x20nights\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000).\x20A\x20faithful\x20per-stay\x20anchor\x20rides\x20a\x20stay-date\x20Repository\x20row'}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x2,'b_submission':![],'value_type':'U64','value':'${stay_nights}','name':'Fallback\x20lock\x20length\x20in\x20nights\x20(booking-time\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Nights-to-milliseconds\x20constant'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0xfe},'parameters':[{'type':'context','context':'Signer'}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query','query':'order.time','object':{'identifier':0xfe},'parameters':[]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x2},{'type':'identifier','identifier':0x3}]}]}]}]},'applicable_industries':['travel','rental','ecommerce'],'relevant_risks':['R-C3-01','R-C3-05','R-C4-04'],'creation_notes':['WHY\x20THE\x20OR\x20(anti-strand):\x20a\x20pure\x20identity\x20gate\x20needs\x20the\x20buyer\x20to\x20come\x20back\x20—\x20a\x20buyer\x20who\x20never\x20confirms\x20check-out\x20deadlocks\x20the\x20escrow\x20in_stay\x20with\x20no\x20rail\x20out\x20(FUND-EXIT-01).\x20The\x20time-fallback\x20leg\x20gives\x20the\x20keeper\x20the\x20same\x20advance\x20once\x20the\x20stay\x20window\x20has\x20plausibly\x20elapsed.\x20The\x20buyer\x20leg\x20runs\x20FIRST\x20on\x20the\x20edge\x20(namedOperator\x20check),\x20the\x20keeper\x20leg\x20rides\x20the\x20permission\x20rail\x20—\x20with\x20namedOperator\x20\x22\x22\x20the\x20permission\x20layer\x20passes\x20for\x20anyone,\x20so\x20BOTH\x20legs\x20stay\x20gated\x20here.','LEG\x20PAIRING\x20ON\x20THE\x20EDGE\x20(bkng\x20F23\x20nuance):\x20this\x20guard\x20is\x20designed\x20for\x20an\x20edge\x20whose\x20operator\x20is\x20order_payer\x20—\x20the\x20identity\x20layer\x20(empty\x20namedOperator)\x20and\x20the\x20buyer\x20leg\x20coincide,\x20while\x20the\x20time\x20leg\x20covers\x20the\x20absent-buyer\x20case.\x20On\x20a\x20permissionIndex\x20edge\x20the\x20buyer\x20leg\x20is\x20unreachable\x20and\x20only\x20the\x20fallback\x20can\x20ever\x20fire\x20—\x20acceptable\x20only\x20when\x20the\x20buyer\x20advance\x20is\x20not\x20part\x20of\x20the\x20design.','FALLBACK\x20LATENCY:\x20the\x20anchor\x20is\x20order.time\x20(BOOKING),\x20so\x20lead\x20time\x20shifts\x20the\x20fallback\x20late\x20—\x20the\x20keeper\x20may\x20release\x20days\x20after\x20the\x20actual\x20departure\x20for\x20short-notice\x20bookings.\x20Tighten\x20with\x20the\x20stay-date\x20Repository\x20row\x20prescription\x20when\x20the\x20business\x20needs\x20the\x20real\x20date\x20(STAY-DATE\x20CORE).','T10\x20HIJACK\x20ANCHOR:\x20the\x20identity\x20legs\x20read\x20slot\x20254\x20(see\x20tpl_forward_order_holder)\x20—\x20never\x20a\x20free\x20submission\x20slot.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'OTA\x20checkout:\x20the\x20in_stay\x20->\x20completed\x20forward\x20advances\x20for\x20the\x20returning\x20buyer\x20immediately,\x20or\x20for\x20'+'the\x20keeper\x20once\x20booking\x20+\x20nights\x20has\x20elapsed\x20—\x20the\x20escrow\x20never\x20strands\x20on\x20an\x20absent\x20buyer.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_buy_guard_payment_voucher','scene_id':'service_buy_guard','name':'Membership\x20gate\x20via\x20Payment\x20voucher\x20(prepaid\x20proof)','description':'Buy\x20gate\x20that\x20accepts\x20a\x20caller-submitted\x20Payment\x20object\x20as\x20a\x20membership/access\x20voucher:\x20the\x20payer\x20must\x20be\x20'+'the\x20buyer,\x20the\x20merchant\x20must\x20be\x20a\x20recipient,\x20and\x20the\x20amount\x20must\x20cover\x20the\x20membership\x20price.\x20'+'Membership\x20Plan\x20B\x20(K3\x202026-10-29):\x20real-time\x20—\x20validity\x20starts\x20the\x20moment\x20the\x20Payment\x20exists\x20on-chain,\x20'+'no\x20roster\x20import\x20needed.\x20Pair\x20with\x20a\x20member-roster\x20Repository\x20(Plan\x20A,\x20tpl\x20family\x20of\x20'+'subscription/delivery-membership)\x20when\x20the\x20business\x20needs\x20time-based\x20lapse\x20or\x20tier\x20metadata.','recommended_patterns':['P03','P04'],'parameters':[{'name':'membership_price','type':'number','description':'Minimum\x20Payment\x20amount\x20that\x20proves\x20membership\x20(in\x20the\x20token\x27s\x20base\x20units)','required':!![]},{'name':'merchant_address','type':'address','description':'Address\x20that\x20must\x20appear\x20among\x20the\x20Payment\x20recipients\x20(the\x20membership\x20seller)','required':!![]}],'example_table':[{'identifier':0x0,'b_submission':![],'value_type':'U256','value':'${membership_price}','name':'Membership\x20price\x20(minimum\x20voucher\x20amount)'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','object_type':'Payment','name':'Submitted\x20membership\x20Payment\x20(voucher)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${merchant_address}','name':'Membership\x20seller\x20(required\x20recipient)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'payment.signer','object':{'identifier':0x1},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'payment.recipient\x20has','object':{'identifier':0x1},'parameters':[{'type':'identifier','identifier':0x2}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'payment.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x0}]}]},'applicable_industries':['subscription','retail','ecommerce','education'],'relevant_risks':['R-C1-01','R-C4-01'],'creation_notes':['TIMING:\x20buy_guard\x20evaluates\x20BEFORE\x20the\x20order\x20exists\x20(passport\x20gate\x20verification\x20precedes\x20order\x20creation)\x20—\x20'+'the\x20voucher\x20Payment\x20must\x20be\x20created\x20before\x20the\x20buy\x20call\x20(prepaid\x20flow).\x20The\x20guard\x20itself\x20never\x20moves\x20money;\x20it\x20only\x20attests.','BUY-GUARD\x20SLOT-0\x20FORBIDDEN\x20(E_BUY_GUARD_ORDER_SLOT):\x20the\x20submission\x20rides\x20identifier\x201,\x20never\x200.','NOT\x20TIME-BOUNDED:\x20this\x20template\x20proves\x20payment,\x20not\x20validity\x20window.\x20For\x20\x27paid\x20N\x20days,\x20lapses\x20at\x20T\x27\x20either\x20'+'import\x20the\x20payment\x20into\x20a\x20member-roster\x20Repository\x20whose\x20lapse\x20guard\x20reads\x20Clock\x20against\x20the\x20expiry\x20value\x20'+'(Plan\x20A\x20hybrid\x20—\x20the\x20roster\x20row\x20can\x20be\x20written\x20from\x20this\x20voucher),\x20or\x20require\x20a\x20fresh\x20voucher\x20per\x20period.','ONE\x20VOUCHER,\x20MANY\x20BUYS:\x20nothing\x20here\x20burns\x20the\x20Payment\x20—\x20a\x20membership\x20SHOULD\x20gate\x20many\x20purchases.\x20Add\x20'+'identifier\x20255\x20(byte-key\x20once\x20slot\x20pinned\x20to\x20a\x20per-buy\x20value)\x20only\x20for\x20single-admission\x20gates.','RECIPIENT\x20SET\x20IS\x20OPEN:\x20\x27recipient\x20has\x27\x20checks\x20membership\x20in\x20the\x20recipient\x20list\x20—\x20co-recipients\x20are\x20allowed\x20'+'by\x20design\x20(split\x20payouts).\x20Exact-single-recipient\x20businesses\x20add\x20a\x20count\x20leg.'],'example_use_case':'Warehouse-club\x20store:\x20the\x20buyer\x20pays\x20the\x20annual\x20membership\x20fee\x20to\x20the\x20merchant\x27s\x20wallet\x20(on-chain\x20or\x20any\x20'+'issuer\x20that\x20mints\x20a\x20Payment\x20object),\x20then\x20every\x20store\x20purchase\x20verifies\x20the\x20voucher\x20in\x20buy_guard\x20—\x20the\x20'+'forced-membership\x20model\x20without\x20circular\x20guard\x20dependencies.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_forward_penalty_payment','scene_id':'machine_forward_guard','name':'In-flow\x20real-time\x20penalty\x20payout\x20(verified\x20Payment\x20compensation)','description':'Forward\x20guard\x20that\x20advances\x20only\x20when\x20the\x20liable\x20party\x20(e.g.\x20a\x20late\x20courier)\x20has\x20compensated\x20the\x20buyer\x20with\x20'+'an\x20on-chain\x20Payment:\x20the\x20payment\x20is\x20bound\x20to\x20THIS\x20order\x20(info.for),\x20to\x20THIS\x20obligation\x20(info.remark\x20marker),\x20'+'its\x20recipient\x20is\x20the\x20order\x20owner,\x20and\x20the\x20amount\x20covers\x20the\x20penalty.\x20One-order-one-matter-one-verification:\x20'+'the\x20protocol-255\x20byte-key\x20slot\x20burns\x20the\x20proof\x20so\x20the\x20same\x20Payment\x20can\x20never\x20re-verify\x20—\x20'+'no\x20reusable-voucher\x20hole.\x20Enables\x20SLA\x20clauses\x20like\x20\x272h\x20late\x20→\x2010\x20WOW\x20instant\x20compensation\x27\x20expressed\x20'+'entirely\x20in\x20workflow\x20guards.','recommended_patterns':['P02','P06','P10'],'parameters':[{'name':'penalty_marker','type':'string','description':'Obligation\x20marker\x20that\x20must\x20equal\x20the\x20Payment\x27s\x20info.remark\x20(e.g.\x20\x27late-2h-penalty-v1\x27)','required':!![],'constraint':'Bump\x20the\x20version\x20suffix\x20when\x20the\x20clause\x20amount\x20changes\x20—\x20old\x20payments\x20must\x20not\x20satisfy\x20a\x20new\x20clause'},{'name':'penalty_amount','type':'number','description':'Minimum\x20compensation\x20amount\x20the\x20Payment\x20must\x20deliver\x20to\x20the\x20order\x20owner\x20(base\x20units)','required':!![]}],'example_table':[{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'},{'identifier':0x1,'b_submission':!![],'value_type':'Address','object_type':'Payment','name':'Submitted\x20penalty\x20Payment'},{'identifier':0x2,'b_submission':!![],'value_type':'Address','name':'Submitted\x20beneficiary\x20address\x20(must\x20equal\x20order.owner\x20AND\x20be\x20a\x20Payment\x20recipient)'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${penalty_marker}','name':'Obligation\x20marker\x20(payment.info.remark\x20must\x20equal)'},{'identifier':0x4,'b_submission':![],'value_type':'U256','value':'${penalty_amount}','name':'Minimum\x20compensation\x20amount'},{'identifier':0xff,'b_submission':!![],'value_type':'U64','name':'ONCE\x20byte-key\x20slot\x20(protocol\x20255):\x20caller\x20submits\x20the\x20current\x20progress.history\x20count;\x20the\x20guard\x20leg\x20pins\x20it\x20so\x20the\x20proof\x20burns\x20after\x20one\x20verification'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.for','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0xfe}]},{'type':'logic_equal','nodes':[{'type':'query','query':'payment.info.remark','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0xfe},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'query','query':'payment.recipient\x20has','object':{'identifier':0x1},'parameters':[{'type':'identifier','identifier':0x2}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'query','query':'payment.amount','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0xff},{'type':'query','query':'progress.history\x20count','object':{'identifier':0xfe,'convert_witness':'OrderProgress'},'parameters':[]}]}]},'applicable_industries':['delivery','logistics','local_life','rental','travel'],'relevant_risks':['R-C1-01','R-C3-05','R-X1-13'],'creation_notes':['PAYER\x20ANONYMITY\x20IS\x20INTENTIONAL:\x20no\x20payment.signer\x20==\x20Signer\x20leg\x20—\x20a\x20keeper\x20or\x20platform\x20delegate\x20may\x20drive\x20'+'the\x20compensation\x20forward\x20on\x20the\x20liable\x20party\x27s\x20behalf.\x20Strict\x20payer-is-driver\x20flows\x20add\x20the\x20'+'logic_equal[payment.signer,\x20context\x20Signer]\x20leg.','ISSUER\x20CONTRACT:\x20the\x20payment\x20must\x20be\x20minted\x20with\x20info.for\x20=\x20the\x20order\x20address\x20and\x20info.remark\x20=\x20the\x20exact\x20'+'marker;\x20the\x20beneficiary\x20address\x20is\x20submitted\x20at\x20drive\x20time\x20and\x20proven\x20against\x20order.owner\x20—\x20a\x20wrong\x20payee\x20'+'fails\x20the\x20gate\x20with\x20the\x20payment\x20unconsumed\x20(255\x20not\x20yet\x20keyed),\x20so\x20the\x20liable\x20party\x20can\x20retry\x20with\x20a\x20'+'corrected\x20payment.','ONE-SHOT\x20SCOPE:\x20255\x20pins\x20to\x20progress.history\x20count,\x20so\x20the\x20proof\x20burns\x20for\x20THIS\x20forward\x20firing.\x20A\x20second,\x20'+'independent\x20penalty\x20on\x20the\x20same\x20order\x20(later\x20breach,\x20different\x20marker)\x20is\x20a\x20NEW\x20marker\x20+\x20NEW\x20count\x20key\x20—\x20'+'by\x20design:\x20the\x20once-slot\x20kills\x20REPLAY,\x20not\x20distinct\x20obligations.','EDGE\x20PLACEMENT:\x20mount\x20on\x20the\x20\x27compensation\x20settled\x27\x20edge\x20AFTER\x20the\x20breach\x20node\x20(e.g.\x20delivered_late\x20→\x20'+'compensated);\x20the\x20order\x20rests\x20at\x20the\x20breach\x20node\x20with\x20funds\x20intact\x20until\x20the\x20payment\x20verifies\x20—\x20instant,\x20'+'trustless,\x20no\x20arbitration\x20needed\x20for\x20admitted\x20breaches.','TASK-BINDING\x20SLOT\x20(identifier\x20254):\x20declared\x20(b_submission=true)\x20because\x20this\x20guard\x20is\x20bound\x20to\x20a\x20'+'task-guarded\x20machine\x20forward\x20—\x20the\x20passport\x20builder\x20drops\x20undeclared\x20slots\x20and\x20Guards\x20are\x20immutable,\x20so\x20'+'an\x20undeclared\x20254\x20bricks\x20the\x20published\x20Machine\x20(TASKBIND-01).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Delivery\x20SLA:\x20the\x20machine\x20promises\x20\x27courier\x202h\x20past\x20the\x20promised\x20window\x20→\x2010\x20WOW\x20to\x20the\x20buyer\x20instantly\x27.\x20'+'The\x20courier\x20mints\x20the\x20compensation\x20Payment\x20(for=order,\x20remark=\x27late-2h-penalty-v1\x27)\x20and\x20drives\x20the\x20breach\x20→\x20'+'compensated\x20edge;\x20the\x20guard\x20proves\x20order-binding,\x20marker,\x20payee=buyer,\x20amount,\x20and\x20burns\x20the\x20proof\x20—\x20the\x20'+'order\x20proceeds\x20and\x20the\x20same\x20payment\x20can\x20never\x20settle\x20a\x20second\x20breach.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_repository_write_staff_union','scene_id':'repository_write_guard','name':'Staff-union\x20write\x20authorization\x20(order-keyed\x20rows;\x20holder\x20∪\x20staff)','description':'Executable\x20write_guard\x20for\x20an\x20ORDER-KEYED\x20evidence\x20policy\x20(policy\x20id_from\x20unset\x20—\x20row\x20id\x20=\x20the\x20caller-supplied\x20Order\x20address)\x20whose\x20writer\x20set\x20is\x20the\x20THREE-WAY\x20UNION\x20the\x20evidence\x20purposes\x20prescribe:\x20the\x20order\x20holder\x20(order.owner\x20==\x20Signer),\x20a\x20registered\x20order\x20agent\x20(order.agent\x20has\x20Signer),\x20OR\x20the\x20merchant\x27s\x20staff\x20through\x20the\x20Service\x27s\x20LIVE\x20permission\x20object\x20(service.permission\x20==\x20the\x20submitted\x20Permission,\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation).\x20'+'The\x20holder/agent\x20legs\x20read\x20the\x20SAME\x20submitted\x20Order\x20slot\x20the\x20row\x20is\x20keyed\x20by,\x20so\x20a\x20holder\x20can\x20only\x20author\x20rows\x20under\x20an\x20order\x20they\x20hold;\x20the\x20staff\x20leg\x20is\x20the\x20operational\x20writer\x20(tracking,\x20dispatch,\x20handover,\x20return-receipt\x20rows).\x20'+'Instantiable\x20form\x20of\x20pattern.repository_write_authorization\x27s\x20staff-union\x20leaf\x20(R-X1-17:\x20the\x20chain\x20only\x20asserts\x20the\x20write_guard\x20list\x20is\x20non-empty\x20—\x20a\x20placeholder\x20that\x20returns\x20true\x20is\x20an\x20OPEN\x20write).','recommended_patterns':['P08','P11','P15'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'The\x20Order\x20the\x20row\x20is\x20keyed\x20by\x20(row\x20id)\x20—\x20holder\x20legs\x20read\x20THIS\x20slot,\x20so\x20write\x20authorization\x20and\x20row\x20keying\x20cannot\x20diverge'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name\x20—\x20the\x20staff\x20leg\x20reads\x20its\x20live\x20permission)'},{'identifier':0x2,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20writing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20staff\x20leg)'}],'example_root':{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x1},'parameters':[]},{'type':'identifier','identifier':0x2}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x2},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x2},'parameters':[{'type':'context','context':'Signer'}]}]}]}]},'applicable_industries':['retail','delivery','freelance','education','general'],'relevant_risks':['R-X1-17','R-C1-03','R-C3-05'],'creation_notes':['ORDER-KEYED\x20PAIRING\x20ONLY:\x20the\x20policy\x20must\x20declare\x20NO\x20id_from\x20(row\x20id\x20=\x20the\x20caller-supplied\x20Order\x20address)\x20—\x20never\x20pair\x20this\x20guard\x20with\x20a\x20signer-keyed\x20policy:\x20the\x20escrow-bound\x20aggregate\x20reads\x20such\x20rows\x20as\x200\x20and\x20the\x20gated\x20forward\x20silently\x20bricks\x20(the\x20batch-one\x20group-buy\x20lesson,\x20tpl\x20creation\x20notes\x20of\x20tpl_repository_write_order_holder).','MIXED\x20RETURN-TYPE\x20CONSTRUCTION\x20(same\x20as\x20the\x20order-holder\x20leaf):\x20query\x201562\x20(order.owner)\x20and\x201002\x20(permission.owner)\x20return\x20Address\x20→\x20wrap\x20in\x20logic_equal\x20with\x20context(Signer);\x20query\x201567\x20(order.agent\x20has)\x20and\x201004\x20(permission.admin\x20has)\x20return\x20Bool\x20→\x20use\x20directly\x20as\x20logic_or\x20children\x20with\x20parameters:\x20[context(Signer)].\x20Compose\x20by\x20COPY.','DYNAMIC\x20STAFF\x20LEG:\x20the\x20caller\x20submits\x20a\x20Permission\x20address\x20(identifier\x202);\x20the\x20guard\x20verifies\x20query(1488:\x20service.permission)\x20==\x20the\x20submitted\x20permission,\x20then\x201002/1004\x20against\x20it\x20—\x20a\x20Service\x20that\x20rotates\x20its\x20permission\x20keeps\x20the\x20guard\x20working\x20without\x20a\x20rebuild.','DISCLOSED\x20RESIDUAL:\x20the\x20staff\x20leg\x20carries\x20NO\x20per-order\x20scoping\x20(the\x20chain\x20cannot\x20express\x20\x27staff\x20assigned\x20to\x20THIS\x20order\x27\x20without\x20a\x20roster\x20row),\x20so\x20ANY\x20staff\x20member\x20of\x20the\x20permission\x20org\x20may\x20write\x20ANY\x20order\x27s\x20evidence\x20row.\x20That\x20is\x20the\x20purposes\x27\x20own\x20writer\x20set;\x20the\x20attribution\x20boundary\x20is\x20this\x20guard,\x20the\x20truth\x20boundary\x20is\x20whatever\x20gated\x20forward\x20READS\x20the\x20row\x20(existence\x20is\x20not\x20trust\x20—\x20R-X1-17:\x20the\x20write\x20side\x20must\x20bind,\x20the\x20read\x20side\x20must\x20still\x20gate).','VALUE\x20BINDING:\x20when\x20the\x20policy\x20declares\x20data_from_submission,\x20keep\x20that\x20slot\x27s\x20value_type\x20equal\x20to\x20the\x20policy\x20value_type\x20(String\x20for\x20the\x20evidence\x20family)\x20so\x20the\x20row\x20carries\x20exactly\x20the\x20guard-verified\x20write.','NEVER\x20arm\x20identifier\x20254\x20on\x20a\x20repository\x20write\x20guard:\x20it\x20is\x20not\x20forward-bound\x20(no\x20task-binding\x20requirement),\x20and\x20a\x20254\x20ONCE-FOR-OBJECT\x20slot\x20would\x20abort\x20a\x20legitimate\x20second\x20write\x20(an\x20evidence\x20correction\x20or\x20a\x20retraction\x20upsert)\x20with\x20E_ONCE_TRIGGERED.'],'example_use_case':'Marketplace\x20evidence\x20ledger:\x20the\x20buyer\x27s\x20agent\x20uploads\x20their\x20return\x20receipt,\x20the\x20merchant\x27s\x20dispatcher\x20writes\x20the\x20tracking\x20row,\x20and\x20a\x20forged\x20write\x20under\x20anyone\x20else\x27s\x20order\x20aborts\x20at\x20the\x20write\x20—\x20the\x20ship/deliver\x20evidence\x20gates\x20then\x20read\x20rows\x20that\x20only\x20these\x20writers\x20could\x20have\x20authored.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_forward_staff_node_check','scene_id':'machine_forward_guard','name':'Staff-identity\x20advance\x20gate\x20(forward:\x20node\x20pin\x20+\x20dynamic\x20permission\x20+\x20staff\x20slot)','description':'Forward\x20guard\x20for\x20staff-executed\x20advances\x20(warehouse\x20picking,\x20desk\x20dispatch):\x20(1)\x20the\x20order\x20sits\x20at\x20the\x20expected\x20'+'pre-advance\x20node\x20(progress.current\x20==\x20expected_node),\x20(2)\x20the\x20caller-submitted\x20Permission\x20IS\x20the\x20Service\x27s\x20live\x20'+'permission\x20(service.permission\x20==\x20the\x20submitted\x20object\x20—\x20the\x20dynamic\x20idiom\x20survives\x20permission\x20rotation),\x20and\x20'+'(3)\x20the\x20Signer\x27s\x20entity\x20holds\x20the\x20staff\x20permission\x20index\x20in\x20that\x20org\x20(permission.entity.perm\x20has,\x20query\x201008).\x20'+'ADDITIVE\x20to\x20the\x20forward\x27s\x20own\x20chain-side\x20operator\x20gate\x20(permission_index\x20on\x20the\x20edge):\x20both\x20surfaces\x20must\x20hold\x20—\x20'+'the\x20operator\x20gate\x20authorizes\x20the\x20submission,\x20this\x20guard\x20states\x20the\x20business\x20identity\x20assertion.','recommended_patterns':['P06','P09','P10'],'parameters':[{'name':'expected_node','type':'string','description':'Expected\x20current\x20node\x20name\x20BEFORE\x20the\x20advance','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20name\x20defined\x20in\x20Machine\x20nodes\x20(case-sensitive).\x20The\x20compile\x20kernel\x20derives\x20it\x20from\x20the\x20mount\x20edge\x27s\x20prev\x20node.'},{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created);\x20the\x20compile\x20kernel\x20seeds\x20the\x20plan\x27s\x20service\x20name'},{'name':'staff_permission_index','type':'number','description':'Permission\x20index\x20reserved\x20for\x20the\x20staff\x20role\x20(e.g.\x201001)','required':!![],'constraint':'Must\x20match\x20the\x20index\x20configured\x20in\x20the\x20Permission\x20object\x27s\x20entity\x20table\x20(Substack\x20convention:\x201000=author,\x201500=arbitrator;\x20warehouse\x20clubs:\x201001=floor\x20staff)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(submitted\x20at\x20runtime;\x20progress.current\x20reads\x20it)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Expected\x20pre-advance\x20node\x20name'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(project\x20binding,\x20circular\x20ref\x20via\x20name\x20—\x20the\x20identity\x20leg\x20reads\x20its\x20live\x20permission)'},{'identifier':0x3,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20calling\x20staff\x20—\x20must\x20equal\x20service.permission)'},{'identifier':0x4,'b_submission':![],'value_type':'U16','value':'${staff_permission_index}','name':'Staff\x20permission\x20index\x20(e.g.\x201001)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x3}]},{'type':'query','query':'permission.entity.perm\x20has','object':{'identifier':0x3},'parameters':[{'type':'context','context':'Signer'},{'type':'identifier','identifier':0x4}]}]},'applicable_industries':['retail','delivery','freelance','general'],'relevant_risks':['R-C3-01','R-C3-05','R-X1-08'],'creation_notes':['THREE-LEG\x20ROOT:\x20progress.current\x20(1253,\x20String)\x20pins\x20the\x20mount\x27s\x20own\x20prev\x20(case-sensitive);\x20service.permission\x20(1488,\x20Address)\x20ties\x20the\x20identity\x20source\x20to\x20the\x20Service\x27s\x20live\x20org\x20—\x20a\x20caller-owned\x20Permission\x20can\x20never\x20satisfy\x20the\x20staff\x20leg\x20(the\x20anti-forgery\x20leg);\x20permission.entity.perm\x20has\x20(1008,\x20Bool,\x20params\x20[user\x20Address,\x20index\x20U16])\x20rides\x20as\x20a\x20DIRECT\x20logic_and\x20child\x20(Bool\x20query,\x20ofn-mn-261012\x20F-05).','DYNAMIC\x20IDIOM:\x20the\x20staff\x20leg\x20reads\x20the\x20SUBMITTED\x20Permission\x20verified\x20against\x20service.permission,\x20so\x20rotating\x20the\x20Service\x27s\x20permission\x20object\x20never\x20bricks\x20the\x20rail\x20(no\x20rebuild);\x20rotating\x20STAFF\x20needs\x20no\x20guard\x20change\x20either\x20—\x20the\x20index\x20is\x20the\x20register\x20(the\x20org\x27s\x20entity\x20table),\x20not\x20an\x20address\x20list.','GUARD-IS-ADDITIVE:\x20the\x20edge\x27s\x20own\x20permission_index\x20operator\x20gate\x20(chain-side)\x20and\x20this\x20guard\x20are\x20independent\x20surfaces\x20—\x20both\x20must\x20hold.\x20NEVER\x20drop\x20the\x20operator\x20gate\x20because\x20\x27the\x20guard\x20checks\x20it\x27:\x20the\x20guard\x20is\x20the\x20business\x20identity\x20assertion,\x20the\x20operator\x20gate\x20is\x20the\x20chain\x20submission\x20check\x20(R-C3-05\x20defense\x20in\x20depth).','254\x20ARMING\x20(forward-bound):\x20sound\x20on\x20SINGLE-ENTRY\x20mounts\x20only\x20(the\x20mount\x20prev\x20is\x20reachable\x20once\x20per\x20order\x20—\x20the\x20warehouse\x20pick\x20enters\x20picking\x20exactly\x20once).\x20Never\x20copy\x20this\x20tpl\x20onto\x20a\x20RE-ENTERABLE\x20mount\x20without\x20re-review:\x20the\x20once-for-object\x20slot\x20would\x20abort\x20the\x20second\x20advance\x20with\x20E_ONCE_TRIGGERED.','STAFF\x20ROSTER\x20DUTY:\x20query\x201008\x20reads\x20the\x20Permission\x20org\x27s\x20ENTITY\x20table\x20—\x20enrolling\x20floor\x20staff\x20under\x20the\x20staff\x20index\x20is\x20an\x20off-chain\x20operating\x20duty;\x20the\x20guard\x20enforces\x20membership,\x20it\x20cannot\x20enroll\x20staff.',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Warehouse\x20club\x20picking:\x20a\x20floor\x20staffer\x27s\x20PickOrder\x20forward\x20may\x20advance\x20paid\x20->\x20picking\x20only\x20while\x20the\x20order\x20sits\x20at\x20paid,\x20'+'against\x20the\x20club\x27s\x20CURRENT\x20permission\x20org,\x20and\x20only\x20when\x20the\x20signer\x27s\x20entity\x20holds\x20the\x20staff\x20slot\x20(1001).\x20'+'A\x20stolen\x20staff\x20credential\x20from\x20a\x20rotated\x20org\x20satisfies\x20nothing;\x20a\x20non-staff\x20signer\x20aborts\x20at\x20the\x201008\x20leg.','verifier_constraint_level':'level2_identity_set'},{'id':'tpl_repository_row_present_signer','scene_id':'machine_forward_guard','name':'Signer-pinned\x20evidence\x20row\x20presence\x20gate\x20(the\x20caller\x27s\x20own\x20row)','description':'Gates\x20a\x20machine\x20forward\x20on\x20a\x20row\x20keyed\x20to\x20the\x20CALLING\x20SIGNER:\x20the\x20matched\x20candidate\x20set\x20must\x20contain\x20'+'context(Signer)\x20—\x20under\x20a\x20SIGNER-KEYED\x20policy\x20(id_from\x20signer,\x20row\x20id\x20=\x20the\x20writer\x27s\x20own\x20address)\x20that\x20'+'proves\x20the\x20caller\x20themselves\x20wrote\x20a\x20row\x20under\x20the\x20policy\x20(the\x20authorship-eligibility\x20face:\x20an\x20entrant\x20'+'appealing\x20a\x20contest\x20placement,\x20a\x20member\x20claiming\x20a\x20roster\x20right).\x20The\x20SIGNER\x20PIN\x20(the\x20F-10\x20mirror):\x20'+'candidate-list\x20padding\x20is\x20useless\x20—\x20only\x20a\x20row\x20whose\x20id\x20equals\x20the\x20caller\x27s\x20address\x20satisfies\x20the\x20pin,\x20'+'and\x20the\x20policy\x27s\x20writer-bound\x20write\x20guard\x20is\x20what\x20ties\x20that\x20row\x20to\x20their\x20own\x20submission.\x20Optional\x20'+'NOT-BEFORE\x20floor\x20(not_before_hours\x20>\x200),\x20same\x20vocabulary\x20as\x20the\x20order-keyed\x20twin.','recommended_patterns':['P07','P15'],'parameters':[{'name':'repository_name','type':'string','description':'Evidence\x20Repository\x20object\x20name\x20—\x20the\x20compile\x20kernel\x20seeds\x20it\x20with\x20the\x20plan\x27s\x20evidence\x20repository\x20(\x27<base>_evidence\x27,\x20A5\x20late-binding\x20like\x20service_name)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Repository\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'row_name','type':'string','description':'Policy\x20key\x20under\x20which\x20the\x20SIGNER-KEYED\x20rows\x20are\x20stored\x20(e.g.\x20\x27entry\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Repository\x20policy\x20name\x20(case-sensitive);\x20the\x20policy\x20MUST\x20be\x20id_from\x20signer'},{'name':'evidence_marker','type':'string','description':'Substring\x20the\x20row\x20value\x20must\x20contain\x20—\x20a\x20policy\x20whose\x20rows\x20carry\x20no\x20canonical\x20token\x20needs\x20the\x20convention\x20declared\x20at\x20the\x20write\x20site\x20(e.g.\x20entries\x20recorded\x20as\x20WIP-hash\x20strings\x20carry\x20the\x20hash-prefix\x20idiom)','required':!![]},{'name':'not_before_hours','type':'number','description':'Optional\x20NOT-BEFORE\x20floor:\x20Clock\x20>=\x20order.time\x20+\x20N\x20hours\x20x\x203600000\x20—\x20\x270\x27\x20(default)\x20ships\x20WITHOUT\x20the\x20floor\x20leg\x20(pure\x20presence\x20gate)','required':![],'default':'0'},{'name':'not_before_ms','type':'number','description':'Internal:\x20hours-to-milliseconds\x20constant\x20for\x20the\x20floor\x20leg\x20—\x20omitted\x20together\x20with\x20the\x20floor','required':![],'default':'3600000'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address\x20(floor-leg\x20anchor;\x20unused\x20when\x20the\x20floor\x20is\x20omitted)'},{'identifier':0x1,'b_submission':![],'value_type':'Address','value':'${repository_name}','name':'Evidence\x20Repository\x20(plan-bound,\x20circular\x20ref\x20via\x20name)'},{'identifier':0x2,'b_submission':![],'value_type':'String','value':'${row_name}','name':'Signer-keyed\x20policy\x20key'},{'identifier':0x3,'b_submission':![],'value_type':'String','value':'${evidence_marker}','name':'Marker\x20substring\x20the\x20row\x20value\x20must\x20contain'},{'identifier':0x5,'b_submission':!![],'value_type':'VecAddress','name':'Candidate\x20row\x20ids\x20(the\x20appellant\x20submits\x20their\x20own\x20address\x20—\x20their\x20entry\x20row\x20id;\x20the\x20pin\x20makes\x20padding\x20useless)'},{'identifier':0x7,'b_submission':![],'value_type':'U64','value':'${not_before_hours}','name':'NOT-BEFORE\x20floor\x20in\x20hours\x20(0\x20=\x20the\x20floor\x20leg\x20and\x20this\x20row\x20are\x20omitted)'},{'identifier':0x8,'b_submission':![],'value_type':'U64','value':'${not_before_ms}','name':'Hours-to-milliseconds\x20constant\x20(floor-leg\x20companion;\x20omitted\x20with\x20the\x20floor)'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'vec_contains_address','nodes':[{'type':'query_repository_data_find_where','object':{'identifier':0x1},'key':{'identifier':0x2},'ids':{'identifier':0x5},'where':{'kind':'stringContains','value':'${evidence_marker}'}},{'type':'context','context':'Signer'}]},{'type':'logic_as_u256_greater_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query','query':'order.time','object':{'identifier':0xfe},'parameters':[]},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x7},{'type':'identifier','identifier':0x8}]}]}]}]},'applicable_industries':['freelance','education','ecommerce'],'relevant_risks':['R-X1-17','R-C3-05'],'creation_notes':['PAIRING\x20PROHIBITION\x20(the\x20order-keyed\x20twin\x27s\x20mirror):\x20pairs\x20ONLY\x20with\x20SIGNER-KEYED\x20policies\x20(id_from\x20signer\x20—\x20row\x20id\x20=\x20the\x20writer\x27s\x20address)\x20whose\x20write\x20guard\x20binds\x20the\x20writer\x20identity\x20(tpl_write_guard_type_check\x27s\x20Signer\x20==\x20writer\x20leg).\x20Over\x20an\x20ORDER-keyed\x20policy\x20no\x20row\x20id\x20ever\x20equals\x20the\x20caller\x27s\x20address,\x20so\x20this\x20gate\x20welds\x20shut\x20—\x20exactly\x20how\x20the\x20order-keyed\x20twin\x27s\x20order\x20pin\x20welds\x20a\x20signer-keyed\x20candidate\x20set.','WRITE-SIDE\x20BINDING\x20IS\x20MANDATORY\x20(R-X1-17,\x20existence-is-not-trust):\x20presence\x20over\x20an\x20UNGUARDED\x20policy\x20is\x20satisfiable\x20by\x20any\x20pre-written\x20row.\x20Here\x20the\x20writer-bound\x20write\x20guard\x20is\x20what\x20makes\x20the\x20pin\x20mean\x20authorship\x20—\x20\x27a\x20row\x20keyed\x20to\x20my\x20address\x27\x20+\x20\x27writes\x20require\x20Signer\x20==\x20writer\x27\x20=\x20\x27I\x20wrote\x20my\x20row\x27.','MARKER\x20SEMANTICS:\x20the\x20row\x20value\x20must\x20CONTAIN\x20the\x20marker\x20(byte\x20substring,\x20case-sensitive).\x20A\x20policy\x20whose\x20rows\x20carry\x20no\x20canonical\x20token\x20needs\x20the\x20convention\x20declared\x20at\x20the\x20write\x20site\x20BEFORE\x20this\x20gate\x20binds\x20(the\x20design-contest\x20entry\x20face:\x20entries\x20are\x20WIP-hash\x20strings\x20carrying\x20the\x20hash-prefix\x20idiom\x20—\x20the\x20same\x20convention\x20as\x20the\x20final-delivery\x20rows).\x20An\x20over-tight\x20marker\x20welds\x20the\x20gate\x20for\x20every\x20writer\x20whose\x20row\x20lacks\x20the\x20token.','CANDIDATE\x20CONVENTION:\x20the\x20advancing\x20caller\x20submits\x20their\x20own\x20address\x20(their\x20row\x20id);\x20a\x20keeper-side\x20advance\x20submits\x20the\x20appellant\x27s\x20address\x20on\x20their\x20behalf.\x20The\x20pin\x20makes\x20padding\x20useless,\x20so\x20a\x20longer\x20list\x20is\x20harmless\x20—\x20but\x20one\x20honest\x20candidate\x20is\x20the\x20whole\x20story.','QUOTE_GUARD\x20CARRY\x20(MOV-PROTOCOL-1212\x20C):\x20if\x20the\x20evidence\x20policy\x20is\x20quote-guard-protected,\x20the\x20advancing\x20passport\x20MUST\x20carry\x20that\x20quote_guard\x20in\x20its\x20impack\x20list\x20—\x20the\x201176\x20read\x20aborts\x20otherwise\x20(fail-closed).',PROTOCOL_SLOT_254_NOTE],'example_use_case':'Design-contest\x20appeal:\x20a\x20losing\x20entrant\x27s\x20AppealPlacement\x20forward\x20advances\x20only\x20while\x20a\x20row\x20keyed\x20to\x20THEIR\x20'+'address\x20exists\x20under\x20the\x20entry\x20policy\x20(value\x20carrying\x20the\x20WIP-hash\x20idiom)\x20—\x20a\x20bystander\x20with\x20no\x20entry\x20of\x20'+'their\x20own\x20cannot\x20grieve\x20the\x20contest.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_claim_settle','scene_id':'service_order_allocators_guard','name':'Node-gated\x20claim\x20settlement\x20rail\x20(node\x20gate\x20+\x20caller-auth;\x20two-rail\x20independence)','description':'Settlement\x20allocator\x20gate\x20at\x20an\x20ADJUDICATED\x20claim\x20node:\x20progress.current\x20in\x20the\x20settle-eligible\x20NODE\x20SET\x20'+'{settle_node,\x20settle_node_alt,\x20settle_node_alt2}\x20plus\x20the\x20caller-authorization\x20leg\x20—\x20and\x20NO\x20claimed_by\x20'+'axis\x20(decision\x2011\x20two-rail\x20independence:\x20NO\x20fund\x20rail\x20reads\x20order.claimed_by).\x20The\x20D-BUG-2\x20claimed_by\x20legs\x20'+'the\x20refund/settle\x20twins\x20once\x20carried\x20assumed\x20the\x20rail\x27s\x20money\x20and\x20'+'the\x20arbitration\x20award\x27s\x20money\x20are\x20the\x20SAME\x20pool;\x20at\x20a\x20claim-upheld\x20node\x20they\x20are\x20NOT\x20—\x20the\x20award\x20pays\x20the\x20'+'order\x20owner\x20from\x20the\x20compensation\x20fund\x20while\x20this\x20rail\x20pays\x20the\x20merchant\x20side\x20from\x20the\x20escrowed\x20booking\x20'+'pool\x20(independent\x20channels),\x20and\x20a\x20split\x20ruling\x20can\x20pay\x20the\x20award\x20first\x20yet\x20still\x20uphold\x20this\x20side\x20(a\x20'+'zero-award\x20ruling\x20writes\x20claimed_by\x20too\x20—\x20BKN-P1).\x20Deliberately\x20arms\x20NO\x20254\x20slot:\x20the\x20Rate-10000\x20group\x20self-limits\x20by\x20pool\x20exhaustion.','recommended_patterns':['P02','P06','P10'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'settle_node','type':'string','description':'Adjudicated\x20claim\x20node\x20whose\x20arrival\x20triggers\x20settlement\x20(e.g.\x20\x27claim_paid\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'settle_node_alt','type':'string','description':'Second\x20settle-eligible\x20node\x20(optional\x20post-settlement\x20side\x20node).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20the\x20machine\x20has\x20no\x20side\x20nodes','required':![],'default':'${settle_node}'},{'name':'settle_node_alt2','type':'string','description':'Third\x20settle-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${settle_node}'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${settle_node}','name':'Adjudicated\x20claim\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(feeds\x20the\x20caller\x20leg\x27s\x20service.permission\x20read;\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${settle_node_alt}','name':'Second\x20settle-eligible\x20node\x20(optional;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${settle_node_alt2}','name':'Third\x20settle-eligible\x20node\x20(optional;\x20duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','freelance'],'relevant_risks':['R-C3-05','R-X1-05'],'creation_notes':['TWO\x20logic\x20legs\x20in\x20logic_and\x20(node-SET\x20gate\x20+\x20caller-authorization):\x20NO\x20claimed_by\x20leg\x20(decision\x2011\x20two-rail\x20independence\x20—\x20see\x20below)\x20and\x20NO\x20order.service\x20host-binding\x20leg\x20(removed\x20protocol-wide\x20—\x20v148\x20chain-side\x20task\x20binding,\x20bsw4\x20F-06);\x20NO\x20254\x20submission\x20slot\x20(the\x20Rate-10000\x20share\x20group\x20self-limits\x20by\x20pool\x20exhaustion\x20—\x20the\x20second\x20alloc\x20run\x20splits\x20a\x20zero\x20balance).','TWO-RAIL\x20INDEPENDENCE\x20HERE\x20(user\x20ruling\x202026-10-30\x20(2),\x20generalized\x20to\x20decision\x2011\x20on\x202026-10-31):\x20the\x20claimed_by\x20polarity\x20legs\x20D-BUG-2\x20once\x20put\x20on\x20the\x20refund/settle/recover\x20twins\x20assumed\x20the\x20rail\x20and\x20the\x20award\x20draw\x20the\x20SAME\x20pool.\x20At\x20an\x20adjudicated\x20claim\x20node\x20they\x20do\x20not\x20—\x20the\x20award\x20pays\x20the\x20order\x20owner\x20from\x20the\x20compensation\x20fund\x20(3x\x20cap),\x20this\x20rail\x20pays\x20the\x20merchant\x20side\x20from\x20the\x20escrowed\x20booking\x20pool;\x20the\x20channels\x20are\x20independent,\x20so\x20NO\x20fund\x20rail\x20reads\x20order.claimed_by\x20at\x20all\x20(the\x20award\x27s\x20payout\x20state\x20is\x20the\x20arbitrator\x27s\x20ruling\x20INPUT,\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate\x20—\x20never\x20a\x20gate\x20condition\x20here).\x20A\x20split\x20ruling\x20can\x20pay\x20the\x20award\x20FIRST\x20and\x20still\x20uphold\x20this\x20side,\x20and\x20a\x20zero-award\x20ruling\x20writes\x20claimed_by\x20too\x20(BKN-P1)\x20—\x20either\x20face\x20would\x20weld\x20a\x20polarity\x20leg\x20here\x20and\x20strand\x20the\x20pool\x20exactly\x20on\x20the\x20appeal-upheld\x20path.\x20Exactly-once\x20is\x20TOPOLOGICAL:\x20the\x20adjudicated\x20node\x20is\x20left\x20by\x20a\x20finalize\x20advance\x20and\x20never\x20re-entered.','WHY\x20NOT\x20tpl_allocator_node_gate_settle_once:\x20its\x20FORMER\x20claimed_by\x20==\x20false\x20leg\x20(the\x20D-BUG-2\x20exclusion,\x20removed\x20decision\x2011)\x20was\x20precisely\x20the\x20weld\x20this\x20twin\x20exists\x20to\x20avoid,\x20and\x20a\x20single-shot\x20rail\x20keyed\x20to\x20one\x20node\x20cannot\x20express\x20the\x20adjudicated-claim-node\x20set\x20this\x20rail\x20needs.\x20WHY\x20NOT\x20tpl_allocator_serial_window_release:\x20its\x20window-closed\x20Clock\x20lock\x20delays\x20the\x20payout\x20until\x20the\x20filing\x20window\x20ELAPSES\x20even\x20after\x20early\x20adjudication,\x20while\x20the\x20mirrored\x20order-anchored\x20refund\x20rail\x20at\x20the\x20guest\x20node\x20carries\x20no\x20window\x20lock\x20—\x20the\x20asymmetry\x20would\x20strand\x20the\x20merchant\x20share\x20for\x20the\x20window\x27s\x20remainder.','CALLER-AUTHORIZATION\x20LEG\x20(gf30\x20A2\x20/\x20rex5\x20T-27;\x20ships\x20IN\x20example_root):\x20alloc_by_guard\x20is\x20NOT\x20a\x20forward\x20—\x20the\x20allocation\x20op\x20has\x20NO\x20chain-side\x20caller\x20check,\x20so\x20a\x20rail\x20keyed\x20only\x20to\x20node\x20legs\x20is\x20driveable\x20by\x20ANY\x20passport\x20holder.\x20The\x20shipped\x20leg\x20is\x20logic_or[buyer:\x20order.owner\x20==\x20Signer\x20OR\x20order.agent\x20has\x20Signer;\x20merchant-or-keeper:\x20service.permission\x20==\x20the\x20submitted\x20Permission\x20slot\x20(identifier\x206),\x20then\x20permission.owner\x20==\x20Signer\x20OR\x20permission.admin\x20has\x20Signer].\x20Never\x20strip\x20it.','NODE-SET\x20SHAPE\x20(klook-mn-261019\x20KLM-FIND-02):\x20the\x20node-set\x20leg\x20is\x20a\x20logic_or\x20ONLY\x20when\x20the\x20settled\x20set\x20has\x202+\x20distinct\x20nodes\x20—\x20with\x20the\x20alt\x20params\x20at\x20their\x20defaults\x20the\x20extra\x20legs\x20duplicate\x20the\x20primary\x20(a\x20legal\x20tautology;\x20the\x20grammar\x20forbids\x20only\x20the\x20ONE-child\x20wrap).','ALLOCATOR-ONLY\x20MOUNT\x20(bkng\x20F22):\x20allocator\x20guards\x20evaluate\x20AT\x20ALLOC\x20TIME,\x20when\x20progress.current\x20is\x20the\x20REACHED\x20node\x20—\x20NEVER\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20edge\x20(a\x20forward\x20evaluates\x20BEFORE\x20the\x20advance;\x20the\x20pin\x20would\x20weld\x20the\x20edge\x20shut).'],'example_use_case':'Short-stay\x20claim\x20settlement:\x20the\x20host/platform\x20share\x20legs\x20fire\x20at\x20claim_paid\x20(the\x20reviewer\x27s\x20or\x20the\x20'+'arbitration\x20keeper\x27s\x20upheld-host\x20advance)\x20—\x20an\x20award\x20the\x20fund\x20paid\x20the\x20guest\x20first\x20does\x20not\x20weld\x20the\x20'+'rail,\x20and\x20the\x20host\x20is\x20not\x20made\x20to\x20wait\x20out\x20the\x20filing\x20window\x20after\x20adjudication.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_session_release','scene_id':'service_order_allocators_guard','name':'Per-session\x20staged\x20release\x20rail\x20(buyer-signed;\x20six-node\x20qualifying\x20set;\x20per-session\x20255\x20once\x20key)','description':'Per-session\x20staged\x20settlement\x20rail\x20for\x20cohort/term\x20machines:\x20progress.current\x20in\x20the\x20QUALIFYING\x20NODE\x20SET\x20'+'{session_node,\x20alt,\x20alt2,\x20alt3,\x20alt4,\x20alt5}\x20—\x20the\x20attended-session\x20nodes\x20AND\x20the\x20finalization\x20states\x20kept\x20'+'admissible\x20as\x20the\x20exit\x20safety\x20net,\x20so\x20a\x20missed\x20session\x20release\x20can\x20still\x20leave\x20at\x20the\x20terminal\x20'+'(FUND-EXIT-01:\x20an\x20uncovered\x20terminal\x20strands\x20the\x20escrow\x20permanently)\x20—\x20plus\x20the\x20per-session\x20identifier-255\x20'+'once\x20key\x20pinned\x20to\x20the\x20monotonic\x20progress.history\x20count\x20(each\x20attended\x20session\x27s\x20entry\x20grows\x20the\x20count,\x20so\x20'+'every\x20release\x20gets\x20a\x20fresh\x20chain\x20OnceKey\x20and\x20a\x20repeat\x20at\x20the\x20SAME\x20session\x20aborts\x2016\x20—\x20OFN\x20#P-04\x20'+'mainnet-proven;\x20this\x20leg\x20is\x20the\x20materialized\x20form\x20of\x20the\x20release-sequence\x20lock\x20the\x20prose\x20calls\x20a\x20'+'payment-vector\x20length\x20check),\x20plus\x20the\x20BUYER-ONLY\x20caller-authorization\x20leg.\x20Deliberately\x20NO\x20claimed_by\x20leg\x20'+'(decision\x2011\x20two-rail\x20independence):\x20a\x20staged\x20rail\x20must\x20keep\x20firing\x20after\x20an\x20award\x20pays\x20(welding\x20the\x20'+'remaining\x20sessions\x20shut\x20strands\x20the\x20term)\x20—\x20the\x20terminal\x20residual\x20sweep\x20and\x20its\x20recover\x20twin\x20are\x20the\x20'+'awarded\x20order\x27s\x20exits.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'session_node','type':'string','description':'First\x20session\x20node\x20whose\x20arrival\x20releases\x20one\x20Amount\x20(e.g.\x20\x27session_1\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'session_node_alt','type':'string','description':'Second\x20qualifying\x20node\x20(next\x20session).\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${session_node}','constraint':'Every\x20attended-session\x20node\x20the\x20Amount\x20releases\x20from,\x20PLUS\x20the\x20finalization\x20states\x20(FUND-EXIT-01\x20safety\x20net)\x20—\x20omitting\x20one\x20strands\x20that\x20release\x20or\x20that\x20exit'},{'name':'session_node_alt2','type':'string','description':'Third\x20qualifying\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${session_node}'},{'name':'session_node_alt3','type':'string','description':'Fourth\x20qualifying\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${session_node}'},{'name':'session_node_alt4','type':'string','description':'Fifth\x20qualifying\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${session_node}'},{'name':'session_node_alt5','type':'string','description':'Sixth\x20qualifying\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${session_node}','constraint':'Seven-plus\x20qualifying\x20nodes:\x20add\x20per-node\x20String\x20table\x20slots\x20(identifier\x2010,\x2011,\x20...\x20—\x20slots\x200/1/4/5/7/8/9/255\x20are\x20taken)\x20and\x20extend\x20the\x20node-set\x20logic_or\x20by\x20COPY\x20of\x20the\x20shipped\x20six-child\x20form'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${session_node}','name':'First\x20qualifying\x20node\x20name\x20(case-sensitive)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${session_node_alt}','name':'Second\x20qualifying\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${session_node_alt2}','name':'Third\x20qualifying\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x7,'b_submission':![],'value_type':'String','value':'${session_node_alt3}','name':'Fourth\x20qualifying\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x8,'b_submission':![],'value_type':'String','value':'${session_node_alt4}','name':'Fifth\x20qualifying\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x9,'b_submission':![],'value_type':'String','value':'${session_node_alt5}','name':'Sixth\x20qualifying\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0xff,'b_submission':!![],'value_type':'U64','name':'ONCE\x20byte-key\x20slot\x20(protocol\x20255):\x20the\x20caller\x20submits\x20the\x20current\x20progress.history\x20count;\x20the\x20guard\x20leg\x20pins\x20it,\x20so\x20each\x20session\x20gets\x20a\x20fresh\x20OnceKey\x20and\x20a\x20replay\x20at\x20the\x20same\x20session\x20aborts\x2016'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x7}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x8}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x9}]}]},{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0xff},{'type':'query','query':'progress.history\x20count','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]}]},'applicable_industries':['education','ecommerce','freelance'],'relevant_risks':['R-C3-05','R-X1-05','R-PER-02'],'creation_notes':['THREE\x20logic\x20legs\x20in\x20logic_and:\x20(1)\x20the\x20qualifying\x20NODE\x20SET\x20—\x20one\x20top-level\x20six-child\x20logic_or\x20(the\x20chain\x20grammar\x20accepts\x20>2\x20logic_or\x20children;\x20with\x20the\x20alt\x20params\x20at\x20their\x20defaults\x20the\x20extra\x20legs\x20duplicate\x20the\x20primary\x20—\x20a\x20legal\x20tautology,\x20never\x20a\x20dead\x20literal),\x20(2)\x20the\x20per-session\x20once\x20leg\x20—\x20identifier\x20255\x20pinned\x20to\x20progress.history\x20count\x20(monotonic,\x20unforgeable;\x20OFN\x20#P-04\x20mainnet-proven\x20261010),\x20(3)\x20the\x20BUYER-ONLY\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27\x20—\x20alloc_by_guard\x20has\x20NO\x20chain-side\x20caller\x20check;\x20this\x20leg\x20is\x20the\x20caller\x20check).\x20The\x20guard\x20table\x20MUST\x20declare\x20identifier\x20255\x20(b_submission:\x20true)\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport\x20from\x20the\x20guard\x20table.','BUYER-ONLY\x20CALLER\x20LEG\x20(user\x20ruling\x202026-10-30\x20(1),\x20live-class\x20cohort\x20purpose\x20\x27the\x20institution\x20can\x20NOT\x20self-claim\x27):\x20the\x20institution\x20advances\x20the\x20workflow\x20(permission\x20slot)\x20but\x20attendance\x20MONEY\x20moves\x20only\x20on\x20the\x20parent\x27s\x20(order\x20owner\x27s)\x20signature\x20or\x20their\x20registered\x20agent\x27s.\x20There\x20is\x20NO\x20merchant-or-keeper\x20dynamic-permission\x20leg\x20—\x20the\x20counterparty\x20must\x20never\x20be\x20able\x20to\x20sign\x20its\x20own\x20attendance\x20releases.\x20A\x20parent-gone\x20mid-term\x20order\x20still\x20exits:\x20the\x20terminal\x20residual\x20sweep\x20carries\x20no\x20signer\x20leg\x20(keeper-reachable)\x20and\x20sweeps\x20the\x20unearned\x20remainder\x20to\x20the\x20order\x20anchor.','WHY\x20NOT\x20tpl_allocator_node_gate_settle_nodes:\x20that\x20twin\x20ships\x20FOUR\x20node\x20slots\x20and\x20the\x20merchant-or-keeper\x20dynamic-permission\x20caller\x20leg\x20—\x20the\x20institution-side\x20leg\x20is\x20exactly\x20the\x20self-claim\x20this\x20rail\x20exists\x20to\x20forbid,\x20and\x20the\x20cohort\x20qualifying\x20set\x20runs\x20SIX\x20nodes\x20(sessions\x20+\x20the\x20finalization\x20safety\x20net).\x20WHY\x20NOT\x20tpl_allocator_node_gate_refund:\x20wrong\x20rail\x20class\x20—\x20this\x20is\x20a\x20staged\x20SETTLEMENT\x20(Amount\x20per\x20session),\x20not\x20a\x20node-gated\x20refund.','DELIBERATELY\x20NO\x20claimed_by\x20leg\x20(decision\x2011\x20two-rail\x20independence\x20—\x20the\x20settle_nodes\x20staged-rail\x20rule\x20still\x20applies):\x20one\x20arbitration\x20award\x20must\x20not\x20weld\x20the\x20REMAINING\x20sessions\x20shut,\x20and\x20no\x20fund\x20rail\x20reads\x20order.claimed_by\x20at\x20all\x20—\x20the\x20awarded\x20order\x27s\x20exits\x20are\x20the\x20terminal\x20residual\x20sweep\x20and\x20its\x20recover\x20twin,\x20which\x20partition\x20the\x20terminals\x20between\x20THEM.','WHY\x20NOT\x20254\x20(single-shot\x20key):\x20254\x20keys\x20on\x20payment_info.for_object,\x20which\x20never\x20changes\x20across\x20sessions\x20—\x20the\x20SECOND\x20session\x20fire\x20would\x20abort\x2016\x20forever\x20and\x20strand\x20the\x20remaining\x20term\x20(OFN\x20#P-04).\x20The\x20255\x20history-count\x20pin\x20is\x20the\x20only\x20per-fire\x20key\x20that\x20advances\x20with\x20the\x20order.','AMOUNT-MODE\x20PAIRING:\x20an\x20Amount-mode\x20allocator\x20with\x20a\x20Rate-0\x20leg\x20aborts\x20ERATE_NOT_10000,\x20so\x20order\x20binding\x20rides\x20the\x20guard\x27s\x20own\x20slot-0\x20submission\x20(identifier\x200,\x20b_submission:\x20true)\x20—\x20the\x20submitted\x20ORDER\x20address\x20is\x20the\x20binding\x20target.','PER-SESSION\x20CAP:\x20the\x20Amount\x20leg\x20is\x20a\x20fixed\x20per-session\x20figure;\x20the\x20node\x20set\x20+\x20once\x20key\x20bound\x20the\x20fires\x20to\x20one\x20per\x20qualifying\x20entry,\x20so\x20an\x20N-session\x20term\x20releases\x20at\x20most\x20N\x20x\x20Amount.\x20A\x20program\x20expanded\x20beyond\x20the\x20six\x20shipped\x20slots\x20needs\x20extra\x20String\x20table\x20slots\x20(identifier\x2010,\x2011,\x20...)\x20and\x20one\x20more\x20logic_or\x20child\x20per\x20slot.','ALLOCATOR-ONLY\x20MOUNT\x20(bkng\x20F22):\x20allocator\x20guards\x20evaluate\x20AT\x20ALLOC\x20TIME,\x20when\x20progress.current\x20is\x20the\x20REACHED\x20node\x20—\x20NEVER\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20edge\x20(a\x20forward\x20evaluates\x20BEFORE\x20the\x20advance;\x20the\x20pin\x20would\x20weld\x20the\x20edge\x20shut).'],'example_use_case':'Live-class\x20cohort:\x20each\x20dual-sign\x20attended\x20session\x20releases\x20term_price\x20/\x20session_count\x20as\x20a\x20fixed\x20Amount\x20(repeat_from\x20session_count\x20re-fires\x20the\x20Sharing\x20entry\x20once\x20per\x20session);\x20the\x20finalization\x20states\x20stay\x20admissible\x20so\x20a\x20missed\x20release\x20still\x20exits\x20at\x20the\x20terminal\x20sweep,\x20and\x20the\x20255\x20history-count\x20pin\x20makes\x20a\x20same-session\x20replay\x20abort\x2016.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_allocator_node_gate_refund_renewal','scene_id':'service_order_allocators_guard','name':'Renewal-safe\x20node-set\x20refund\x20rail\x20(five-node\x20set\x20+\x20255\x20period\x20key\x20IN\x20root;\x20NEVER\x20254)','description':'Refund\x20allocator\x20guard\x20over\x20a\x20refund\x20NODE\x20SET\x20of\x20up\x20to\x20FIVE\x20nodes\x20{refund_node,\x20alt,\x20alt2,\x20alt3,\x20alt4},\x20'+'purpose-built\x20for\x20RE-ENTERABLE\x20renewal\x20machines\x20(creator/delivery\x20memberships:\x20a\x20refund\x20node\x20is\x20'+'legitimately\x20revisited\x20across\x20periods\x20—\x20cancel\x20in\x20period\x201,\x20again\x20in\x20period\x203).\x20THREE\x20properties\x20the\x20'+'single-cycle\x20refund\x20twin\x20deliberately\x20lacks:\x20(1)\x20the\x20identifier-255\x20once-per-period\x20key\x20pinned\x20to\x20the\x20monotonic\x20'+'progress.history\x20count\x20ships\x20IN\x20the\x20root\x20(\x27period-<N>\x27\x20—\x20each\x20period\x27s\x20entries\x20grow\x20the\x20count,\x20so\x20'+'every\x20period\x27s\x20refund\x20gets\x20a\x20fresh\x20chain\x20OnceKey;\x20NEVER\x20the\x20constant\x20254,\x20OFN\x20#P-04);\x20(2)\x20the\x20caller-'+'authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20ships\x20buyer\x20OR\x20merchant-or-keeper\x20dynamic\x20permission\x20—\x20the\x20'+'order-anchored\x20recipient\x20(GuardIdentifier(0))\x20binds\x20WHERE\x20funds\x20land,\x20never\x20WHO\x20may\x20fire,\x20and\x20a\x20lapsed\x20'+'member\x20(gone\x20at\x20expired)\x20needs\x20a\x20keeper\x20to\x20move\x20the\x20refund\x20onto\x20the\x20Order\x20where\x20owner_receive\x20reaches\x20it;\x20'+'(3)\x20the\x20FIFTH\x20node\x20slot\x20—\x20renewal\x20machines\x20carry\x20wider\x20refundable\x20sets\x20than\x20single-cycle\x20ones.\x20'+'TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20NO\x20claimed_by\x20leg\x20—\x20the\x20refund\x20track\x20reads\x20ORDER-LEVEL\x20NODE\x20STATE\x20'+'only;\x20an\x20arbitration\x20award\x20is\x20a\x20separate\x20commercial\x20indemnity\x20ruled\x20on\x20the\x20order\x27s\x20current\x20state\x20and\x20fund\x20'+'destinations,\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate.','recommended_patterns':['P02','P06','P10','P16'],'parameters':[{'name':'service_name','type':'string','description':'Service\x20object\x20name\x20(circular\x20ref\x20via\x20P16\x20—\x20resolved\x20after\x20Service\x20publish)','required':!![],'constraint':'Must\x20be\x20a\x20name,\x20not\x20an\x20address\x20(the\x20Service\x20is\x20not\x20yet\x20published\x20when\x20the\x20Guard\x20is\x20created)'},{'name':'refund_node','type':'string','description':'First\x20refund-eligible\x20node\x20(e.g.\x20\x27subscribed\x27)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'refund_node_alt','type':'string','description':'Second\x20refund-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${refund_node}','constraint':'EVERY\x20node\x20that\x20can\x20still\x20host\x20escrow\x20AND\x20every\x20terminal\x20without\x20an\x20outgoing\x20edge\x20—\x20omitting\x20one\x20deadlocks\x20the\x20escrow\x20(OFN\x20#P-02)'},{'name':'refund_node_alt2','type':'string','description':'Third\x20refund-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${refund_node}'},{'name':'refund_node_alt3','type':'string','description':'Fourth\x20refund-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${refund_node}'},{'name':'refund_node_alt4','type':'string','description':'Fifth\x20refund-eligible\x20node.\x20Defaults\x20to\x20the\x20primary\x20(duplicate\x20tautology\x20leg)\x20when\x20unneeded','required':![],'default':'${refund_node}','constraint':'Six-plus\x20refundable\x20nodes:\x20add\x20per-node\x20String\x20table\x20slots\x20(identifier\x209,\x2010,\x20...\x20—\x20slots\x200-8/255\x20are\x20taken)\x20and\x20extend\x20the\x20node-set\x20logic_or\x20by\x20COPY\x20of\x20the\x20shipped\x20five-child\x20form'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'order_id\x20(Order\x20object\x20submitted\x20at\x20runtime)'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${refund_node}','name':'First\x20refund-eligible\x20node\x20name\x20(case-sensitive)'},{'identifier':0x2,'b_submission':![],'value_type':'Address','value':'${service_name}','name':'Service\x20object\x20(feeds\x20the\x20caller\x20leg\x27s\x20service.permission\x20read;\x20circular\x20ref\x20via\x20name)'},{'identifier':0x4,'b_submission':![],'value_type':'String','value':'${refund_node_alt}','name':'Second\x20refund-eligible\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x5,'b_submission':![],'value_type':'String','value':'${refund_node_alt2}','name':'Third\x20refund-eligible\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x6,'b_submission':!![],'value_type':'Address','object_type':'Permission','name':'Permission\x20object\x20(submitted\x20by\x20the\x20firing\x20caller\x20—\x20must\x20equal\x20service.permission;\x20authorizes\x20the\x20merchant-or-keeper\x20side\x20of\x20the\x20caller-authorization\x20leg)'},{'identifier':0x7,'b_submission':![],'value_type':'String','value':'${refund_node_alt3}','name':'Fourth\x20refund-eligible\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0x8,'b_submission':![],'value_type':'String','value':'${refund_node_alt4}','name':'Fifth\x20refund-eligible\x20node\x20(duplicates\x20the\x20primary\x20when\x20unused)'},{'identifier':0xff,'b_submission':!![],'value_type':'U64','name':'ONCE\x20byte-key\x20slot\x20(protocol\x20255,\x20\x27period-<N>\x27):\x20the\x20caller\x20submits\x20the\x20current\x20progress.history\x20count;\x20the\x20guard\x20leg\x20pins\x20it,\x20so\x20each\x20period\x27s\x20refund\x20gets\x20a\x20fresh\x20OnceKey'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x4}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x5}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x7}]},{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x8}]}]},{'type':'logic_equal','nodes':[{'type':'identifier','identifier':0xff},{'type':'query','query':'progress.history\x20count','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]}]},{'type':'logic_or','nodes':[{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'order.owner','object':{'identifier':0x0},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'order.agent\x20has','object':{'identifier':0x0},'parameters':[{'type':'context','context':'Signer'}]}]},{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'service.permission','object':{'identifier':0x2},'parameters':[]},{'type':'identifier','identifier':0x6}]},{'type':'logic_or','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'permission.owner','object':{'identifier':0x6},'parameters':[]},{'type':'context','context':'Signer'}]},{'type':'query','query':'permission.admin\x20has','object':{'identifier':0x6},'parameters':[{'type':'context','context':'Signer'}]}]}]}]}]},'applicable_industries':['subscription','education','ecommerce','rental'],'relevant_risks':['R-C3-05','R-X1-05','R-X1-08'],'creation_notes':['THREE\x20logic\x20legs\x20in\x20logic_and:\x20(1)\x20the\x20refund\x20NODE\x20SET\x20—\x20one\x20top-level\x20five-child\x20logic_or\x20(with\x20the\x20alt\x20params\x20at\x20their\x20defaults\x20the\x20extra\x20legs\x20duplicate\x20the\x20primary\x20—\x20a\x20legal\x20tautology,\x20never\x20a\x20dead\x20literal),\x20(2)\x20the\x20per-period\x20once\x20leg\x20—\x20identifier\x20255\x20pinned\x20to\x20progress.history\x20count,\x20IN\x20the\x20root,\x20(3)\x20the\x20caller-authorization\x20leg\x20(gf30\x20A2\x20/\x20rex5\x20T-27)\x20—\x20buyer\x20OR\x20merchant-or-keeper\x20dynamic\x20permission.\x20NO\x20claimed_by\x20leg\x20(decision\x2011\x20two-rail\x20independence:\x20the\x20refund\x20track\x20never\x20reads\x20order.claimed_by).\x20The\x20guard\x20table\x20MUST\x20declare\x20identifier\x20255\x20(b_submission:\x20true)\x20—\x20the\x20chain\x20drops\x20undeclared\x20slots\x20when\x20it\x20assembles\x20the\x20passport\x20from\x20the\x20guard\x20table.','RAIL\x20POLARITY\x20SUPERSEDED\x20(decision\x2011,\x202026-10-31;\x20formerly\x20the\x20RAIL-03\x20cure):\x20the\x20removed\x20claimed_by\x20==\x20false\x20leg\x20once\x20made\x20this\x20rail\x20provably\x20disjoint\x20from\x20a\x20sibling\x20awarded_recover\x20rail\x20(some\x20==\x20true)\x20under\x20the\x20compile-level\x20RAIL_POLARITY_COLLISION\x20gate.\x20Decision\x2011\x20removes\x20BOTH\x20polarities\x20protocol-wide\x20—\x20the\x20escrow/refund\x20track\x20and\x20the\x20arbitration-indemnity\x20track\x20are\x20INDEPENDENT\x20commercial\x20tracks;\x20a\x20refund-plus-indemnity\x20overlap\x20is\x20a\x20legitimate\x20disclosed\x20outcome\x20(MCP\x20confirmation\x20gate),\x20and\x20the\x20arbitrator\x20rules\x20on\x20the\x20order\x27s\x20current\x20state\x20and\x20fund\x20destinations.\x20Machines\x20that\x20ALSO\x20ship\x20the\x20awarded_recover\x20rail\x20partition\x20the\x20TERMINALS\x20between\x20them\x20instead\x20(builder\x27s\x20coverage\x20duty,\x20OFN\x20#P-02).','255\x20IN\x20THE\x20ROOT\x20(4R-04,\x20ptrn3\x20F-03/TF-07/F-16):\x20a\x20renewal\x20machine\x20legitimately\x20RE-ENTERS\x20refund\x20nodes\x20across\x20periods,\x20so\x20once-semantics\x20MUST\x20be\x20EPOCH-keyed\x20—\x20logic_equal[id255,\x20progress.history\x20count],\x20each\x20period\x27s\x20entries\x20growing\x20the\x20count.\x20NEVER\x20arm\x20254\x20on\x20a\x20refund\x20rail:\x20254\x20keys\x20on\x20payment_info.for_object,\x20which\x20the\x20recurring\x20payment\x20intake\x20never\x20rewrites\x20—\x20the\x20OnceKey\x20repeats\x20every\x20period\x20and\x20refund\x20period\x202+\x20deadlocks\x20the\x20escrow\x20(OFN\x20#P-04).\x20OBSERVABILITY:\x20on\x20a\x20full-drain\x20retry\x20the\x20EMPTIED-POOL\x20abort\x20(14)\x20fires\x20BEFORE\x20once\x20bookkeeping\x20—\x2014\x20on\x20a\x20refund\x20replay\x20IS\x20the\x20254-replay\x20signature;\x2016\x20only\x20surfaces\x20with\x20a\x20residual\x20balance.','WHY\x20NOT\x20tpl_allocator_node_gate_refund:\x20that\x20twin\x20ships\x20FOUR\x20node\x20slots\x20and\x20leaves\x20the\x20255\x20leg\x20to\x20its\x20renewal\x20note\x20—\x20right\x20for\x20single-cycle\x20machines,\x20where\x20a\x20shipped\x20255\x20leg\x20would\x20change\x20the\x20trigger\x20interface\x20(a\x20new\x20mandatory\x20U64\x20submission)\x20for\x20every\x20existing\x20site.\x20This\x20twin\x20is\x20the\x20renewal-class\x20form:\x20the\x20fifth\x20node\x20slot\x20AND\x20the\x20pinned\x20255\x20leg\x20are\x20structural.','KEEPER-FIREABLE\x20BY\x20DESIGN\x20(K-4,\x20user\x20ruling\x202026-10-30\x20(2)):\x20the\x20merchant-or-keeper\x20dynamic-permission\x20leg\x20exists\x20for\x20the\x20lapsed\x20member\x20—\x20at\x20expired\x20the\x20member\x20is\x20gone,\x20and\x20without\x20a\x20keeper\x20fire\x20the\x20refund\x20never\x20leaves\x20the\x20pool.\x20The\x20recipient\x20is\x20order-anchored\x20(GuardIdentifier(0)):\x20funds\x20land\x20ON\x20the\x20Order\x20object\x20(extracted\x20by\x20a\x20separate\x20owner_receive\x20step),\x20so\x20a\x20keeper\x20can\x20only\x20pay\x20the\x20member,\x20never\x20themselves.\x20TWO-STEP\x20REFUND\x20PAYOUT\x20must\x20be\x20surfaced\x20in\x20the\x20storefront\x20UX.','NO\x20order.service\x20host-binding\x20leg\x20(bsw4\x20F-06):\x20protocol\x20v148\x27s\x20chain-side\x20task-binding\x20check\x20scopes\x20every\x20submission\x20to\x20the\x20originating\x20Service\x20—\x20the\x20purposes\x27\x20\x27order.service\x20binding\x27\x20prose\x20is\x20superseded.','MULTI-NODE\x20SHAPE\x20(azx7-mn-261014\x20CR-azx7-01):\x20the\x20node\x20predicate\x20is\x20ONE\x20top-level\x20n-ary\x20logic_or\x20—\x20NEVER\x20AND-prepend\x20a\x20single-node\x20gate\x20beside\x20extra\x20node\x20literals\x20(the\x20pinned\x20node\x20contradicts\x20its\x20AND-siblings\x20and\x20they\x20become\x20DEAD\x20literals,\x20escrow\x20stranded\x20twice\x20on\x20mainnet).\x20Cover\x20EVERY\x20node\x20that\x20can\x20still\x20host\x20escrow\x20AND\x20every\x20terminal\x20without\x20an\x20outgoing\x20edge\x20—\x20omitting\x20one\x20deadlocks\x20the\x20escrow\x20(OFN\x20#P-02).','ALLOCATOR-ONLY\x20MOUNT\x20(bkng\x20F22):\x20allocator\x20guards\x20evaluate\x20AT\x20ALLOC\x20TIME\x20—\x20NEVER\x20bind\x20this\x20guard\x20to\x20a\x20forward\x20edge\x20(a\x20forward\x20evaluates\x20BEFORE\x20the\x20advance;\x20the\x20pin\x20would\x20weld\x20the\x20edge\x20shut).'],'example_use_case':'Creator/delivery\x20membership:\x20the\x20refund\x20rail\x20admits\x20{subscribed,\x20charging,\x20delivering/delivered-era\x20nodes,\x20closed_cancel,\x20expired},\x20fires\x20Rate\x2010000\x20to\x20the\x20order\x20anchor,\x20and\x20gives\x20every\x20renewal\x20period\x20a\x20fresh\x20255\x20OnceKey\x20so\x20period-3\x20cancel\x20replays\x20period-1\x27s\x20refund\x20never.\x20TWO-RAIL\x20INDEPENDENCE\x20(decision\x2011):\x20a\x20sibling\x20awarded_recover\x20rail\x20partitions\x20the\x20TERMINALS,\x20not\x20a\x20claimed_by\x20polarity.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_window_upper_deadline_days','scene_id':'machine_forward_guard','name':'Node-entry\x20closing\x20window\x20in\x20days,\x20no\x20signer\x20leg\x20(keeper\x20deadline)','description':'Closing\x20window\x20measured\x20in\x20DAYS\x20from\x20a\x20node\x27s\x20entry,\x20with\x20NO\x20identity\x20leg:\x20Clock\x20<=\x20progress.history.time'+'(nextNode\x20=\x20expected_node,\x20find=first)\x20+\x20days\x20x\x2086400000,\x20plus\x20the\x20node\x20gate.\x20The\x20KEEPER\x20deadline:\x20a\x20'+'permission-index\x20forward\x20may\x20act\x20only\x20INSIDE\x20N\x20days\x20of\x20the\x20anchor\x20entry\x20—\x20the\x20host\x27s\x20claim-filing\x20'+'deadline,\x20the\x20verifier\x27s\x20pass\x20window.\x20Mount\x20discipline:\x20permission-index\x20(merchant/keeper\x20slot)\x20rails\x20'+'ONLY.\x20The\x20closing-window\x20twins\x20for\x20buyer\x20forwards\x20carry\x20the\x20order-holder\x20identity\x20set\x20because\x20a\x20'+'forward\x20entry\x20passes\x20an\x20empty\x20namedOperator\x20through\x20(etsy-aurelia\x20F-01);\x20on\x20a\x20permission-index\x20rail\x20'+'that\x20identity\x20leg\x20is\x20unsatisfiable,\x20so\x20THIS\x20twin\x20is\x20the\x20one\x20that\x20ships\x20—\x20and\x20conversely,\x20a\x20BUYER\x20edge\x20'+'with\x20only\x20this\x20guard\x20is\x20callable\x20by\x20ANY\x20signer,\x20so\x20that\x20caller\x20wants\x20'+'tpl_time_window_upper_progress_days.\x20Instantiable\x20form\x20of\x20pattern.time_window_upper_bound\x20on\x20a\x20'+'non-order_payer\x20forward.','recommended_patterns':['P06'],'parameters':[{'name':'expected_node','type':'string','description':'Node\x20whose\x20ENTRY\x20opens\x20the\x20window\x20(the\x20recorded\x20nextNode\x20of\x20the\x201280\x20history\x20row)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'},{'name':'claim_window_days','type':'number','description':'Window\x20length\x20in\x20days\x20from\x20the\x20node\x20entry','required':!![],'constraint':'Plain\x20number\x20of\x20days\x20—\x20the\x20template\x20converts\x20to\x20ms\x20(x\x2086400000)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'Order\x20object\x20address'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Anchor\x20node\x20(window\x20opens\x20at\x20its\x20entry)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${claim_window_days}','name':'Window\x20length\x20in\x20days'},{'identifier':0x4,'b_submission':![],'value_type':'U64','value':0x5265c00,'name':'Days-to-milliseconds\x20constant'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'first'},{'type':'calc_number_multiply','nodes':[{'type':'identifier','identifier':0x3},{'type':'identifier','identifier':0x4}]}]}]}]},'applicable_industries':['travel','rental','ecommerce','education'],'relevant_risks':['R-C3-05'],'creation_notes':['DIRECTION\x20(etm-mn-261013\x20A-06):\x20lesser_or_equal[Clock,\x20entry\x20+\x20N\x20days]\x20CLOSES\x20the\x20window\x20—\x20the\x20keeper\x20action\x20is\x20admitted\x20inside,\x20refused\x20after.\x20The\x20opening-gate\x20twin\x20(greater_or_equal)\x20inverts\x20the\x20policy:\x20the\x20window\x20is\x20shut\x20while\x20open\x20and\x20stays\x20open\x20after\x20it\x20closed.','NO\x20SIGNER\x20LEG\x20—\x20PERMISSION\x20RAILS\x20ONLY\x20(mirror\x20of\x20the\x20opening\x20twins\x27\x20keeper\x20discipline):\x20the\x20permission\x20layer\x20names\x20the\x20operator\x20on\x20a\x20permission-index\x20slot,\x20so\x20the\x20edge\x20cannot\x20pass\x20an\x20empty\x20namedOperator\x20and\x20no\x20identity\x20leg\x20is\x20needed;\x20adding\x20the\x20order-holder\x20set\x20here\x20would\x20intersect\x20a\x20keeper\x20slot\x20with\x20the\x20buyer\x27s\x20signer\x20set\x20and\x20the\x20edge\x20could\x20never\x20advance.\x20NEVER\x20mount\x20on\x20an\x20order_payer\x20forward:\x20the\x20buyer\x20rail\x20would\x20ship\x20with\x20no\x20identity\x20leg\x20(callable\x20by\x20any\x20signer)\x20—\x20that\x20caller\x20wants\x20tpl_time_window_upper_progress_days.','EXPIRY\x20SEMANTICS\x20(FUND-EXIT-01):\x20an\x20expired\x20keeper\x20deadline\x20only\x20fails\x20the\x20forward\x20it\x20gates\x20—\x20the\x20post-window\x20fund\x20path\x20must\x20exist\x20(a\x20no-claim\x20release\x20rail,\x20a\x20self-complete\x20opener,\x20or\x20a\x20residual\x20sweep),\x20so\x20a\x20keeper\x20who\x20slept\x20past\x20the\x20deadline\x20strands\x20nothing.','ENTRY-TIME\x20ANCHOR\x20(find=FIRST\x20since\x20tbs7\x20F-03):\x20the\x20window\x20opens\x20at\x20the\x20anchor\x20node\x27s\x20FIRST\x20recorded\x20entry\x20and\x20can\x20never\x20be\x20re-armed\x20—\x20a\x20party\x20that\x20re-enters\x20the\x20anchor\x20after\x20expiry\x20stays\x20blocked\x20by\x20this\x20same\x20leg.','EDGE-PREV\x20DISCIPLINE\x20(bkng\x20F22):\x20bind\x20only\x20to\x20a\x20forward\x20whose\x20PREV\x20is\x20the\x20anchor\x20node\x20—\x20the\x20order\x20sits\x20at\x20PREV\x20while\x20a\x20forward\x20guard\x20evaluates,\x20so\x20the\x20pin\x20must\x20equal\x20edge.prev\x20(a\x20wrong\x20pin\x20is\x20the\x20NODE-MATCH-01\x20brick).'],'example_use_case':'Short-stay\x20rental:\x20the\x20host\x20may\x20file\x20a\x20damage\x20claim\x20only\x20within\x2014\x20days\x20of\x20the\x20claim\x20window\x20opening\x20'+'(claim_window\x20->\x20claim_open,\x20permission\x20slot\x20of\x20the\x20filing\x20host);\x20after\x20expiry\x20the\x20escrow\x20follows\x20'+'the\x20no-claim\x20release\x20rail.\x20Same\x20shape:\x20the\x20verifier\x20may\x20pass\x20an\x20inspection\x20only\x20within\x2024h\x20of\x20key\x20return.','verifier_constraint_level':'level3_scene_combined'},{'id':'tpl_time_window_upper_deadline','scene_id':'machine_forward_guard','name':'Time-window\x20upper\x20bound,\x20no\x20signer\x20leg\x20(keeper\x20deadline,\x20milliseconds)','description':'Closing\x20window\x20with\x20NO\x20identity\x20leg:\x20the\x20chain\x20Clock\x20must\x20be\x20<=\x20the\x20source\x20node\x27s\x20entry\x20time\x20(query\x201280\x20'+'progress.history.time,\x20find=first)\x20+\x20duration_ms,\x20ANDed\x20with\x20the\x20node\x20gate.\x20The\x20millisecond\x20form\x20of\x20the\x20'+'keeper\x20deadline\x20(tpl_time_window_upper_deadline_days\x20is\x20the\x20day\x20form):\x20a\x20permission-index\x20forward\x20may\x20'+'act\x20only\x20INSIDE\x20the\x20window\x20—\x20the\x20verifier\x27s\x20pass\x20window,\x20a\x20same-day\x20confirmation\x20deadline.\x20Mount\x20'+'discipline:\x20permission-index\x20(merchant/keeper\x20slot)\x20rails\x20ONLY\x20—\x20an\x20order-holder\x20identity\x20leg\x20is\x20'+'unsatisfiable\x20here\x20(the\x20signer\x20sets\x20are\x20disjoint),\x20and\x20a\x20BUYER\x20edge\x20with\x20only\x20this\x20guard\x20is\x20callable\x20'+'by\x20ANY\x20signer\x20(that\x20caller\x20wants\x20tpl_time_window_upper,\x20which\x20ships\x20the\x20identity\x20set).\x20Executable\x20'+'form\x20of\x20pattern.time_window_upper_bound\x20on\x20a\x20non-order_payer\x20forward;\x20the\x20opening-gate\x20twin\x20is\x20'+'tpl_time_lock_progress.','recommended_patterns':['P06'],'parameters':[{'name':'duration_ms','type':'number','description':'Window\x20length\x20in\x20milliseconds\x20(measured\x20from\x20the\x20source\x20node\x27s\x20entry)','required':!![],'constraint':'Plain\x20integer\x20milliseconds;\x20test\x20with\x20small\x20values\x20first\x20—\x20chain\x20Clock\x20is\x20block-driven,\x20not\x20wall\x20time'},{'name':'expected_node','type':'string','description':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(the\x20node\x20whose\x20entry\x20opens\x20the\x20window)','required':!![],'constraint':'Must\x20exactly\x20match\x20the\x20Machine\x20node\x20name\x20(case-sensitive)'}],'example_table':[{'identifier':0x0,'b_submission':!![],'value_type':'Address','name':'Order\x20object\x20address','object_type':'Order'},{'identifier':0x1,'b_submission':![],'value_type':'String','value':'${expected_node}','name':'Source\x20node\x20of\x20the\x20gated\x20edge\x20(window\x20anchor)'},{'identifier':0x3,'b_submission':![],'value_type':'U64','value':'${duration_ms}','name':'Window\x20length\x20in\x20milliseconds'},{'identifier':0xfe,'b_submission':!![],'value_type':'Address','object_type':'Order','name':'task_binding\x20order\x20anchor\x20(protocol\x20slot\x20254;\x20written\x20by\x20order\x20creation)'}],'example_root':{'type':'logic_and','nodes':[{'type':'logic_equal','nodes':[{'type':'query','query':'progress.current','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'parameters':[]},{'type':'identifier','identifier':0x1}]},{'type':'logic_as_u256_lesser_or_equal','nodes':[{'type':'context','context':'Clock'},{'type':'calc_number_add','nodes':[{'type':'query_progress_history_time','object':{'identifier':0x0,'convert_witness':'OrderProgress'},'where':{'nextNode':'${expected_node}'},'find':'first'},{'type':'identifier','identifier':0x3}]}]}]},'applicable_industries':['rental','ecommerce','education','travel','subscription','freelance'],'relevant_risks':['R-C3-05'],'creation_notes':['DIRECTION\x20IS\x20THE\x20WHOLE\x20POINT\x20(etm-mn-261013\x20A-06):\x20lesser_or_equal[Clock,\x20entry+N]\x20closes\x20the\x20window;\x20the\x20opening-gate\x20twin\x27s\x20greater_or_equal\x20would\x20keep\x20it\x20open\x20forever.\x20Opening\x20gate\x20(wait\x20N\x20before\x20acting)\x20=\x20tpl_time_lock_progress;\x20closing\x20window\x20(act\x20before\x20N\x20elapses)\x20=\x20THIS\x20template.','NO\x20SIGNER\x20LEG\x20—\x20PERMISSION\x20RAILS\x20ONLY:\x20the\x20permission\x20layer\x20names\x20the\x20operator\x20on\x20a\x20permission-index\x20slot,\x20so\x20no\x20identity\x20leg\x20is\x20needed;\x20adding\x20the\x20order-holder\x20set\x20would\x20weld\x20a\x20keeper\x20slot\x20shut\x20(disjoint\x20signer\x20sets).\x20NEVER\x20mount\x20on\x20an\x20order_payer\x20forward\x20—\x20a\x20buyer\x20window\x20without\x20an\x20identity\x20leg\x20is\x20callable\x20by\x20ANY\x20signer\x20(etsy-aurelia\x20F-01);\x20that\x20caller\x20wants\x20tpl_time_window_upper.','EXPIRY\x20SEMANTICS\x20(FUND-EXIT-01):\x20an\x20expired\x20keeper\x20deadline\x20only\x20fails\x20the\x20forward\x20it\x20gates\x20—\x20the\x20post-window\x20fund\x20path\x20must\x20exist\x20(a\x20self-complete\x20opener\x20or\x20a\x20release\x20rail),\x20so\x20a\x20keeper\x20who\x20slept\x20past\x20the\x20deadline\x20strands\x20nothing.','ENTRY-TIME\x20ANCHOR\x20(find=FIRST\x20since\x20tbs7\x20F-03):\x20the\x20window\x20opens\x20at\x20the\x20FIRST\x20recorded\x20entry\x20and\x20can\x20never\x20be\x20re-armed;\x20a\x20re-entered\x20anchor\x20stays\x20blocked\x20by\x20this\x20same\x20leg.','EDGE-PREV\x20DISCIPLINE\x20(bkng\x20F22):\x20bind\x20only\x20to\x20a\x20forward\x20whose\x20PREV\x20is\x20the\x20anchor\x20node\x20—\x20a\x20wrong\x20pin\x20is\x20the\x20NODE-MATCH-01\x20brick.'],'example_use_case':'Long-stay\x20rental:\x20the\x20verifier\x20may\x20pass\x20the\x20move-out\x20inspection\x20only\x20within\x2024h\x20of\x20key\x20return\x20'+'(inspected\x20->\x20completed,\x20the\x20verifier\x27s\x20permission\x20slot);\x20after\x20expiry\x20the\x20tenant\x27s\x20self-complete\x20'+'opener\x20is\x20the\x20only\x20advance.','verifier_constraint_level':'level3_scene_combined'}];export function getTemplatesByScene(a){return GUARD_TEMPLATES['filter'](b=>b['scene_id']===a);}export function getTemplateById(a){return GUARD_TEMPLATES['find'](b=>b['id']===a);}export function getTemplatesByIndustry(a){return GUARD_TEMPLATES['filter'](b=>b['applicable_industries']['includes'](a));}export function getTemplatesByPattern(a){return GUARD_TEMPLATES['filter'](b=>b['recommended_patterns']['includes'](a));}export function listGuardTemplates(){return GUARD_TEMPLATES;}export function suggestTemplateForScene(a){return GUARD_TEMPLATES['find'](b=>b['scene_id']===a);}export function getTemplateParameters(a){const b=getTemplateById(a);return b?.['parameters']??[];}export function validateTemplateParams(a,b){const c=getTemplateById(a);if(!c)return{'valid':![],'missing':['template_not_found']};const d=c['parameters']['filter'](e=>e['required']&&e['default']===undefined&&!(e['name']in b))['map'](e=>e['name']);return{'valid':d['length']===0x0,'missing':d};}function deepSubstitute(a,b){if(typeof a==='string'){const c=a['match'](/^\$\{(\w+)\}$/);if(c&&c[0x1]in b)return b[c[0x1]];return a['replace'](/\$\{(\w+)\}/g,(d,e)=>e in b?String(b[e]):'${'+e+'}');}if(Array['isArray'](a))return a['map'](d=>deepSubstitute(d,b));if(a&&typeof a==='object'){const d={};for(const [e,f]of Object['entries'](a)){d[e]=deepSubstitute(f,b);}return d;}return a;}export function fillGuardTemplate(a,b){const c=getTemplateById(a);if(!c)return{'ok':![],'error':'Template\x20not\x20found:\x20'+a};const {valid:d,missing:e}=validateTemplateParams(a,b);if(!d)return{'ok':![],'error':'Missing\x20required\x20parameters:\x20'+e['join'](',\x20')+'\x20—\x20supply\x20them\x20at\x20generation\x20via\x20the\x20guard\x20spec\x27s\x20params\x20or\x20guard_resolutions\x20{kind:\x27template\x27,\x20params:{...}}','missing':e};const f={...b};for(const o of c['parameters']){!(o['name']in f)&&o['default']!==undefined&&(f[o['name']]=o['default']);}for(const q of Object['keys'](f)){const r=f[q];if(typeof r==='string'){const s=r['match'](/^\$\{(\w+)\}$/);if(s&&s[0x1]!==q&&s[0x1]in f)f[q]=f[s[0x1]];}}for(const u of c['parameters']){if(u['type']!=='vec_address')continue;const w=f[u['name']];if(typeof w!=='string')continue;const x=w['trim']();let y,A=![];if(x['startsWith']('[')&&x['endsWith'](']'))try{y=JSON['parse'](x),A=Array['isArray'](y)&&y['every'](B=>typeof B==='string');}catch{A=![];}if(!A)return{'ok':![],'error':'Parameter\x20\x27'+u['name']+'\x27\x20is\x20a\x20vec_address\x20list\x20—\x20pass\x20a\x20JSON\x20array\x20of\x20address\x20strings\x20(e.g.\x20[\x220x...\x22],\x20[]\x20for\x20an\x20empty\x20list),\x20not\x20\x27'+(w['length']>0x30?w['slice'](0x0,0x30)+'…':w)+'\x27'};f[u['name']]=y;}if(c['parameters']['some'](B=>B['name']==='review_window_days')){const B=f['review_window_days'],C=B!==undefined&&String(B)!==''&&String(B)!=='0',D=f['delivered_node'];if(C&&(D===undefined||String(D)===''))return{'ok':![],'error':'review_window_days\x20requires\x20delivered_node:\x20the\x20closing\x20window\x20anchors\x20on\x20the\x20delivery\x20node\x27s\x20FIRST\x20entry\x20(query\x201280\x20find:first).\x20Pass\x20delivered_node,\x20or\x20clear\x20review_window_days\x20to\x20ship\x20the\x20windowless\x20gate'};}const g=new Set();if(c['parameters']['some'](E=>E['name']==='rating_repository')){const E=f['rating_repository'],F=f['rating_floor'];(!E||E===''||String(F)==='0')&&(g['add']('rating_repository'),g['add']('rating_policy_name'),g['add']('rating_floor'));}if(c['parameters']['some'](G=>G['name']==='not_before_hours')){const G=f['not_before_hours'];(G===undefined||String(G)===''||String(G)==='0')&&(g['add']('not_before_hours'),g['add']('not_before_ms'));}if(c['parameters']['some'](H=>H['name']==='upper_hours')){const H=f['upper_hours'];(H===undefined||String(H)===''||String(H)==='0')&&g['add']('upper_hours');}if(c['parameters']['some'](I=>I['name']==='closes_after_days')){const I=f['closes_after_days'];(I===undefined||String(I)===''||String(I)==='0')&&g['add']('closes_after_days');}if(c['parameters']['some'](J=>J['name']==='delivered_node')){const J=f['delivered_node'];(J===undefined||String(J)==='')&&g['add']('delivered_node');}if(c['parameters']['some'](K=>K['name']==='review_window_days')){const K=f['review_window_days'];(K===undefined||String(K)===''||String(K)==='0')&&g['add']('review_window_days');}let h=c['example_table'],i=c['example_root'];if(g['size']>0x0){const L=P=>typeof P==='string'&&[...g]['some'](Q=>P['includes']('${'+Q+'}'));h=c['example_table']['filter'](P=>!Object['values'](P)['some'](L));const M=new Set(h['map'](P=>P['identifier'])),N=P=>{if(L(P))return!![];if(Array['isArray'](P))return P['some'](N);if(P&&typeof P==='object'){const Q=P;if(Q['type']==='identifier'&&!M['has'](Q['identifier']))return!![];return Object['values'](Q)['some'](N);}return![];},O=c['example_root'];if(Array['isArray'](O['nodes']))i={...O,'nodes':O['nodes']['filter'](P=>!N(P))};else O['node']!==undefined&&N(O['node'])&&(i={});}const j=deepSubstitute(h,f),l=deepSubstitute(i,f),n=JSON['stringify']({'table':j,'root':l})['match'](/\$\{(\w+)\}/);if(n)return{'ok':![],'error':'Unresolved\x20placeholder\x20${'+n[0x1]+'}\x20—\x20not\x20declared\x20in\x20template\x20parameters'};return{'ok':!![],'table':j,'root':l};}import{z}from'zod';const GuardTemplateParamSchema=z['object']({'name':z['string']()['min'](0x1),'type':z['enum'](['address','string','number','boolean','vec_address']),'description':z['string']()['min'](0x1),'required':z['boolean'](),'default':z['string']()['optional'](),'constraint':z['string']()['optional']()})['strict'](),GuardTemplateSchema=z['object']({'id':z['string']()['regex'](/^tpl_[a-z0-9_]+$/,'guard\x20template\x20id\x20must\x20be\x20\x27tpl_*\x27'),'scene_id':z['string']()['min'](0x1),'name':z['string']()['min'](0x1),'description':z['string']()['min'](0x1),'recommended_patterns':z['array'](z['string']()['min'](0x1)),'parameters':z['array'](GuardTemplateParamSchema),'example_table':z['array'](z['record'](z['string'](),z['unknown']())),'example_root':z['record'](z['string'](),z['unknown']()),'applicable_industries':z['array'](z['string']()['min'](0x1)),'relevant_risks':z['array'](z['string']()['min'](0x1)),'creation_notes':z['array'](z['string']()['min'](0x1)),'example_use_case':z['string']()['min'](0x1),'verifier_constraint_level':z['enum'](['level1_strict','level2_identity_set','level3_scene_combined'])['optional']()})['strict']();function validateGuardTemplates(){for(const a of GUARD_TEMPLATES){const b=GuardTemplateSchema['safeParse'](a);if(!b['success']){const f=b['error']['issues']['map'](g=>'\x20\x20'+g['path']['join']('.')+':\x20'+g['message'])['join']('\x0a');throw new Error('[guard-templates]\x20\x27'+a['id']+'\x27\x20fails\x20schema\x20validation:\x0a'+f+'\x0a'+'Fix\x20the\x20entry\x20—\x20the\x20schema\x20is\x20the\x20single\x20source\x20of\x20truth\x20for\x20guard-template\x20validity.');}const c=new Set(a['parameters']['map'](g=>g['name'])),d=JSON['stringify']({'table':a['example_table'],'root':a['example_root']}),e=new Set([...d['matchAll'](/\$\{(\w+)\}/g)]['map'](g=>g[0x1]));for(const g of e){if(!c['has'](g))throw new Error('[guard-templates]\x20\x27'+a['id']+'\x27\x20references\x20${'+g+'}\x20in\x20example_table/example_root\x20'+('but\x20\x27'+g+'\x27\x20is\x20not\x20declared\x20in\x20parameters\x20—\x20fillGuardTemplate\x20would\x20leave\x20it\x20unresolved.'));}}}validateGuardTemplates();export const GUARD_TEMPLATES_VERSION='1.35.0';export const GUARD_TEMPLATES_COUNT=GUARD_TEMPLATES['length'];