@wowok/agent-mcp 3.4.3 → 3.4.4

package/dist/knowledge/guard-field-cognition.js

@@ -1 +1 @@
-export const GUARD_FIELD_COGNITION_VERSION='1.1.0';const NUMBER='number\x20(numeric\x20value\x20type)',U64='u64\x20exactly\x20(common::TYPE_U64)',ADDRESS='address\x20or\x20address-compatible\x20object\x20id';export const GUARD_FIELD_SITES=[{'object':'Treasury','field':'external_withdraw_guard[]\x20(AmountFromWithdrawGuard)','mode':'gate+source','extraction':[{'name':'identifier\x20(amount)','meaning':'Exact\x20withdraw\x20amount\x20moved\x20out\x20of\x20the\x20treasury\x20balance','allowedOrigins':['submission','fixed'],'typeConstraint':NUMBER,'configCheck':'configuring\x20the\x20external-withdraw\x20guard:\x20the\x20amount\x20slot\x20must\x20carry\x20a\x20declared\x20submission\x20value\x20type\x20and\x20it\x20must\x20be\x20numeric\x20(E_IDENTIFIER_NOT_NUMBER_TYPE)','runtimeFallback':'falls\x20back\x20to\x20the\x20fixed\x20table\x20value\x20when\x20no\x20submission\x20is\x20supplied;\x20if\x20neither\x20exists\x20the\x20tx\x20aborts\x20(E_SUBMISSION_ID_NOT_FOUND)','riskNotes':['submission\x20origin\x20=\x20passport\x20builder\x20chooses\x20the\x20amount;\x20only\x20the\x20balance\x20check\x20(E_WITHDRAW_BALANCE_INSUFFICIENT)\x20bounds\x20it','fixed\x20origin\x20=\x20same\x20amount\x20every\x20withdrawal;\x20safe\x20default\x20for\x20allowance-style\x20guards','query\x20origin\x20is\x20impossible\x20for\x20this\x20slot\x20—\x20a\x20query\x20can\x20only\x20gate,\x20never\x20supply\x20the\x20amount']},{'name':'store_from_id\x20(optional)','meaning':'Secondary\x20slot\x20decoded\x20as\x20address;\x20recorded\x20in\x20Treasury\x20history\x20Record\x20for\x20traceability','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'address-compatibility\x20check\x20on\x20the\x20recorded\x20slot\x20(E_STORE_FROM_ID_NOT_COMPATIBLE)','runtimeFallback':'None\x20->\x20Record.store_from_id\x20=\x20none','riskNotes':['Bookkeeping\x20only;\x20never\x20used\x20as\x20the\x20withdrawal\x20recipient']}],'gateBehavior':'the\x20passport\x20verification\x20against\x20this\x20guard\x20must\x20pass\x20AND\x20the\x20guard\x20address\x20must\x20be\x20registered\x20in\x20the\x20external-withdraw\x20guard\x20list\x20(E_EXTERNAL_WITHDRAW_GUARD_NOT_FOUND)','setterChecklist':['Decide\x20who\x20builds\x20passports\x20against\x20this\x20guard\x20—\x20that\x20party\x20controls\x20a\x20submission-origin\x20amount','Prefer\x20a\x20fixed\x20amount\x20for\x20allowance\x20guards;\x20reserve\x20submission\x20amounts\x20for\x20flows\x20where\x20the\x20passport\x20builder\x20is\x20trusted\x20or\x20the\x20amount\x20is\x20re-verified\x20inside\x20the\x20guard\x20expression\x20(e.g.\x20compare\x20against\x20order.amount\x20via\x20query\x201561)','The\x20RECIPIENT\x20is\x20tx-supplied,\x20not\x20from\x20the\x20guard\x20—\x20constrain\x20it\x20inside\x20the\x20guard\x20expression\x20(e.g.\x20compare\x20a\x20submitted\x20address\x20against\x20an\x20expected\x20one)\x20if\x20destination\x20matters','Check\x20the\x20guard\x27s\x20dependency-eligibility\x20status\x20only\x20matters\x20if\x20this\x20guard\x20will\x20rely\x20on\x20others\x20(relies\x20<=\x204,\x20added\x20first)'],'auditorChecklist':['For\x20each\x20registered\x20guard:\x20classify\x20amount\x20slot\x20as\x20fixed\x20or\x20submission\x20(read\x20b_submission\x20in\x20the\x20table)','If\x20submission:\x20who\x20can\x20hold/build\x20a\x20passport\x20with\x20this\x20guard?\x20Can\x20a\x20stranger\x20drain\x20the\x20treasury\x20up\x20to\x20its\x20balance?','Does\x20the\x20guard\x20expression\x20bind\x20the\x20submission\x20to\x20on-chain\x20state\x20(order,\x20repository\x20data)\x20or\x20is\x20it\x20free-form?','Is\x20the\x20withdrawal\x20recipient\x20constrained\x20anywhere?']},{'object':'Treasury','field':'external_deposit_guard[]\x20(AmountFromDepositGuard)','mode':'gate+source','extraction':[{'name':'identifier\x20(amount,\x20Option)','meaning':'When\x20Some:\x20exact\x20deposit\x20amount\x20split\x20from\x20the\x20coin\x20(remainder\x20returned\x20to\x20caller).\x20When\x20None:\x20whole\x20coin\x20deposited','allowedOrigins':['submission','fixed'],'typeConstraint':NUMBER,'configCheck':'same\x20as\x20withdraw:\x20value\x20type\x20must\x20be\x20numeric\x20when\x20Some','runtimeFallback':'None\x20->\x20entire\x20coin\x20deposited;\x20Some\x20->\x20coin::split\x20to\x20`value`,\x20remainder\x20transferred\x20back\x20to\x20sender','riskNotes':['A\x20submission-origin\x20amount\x20below\x20the\x20coin\x20total\x20silently\x20returns\x20the\x20difference\x20to\x20the\x20caller\x20—\x20intended\x20for\x20partial\x20deposits','Deposits\x20cannot\x20steal\x20funds;\x20the\x20risk\x20direction\x20is\x20mis-recorded\x20history\x20only']},{'name':'store_from_id\x20(optional)','meaning':'Address\x20slot\x20recorded\x20on\x20the\x20deposit\x20Record','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'address-compatibility\x20check','runtimeFallback':'None\x20->\x20none','riskNotes':['Traceability\x20only']}],'gateBehavior':'passport\x20verification\x20against\x20the\x20guard\x20must\x20pass\x20+\x20guard\x20must\x20be\x20registered\x20(E_EXTERNAL_DEPOSIT_GUARD_NOT_FOUND)','setterChecklist':['None\x20identifier\x20=\x20whole-coin\x20deposit;\x20Some\x20=\x20exact-amount\x20deposit\x20with\x20refund\x20of\x20the\x20remainder'],'auditorChecklist':['Confirm\x20the\x20amount\x20slot\x20origin\x20matches\x20the\x20intended\x20deposit\x20UX\x20(whole\x20vs\x20exact)']},{'object':'Reward','field':'guards[]\x20(RewardGuard)','mode':'gate+source','extraction':[{'name':'recipient\x20(Recipient::GuardIdentifier)','meaning':'Claim\x20payout\x20destination\x20address','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'recipient\x20must\x20be\x20a\x20valid\x20address\x20(E_RECIPIENT_IDENTIFIER_NOT_ADDRESS)','runtimeFallback':'Entity/Signer\x20variants\x20bypass\x20extraction\x20entirely','riskNotes':['submission\x20origin\x20=\x20passport\x20builder\x20redirects\x20the\x20payout\x20to\x20any\x20address\x20it\x20names']},{'name':'amount\x20(Amount::GuardU64Identifier)','meaning':'Claim\x20size\x20paid\x20from\x20the\x20Reward\x20balance','allowedOrigins':['submission','fixed'],'typeConstraint':U64,'configCheck':'submission\x20value\x20type\x20must\x20be\x20u64\x20(E_AMOUNT_NOT_U64)','runtimeFallback':'Fixed(u64)\x20variant\x20bypasses\x20extraction','riskNotes':['submission\x20origin\x20=\x20passport\x20builder\x20decides\x20the\x20claim\x20size;\x20only\x20balance\x20and\x20per-recipient\x20record\x20bound\x20it']},{'name':'store_from_id\x20(optional)','meaning':'Address\x20slot\x20recorded\x20in\x20the\x20per-recipient\x20claim\x20Record','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'address-compatibility\x20check\x20(E_STORE_FROM_ID_NOT_COMPATIBLE)','runtimeFallback':'None\x20->\x20none\x20(an\x20unstamped\x20record\x20matches\x20NO\x20store_from_id\x20predicate\x20—\x20pin\x20the\x20slot\x20for\x20any\x20per-order\x20replay\x20gate)','riskNotes':['Traceability\x20+\x20replay\x20gate:\x20without\x20a\x20pinned\x20slot\x20a\x20per-order\x20dedup\x20leg\x20cannot\x20bind\x20to\x20a\x20real\x20order\x20id\x20—\x20pin\x20store_from_id\x20for\x20per-order\x20replay\x20protection;\x20slot-less\x20guards\x20can\x20only\x20dedup\x20lifetime-once\x20via\x20record\x20count/exists\x20with\x20an\x20empty\x20where']}],'gateBehavior':'claim:\x20passport\x20verification\x20against\x20the\x20guard\x20must\x20pass\x20+\x20expiration_time\x20check\x20+\x20guard\x20registered\x20(E_GUARD_NOT_FOUND);\x20guard_not_added_expiration_time\x20freezes\x20the\x20guard\x20set\x20AND\x20blocks\x20balance\x20withdrawal\x20until\x20it\x20elapses','setterChecklist':['Recipient+amount\x20both\x20submission\x20=\x20the\x20passport\x20builder\x20fully\x20controls\x20who\x20gets\x20paid\x20how\x20much\x20—\x20acceptable\x20only\x20for\x20self-service\x20claim\x20flows\x20where\x20the\x20builder\x20IS\x20the\x20beneficiary','expiration_time\x20on\x20the\x20RewardGuard\x20bounds\x20the\x20window\x20(E_GUARD_EXPIRED)'],'auditorChecklist':['For\x20each\x20guard:\x20are\x20recipient/amount\x20fixed\x20or\x20submission?','If\x20submission:\x20does\x20the\x20guard\x20expression\x20bind\x20them\x20to\x20repository\x20data\x20(1167)\x20or\x20an\x20order\x20so\x20the\x20claim\x20is\x20justified?','Is\x20there\x20a\x20per-recipient\x20cap?\x20(Only\x20the\x20historical\x20record\x20total\x20accumulates;\x20there\x20is\x20no\x20per-claim\x20limit.)']},{'object':'Repository','field':'policies[].write_guard[]\x20(PolicyGuard)','mode':'gate+source','extraction':[{'name':'id_from_submission\x20(Option<u8>)','meaning':'Data-record\x20key\x20(address)\x20extracted\x20from\x20the\x20guard\x20instead\x20of\x20caller-supplied','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'address-compatibility\x20check\x20(E_INVALID_ID_IN_GUARD_TABLE)','runtimeFallback':'None\x20->\x20id\x20comes\x20from\x20the\x20caller\x20vector\x20or\x20is\x20auto-generated\x20(clock/signer)','riskNotes':['Policy-level\x20conflicts:\x20id_from\x20=\x20Clock/Signer\x20FORBIDS\x20id_from_submission\x20(E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN);\x20id_from\x20=\x20None\x20REQUIRES\x20a\x20non-empty\x20write_guard\x20(E_POLICY_WRITE_GUARD_REQUIRED)']},{'name':'data_from_submission\x20(Option<u8>)','meaning':'Data\x20payload\x20extracted\x20from\x20the\x20guard\x20instead\x20of\x20caller-supplied','allowedOrigins':['submission','fixed'],'typeConstraint':'any\x20repository-supported\x20value\x20type\x20(first\x20byte\x20=\x20value_type)','configCheck':'identifier\x20presence\x20check\x20(E_INVALID_DATA_IN_GUARD_TABLE)','runtimeFallback':'None\x20->\x20data\x20comes\x20from\x20the\x20caller\x20vector','riskNotes':['Entry-point\x20routing\x20differs:\x20the\x20guarded\x20auto-id\x20write\x20consumes\x20data_from_submission;\x20the\x20guarded\x20manual\x20write\x20REJECTS\x20both\x20extraction\x20slots\x20(E_GUARD_SPECIFIED_ID_FROM_SUBMISSION);\x20the\x20mixed\x20guarded\x20write\x20mixes\x20per-guard\x20extraction\x20with\x20caller\x20vectors','Setting\x20an\x20extraction\x20slot\x20on\x20a\x20guard\x20that\x20is\x20only\x20ever\x20used\x20via\x20the\x20guarded\x20manual\x20write\x20silently\x20means\x20\x27unused\x20config\x27\x20—\x20route\x20must\x20match']}],'gateBehavior':'write\x20path\x20must\x20find\x20the\x20guard\x20in\x20the\x20policy\x20(E_GUARD_SPECIFIED_NOT_IN_POLICY)\x20and\x20pass\x20the\x20passport\x20verification\x20or\x20the\x20permission-based\x20verification\x20(impack\x20membership)','setterChecklist':['Match\x20the\x20policy\x20id_from\x20with\x20the\x20guard\x20slots\x20(see\x20conflicts\x20above)','Pick\x20the\x20write\x20entry\x20point\x20first,\x20then\x20decide\x20which\x20extraction\x20slots\x20that\x20entry\x20point\x20actually\x20honors'],'auditorChecklist':['For\x20each\x20write_guard:\x20which\x20entry\x20points\x20can\x20reach\x20it\x20and\x20which\x20slots\x20do\x20those\x20entry\x20points\x20consume?','A\x20policy\x20with\x20write_guard\x20but\x20id_from=None\x20and\x20no\x20extraction\x20slots\x20still\x20gates\x20writes\x20—\x20verify\x20the\x20guard\x20expression\x20actually\x20restricts\x20who\x20can\x20write']},{'object':'Repository','field':'policies[].quote_guard\x20(Option<address>)','mode':'source','extraction':[{'name':'repository.data\x20(query\x201167\x20params:\x20key,\x20id)','meaning':'Read\x20authorization\x20for\x20private\x20repository\x20data\x20inside\x20guard\x20expressions','allowedOrigins':['query'],'typeConstraint':'(String\x20key,\x20Address\x20id)\x20pair','configCheck':'setting\x20the\x20policy\x20quote\x20guard:\x20the\x20guard\x20must\x20be\x20dependency-eligible\x20(relies\x20empty\x20+\x20immutable\x20+\x20rep\x20true,\x20E_NEED_DEPENDENT_GUARD)','runtimeFallback':'None\x20->\x20every\x20repository\x20data-row\x20read\x20aborts\x20for\x20a\x20key\x20protected\x20by\x20a\x20quote_guard\x20the\x20passport\x20does\x20not\x20carry\x20(IMPACK_GUARD_NOT_FOUND):\x20the\x201167\x20fetch\x20and\x20the\x201173/1174/1176\x20predicate\x20queries\x20check\x20the\x20queried\x20key;\x20the\x201177\x20keys-where\x20scan\x20refuses\x20outright\x20when\x20any\x20protected\x20key\x20is\x20uncovered','riskNotes':['The\x20reference\x20gate\x20spans\x20ALL\x20data-row\x20reads,\x20not\x20just\x20the\x20plain\x20fetch:\x20count/sum/find\x20predicates\x20and\x20the\x20keys-where\x20scan\x20hit\x20the\x20same\x20gate,\x20so\x20range/sum\x20probing\x20of\x20a\x20protected\x20value\x20is\x20refused\x20too','The\x20gate\x20runs\x20inside\x20the\x20native\x20verifier\x20against\x20the\x20impack-list\x20snapshot\x20taken\x20before\x20verify()','rep\x20flag\x20comes\x20from\x20the\x20native\x20parse\x20at\x20guard\x20creation\x20—\x20a\x20guard\x20that\x20fails\x20rep\x20cannot\x20serve\x20as\x20quote_guard']}],'gateBehavior':'No\x20direct\x20gate\x20—\x20this\x20guard\x20authorizes\x20DATA\x20READS\x20performed\x20by\x20other\x20guards','setterChecklist':['Only\x20a\x20fresh,\x20immutable,\x20reliance-free\x20guard\x20(meets\x20the\x20dependency-eligibility\x20shape)\x20qualifies','Register\x20it\x20on\x20the\x20same\x20Repository\x20whose\x20data\x20will\x20be\x20quoted'],'auditorChecklist':['Which\x20guards\x20rely\x20on\x20/\x20are\x20bundled\x20with\x20this\x20quote_guard\x20in\x20passports?\x20(impack\x20membership\x20decides)','Is\x20the\x20quoted\x20(key,id)\x20scoped\x20narrowly\x20enough,\x20or\x20does\x20one\x20quote_guard\x20open\x20the\x20whole\x20policy?']},{'object':'Arbitration','field':'voting_guard[]\x20(VotingGuard)','mode':'gate+source','extraction':[{'name':'vote_weight\x20(VoteValue::GuardIdentifier)','meaning':'Voter\x27s\x20weighted\x20voting\x20power','allowedOrigins':['submission','fixed'],'typeConstraint':NUMBER+',\x20value\x20<=\x20u32\x20max\x20(E_GUARD_IDENTIFIER_NUMBER_INVALID)','configCheck':'value\x20type\x20must\x20be\x20numeric\x20(E_GUARD_IDENTIFIER_NOT_NUMBER)','runtimeFallback':'FixedValue\x20variant\x20bypasses\x20extraction','riskNotes':['submission\x20origin\x20=\x20the\x20passport\x20builder\x20assigns\x20its\x20own\x20voting\x20weight\x20—\x20dangerous\x20unless\x20the\x20guard\x20expression\x20derives\x20the\x20weight\x20from\x20trusted\x20state\x20(e.g.\x20repository\x20holdings\x20via\x201167)']}],'gateBehavior':'voting\x20through\x20the\x20voting\x20guard:\x20passport\x20verification\x20must\x20pass\x20+\x20guard\x20registered\x20(E_VOTING_GUARD_NOT_FOUND)','setterChecklist':['Empty\x20voting_guard\x20=\x20open\x20voting\x20(everybody);\x20non-empty\x20=\x20only\x20listed\x20guards\x20may\x20vote','FixedValue\x20for\x20equal-weight\x20votes;\x20GuardIdentifier\x20only\x20when\x20the\x20expression\x20can\x20justify\x20the\x20weight'],'auditorChecklist':['If\x20GuardIdentifier:\x20can\x20a\x20voter\x20self-assign\x20a\x20maximal\x20weight\x20by\x20building\x20the\x20passport\x20alone?']},{'object':'Arbitration','field':'usage_guard\x20(Option<address>)','mode':'gate','extraction':[],'gateBehavior':'passport-guarded\x20dispute\x20filing:\x20the\x20passport\x20verification\x20must\x20pass;\x20dispute()\x20without\x20a\x20passport\x20aborts\x20when\x20usage_guard\x20is\x20set\x20(E_NEED_PASSPORT).\x20Set\x20=\x20guarded\x20entry\x20to\x20filing\x20disputes','setterChecklist':['Set\x20to\x20restrict\x20who\x20can\x20open\x20disputes;\x20none\x20=\x20anyone\x20can\x20dispute'],'auditorChecklist':['Check\x20whether\x20disputing\x20requires\x20passing\x20this\x20guard\x20and\x20who\x20can\x20pass\x20it']},{'object':'Service','field':'buy_guard\x20(Option<address>)','mode':'gate','extraction':[],'gateBehavior':'passport-guarded\x20purchase:\x20the\x20passport\x20verification\x20must\x20pass;\x20buy()\x20without\x20a\x20passport\x20aborts\x20when\x20set\x20(E_BUY_GUARD_PASSPORT_REQUIRED)','setterChecklist':['Pure\x20purchase\x20gate:\x20membership/whitelist/KYC\x20style;\x20no\x20slots\x20are\x20extracted'],'auditorChecklist':['Who\x20can\x20pass\x20it;\x20does\x20it\x20gate\x20every\x20sale\x20item\x20equally\x20(it\x20is\x20service-wide,\x20not\x20per-sale)']},{'object':'Demand','field':'guards[]\x20(ServiceGuard)','mode':'gate+source','extraction':[{'name':'service_identifier\x20(Option<u8>)','meaning':'Presented\x20Service\x20address;\x20overrides\x20the\x20caller-supplied\x20service\x20when\x20presenting','allowedOrigins':['submission','fixed'],'typeConstraint':'address\x20slot\x20whose\x20object\x20type\x20must\x20be\x20Service\x20(submission\x20object\x20type\x20validated\x20at\x20guard_add)','configCheck':'object\x20type\x20check\x20against\x20the\x20guard\x20validated\x20table\x20(E_GUARD_IDS_TYPE_ERROR\x20at\x20verify)','runtimeFallback':'None\x20->\x20caller\x20names\x20the\x20presented\x20service\x20directly','riskNotes':['fixed\x20origin\x20hard-pins\x20which\x20Service\x20may\x20answer\x20this\x20Demand\x20through\x20this\x20guard','submission\x20origin\x20lets\x20the\x20passport\x20builder\x20pick\x20any\x20Service\x20—\x20verify\x20the\x20guard\x20expression\x20restricts\x20it']}],'gateBehavior':'presenting\x20with\x20a\x20passport:\x20passport\x20verification\x20must\x20pass\x20+\x20guard\x20registered\x20(E_GUARD_NOT_FOUND)','setterChecklist':['Set\x20service_identifier\x20to\x20pin\x20the\x20answering\x20service;\x20leave\x20None\x20for\x20open\x20presentation'],'auditorChecklist':['Origin\x20of\x20service_identifier;\x20if\x20submission,\x20who\x20can\x20present\x20what']},{'object':'Machine','field':'node.pair.forward.guard\x20(ForwardGuard)','mode':'gate+source','extraction':[{'name':'retained_submission\x20(vector<u8>\x20identifiers)','meaning':'Submission\x20values\x20retained\x20into\x20Progress\x20Holder.retained_submission\x20(e.g.\x20sub-order\x20/\x20procured-service\x20evidence)\x20when\x20the\x20forward\x20executes','allowedOrigins':['submission'],'typeConstraint':'identifiers\x20must\x20exist\x20as\x20retained\x20submission\x20slots\x20(per-slot\x20checks,\x20E_SUBMISSION_SLOT_MISSING\x20/\x20E_SUBMISSION_SLOT_NOT_RETAINED)','configCheck':'configuring\x20the\x20guarded\x20forward\x20validates\x20the\x20identifiers\x20against\x20the\x20guard\x20table','runtimeFallback':'empty\x20list\x20->\x20gate\x20only,\x20nothing\x20retained;\x20non-empty\x20->\x20the\x20submitted\x20values\x20are\x20copied\x20into\x20the\x20session\x20history','riskNotes':['This\x20is\x20the\x20mechanism\x20that\x20carries\x20sub-order\x20data\x20from\x20an\x20operator\x27s\x20passport\x20into\x20the\x20order\x27s\x20Progress\x20history\x20—\x20downstream\x20analyzers\x20read\x20it\x20(ACTIVE-SESSION\x20queries\x201266-1268\x20+\x201279\x20count;\x20HISTORY-side\x20value\x20read\x20=\x201281\x20progress.history.session.forward.retained_submission.value,\x20which\x20stays\x20readable\x20after\x20the\x20session\x20migrates\x20into\x20history)','Pre-flight\x20probes\x20(read-only,\x20zero\x20gas):\x20the\x20guard\x20query\x20surface\x20exposes\x20a\x20single-slot\x20retention\x20probe\x20(guard,\x20identifier)\x20and\x20a\x20batch\x20slot-defect\x20probe\x20(guard,\x20submission_ids)\x20—\x20the\x20batch\x20form\x20returns\x20the\x20FULL\x20defect\x20list\x20as\x20ordered\x202-byte\x20records\x20([0,\x20id]\x20=\x20slot\x20missing\x20from\x20the\x20guard\x20table,\x20[1,\x20id]\x20=\x20declared\x20but\x20NOT\x20retained\x20at\x20the\x20current\x20progress\x20point;\x20an\x20EMPTY\x20vector\x20=\x20every\x20requested\x20slot\x20is\x20eligible).\x20Probe\x20before\x20forwarding\x20a\x20guarded\x20node\x20so\x20the\x20aborts\x20E_SUBMISSION_SLOT_MISSING\x20(23)\x20/\x20E_SUBMISSION_SLOT_NOT_RETAINED\x20(24)\x20are\x20caught\x20off-chain\x20instead\x20of\x20surfacing\x20mid-machine']}],'gateBehavior':'progress\x20node\x20advancement\x20with\x20a\x20passport:\x20guard\x20is\x20the\x20optional\x20pre/post\x20verification\x20layer\x20for\x20advancing\x20a\x20node;\x20namedOperator/permissionIndex\x20can\x20be\x20replaced\x20by\x20a\x20guard','setterChecklist':['Choose\x20which\x20submission\x20slots\x20are\x20worth\x20retaining\x20as\x20durable\x20evidence','Remember\x20the\x20order\x20of\x20verification:\x20dependent\x20guards\x20must\x20be\x20added\x20to\x20the\x20passport\x20first'],'auditorChecklist':['For\x20each\x20guarded\x20forward:\x20does\x20the\x20retained\x20data\x20actually\x20prove\x20the\x20transition\x20claim\x20(sub-order\x20id,\x20amount)?']},{'object':'Allocation','field':'allocators[].guard\x20(Allocator)','mode':'gate+source','extraction':[{'name':'sharing\x20Recipient::GuardIdentifier','meaning':'Payout\x20recipient\x20address\x20for\x20that\x20sharing\x20line','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'recipient\x20must\x20be\x20a\x20valid\x20address\x20(ERECIPIENT_IDENTIFIER_NOT_ADDRESS)','runtimeFallback':'Entity/Signer\x20sharing\x20variants\x20bypass\x20extraction','riskNotes':['submission\x20origin\x20=\x20the\x20passport\x20builder\x20decides\x20the\x20split\x20destination\x20at\x20alloc()\x20time\x20—\x20the\x20ALC1\x20audit\x20treats\x20an\x20unbound\x20recipient\x20as\x20a\x20redirect\x20risk','for_object\x20anchor\x20(protocol\x20139):\x20when\x20the\x20Allocation\x27s\x20payment_info.for_object\x20is\x20Some,\x20alloc()\x20enforces\x20submitted\x20address\x20==\x20for_object\x20and\x20aborts\x20with\x20ERECIPIENT_NOT_FOR_OBJECT\x20(15)\x20on\x20mismatch\x20—\x20the\x20anchor\x20is\x20mechanism-enforced,\x20not\x20advisory','for_object\x20=\x20None\x20carries\x20NO\x20anchor:\x20nothing\x20is\x20enforced\x20on-chain\x20and\x20the\x20recipient\x20semantics\x20are\x20entirely\x20the\x20creator\x27s\x20business\x20(Allocation\x20is\x20a\x20generic\x20component;\x20only\x20host\x20flows\x20that\x20declare\x20a\x20binding\x20get\x20the\x20anchor)']}],'gateBehavior':'alloc:\x20the\x20passed\x20guard\x20address\x20must\x20equal\x20the\x20registered\x20allocator\x20guard;\x20the\x20passport\x20verification\x20must\x20pass;\x20AllocationEvent\x20records\x20which\x20guard\x20ran','setterChecklist':['Bind\x20recipient\x20slots\x20inside\x20the\x20guard\x20expression\x20(signer\x20==\x20authorized\x20party,\x20state\x20==\x20expected\x20scope)\x20exactly\x20as\x20ALC1\x20expects','A\x20submission\x20slot\x20with\x20NO\x20scope\x20binding\x20=\x20HIGH\x20severity\x20finding','When\x20setting\x20payment_info:\x20for_object\x20=\x20Some\x20turns\x20it\x20into\x20an\x20enforced\x20anchor\x20—\x20every\x20GuardIdentifier\x20recipient\x20submission\x20must\x20equal\x20that\x20address\x20or\x20alloc()\x20aborts\x20(code\x2015);\x20verify\x20the\x20anchor\x20matches\x20the\x20intended\x20recipient\x20flow\x20BEFORE\x20create\x20(payment_info\x20is\x20immutable\x20after\x20create)','for_object\x20=\x20None\x20is\x20legal:\x20no\x20on-chain\x20anchor,\x20recipient\x20routing\x20is\x20then\x20purely\x20the\x20creator\x27s\x20design\x20—\x20flag\x20this\x20explicitly\x20in\x20the\x20plan\x20so\x20the\x20user\x20decides'],'auditorChecklist':['Cross-scenario\x20settlement\x20residual:\x20a\x20guard\x20bound\x20to\x20one\x20host\x20but\x20reusable\x20across\x20unrelated\x20callers\x20of\x20other\x20hosts','Every\x20submission\x20recipient\x20slot\x20must\x20have\x20a\x20scope\x20binding\x20(guard\x20expression\x20or\x20payment_info.for_object\x20anchor)\x20—\x20otherwise\x20funds\x20can\x20be\x20redirected','Check\x20payment_info.for_object:\x20Some\x20=\x20confirmed\x20enforced\x20anchor\x20(compare\x20against\x20intended\x20recipients);\x20None\x20=\x20trust-on-creator,\x20no\x20on-chain\x20enforcement\x20of\x20the\x20GuardIdentifier\x20destination']},{'object':'Payment','field':'info.for_guard\x20(PaymentInfo)','mode':'source','extraction':[{'name':'for_guard','meaning':'Provenance:\x20records\x20which\x20guard\x20context\x20produced\x20this\x20payment;\x20creates\x20an\x20object-linker\x20affiliation','allowedOrigins':['fixed'],'typeConstraint':'guard\x20address\x20(set\x20when\x20the\x20payment\x20info\x20is\x20created\x20with\x20a\x20guard\x20attached\x20—\x20the\x20payment_info_with_guard\x20variants)','configCheck':'n/a\x20—\x20plain\x20address\x20copy','runtimeFallback':'None\x20->\x20no\x20provenance','riskNotes':['Not\x20a\x20gate,\x20not\x20a\x20submission\x20slot\x20—\x20pure\x20traceability\x20(queries\x201057/1058,\x201108/1109)']}],'gateBehavior':'None','setterChecklist':['Attach\x20for_guard\x20when\x20the\x20payment\x20originates\x20from\x20a\x20guarded\x20flow'],'auditorChecklist':['Use\x20it\x20to\x20trace\x20payment\x20history\x20back\x20to\x20the\x20guarding\x20decision']},{'object':'Permission','field':'table\x20keys\x20(guard\x20addresses\x20as\x20permission\x20subjects)','mode':'gate','extraction':[],'gateBehavior':'A\x20guard\x20ADDRESS\x20can\x20be\x20granted\x20permission\x20indexes\x20like\x20a\x20user.\x20A\x20passport-asserted\x20operation\x20collects\x20the\x20passport\x20impack\x20guard\x20list\x20and\x20checks\x20permission\x20indexes\x20against\x20it:\x20a\x20passing\x20guard\x20can\x20therefore\x20carry\x20authorization\x20for\x20the\x20whole\x20transaction','setterChecklist':['Granting\x20an\x20index\x20to\x20a\x20guard\x20address\x20delegates\x20that\x20authority\x20to\x20anyone\x20who\x20can\x20pass\x20the\x20guard\x20—\x20treat\x20like\x20a\x20role\x20grant'],'auditorChecklist':['List\x20permission\x20subjects\x20that\x20are\x20guard\x20addresses;\x20evaluate\x20who\x20can\x20pass\x20those\x20guards\x20(they\x20inherit\x20the\x20permission)']}];export const VALUE_ORIGIN_SEMANTICS={'fixed':'Value\x20baked\x20into\x20the\x20guard\x20table\x20(b_submission=false).\x20Deterministic\x20on\x20every\x20use;\x20frozen\x20after\x20create;\x20used\x20as\x20the\x20fallback\x20when\x20no\x20submission\x20is\x20supplied.','submission':'Value\x20supplied\x20by\x20the\x20passport\x20builder\x20at\x20guard_add\x20time\x20(b_submission=true),\x20type-checked\x20against\x20the\x20table.\x20Whoever\x20builds\x20the\x20passport\x20controls\x20the\x20value\x20—\x20always\x20ask\x20who\x20that\x20is.','query':'Value\x20that\x20exists\x20only\x20inside\x20the\x20guard\x20input\x20expression\x20(native\x20query\x20opcodes\x201xxx).\x20It\x20constrains\x20verification\x20(state\x20coupling)\x20but\x20is\x20never\x20extractable;\x20extraction\x20slots\x20must\x20be\x20fixed\x20or\x20submission.'};export const GUARD_PASSPORT_DOCTRINE=['Slot\x20value\x20resolution\x20order:\x20passport\x20submission\x20value\x20->\x20fixed\x20guard\x20table\x20value\x20->\x20abort\x20(E_SUBMISSION_ID_NOT_FOUND).\x20A\x20slot\x20with\x20no\x20submission\x20and\x20no\x20fixed\x20value\x20aborts\x20the\x20host\x20call.','A\x20guard\x20only\x20participates\x20if\x20its\x20passport\x20verification\x20passes,\x20and\x20it\x20must\x20be\x20marked\x20impack\x20when\x20the\x20host\x20extracts\x20data\x20from\x20it\x20(result_for_permission\x20returns\x20impack\x20guards\x20only).','The\x20impack\x20list\x20is\x20snapshotted\x20before\x20verify()\x20runs;\x20repository\x20quote_guard\x20membership\x20is\x20checked\x20against\x20this\x20snapshot\x20inside\x20the\x20native\x20verifier\x20—\x20and\x20the\x20same\x20gate\x20now\x20covers\x20every\x20data-row\x20read\x20(1167\x20fetch,\x201173/1174/1176\x20predicate\x20queries,\x201177\x20keys-where),\x20not\x20just\x20the\x20plain\x20fetch.','relies:\x20a\x20guard\x20may\x20depend\x20on\x20at\x20most\x204\x20other\x20guards\x20(MAX_DEPENDED_COUNT),\x20dependent\x20guards\x20must\x20be\x20added\x20to\x20the\x20passport\x20first,\x20and\x20the\x20combine\x20logic\x20is\x20relies_logic_and\x20(AND\x20default,\x20OR\x20optional).','Dependency\x20eligibility\x20of\x20a\x20guard\x20=\x20relies\x20empty\x20AND\x20immutable\x20AND\x20rep\x20—\x20the\x20only\x20shape\x20accepted\x20as\x20a\x20repository\x20quote_guard\x20or\x20as\x20a\x20relied-upon\x20guard.','Guards\x20are\x20frozen\x20on\x20create\x20(immutable=true);\x20changing\x20a\x20fixed\x20value\x20means\x20deploying\x20a\x20new\x20guard\x20and\x20re-registering\x20it\x20on\x20every\x20host\x20object.','Type\x20checks\x20happen\x20at\x20config\x20time\x20(submission\x20value\x20type\x20/\x20address\x20format\x20/\x20address\x20compatibility)\x20and\x20at\x20passport\x20build\x20time\x20(the\x20first\x20type\x20byte\x20of\x20each\x20submitted\x20value\x20is\x20compared\x20against\x20the\x20table);\x20runtime\x20aborts\x20are\x20the\x20last\x20resort.','Allocation\x20for_object\x20anchor\x20(protocol\x20139):\x20the\x20Allocation\x27s\x20payment_info.for_object,\x20when\x20Some,\x20is\x20enforced\x20inside\x20alloc()\x20—\x20every\x20Recipient::GuardIdentifier\x20submission\x20must\x20equal\x20that\x20address\x20(abort\x20ERECIPIENT_NOT_FOR_OBJECT\x2015).\x20When\x20None,\x20no\x20anchor\x20exists\x20and\x20the\x20GuardIdentifier\x20destination\x20is\x20whoever\x20builds\x20the\x20passport\x27s\x20choice:\x20entirely\x20the\x20creator\x27s\x20business.\x20Allocation\x20is\x20a\x20generic\x20component\x20—\x20the\x20anchor\x20is\x20opt-in\x20per\x20instance,\x20not\x20a\x20host-flow\x20constant.'];export function guardSitesFor(a){return GUARD_FIELD_SITES['filter'](b=>b['object']['toLowerCase']()===a['toLowerCase']());}export function guardCognitionDoctrine(){return['Classify\x20the\x20mode\x20first:\x20pure\x20gate\x20(authorization\x20only),\x20pure\x20source\x20(data\x20only),\x20or\x20gate+source\x20(most\x20money\x20fields).','For\x20every\x20extracted\x20slot,\x20name\x20its\x20origin\x20(fixed\x20/\x20submission\x20/\x20query)\x20before\x20judging\x20safety.','For\x20submission\x20slots,\x20identify\x20the\x20passport\x20builder:\x20that\x20party\x20chooses\x20the\x20value.\x20Trace\x20what\x20constrains\x20it\x20(guard\x20expression,\x20host-side\x20balance/authorization\x20checks).','For\x20fixed\x20slots,\x20remember\x20immutability:\x20the\x20value\x20is\x20policy,\x20changed\x20only\x20by\x20re-issuing\x20the\x20guard.','For\x20query-coupled\x20guards,\x20map\x20each\x20query\x20id\x20to\x20its\x20data\x20dependency\x20(which\x20object,\x20which\x20field)\x20—\x20the\x20guard\x20is\x20only\x20as\x20fresh\x20as\x20the\x20queried\x20state.','Check\x20config-time\x20invariants:\x20type\x20of\x20each\x20slot,\x20registration\x20limits\x20(treasury\x20100\x20deposit\x20/\x20200\x20withdraw\x20/\x20reward\x20200\x20/\x20arbitration\x2050\x20/\x20repository\x2010\x20write\x20guards\x20per\x20policy),\x20relies\x20<=\x204,\x20submission\x20size\x20<=\x204096\x20bytes\x20(v140;\x20fits\x20a\x20100-address\x20roster\x20witness).','Report\x20any\x20submission\x20slot\x20that\x20decides\x20money\x20destination\x20or\x20amount\x20without\x20a\x20scope\x20binding\x20as\x20a\x20HIGH-severity\x20redirect\x20risk.'];}export const REPOSITORY_WRITE_ROUTE_MATRIX=[{'route':'auto_id_write','purpose':'Unguarded\x20auto-id\x20write:\x20policy\x20has\x20NO\x20write\x20guards\x20and\x20id_from\x20is\x20Clock/Signer.','idSource':'clock','dataSource':'caller','honorsIdFromSubmission':![],'honorsDataFromSubmission':![],'guardRequirement':'policy-write-guard-must-be-empty','abortsOnUnhonoredSlots':![],'removeRoute':'auto_id_remove'},{'route':'auto_id_write_guarded','purpose':'Guarded\x20auto-id\x20write:\x20id\x20auto-generated;\x20the\x20guard\x20authorizes\x20AND\x20may\x20supply\x20the\x20data\x20payload\x20via\x20data_from_submission.','idSource':'clock','dataSource':'submission-if-set-else-caller','honorsIdFromSubmission':![],'honorsDataFromSubmission':!![],'guardRequirement':'specified-guard-must-be-in-policy','abortsOnUnhonoredSlots':![],'removeRoute':'auto_id_remove_guarded'},{'route':'manual_id_write','purpose':'Unguarded\x20manual\x20write:\x20caller\x20supplies\x20id\x20AND\x20data;\x20policy\x20must\x20have\x20no\x20write\x20guards.','idSource':'caller','dataSource':'caller','honorsIdFromSubmission':![],'honorsDataFromSubmission':![],'guardRequirement':'policy-write-guard-must-be-empty','abortsOnUnhonoredSlots':![],'removeRoute':'manual_id_remove'},{'route':'manual_id_write_guarded','purpose':'Guarded\x20manual\x20write:\x20caller\x20supplies\x20id\x20AND\x20data;\x20the\x20guard\x20authorizes\x20only.\x20Extraction\x20slots\x20must\x20be\x20None.','idSource':'caller','dataSource':'caller','honorsIdFromSubmission':![],'honorsDataFromSubmission':![],'guardRequirement':'specified-guard-must-be-in-policy','abortsOnUnhonoredSlots':!![],'removeRoute':'manual_id_remove_guarded'},{'route':'mixed_id_write_guarded','purpose':'Mixed\x20write:\x20per\x20specified\x20guard,\x20id\x20comes\x20from\x20id_from_submission\x20(else\x20caller\x20vector)\x20and\x20data\x20from\x20data_from_submission\x20(else\x20caller\x20vector).\x20Requires\x20policy\x20id_from\x20==\x20NONE.','idSource':'submission-if-set-else-caller','dataSource':'submission-if-set-else-caller','honorsIdFromSubmission':!![],'honorsDataFromSubmission':!![],'guardRequirement':'each-specified-guard-must-be-in-policy','abortsOnUnhonoredSlots':![],'removeRoute':'mixed_id_remove_guarded'},{'route':'mixed_id_remove_guarded','purpose':'Mixed\x20removal:\x20deletes\x20the\x20record\x20whose\x20id\x20is\x20extracted\x20from\x20id_from_submission.\x20Requires\x20the\x20slot\x20to\x20be\x20SET.','idSource':'submission-if-set-else-caller','dataSource':'none','honorsIdFromSubmission':!![],'honorsDataFromSubmission':![],'guardRequirement':'each-specified-guard-must-be-in-policy','abortsOnUnhonoredSlots':!![]}];export function repositoryRouteSlotConflicts(a){const b=[],{idFrom:c,writeGuardCount:d,idFromSubmissionSet:e,dataFromSubmissionSet:f,intendedRoute:g}=a;return c==='none'&&d===0x0&&b['push']('E_POLICY_WRITE_GUARD_REQUIRED:\x20id_from=NONE\x20with\x20an\x20empty\x20write_guard\x20lets\x20anyone\x20mutate\x20the\x20policy\x20data'),c!=='none'&&e&&b['push']('E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN:\x20id\x20is\x20auto-generated\x20(clock/signer);\x20id_from_submission\x20can\x20never\x20fire'),(g==='manual_id_write_guarded'||g==='manual_id_remove_guarded')&&((e||f)&&b['push']('E_GUARD_SPECIFIED_ID_FROM_SUBMISSION:\x20the\x20chosen\x20route\x20rejects\x20every\x20extraction\x20slot;\x20use\x20the\x20mixed\x20guarded\x20write\x20or\x20the\x20guarded\x20auto-id\x20write\x20instead')),g==='auto_id_write_guarded'&&e&&b['push']('id_from_submission\x20is\x20never\x20consumed\x20by\x20the\x20guarded\x20auto-id\x20write\x20(id\x20is\x20auto-generated);\x20the\x20slot\x20is\x20dead\x20config'),g==='mixed_id_write_guarded'&&c!=='none'&&b['push']('E_POLICY_ID_FROM_NONE:\x20the\x20mixed\x20guarded\x20write\x20requires\x20policy\x20id_from=NONE'),g==='mixed_id_remove_guarded'&&!e&&b['push']('E_GUARD_NOT_SPECIFIED_ID_FROM_SUBMISSION:\x20mixed\x20removal\x20has\x20no\x20id\x20source;\x20set\x20id_from_submission\x20or\x20use\x20the\x20guarded\x20manual\x20removal\x20route'),b;}
+export const GUARD_FIELD_COGNITION_VERSION='1.1.0';const NUMBER='number\x20(numeric\x20value\x20type)',U64='u64\x20exactly\x20(common::TYPE_U64)',ADDRESS='address\x20or\x20address-compatible\x20object\x20id';export const GUARD_FIELD_SITES=[{'object':'Treasury','field':'external_withdraw_guard[]\x20(AmountFromWithdrawGuard)','mode':'gate+source','extraction':[{'name':'identifier\x20(amount)','meaning':'Exact\x20withdraw\x20amount\x20moved\x20out\x20of\x20the\x20treasury\x20balance','allowedOrigins':['submission','fixed'],'typeConstraint':NUMBER,'configCheck':'configuring\x20the\x20external-withdraw\x20guard:\x20the\x20amount\x20slot\x20must\x20carry\x20a\x20declared\x20submission\x20value\x20type\x20and\x20it\x20must\x20be\x20numeric\x20(E_IDENTIFIER_NOT_NUMBER_TYPE)','runtimeFallback':'falls\x20back\x20to\x20the\x20fixed\x20table\x20value\x20when\x20no\x20submission\x20is\x20supplied;\x20if\x20neither\x20exists\x20the\x20tx\x20aborts\x20(E_SUBMISSION_ID_NOT_FOUND)','riskNotes':['submission\x20origin\x20=\x20passport\x20builder\x20chooses\x20the\x20amount;\x20only\x20the\x20balance\x20check\x20(E_WITHDRAW_BALANCE_INSUFFICIENT)\x20bounds\x20it','fixed\x20origin\x20=\x20same\x20amount\x20every\x20withdrawal;\x20safe\x20default\x20for\x20allowance-style\x20guards','query\x20origin\x20is\x20impossible\x20for\x20this\x20slot\x20—\x20a\x20query\x20can\x20only\x20gate,\x20never\x20supply\x20the\x20amount']},{'name':'store_from_id\x20(optional)','meaning':'Secondary\x20slot\x20decoded\x20as\x20address;\x20recorded\x20in\x20Treasury\x20history\x20Record\x20for\x20traceability','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'address-compatibility\x20check\x20on\x20the\x20recorded\x20slot\x20(E_STORE_FROM_ID_NOT_COMPATIBLE)','runtimeFallback':'None\x20->\x20Record.store_from_id\x20=\x20none','riskNotes':['Bookkeeping\x20only;\x20never\x20used\x20as\x20the\x20withdrawal\x20recipient']}],'gateBehavior':'the\x20passport\x20verification\x20against\x20this\x20guard\x20must\x20pass\x20AND\x20the\x20guard\x20address\x20must\x20be\x20registered\x20in\x20the\x20external-withdraw\x20guard\x20list\x20(E_EXTERNAL_WITHDRAW_GUARD_NOT_FOUND)','setterChecklist':['Decide\x20who\x20builds\x20passports\x20against\x20this\x20guard\x20—\x20that\x20party\x20controls\x20a\x20submission-origin\x20amount','Prefer\x20a\x20fixed\x20amount\x20for\x20allowance\x20guards;\x20reserve\x20submission\x20amounts\x20for\x20flows\x20where\x20the\x20passport\x20builder\x20is\x20trusted\x20or\x20the\x20amount\x20is\x20re-verified\x20inside\x20the\x20guard\x20expression\x20(e.g.\x20compare\x20against\x20order.amount\x20via\x20query\x201561)','The\x20RECIPIENT\x20is\x20tx-supplied,\x20not\x20from\x20the\x20guard\x20—\x20constrain\x20it\x20inside\x20the\x20guard\x20expression\x20(e.g.\x20compare\x20a\x20submitted\x20address\x20against\x20an\x20expected\x20one)\x20if\x20destination\x20matters','Check\x20the\x20guard\x27s\x20dependency-eligibility\x20status\x20only\x20matters\x20if\x20this\x20guard\x20will\x20rely\x20on\x20others\x20(relies\x20<=\x204,\x20added\x20first)'],'auditorChecklist':['For\x20each\x20registered\x20guard:\x20classify\x20amount\x20slot\x20as\x20fixed\x20or\x20submission\x20(read\x20b_submission\x20in\x20the\x20table)','If\x20submission:\x20who\x20can\x20hold/build\x20a\x20passport\x20with\x20this\x20guard?\x20Can\x20a\x20stranger\x20drain\x20the\x20treasury\x20up\x20to\x20its\x20balance?','Does\x20the\x20guard\x20expression\x20bind\x20the\x20submission\x20to\x20on-chain\x20state\x20(order,\x20repository\x20data)\x20or\x20is\x20it\x20free-form?','Is\x20the\x20withdrawal\x20recipient\x20constrained\x20anywhere?']},{'object':'Treasury','field':'external_deposit_guard[]\x20(AmountFromDepositGuard)','mode':'gate+source','extraction':[{'name':'identifier\x20(amount,\x20Option)','meaning':'When\x20Some:\x20exact\x20deposit\x20amount\x20split\x20from\x20the\x20coin\x20(remainder\x20returned\x20to\x20caller).\x20When\x20None:\x20whole\x20coin\x20deposited','allowedOrigins':['submission','fixed'],'typeConstraint':NUMBER,'configCheck':'same\x20as\x20withdraw:\x20value\x20type\x20must\x20be\x20numeric\x20when\x20Some','runtimeFallback':'None\x20->\x20entire\x20coin\x20deposited;\x20Some\x20->\x20coin::split\x20to\x20`value`,\x20remainder\x20transferred\x20back\x20to\x20sender','riskNotes':['A\x20submission-origin\x20amount\x20below\x20the\x20coin\x20total\x20silently\x20returns\x20the\x20difference\x20to\x20the\x20caller\x20—\x20intended\x20for\x20partial\x20deposits','Deposits\x20cannot\x20steal\x20funds;\x20the\x20risk\x20direction\x20is\x20mis-recorded\x20history\x20only']},{'name':'store_from_id\x20(optional)','meaning':'Address\x20slot\x20recorded\x20on\x20the\x20deposit\x20Record','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'address-compatibility\x20check','runtimeFallback':'None\x20->\x20none','riskNotes':['Traceability\x20only']}],'gateBehavior':'passport\x20verification\x20against\x20the\x20guard\x20must\x20pass\x20+\x20guard\x20must\x20be\x20registered\x20(E_EXTERNAL_DEPOSIT_GUARD_NOT_FOUND)','setterChecklist':['None\x20identifier\x20=\x20whole-coin\x20deposit;\x20Some\x20=\x20exact-amount\x20deposit\x20with\x20refund\x20of\x20the\x20remainder'],'auditorChecklist':['Confirm\x20the\x20amount\x20slot\x20origin\x20matches\x20the\x20intended\x20deposit\x20UX\x20(whole\x20vs\x20exact)']},{'object':'Reward','field':'guards[]\x20(RewardGuard)','mode':'gate+source','extraction':[{'name':'recipient\x20(Recipient::GuardIdentifier)','meaning':'Claim\x20payout\x20destination\x20address','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'recipient\x20must\x20be\x20a\x20valid\x20address\x20(E_RECIPIENT_IDENTIFIER_NOT_ADDRESS)','runtimeFallback':'Entity/Signer\x20variants\x20bypass\x20extraction\x20entirely','riskNotes':['submission\x20origin\x20=\x20passport\x20builder\x20redirects\x20the\x20payout\x20to\x20any\x20address\x20it\x20names']},{'name':'amount\x20(Amount::GuardU64Identifier)','meaning':'Claim\x20size\x20paid\x20from\x20the\x20Reward\x20balance','allowedOrigins':['submission','fixed'],'typeConstraint':U64,'configCheck':'submission\x20value\x20type\x20must\x20be\x20u64\x20(E_AMOUNT_NOT_U64)','runtimeFallback':'Fixed(u64)\x20variant\x20bypasses\x20extraction','riskNotes':['submission\x20origin\x20=\x20passport\x20builder\x20decides\x20the\x20claim\x20size;\x20only\x20balance\x20and\x20per-recipient\x20record\x20bound\x20it']},{'name':'store_from_id\x20(optional)','meaning':'Address\x20slot\x20recorded\x20in\x20the\x20per-recipient\x20claim\x20Record','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'address-compatibility\x20check\x20(E_STORE_FROM_ID_NOT_COMPATIBLE)','runtimeFallback':'None\x20->\x20none\x20(an\x20unstamped\x20record\x20matches\x20NO\x20store_from_id\x20predicate\x20—\x20pin\x20the\x20slot\x20for\x20any\x20per-order\x20replay\x20gate)','riskNotes':['Traceability\x20+\x20replay\x20gate:\x20without\x20a\x20pinned\x20slot\x20a\x20per-order\x20dedup\x20leg\x20cannot\x20bind\x20to\x20a\x20real\x20order\x20id\x20—\x20pin\x20store_from_id\x20for\x20per-order\x20replay\x20protection;\x20slot-less\x20guards\x20can\x20only\x20dedup\x20lifetime-once\x20via\x20record\x20count/exists\x20with\x20an\x20empty\x20where']}],'gateBehavior':'claim:\x20passport\x20verification\x20against\x20the\x20guard\x20must\x20pass\x20+\x20expiration_time\x20check\x20+\x20guard\x20registered\x20(E_GUARD_NOT_FOUND);\x20guard_not_added_expiration_time\x20freezes\x20the\x20guard\x20set\x20AND\x20blocks\x20balance\x20withdrawal\x20until\x20it\x20elapses','setterChecklist':['Recipient+amount\x20both\x20submission\x20=\x20the\x20passport\x20builder\x20fully\x20controls\x20who\x20gets\x20paid\x20how\x20much\x20—\x20acceptable\x20only\x20for\x20self-service\x20claim\x20flows\x20where\x20the\x20builder\x20IS\x20the\x20beneficiary','expiration_time\x20on\x20the\x20RewardGuard\x20bounds\x20the\x20window\x20(E_GUARD_EXPIRED)','Two\x20different\x20clocks\x20—\x20do\x20not\x20conflate\x20them:\x20RewardGuard.expiration_time\x20is\x20the\x20buyer-facing\x20CLAIM\x20window\x20(claims\x20abort\x20after\x20it);\x20Reward.guard_not_added_expiration_time\x20is\x20the\x20owner\x27s\x20PUBLIC\x20COMMITMENT\x20lock\x20(freezes\x20guard_add/guard_expiration_time_add\x20AND\x20blocks\x20withdraw\x20until\x20it\x20elapses).\x20After\x20the\x20commitment\x20lock\x20elapses\x20the\x20owner\x20can\x20extend\x20or\x20clear\x20guard\x20windows\x20and\x20withdraw\x20the\x20unclaimed\x20remainder\x20(the\x20withdrawal\x20unwraps\x20the\x20held\x20Coin)\x20—\x20an\x20expired\x20claim\x20window\x20ends\x20the\x20buyer\x20promise,\x20it\x20never\x20permanently\x20locks\x20the\x20pool'],'auditorChecklist':['For\x20each\x20guard:\x20are\x20recipient/amount\x20fixed\x20or\x20submission?','If\x20submission:\x20does\x20the\x20guard\x20expression\x20bind\x20them\x20to\x20repository\x20data\x20(1167)\x20or\x20an\x20order\x20so\x20the\x20claim\x20is\x20justified?','Is\x20there\x20a\x20per-recipient\x20cap?\x20(Only\x20the\x20historical\x20record\x20total\x20accumulates;\x20there\x20is\x20no\x20per-claim\x20limit.)']},{'object':'Repository','field':'policies[].write_guard[]\x20(PolicyGuard)','mode':'gate+source','extraction':[{'name':'id_from_submission\x20(Option<u8>)','meaning':'Data-record\x20key\x20(address)\x20extracted\x20from\x20the\x20guard\x20instead\x20of\x20caller-supplied','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'address-compatibility\x20check\x20(E_INVALID_ID_IN_GUARD_TABLE)','runtimeFallback':'None\x20->\x20id\x20comes\x20from\x20the\x20caller\x20vector\x20or\x20is\x20auto-generated\x20(clock/signer)','riskNotes':['Policy-level\x20conflicts:\x20id_from\x20=\x20Clock/Signer\x20FORBIDS\x20id_from_submission\x20(E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN);\x20id_from\x20=\x20None\x20REQUIRES\x20a\x20non-empty\x20write_guard\x20(E_POLICY_WRITE_GUARD_REQUIRED)']},{'name':'data_from_submission\x20(Option<u8>)','meaning':'Data\x20payload\x20extracted\x20from\x20the\x20guard\x20instead\x20of\x20caller-supplied','allowedOrigins':['submission','fixed'],'typeConstraint':'any\x20repository-supported\x20value\x20type\x20(first\x20byte\x20=\x20value_type)','configCheck':'identifier\x20presence\x20check\x20(E_INVALID_DATA_IN_GUARD_TABLE)','runtimeFallback':'None\x20->\x20data\x20comes\x20from\x20the\x20caller\x20vector','riskNotes':['Entry-point\x20routing\x20differs:\x20the\x20guarded\x20auto-id\x20write\x20consumes\x20data_from_submission;\x20the\x20guarded\x20manual\x20write\x20REJECTS\x20both\x20extraction\x20slots\x20(E_GUARD_SPECIFIED_ID_FROM_SUBMISSION);\x20the\x20mixed\x20guarded\x20write\x20mixes\x20per-guard\x20extraction\x20with\x20caller\x20vectors','Setting\x20an\x20extraction\x20slot\x20on\x20a\x20guard\x20that\x20is\x20only\x20ever\x20used\x20via\x20the\x20guarded\x20manual\x20write\x20silently\x20means\x20\x27unused\x20config\x27\x20—\x20route\x20must\x20match']}],'gateBehavior':'write\x20path\x20must\x20find\x20the\x20guard\x20in\x20the\x20policy\x20(E_GUARD_SPECIFIED_NOT_IN_POLICY)\x20and\x20pass\x20the\x20passport\x20verification\x20or\x20the\x20permission-based\x20verification\x20(impack\x20membership)','setterChecklist':['Match\x20the\x20policy\x20id_from\x20with\x20the\x20guard\x20slots\x20(see\x20conflicts\x20above)','Pick\x20the\x20write\x20entry\x20point\x20first,\x20then\x20decide\x20which\x20extraction\x20slots\x20that\x20entry\x20point\x20actually\x20honors'],'auditorChecklist':['For\x20each\x20write_guard:\x20which\x20entry\x20points\x20can\x20reach\x20it\x20and\x20which\x20slots\x20do\x20those\x20entry\x20points\x20consume?','A\x20policy\x20with\x20write_guard\x20but\x20id_from=None\x20and\x20no\x20extraction\x20slots\x20still\x20gates\x20writes\x20—\x20verify\x20the\x20guard\x20expression\x20actually\x20restricts\x20who\x20can\x20write']},{'object':'Repository','field':'policies[].quote_guard\x20(Option<address>)','mode':'source','extraction':[{'name':'repository.data\x20(query\x201167\x20params:\x20key,\x20id)','meaning':'Read\x20authorization\x20for\x20private\x20repository\x20data\x20inside\x20guard\x20expressions','allowedOrigins':['query'],'typeConstraint':'(String\x20key,\x20Address\x20id)\x20pair','configCheck':'setting\x20the\x20policy\x20quote\x20guard:\x20the\x20guard\x20must\x20be\x20dependency-eligible\x20(relies\x20empty\x20+\x20immutable\x20+\x20rep\x20true,\x20E_NEED_DEPENDENT_GUARD)','runtimeFallback':'None\x20->\x20every\x20repository\x20data-row\x20read\x20aborts\x20for\x20a\x20key\x20protected\x20by\x20a\x20quote_guard\x20the\x20passport\x20does\x20not\x20carry\x20(IMPACK_GUARD_NOT_FOUND):\x20the\x201167\x20fetch\x20and\x20the\x201173/1174/1176\x20predicate\x20queries\x20check\x20the\x20queried\x20key;\x20the\x201177\x20keys-where\x20scan\x20refuses\x20outright\x20when\x20any\x20protected\x20key\x20is\x20uncovered','riskNotes':['The\x20reference\x20gate\x20spans\x20ALL\x20data-row\x20reads,\x20not\x20just\x20the\x20plain\x20fetch:\x20count/sum/find\x20predicates\x20and\x20the\x20keys-where\x20scan\x20hit\x20the\x20same\x20gate,\x20so\x20range/sum\x20probing\x20of\x20a\x20protected\x20value\x20is\x20refused\x20too','The\x20gate\x20runs\x20inside\x20the\x20native\x20verifier\x20against\x20the\x20impack-list\x20snapshot\x20taken\x20before\x20verify()','rep\x20flag\x20comes\x20from\x20the\x20native\x20parse\x20at\x20guard\x20creation\x20—\x20a\x20guard\x20that\x20fails\x20rep\x20cannot\x20serve\x20as\x20quote_guard']}],'gateBehavior':'No\x20direct\x20gate\x20—\x20this\x20guard\x20authorizes\x20DATA\x20READS\x20performed\x20by\x20other\x20guards','setterChecklist':['Only\x20a\x20fresh,\x20immutable,\x20reliance-free\x20guard\x20(meets\x20the\x20dependency-eligibility\x20shape)\x20qualifies','Register\x20it\x20on\x20the\x20same\x20Repository\x20whose\x20data\x20will\x20be\x20quoted'],'auditorChecklist':['Which\x20guards\x20rely\x20on\x20/\x20are\x20bundled\x20with\x20this\x20quote_guard\x20in\x20passports?\x20(impack\x20membership\x20decides)','Is\x20the\x20quoted\x20(key,id)\x20scoped\x20narrowly\x20enough,\x20or\x20does\x20one\x20quote_guard\x20open\x20the\x20whole\x20policy?']},{'object':'Arbitration','field':'voting_guard[]\x20(VotingGuard)','mode':'gate+source','extraction':[{'name':'vote_weight\x20(VoteValue::GuardIdentifier)','meaning':'Voter\x27s\x20weighted\x20voting\x20power','allowedOrigins':['submission','fixed'],'typeConstraint':NUMBER+',\x20value\x20<=\x20u32\x20max\x20(E_GUARD_IDENTIFIER_NUMBER_INVALID)','configCheck':'value\x20type\x20must\x20be\x20numeric\x20(E_GUARD_IDENTIFIER_NOT_NUMBER)','runtimeFallback':'FixedValue\x20variant\x20bypasses\x20extraction','riskNotes':['submission\x20origin\x20=\x20the\x20passport\x20builder\x20assigns\x20its\x20own\x20voting\x20weight\x20—\x20dangerous\x20unless\x20the\x20guard\x20expression\x20derives\x20the\x20weight\x20from\x20trusted\x20state\x20(e.g.\x20repository\x20holdings\x20via\x201167)']}],'gateBehavior':'voting\x20through\x20the\x20voting\x20guard:\x20passport\x20verification\x20must\x20pass\x20+\x20guard\x20registered\x20(E_VOTING_GUARD_NOT_FOUND)','setterChecklist':['Empty\x20voting_guard\x20=\x20open\x20voting\x20(everybody);\x20non-empty\x20=\x20only\x20listed\x20guards\x20may\x20vote','FixedValue\x20for\x20equal-weight\x20votes;\x20GuardIdentifier\x20only\x20when\x20the\x20expression\x20can\x20justify\x20the\x20weight'],'auditorChecklist':['If\x20GuardIdentifier:\x20can\x20a\x20voter\x20self-assign\x20a\x20maximal\x20weight\x20by\x20building\x20the\x20passport\x20alone?']},{'object':'Arbitration','field':'usage_guard\x20(Option<address>)','mode':'gate','extraction':[],'gateBehavior':'passport-guarded\x20dispute\x20filing:\x20the\x20passport\x20verification\x20must\x20pass;\x20dispute()\x20without\x20a\x20passport\x20aborts\x20when\x20usage_guard\x20is\x20set\x20(E_NEED_PASSPORT).\x20Set\x20=\x20guarded\x20entry\x20to\x20filing\x20disputes','setterChecklist':['Set\x20to\x20restrict\x20who\x20can\x20open\x20disputes;\x20none\x20=\x20anyone\x20can\x20dispute'],'auditorChecklist':['Check\x20whether\x20disputing\x20requires\x20passing\x20this\x20guard\x20and\x20who\x20can\x20pass\x20it']},{'object':'Service','field':'buy_guard\x20(Option<address>)','mode':'gate','extraction':[],'gateBehavior':'passport-guarded\x20purchase:\x20the\x20passport\x20verification\x20must\x20pass;\x20buy()\x20without\x20a\x20passport\x20aborts\x20when\x20set\x20(E_BUY_GUARD_PASSPORT_REQUIRED)','setterChecklist':['Pure\x20purchase\x20gate:\x20membership/whitelist/KYC\x20style;\x20no\x20slots\x20are\x20extracted'],'auditorChecklist':['Who\x20can\x20pass\x20it;\x20does\x20it\x20gate\x20every\x20sale\x20item\x20equally\x20(it\x20is\x20service-wide,\x20not\x20per-sale)']},{'object':'Demand','field':'guards[]\x20(ServiceGuard)','mode':'gate+source','extraction':[{'name':'service_identifier\x20(Option<u8>)','meaning':'Presented\x20Service\x20address;\x20overrides\x20the\x20caller-supplied\x20service\x20when\x20presenting','allowedOrigins':['submission','fixed'],'typeConstraint':'address\x20slot\x20whose\x20object\x20type\x20must\x20be\x20Service\x20(submission\x20object\x20type\x20validated\x20at\x20guard_add)','configCheck':'object\x20type\x20check\x20against\x20the\x20guard\x20validated\x20table\x20(E_GUARD_IDS_TYPE_ERROR\x20at\x20verify)','runtimeFallback':'None\x20->\x20caller\x20names\x20the\x20presented\x20service\x20directly','riskNotes':['fixed\x20origin\x20hard-pins\x20which\x20Service\x20may\x20answer\x20this\x20Demand\x20through\x20this\x20guard','submission\x20origin\x20lets\x20the\x20passport\x20builder\x20pick\x20any\x20Service\x20—\x20verify\x20the\x20guard\x20expression\x20restricts\x20it']}],'gateBehavior':'presenting\x20with\x20a\x20passport:\x20passport\x20verification\x20must\x20pass\x20+\x20guard\x20registered\x20(E_GUARD_NOT_FOUND)','setterChecklist':['Set\x20service_identifier\x20to\x20pin\x20the\x20answering\x20service;\x20leave\x20None\x20for\x20open\x20presentation'],'auditorChecklist':['Origin\x20of\x20service_identifier;\x20if\x20submission,\x20who\x20can\x20present\x20what']},{'object':'Machine','field':'node.pair.forward.guard\x20(ForwardGuard)','mode':'gate+source','extraction':[{'name':'retained_submission\x20(vector<u8>\x20identifiers)','meaning':'Submission\x20values\x20retained\x20into\x20Progress\x20Holder.retained_submission\x20(e.g.\x20sub-order\x20/\x20procured-service\x20evidence)\x20when\x20the\x20forward\x20executes','allowedOrigins':['submission'],'typeConstraint':'identifiers\x20must\x20exist\x20as\x20retained\x20submission\x20slots\x20(per-slot\x20checks,\x20E_SUBMISSION_SLOT_MISSING\x20/\x20E_SUBMISSION_SLOT_NOT_RETAINED)','configCheck':'configuring\x20the\x20guarded\x20forward\x20validates\x20the\x20identifiers\x20against\x20the\x20guard\x20table','runtimeFallback':'empty\x20list\x20->\x20gate\x20only,\x20nothing\x20retained;\x20non-empty\x20->\x20the\x20submitted\x20values\x20are\x20copied\x20into\x20the\x20session\x20history','riskNotes':['This\x20is\x20the\x20mechanism\x20that\x20carries\x20sub-order\x20data\x20from\x20an\x20operator\x27s\x20passport\x20into\x20the\x20order\x27s\x20Progress\x20history\x20—\x20downstream\x20analyzers\x20read\x20it\x20(ACTIVE-SESSION\x20queries\x201266-1268\x20+\x201279\x20count;\x20HISTORY-side\x20value\x20read\x20=\x201281\x20progress.history.session.forward.retained_submission.value,\x20which\x20stays\x20readable\x20after\x20the\x20session\x20migrates\x20into\x20history)','Pre-flight\x20probes\x20(read-only,\x20zero\x20gas):\x20the\x20guard\x20query\x20surface\x20exposes\x20a\x20single-slot\x20retention\x20probe\x20(guard,\x20identifier)\x20and\x20a\x20batch\x20slot-defect\x20probe\x20(guard,\x20submission_ids)\x20—\x20the\x20batch\x20form\x20returns\x20the\x20FULL\x20defect\x20list\x20as\x20ordered\x202-byte\x20records\x20([0,\x20id]\x20=\x20slot\x20missing\x20from\x20the\x20guard\x20table,\x20[1,\x20id]\x20=\x20declared\x20but\x20NOT\x20retained\x20at\x20the\x20current\x20progress\x20point;\x20an\x20EMPTY\x20vector\x20=\x20every\x20requested\x20slot\x20is\x20eligible).\x20Probe\x20before\x20forwarding\x20a\x20guarded\x20node\x20so\x20the\x20aborts\x20E_SUBMISSION_SLOT_MISSING\x20(23)\x20/\x20E_SUBMISSION_SLOT_NOT_RETAINED\x20(24)\x20are\x20caught\x20off-chain\x20instead\x20of\x20surfacing\x20mid-machine']}],'gateBehavior':'progress\x20node\x20advancement\x20with\x20a\x20passport:\x20guard\x20is\x20the\x20optional\x20pre/post\x20verification\x20layer\x20for\x20advancing\x20a\x20node;\x20namedOperator/permissionIndex\x20can\x20be\x20replaced\x20by\x20a\x20guard','setterChecklist':['Choose\x20which\x20submission\x20slots\x20are\x20worth\x20retaining\x20as\x20durable\x20evidence','Remember\x20the\x20order\x20of\x20verification:\x20dependent\x20guards\x20must\x20be\x20added\x20to\x20the\x20passport\x20first'],'auditorChecklist':['For\x20each\x20guarded\x20forward:\x20does\x20the\x20retained\x20data\x20actually\x20prove\x20the\x20transition\x20claim\x20(sub-order\x20id,\x20amount)?']},{'object':'Allocation','field':'allocators[].guard\x20(Allocator)','mode':'gate+source','extraction':[{'name':'sharing\x20Recipient::GuardIdentifier','meaning':'Payout\x20recipient\x20address\x20for\x20that\x20sharing\x20line','allowedOrigins':['submission','fixed'],'typeConstraint':ADDRESS,'configCheck':'recipient\x20must\x20be\x20a\x20valid\x20address\x20(ERECIPIENT_IDENTIFIER_NOT_ADDRESS)','runtimeFallback':'Entity/Signer\x20sharing\x20variants\x20bypass\x20extraction','riskNotes':['submission\x20origin\x20=\x20the\x20passport\x20builder\x20decides\x20the\x20split\x20destination\x20at\x20alloc()\x20time\x20—\x20the\x20ALC1\x20audit\x20treats\x20an\x20unbound\x20recipient\x20as\x20a\x20redirect\x20risk','for_object\x20anchor\x20(protocol\x20139):\x20when\x20the\x20Allocation\x27s\x20payment_info.for_object\x20is\x20Some,\x20alloc()\x20enforces\x20submitted\x20address\x20==\x20for_object\x20and\x20aborts\x20with\x20ERECIPIENT_NOT_FOR_OBJECT\x20(15)\x20on\x20mismatch\x20—\x20the\x20anchor\x20is\x20mechanism-enforced,\x20not\x20advisory','for_object\x20=\x20None\x20carries\x20NO\x20anchor:\x20nothing\x20is\x20enforced\x20on-chain\x20and\x20the\x20recipient\x20semantics\x20are\x20entirely\x20the\x20creator\x27s\x20business\x20(Allocation\x20is\x20a\x20generic\x20component;\x20only\x20host\x20flows\x20that\x20declare\x20a\x20binding\x20get\x20the\x20anchor)']}],'gateBehavior':'alloc:\x20the\x20passed\x20guard\x20address\x20must\x20equal\x20the\x20registered\x20allocator\x20guard;\x20the\x20passport\x20verification\x20must\x20pass;\x20AllocationEvent\x20records\x20which\x20guard\x20ran','setterChecklist':['Bind\x20recipient\x20slots\x20inside\x20the\x20guard\x20expression\x20(signer\x20==\x20authorized\x20party,\x20state\x20==\x20expected\x20scope)\x20exactly\x20as\x20ALC1\x20expects','A\x20submission\x20slot\x20with\x20NO\x20scope\x20binding\x20=\x20HIGH\x20severity\x20finding','When\x20setting\x20payment_info:\x20for_object\x20=\x20Some\x20turns\x20it\x20into\x20an\x20enforced\x20anchor\x20—\x20every\x20GuardIdentifier\x20recipient\x20submission\x20must\x20equal\x20that\x20address\x20or\x20alloc()\x20aborts\x20(code\x2015);\x20verify\x20the\x20anchor\x20matches\x20the\x20intended\x20recipient\x20flow\x20BEFORE\x20create\x20(payment_info\x20is\x20immutable\x20after\x20create)','for_object\x20=\x20None\x20is\x20legal:\x20no\x20on-chain\x20anchor,\x20recipient\x20routing\x20is\x20then\x20purely\x20the\x20creator\x27s\x20design\x20—\x20flag\x20this\x20explicitly\x20in\x20the\x20plan\x20so\x20the\x20user\x20decides'],'auditorChecklist':['Cross-scenario\x20settlement\x20residual:\x20a\x20guard\x20bound\x20to\x20one\x20host\x20but\x20reusable\x20across\x20unrelated\x20callers\x20of\x20other\x20hosts','Every\x20submission\x20recipient\x20slot\x20must\x20have\x20a\x20scope\x20binding\x20(guard\x20expression\x20or\x20payment_info.for_object\x20anchor)\x20—\x20otherwise\x20funds\x20can\x20be\x20redirected','Check\x20payment_info.for_object:\x20Some\x20=\x20confirmed\x20enforced\x20anchor\x20(compare\x20against\x20intended\x20recipients);\x20None\x20=\x20trust-on-creator,\x20no\x20on-chain\x20enforcement\x20of\x20the\x20GuardIdentifier\x20destination']},{'object':'Payment','field':'info.for_guard\x20(PaymentInfo)','mode':'source','extraction':[{'name':'for_guard','meaning':'Provenance:\x20records\x20which\x20guard\x20context\x20produced\x20this\x20payment;\x20creates\x20an\x20object-linker\x20affiliation','allowedOrigins':['fixed'],'typeConstraint':'guard\x20address\x20(set\x20when\x20the\x20payment\x20info\x20is\x20created\x20with\x20a\x20guard\x20attached\x20—\x20the\x20payment_info_with_guard\x20variants)','configCheck':'n/a\x20—\x20plain\x20address\x20copy','runtimeFallback':'None\x20->\x20no\x20provenance','riskNotes':['Not\x20a\x20gate,\x20not\x20a\x20submission\x20slot\x20—\x20pure\x20traceability\x20(queries\x201057/1058,\x201108/1109)']}],'gateBehavior':'None','setterChecklist':['Attach\x20for_guard\x20when\x20the\x20payment\x20originates\x20from\x20a\x20guarded\x20flow'],'auditorChecklist':['Use\x20it\x20to\x20trace\x20payment\x20history\x20back\x20to\x20the\x20guarding\x20decision']},{'object':'Permission','field':'table\x20keys\x20(guard\x20addresses\x20as\x20permission\x20subjects)','mode':'gate','extraction':[],'gateBehavior':'A\x20guard\x20ADDRESS\x20can\x20be\x20granted\x20permission\x20indexes\x20like\x20a\x20user.\x20A\x20passport-asserted\x20operation\x20collects\x20the\x20passport\x20impack\x20guard\x20list\x20and\x20checks\x20permission\x20indexes\x20against\x20it:\x20a\x20passing\x20guard\x20can\x20therefore\x20carry\x20authorization\x20for\x20the\x20whole\x20transaction','setterChecklist':['Granting\x20an\x20index\x20to\x20a\x20guard\x20address\x20delegates\x20that\x20authority\x20to\x20anyone\x20who\x20can\x20pass\x20the\x20guard\x20—\x20treat\x20like\x20a\x20role\x20grant'],'auditorChecklist':['List\x20permission\x20subjects\x20that\x20are\x20guard\x20addresses;\x20evaluate\x20who\x20can\x20pass\x20those\x20guards\x20(they\x20inherit\x20the\x20permission)']}];export const VALUE_ORIGIN_SEMANTICS={'fixed':'Value\x20baked\x20into\x20the\x20guard\x20table\x20(b_submission=false).\x20Deterministic\x20on\x20every\x20use;\x20frozen\x20after\x20create;\x20used\x20as\x20the\x20fallback\x20when\x20no\x20submission\x20is\x20supplied.','submission':'Value\x20supplied\x20by\x20the\x20passport\x20builder\x20at\x20guard_add\x20time\x20(b_submission=true),\x20type-checked\x20against\x20the\x20table.\x20Whoever\x20builds\x20the\x20passport\x20controls\x20the\x20value\x20—\x20always\x20ask\x20who\x20that\x20is.','query':'Value\x20that\x20exists\x20only\x20inside\x20the\x20guard\x20input\x20expression\x20(native\x20query\x20opcodes\x201xxx).\x20It\x20constrains\x20verification\x20(state\x20coupling)\x20but\x20is\x20never\x20extractable;\x20extraction\x20slots\x20must\x20be\x20fixed\x20or\x20submission.'};export const GUARD_PASSPORT_DOCTRINE=['Slot\x20value\x20resolution\x20order:\x20passport\x20submission\x20value\x20->\x20fixed\x20guard\x20table\x20value\x20->\x20abort\x20(E_SUBMISSION_ID_NOT_FOUND).\x20A\x20slot\x20with\x20no\x20submission\x20and\x20no\x20fixed\x20value\x20aborts\x20the\x20host\x20call.','A\x20guard\x20only\x20participates\x20if\x20its\x20passport\x20verification\x20passes,\x20and\x20it\x20must\x20be\x20marked\x20impack\x20when\x20the\x20host\x20extracts\x20data\x20from\x20it\x20(result_for_permission\x20returns\x20impack\x20guards\x20only).','The\x20impack\x20list\x20is\x20snapshotted\x20before\x20verify()\x20runs;\x20repository\x20quote_guard\x20membership\x20is\x20checked\x20against\x20this\x20snapshot\x20inside\x20the\x20native\x20verifier\x20—\x20and\x20the\x20same\x20gate\x20now\x20covers\x20every\x20data-row\x20read\x20(1167\x20fetch,\x201173/1174/1176\x20predicate\x20queries,\x201177\x20keys-where),\x20not\x20just\x20the\x20plain\x20fetch.','relies:\x20a\x20guard\x20may\x20depend\x20on\x20at\x20most\x204\x20other\x20guards\x20(MAX_DEPENDED_COUNT),\x20dependent\x20guards\x20must\x20be\x20added\x20to\x20the\x20passport\x20first,\x20and\x20the\x20combine\x20logic\x20is\x20relies_logic_and\x20(AND\x20default,\x20OR\x20optional).','Dependency\x20eligibility\x20of\x20a\x20guard\x20=\x20relies\x20empty\x20AND\x20immutable\x20AND\x20rep\x20—\x20the\x20only\x20shape\x20accepted\x20as\x20a\x20repository\x20quote_guard\x20or\x20as\x20a\x20relied-upon\x20guard.','Guards\x20are\x20frozen\x20on\x20create\x20(immutable=true);\x20changing\x20a\x20fixed\x20value\x20means\x20deploying\x20a\x20new\x20guard\x20and\x20re-registering\x20it\x20on\x20every\x20host\x20object.','Type\x20checks\x20happen\x20at\x20config\x20time\x20(submission\x20value\x20type\x20/\x20address\x20format\x20/\x20address\x20compatibility)\x20and\x20at\x20passport\x20build\x20time\x20(the\x20first\x20type\x20byte\x20of\x20each\x20submitted\x20value\x20is\x20compared\x20against\x20the\x20table);\x20runtime\x20aborts\x20are\x20the\x20last\x20resort.','Allocation\x20for_object\x20anchor\x20(protocol\x20139):\x20the\x20Allocation\x27s\x20payment_info.for_object,\x20when\x20Some,\x20is\x20enforced\x20inside\x20alloc()\x20—\x20every\x20Recipient::GuardIdentifier\x20submission\x20must\x20equal\x20that\x20address\x20(abort\x20ERECIPIENT_NOT_FOR_OBJECT\x2015).\x20When\x20None,\x20no\x20anchor\x20exists\x20and\x20the\x20GuardIdentifier\x20destination\x20is\x20whoever\x20builds\x20the\x20passport\x27s\x20choice:\x20entirely\x20the\x20creator\x27s\x20business.\x20Allocation\x20is\x20a\x20generic\x20component\x20—\x20the\x20anchor\x20is\x20opt-in\x20per\x20instance,\x20not\x20a\x20host-flow\x20constant.'];export function guardSitesFor(a){return GUARD_FIELD_SITES['filter'](b=>b['object']['toLowerCase']()===a['toLowerCase']());}export function guardCognitionDoctrine(){return['Classify\x20the\x20mode\x20first:\x20pure\x20gate\x20(authorization\x20only),\x20pure\x20source\x20(data\x20only),\x20or\x20gate+source\x20(most\x20money\x20fields).','For\x20every\x20extracted\x20slot,\x20name\x20its\x20origin\x20(fixed\x20/\x20submission\x20/\x20query)\x20before\x20judging\x20safety.','For\x20submission\x20slots,\x20identify\x20the\x20passport\x20builder:\x20that\x20party\x20chooses\x20the\x20value.\x20Trace\x20what\x20constrains\x20it\x20(guard\x20expression,\x20host-side\x20balance/authorization\x20checks).','For\x20fixed\x20slots,\x20remember\x20immutability:\x20the\x20value\x20is\x20policy,\x20changed\x20only\x20by\x20re-issuing\x20the\x20guard.','For\x20query-coupled\x20guards,\x20map\x20each\x20query\x20id\x20to\x20its\x20data\x20dependency\x20(which\x20object,\x20which\x20field)\x20—\x20the\x20guard\x20is\x20only\x20as\x20fresh\x20as\x20the\x20queried\x20state.','Check\x20config-time\x20invariants:\x20type\x20of\x20each\x20slot,\x20registration\x20limits\x20(treasury\x20100\x20deposit\x20/\x20200\x20withdraw\x20/\x20reward\x20200\x20/\x20arbitration\x2050\x20/\x20repository\x2010\x20write\x20guards\x20per\x20policy),\x20relies\x20<=\x204,\x20submission\x20size\x20<=\x204096\x20bytes\x20(v140;\x20fits\x20a\x20100-address\x20roster\x20witness).','Report\x20any\x20submission\x20slot\x20that\x20decides\x20money\x20destination\x20or\x20amount\x20without\x20a\x20scope\x20binding\x20as\x20a\x20HIGH-severity\x20redirect\x20risk.'];}export const REPOSITORY_WRITE_ROUTE_MATRIX=[{'route':'auto_id_write','purpose':'Unguarded\x20auto-id\x20write:\x20policy\x20has\x20NO\x20write\x20guards\x20and\x20id_from\x20is\x20Clock/Signer.','idSource':'clock','dataSource':'caller','honorsIdFromSubmission':![],'honorsDataFromSubmission':![],'guardRequirement':'policy-write-guard-must-be-empty','abortsOnUnhonoredSlots':![],'removeRoute':'auto_id_remove'},{'route':'auto_id_write_guarded','purpose':'Guarded\x20auto-id\x20write:\x20id\x20auto-generated;\x20the\x20guard\x20authorizes\x20AND\x20may\x20supply\x20the\x20data\x20payload\x20via\x20data_from_submission.','idSource':'clock','dataSource':'submission-if-set-else-caller','honorsIdFromSubmission':![],'honorsDataFromSubmission':!![],'guardRequirement':'specified-guard-must-be-in-policy','abortsOnUnhonoredSlots':![],'removeRoute':'auto_id_remove_guarded'},{'route':'manual_id_write','purpose':'Unguarded\x20manual\x20write:\x20caller\x20supplies\x20id\x20AND\x20data;\x20policy\x20must\x20have\x20no\x20write\x20guards.','idSource':'caller','dataSource':'caller','honorsIdFromSubmission':![],'honorsDataFromSubmission':![],'guardRequirement':'policy-write-guard-must-be-empty','abortsOnUnhonoredSlots':![],'removeRoute':'manual_id_remove'},{'route':'manual_id_write_guarded','purpose':'Guarded\x20manual\x20write:\x20caller\x20supplies\x20id\x20AND\x20data;\x20the\x20guard\x20authorizes\x20only.\x20Extraction\x20slots\x20must\x20be\x20None.','idSource':'caller','dataSource':'caller','honorsIdFromSubmission':![],'honorsDataFromSubmission':![],'guardRequirement':'specified-guard-must-be-in-policy','abortsOnUnhonoredSlots':!![],'removeRoute':'manual_id_remove_guarded'},{'route':'mixed_id_write_guarded','purpose':'Mixed\x20write:\x20per\x20specified\x20guard,\x20id\x20comes\x20from\x20id_from_submission\x20(else\x20caller\x20vector)\x20and\x20data\x20from\x20data_from_submission\x20(else\x20caller\x20vector).\x20Requires\x20policy\x20id_from\x20==\x20NONE.','idSource':'submission-if-set-else-caller','dataSource':'submission-if-set-else-caller','honorsIdFromSubmission':!![],'honorsDataFromSubmission':!![],'guardRequirement':'each-specified-guard-must-be-in-policy','abortsOnUnhonoredSlots':![],'removeRoute':'mixed_id_remove_guarded'},{'route':'mixed_id_remove_guarded','purpose':'Mixed\x20removal:\x20deletes\x20the\x20record\x20whose\x20id\x20is\x20extracted\x20from\x20id_from_submission.\x20Requires\x20the\x20slot\x20to\x20be\x20SET.','idSource':'submission-if-set-else-caller','dataSource':'none','honorsIdFromSubmission':!![],'honorsDataFromSubmission':![],'guardRequirement':'each-specified-guard-must-be-in-policy','abortsOnUnhonoredSlots':!![]}];export function repositoryRouteSlotConflicts(a){const b=[],{idFrom:c,writeGuardCount:d,idFromSubmissionSet:e,dataFromSubmissionSet:f,intendedRoute:g}=a;return c==='none'&&d===0x0&&b['push']('E_POLICY_WRITE_GUARD_REQUIRED:\x20id_from=NONE\x20with\x20an\x20empty\x20write_guard\x20lets\x20anyone\x20mutate\x20the\x20policy\x20data'),c!=='none'&&e&&b['push']('E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN:\x20id\x20is\x20auto-generated\x20(clock/signer);\x20id_from_submission\x20can\x20never\x20fire'),(g==='manual_id_write_guarded'||g==='manual_id_remove_guarded')&&((e||f)&&b['push']('E_GUARD_SPECIFIED_ID_FROM_SUBMISSION:\x20the\x20chosen\x20route\x20rejects\x20every\x20extraction\x20slot;\x20use\x20the\x20mixed\x20guarded\x20write\x20or\x20the\x20guarded\x20auto-id\x20write\x20instead')),g==='auto_id_write_guarded'&&e&&b['push']('id_from_submission\x20is\x20never\x20consumed\x20by\x20the\x20guarded\x20auto-id\x20write\x20(id\x20is\x20auto-generated);\x20the\x20slot\x20is\x20dead\x20config'),g==='mixed_id_write_guarded'&&c!=='none'&&b['push']('E_POLICY_ID_FROM_NONE:\x20the\x20mixed\x20guarded\x20write\x20requires\x20policy\x20id_from=NONE'),g==='mixed_id_remove_guarded'&&!e&&b['push']('E_GUARD_NOT_SPECIFIED_ID_FROM_SUBMISSION:\x20mixed\x20removal\x20has\x20no\x20id\x20source;\x20set\x20id_from_submission\x20or\x20use\x20the\x20guarded\x20manual\x20removal\x20route'),b;}

package/dist/knowledge/guard-host-context.js

@@ -1 +1 @@
-export const BINDING_VERIFIER='guard-binding-verifier.ts\x20(shipped)';export const GUARD_HOST_CONTEXTS=[{'host':'machine_forward','evaluation_timing':'Every\x20tx\x20that\x20advances\x20the\x20edge\x20—\x20evaluated\x20per\x20call,\x20aborts\x20the\x20tx\x20on\x20failure','signer_subject':'The\x20node\x20ADVANCER\x20(operator,\x20keeper,\x20or\x20the\x20party\x20driving\x20the\x20workflow\x20step)','order_anchor':'YES\x20—\x20the\x20order\x20carrying\x20the\x20progress\x20is\x20in\x20scope;\x20order.*\x20queries\x20resolve\x20against\x20it\x20(T10:\x20bind\x20identity\x20legs\x20to\x20task-binding\x20slot\x20254,\x20never\x20a\x20free\x20submission\x20slot)','submission_channel':'Passport\x20carry-on\x20(task-guarded\x20edges\x20declare\x20slots\x20like\x20254;\x20undeclared\x20slots\x20make\x20the\x20edge\x20abort)','identity_obligation':'Caller\x20must\x20be\x20bound\x20to\x20the\x20workflow\x27s\x20operator\x20set\x20(order.owner\x20/\x20order.agent\x20has\x20/\x20named\x20operator\x20/\x20permission)\x20—\x20this\x20is\x20the\x20SOLE\x20identity\x20check\x20when\x20namedOperator\x20is\x20\x22\x22','typical_mistakes':['Identity\x20leg\x20anchored\x20to\x20a\x20free\x20submission\x20slot\x20(T10\x20hijack\x20—\x20attacker\x20submits\x20their\x20own\x20order\x20at\x20slot\x20254)','Reusing\x20a\x20buy-guard\x20here:\x20the\x20buyer\x20identity\x20is\x20NOT\x20the\x20advancer\x20identity'],'derived_rules':[{'id':'MF_SLOT_IDENTITY_ANCHOR','requirement':'Identity\x20legs\x20on\x20task-guarded\x20edges\x20must\x20anchor\x20to\x20the\x20edge\x27s\x20declared\x20task-binding\x20slot,\x20never\x20a\x20free\x20submission\x20slot\x20the\x20caller\x20controls\x20(T10\x20hijack)','enforced_by':BINDING_VERIFIER},{'id':'PERM_INDEX_UNRESOLVED','requirement':'An\x20edge\x20declaring\x20permission_index\x20references\x20must\x20resolve\x20against\x20the\x20host\x20Service\x27s\x20Permission\x20face\x20(at\x20least\x20one\x20entity\x20grant\x20per\x20index)\x20—\x20an\x20ungranted\x20index\x20makes\x20the\x20edge\x20un\x20executable\x20for\x20everyone\x20(R7-01,\x20rex7\x20o9:\x20ArbRefund\x201002\x20vs\x20entity_count\x200\x20welded\x20the\x20winning-relief\x20track)','enforced_by':BINDING_VERIFIER}]},{'host':'service_allocator_guard','evaluation_timing':'When\x20a\x20tx\x20reaches\x20the\x20allocator\x20(settlement\x20trigger)\x20—\x20the\x20rail\x27s\x20guard\x20decides\x20whether\x20the\x20payout\x20route\x20opens','signer_subject':'The\x20SETTLEMENT\x20TRIGGERER\x20—\x20possibly\x20ANY\x20address\x20(the\x20allocator\x20entry\x20does\x20not\x20check\x20who\x20calls)','order_anchor':'YES\x20for\x20order-bound\x20rails\x20(the\x20allocator\x20resolves\x20the\x20order\x27s\x20escrow);\x20progress.current\x20is\x20available.\x20order.claimed_by\x20exists\x20but\x20is\x20OFF-LIMITS\x20on\x20fund\x20rails\x20(decision\x2011\x20two-rail\x20independence:\x20a\x20rail\x20whose\x20satisfiability\x20flips\x20on\x20the\x20claimed\x20axis\x20is\x20the\x20RAIL_CLAIMED_BY_LEG\x20critical)','submission_channel':'Passport\x20of\x20the\x20triggering\x20tx\x20(usually\x20absent\x20or\x20minimal\x20—\x20do\x20not\x20rely\x20on\x20submission\x20slots\x20here)','identity_obligation':'Must\x20bind\x20the\x20triggerer\x20(context(Signer)\x20comparison,\x20order.agent\x20has,\x20permission.*)\x20UNLESS\x20the\x20scene\x20verifies\x20identity\x20upstream\x20(level3_scene_combined)\x20or\x20the\x20venue\x20is\x20intentionally\x20open-trigger\x20—\x20otherwise\x20any\x20bystander\x20can\x20accelerate/drain\x20the\x20payout\x20(sahr).\x20Machine-enforced\x20check:\x20RAIL_NO_CALLER_IDENTITY\x20(info\x20disclosure)','typical_mistakes':['Pasting\x20a\x20forward-edge\x20identity\x20guard\x20here\x20—\x20it\x20binds\x20the\x20WRONG\x20subject\x20(advancer\x20vs\x20settlement\x20triggerer)','No\x20identity\x20leg\x20at\x20all\x20on\x20a\x20non-open\x20venue','Requiring\x20submission\x20slots\x20that\x20the\x20settlement\x20tx\x20never\x20carries'],'derived_rules':[{'id':'RAIL_NO_CALLER_IDENTITY','requirement':'An\x20allocator\x20gate\x20with\x20no\x20caller-identity\x20leg\x20is\x20triggerable\x20by\x20any\x20address\x20—\x20disclosure;\x20legitimate\x20only\x20for\x20scene-verified\x20or\x20intentionally\x20open-trigger\x20venues','enforced_by':'allocator-rail-verifier.ts\x20(shipped,\x20info)'},{'id':'RAIL_TERMINAL_UNCOVERED','requirement':'Every\x20machine\x20terminal\x20state\x20must\x20have\x20a\x20satisfiable\x20rail\x20through\x20some\x20allocator\x20row','enforced_by':'allocator-rail-verifier.ts\x20(shipped)'},{'id':'RAIL_AWARD_EXIT_MISSING','requirement':'Every\x20terminal\x20—\x20including\x20the\x20terminals\x20an\x20awarded\x20order\x20rests\x20at\x20—\x20must\x20keep\x20a\x20fund\x20exit\x20row\x20on\x20the\x20NODE\x20axis,\x20else\x20escrow\x20strands\x20(decision\x2011:\x20coverage\x20is\x20node-keyed,\x20never\x20claimed-keyed)','enforced_by':'allocator-rail-verifier.ts\x20(shipped)'},{'id':'RAIL_CLAIMED_BY_LEG','requirement':'Decision\x2011\x20two-rail\x20independence:\x20a\x20fund\x20rail\x20whose\x20satisfiability\x20flips\x20on\x20the\x20order.claimed_by\x20axis\x20READS\x20the\x20payout\x20stamp\x20—\x20fund\x20rails\x20are\x20node-gated\x20only;\x20the\x20award\x20is\x20the\x20indemnity\x20track\x27s\x20separate\x20commercial\x20payout\x20(double\x20collection\x20is\x20legal,\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate)','enforced_by':'allocator-rail-verifier.ts\x20(shipped,\x20critical)'},{'id':'RAIL_DEAD_LITERAL','requirement':'Sibling\x20literals\x20contradicting\x20a\x20conjunction-scoped\x20equality\x20are\x20unsatisfiable\x20—\x20dead\x20rows\x20strand\x20the\x20states\x20they\x20were\x20meant\x20to\x20serve','enforced_by':'allocator-rail-verifier.ts\x20(shipped)'}]},{'host':'reward_claim','evaluation_timing':'At\x20the\x20reward\x20claim\x20tx\x20(the\x20claimant\x27s\x20tx)\x20—\x20before\x20the\x20once-slot\x20is\x20consumed','signer_subject':'The\x20CLAIMANT\x20(whoever\x20signs\x20the\x20claim\x20tx)','order_anchor':'NO\x20by\x20default\x20—\x20the\x20Reward\x20object\x20carries\x20no\x20order\x20context;\x20order.*\x20legs\x20have\x20nothing\x20to\x20resolve\x20against\x20UNLESS\x20the\x20guard\x27s\x20table\x20declares\x20an\x20order-slot\x20submission\x20that\x20the\x20claimant\x27s\x20passport\x20fills\x20(per-order\x20bounty\x20shape:\x20guard\x20+\x20store_from\x20scoping)','submission_channel':'Passport\x20submission\x20on\x20the\x20claim\x20tx\x20(the\x20submitted-object\x20slots),\x20or\x20constant\x20table\x20entries\x20only','identity_obligation':'Identity,\x20when\x20required,\x20must\x20ride\x20the\x20submission\x20channel\x20(e.g.\x20an\x20order-owner\x20slot\x20filled\x20by\x20the\x20claimant\x27s\x20passport)\x20—\x20NOT\x20order.*\x20direct\x20reads;\x20per-order\x20once-scoping\x20comes\x20from\x20the\x20claim\x20key\x20(recipient,\x20guard,\x20store_from)\x20with\x20the\x20v139\x20store_from\x20behavior,\x20not\x20from\x20guard\x20legs','typical_mistakes':['order.owner\x20/\x20progress.current\x20legs\x20pasted\x20from\x20a\x20forward\x20guard\x20—\x20they\x20abort\x20or\x20mislead\x20(no\x20order\x20anchor\x20in\x20the\x20claim\x20context)','Assuming\x20per-order\x20once\x20semantics\x20without\x20the\x20store_from\x20binding'],'derived_rules':[{'id':'RC_NO_ORDER_ANCHOR','requirement':'order.*\x20/\x20progress.*\x20query\x20legs\x20are\x20structurally\x20dead\x20here\x20(no\x20order\x20anchor\x20in\x20the\x20claim\x20context)\x20unless\x20an\x20order-slot\x20submission\x20is\x20declared','enforced_by':BINDING_VERIFIER}]},{'host':'service_buy_guard','evaluation_timing':'Inside\x20the\x20purchase\x20tx\x20itself,\x20before\x20the\x20order\x20is\x20created','signer_subject':'The\x20BUYER\x20(tx\x20sender)','order_anchor':'NO\x20—\x20the\x20order\x20does\x20not\x20exist\x20yet;\x20only\x20service-side\x20and\x20repository/permission\x20state\x20is\x20readable','submission_channel':'Passport\x20supplied\x20with\x20the\x20purchase','identity_obligation':'Buyer\x20binding\x20per\x20the\x20venue\x20policy\x20(level1\x20strict\x20single\x20/\x20level2\x20allowlist\x20/\x20level3\x20scene-verified)','typical_mistakes':['Reading\x20order.*\x20state\x20(nothing\x20exists\x20yet\x20—\x20aborts\x20or,\x20pre-136\x20semantics,\x20resolves\x20nothing)','Escrow/funding\x20checks\x20that\x20belong\x20to\x20the\x20allocator\x20rail\x20instead'],'derived_rules':[{'id':'SB_NO_ORDER_STATE','requirement':'order.*\x20query\x20legs\x20are\x20structurally\x20dead\x20(the\x20order\x20does\x20not\x20exist\x20inside\x20the\x20purchase\x20tx)','enforced_by':BINDING_VERIFIER}]},{'host':'arbitration_voting','evaluation_timing':'At\x20arbitration\x20vote\x20casts\x20/\x20resolution\x20entry\x20—\x20per\x20voting-rule\x20evaluation','signer_subject':'The\x20VOTER\x20/\x20arbitrator\x20operator','order_anchor':'Indirect\x20—\x20the\x20Arb\x20case\x20is\x20in\x20scope\x20(arb.*\x20queries);\x20the\x20underlying\x20order\x20is\x20reachable\x20through\x20the\x20case\x20when\x20the\x20flow\x20passes\x20it','submission_channel':'Passport\x20of\x20the\x20voter\x27s\x20tx','identity_obligation':'Voter\x20must\x20satisfy\x20the\x20voting_guard\x27s\x20weight/eligibility\x20rule\x20(or\x20the\x20arb\x20is\x20open-vote\x20by\x20design)','typical_mistakes':['Treating\x20the\x20arb\x20case\x20as\x20an\x20order\x20(arb.*\x20fields\x20differ\x20from\x20order.*\x20fields)','Evidence\x20legs\x20(arb.indemnity)\x20used\x20where\x20the\x20variant\x20is\x20not\x20guaranteed\x20(enum\x20payload\x20aborts)'],'derived_rules':[{'id':'AV_ARB_NAMESPACE','requirement':'Case-scoped\x20queries\x20must\x20use\x20arb.*\x20fields\x20—\x20order.*\x20fields\x20do\x20not\x20resolve\x20against\x20an\x20Arb\x20case','enforced_by':BINDING_VERIFIER}]},{'host':'progress_submission','evaluation_timing':'At\x20progress\x20submission/attestation\x20points\x20(history-bearing\x20edges)','signer_subject':'The\x20SUBMITTER\x20(operator\x20or\x20buyer\x20attestant)','order_anchor':'YES\x20—\x20same\x20order\x20context\x20as\x20machine_forward','submission_channel':'The\x20submission\x20payload\x20itself\x20(this\x20host\x27s\x20purpose\x20is\x20filling\x20history/slots)','identity_obligation':'Submitter\x20binding\x20mirrors\x20the\x20forward-edge\x20obligation\x20for\x20the\x20edge\x20it\x20rides','typical_mistakes':['Skipping\x20the\x20identity\x20leg\x20because\x20\x27it\x27s\x20just\x20an\x20attestation\x27\x20—\x20attestations\x20are\x20replayable\x20without\x20one'],'derived_rules':[{'id':'PS_IDENTITY_REQUIRED','requirement':'Every\x20attestation\x20edge\x20must\x20carry\x20an\x20identity\x20leg\x20—\x20attestations\x20are\x20replayable\x20without\x20one','enforced_by':BINDING_VERIFIER}]},{'host':'repository_write','evaluation_timing':'At\x20the\x20write-guarded\x20repository\x20op\x20(data\x20upsert\x20through\x20a\x20guarded\x20channel)','signer_subject':'The\x20WRITER','order_anchor':'Only\x20if\x20the\x20row\x20is\x20order-keyed\x20and\x20the\x20op\x20passes\x20it;\x20row-key\x20semantics\x20are\x20the\x20guard\x27s\x20own\x20business','submission_channel':'Passport\x20of\x20the\x20writing\x20tx\x20(quote_guard\x20references\x20must\x20be\x20in\x20the\x20impack\x20list\x20—\x20QUOTE-GUARD\x20CARRY)','identity_obligation':'Writer\x20must\x20be\x20a\x20trusted\x20role\x20for\x20the\x20key\x20family\x20(permission-resolved\x20patterns)\x20—\x20repository\x20rows\x20feed\x20aggregates\x20(sum/count)\x20that\x20other\x20guards\x20price\x20against','typical_mistakes':['Open-write\x20rows\x20feeding\x20SUM_BOUND\x20pricing\x20aggregates\x20(forgery\x20by\x20write)','Missing\x20quote_guard\x20in\x20the\x20passport\x20(aborts\x20fail-closed)'],'derived_rules':[{'id':'RW_QUOTE_GUARD_CARRY','requirement':'Guard\x20trees\x20reading\x20governed\x20repository\x20rows\x20require\x20the\x20row\x20policy\x27s\x20quote_guard\x20in\x20the\x20reading\x20passport\x27s\x20impack\x20(QUOTE-GUARD\x20CARRY)','enforced_by':BINDING_VERIFIER},{'id':'RW_OPEN_WRITE_FEEDS_AGGREGATE','requirement':'Open-write\x20rows\x20must\x20not\x20feed\x20SUM/COUNT\x20aggregates\x20that\x20other\x20guards\x20price\x20against\x20(forgery\x20by\x20write)','enforced_by':BINDING_VERIFIER}]},{'host':'gen_passport','evaluation_timing':'At\x20passport\x20generation\x20(issuance\x20gating)','signer_subject':'The\x20PASSPORT\x20REQUESTER','order_anchor':'Service-side\x20state\x20only\x20(same\x20posture\x20as\x20service_buy_guard)','submission_channel':'n/a\x20(the\x20passport\x20is\x20the\x20product\x20of\x20this\x20host)','identity_obligation':'Issuance\x20policy\x20per\x20the\x20venue\x20(who\x20may\x20hold\x20a\x20passport)','typical_mistakes':['Order-dependent\x20issuance\x20legs\x20(no\x20order\x20exists\x20at\x20issuance\x20time)'],'derived_rules':[{'id':'GP_NO_ORDER_AT_ISSUANCE','requirement':'Order-dependent\x20issuance\x20legs\x20are\x20structurally\x20dead\x20(no\x20order\x20exists\x20at\x20issuance\x20time)','enforced_by':BINDING_VERIFIER}]},{'host':'treasury_external_deposit','evaluation_timing':'At\x20the\x20external\x20deposit\x20tx\x20—\x20the\x20guard\x20runs\x20against\x20the\x20depositor\x27s\x20passport\x20BEFORE\x20any\x20balance\x20credit','signer_subject':'The\x20DEPOSITOR\x20(tx\x20sender,\x20passport\x20carrier)\x20—\x20the\x20guard\x20gates\x20who\x20may\x20fund\x20the\x20treasury\x20through\x20this\x20channel','order_anchor':'NO\x20—\x20the\x20treasury\x20has\x20no\x20order\x20scope;\x20order.*\x20legs\x20have\x20nothing\x20to\x20resolve\x20against','submission_channel':'The\x20deposit\x20passport\x27s\x20submissions:\x20the\x20optional\x20amount\x20identifier\x20resolves\x20a\x20NUMBER\x20slot\x20(type-asserted\x20at\x20bind\x20time);\x20the\x20optional\x20store_from_id\x20resolves\x20an\x20ADDRESS-compatible\x20slot','identity_obligation':'Whoever\x20passes\x20the\x20guard\x20may\x20deposit\x20—\x20eligibility\x20IS\x20the\x20guard\x20tree;\x20there\x20is\x20no\x20additional\x20host-side\x20identity\x20check','typical_mistakes':['Treating\x20the\x20amount\x20identifier\x20as\x20a\x20global\x20deposit\x20cap\x20—\x20it\x20only\x20sizes\x20THIS\x20channel\x27s\x20credit;\x20submitted\x20amount\x20≤\x20coin\x20value\x20with\x20the\x20remainder\x20refunded\x20to\x20the\x20depositor\x20(partial\x20deposit)','Omitting\x20the\x20amount\x20identifier:\x20the\x20WHOLE\x20coin\x20is\x20credited\x20unconditionally\x20once\x20the\x20guard\x20passes','Expecting\x20store_from_id\x20to\x20verify\x20fund\x20provenance\x20—\x20it\x20is\x20only\x20RECORDED\x20in\x20the\x20history\x20record,\x20never\x20checked','Assuming\x20fail-closed\x20on\x20an\x20unregistered\x20guard:\x20a\x20deposit\x20through\x20a\x20guard\x20not\x20on\x20the\x20treasury\x27s\x20list\x20REFUNDS\x20the\x20coin\x20(fail-safe)'],'derived_rules':[{'id':'TD_AMOUNT_SLOT_SEMANTICS','requirement':'A\x20number\x20slot\x20referenced\x20as\x20the\x20deposit\x20amount\x20is\x20a\x20caller-declared\x20value:\x20disclose\x20whether\x20the\x20guard\x20bounds\x20it\x20(comparison\x20legs)\x20or\x20it\x20merely\x20sizes\x20the\x20credit','enforced_by':BINDING_VERIFIER}]},{'host':'treasury_external_withdraw','evaluation_timing':'At\x20the\x20external\x20withdraw\x20tx\x20—\x20the\x20guard\x20runs\x20first,\x20then\x20the\x20payee\x20lock\x20and\x20the\x20amount-vs-balance\x20assertion\x20BEFORE\x20any\x20debit','signer_subject':'The\x20WITHDRAWER,\x20who\x20is\x20forcibly\x20also\x20the\x20PAYEE\x20—\x20recipient\x20==\x20tx\x20sender\x20aborts\x20otherwise\x20(E_EXTERNAL_RECIPIENT_NOT_SIGNER)','order_anchor':'NO\x20—\x20the\x20treasury\x20has\x20no\x20order\x20scope;\x20order.*\x20legs\x20have\x20nothing\x20to\x20resolve\x20against','submission_channel':'The\x20withdraw\x20passport\x27s\x20submissions:\x20the\x20amount\x20identifier\x20(REQUIRED\x20at\x20bind\x20time,\x20number\x20type)\x20supplies\x20the\x20withdrawal\x20size;\x20the\x20optional\x20store_from_id\x20records\x20provenance','identity_obligation':'The\x20guard\x20must\x20gate\x20WHO\x20may\x20withdraw\x20—\x20the\x20host\x20only\x20locks\x20payee\x20==\x20signer;\x20anyone\x20passing\x20the\x20guard\x20can\x20move\x20funds\x20to\x20themselves','typical_mistakes':['Believing\x20the\x20guard\x20bounds\x20the\x20withdrawal\x20AMOUNT\x20—\x20the\x20number\x20slot\x20is\x20caller-DECLARED;\x20without\x20comparison\x20legs\x20on\x20that\x20slot\x20the\x20withdrawer\x20picks\x20any\x20amount\x20up\x20to\x20the\x20full\x20balance\x20(drain\x20surface)','Redirecting\x20the\x20payout\x20to\x20a\x20third\x20party\x20via\x20recipient\x20—\x20aborts\x20by\x20design;\x20third-party\x20payouts\x20belong\x20to\x20the\x20permissioned\x20withdraw\x20path','Amount\x20above\x20balance\x20aborts\x20fail-closed\x20(E_WITHDRAW_BALANCE_INSUFFICIENT)\x20—\x20unlike\x20the\x20deposit\x20channel\x27s\x20refund\x20path'],'derived_rules':[{'id':'TW_AMOUNT_UNBOUNDED','requirement':'If\x20the\x20amount\x20number\x20slot\x20appears\x20only\x20as\x20a\x20submission\x20source\x20and\x20never\x20inside\x20a\x20comparison\x20leg,\x20the\x20withdrawal\x20size\x20is\x20caller-chosen\x20—\x20disclose\x20the\x20drain\x20surface\x20on\x20non-open\x20venues','enforced_by':BINDING_VERIFIER}]},{'host':'arbitration_usage','evaluation_timing':'At\x20dispute\x20filing:\x20the\x20no-passport\x20channel\x20requires\x20usage_guard\x20NONE\x20(E_NEED_PASSPORT);\x20the\x20passport\x20channel\x20runs\x20the\x20guard\x20against\x20the\x20filing\x20passport\x20before\x20the\x20case\x20object\x20is\x20minted','signer_subject':'The\x20DISPUTER\x20(buyer\x20or\x20merchant\x20filing\x20through\x20the\x20Service\x20—\x20filing\x20never\x20bypasses\x20the\x20service-side\x20neutrality\x20checks)','order_anchor':'NO\x20at\x20guard\x20evaluation\x20—\x20the\x20guard\x20evaluates\x20against\x20the\x20passport\x20only;\x20the\x20order\x20is\x20a\x20dispute\x20parameter\x20and\x20the\x20Arb\x20case\x20does\x20not\x20exist\x20yet,\x20so\x20arb.*\x20legs\x20are\x20dead\x20here\x20too','submission_channel':'The\x20filing\x20passport\x27s\x20submissions\x20(the\x20guard\x20must\x20be\x20in\x20the\x20passport\x20impack\x20—\x20E_NOT_IMPACK_GUARD)','identity_obligation':'The\x20usage_guard\x20gates\x20WHO\x20may\x20open\x20a\x20case\x20at\x20this\x20venue\x20—\x20it\x20is\x20a\x20filing\x20gate,\x20NOT\x20the\x20voting\x20eligibility\x20rule\x20(that\x20is\x20voting_guard)','typical_mistakes':['Confusing\x20usage_guard\x20with\x20voting_guard\x20—\x20one\x20gates\x20filing\x20(dispute),\x20the\x20other\x20gates\x20vote\x20weight/eligibility','arb.*\x20or\x20order.*\x20query\x20legs\x20in\x20a\x20usage\x20guard\x20—\x20neither\x20resolves\x20at\x20filing\x20time\x20(no\x20case\x20minted,\x20order\x20not\x20in\x20guard\x20scope)','Assuming\x20setting\x20usage_guard\x20also\x20restricts\x20voting\x20—\x20voting\x20stays\x20open\x20unless\x20voting_guard\x20is\x20separately\x20configured'],'derived_rules':[{'id':'AU_DEAD_CASE_SCOPES','requirement':'Query\x20legs\x20in\x20the\x20arb.*\x20/\x20order.*\x20namespaces\x20are\x20structurally\x20dead\x20in\x20a\x20usage\x20guard\x20(no\x20case,\x20no\x20order\x20in\x20evaluation\x20scope)','enforced_by':BINDING_VERIFIER}]},{'host':'demand_present','evaluation_timing':'At\x20the\x20present\x20tx:\x20once\x20ANY\x20guard\x20is\x20registered\x20the\x20free\x20present\x20aborts\x20(E_NEED_PASSPORT);\x20the\x20presenter\x20supplies\x20a\x20passport\x20and\x20ONE\x20chosen\x20registered\x20guard,\x20evaluated\x20against\x20that\x20passport','signer_subject':'The\x20PRESENTER\x20(the\x20service\x20provider\x20side\x20presenting\x20into\x20the\x20demand)','order_anchor':'NO\x20—\x20presenting\x20precedes\x20any\x20order;\x20the\x20demand\x20object\x20itself\x20is\x20the\x20only\x20scope','submission_channel':'The\x20presenter\x27s\x20passport;\x20when\x20the\x20demand\x20guard\x20declares\x20a\x20service_identifier\x20slot\x20(object-type-validated\x20Service\x20at\x20bind\x20time),\x20the\x20PRESENTED\x20SERVICE\x20ADDRESS\x20comes\x20from\x20that\x20submission\x20and\x20OVERRIDES\x20the\x20tx\x20parameter','identity_obligation':'The\x20demand\x20owner\x20structures\x20guards\x20to\x20filter\x20who\x20may\x20present\x20—\x20the\x20presenter\x20must\x20pass\x20the\x20ONE\x20guard\x20they\x20choose','typical_mistakes':['Reading\x20the\x20guard\x20list\x20as\x20AND\x20—\x20the\x20host\x20is\x20presenter-chosen\x20OR:\x20passing\x20ANY\x20single\x20registered\x20guard\x20admits\x20the\x20present;\x20a\x20strict\x20gate\x20must\x20put\x20every\x20condition\x20inside\x20EVERY\x20guard\x20(or\x20into\x20one\x20guard)','Expecting\x20the\x20service\x20tx\x20parameter\x20to\x20win\x20—\x20a\x20service_identifier\x20submission\x20slot\x20overrides\x20it\x20(the\x20guard\x20authors\x20decide\x20what\x20may\x20be\x20presented)','Adding\x20a\x20second\x20guard\x20believing\x20it\x20tightens\x20the\x20gate\x20—\x20it\x20WIDENS\x20it\x20(another\x20acceptance\x20path)'],'derived_rules':[{'id':'DP_MULTI_GUARD_IS_OR','requirement':'Multiple\x20demand\x20guards\x20widen\x20the\x20gate\x20(presenter-chosen\x20OR);\x20flag\x20compositions\x20whose\x20design\x20intent\x20reads\x20as\x20AND','enforced_by':BINDING_VERIFIER}]},{'host':'repository_quote','evaluation_timing':'Never\x20a\x20tx-entry\x20gate:\x20quote_guard\x20is\x20checked\x20as\x20IMPACK\x20MEMBERSHIP\x20whenever\x20a\x20guard\x20tree\x20on\x20ANY\x20host\x20executes\x20a\x20repository.data\x20query\x20against\x20a\x20policy\x20that\x20declares\x20one\x20(the\x20native\x20guard\x20verification\x20consults\x20the\x20reading\x20passport\x27s\x20impack\x20snapshot)','signer_subject':'n/a\x20—\x20a\x20membership\x20check\x20on\x20the\x20reading\x20passport,\x20not\x20an\x20identity\x20evaluation','order_anchor':'n/a\x20—\x20orthogonal\x20to\x20order\x20scope','submission_channel':'The\x20reading\x20passport\x27s\x20impack\x20list:\x20the\x20policy\x27s\x20quote_guard\x20must\x20ride\x20every\x20passport\x20whose\x20guard\x20trees\x20read\x20governed\x20rows\x20(QUOTE-GUARD\x20CARRY)','identity_obligation':'The\x20quote_guard\x20defines\x20who\x20may\x20QUOTE\x20(read\x20pricing\x20data);\x20it\x20must\x20be\x20a\x20DEPENDED\x20guard\x20—\x20frozen\x20(immutable),\x20rep-flagged,\x20and\x20rely-free\x20—\x20asserted\x20at\x20quote-guard\x20binding\x20time\x20(E_NEED_DEPENDENT_GUARD)','typical_mistakes':['Designing\x20a\x20mutable\x20or\x20rely-carrying\x20quote\x20guard\x20—\x20the\x20chain\x20aborts\x20at\x20set\x20time;\x20quote\x20guards\x20are\x20frozen\x20shared\x20pricing\x20definitions\x20by\x20construction','Forgetting\x20QUOTE-GUARD\x20CARRY:\x20guard\x20trees\x20reading\x20governed\x20rows\x20fail\x20unless\x20the\x20consuming\x20passport\x20declares\x20the\x20quote_guard\x20in\x20its\x20impack','Confusing\x20the\x20quote\x20path\x20with\x20the\x20write\x20path\x20—\x20write_guards\x20evaluate\x20per\x20write\x20tx;\x20quote_guard\x20only\x20gates\x20reads\x20of\x20governed\x20data'],'derived_rules':[{'id':'RQ_CARRY_OBLIGATION','requirement':'A\x20guard\x20tree\x20containing\x20repository.data\x20queries\x20against\x20a\x20quoted\x20policy\x20obliges\x20the\x20consuming\x20passport\x20to\x20carry\x20that\x20policy\x27s\x20quote_guard\x20—\x20disclose\x20the\x20carry\x20requirement\x20at\x20design\x20time','enforced_by':BINDING_VERIFIER},{'id':'RQ_DEPENDED_ONLY','requirement':'Quote\x20guards\x20must\x20satisfy\x20the\x20depended\x20shape\x20(relies\x20empty\x20+\x20immutable\x20+\x20rep)\x20—\x20flag\x20mutable/relying\x20candidates\x20before\x20bind\x20time','enforced_by':BINDING_VERIFIER}]},{'host':'guard_relied','evaluation_timing':'Composite\x20(not\x20a\x20host\x20object):\x20wherever\x20the\x20PARENT\x20guard\x20is\x20bound,\x20its\x20relied\x20children\x20evaluate\x20in\x20the\x20SAME\x20host\x20evaluation\x20—\x20each\x20child\x20result\x20folds\x20into\x20the\x20parent\x20via\x20relies_logic_and\x20(default\x20true);\x20passport\x20verification\x20validates\x20children\x20BEFORE\x20the\x20parent','signer_subject':'INHERITED\x20from\x20the\x20parent\x27s\x20host\x20—\x20relied\x20children\x20see\x20the\x20parent\x20host\x27s\x20signer,\x20which\x20is\x20exactly\x20the\x20re-hosting\x20hazard\x20this\x20catalog\x20exists\x20for','order_anchor':'INHERITED\x20from\x20the\x20parent\x27s\x20host\x20—\x20order.*\x20legs\x20inside\x20relied\x20children\x20resolve\x20only\x20if\x20the\x20parent\x27s\x20host\x20provides\x20an\x20anchor','submission_channel':'The\x20SAME\x20passport\x20that\x20carries\x20the\x20parent:\x20guard_add\x20requires\x20every\x20relied\x20guard\x20already\x20present\x20(E_RELIES_GUARD_NOT_ADDED)\x20—\x20the\x20full\x20relies\x20closure\x20must\x20ride\x20every\x20passport','identity_obligation':'Chain-structured:\x20the\x20rely-adding\x20entry\x20accepts\x20only\x20DEPENDED\x20children\x20(relies\x20empty\x20+\x20immutable\x20+\x20rep)\x20—\x20depth\x20is\x20strictly\x201,\x20max\x20MAX_DEPENDED_COUNT\x20=\x204\x20children,\x20self-rely\x20aborts\x20(E_GUARD_SELF)','typical_mistakes':['Assuming\x20relied\x20children\x20keep\x20the\x20context\x20they\x20were\x20authored\x20under\x20—\x20they\x20INHERIT\x20the\x20parent\x20host\x27s\x20signer/order/slot\x20semantics\x20(re-hosting\x20the\x20parent\x20re-contextualizes\x20every\x20child:\x20audit\x20all\x20children\x20on\x20any\x20host\x20change)','Designing\x20multi-level\x20rely\x20chains\x20—\x20the\x20chain\x20flattens\x20to\x20depth\x201\x20on-chain\x20(children\x20must\x20be\x20depended)','Passports\x20carrying\x20the\x20parent\x20without\x20the\x20children\x20—\x20aborts\x20at\x20passport\x20build\x20(E_RELIES_GUARD_NOT_ADDED)','Mixing\x20relies_logic_and\x20polarity\x20without\x20re-checking\x20the\x20acceptance\x20surface\x20(default\x20AND;\x20OR\x20widens\x20to\x20any\x20passing\x20child)'],'derived_rules':[{'id':'GR_CHILD_HOST_REAUDIT','requirement':'On\x20any\x20host\x20change\x20of\x20a\x20guard\x20carrying\x20relies,\x20re-audit\x20every\x20relied\x20child\x20against\x20the\x20NEW\x20host\x27s\x20three\x20inputs\x20(signer\x20/\x20order\x20anchor\x20/\x20submission\x20channel)\x20—\x20bounded:\x20depth\x201,\x20max\x204\x20children','enforced_by':BINDING_VERIFIER},{'id':'GR_CLOSURE_CARRY','requirement':'Every\x20passport\x20carrying\x20a\x20relying\x20parent\x20must\x20carry\x20all\x20relied\x20children\x20first\x20(closure)\x20—\x20flag\x20designs\x20where\x20the\x20carry\x20surface\x20is\x20not\x20communicated','enforced_by':BINDING_VERIFIER}]}];export function getGuardHostContext(a){return GUARD_HOST_CONTEXTS['find'](b=>b['host']===a);}const ACTION_HOST={'buy':'service_buy_guard','forward':'machine_forward','allocate':'service_allocator_guard','claim_reward':'reward_claim','vote':'arbitration_voting','dispute':'arbitration_usage','write_repository':'repository_write','submit_progress':'progress_submission','gen_passport':'gen_passport'},CUSTOM_HOST_BY_OBJECT={'Demand':'demand_present','Repository':'repository_write'};export function catalogHostFromHint(a){if(!a||typeof a['action']!=='string')return undefined;if(a['action']==='custom'){const b=a['host_object']?CUSTOM_HOST_BY_OBJECT[a['host_object']]:undefined;return b??undefined;}return ACTION_HOST[a['action']]??undefined;}
+export const BINDING_VERIFIER='guard-binding-verifier.ts\x20(shipped)';export const GUARD_HOST_CONTEXTS=[{'host':'machine_forward','evaluation_timing':'Every\x20tx\x20that\x20advances\x20the\x20edge\x20—\x20evaluated\x20per\x20call,\x20aborts\x20the\x20tx\x20on\x20failure','signer_subject':'The\x20node\x20ADVANCER\x20(operator,\x20keeper,\x20or\x20the\x20party\x20driving\x20the\x20workflow\x20step)','order_anchor':'YES\x20—\x20the\x20order\x20carrying\x20the\x20progress\x20is\x20in\x20scope;\x20order.*\x20queries\x20resolve\x20against\x20it\x20(T10:\x20bind\x20identity\x20legs\x20to\x20task-binding\x20slot\x20254,\x20never\x20a\x20free\x20submission\x20slot)','submission_channel':'Passport\x20carry-on\x20(task-guarded\x20edges\x20declare\x20slots\x20like\x20254;\x20undeclared\x20slots\x20make\x20the\x20edge\x20abort)','identity_obligation':'Caller\x20must\x20be\x20bound\x20to\x20the\x20workflow\x27s\x20operator\x20set\x20(order.owner\x20/\x20order.agent\x20has\x20/\x20named\x20operator\x20/\x20permission)\x20—\x20this\x20is\x20the\x20SOLE\x20identity\x20check\x20when\x20namedOperator\x20is\x20\x22\x22','typical_mistakes':['Identity\x20leg\x20anchored\x20to\x20a\x20free\x20submission\x20slot\x20(T10\x20hijack\x20—\x20attacker\x20submits\x20their\x20own\x20order\x20at\x20slot\x20254)','Reusing\x20a\x20buy-guard\x20here:\x20the\x20buyer\x20identity\x20is\x20NOT\x20the\x20advancer\x20identity'],'derived_rules':[{'id':'MF_SLOT_IDENTITY_ANCHOR','requirement':'Identity\x20legs\x20on\x20task-guarded\x20edges\x20must\x20anchor\x20to\x20the\x20edge\x27s\x20declared\x20task-binding\x20slot,\x20never\x20a\x20free\x20submission\x20slot\x20the\x20caller\x20controls\x20(T10\x20hijack)','enforced_by':BINDING_VERIFIER},{'id':'PERM_INDEX_UNRESOLVED','requirement':'An\x20edge\x20declaring\x20permission_index\x20references\x20must\x20resolve\x20against\x20the\x20host\x20Service\x27s\x20Permission\x20face\x20(at\x20least\x20one\x20entity\x20grant\x20per\x20index)\x20—\x20an\x20ungranted\x20index\x20makes\x20the\x20edge\x20un\x20executable\x20for\x20everyone\x20(R7-01,\x20rex7\x20o9:\x20ArbRefund\x201002\x20vs\x20entity_count\x200\x20welded\x20the\x20winning-relief\x20track)','enforced_by':BINDING_VERIFIER}]},{'host':'service_allocator_guard','evaluation_timing':'When\x20a\x20tx\x20reaches\x20the\x20allocator\x20(settlement\x20trigger)\x20—\x20the\x20rail\x27s\x20guard\x20decides\x20whether\x20the\x20payout\x20route\x20opens','signer_subject':'The\x20SETTLEMENT\x20TRIGGERER\x20—\x20possibly\x20ANY\x20address\x20(the\x20allocator\x20entry\x20does\x20not\x20check\x20who\x20calls)','order_anchor':'YES\x20for\x20order-bound\x20rails\x20(the\x20allocator\x20resolves\x20the\x20order\x27s\x20escrow);\x20progress.current\x20is\x20available.\x20order.claimed_by\x20exists\x20but\x20is\x20OFF-LIMITS\x20on\x20fund\x20rails\x20(decision\x2011\x20two-rail\x20independence:\x20a\x20rail\x20whose\x20satisfiability\x20flips\x20on\x20the\x20claimed\x20axis\x20is\x20the\x20RAIL_CLAIMED_BY_LEG\x20critical)','submission_channel':'Passport\x20of\x20the\x20triggering\x20tx\x20(usually\x20absent\x20or\x20minimal\x20—\x20do\x20not\x20rely\x20on\x20submission\x20slots\x20here)','identity_obligation':'Must\x20bind\x20the\x20triggerer\x20(context(Signer)\x20comparison,\x20order.agent\x20has,\x20permission.*)\x20UNLESS\x20the\x20scene\x20verifies\x20identity\x20upstream\x20(level3_scene_combined)\x20or\x20the\x20venue\x20is\x20intentionally\x20open-trigger\x20—\x20otherwise\x20any\x20bystander\x20can\x20accelerate/drain\x20the\x20payout\x20(sahr).\x20Machine-enforced\x20check:\x20RAIL_NO_CALLER_IDENTITY\x20(info\x20disclosure)','typical_mistakes':['Pasting\x20a\x20forward-edge\x20identity\x20guard\x20here\x20—\x20it\x20binds\x20the\x20WRONG\x20subject\x20(advancer\x20vs\x20settlement\x20triggerer)','No\x20identity\x20leg\x20at\x20all\x20on\x20a\x20non-open\x20venue','Requiring\x20submission\x20slots\x20that\x20the\x20settlement\x20tx\x20never\x20carries'],'derived_rules':[{'id':'RAIL_NO_CALLER_IDENTITY','requirement':'An\x20allocator\x20gate\x20with\x20no\x20caller-identity\x20leg\x20is\x20triggerable\x20by\x20any\x20address\x20—\x20disclosure;\x20legitimate\x20only\x20for\x20scene-verified\x20or\x20intentionally\x20open-trigger\x20venues','enforced_by':'allocator-rail-verifier.ts\x20(shipped,\x20info)'},{'id':'RAIL_TERMINAL_UNCOVERED','requirement':'Every\x20machine\x20terminal\x20state\x20must\x20have\x20a\x20satisfiable\x20rail\x20through\x20some\x20allocator\x20row','enforced_by':'allocator-rail-verifier.ts\x20(shipped)'},{'id':'RAIL_AWARD_EXIT_MISSING','requirement':'Every\x20terminal\x20—\x20including\x20the\x20terminals\x20an\x20awarded\x20order\x20rests\x20at\x20—\x20must\x20keep\x20a\x20fund\x20exit\x20row\x20on\x20the\x20NODE\x20axis,\x20else\x20escrow\x20strands\x20(decision\x2011:\x20coverage\x20is\x20node-keyed,\x20never\x20claimed-keyed)','enforced_by':'allocator-rail-verifier.ts\x20(shipped)'},{'id':'RAIL_CLAIMED_BY_LEG','requirement':'Decision\x2011\x20two-rail\x20independence:\x20a\x20fund\x20rail\x20whose\x20satisfiability\x20flips\x20on\x20the\x20order.claimed_by\x20axis\x20READS\x20the\x20payout\x20stamp\x20—\x20fund\x20rails\x20are\x20node-gated\x20only;\x20the\x20award\x20is\x20the\x20indemnity\x20track\x27s\x20separate\x20commercial\x20payout\x20(double\x20collection\x20is\x20legal,\x20disclosed\x20at\x20the\x20MCP\x20confirmation\x20gate)','enforced_by':'allocator-rail-verifier.ts\x20(shipped,\x20critical)'},{'id':'RAIL_DEAD_LITERAL','requirement':'Sibling\x20literals\x20contradicting\x20a\x20conjunction-scoped\x20equality\x20are\x20unsatisfiable\x20—\x20dead\x20rows\x20strand\x20the\x20states\x20they\x20were\x20meant\x20to\x20serve','enforced_by':'allocator-rail-verifier.ts\x20(shipped)'},{'id':'RAIL_CLAIMED_BY_NODE_CONTRADICTION','requirement':'A\x20fund\x20rail\x20whose\x20root\x20AND-combines\x20an\x20order.claimed_by\x20some==true\x20polarity\x20leg\x20with\x20a\x20progress.current\x20node-set\x20leg\x20is\x20reachable\x20ONLY\x20through\x20the\x20dispute\x20waypoint\x20that\x20filing\x20writes:\x20claimed_by\x20some\x20exists\x20exclusively\x20after\x20the\x20dispute-filing\x20edge\x20enters\x20the\x20claim\x20waypoint\x20and\x20its\x20successors\x20—\x20a\x20node\x20set\x20lying\x20wholly\x20on\x20pre-filing\x20states\x20makes\x20the\x20rail\x20unreachable\x20in\x20every\x20sequence\x20(money\x20enters\x20the\x20escrow\x20but\x20the\x20edge\x20can\x20never\x20fire;\x20costco\x20F-41:\x20ArbRefundReturn\x20demanded\x20the\x20indemnity\x20stamp\x20while\x20the\x20order\x20parked\x20at\x20claim_filed-class\x20nodes).\x20The\x20verifier\x20must\x20give\x20the\x20bind-time\x20reachability\x20verdict:\x20a\x20reachable\x20node\x20set\x20gets\x20no\x20finding,\x20an\x20unreachable\x20one\x20gets\x20UNREACHABLE\x20plus\x20the\x20two\x20standard\x20fixes\x20—\x20extend\x20the\x20node\x20set\x20past\x20the\x20filing\x20waypoint,\x20or\x20drop\x20the\x20contradicting\x20polarity\x20leg\x20(decision\x2011:\x20fund\x20rails\x20are\x20node-gated,\x20never\x20claimed_by-gated)','enforced_by':'allocator-rail-verifier.ts\x20(shipped,\x20info)'}]},{'host':'reward_claim','evaluation_timing':'At\x20the\x20reward\x20claim\x20tx\x20(the\x20claimant\x27s\x20tx)\x20—\x20before\x20the\x20once-slot\x20is\x20consumed','signer_subject':'The\x20CLAIMANT\x20(whoever\x20signs\x20the\x20claim\x20tx)','order_anchor':'NO\x20by\x20default\x20—\x20the\x20Reward\x20object\x20carries\x20no\x20order\x20context;\x20order.*\x20legs\x20have\x20nothing\x20to\x20resolve\x20against\x20UNLESS\x20the\x20guard\x27s\x20table\x20declares\x20an\x20order-slot\x20submission\x20that\x20the\x20claimant\x27s\x20passport\x20fills\x20(per-order\x20bounty\x20shape:\x20guard\x20+\x20store_from\x20scoping)','submission_channel':'Passport\x20submission\x20on\x20the\x20claim\x20tx\x20(the\x20submitted-object\x20slots),\x20or\x20constant\x20table\x20entries\x20only','identity_obligation':'Identity,\x20when\x20required,\x20must\x20ride\x20the\x20submission\x20channel\x20(e.g.\x20an\x20order-owner\x20slot\x20filled\x20by\x20the\x20claimant\x27s\x20passport)\x20—\x20NOT\x20order.*\x20direct\x20reads;\x20per-order\x20once-scoping\x20comes\x20from\x20the\x20claim\x20key\x20(recipient,\x20guard,\x20store_from)\x20with\x20the\x20v139\x20store_from\x20behavior,\x20not\x20from\x20guard\x20legs','typical_mistakes':['order.owner\x20/\x20progress.current\x20legs\x20pasted\x20from\x20a\x20forward\x20guard\x20—\x20they\x20abort\x20or\x20mislead\x20(no\x20order\x20anchor\x20in\x20the\x20claim\x20context)','Assuming\x20per-order\x20once\x20semantics\x20without\x20the\x20store_from\x20binding'],'derived_rules':[{'id':'RC_NO_ORDER_ANCHOR','requirement':'order.*\x20/\x20progress.*\x20query\x20legs\x20are\x20structurally\x20dead\x20here\x20(no\x20order\x20anchor\x20in\x20the\x20claim\x20context)\x20unless\x20an\x20order-slot\x20submission\x20is\x20declared','enforced_by':BINDING_VERIFIER}]},{'host':'service_buy_guard','evaluation_timing':'Inside\x20the\x20purchase\x20tx\x20itself,\x20before\x20the\x20order\x20is\x20created','signer_subject':'The\x20BUYER\x20(tx\x20sender)','order_anchor':'NO\x20—\x20the\x20order\x20does\x20not\x20exist\x20yet;\x20only\x20service-side\x20and\x20repository/permission\x20state\x20is\x20readable','submission_channel':'Passport\x20supplied\x20with\x20the\x20purchase','identity_obligation':'Buyer\x20binding\x20per\x20the\x20venue\x20policy\x20(level1\x20strict\x20single\x20/\x20level2\x20allowlist\x20/\x20level3\x20scene-verified)','typical_mistakes':['Reading\x20order.*\x20state\x20(nothing\x20exists\x20yet\x20—\x20aborts\x20or,\x20pre-136\x20semantics,\x20resolves\x20nothing)','Escrow/funding\x20checks\x20that\x20belong\x20to\x20the\x20allocator\x20rail\x20instead'],'derived_rules':[{'id':'SB_NO_ORDER_STATE','requirement':'order.*\x20query\x20legs\x20are\x20structurally\x20dead\x20(the\x20order\x20does\x20not\x20exist\x20inside\x20the\x20purchase\x20tx)','enforced_by':BINDING_VERIFIER}]},{'host':'arbitration_voting','evaluation_timing':'At\x20arbitration\x20vote\x20casts\x20/\x20resolution\x20entry\x20—\x20per\x20voting-rule\x20evaluation','signer_subject':'The\x20VOTER\x20/\x20arbitrator\x20operator','order_anchor':'Indirect\x20—\x20the\x20Arb\x20case\x20is\x20in\x20scope\x20(arb.*\x20queries);\x20the\x20underlying\x20order\x20is\x20reachable\x20through\x20the\x20case\x20when\x20the\x20flow\x20passes\x20it','submission_channel':'Passport\x20of\x20the\x20voter\x27s\x20tx','identity_obligation':'Voter\x20must\x20satisfy\x20the\x20voting_guard\x27s\x20weight/eligibility\x20rule\x20(or\x20the\x20arb\x20is\x20open-vote\x20by\x20design)','typical_mistakes':['Treating\x20the\x20arb\x20case\x20as\x20an\x20order\x20(arb.*\x20fields\x20differ\x20from\x20order.*\x20fields)','Evidence\x20legs\x20(arb.indemnity)\x20used\x20where\x20the\x20variant\x20is\x20not\x20guaranteed\x20(enum\x20payload\x20aborts)'],'derived_rules':[{'id':'AV_ARB_NAMESPACE','requirement':'Case-scoped\x20queries\x20must\x20use\x20arb.*\x20fields\x20—\x20order.*\x20fields\x20do\x20not\x20resolve\x20against\x20an\x20Arb\x20case','enforced_by':BINDING_VERIFIER}]},{'host':'progress_submission','evaluation_timing':'At\x20progress\x20submission/attestation\x20points\x20(history-bearing\x20edges)','signer_subject':'The\x20SUBMITTER\x20(operator\x20or\x20buyer\x20attestant)','order_anchor':'YES\x20—\x20same\x20order\x20context\x20as\x20machine_forward','submission_channel':'The\x20submission\x20payload\x20itself\x20(this\x20host\x27s\x20purpose\x20is\x20filling\x20history/slots)','identity_obligation':'Submitter\x20binding\x20mirrors\x20the\x20forward-edge\x20obligation\x20for\x20the\x20edge\x20it\x20rides','typical_mistakes':['Skipping\x20the\x20identity\x20leg\x20because\x20\x27it\x27s\x20just\x20an\x20attestation\x27\x20—\x20attestations\x20are\x20replayable\x20without\x20one'],'derived_rules':[{'id':'PS_IDENTITY_REQUIRED','requirement':'Every\x20attestation\x20edge\x20must\x20carry\x20an\x20identity\x20leg\x20—\x20attestations\x20are\x20replayable\x20without\x20one','enforced_by':BINDING_VERIFIER}]},{'host':'repository_write','evaluation_timing':'At\x20the\x20write-guarded\x20repository\x20op\x20(data\x20upsert\x20through\x20a\x20guarded\x20channel)','signer_subject':'The\x20WRITER','order_anchor':'Only\x20if\x20the\x20row\x20is\x20order-keyed\x20and\x20the\x20op\x20passes\x20it;\x20row-key\x20semantics\x20are\x20the\x20guard\x27s\x20own\x20business','submission_channel':'Passport\x20of\x20the\x20writing\x20tx\x20(quote_guard\x20references\x20must\x20be\x20in\x20the\x20impack\x20list\x20—\x20QUOTE-GUARD\x20CARRY)','identity_obligation':'Writer\x20must\x20be\x20a\x20trusted\x20role\x20for\x20the\x20key\x20family\x20(permission-resolved\x20patterns)\x20—\x20repository\x20rows\x20feed\x20aggregates\x20(sum/count)\x20that\x20other\x20guards\x20price\x20against','typical_mistakes':['Open-write\x20rows\x20feeding\x20SUM_BOUND\x20pricing\x20aggregates\x20(forgery\x20by\x20write)','Missing\x20quote_guard\x20in\x20the\x20passport\x20(aborts\x20fail-closed)'],'derived_rules':[{'id':'RW_QUOTE_GUARD_CARRY','requirement':'Guard\x20trees\x20reading\x20governed\x20repository\x20rows\x20require\x20the\x20row\x20policy\x27s\x20quote_guard\x20in\x20the\x20reading\x20passport\x27s\x20impack\x20(QUOTE-GUARD\x20CARRY)','enforced_by':BINDING_VERIFIER},{'id':'RW_OPEN_WRITE_FEEDS_AGGREGATE','requirement':'Open-write\x20rows\x20must\x20not\x20feed\x20SUM/COUNT\x20aggregates\x20that\x20other\x20guards\x20price\x20against\x20(forgery\x20by\x20write)','enforced_by':BINDING_VERIFIER}]},{'host':'gen_passport','evaluation_timing':'At\x20passport\x20generation\x20(issuance\x20gating)','signer_subject':'The\x20PASSPORT\x20REQUESTER','order_anchor':'Service-side\x20state\x20only\x20(same\x20posture\x20as\x20service_buy_guard)','submission_channel':'n/a\x20(the\x20passport\x20is\x20the\x20product\x20of\x20this\x20host)','identity_obligation':'Issuance\x20policy\x20per\x20the\x20venue\x20(who\x20may\x20hold\x20a\x20passport)','typical_mistakes':['Order-dependent\x20issuance\x20legs\x20(no\x20order\x20exists\x20at\x20issuance\x20time)'],'derived_rules':[{'id':'GP_NO_ORDER_AT_ISSUANCE','requirement':'Order-dependent\x20issuance\x20legs\x20are\x20structurally\x20dead\x20(no\x20order\x20exists\x20at\x20issuance\x20time)','enforced_by':BINDING_VERIFIER}]},{'host':'treasury_external_deposit','evaluation_timing':'At\x20the\x20external\x20deposit\x20tx\x20—\x20the\x20guard\x20runs\x20against\x20the\x20depositor\x27s\x20passport\x20BEFORE\x20any\x20balance\x20credit','signer_subject':'The\x20DEPOSITOR\x20(tx\x20sender,\x20passport\x20carrier)\x20—\x20the\x20guard\x20gates\x20who\x20may\x20fund\x20the\x20treasury\x20through\x20this\x20channel','order_anchor':'NO\x20—\x20the\x20treasury\x20has\x20no\x20order\x20scope;\x20order.*\x20legs\x20have\x20nothing\x20to\x20resolve\x20against','submission_channel':'The\x20deposit\x20passport\x27s\x20submissions:\x20the\x20optional\x20amount\x20identifier\x20resolves\x20a\x20NUMBER\x20slot\x20(type-asserted\x20at\x20bind\x20time);\x20the\x20optional\x20store_from_id\x20resolves\x20an\x20ADDRESS-compatible\x20slot','identity_obligation':'Whoever\x20passes\x20the\x20guard\x20may\x20deposit\x20—\x20eligibility\x20IS\x20the\x20guard\x20tree;\x20there\x20is\x20no\x20additional\x20host-side\x20identity\x20check','typical_mistakes':['Treating\x20the\x20amount\x20identifier\x20as\x20a\x20global\x20deposit\x20cap\x20—\x20it\x20only\x20sizes\x20THIS\x20channel\x27s\x20credit;\x20submitted\x20amount\x20≤\x20coin\x20value\x20with\x20the\x20remainder\x20refunded\x20to\x20the\x20depositor\x20(partial\x20deposit)','Omitting\x20the\x20amount\x20identifier:\x20the\x20WHOLE\x20coin\x20is\x20credited\x20unconditionally\x20once\x20the\x20guard\x20passes','Expecting\x20store_from_id\x20to\x20verify\x20fund\x20provenance\x20—\x20it\x20is\x20only\x20RECORDED\x20in\x20the\x20history\x20record,\x20never\x20checked','Assuming\x20fail-closed\x20on\x20an\x20unregistered\x20guard:\x20a\x20deposit\x20through\x20a\x20guard\x20not\x20on\x20the\x20treasury\x27s\x20list\x20REFUNDS\x20the\x20coin\x20(fail-safe)'],'derived_rules':[{'id':'TD_AMOUNT_SLOT_SEMANTICS','requirement':'A\x20number\x20slot\x20referenced\x20as\x20the\x20deposit\x20amount\x20is\x20a\x20caller-declared\x20value:\x20disclose\x20whether\x20the\x20guard\x20bounds\x20it\x20(comparison\x20legs)\x20or\x20it\x20merely\x20sizes\x20the\x20credit','enforced_by':BINDING_VERIFIER}]},{'host':'treasury_external_withdraw','evaluation_timing':'At\x20the\x20external\x20withdraw\x20tx\x20—\x20the\x20guard\x20runs\x20first,\x20then\x20the\x20payee\x20lock\x20and\x20the\x20amount-vs-balance\x20assertion\x20BEFORE\x20any\x20debit','signer_subject':'The\x20WITHDRAWER,\x20who\x20is\x20forcibly\x20also\x20the\x20PAYEE\x20—\x20recipient\x20==\x20tx\x20sender\x20aborts\x20otherwise\x20(E_EXTERNAL_RECIPIENT_NOT_SIGNER)','order_anchor':'NO\x20—\x20the\x20treasury\x20has\x20no\x20order\x20scope;\x20order.*\x20legs\x20have\x20nothing\x20to\x20resolve\x20against','submission_channel':'The\x20withdraw\x20passport\x27s\x20submissions:\x20the\x20amount\x20identifier\x20(REQUIRED\x20at\x20bind\x20time,\x20number\x20type)\x20supplies\x20the\x20withdrawal\x20size;\x20the\x20optional\x20store_from_id\x20records\x20provenance','identity_obligation':'The\x20guard\x20must\x20gate\x20WHO\x20may\x20withdraw\x20—\x20the\x20host\x20only\x20locks\x20payee\x20==\x20signer;\x20anyone\x20passing\x20the\x20guard\x20can\x20move\x20funds\x20to\x20themselves','typical_mistakes':['Believing\x20the\x20guard\x20bounds\x20the\x20withdrawal\x20AMOUNT\x20—\x20the\x20number\x20slot\x20is\x20caller-DECLARED;\x20without\x20comparison\x20legs\x20on\x20that\x20slot\x20the\x20withdrawer\x20picks\x20any\x20amount\x20up\x20to\x20the\x20full\x20balance\x20(drain\x20surface)','Redirecting\x20the\x20payout\x20to\x20a\x20third\x20party\x20via\x20recipient\x20—\x20aborts\x20by\x20design;\x20third-party\x20payouts\x20belong\x20to\x20the\x20permissioned\x20withdraw\x20path','Amount\x20above\x20balance\x20aborts\x20fail-closed\x20(E_WITHDRAW_BALANCE_INSUFFICIENT)\x20—\x20unlike\x20the\x20deposit\x20channel\x27s\x20refund\x20path'],'derived_rules':[{'id':'TW_AMOUNT_UNBOUNDED','requirement':'If\x20the\x20amount\x20number\x20slot\x20appears\x20only\x20as\x20a\x20submission\x20source\x20and\x20never\x20inside\x20a\x20comparison\x20leg,\x20the\x20withdrawal\x20size\x20is\x20caller-chosen\x20—\x20disclose\x20the\x20drain\x20surface\x20on\x20non-open\x20venues','enforced_by':BINDING_VERIFIER}]},{'host':'arbitration_usage','evaluation_timing':'At\x20dispute\x20filing:\x20the\x20no-passport\x20channel\x20requires\x20usage_guard\x20NONE\x20(E_NEED_PASSPORT);\x20the\x20passport\x20channel\x20runs\x20the\x20guard\x20against\x20the\x20filing\x20passport\x20before\x20the\x20case\x20object\x20is\x20minted','signer_subject':'The\x20DISPUTER\x20(buyer\x20or\x20merchant\x20filing\x20through\x20the\x20Service\x20—\x20filing\x20never\x20bypasses\x20the\x20service-side\x20neutrality\x20checks)','order_anchor':'NO\x20at\x20guard\x20evaluation\x20—\x20the\x20guard\x20evaluates\x20against\x20the\x20passport\x20only;\x20the\x20order\x20is\x20a\x20dispute\x20parameter\x20and\x20the\x20Arb\x20case\x20does\x20not\x20exist\x20yet,\x20so\x20arb.*\x20legs\x20are\x20dead\x20here\x20too','submission_channel':'The\x20filing\x20passport\x27s\x20submissions\x20(the\x20guard\x20must\x20be\x20in\x20the\x20passport\x20impack\x20—\x20E_NOT_IMPACK_GUARD)','identity_obligation':'The\x20usage_guard\x20gates\x20WHO\x20may\x20open\x20a\x20case\x20at\x20this\x20venue\x20—\x20it\x20is\x20a\x20filing\x20gate,\x20NOT\x20the\x20voting\x20eligibility\x20rule\x20(that\x20is\x20voting_guard)','typical_mistakes':['Confusing\x20usage_guard\x20with\x20voting_guard\x20—\x20one\x20gates\x20filing\x20(dispute),\x20the\x20other\x20gates\x20vote\x20weight/eligibility','arb.*\x20or\x20order.*\x20query\x20legs\x20in\x20a\x20usage\x20guard\x20—\x20neither\x20resolves\x20at\x20filing\x20time\x20(no\x20case\x20minted,\x20order\x20not\x20in\x20guard\x20scope)','Assuming\x20setting\x20usage_guard\x20also\x20restricts\x20voting\x20—\x20voting\x20stays\x20open\x20unless\x20voting_guard\x20is\x20separately\x20configured'],'derived_rules':[{'id':'AU_DEAD_CASE_SCOPES','requirement':'Query\x20legs\x20in\x20the\x20arb.*\x20/\x20order.*\x20namespaces\x20are\x20structurally\x20dead\x20in\x20a\x20usage\x20guard\x20(no\x20case,\x20no\x20order\x20in\x20evaluation\x20scope)','enforced_by':BINDING_VERIFIER}]},{'host':'demand_present','evaluation_timing':'At\x20the\x20present\x20tx:\x20once\x20ANY\x20guard\x20is\x20registered\x20the\x20free\x20present\x20aborts\x20(E_NEED_PASSPORT);\x20the\x20presenter\x20supplies\x20a\x20passport\x20and\x20ONE\x20chosen\x20registered\x20guard,\x20evaluated\x20against\x20that\x20passport','signer_subject':'The\x20PRESENTER\x20(the\x20service\x20provider\x20side\x20presenting\x20into\x20the\x20demand)','order_anchor':'NO\x20—\x20presenting\x20precedes\x20any\x20order;\x20the\x20demand\x20object\x20itself\x20is\x20the\x20only\x20scope','submission_channel':'The\x20presenter\x27s\x20passport;\x20when\x20the\x20demand\x20guard\x20declares\x20a\x20service_identifier\x20slot\x20(object-type-validated\x20Service\x20at\x20bind\x20time),\x20the\x20PRESENTED\x20SERVICE\x20ADDRESS\x20comes\x20from\x20that\x20submission\x20and\x20OVERRIDES\x20the\x20tx\x20parameter','identity_obligation':'The\x20demand\x20owner\x20structures\x20guards\x20to\x20filter\x20who\x20may\x20present\x20—\x20the\x20presenter\x20must\x20pass\x20the\x20ONE\x20guard\x20they\x20choose','typical_mistakes':['Reading\x20the\x20guard\x20list\x20as\x20AND\x20—\x20the\x20host\x20is\x20presenter-chosen\x20OR:\x20passing\x20ANY\x20single\x20registered\x20guard\x20admits\x20the\x20present;\x20a\x20strict\x20gate\x20must\x20put\x20every\x20condition\x20inside\x20EVERY\x20guard\x20(or\x20into\x20one\x20guard)','Expecting\x20the\x20service\x20tx\x20parameter\x20to\x20win\x20—\x20a\x20service_identifier\x20submission\x20slot\x20overrides\x20it\x20(the\x20guard\x20authors\x20decide\x20what\x20may\x20be\x20presented)','Adding\x20a\x20second\x20guard\x20believing\x20it\x20tightens\x20the\x20gate\x20—\x20it\x20WIDENS\x20it\x20(another\x20acceptance\x20path)'],'derived_rules':[{'id':'DP_MULTI_GUARD_IS_OR','requirement':'Multiple\x20demand\x20guards\x20widen\x20the\x20gate\x20(presenter-chosen\x20OR);\x20flag\x20compositions\x20whose\x20design\x20intent\x20reads\x20as\x20AND','enforced_by':BINDING_VERIFIER}]},{'host':'repository_quote','evaluation_timing':'Never\x20a\x20tx-entry\x20gate:\x20quote_guard\x20is\x20checked\x20as\x20IMPACK\x20MEMBERSHIP\x20whenever\x20a\x20guard\x20tree\x20on\x20ANY\x20host\x20executes\x20a\x20repository.data\x20query\x20against\x20a\x20policy\x20that\x20declares\x20one\x20(the\x20native\x20guard\x20verification\x20consults\x20the\x20reading\x20passport\x27s\x20impack\x20snapshot)','signer_subject':'n/a\x20—\x20a\x20membership\x20check\x20on\x20the\x20reading\x20passport,\x20not\x20an\x20identity\x20evaluation','order_anchor':'n/a\x20—\x20orthogonal\x20to\x20order\x20scope','submission_channel':'The\x20reading\x20passport\x27s\x20impack\x20list:\x20the\x20policy\x27s\x20quote_guard\x20must\x20ride\x20every\x20passport\x20whose\x20guard\x20trees\x20read\x20governed\x20rows\x20(QUOTE-GUARD\x20CARRY)','identity_obligation':'The\x20quote_guard\x20defines\x20who\x20may\x20QUOTE\x20(read\x20pricing\x20data);\x20it\x20must\x20be\x20a\x20DEPENDED\x20guard\x20—\x20frozen\x20(immutable),\x20rep-flagged,\x20and\x20rely-free\x20—\x20asserted\x20at\x20quote-guard\x20binding\x20time\x20(E_NEED_DEPENDENT_GUARD)','typical_mistakes':['Designing\x20a\x20mutable\x20or\x20rely-carrying\x20quote\x20guard\x20—\x20the\x20chain\x20aborts\x20at\x20set\x20time;\x20quote\x20guards\x20are\x20frozen\x20shared\x20pricing\x20definitions\x20by\x20construction','Forgetting\x20QUOTE-GUARD\x20CARRY:\x20guard\x20trees\x20reading\x20governed\x20rows\x20fail\x20unless\x20the\x20consuming\x20passport\x20declares\x20the\x20quote_guard\x20in\x20its\x20impack','Confusing\x20the\x20quote\x20path\x20with\x20the\x20write\x20path\x20—\x20write_guards\x20evaluate\x20per\x20write\x20tx;\x20quote_guard\x20only\x20gates\x20reads\x20of\x20governed\x20data'],'derived_rules':[{'id':'RQ_CARRY_OBLIGATION','requirement':'A\x20guard\x20tree\x20containing\x20repository.data\x20queries\x20against\x20a\x20quoted\x20policy\x20obliges\x20the\x20consuming\x20passport\x20to\x20carry\x20that\x20policy\x27s\x20quote_guard\x20—\x20disclose\x20the\x20carry\x20requirement\x20at\x20design\x20time','enforced_by':BINDING_VERIFIER},{'id':'RQ_DEPENDED_ONLY','requirement':'Quote\x20guards\x20must\x20satisfy\x20the\x20depended\x20shape\x20(relies\x20empty\x20+\x20immutable\x20+\x20rep)\x20—\x20flag\x20mutable/relying\x20candidates\x20before\x20bind\x20time','enforced_by':BINDING_VERIFIER}]},{'host':'guard_relied','evaluation_timing':'Composite\x20(not\x20a\x20host\x20object):\x20wherever\x20the\x20PARENT\x20guard\x20is\x20bound,\x20its\x20relied\x20children\x20evaluate\x20in\x20the\x20SAME\x20host\x20evaluation\x20—\x20each\x20child\x20result\x20folds\x20into\x20the\x20parent\x20via\x20relies_logic_and\x20(default\x20true);\x20passport\x20verification\x20validates\x20children\x20BEFORE\x20the\x20parent','signer_subject':'INHERITED\x20from\x20the\x20parent\x27s\x20host\x20—\x20relied\x20children\x20see\x20the\x20parent\x20host\x27s\x20signer,\x20which\x20is\x20exactly\x20the\x20re-hosting\x20hazard\x20this\x20catalog\x20exists\x20for','order_anchor':'INHERITED\x20from\x20the\x20parent\x27s\x20host\x20—\x20order.*\x20legs\x20inside\x20relied\x20children\x20resolve\x20only\x20if\x20the\x20parent\x27s\x20host\x20provides\x20an\x20anchor','submission_channel':'The\x20SAME\x20passport\x20that\x20carries\x20the\x20parent:\x20guard_add\x20requires\x20every\x20relied\x20guard\x20already\x20present\x20(E_RELIES_GUARD_NOT_ADDED)\x20—\x20the\x20full\x20relies\x20closure\x20must\x20ride\x20every\x20passport','identity_obligation':'Chain-structured:\x20the\x20rely-adding\x20entry\x20accepts\x20only\x20DEPENDED\x20children\x20(relies\x20empty\x20+\x20immutable\x20+\x20rep)\x20—\x20depth\x20is\x20strictly\x201,\x20max\x20MAX_DEPENDED_COUNT\x20=\x204\x20children,\x20self-rely\x20aborts\x20(E_GUARD_SELF)','typical_mistakes':['Assuming\x20relied\x20children\x20keep\x20the\x20context\x20they\x20were\x20authored\x20under\x20—\x20they\x20INHERIT\x20the\x20parent\x20host\x27s\x20signer/order/slot\x20semantics\x20(re-hosting\x20the\x20parent\x20re-contextualizes\x20every\x20child:\x20audit\x20all\x20children\x20on\x20any\x20host\x20change)','Designing\x20multi-level\x20rely\x20chains\x20—\x20the\x20chain\x20flattens\x20to\x20depth\x201\x20on-chain\x20(children\x20must\x20be\x20depended)','Passports\x20carrying\x20the\x20parent\x20without\x20the\x20children\x20—\x20aborts\x20at\x20passport\x20build\x20(E_RELIES_GUARD_NOT_ADDED)','Mixing\x20relies_logic_and\x20polarity\x20without\x20re-checking\x20the\x20acceptance\x20surface\x20(default\x20AND;\x20OR\x20widens\x20to\x20any\x20passing\x20child)'],'derived_rules':[{'id':'GR_CHILD_HOST_REAUDIT','requirement':'On\x20any\x20host\x20change\x20of\x20a\x20guard\x20carrying\x20relies,\x20re-audit\x20every\x20relied\x20child\x20against\x20the\x20NEW\x20host\x27s\x20three\x20inputs\x20(signer\x20/\x20order\x20anchor\x20/\x20submission\x20channel)\x20—\x20bounded:\x20depth\x201,\x20max\x204\x20children','enforced_by':BINDING_VERIFIER},{'id':'GR_CLOSURE_CARRY','requirement':'Every\x20passport\x20carrying\x20a\x20relying\x20parent\x20must\x20carry\x20all\x20relied\x20children\x20first\x20(closure)\x20—\x20flag\x20designs\x20where\x20the\x20carry\x20surface\x20is\x20not\x20communicated','enforced_by':BINDING_VERIFIER}]}];export function getGuardHostContext(a){return GUARD_HOST_CONTEXTS['find'](b=>b['host']===a);}const ACTION_HOST={'buy':'service_buy_guard','forward':'machine_forward','allocate':'service_allocator_guard','claim_reward':'reward_claim','vote':'arbitration_voting','dispute':'arbitration_usage','write_repository':'repository_write','submit_progress':'progress_submission','gen_passport':'gen_passport'},CUSTOM_HOST_BY_OBJECT={'Demand':'demand_present','Repository':'repository_write'};export function catalogHostFromHint(a){if(!a||typeof a['action']!=='string')return undefined;if(a['action']==='custom'){const b=a['host_object']?CUSTOM_HOST_BY_OBJECT[a['host_object']]:undefined;return b??undefined;}return ACTION_HOST[a['action']]??undefined;}

package/dist/knowledge/guard-leg-eval.js

@@ -0,0 +1 @@
+import{LocalMark,verifyGuardFailureLegs}from'@wowok/wowok';import{getGuardQueryByIdOrName}from'../schema/utils/guard-query-utils.js';export async function submissionItemsForGuard(a,b){for(const c of Array['isArray'](b['submission'])?b['submission']:[]){let d=typeof c?.['guard']==='string'?c['guard']:undefined;if(!d)continue;!d['startsWith']('0x')&&(d=await LocalMark['Instance']()['get_address'](d)['catch'](()=>undefined)??d);if(d===a&&Array['isArray'](c['submission']))return c['submission'];}return undefined;}export function buildGuardSubmissionEntries(a,b){return(a??[])['map'](c=>{const d=Number(c['identifier']);if(!Number['isInteger'](d)||d<0x0||d>0xff)return undefined;const e=b['find'](f=>f['identifier']===d);if(!e||e['value_type']===undefined)return undefined;return{'identifier':d,'value_type':e['value_type'],'value':c['value']};})['filter'](c=>c!==undefined);}export function impackAddressesFromSubmissionCall(a){return(Array['isArray'](a?.['guard'])?a['guard']:[])['map'](b=>typeof b?.['object']==='string'&&b['object']['startsWith']('0x')?b['object']:undefined)['filter'](b=>typeof b==='string');}export function evaluateGuardLegs(a,b,c,d){return verifyGuardFailureLegs(a,b,c,d);}export function renderLegDiagnosisLines(a,b){if(a['verdict']==='pass')return[b?.['passLine']??'On-chain\x20leg\x20evaluation\x20(production\x20evaluator):\x20this\x20guard\x20PASSES\x20with\x20the\x20supplied\x20submission\x20against\x20the\x20current\x20snapshot.'];if(a['verdict']==='absent_reject'){const c=((()=>{try{return getGuardQueryByIdOrName(a['absent_query']??-0x1)?.['name']??'query\x20'+a['absent_query'];}catch{return'query\x20'+a['absent_query'];}})());return['On-chain\x20leg\x20evaluation\x20(production\x20evaluator):\x20STRUCTURED\x20ABSENCE-REJECT\x20—\x20'+c+'\x20targeted\x20a\x20progress\x20History\x20record\x20that\x20does\x20not\x20exist\x20(the\x20order\x20never\x20entered\x20the\x20anchored\x20node;\x20fail-structured\x20kernel,\x20not\x20an\x20evaluated\x20false).\x20'+a['hint']];}if(a['root_logic'])return['On-chain\x20leg\x20evaluation\x20(production\x20evaluator):\x20legs\x20['+a['false_legs']['join'](',\x20')+']\x20of\x20the\x20'+a['root_logic']['toUpperCase']()+'\x20root\x20are\x20FALSE.\x20'+a['hint']];return['On-chain\x20leg\x20evaluation\x20(production\x20evaluator):\x20the\x20single\x20root\x20condition\x20is\x20FALSE.\x20'+a['hint']];}

package/dist/knowledge/guard-node-gates.js

@@ -1 +1 @@
-const machineNodeRegistry=new Map();export function recordMachineNodeNames(a,b){if(typeof a!=='string'||a['trim']()==='')return;if(!Array['isArray'](b))return;const c=[];for(const e of b){const f=e?.['name'];if(typeof f==='string'&&f['trim']()!=='')c['push'](f);}if(c['length']===0x0)return;const d=a['trim']()['toLowerCase']();machineNodeRegistry['set'](d,{'label':a['trim'](),'names':c});}export function resetNodeGateRegistry(){machineNodeRegistry['clear']();}function registrySets(){return[...machineNodeRegistry['values']()];}export function parseGuardNodeGates(a,b,c){try{const d=new Map();if(Array['isArray'](b))for(const j of b){if(typeof j!=='object'||j===null)continue;const k=j,l=Number(k['identifier']),m=k['value'];if(Number['isFinite'](l)&&typeof m==='string')d['set'](l,m);}const e=n=>{if(typeof n!=='object'||n===null)return undefined;const o=n;if(o['type']==='constant'&&typeof o['value']==='string')return o['value'];if(o['type']==='identifier'&&typeof o['identifier']==='number')return d['get'](o['identifier']);return undefined;},f=n=>typeof n==='object'&&n!==null&&n['type']==='query'&&n['query']==='progress.current',g=[],h=new Set(),i=n=>{if(Array['isArray'](n)){for(const q of n)i(q);return;}if(typeof n!=='object'||n===null)return;const o=n,p=typeof o['type']==='string'?o['type']:'';if(p['startsWith']('logic')&&p!=='logic_not'&&(!c?.['equalityOnly']||p==='logic_equal')){const r=Array['isArray'](o['nodes'])?o['nodes']:undefined,s=r?.[0x0]??o['left'],t=r?.[0x1]??o['right'];let u;if(f(s))u=e(t);else{if(f(t))u=e(s);}u!==undefined&&!h['has'](u)&&(h['add'](u),g['push'](u));}for(const w of Object['values'](o))i(w);};return i(a),g;}catch{return[];}}function editDistanceWithin(c,d,e){if(Math['abs'](c['length']-d['length'])>e)return![];const f=new Array(d['length']+0x1),g=new Array(d['length']+0x1);for(let h=0x0;h<=d['length'];h++)f[h]=h;for(let k=0x1;k<=c['length'];k++){g[0x0]=k;let l=g[0x0];for(let m=0x1;m<=d['length'];m++){const n=c[k-0x1]===d[m-0x1]?0x0:0x1;g[m]=Math['min'](f[m]+0x1,g[m-0x1]+0x1,f[m-0x1]+n);if(g[m]<l)l=g[m];}if(l>e)return![];for(let o=0x0;o<=d['length'];o++)f[o]=g[o];}return f[d['length']]<=e;}function findNearMatch(a,b){const c=a['toLowerCase']();let d;for(const e of b){for(const f of e['names']){if(f['toLowerCase']()===c)return{'machineLabel':e['label'],'nodeName':f,'distance':0x0};editDistanceWithin(a,f,0x2)&&(d===undefined||f['length']<d['nodeName']['length'])&&(d={'machineLabel':e['label'],'nodeName':f,'distance':0x2});}}return d;}export function lintGuardNodeGates(a){try{const b=a['filter'](h=>typeof h==='string'&&h['trim']()!=='');if(b['length']===0x0)return'';const c=registrySets();if(c['length']===0x0)return'NODE-NAME\x20GATE\x20LINT\x20(advisory):\x20this\x20Guard\x20pins\x20progress.current\x20to\x20node\x20name(s)\x20'+b['map'](g=>'\x22'+g+'\x22')['join'](',\x20')+'\x20—\x20but\x20no\x20Machine\x20built\x20in\x20this\x20session\x20is\x20registered,\x20so\x20the\x20names\x20could\x20not\x20be\x20cross-checked.\x20'+'Before\x20binding,\x20verify\x20each\x20pinned\x20name\x20against\x20the\x20target\x20Machine\x27s\x20node\x20list\x20EXACTLY\x20'+'(case-sensitive):\x20a\x20typo\x20here\x20dead-ends\x20the\x20branch\x20silently\x20(the\x20Guard\x20never\x20fires)\x20and\x20'+'Guard\x20objects\x20are\x20immutable\x20after\x20creation.';const d=new Set();for(const g of c)for(const h of g['names'])d['add'](h);const e=b['filter'](i=>!d['has'](i));if(e['length']===0x0)return'';const f=['NODE-NAME\x20GATE\x20LINT\x20(advisory):\x20this\x20Guard\x20pins\x20progress.current\x20to\x20node\x20name(s)\x20'+e['map'](i=>'\x22'+i+'\x22')['join'](',\x20')+'\x20that\x20match\x20NO\x20node\x20of\x20any\x20Machine\x20built\x20in\x20this\x20session.\x20If\x20the\x20target\x20Machine\x20is\x20one\x20of\x20them,\x20'+'the\x20gate\x20can\x20never\x20fire\x20(a\x20typo\x20is\x20a\x20silent\x20dead\x20branch;\x20Guard\x20objects\x20are\x20immutable\x20after\x20creation).'];for(const i of e){const j=findNearMatch(i,c);f['push'](j?'\x20\x20•\x20\x22'+i+'\x22\x20—\x20closest\x20known\x20node:\x20\x22'+j['nodeName']+'\x22\x20(machine\x20\x22'+j['machineLabel']+'\x22'+(j['distance']===0x0?',\x20case\x20differs)':')')+'\x20—\x20likely\x20typo,\x20fix\x20the\x20table\x20value\x20BEFORE\x20binding.':'\x20\x20•\x20\x22'+i+'\x22\x20—\x20no\x20similar\x20node\x20in\x20this\x20session\x27s\x20machines;\x20if\x20the\x20target\x20Machine\x20was\x20built\x20'+'earlier\x20or\x20elsewhere,\x20verify\x20this\x20name\x20against\x20its\x20node\x20list\x20before\x20binding.');}return f['push']('\x20\x20The\x20publish-time\x20escrow-exit\x20gate\x20re-checks\x20terminal\x20coverage\x20on\x20the\x20frozen\x20graph;\x20this\x20lint\x20is\x20'+'the\x20earlier\x20catch.\x20Advisory\x20only.'),f['join']('\x0a');}catch{return'';}}const createdGuardRegistry=new Map();export function recordCreatedGuard(a,b){const c=typeof a==='string'&&a['trim']()!==''?a['trim']():undefined,d=typeof b==='string'&&b['startsWith']('0x')?b['toLowerCase']():undefined;if(!c&&!d)return;createdGuardRegistry['set']((c??d)['toLowerCase'](),{'label':c,'address':d});}export function resetCreatedGuardRegistry(){createdGuardRegistry['clear']();}function collectForwardGuardBindings(a){let b=0x0,c=0x0;const d=f=>typeof f==='number'||typeof f==='string'&&f['trim']()!==''&&Number['isFinite'](Number(f)),e=f=>{if(Array['isArray'](f)){for(const i of f)e(i);return;}if(typeof f!=='object'||f===null)return;const h=f;if(d(h['weight'])){b++;const j=h['guard'],k=typeof j==='string'?j['trim']()!=='':typeof j==='object'&&j!==null?typeof j['guard']==='string'&&String(j['guard'])['trim']()!=='':![];if(k)c++;}for(const l of Object['values'](h))e(l);};return e(a),{'forwards':b,'bound':c};}export function lintMachineGuardBindings(a){try{if(createdGuardRegistry['size']===0x0)return'';const {forwards:b,bound:c}=collectForwardGuardBindings(a);if(b===0x0||c>0x0)return'';const d=[...createdGuardRegistry['values']()]['map'](e=>e['label']??e['address']??'?');return['ORPHAN-GUARD\x20PUBLISH\x20CHECK\x20(tv8-tn-261030\x20F-29):\x20this\x20Machine\x20publishes\x20'+b+'\x20forward(s)\x20and\x20binds\x20ZERO\x20guards,\x20'+('while\x20'+createdGuardRegistry['size']+'\x20Guard\x20object(s)\x20were\x20created\x20in\x20this\x20session\x20('+d['join'](',\x20')+').'),'This\x20is\x20the\x20silent\x20write-side\x20loss\x20shape:\x20a\x20guard\x20declared\x20through\x20an\x20unresolved\x20reference\x20or\x20an\x20undefined\x20'+'value\x20is\x20DROPPED\x20during\x20serialization\x20BEFORE\x20the\x20transaction\x20—\x20the\x20publish\x20succeeds\x20with\x20identity-only\x20'+'forwards\x20and\x20zero\x20warnings,\x20and\x20the\x20graph\x20FREEZES\x20at\x20publish,\x20turning\x20every\x20created\x20Guard\x20into\x20an\x20orphan\x20'+'no\x20later\x20operation\x20can\x20re-bind.','If\x20identity-only\x20rails\x20are\x20intentional\x20for\x20this\x20Machine,\x20ignore\x20this\x20check.\x20Otherwise\x20STOP\x20before\x20any\x20'+'object\x20depends\x20on\x20this\x20machine:\x20read\x20back\x20the\x20published\x20node\x20table\x20and\x20confirm\x20whether\x20the\x20guard\x20fields\x20'+'actually\x20landed\x20on\x20chain\x20—\x20if\x20they\x20did\x20not,\x20rebuild\x20and\x20republish\x20NOW\x20while\x20the\x20graph\x20is\x20still\x20editable\x20'+'(mutation\x20is\x20impossible\x20after\x20publish).']['join']('\x0a');}catch{return'';}}
+const machineNodeRegistry=new Map();export function recordMachineNodeNames(a,b){if(typeof a!=='string'||a['trim']()==='')return;if(!Array['isArray'](b))return;const c=[];for(const e of b){const f=e?.['name'];if(typeof f==='string'&&f['trim']()!=='')c['push'](f);}if(c['length']===0x0)return;const d=a['trim']()['toLowerCase']();machineNodeRegistry['set'](d,{'label':a['trim'](),'names':c});}export function resetNodeGateRegistry(){machineNodeRegistry['clear']();}function registrySets(){return[...machineNodeRegistry['values']()];}export function parseGuardNodeGates(a,b,c){try{const d=new Map();if(Array['isArray'](b))for(const j of b){if(typeof j!=='object'||j===null)continue;const k=j,l=Number(k['identifier']),m=k['value'];if(Number['isFinite'](l)&&typeof m==='string')d['set'](l,m);}const e=n=>{if(typeof n!=='object'||n===null)return undefined;const o=n;if(o['type']==='constant'&&typeof o['value']==='string')return o['value'];if(o['type']==='identifier'&&typeof o['identifier']==='number')return d['get'](o['identifier']);return undefined;},f=n=>typeof n==='object'&&n!==null&&n['type']==='query'&&n['query']==='progress.current',g=[],h=new Set(),i=n=>{if(Array['isArray'](n)){for(const q of n)i(q);return;}if(typeof n!=='object'||n===null)return;const o=n,p=typeof o['type']==='string'?o['type']:'';if(p['startsWith']('logic')&&p!=='logic_not'&&(!c?.['equalityOnly']||p==='logic_equal')){const r=Array['isArray'](o['nodes'])?o['nodes']:undefined,s=r?.[0x0]??o['left'],t=r?.[0x1]??o['right'];let u;if(f(s))u=e(t);else{if(f(t))u=e(s);}u!==undefined&&!h['has'](u)&&(h['add'](u),g['push'](u));}for(const w of Object['values'](o))i(w);};return i(a),g;}catch{return[];}}function editDistanceWithin(c,d,e){if(Math['abs'](c['length']-d['length'])>e)return![];const f=new Array(d['length']+0x1),g=new Array(d['length']+0x1);for(let h=0x0;h<=d['length'];h++)f[h]=h;for(let k=0x1;k<=c['length'];k++){g[0x0]=k;let l=g[0x0];for(let m=0x1;m<=d['length'];m++){const n=c[k-0x1]===d[m-0x1]?0x0:0x1;g[m]=Math['min'](f[m]+0x1,g[m-0x1]+0x1,f[m-0x1]+n);if(g[m]<l)l=g[m];}if(l>e)return![];for(let o=0x0;o<=d['length'];o++)f[o]=g[o];}return f[d['length']]<=e;}function findNearMatch(a,b){const c=a['toLowerCase']();let d;for(const e of b){for(const f of e['names']){if(f['toLowerCase']()===c)return{'machineLabel':e['label'],'nodeName':f,'distance':0x0};editDistanceWithin(a,f,0x2)&&(d===undefined||f['length']<d['nodeName']['length'])&&(d={'machineLabel':e['label'],'nodeName':f,'distance':0x2});}}return d;}export function lintGuardNodeGates(a){try{const b=a['filter'](h=>typeof h==='string'&&h['trim']()!=='');if(b['length']===0x0)return'';const c=registrySets();if(c['length']===0x0)return'NODE-NAME\x20GATE\x20LINT\x20(advisory):\x20this\x20Guard\x20pins\x20progress.current\x20to\x20node\x20name(s)\x20'+b['map'](g=>'\x22'+g+'\x22')['join'](',\x20')+'\x20—\x20but\x20no\x20Machine\x20built\x20in\x20this\x20session\x20is\x20registered,\x20so\x20the\x20names\x20could\x20not\x20be\x20cross-checked.\x20'+'Before\x20binding,\x20verify\x20each\x20pinned\x20name\x20against\x20the\x20target\x20Machine\x27s\x20node\x20list\x20EXACTLY\x20'+'(case-sensitive):\x20a\x20typo\x20here\x20dead-ends\x20the\x20branch\x20silently\x20(the\x20Guard\x20never\x20fires)\x20and\x20'+'Guard\x20objects\x20are\x20immutable\x20after\x20creation.';const d=new Set();for(const g of c)for(const h of g['names'])d['add'](h);const e=b['filter'](i=>!d['has'](i));if(e['length']===0x0)return'';const f=['NODE-NAME\x20GATE\x20LINT\x20(advisory):\x20this\x20Guard\x20pins\x20progress.current\x20to\x20node\x20name(s)\x20'+e['map'](i=>'\x22'+i+'\x22')['join'](',\x20')+'\x20that\x20match\x20NO\x20node\x20of\x20any\x20Machine\x20built\x20in\x20this\x20session.\x20If\x20the\x20target\x20Machine\x20is\x20one\x20of\x20them,\x20'+'the\x20gate\x20can\x20never\x20fire\x20(a\x20typo\x20is\x20a\x20silent\x20dead\x20branch;\x20Guard\x20objects\x20are\x20immutable\x20after\x20creation).'];for(const i of e){const j=findNearMatch(i,c);f['push'](j?'\x20\x20•\x20\x22'+i+'\x22\x20—\x20closest\x20known\x20node:\x20\x22'+j['nodeName']+'\x22\x20(machine\x20\x22'+j['machineLabel']+'\x22'+(j['distance']===0x0?',\x20case\x20differs)':')')+'\x20—\x20likely\x20typo,\x20fix\x20the\x20table\x20value\x20BEFORE\x20binding.':'\x20\x20•\x20\x22'+i+'\x22\x20—\x20no\x20similar\x20node\x20in\x20this\x20session\x27s\x20machines;\x20if\x20the\x20target\x20Machine\x20was\x20built\x20'+'earlier\x20or\x20elsewhere,\x20verify\x20this\x20name\x20against\x20its\x20node\x20list\x20before\x20binding.');}return f['push']('\x20\x20The\x20publish-time\x20escrow-exit\x20gate\x20re-checks\x20terminal\x20coverage\x20on\x20the\x20frozen\x20graph;\x20this\x20lint\x20is\x20'+'the\x20earlier\x20catch.\x20Advisory\x20only.'),f['join']('\x0a');}catch{return'';}}const REWARD_EVIDENCE_MARKER=/compensat/i;export function lintRewardClaimNodeGateDeadlock(a){try{const b=(a['claimGates']??[])['filter'](l=>typeof l==='string'&&l['trim']()!=='');if(!Array['isArray'](a['machineGraph']?.['names'])){if(b['length']===0x0)return{'critical':[],'warnings':[]};return{'critical':[],'warnings':['REWARD\x20NODE-GATE\x20check\x20incomplete:\x20the\x20host\x20machine\x27s\x20node\x20graph\x20could\x20not\x20be\x20read,\x20so\x20the\x20'+('claim\x20guard\x27s\x20node\x20gate(s)\x20'+b['map'](l=>'\x22'+l+'\x22')['join'](',\x20')+'\x20were\x20not\x20cross-checked\x20')+'against\x20the\x20evidence-marker\x20nodes\x20(F-MTW-12\x20class).\x20If\x20this\x20reward\x20is\x20a\x20late/evidence-gated\x20'+'compensation,\x20its\x20claim-allowed\x20set\x20MUST\x20include\x20the\x20marker\x20node\x20(e.g.\x20\x22compensated\x22)\x20—\x20'+'guards\x20are\x20immutable\x20after\x20create.']};}const c=a['machineGraph'],d=new Set(c['names']['filter'](l=>typeof l==='string'&&REWARD_EVIDENCE_MARKER['test'](l)));if(d['size']===0x0||b['length']===0x0)return{'critical':[],'warnings':[]};const f=b['filter'](l=>c['names']['some'](m=>m===l)),g=new Set(f);let h=f['some'](l=>d['has'](l));while(!h&&f['length']>0x0){const l=f['pop']();for(const m of c['edges']??[]){if(m['from']!==l||g['has'](m['to']))continue;if(d['has'](m['to'])){h=!![];break;}g['add'](m['to']),f['push'](m['to']);}}if(!h)return{'critical':[],'warnings':[]};const i=b['some'](n=>[...d]['some'](o=>o['toLowerCase']()===n['toLowerCase']()));if(i)return{'critical':[],'warnings':[]};const j=a['guardRef']?'\x20(guard\x20'+a['guardRef']+')':'',k=a['rewardKey']?'\x20attached\x20reward\x20\x22'+a['rewardKey']+'\x22':'a\x20reward';return{'critical':['pre_publish:\x20REWARD_NODE_GATE_DEADLOCK\x20(F-MTW-12)'+j+'\x20—\x20'+k+'\x27s\x20claim\x20guard\x20pins\x20'+('progress.current\x20to\x20{'+b['map'](o=>'\x22'+o+'\x22')['join'](',\x20')+'}\x20while\x20the\x20bound\x20machine\x20reaches\x20')+('evidence-marker\x20node(s)\x20{'+[...d]['map'](o=>'\x22'+o+'\x22')['join'](',\x20')+'}\x20from\x20those\x20very\x20node(s).\x20')+'The\x20claim\x20guard\x20EXCLUDES\x20the\x20marker:\x20claiming\x20at\x20the\x20pinned\x20node(s)\x20pays\x20WITHOUT\x20the\x20'+'lateness/evidence\x20forward\x20(free\x20money),\x20and\x20claiming\x20after\x20the\x20evidence\x20forward\x20fires\x20is\x20abort\x207\x20'+'(guard\x20leg\x20FALSE)\x20—\x20the\x20pre-funded\x20pool\x20can\x20never\x20pay\x20correctly.\x20This\x20is\x20the\x20mtw-tn\x20O18\x20shape\x20'+'(1.00\x20WOW\x20pool\x20unclaimable).\x20Kernel\x20parity:\x20the\x20kernel-injected\x20claim\x20set\x20puts\x20the\x20marker\x20FIRST\x20'+'(guard-fill\x20expLateMarker);\x20a\x20hand-built\x20claim\x20guard\x20must\x20do\x20the\x20same.\x20Remedy\x20BEFORE\x20publish\x20'+'(guards\x20are\x20immutable,\x20the\x20reward\x20binding\x20freezes\x20at\x20publish):\x20recreate\x20the\x20claim\x20guard\x20with\x20a\x20'+'claim-allowed\x20set\x20that\x20includes\x20the\x20marker\x20node\x20alongside\x20the\x20pinned\x20anchor(s),\x20then\x20re-mount\x20it\x20'+'on\x20the\x20reward.'],'warnings':[]};}catch{return{'critical':[],'warnings':[]};}}const createdGuardRegistry=new Map();export function recordCreatedGuard(a,b){const c=typeof a==='string'&&a['trim']()!==''?a['trim']():undefined,d=typeof b==='string'&&b['startsWith']('0x')?b['toLowerCase']():undefined;if(!c&&!d)return;createdGuardRegistry['set']((c??d)['toLowerCase'](),{'label':c,'address':d});}export function resetCreatedGuardRegistry(){createdGuardRegistry['clear']();}function collectForwardGuardBindings(a){let b=0x0,c=0x0;const d=f=>typeof f==='number'||typeof f==='string'&&f['trim']()!==''&&Number['isFinite'](Number(f)),e=f=>{if(Array['isArray'](f)){for(const i of f)e(i);return;}if(typeof f!=='object'||f===null)return;const h=f;if(d(h['weight'])){b++;const j=h['guard'],k=typeof j==='string'?j['trim']()!=='':typeof j==='object'&&j!==null?typeof j['guard']==='string'&&String(j['guard'])['trim']()!=='':![];if(k)c++;}for(const l of Object['values'](h))e(l);};return e(a),{'forwards':b,'bound':c};}export function lintMachineGuardBindings(a){try{if(createdGuardRegistry['size']===0x0)return'';const {forwards:b,bound:c}=collectForwardGuardBindings(a);if(b===0x0||c>0x0)return'';const d=[...createdGuardRegistry['values']()]['map'](e=>e['label']??e['address']??'?');return['ORPHAN-GUARD\x20PUBLISH\x20CHECK\x20(tv8-tn-261030\x20F-29):\x20this\x20Machine\x20publishes\x20'+b+'\x20forward(s)\x20and\x20binds\x20ZERO\x20guards,\x20'+('while\x20'+createdGuardRegistry['size']+'\x20Guard\x20object(s)\x20were\x20created\x20in\x20this\x20session\x20('+d['join'](',\x20')+').'),'This\x20is\x20the\x20silent\x20write-side\x20loss\x20shape:\x20a\x20guard\x20declared\x20through\x20an\x20unresolved\x20reference\x20or\x20an\x20undefined\x20'+'value\x20is\x20DROPPED\x20during\x20serialization\x20BEFORE\x20the\x20transaction\x20—\x20the\x20publish\x20succeeds\x20with\x20identity-only\x20'+'forwards\x20and\x20zero\x20warnings,\x20and\x20the\x20graph\x20FREEZES\x20at\x20publish,\x20turning\x20every\x20created\x20Guard\x20into\x20an\x20orphan\x20'+'no\x20later\x20operation\x20can\x20re-bind.','If\x20identity-only\x20rails\x20are\x20intentional\x20for\x20this\x20Machine,\x20ignore\x20this\x20check.\x20Otherwise\x20STOP\x20before\x20any\x20'+'object\x20depends\x20on\x20this\x20machine:\x20read\x20back\x20the\x20published\x20node\x20table\x20and\x20confirm\x20whether\x20the\x20guard\x20fields\x20'+'actually\x20landed\x20on\x20chain\x20—\x20if\x20they\x20did\x20not,\x20rebuild\x20and\x20republish\x20NOW\x20while\x20the\x20graph\x20is\x20still\x20editable\x20'+'(mutation\x20is\x20impossible\x20after\x20publish).']['join']('\x0a');}catch{return'';}}