@wowok/agent-mcp 3.4.3 → 3.4.4

package/dist/knowledge/path-oracle/products/patreon.js

@@ -0,0 +1 @@
+export const PATREON_ORACLE={'productRef':'patreon','products':['patreon'],'oracleVersion':'1.0.0','steps':[{'id':'M1','class':'offchain','name':'Creator\x20configures\x20membership\x20tiers\x20(prices,\x20benefit\x20copy,\x20billing\x20cadence)','actor':'merchant','precondition':[],'onchain':'not_applicable','commercialSemantics':'Tier\x20catalog,\x20benefit\x20descriptions\x20and\x20cadence\x20are\x20off-chain\x20authoring.\x20On\x20chain\x20each\x20period\x20is\x20a\x20fresh\x20buy\x20at\x20the\x20sale\x20price;\x20the\x20tier\x20selector\x20maps\x20to\x20this\x20template\x27s\x20tiered-membership\x20build\x20recipe\x20(honor\x20tiers\x20layer\x20on\x20the\x20base\x20subscription).','evidence':[]},{'id':'M2','class':'main','name':'Fan\x20subscribes:\x20pay\x20and\x20escrow\x20period\x201','actor':'buyer','precondition':['M1'],'onchain':'expressible','chainFootprint':{'node':'subscribed','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'Membership\x20join\x20is\x20one\x20atomic\x20buy:\x20period-1\x20funds\x20enter\x20the\x20order\x20escrow\x20at\x20the\x20subscribed\x20node.\x20The\x20real\x20product\x20bills\x20a\x20card\x20on\x20file;\x20here\x20the\x20first\x20charge\x20IS\x20the\x20subscription\x20signature.','evidence':[{'file':'service.move','line':0x1c9,'pattern':'public\x20fun\x20buy'},{'file':'order.move','line':0xb8,'pattern':'public(package)\x20fun\x20new'}]},{'id':'M3','class':'main','name':'Billing\x20date\x20passes;\x20the\x20paid\x20period\x20advances\x20to\x20producing','actor':'merchant','precondition':['M2'],'onchain':'expressible','chainFootprint':{'node':'delivering','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'Both\x20entries\x20into\x20producing\x20pin\x20the\x20creator\x20permission\x20slot,\x20so\x20only\x20the\x20creator\x20can\x20open\x20a\x20period\x20of\x20production\x20(the\x20bare-string\x20face\x20was\x20cured\x20in\x20the\x202026-10-29\x20catalog\x20sweep).\x20The\x20content\x20body\x20itself\x20stays\x20off-chain\x20—\x20only\x20its\x20hash\x20is\x20anchored.','evidence':[{'file':'progress.move','line':0x14f,'pattern':'ASSERT_PERMISSION'}]},{'id':'M4','class':'main','name':'Creator\x20uploads\x20the\x20period\x27s\x20content;\x20the\x20submit\x20forward\x20locks\x20the\x20content\x20hash','actor':'merchant','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'submit_content','prev':'delivering','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20delivery\x20promise\x20is\x20the\x20hash\x20plus\x20the\x20repository\x20write\x20allowlist.\x20Once\x20at\x20delivered\x20the\x20period\x20may\x20settle\x20or\x20expire\x20but\x20never\x20refund\x20—\x20the\x20escrow\x20is\x20empty\x20from\x20here\x20on\x20by\x20allocator\x20construction.','guardKeyProbe':'content_hash','evidence':[{'file':'repository.move','line':0x219,'pattern':'data_add_imp'},{'file':'machine.move','line':0x6f,'pattern':'forward_with_guard'}]},{'id':'M5','class':'main','name':'Fan\x20reviews\x20within\x2014\x20days\x20(star\x20rating,\x20optional\x20feedback)','actor':'buyer','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'reviewed','forward':'review','prev':'delivered','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Reviews\x20are\x20the\x20rating\x20rail\x20inside\x20a\x20hard\x2014-day\x20window;\x20reward\x20eligibility\x20hangs\x20off\x20this\x20side-stop.\x20The\x20window\x20is\x20a\x20time\x20gate\x20on\x20the\x20edge,\x20the\x20payer\x20identity\x20is\x20kernel-checked\x20on\x20fan-facing\x20edges.','guardKeyProbe':'review_window','evidence':[{'file':'progress.move','line':0x13a,'pattern':'E_ORDER_PAYER_REQUIRED'},{'file':'machine.move','line':0x91,'pattern':'public\x20fun\x20forward'}]},{'id':'M6','class':'main','name':'Fan\x20confirms\x20after\x20review;\x20the\x20period\x20closes\x20for\x20settlement','actor':'buyer','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'confirm_after_review','prev':'reviewed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Confirmation\x20is\x20payer-gated:\x20fan-facing\x20edges\x20carry\x20the\x20kernel\x20identity\x20leg,\x20so\x20a\x20creator\x20cannot\x20self-close\x20a\x20period.\x20A\x20fan\x20who\x20skips\x20review\x20settles\x20directly\x20from\x20delivered\x20along\x20the\x20bare\x20confirm\x20edge.','evidence':[{'file':'progress.move','line':0x2e8,'pattern':'order_next'}]},{'id':'M7','class':'main','name':'Period\x20completes:\x20the\x20settle\x20rail\x20releases\x20the\x20escrow\x20to\x20the\x20creator','actor':'platform','precondition':['M6'],'onchain':'expressible','chainFootprint':{'node':'completed','identity':'order_holder','moneyEffect':'release'},'commercialSemantics':'Settlement\x20allocator\x20rows\x20pay\x20the\x20full\x20balance\x20to\x20the\x20creator\x20(rate\x2010000,\x20zero\x20platform\x20take)\x20gated\x20on\x20the\x20completed\x20state\x20plus\x20the\x20order\x20linkage.\x20The\x20settle\x20rail\x20is\x20allocator-mounted:\x20its\x20guard\x20keys\x20live\x20on\x20allocator\x20rows,\x20not\x20on\x20machine\x20edges,\x20so\x20no\x20guard\x20probe\x20applies\x20here.','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc'},{'file':'order.move','line':0x15e,'pattern':'public\x20fun\x20owner_receive'}]},{'id':'M8','class':'main','name':'Fan\x20claims\x20the\x20review\x20bounty\x20(once\x20per\x20order,\x20claim\x20set\x20reviewed/completed/expired)','actor':'buyer','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'reviewed','moneyEffect':'reward'},'commercialSemantics':'The\x20funded\x20reward\x20pool\x20pays\x20a\x20once-per-order\x20bounty\x20over\x20the\x20claim\x20set;\x20the\x20claim\x20guard\x20is\x20reward-object-hosted,\x20so\x20its\x20keys\x20are\x20not\x20machine-edge\x20keys.\x20Pool\x20and\x20per-claim\x20amounts\x20are\x20build-time\x20knobs.','evidence':[{'file':'reward.move','line':0xe3,'pattern':'public\x20fun\x20claim'},{'file':'reward.move','line':0xa7,'pattern':'reward_guard'}]},{'id':'M9','class':'main','name':'Keeper\x20reminds\x20the\x20fan\x203\x20days\x20before\x20renewal\x20(no\x20auto-charge\x20exists)','actor':'keeper','precondition':['M7'],'onchain':'disclosure_only','disclosureProbe':'no\x20auto-charge|can\x20never\x20charge|explicit\x20subscriber\x20signature','commercialSemantics':'The\x20real\x20product\x20auto-renews\x20the\x20card\x20on\x20file\x20until\x20cancel.\x20The\x20chain\x20has\x20no\x20debit\x20primitive:\x20keepers\x20may\x20remind\x20and\x20expire\x20but\x20can\x20never\x20charge\x20—\x20renewal\x20happens\x20only\x20when\x20the\x20fan\x20signs\x20the\x20next\x20period.','evidence':[]},{'id':'M10','class':'main','name':'Fan\x20signs\x20the\x20next\x20period\x20charge;\x20charging\x20records\x20the\x20renewal\x20intent','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'charging','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20charging\x20node\x20is\x20renewal-loop\x20only\x20—\x20period\x201\x20never\x20passes\x20through\x20it.\x20The\x20fan-facing\x20edge\x20is\x20operator-bound,\x20so\x20no\x20third\x20party\x20(creator-side\x20keeper\x20included)\x20can\x20renew\x20on\x20the\x20fan\x27s\x20behalf.','evidence':[{'file':'progress.move','line':0x13a,'pattern':'E_ORDER_PAYER_REQUIRED'}]},{'id':'M11','class':'main','name':'One\x20transaction\x20funds\x20and\x20advances\x20the\x20renewal;\x20producing\x20re-opens','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'delivering','moneyEffect':'escrow_in'},'commercialSemantics':'Renewal\x20is\x20a\x20single\x20fan\x20transaction\x20that\x20funds\x20and\x20advances\x20together;\x20the\x20renew\x20edge\x20must\x20stay\x20free\x20of\x20an\x20escrow-balance\x20leg\x20(pre-state\x20reads\x20are\x20blind\x20inside\x20one\x20transaction).\x20The\x20per-period\x20once-slot\x20rejects\x20same-period\x20replays.','evidence':[{'file':'payment.move','line':0x67,'pattern':'public\x20fun\x20new'},{'file':'machine.move','line':0x91,'pattern':'public\x20fun\x20forward'}]},{'id':'M12','class':'main','name':'Honor\x20tiers:\x20long-tenure\x20fans\x20claim\x20tier\x20rewards','actor':'buyer','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'reviewed','moneyEffect':'reward'},'commercialSemantics':'Tiered\x20membership\x20layers\x20honor-tier\x20Reward\x20objects\x20on\x20the\x20base\x20subscription;\x20the\x20tier\x20claim\x20guard\x20reads\x20the\x20historical\x20period\x20count,\x20so\x20tenure\x20is\x20chain-attested\x20rather\x20than\x20platform-computed.','evidence':[{'file':'reward.move','line':0xa7,'pattern':'reward_guard'}]},{'id':'E1','class':'exception','name':'Renewal\x20payment\x20declined\x20—\x20no\x20auto-debit\x20retry\x20exists','actor':'keeper','precondition':['M9'],'onchain':'expressible_with_gap','chainFootprint':{'node':'delivering','moneyEffect':'none'},'commercialSemantics':'The\x20real\x20product\x20retries\x20the\x20card,\x20then\x20pauses\x20access.\x20Here\x20a\x20declined\x20renewal\x20is\x20simply\x20an\x20unsigned\x20period:\x20keepers\x20remind,\x20grace\x20runs,\x20the\x20order\x20expires.\x20The\x20gap\x20—\x20no\x20retry/dunning\x20machinery\x20and\x20no\x20way\x20to\x20charge\x20—\x20is\x20disclosed\x20by\x20the\x20no-auto-charge\x20design\x20note.','gapPredicate':{'probe':'no\x20auto-charge|can\x20never\x20charge|explicit\x20subscriber\x20signature'},'evidence':[]},{'id':'E2','class':'exception','name':'Grace\x20lapses;\x20the\x20period\x20expires\x20after\x20the\x20delivery\x20+\x20window\x20deadline','actor':'keeper','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'expired','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'Expiry\x20is\x20a\x20keeper\x20permission\x20rail\x20with\x20a\x20hard\x20time\x20lock;\x20a\x20fan\x20can\x20never\x20forge\x20it.\x20If\x20the\x20period\x20was\x20never\x20delivered\x20it\x20cannot\x20expire\x20at\x20all\x20—\x20it\x20stays\x20in\x20producing\x20where\x20the\x20refund\x20rails\x20are\x20the\x20exit.','guardKeyProbe':'period_expiry','evidence':[{'file':'machine.move','line':0x37a,'pattern':'forwards_add'}]},{'id':'E3','class':'exception','name':'Fan\x20cancels\x20mid-period\x20(access\x20to\x20period\x20end,\x20next\x20periods\x20stop)','actor':'buyer','precondition':['M2'],'onchain':'expressible_with_gap','chainFootprint':{'node':'closed_cancel','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Cancel\x20is\x20a\x20fan\x20rail\x20into\x20the\x20closed\x20state\x20with\x20a\x20refund\x20exit;\x20the\x20real\x20product\x20never\x20charges\x20again\x20after\x20cancel.\x20The\x20gap:\x20the\x20shape\x27s\x20pro-rata\x20intent\x20for\x20unearned\x20periods\x20cannot\x20be\x20a\x20partial\x20amount\x20—\x20rails\x20pay\x20the\x20full\x20escrow\x20balance,\x20and\x20the\x20corpus\x20only\x20discloses\x20the\x20partial-refund/threshold-0\x20constraint.','gapPredicate':{'probe':'pro-rata|unearned\x20period|partial\x20refund'},'evidence':[]},{'id':'E4','class':'exception','name':'Tier\x20downgrade\x20takes\x20effect\x20at\x20the\x20next\x20billing\x20date','actor':'buyer','precondition':['M2'],'onchain':'disclosure_only','disclosureProbe':'proration|prorated|re-prices|downgrade','commercialSemantics':'Downgrade\x20mechanics\x20are\x20incumbent\x20proration\x20machinery.\x20The\x20chain\x20equivalent\x20is\x20structural:\x20every\x20renewal\x20re-prices\x20from\x20the\x20SKU\x20price,\x20so\x20the\x20next\x20signed\x20period\x20simply\x20buys\x20the\x20cheaper\x20tier\x20—\x20the\x20corpus\x20discloses\x20the\x20re-pricing\x20rule.','evidence':[]},{'id':'E5','class':'exception','name':'Tier\x20upgrade\x20with\x20immediate\x20prorated\x20charge','actor':'buyer','precondition':['M2'],'onchain':'disclosure_only','disclosureProbe':'proration|prorated|re-prices|upgrade','commercialSemantics':'The\x20real\x20product\x20charges\x20the\x20prorated\x20difference\x20immediately.\x20The\x20chain\x20cannot\x20debit\x20a\x20difference:\x20the\x20upgrade\x20is\x20the\x20next\x20period\x20bought\x20at\x20the\x20new\x20price\x20(or\x20a\x20second\x20order),\x20and\x20the\x20corpus\x20discloses\x20the\x20per-renewal\x20re-pricing\x20rule.','evidence':[]},{'id':'E6','class':'exception','name':'Membership\x20paused\x20for\x20a\x20month\x20(access\x20held,\x20billing\x20stopped)','actor':'buyer','precondition':['M2'],'onchain':'disclosure_only','disclosureProbe':'\x5cbpause|suspend','commercialSemantics':'The\x20real\x20product\x20offers\x20self-serve\x20pause.\x20The\x20chain\x20has\x20no\x20pause\x20state:\x20the\x20substitute\x20is\x20letting\x20the\x20period\x20lapse\x20and\x20rejoining,\x20which\x20loses\x20continuity\x20benefits.\x20The\x20corpus\x20discloses\x20the\x20substitute\x20and\x20its\x20cost:\x20continuity\x20benefits\x20(honor-tier\x20period\x20counts)\x20do\x20NOT\x20accrue\x20during\x20the\x20lapsed\x20gap\x20—\x20a\x20rejoin\x20is\x20a\x20fresh\x20order\x20with\x20a\x20fresh\x20period\x20counter.','evidence':[]},{'id':'E7','class':'exception','name':'Creator\x20stops\x20posting\x20(period\x20delivered\x20empty\x20or\x20not\x20at\x20all)','actor':'buyer','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'delivering','moneyEffect':'refund'},'commercialSemantics':'An\x20undelivered\x20period\x20never\x20settles:\x20while\x20still\x20in\x20producing\x20the\x20fan\x20holds\x20a\x20full-balance\x20refund\x20exit,\x20so\x20silence\x20cannot\x20strand\x20the\x20escrow\x20—\x20materially\x20stronger\x20than\x20the\x20incumbent\x27s\x20best-effort\x20promise.','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc'}]},{'id':'E8','class':'exception','name':'Tier\x20benefit\x20does\x20not\x20match\x20its\x20description','actor':'buyer','precondition':['M4'],'onchain':'expressible_with_gap','chainFootprint':{'node':'delivered','identity':'permission_index','moneyEffect':'compensate'},'commercialSemantics':'The\x20delivered\x20hash\x20proves\x20what\x20shipped,\x20not\x20that\x20it\x20matched\x20the\x20tier\x20pitch\x20—\x20benefit\x20copy\x20is\x20off-chain.\x20Degree\x20disputes\x20route\x20to\x20arbitration\x20under\x20the\x20default\x20open-voting\x20posture\x20with\x20the\x20capped\x20award;\x20the\x20corpus\x20discloses\x20the\x20routing.','guardKeyProbe':'content_hash','gapPredicate':{'probe':'disputes\x20route\x20to\x20arbitration|award\x20cap'},'evidence':[]},{'id':'E9','class':'exception','name':'Platform\x20takedown\x20for\x20guideline-violating\x20content','actor':'platform','precondition':['M4'],'onchain':'disclosure_only','disclosureProbe':'takedown|guidelines|delist|content\x20compliance','commercialSemantics':'Takedown\x20is\x20an\x20incumbent\x20catalog\x20and\x20policy\x20act.\x20The\x20chain\x20anchors\x20hashes\x20only\x20and\x20has\x20no\x20content-semantics\x20primitive.\x20The\x20corpus\x20discloses\x20the\x20takedown\x20as\x20the\x20CREATOR\x27S\x20act\x20(a\x20sales\x20op:set\x20rewrite\x20or\x20the\x20per-item\x20wip_set\x20rebind):\x20new\x20sales\x20of\x20the\x20item\x20stop\x20immediately,\x20orders\x20pinned\x20to\x20the\x20old\x20WIP\x20hash\x20abort\x20E_WIP_HASH_NOT_MATCH\x20at\x20quote\x20until\x20re-copied,\x20and\x20no\x20protocol\x20body\x20can\x20delete\x20a\x20past\x20publication.','evidence':[]},{'id':'E10','class':'exception','name':'Creator\x20banned;\x20balance\x20and\x20payouts\x20frozen\x20by\x20the\x20platform','actor':'platform','precondition':['M7'],'onchain':'disclosure_only','disclosureProbe':'confiscat|clawback|seize|unilateral','commercialSemantics':'The\x20incumbent\x20freezes\x20balances\x20at\x20ban.\x20The\x20chain\x20has\x20no\x20confiscation\x20primitive:\x20escrow\x20exits\x20only\x20along\x20the\x20published\x20rails,\x20so\x20a\x20banned\x20creator\x27s\x20settled\x20funds\x20remain\x20receivable\x20—\x20regulatory\x20enforcement\x20replaces\x20the\x20freeze\x20lever.\x20The\x20corpus\x20discloses\x20exactly\x20this:\x20escrow\x20exits\x20only\x20along\x20the\x20published\x20rails\x20and\x20confiscation\x20does\x20not\x20exist.','evidence':[]},{'id':'E11','class':'exception','name':'Age\x20gate:\x20patronage\x20of\x20adult-oriented\x20creator\x20tiers\x20requires\x20age\x20assurance','actor':'platform','precondition':['M2'],'onchain':'unresolvable','unresolvableRef':'S5','disclosureProbe':'age.verif|adult|18\x5c+|has_verified','commercialSemantics':'Age\x20assurance\x20is\x20issued\x20by\x20off-chain\x20KYC\x20against\x20zero\x20on-chain\x20PII;\x20the\x20chain\x20can\x20at\x20most\x20witness\x20an\x20attestation\x20bit\x20and\x20has\x20no\x20credential\x20query.\x20The\x20corpus\x20discloses\x20ADULT-TIER\x20ASSURANCE\x20as\x20off-chain:\x20patronage\x20of\x20adult\x20(18+)\x20creator\x20tiers\x20requires\x20age\x20assurance\x20issued\x20by\x20off-chain\x20KYC\x20against\x20zero\x20on-chain\x20PII,\x20so\x20age\x20assurance\x20is\x20never\x20machine-checked.','evidence':[]},{'id':'E12','class':'exception','name':'Paid\x20content\x20leaks\x20outside\x20the\x20paywall','actor':'buyer','precondition':['M4'],'onchain':'unresolvable','unresolvableRef':'S5','disclosureProbe':'piracy|E2EE|content\x20leak|private\x20link','commercialSemantics':'A\x20hash\x20proves\x20publication\x20and\x20integrity\x20but\x20grants\x20no\x20read\x20permission\x20—\x20leak\x20protection\x20is\x20entirely\x20off-chain\x20(encrypted\x20delivery,\x20DMCA).\x20The\x20corpus\x20discloses\x20piracy\x20as\x20not\x20a\x20chain\x20matter:\x20leak\x20protection\x20(encrypted\x20delivery,\x20private\x20link\x20gating,\x20DMCA\x20takedowns)\x20is\x20entirely\x20off-chain.','evidence':[]},{'id':'E13','class':'exception','name':'Patron\x20direct\x20messages\x20turn\x20into\x20harassment\x20(no\x20block\x20exists)','actor':'merchant','precondition':['M5'],'onchain':'disclosure_only','disclosureProbe':'messenger|e2ee|harassment','commercialSemantics':'Patron\x20messaging\x20runs\x20in\x20the\x20off-chain\x20tool\x20layer\x20—\x20the\x20on-chain\x20messenger\x20family\x20is\x20commented\x20out,\x20so\x20there\x20is\x20no\x20block\x20or\x20report\x20primitive.\x20The\x20corpus\x20discloses\x20the\x20harassment\x20surface:\x20escalation\x20of\x20e2ee\x20harassment\x20runs\x20on\x20creator-side\x20terms\x20—\x20off-chain\x20moderation,\x20reporting\x20channels,\x20and\x20arbitration\x20—\x20never\x20a\x20machine\x20rail.','evidence':[]},{'id':'E14','class':'exception','name':'Custom\x20perk\x20promised\x20in\x20a\x20tier\x20never\x20delivered','actor':'buyer','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'delivering','moneyEffect':'refund'},'commercialSemantics':'A\x20perk\x20is\x20a\x20period\x20like\x20any\x20other:\x20while\x20unproduced\x20the\x20fan\x20keeps\x20the\x20full\x20refund\x20exit,\x20so\x20the\x20promise\x20failure\x20is\x20a\x20refund,\x20not\x20a\x20support\x20ticket.','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc'}]},{'id':'E15','class':'exception','name':'Keeper\x20offline:\x20reminders\x20and\x20expiry\x20stops\x20do\x20not\x20fire','actor':'keeper','precondition':['M7'],'onchain':'disclosure_only','disclosureProbe':'keeper|reminder','commercialSemantics':'Keeper\x20duties\x20(renewal\x20reminder,\x20expiry\x20trigger)\x20are\x20off-chain\x20automation\x20with\x20no\x20charge\x20authority;\x20offline\x20keepers\x20stall\x20state\x20progress\x20but\x20never\x20move\x20funds\x20—\x20the\x20corpus\x20discloses\x20the\x20duty\x20list.','evidence':[]},{'id':'E16','class':'exception','name':'Replay\x20of\x20a\x20renewal\x20charge\x20for\x20the\x20same\x20period','actor':'buyer','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'delivering','moneyEffect':'none'},'commercialSemantics':'The\x20once-per-period\x20slot\x20is\x20proven\x20equal\x20to\x20the\x20progress\x20history\x20count,\x20so\x20a\x20same-period\x20replay\x20is\x20rejected\x20and\x20each\x20period\x20can\x20be\x20charged\x20at\x20most\x20once.\x20The\x20counter\x20is\x20the\x20chain-derived\x20monotonic\x20period\x20record.','evidence':[{'file':'progress.move','line':0x8e,'pattern':'ParentTableVec'}]},{'id':'E17','class':'exception','name':'Card\x20chargeback\x20filed\x20against\x20a\x20settled\x20period','actor':'buyer','precondition':['M2'],'onchain':'not_applicable','commercialSemantics':'Signature-pay\x20finality\x20removes\x20the\x20chargeback\x20lever\x20by\x20construction:\x20there\x20is\x20no\x20card\x20network\x20in\x20the\x20settlement\x20path.\x20Fiat\x20ramps\x20keep\x20the\x20exposure\x20at\x20the\x20tool\x20layer\x20—\x20chain\x20semantics\x20eliminate\x20the\x20step.','evidence':[]},{'id':'E18','class':'exception','name':'Creator\x20refuses\x20a\x20refund\x20request\x20(no\x20arb\x20rails\x20on\x20this\x20machine)','actor':'buyer','precondition':['M2'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','moneyEffect':'refund'},'commercialSemantics':'Refunds\x20here\x20are\x20node-gated\x20rules,\x20not\x20requests:\x20while\x20the\x20order\x20sits\x20in\x20a\x20refundable\x20state\x20the\x20fan\x20can\x20exit\x20without\x20anyone\x27s\x20consent,\x20so\x20a\x20refusal\x20cannot\x20block\x20the\x20rails.\x20Degree\x20disputes\x20ride\x20the\x20separate\x20arbitration\x20object.','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc'}]},{'id':'E19','class':'exception','name':'Bank-side\x20dispute\x20freezes\x20the\x20payout\x20for\x20weeks','actor':'platform','precondition':['M2'],'onchain':'not_applicable','commercialSemantics':'There\x20is\x20no\x20bank\x20in\x20the\x20loop:\x20settlement\x20pays\x20alloc-side\x20and\x20the\x20owner\x20extracts\x20instantly,\x20so\x20hold\x20semantics\x20are\x20eliminated.\x20Fiat\x20off-ramps\x20keep\x20a\x20residual\x20exposure\x20at\x20the\x20tool\x20layer.','evidence':[]},{'id':'E20','class':'exception','name':'Reward\x20double-dip:\x20claim\x20bounty\x20and\x20refund\x20the\x20same\x20period','actor':'buyer','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'reviewed','moneyEffect':'reward'},'commercialSemantics':'No\x20guard-constructed\x20bounty/refund\x20exclusion\x20exists\x20today:\x20a\x20fully\x20refunded\x20order\x20still\x20rides\x20delivered/reviewed,\x20so\x20a\x20rating\x20row\x20and\x20the\x20bounty\x20claim\x20both\x20succeed\x20unless\x20the\x20PAID-STATE\x20pairing\x20(a\x20settle-evidence\x20repository\x20row\x20or\x20an\x20allocation-payment\x20witness\x20leg)\x20is\x20armed\x20—\x20pair\x20every\x20claim\x20with\x20it;\x20the\x20corpus\x20discloses\x20this\x20and\x20forbids\x20describing\x20bounty\x20and\x20refund\x20as\x20mutually\x20exclusive\x20by\x20guard\x20construction.','evidence':[{'file':'reward.move','line':0xa7,'pattern':'reward_guard'}]},{'id':'E21','class':'exception','name':'Arbitration\x20stalls:\x20dismissal\x20left\x20unconverged\x20on\x20the\x20case\x20object','actor':'keeper','precondition':['M7'],'onchain':'disclosure_only','disclosureProbe':'arb_case_conclude|dismissal','commercialSemantics':'Dispute\x20cases\x20live\x20on\x20the\x20independent\x20arbitration\x20object,\x20not\x20on\x20this\x20machine\x27s\x20shape.\x20The\x20keeper-driven\x20conclude\x20call\x20stamps\x20the\x20case\x20so\x20the\x20order\x27s\x20terminal\x20rails\x20stay\x20convergent;\x20the\x20corpus\x20discloses\x20the\x20dismissal-convergence\x20duty.','evidence':[]},{'id':'E22','class':'exception','name':'Dark-pattern\x20auto-renewal\x20(silent\x20rebill,\x20hostile\x20cancel\x20flows)','actor':'platform','precondition':['M2'],'onchain':'not_applicable','commercialSemantics':'Chain\x20semantics\x20eliminate\x20the\x20pattern:\x20every\x20period\x20needs\x20an\x20explicit\x20signature\x20and\x20cancel\x20is\x20simply\x20not\x20signing\x20again.\x20The\x20anti-dark-pattern\x20posture\x20is\x20a\x20structural\x20property,\x20not\x20a\x20policy\x20promise.','evidence':[]},{'id':'R1','class':'remedy','name':'Refund\x20at\x20subscribed\x20(period\x201,\x20before\x20production)','actor':'buyer','precondition':['M2'],'onchain':'expressible','chainFootprint':{'node':'subscribed','moneyEffect':'refund'},'commercialSemantics':'Node-gated\x20refund\x20rail:\x20full\x20balance\x20back\x20while\x20the\x20period\x20has\x20not\x20been\x20produced.\x20The\x20gate\x20key\x20lives\x20on\x20the\x20allocator\x20row,\x20so\x20the\x20machine-edge\x20surface\x20carries\x20no\x20probe.','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc'}]},{'id':'R2','class':'remedy','name':'Refund\x20at\x20charging\x20(renewal\x20signed,\x20period\x20not\x20started)','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'charging','moneyEffect':'refund'},'commercialSemantics':'A\x20renewal\x20that\x20was\x20signed\x20but\x20not\x20yet\x20consumed\x20refunds\x20in\x20full\x20from\x20the\x20charging\x20state\x20—\x20the\x20fan\x20is\x20never\x20trapped\x20between\x20signature\x20and\x20production.','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc'}]},{'id':'R3','class':'remedy','name':'Refund\x20at\x20delivering\x20(mid-period,\x20content\x20not\x20delivered)','actor':'buyer','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'delivering','moneyEffect':'refund'},'commercialSemantics':'The\x20mid-period\x20refund\x20rail\x20is\x20the\x20fan\x27s\x20answer\x20to\x20creator\x20silence;\x20combined\x20with\x20expiry\x27s\x20producer-side\x20exit\x20it\x20keeps\x20every\x20producing\x20order\x20exitable\x20from\x20at\x20least\x20one\x20side.','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc'}]},{'id':'R4','class':'remedy','name':'Refund\x20at\x20closed_cancel\x20(the\x20cancel\x20rail\x27s\x20payout)','actor':'buyer','precondition':['E3'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','moneyEffect':'refund'},'commercialSemantics':'Cancel\x20and\x20its\x20payout\x20are\x20two\x20rail\x20applications\x20over\x20the\x20same\x20closed\x20state;\x20the\x20payee\x20is\x20locked\x20to\x20the\x20fan,\x20so\x20the\x20exit\x20cannot\x20be\x20diverted.','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc'}]},{'id':'R5','class':'remedy','name':'Refund\x20at\x20expired\x20(expired\x27s\x20only\x20fund\x20exit)','actor':'buyer','precondition':['E2'],'onchain':'expressible','chainFootprint':{'node':'expired','moneyEffect':'refund'},'commercialSemantics':'After\x20the\x20creator-side\x20sweep\x20face\x20was\x20deleted,\x20expired\x20keeps\x20exactly\x20one\x20money\x20row:\x20the\x20fan\x20refund.\x20An\x20expired\x20period\x20can\x20never\x20settle\x20to\x20the\x20creator\x20on\x20this\x20template\x20—\x20the\x20dual-exit\x20note\x20discloses\x20the\x20split.','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc'}]},{'id':'R6','class':'remedy','name':'Two-step\x20refund\x20payout:\x20rails\x20land\x20funds\x20on\x20the\x20order,\x20fan\x20extracts','actor':'buyer','precondition':['R1'],'onchain':'disclosure_only','disclosureProbe':'owner_receive|two-step\x20refund','commercialSemantics':'Refund\x20rails\x20pay\x20the\x20order\x20object;\x20the\x20fan\x20then\x20pulls\x20the\x20balance\x20with\x20an\x20owner\x20extraction\x20call.\x20The\x20second\x20step\x20is\x20a\x20surfaced\x20UX\x20duty,\x20disclosed\x20by\x20the\x20two-step\x20payout\x20note.','evidence':[]},{'id':'R7','class':'remedy','name':'Creator\x20recovery\x20settlement\x20for\x20delivered-but-unrenewed\x20periods','actor':'merchant','precondition':['E2'],'onchain':'disclosure_only','disclosureProbe':'lapsed_unpaid|lapsed_delivered|EXPIRED\x20DUAL\x20EXIT','commercialSemantics':'The\x20incumbent\x20pays\x20creators\x20for\x20delivered\x20periods\x20even\x20when\x20the\x20fan\x20does\x20not\x20renew.\x20The\x20deleted\x20sweep\x20face\x20means\x20expired\x20pays\x20only\x20the\x20fan\x20here;\x20paying\x20the\x20creator\x20requires\x20the\x20build-time\x20node\x20split\x20(lapsed-paid\x20vs\x20lapsed-unpaid\x20vs\x20lapsed-delivered)\x20that\x20the\x20corpus\x20discloses\x20as\x20the\x20prescription.','evidence':[]},{'id':'R8','class':'remedy','name':'Arbitration\x20ruling\x20won:\x20award\x20paid\x20(cap\x20three\x20times\x20the\x20period\x20amount)','actor':'arbitrator','precondition':['E18'],'onchain':'disclosure_only','disclosureProbe':'arb_case_conclude|dismissal|award\x20cap','commercialSemantics':'Ruling\x20rails\x20are\x20not\x20mounted\x20on\x20this\x20machine\x27s\x20shape\x20—\x20awards\x20pay\x20from\x20the\x20compensation\x20fund\x20at\x20the\x20independent\x20arbitration\x20object\x20(cap\x20three\x20times\x20the\x20period\x20amount)\x20while\x20refund\x20rails\x20stay\x20node-gated\x20and\x20ruling-independent.\x20The\x20corpus\x20discloses\x20the\x20routing,\x20the\x20cap\x20and\x20the\x20keeper\x20conclude\x20duty.','evidence':[]},{'id':'R9','class':'remedy','name':'Arbitration\x20ruling\x20dismissed:\x20zero-indemnity,\x20funds\x20stay\x20put','actor':'arbitrator','precondition':['E18'],'onchain':'disclosure_only','disclosureProbe':'zero-indemnity|0-indemnity|dismissal','commercialSemantics':'A\x20dismissal\x20carries\x20no\x20indemnity\x20and\x20cannot\x20fund\x20a\x20claim\x20—\x20the\x20zero-indemnity\x20gate\x20makes\x20the\x20dismissal\x20unconverged\x20state\x20explicit\x20until\x20the\x20keeper\x20conclude\x20stamps\x20it.\x20The\x20corpus\x20discloses\x20the\x20convergence\x20duty.','evidence':[]},{'id':'R10','class':'remedy','name':'Creator-initiated\x20retention\x20refund\x20(goodwill\x20payment\x20to\x20keep\x20a\x20fan)','actor':'merchant','precondition':['E7'],'onchain':'disclosure_only','disclosureProbe':'payment\x20create\x20for_object|retention','commercialSemantics':'The\x20creator\x20can\x20push\x20a\x20direct\x20payment\x20tagged\x20to\x20the\x20order\x20(order-linked\x20info,\x20terms\x20in\x20the\x20remark)\x20to\x20compensate\x20a\x20fan\x20and\x20keep\x20the\x20subscription\x20—\x20the\x20direct-payment\x20mechanism\x20is\x20disclosed\x20by\x20the\x20corpus\x20even\x20though\x20no\x20dedicated\x20retention\x20edge\x20is\x20mounted.','evidence':[]},{'id':'R11','class':'remedy','name':'Dispute\x20case\x20filing\x20on\x20the\x20independent\x20arbitration\x20object','actor':'buyer','precondition':['E18'],'onchain':'disclosure_only','disclosureProbe':'disputes\x20route\x20to\x20arbitration','commercialSemantics':'Filing\x20creates\x20a\x20case\x20on\x20the\x20shared\x20arbitration\x20object\x20(third-party\x20mode)\x20—\x20not\x20a\x20node\x20on\x20this\x20machine.\x20The\x20corpus\x20discloses\x20that\x20disputes\x20route\x20to\x20arbitration\x20under\x20open\x20voting\x20with\x20the\x20award\x20cap.','evidence':[]},{'id':'R12','class':'remedy','name':'Case\x20withdrawn\x20after\x20the\x2030-day\x20window\x20(fee\x20swept,\x20award\x20untouched)','actor':'keeper','precondition':['E18'],'onchain':'disclosure_only','disclosureProbe':'\x5cbwithdraw|30\x20days|withdraw\x20window','commercialSemantics':'Withdrawal\x20is\x20tribunal-side\x20with\x20a\x20bounded\x20window;\x20the\x20sweep\x20clears\x20only\x20the\x20fee\x20balance\x20and\x20never\x20touches\x20the\x20indemnity\x20record.\x20The\x20corpus\x20discloses\x20the\x20window:\x20withdrawal\x20is\x20tribunal-side\x20only,\x20inside\x20the\x2030-day\x20withdraw\x20window.','evidence':[]},{'id':'P1','class':'post','name':'Public\x20review\x20rows\x20persist\x20(write-once,\x20queryable\x20reputation)','actor':'buyer','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'reviewed','moneyEffect':'none'},'commercialSemantics':'Review\x20rows\x20are\x20write-once\x20repository\x20records\x20keyed\x20to\x20the\x20order\x20—\x20public,\x20tamper-evident\x20reputation\x20the\x20incumbent\x20keeps\x20in\x20a\x20private\x20database.','evidence':[{'file':'repository.move','line':0x24e,'pattern':'data_add_imp'}]},{'id':'P2','class':'post','name':'Honor-tier\x20rewards\x20funded\x20at\x20build\x20time\x20(pool\x20+\x20per-claim)','actor':'merchant','precondition':['M7'],'onchain':'disclosure_only','disclosureProbe':'honor-tier|historical\x20period\x20count','commercialSemantics':'Tier\x20rewards\x20are\x20pool-funded\x20claim\x20objects\x20whose\x20guard\x20reads\x20tenure;\x20funding\x20happens\x20at\x20build/publish\x20time,\x20and\x20the\x20corpus\x20discloses\x20the\x20pool\x20mechanics\x20and\x20the\x20pairing\x20requirement.','evidence':[]},{'id':'P3','class':'post','name':'Period\x20counter\x20accrues\x20as\x20the\x20public\x20tenure\x20record','actor':'buyer','precondition':['M11'],'onchain':'disclosure_only','disclosureProbe':'period-<N>|history\x20count','commercialSemantics':'The\x20per-period\x20once-slot\x20equals\x20the\x20progress\x20history\x20count,\x20so\x20subscription\x20tenure\x20is\x20a\x20chain-derived\x20monotonic\x20record\x20—\x20portable\x20seniority\x20the\x20incumbent\x20holds\x20privately.\x20The\x20corpus\x20discloses\x20the\x20counter\x20semantics.','evidence':[]},{'id':'P4','class':'post','name':'Rejoin\x20after\x20expiry:\x20a\x20fresh\x20order\x20restores\x20membership','actor':'buyer','precondition':['E2'],'onchain':'expressible','chainFootprint':{'node':'subscribed','moneyEffect':'escrow_in'},'commercialSemantics':'Rejoining\x20is\x20a\x20new\x20buy\x20into\x20the\x20same\x20tier;\x20prior\x20review\x20rows\x20and\x20the\x20period\x20history\x20remain\x20attached\x20to\x20the\x20creator\x27s\x20public\x20record,\x20so\x20churn\x20does\x20not\x20erase\x20reputation.','evidence':[{'file':'service.move','line':0x1c9,'pattern':'public\x20fun\x20buy'}]},{'id':'P5','class':'post','name':'Reward\x20claim\x20window\x20closes\x20(no\x20dangling\x20bounty\x20liability)','actor':'keeper','precondition':['M8'],'onchain':'disclosure_only','disclosureProbe':'reward\x20window|claim\x20window|reward_claim_closes_after_days|closes\x20after','commercialSemantics':'The\x20claim\x20guard\x27s\x20time\x20leg\x20closes\x20the\x20bounty\x20window\x20so\x20pools\x20cannot\x20leak\x20forever.\x20The\x20corpus\x20discloses\x20the\x20close:\x20the\x20window\x20shuts\x20reward_claim_closes_after_days\x20after\x20the\x20review\x20node\x27s\x20entry,\x20and\x20unclaimed\x20balances\x20are\x20unclaimable,\x20not\x20redistributed.','evidence':[]},{'id':'P6','class':'post','name':'Settlement\x20finality:\x20released\x20funds\x20cannot\x20be\x20clawed\x20back','actor':'platform','precondition':['M7'],'onchain':'not_applicable','commercialSemantics':'Release\x20is\x20terminal\x20—\x20no\x20chargeback\x20claw-back\x20exists\x20on\x20chain.\x20Creator\x20cash-flow\x20certainty\x20is\x20the\x20selling\x20point;\x20the\x20consumer-protection\x20gap\x20is\x20the\x20disclosed\x20cost\x20of\x20that\x20certainty.','evidence':[]}],'invariants':[{'id':'INV-SUB-TAKE-0','statement':'The\x20desk\x20charges\x20no\x20platform\x20take\x20on\x20membership\x20revenue\x20—\x20the\x20benchmark\x20claim\x20is\x200%\x20against\x20the\x20incumbent\x27s\x20single-digit\x20to\x20double-digit\x20cut.','jurisdiction':'platform\x20policy','chainConflict':'Settlement\x20allocator\x20rows\x20pay\x20the\x20full\x20balance\x20to\x20the\x20creator\x20(rate\x2010000);\x20any\x20nonzero\x20platform\x20take\x20knob\x20contradicts\x20the\x20zero-commission\x20economics\x20the\x20product_ref\x20claims.','evidence':[{'file':'allocation.move','line':0x17b,'pattern':'allocator_add'}],'violation':{'requiresFeeParamNonZero':'platform_take_bps'}},{'id':'INV-SUB-RENEW-SIGN','statement':'No\x20period\x20may\x20be\x20charged\x20without\x20the\x20subscriber\x27s\x20explicit\x20signature;\x20keepers\x20may\x20remind\x20and\x20expire\x20but\x20can\x20never\x20charge.','chainConflict':'The\x20ledger\x20has\x20no\x20debit\x20or\x20recurring-billing\x20primitive\x20—\x20every\x20fund\x20movement\x20is\x20a\x20signed\x20order\x20call,\x20so\x20the\x20rule\x20holds\x20by\x20construction.\x20Text-only:\x20guards\x20against\x20any\x20future\x20auto-charge\x20knob\x20on\x20this\x20template\x20family.'},{'id':'INV-SUB-REFUND-RAIL','statement':'Every\x20pre-final\x20state\x20keeps\x20a\x20fan\x20refund\x20exit,\x20and\x20expired\x20keeps\x20the\x20fan\x20refund\x20as\x20its\x20ONLY\x20fund\x20exit\x20—\x20no\x20creator-side\x20sweep\x20may\x20front-run\x20the\x20fan.','chainConflict':'The\x20awarded_recover\x20drain\x20face\x20was\x20deleted\x20from\x20the\x20allocator:\x20expired\x27s\x20sole\x20money\x20row\x20is\x20the\x20refund\x20rail.\x20Text-only:\x20guards\x20against\x20re-introducing\x20a\x20second\x20expired\x20payout\x20row.'}]};

package/dist/knowledge/path-oracle/products/pinduoduo-kuaituantuan.js

@@ -0,0 +1 @@
+export const PINDUODUO_KUAITUANTUAN_ORACLE={'productRef':'pinduoduo-kuaituantuan','products':['pinduoduo-kuaituantuan','qunjielong'],'oracleVersion':'1.0.0','steps':[{'id':'M1','class':'offchain','name':'Discover\x20the\x20round\x20via\x20the\x20WeChat\x20community\x20share','actor':'buyer','precondition':[],'onchain':'not_applicable','commercialSemantics':'Group\x20share\x20and\x20broadcast\x20are\x20the\x20product\x27s\x20only\x20reach\x20channel\x20—\x20private-domain\x20tooling.\x20There\x20is\x20no\x20community\x20broadcast\x20primitive\x20on\x20chain,\x20and\x20the\x20messenger\x20carries\x20only\x20in-order\x20evidence,\x20never\x20recruitment.','evidence':[]},{'id':'M2','class':'offchain','name':'Leader\x20opens\x20the\x20round:\x20funding\x20goal,\x20absolute\x20deadline,\x20pledge\x20price,\x20tool\x20fee','actor':'merchant','precondition':['M1'],'onchain':'not_applicable','commercialSemantics':'The\x20round\x20parameters\x20are\x20build-time\x20inputs:\x20the\x20funding\x20goal\x20and\x20the\x20absolute\x20epoch-ms\x20deadline\x20feed\x20the\x20threshold\x20guards,\x20the\x20pledge\x20price\x20is\x20locked\x20at\x20listing,\x20and\x20the\x20tool\x20fee\x20defaults\x20to\x20zero\x20under\x20the\x20direct-sales\x20doctrine.\x20The\x20deadline\x20must\x20be\x20passed\x20explicitly\x20—\x20a\x20zero\x20deadline\x20is\x20hard-blocked\x20at\x20compile.','evidence':[]},{'id':'M3','class':'main','name':'Pledge\x20=\x20pay:\x20full\x20escrow\x20in\x20the\x20order\x27s\x20own\x20unpooled\x20allocation\x20+\x20order-keyed\x20contribution\x20row','actor':'buyer','precondition':['M2'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'Paying\x20IS\x20joining\x20the\x20group:\x20each\x20pledge\x20is\x20escrowed\x20in\x20its\x20own\x20allocation\x20bound\x20to\x20that\x20buyer\x27s\x20order,\x20never\x20pooled,\x20and\x20a\x20contribution\x20row\x20keyed\x20by\x20the\x20order\x20address\x20lands\x20in\x20the\x20round\x20ledger.\x20Attribution\x20survives\x20every\x20later\x20outcome\x20—\x20a\x20missed\x20round\x20refunds\x20each\x20pledger\x20their\x20own\x20money.','evidence':[{'file':'service.move','line':0x1c9,'pattern':'public\x20fun\x20buy<T>'},{'file':'allocation.move','line':0xda,'pattern':'enum\x20Recipient'}]},{'id':'M4','class':'main','name':'Round\x20progress\x20visible\x20—\x20pledger\x20count,\x20countdown,\x20aggregate','actor':'platform','precondition':['M3'],'onchain':'disclosure_only','disclosureProbe':'never\x20present\x20the\x20aggregate\x20as\x20chain-verified\x20custody','commercialSemantics':'The\x20funding\x20total\x20is\x20a\x20chain-computed\x20escrow-bound\x20sum\x20over\x20the\x20order-keyed\x20row\x20roster\x20—\x20it\x20is\x20not\x20a\x20custody\x20proof,\x20and\x20the\x20ghost-row\x20residual\x20(refunded\x20rows\x20counting\x20until\x20zeroed)\x20is\x20disclosed\x20with\x20the\x20live\x20cap\x20that\x20already\x20clamps\x20drained\x20rows\x20to\x20zero\x20on\x20chain.','evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'M5','class':'main','name':'Deadline\x20passes\x20with\x20the\x20goal\x20met:\x20ThresholdMet\x20fires\x20—\x20release\x20POLARITY\x20only,\x20no\x20money\x20moves','actor':'keeper','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'threshold_settled','forward':'ThresholdMet','prev':'paid','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20deadline\x20gate\x20reads\x20the\x20escrow-bound\x20all-mode\x20aggregate\x20plus\x20the\x20live-escrow\x20leg,\x20on\x20the\x20shared\x20absolute\x20timestamp.\x20Zero\x20money\x20moves\x20here\x20by\x20design:\x20releasing\x20at\x20the\x20deadline\x20would\x20hand\x20the\x20leader\x20cash\x20before\x20any\x20goods\x20exist,\x20so\x20the\x20settlement\x20leg\x20waits\x20for\x20completed.','guardKeyProbe':'threshold_release','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'M6','class':'main','name':'Leader\x20sources\x20the\x20goods\x20off-chain\x20—\x20chain\x20footprint\x20is\x20the\x20sourcing\x20evidence\x20row','actor':'merchant','precondition':['M5'],'onchain':'expressible_with_gap','chainFootprint':{'node':'sourcing','forward':'SourceGoods','prev':'threshold_settled','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'Between\x20deadline\x20and\x20settlement\x20the\x20leader\x20spends\x20their\x20OWN\x20money\x20with\x20suppliers;\x20the\x20chain\x20sees\x20only\x20the\x20write-once\x20evidence\x20row.\x20The\x20gap\x20is\x20structural:\x20there\x20is\x20no\x20supplier\x20sub-order\x20or\x20derived-escrow\x20primitive,\x20so\x20the\x20pledge\x27s\x20leverage\x20is\x20the\x20escrow\x20itself\x20—\x20your\x20money\x20releases\x20only\x20after\x20goods\x20arrive\x20and\x20the\x20claim\x20window\x20shuts.','guardKeyProbe':'sourcing_evidence','gapPredicate':{'probe':'the\x20leader\x20fronts\x20the\x20procurement'},'evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'M7','class':'main','name':'Leader\x20distributes\x20to\x20the\x20community\x20point\x20or\x20ships\x20parcels\x20(distribution\x20evidence\x20row)','actor':'merchant','precondition':['M6'],'onchain':'expressible_with_gap','chainFootprint':{'node':'delivered','forward':'DistributeGoods','prev':'sourcing','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'The\x20leader\x20can\x20fire\x20this\x20edge\x20alone:\x20the\x20writer-bound\x20distribution\x20row\x20proves\x20the\x20signer,\x20not\x20the\x20handover.\x20The\x20buyers\x27\x20structural\x20hedge\x20is\x20the\x20serial\x20window\x27s\x20min-hold,\x20the\x20after-sales\x20window\x20and\x20third-party\x20arbitration\x20—\x20the\x20residual\x20itself\x20is\x20disclosed\x20only\x20on\x20the\x20shape\x20role,\x20and\x20the\x20gap\x20probe\x20is\x20strict\x20and\x20expected\x20to\x20MISS\x20until\x20it\x20reaches\x20the\x20corpus.','guardKeyProbe':'distribution_evidence','gapPredicate':{'probe':'distribution\x20evidence\x20is\x20self-declared'},'evidence':[{'file':'progress.move','line':0x124,'pattern':'fun\x20IsNamedOperator'}]},{'id':'M8','class':'main','name':'Neighbor\x20collects\x20—\x20dual\x20confirmation\x20(buyer\x20254-identity\x20+\x20staff\x27s\x20writer-bound\x20receipt\x20row)','actor':'buyer','precondition':['M6'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'ConfirmReceipt','prev':'sourcing','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Neither\x20party\x20alone\x20advances:\x20the\x20neighbor\x27s\x20identity\x20confirm\x20AND\x20the\x20staff\x27s\x20order-keyed\x20redemption\x20row\x20must\x20both\x20exist,\x20and\x20each\x20evidence\x20kind\x20owns\x20its\x20own\x20policy\x20so\x20stage\x20rows\x20can\x20never\x20substitute\x20for\x20the\x20receipt\x20row.','guardKeyProbe':'deliver_confirm','evidence':[{'file':'progress.move','line':0x48,'pattern':'TASK_BINDING_IDENTIFIER:\x20u8\x20=\x20254'}]},{'id':'M9','class':'main','name':'Serial\x20claim\x20window\x20opens\x20(keeper\x20slot,\x20min-hold\x20after\x20the\x20delivered\x20entry)','actor':'keeper','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'claim_window','forward':'OpenClaimWindow','prev':'delivered','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20dispute\x20clock\x20cannot\x20start\x20at\x20the\x20instant\x20of\x20delivery:\x20an\x20opening\x20min-hold\x20gives\x20a\x20goods-in-transit\x20neighbor\x20a\x20day\x20before\x20filing\x20and\x20settlement\x20clocks\x20begin.\x20Four\x20exits\x20hang\x20off\x20the\x20window\x20—\x20file,\x20settle,\x20return\x20request,\x20shortfall\x20report.','guardKeyProbe':'claim_window_open','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'M10','class':'main','name':'Settle\x20after\x20the\x20window:\x20leader\x20leg\x20(complement\x20of\x20the\x20tool\x20fee)\x20+\x20platform\x20tool-fee\x20leg\x20+\x20rate-0\x20order\x20anchor','actor':'keeper','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'SettleAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'release'},'commercialSemantics':'Settlement\x20is\x20deliberately\x20slower\x20than\x20the\x20real\x20product\x27s\x20instant\x20leader\x20payout\x20—\x20the\x20escrow-through-fulfillment\x20shape\x20buys\x20goods-before-money\x20at\x20the\x20cost\x20of\x20hours-scale\x20settlement.\x20The\x20leader\x27s\x20sourcing\x20outlay\x20plus\x20margin\x20comes\x20back\x20inside\x20this\x20single\x20disclosed\x20leg;\x20the\x20tool\x20fee\x20defaults\x20to\x20zero.','guardKeyProbe':'settle_window_gate','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc<T>'},{'file':'allocation.move','line':0x271,'pattern':'Recipient::Entity'}]},{'id':'E1','class':'exception','name':'Pre-deadline\x20pledge\x20withdrawal\x20—\x20full\x20refund\x20+\x20contribution\x20row\x20zeroed','actor':'buyer','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'withdrawn','forward':'WithdrawPledge','prev':'paid','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Any\x20time\x20before\x20the\x20absolute\x20deadline\x20the\x20pledge\x20is\x20withdrawable\x20in\x20full;\x20after\x20it,\x20committed\x20to\x20the\x20threshold\x20outcome\x20—\x20the\x20withdrawal\x20exit\x20and\x20the\x20settlement\x20are\x20mutually\x20exclusive\x20in\x20time.\x20The\x20zeroing\x20of\x20the\x20contribution\x20row\x20is\x20the\x20pledger\x20tooling\x27s\x20second\x20step;\x20the\x20on-chain\x20live\x20cap\x20already\x20stops\x20a\x20drained\x20row\x20from\x20counting.','guardKeyProbe':'pre_deadline_withdraw','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc<T>'}]},{'id':'E2','class':'exception','name':'Goal\x20missed\x20at\x20the\x20deadline\x20—\x20keeper\x20batch-refunds\x20every\x20pledger\x20in\x20full','actor':'keeper','precondition':['M4'],'onchain':'expressible_with_gap','chainFootprint':{'node':'missed_refunded','forward':'RefundOnMissed','prev':'paid','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20refund\x20polarity\x20reads\x20the\x20same\x20aggregate\x20below\x20goal\x20and\x20refunds\x20each\x20pledger\x20their\x20own\x20unpooled\x20pledge.\x20The\x20gap:\x20automatic\x20means\x20a\x20keeper\x27s\x20batch\x20advance\x20—\x20this\x20template\x20ships\x20no\x20deadline\x20self-heal\x20edge,\x20so\x20a\x20stalled\x20keeper\x20blocks\x20BOTH\x20outcomes\x20at\x20paid.','guardKeyProbe':'threshold_refund','gapPredicate':{'probe':'the\x20abandon\x20self-heal\x20is\x20NOT\x20shipped'},'evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'E3','class':'exception','name':'Keeper\x20stalls\x20at\x20the\x20deadline\x20—\x20the\x20round\x20strands\x20at\x20paid,\x20both\x20outcomes\x20blocked','actor':'keeper','precondition':['E2'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','moneyEffect':'none'},'commercialSemantics':'The\x20defect\x20face\x20of\x20the\x20missing\x20self-heal:\x20the\x20missed-refund\x20rail\x20is\x20node-gated\x20to\x20its\x20refund\x20state,\x20so\x20a\x20dead\x20keeper\x20simultaneously\x20blocks\x20the\x20refund\x20and\x20the\x20fulfillment.\x20The\x20disclosed\x20consequence\x20names\x20the\x20fix\x20—\x20a\x20deadline\x20self-heal\x20edge\x20or\x20a\x20buyer-side\x20timeout\x20arm\x20—\x20neither\x20shipped\x20today.','gapPredicate':{'probe':'the\x20abandon\x20self-heal\x20is\x20NOT\x20shipped'},'evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'E4','class':'exception','name':'Leader\x20cancels\x20the\x20round\x20/\x20cannot\x20source\x20after\x20the\x20goal\x20is\x20met','actor':'merchant','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'missed_refunded','forward':'CancelByLeader','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'CURED\x20(wave-3,\x202026-11-06):\x20the\x20archetype\x27s\x20most\x20common\x20real-world\x20failure\x20now\x20has\x20its\x20in-machine\x20exit\x20—\x20CancelByLeader\x20from\x20threshold_settled\x20(pre-sourcing\x20abort)\x20and\x20from\x20sourcing\x20(procurement\x20failure)\x20batch-advances\x20every\x20committed\x20order\x20into\x20missed_refunded,\x20where\x20the\x20SAME\x20missed_refund\x20rail\x20refunds\x20each\x20pledge\x20IN\x20FULL\x20(refund-rail\x20slot\x201001;\x20node-gated\x20tpl_forward_node_check\x20guards,\x20one\x20per\x20exit\x20edge).\x20Below-goal\x20rounds\x20can\x20never\x20ride\x20these\x20edges:\x20threshold_settled/sourcing\x20are\x20only\x20entered\x20through\x20the\x20met\x20threshold\x20(D-BUG-2\x20polarity).','evidence':[]},{'id':'E5','class':'exception','name':'Leader\x20runaway\x20with\x20pre-delivery\x20funds\x20—\x20structurally\x20impossible\x20on\x20this\x20shape','actor':'merchant','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'completed','identity':'permission_index','moneyEffect':'release'},'commercialSemantics':'The\x20real\x20product\x27s\x20leader\x20could\x20withdraw\x20before\x20shipping\x20—\x20the\x20fraud\x20vector\x20behind\x20the\x20headline\x20cases.\x20Here\x20the\x20escrow\x20penetrates\x20to\x20fulfillment:\x20the\x20settling\x20slot\x20must\x20be\x20bound\x20to\x20a\x20different\x20address\x20from\x20the\x20leader\x20slot,\x20so\x20a\x20runaway\x20leader\x20strands\x20the\x20money\x20in\x20escrow\x20instead\x20of\x20walking\x20away\x20with\x20it.\x20The\x20binding\x20is\x20a\x20build-time\x20requirement\x20the\x20disclosure\x20states\x20plainly.','guardKeyProbe':'settle_window_gate','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc<T>'}]},{'id':'E6','class':'exception','name':'Ghost\x20contribution\x20rows\x20inflate\x20the\x20aggregate\x20(refunded\x20rows\x20keep\x20counting)','actor':'keeper','precondition':['M4'],'onchain':'expressible_with_gap','chainFootprint':{'node':'threshold_settled','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20live\x20cap\x20clamps\x20each\x20row\x20to\x20the\x20order\x27s\x20live\x20allocation\x20balance\x20on\x20chain,\x20so\x20a\x20drained\x20escrow\x20contributes\x20zero\x20automatically\x20—\x20the\x20residual\x20is\x20ledger\x20hygiene:\x20zeroing\x20a\x20withdrawn\x20pledge\x20is\x20the\x20pledger\x20tooling\x27s\x20duty,\x20disclosed,\x20with\x20row-revocation\x20registered\x20as\x20a\x20kernel\x20ask.','guardKeyProbe':'threshold_release','gapPredicate':{'probe':'live\x20cap'},'evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E7','class':'exception','name':'Forged\x20or\x20wallet-keyed\x20contribution\x20row\x20(aggregate\x20inflation\x20attack)','actor':'buyer','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'paid','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20write\x20guard\x27s\x20identity\x20leaf\x20accepts\x20only\x20the\x20order\x20owner\x20or\x20their\x20agent,\x20rows\x20are\x20order-keyed\x20by\x20compile,\x20and\x20the\x20bound-form\x20aggregate\x20reads\x20zero\x20for\x20any\x20row\x20id\x20that\x20is\x20not\x20an\x20order\x20—\x20the\x20placeholder\x20open-write\x20guard\x20that\x20let\x20anyone\x20forge\x20a\x20quorum\x20is\x20cured\x20at\x20both\x20the\x20write\x20and\x20the\x20read.','evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E8','class':'exception','name':'Keeper\x20drives\x20a\x20below-goal\x20round\x20into\x20fulfillment\x20(polarity\x20attack)','actor':'keeper','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'threshold_settled','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'Release\x20and\x20refund\x20are\x20opposite\x20node\x20predicates\x20on\x20the\x20same\x20aggregate\x20—\x20the\x20settlement\x20gate\x20aborts\x20while\x20the\x20bound\x20sum\x20is\x20below\x20goal,\x20so\x20the\x20same\x20keeper\x20cannot\x20spend\x20a\x20failed\x20round\x27s\x20escrow\x20on\x20procurement.','guardKeyProbe':'threshold_release','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'E9','class':'exception','name':'Round\x20with\x20more\x20than\x20one\x20hundred\x20pledgers\x20—\x20roster\x20split\x20across\x20policy\x20keys','actor':'keeper','precondition':['M4'],'onchain':'disclosure_only','disclosureProbe':'splits\x20rows\x20across\x20policy\x20keys','commercialSemantics':'A\x20key\x20with\x20more\x20than\x20one\x20hundred\x20roster\x20rows\x20aborts\x20fail-closed,\x20so\x20giant\x20groups\x20must\x20split\x20across\x20policy\x20keys\x20—\x20a\x20disclosed\x20boundary\x20with\x20an\x20understate-only\x20failure\x20direction\x20(pre-flag\x20rows\x20contribute\x20zero,\x20never\x20extra).','evidence':[]},{'id':'E10','class':'exception','name':'Wrong,\x20missing\x20or\x20short\x20goods\x20—\x20shortfall\x20report\x20or\x20return\x20request\x20inside\x20the\x20after-sales\x20window','actor':'buyer','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'return_requested','forward':'RequestReturn','prev':'delivered','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Filing\x20is\x20available\x20from\x20the\x20delivered\x20state\x20and\x20from\x20inside\x20the\x20claim\x20window\x20on\x20separate\x20keys,\x20gated\x20by\x20the\x20closing\x20window\x20plus\x20the\x20order-holder\x20identity\x20set.\x20Reaching\x20the\x20request\x20state\x20establishes\x20the\x20refund\x20right;\x20a\x20lightweight\x20shortfall\x20report\x20rides\x20the\x20same\x20track\x20instead\x20of\x20jumping\x20straight\x20to\x20a\x20dispute.','guardKeyProbe':'return_window_delivered','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'E11','class':'exception','name':'Fresh\x20goods\x20spoiled\x20—\x20refund-only\x20bad-item\x20compensation\x20(goods\x20never\x20travel\x20back)','actor':'merchant','precondition':['E10'],'onchain':'expressible','chainFootprint':{'node':'refunded','forward':'CompensateBadItem','prev':'return_requested','identity':'named_operator','moneyEffect':'refund'},'commercialSemantics':'The\x20industry\x27s\x20photo-and-compensate\x20convention\x20becomes\x20a\x20leader-written\x20approval\x20row\x20—\x20write-once\x20final\x20evidence\x20carrying\x20the\x20buyer\x27s\x20photo\x20reference\x20—\x20and\x20the\x20after-sales\x20rail\x20pays\x20on\x20the\x20refunded\x20state.\x20A\x20silent\x20staff\x20decision\x20is\x20structurally\x20impossible.','guardKeyProbe':'bad_item_evidence','evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'E12','class':'exception','name':'Return-and-refund\x20via\x20the\x20leader:\x20ship\x20back,\x20staff\x20receipt\x20row,\x20refund','actor':'buyer','precondition':['E10'],'onchain':'expressible','chainFootprint':{'node':'returned','forward':'ReturnReceived','prev':'return_in_transit','identity':'named_operator','moneyEffect':'refund'},'commercialSemantics':'The\x20three-segment\x20return\x20track\x20ends\x20in\x20the\x20leader\x20staff\x27s\x20RMA\x20receipt\x20row\x20under\x20its\x20own\x20policy;\x20the\x20refund_execute\x20rail\x20pays\x20once\x20the\x20returned\x20state\x20is\x20reached.\x20Distinct\x20keys\x20per\x20segment\x20keep\x20the\x20remedy\x20states\x20unfakeable.','guardKeyProbe':'return_received','evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E13','class':'exception','name':'Return\x20parcel\x20lost\x20in\x20transit\x20—\x20keeper\x20refund\x20after\x20the\x20transit\x20timeout','actor':'keeper','precondition':['E12'],'onchain':'expressible','chainFootprint':{'node':'refunded','forward':'RefundLostReturn','prev':'return_in_transit','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20buyer\x20never\x20carries\x20the\x20return-leg\x20carrier\x20risk:\x20after\x20the\x20timeout\x20the\x20keeper\x20advances\x20the\x20lost\x20parcel\x20into\x20the\x20refunded\x20terminal\x20and\x20the\x20money\x20goes\x20home;\x20the\x20lost\x20parcel\x20itself\x20is\x20the\x20leader\x27s\x20off-chain\x20carrier\x20claim.','guardKeyProbe':'return_transit_timeout','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'E14','class':'exception','name':'Short\x20box\x20wants\x20a\x20PARTIAL\x20remedy\x20—\x20after_sales_scope\x20selector\x20(full\x20default\x20/\x20declared\x20amount)','actor':'merchant','precondition':['E10'],'onchain':'expressible_with_gap','chainFootprint':{'node':'refunded','forward':'CompensateBadItem','prev':'return_requested','identity':'named_operator','moneyEffect':'refund'},'commercialSemantics':'The\x20default\x20refunds\x20the\x20whole\x20pledge\x20on\x20either\x20remedy\x20path\x20and\x20the\x20quote\x20must\x20promise\x20exactly\x20that;\x20the\x20partial\x20variant\x20pays\x20the\x20declared\x20fixed\x20shortfall\x20figure\x20—\x20the\x20catalog\x27s\x20first\x20absolute-amount\x20rail\x20—\x20while\x20a\x20returned\x20box\x20always\x20refunds\x20in\x20full.\x20Per-order\x20dynamic\x20pro-rata\x20needs\x20the\x20chain\x20Formula\x20mode\x20and\x20stays\x20on\x20the\x20protocol\x20train.','guardKeyProbe':'bad_item_evidence','gapPredicate':{'probe':'never\x20PROMISE\x20a\x20partial\x20refund\x20the\x20build\x20does\x20not\x20carry'},'evidence':[{'file':'allocation.move','line':0xab,'pattern':'const\x20AllocationMode_Amount:u8\x20=\x200'}]},{'id':'E15','class':'exception','name':'Staff\x20forgets\x20the\x20receipt\x20redemption\x20row\x20—\x20the\x20buyer-first\x20receipt\x20exit\x20dies','actor':'fulfiller','precondition':['M8'],'onchain':'expressible_with_gap','chainFootprint':{'node':'sourcing','moneyEffect':'none'},'commercialSemantics':'The\x20composite\x20gate\x20fails\x20closed:\x20a\x20goods-holding\x20neighbor\x20cannot\x20use\x20their\x20own\x20receipt\x20exit\x20and\x20receipt\x20then\x20rides\x20only\x20the\x20leader\x27s\x20distribution\x20path.\x20The\x20keeper\x20duty\x20presses\x20the\x20row\x20write;\x20the\x20edge\x20is\x20never\x20downgraded\x20to\x20a\x20staff-only\x20confirmation.','gapPredicate':{'probe':'staff\x20that\x20forgets\x20the\x20row'},'evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E16','class':'exception','name':'Leader\x20self-advances\x20distribution\x20without\x20a\x20real\x20handover\x20(self-declared\x20evidence)','actor':'merchant','precondition':['M6'],'onchain':'expressible_with_gap','chainFootprint':{'node':'delivered','forward':'DistributeGoods','prev':'sourcing','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'The\x20attack\x20view\x20of\x20the\x20same\x20topology\x20fact:\x20the\x20write\x20guard\x20proves\x20the\x20signer,\x20nothing\x20proves\x20the\x20parcel.\x20The\x20buyers\x27\x20hedges\x20are\x20the\x20min-hold\x20window,\x20the\x20after-sales\x20window\x20and\x20third-party\x20arbitration\x20—\x20the\x20residual\x20is\x20disclosed\x20only\x20on\x20the\x20shape\x20role,\x20and\x20the\x20gap\x20probe\x20is\x20strict\x20and\x20expected\x20to\x20MISS\x20until\x20it\x20reaches\x20the\x20corpus.','guardKeyProbe':'distribution_evidence','gapPredicate':{'probe':'distribution\x20evidence\x20is\x20self-declared'},'evidence':[{'file':'progress.move','line':0x124,'pattern':'fun\x20IsNamedOperator'}]},{'id':'E17','class':'exception','name':'Buyer\x20coordinates\x20(phone,\x20address,\x20recipient)\x20live\x20off-chain\x20in\x20chat\x20and\x20dispatch','actor':'platform','precondition':['M2'],'onchain':'unresolvable','unresolvableRef':'S6','disclosureProbe':'buyer\x20coordinates[^\x22]{0,40}live\x20OFF-CHAIN','commercialSemantics':'Delivery\x20coordination\x20happens\x20in\x20the\x20leader\x27s\x20chat\x20or\x20the\x20mini-program\x20order;\x20the\x20declarative\x20required-info\x20field\x20never\x20gates\x20the\x20purchase\x20and\x20the\x20chain\x20holds\x20zero\x20PII.\x20Unlawful\x20personal-information\x20collection\x20is\x20also\x20a\x20regulatory\x20no-no\x20the\x20disclosure\x20flags.','evidence':[{'file':'service.move','line':0x100,'pattern':'customer_required:\x20vector<String>'}]},{'id':'E18','class':'exception','name':'Community\x20organizing\x20—\x20broadcast,\x20follow\x20relations,\x20blocking\x20or\x20dissolving\x20the\x20group','actor':'merchant','precondition':['M1'],'onchain':'unresolvable','unresolvableRef':'S5','disclosureProbe':'never\x20community\x20broadcast','commercialSemantics':'The\x20group\x20is\x20the\x20product\x27s\x20entire\x20reach\x20and\x20remedy\x20channel,\x20and\x20a\x20blocked\x20or\x20dissolved\x20group\x20is\x20exactly\x20how\x20buyers\x20end\x20up\x20money-and-goods\x20stranded\x20in\x20the\x20real\x20world.\x20On\x20chain\x20the\x20organizer\x20cannot\x20cut\x20any\x20money\x20rail\x20by\x20blocking\x20—\x20organizing\x20lives\x20entirely\x20outside\x20the\x20machine,\x20disclosed\x20as\x20a\x20boundary.','evidence':[]},{'id':'E19','class':'exception','name':'Multi-layer\x20reseller\x20distribution\x20with\x20referral\x20commissions','actor':'merchant','precondition':['M2'],'onchain':'not_applicable','disclosureProbe':'Multi-layer\x20commission[^\x22]{0,40}structurally\x20impossible','commercialSemantics':'The\x20real\x20growth\x20engine\x20—\x20supply\x20leader,\x20group\x20leader,\x20reseller\x20leaders\x20plus\x20referral\x20cuts\x20—\x20is\x20also\x20the\x20pyramid-regulation\x20hot\x20zone.\x20On\x20chain\x20there\x20is\x20one\x20leader\x20leg\x20plus\x20one\x20tool-fee\x20leg\x20and\x20structurally\x20no\x20second\x20layer;\x20member\x20rebates\x20are\x20off-chain\x20pass-through\x20from\x20the\x20leader\x27s\x20share.','evidence':[{'file':'allocation.move','line':0x10a,'pattern':'public\x20fun\x20sharing_for_guard_identifier'}]},{'id':'E20','class':'exception','name':'Platform\x20freezes\x20the\x20round\x20or\x20bans\x20the\x20link\x20(violation\x20governance)','actor':'platform','precondition':['M3'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20publisher\x20can\x20flip\x20the\x20runtime\x20buy\x20switch\x20to\x20refuse\x20NEW\x20entrants,\x20but\x20escrowed\x20pledges\x20of\x20existing\x20buyers\x20have\x20no\x20freeze\x20primitive\x20—\x20deliberately:\x20the\x20platform\x20must\x20never\x20be\x20able\x20to\x20confiscate\x20escrow.\x20Existing\x20buyers\x20keep\x20the\x20deadline\x20polarities\x20and\x20the\x20arbitration\x20exits.\x20The\x20deliberate-no-freeze\x20rationale\x20is\x20not\x20in\x20the\x20corpus\x20yet,\x20so\x20the\x20gap\x20probe\x20is\x20strict\x20and\x20expected\x20to\x20MISS.','gapPredicate':{'probe':'no\x20platform\x20freeze\x20primitive'},'evidence':[{'file':'service.move','line':0x4f1,'pattern':'public\x20fun\x20buy_guard_set'}]},{'id':'R1','class':'remedy','name':'File\x20a\x20third-party\x20arbitration\x20case\x20inside\x20the\x20serial\x20claim\x20window','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','forward':'FileDispute','prev':'claim_window','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Unlike\x20the\x20real\x20product\x27s\x20support\x20desk\x20that\x20cannot\x20touch\x20a\x20leader\x27s\x20refund,\x20filing\x20here\x20opens\x20an\x20independent\x20arbitration\x20case\x20with\x20the\x20fee\x20escrowed\x20at\x20entry.\x20The\x20closing\x20window\x20and\x20the\x20order-holder\x20identity\x20legs\x20ship\x20in\x20the\x20guard\x20root\x20over\x20the\x20254\x20slot.','guardKeyProbe':'claim_filed','evidence':[{'file':'arbitration.move','line':0x22,'pattern':'E_FEE_NOT_ENOUGH'},{'file':'service.move','line':0x271,'pattern':'public\x20fun\x20dispute'}]},{'id':'R2','class':'remedy','name':'Buyer-won\x20ruling\x20—\x20full\x20escrow\x20refund\x20via\x20the\x20claim_closed\x20rail\x20(after\x20the\x20keeper\x27s\x20stamp)','actor':'merchant','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'claim_closed','forward':'ArbRefund','prev':'claim_filed','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'Winning\x20is\x20not\x20the\x20same\x20as\x20being\x20paid:\x20the\x20stamp\x20(an\x20award\x20claim\x20or\x20a\x20keeper\x20conclude)\x20must\x20land\x20before\x20the\x20rail\x20opens,\x20and\x20the\x20six\x20canonical\x20legs\x20read\x20the\x20two-slot\x20root,\x20positive\x20non-zero\x20indemnity,\x20the\x20enforcement\x20stamp,\x20the\x20award\x20floor,\x20and\x20the\x20venue\x20binding.\x20A\x20second\x20won\x20instance\x20covers\x20orders\x20stalled\x20mid-return.','guardKeyProbe':'arb_refund','evidence':[{'file':'arb.move','line':0xa6,'pattern':'public\x20struct\x20Indemnity\x20has\x20copy,\x20drop,\x20store'}]},{'id':'R3','class':'remedy','name':'Dismissed\x20ruling\x20(zero\x20indemnity)\x20—\x20the\x20order\x20resumes\x20to\x20delivered,\x20windows\x20re-anchor','actor':'merchant','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'ResumeAfterDismissal','prev':'claim_filed','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'A\x20leader-favor\x20ruling\x20is\x20decided\x20by\x20the\x20zero-amount\x20predicate\x20alone\x20—\x20never\x20by\x20indemnity\x20presence\x20—\x20and\x20the\x20resumed\x20order\x20re-enters\x20delivered,\x20from\x20which\x20the\x20keeper\x20can\x20open\x20a\x20fresh\x20window\x20on\x20the\x20re-anchored\x20clocks.\x20Nothing\x20is\x20paid;\x20the\x20escrow\x20rides\x20on.','guardKeyProbe':'arb_dismissed_resume','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'R4','class':'remedy','name':'Buyer\x20withdraws\x20the\x20filed\x20claim\x20—\x20resumes\x20to\x20delivered\x20(goods\x20already\x20handed\x20over)','actor':'buyer','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'WithdrawClaim','prev':'claim_filed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Withdrawal\x20resumes\x20the\x20order\x20instead\x20of\x20paying\x20—\x20a\x20goods-holding\x20buyer\x20and\x20a\x20full\x20refund\x20never\x20share\x20one\x20signature,\x20which\x20is\x20the\x20arbitrage\x20cure\x20the\x20sibling\x20template\x20still\x20owes.\x20Residual\x20honesty:\x20the\x20withdrawal\x20entry\x20sweeps\x20only\x20the\x20case\x20fee\x20balance\x20and\x20never\x20touches\x20the\x20indemnity,\x20the\x20edge\x20carries\x20zero\x20arbitration\x20legs\x20so\x20it\x20is\x20replayable\x20per\x20filing,\x20and\x20the\x20enforcement\x20stamp,\x20once\x20written,\x20outlives\x20the\x20withdrawal.','guardKeyProbe':'withdraw_claim','evidence':[{'file':'arb.move','line':0x257,'pattern':'fun\x20withdraw<T>'},{'file':'arb.move','line':0x266,'pattern':'balance::withdraw_all'},{'file':'arbitration.move','line':0x21a,'pattern':'public\x20fun\x20arb_withdraw'},{'file':'order.move','line':0x79,'pattern':'option::is_none(&self.claimed_by)'},{'file':'order.move','line':0x4d,'pattern':'claimed_by:\x20Option<address>'}]},{'id':'R5','class':'remedy','name':'Compensation\x20payout\x20—\x20chain\x20hard\x20cap\x203x\x20vs\x20the\x20statutory\x20floors\x20(food\x20safety\x20/\x20fraud)','actor':'arbitrator','precondition':['R2'],'onchain':'expressible_with_gap','chainFootprint':{'node':'claim_closed','moneyEffect':'compensate'},'commercialSemantics':'The\x20food-safety\x20floor\x20is\x20ten\x20times\x20the\x20price\x20(or\x20three\x20times\x20the\x20loss,\x20minimum\x20one\x20thousand\x20yuan)\x20and\x20the\x20fraud\x20floor\x20is\x20triple\x20with\x20a\x20minimum\x20—\x20the\x20protocol\x27s\x20three-multiple\x20cap\x20cannot\x20express\x20either,\x20so\x20the\x20catalog\x20escalates\x20instead\x20of\x20silently\x20under-paying.\x20Fund\x20coverage\x20stays\x20advisory:\x20a\x20drained\x20pool\x20fails\x20loudly\x20at\x20claim\x20or\x20buy\x20time.','gapPredicate':{'probe':'3x\x20coverage\x20refusal'},'evidence':[{'file':'arb.move','line':0x15,'pattern':'const\x20MAX_INDEMNITY_MULTIPLE:u64\x20=\x203'}]},{'id':'R6','class':'remedy','name':'Refund\x20payout\x20is\x20two-step\x20—\x20funds\x20land\x20on\x20the\x20order,\x20the\x20buyer\x20extracts','actor':'buyer','precondition':['R2'],'onchain':'expressible','chainFootprint':{'node':'claim_closed','moneyEffect':'refund'},'commercialSemantics':'Every\x20refund\x20row\x20pays\x20the\x20order\x20object,\x20never\x20a\x20wallet:\x20the\x20buyer\x20signs\x20a\x20second\x20extraction\x20call\x20to\x20sweep\x20the\x20funds.\x20The\x20UX\x20must\x20surface\x20that\x20second\x20step\x20—\x20the\x20real\x20product\x27s\x20automatic\x20in-app\x20refund\x20is\x20the\x20contrast\x20the\x20disclosure\x20names.','evidence':[{'file':'order.move','line':0x15e,'pattern':'public\x20fun\x20owner_receive'},{'file':'service.move','line':0x265,'pattern':'order::owner(order)'}]},{'id':'R7','class':'remedy','name':'Award/principal\x20pairing\x20residual\x20—\x20draw\x20the\x20principal\x20BEFORE\x20claiming\x20the\x20fund\x20award','actor':'buyer','precondition':['R5'],'onchain':'expressible_with_gap','chainFootprint':{'node':'claim_closed','moneyEffect':'refund'},'commercialSemantics':'The\x20enforcement\x20stamp\x20is\x20direction-blind\x20—\x20it\x20records\x20the\x20payout\x20event,\x20never\x20who\x20won\x20—\x20and\x20a\x20buyer\x20who\x20claims\x20the\x20award\x20first\x20flips\x20the\x20pairing\x20state\x20so\x20the\x20leader-recovery\x20rail\x20sweeps\x20the\x20principal\x20away.\x20The\x20ordering\x20rule\x20lives\x20on\x20the\x20allocator\x20row\x20and\x20the\x20claim\x20state\x27s\x20role,\x20both\x20outside\x20the\x20probe\x20corpus,\x20so\x20the\x20gap\x20probe\x20is\x20strict\x20and\x20expected\x20to\x20MISS.','gapPredicate':{'probe':'draw\x20the\x20principal\x20BEFORE\x20claiming\x20the\x20award'},'evidence':[{'file':'allocation.move','line':0x50,'pattern':'const\x20E_ONCE_TRIGGERED:\x20u64\x20=\x2016'}]},{'id':'R8','class':'remedy','name':'Platform\x20advance\x20compensation\x20when\x20the\x20leader\x20is\x20unreachable\x20(platform-first\x20liability)','actor':'platform','precondition':['R1'],'onchain':'expressible_with_gap','chainFootprint':{'node':'claim_closed','moneyEffect':'compensate'},'commercialSemantics':'When\x20the\x20platform\x20cannot\x20produce\x20the\x20seller\x27s\x20real\x20name,\x20address\x20and\x20valid\x20contact,\x20the\x20liability\x20shifts\x20to\x20the\x20platform\x20first\x20—\x20precisely\x20the\x20real\x20product\x27s\x20dead-phone,\x20ask-the-leader\x20runaround.\x20The\x20service\x20compensation\x20fund\x20can\x20express\x20the\x20advance\x20payout;\x20the\x20gap\x20is\x20the\x20recovery\x20from\x20the\x20leader\x20afterwards,\x20an\x20off-chain\x20compliance\x20surface\x20with\x20no\x20chain\x20primitive.','gapPredicate':{'probe':'compliance\x20surface'},'evidence':[{'file':'service.move','line':0x24c,'pattern':'public\x20fun\x20compensation_claim'}]},{'id':'R9','class':'remedy','name':'Regulatory\x20and\x20criminal\x20remedies\x20—\x20regulator\x20complaint,\x20fraud\x20report,\x20litigation','actor':'buyer','precondition':['R8'],'onchain':'disclosure_only','disclosureProbe':'Flag\x20the\x20compliance\x20surface','commercialSemantics':'The\x20real\x20product\x27s\x20worst\x20cases\x20ended\x20in\x20contract-fraud\x20arrests\x20over\x20undelivered,\x20unrefunded\x20pledges;\x20small-claims\x20litigation\x20is\x20uneconomic\x20for\x20most\x20buyers.\x20None\x20of\x20the\x20regulator\x20or\x20police\x20procedure\x20is\x20chain-expressible\x20—\x20the\x20disclosure\x20flags\x20the\x20compliance\x20surface\x20instead.','evidence':[]},{'id':'R10','class':'remedy','name':'Leader\x20as\x20the\x20statutory\x20seller\x20—\x20operator\x20liability,\x20licensing,\x20food-safety\x20first\x20responsibility','actor':'merchant','precondition':['E11'],'onchain':'disclosure_only','disclosureProbe':'food-safety\x20traceability\x20for\x20fresh\x20goods','commercialSemantics':'When\x20the\x20leader\x20is\x20the\x20seller\x20they\x20carry\x20independent\x20operator\x20liability\x20—\x20the\x20publish-as-merchant\x20role\x20mapping\x20makes\x20the\x20leader\x20the\x20service\x20owner\x20on\x20chain,\x20matching\x20the\x20statutory\x20first-responsibility\x20doctrine;\x20licensing\x20and\x20traceability\x20stay\x20off-chain\x20compliance\x20the\x20disclosure\x20flags.','evidence':[{'file':'service.move','line':0x1c9,'pattern':'public\x20fun\x20buy<T>'}]},{'id':'P1','class':'post','name':'Review\x20submission\x20—\x20completed\x20to\x20reviewed,\x20closing\x20days\x20after\x20the\x20delivered\x20entry','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'reviewed','forward':'SubmitReview','prev':'completed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20review\x20rail\x20is\x20money-free\x20by\x20topology,\x20needs\x20the\x20order-keyed\x20rating\x20row\x20to\x20exist,\x20carries\x20a\x20delivered-entry\x20history\x20leg,\x20and\x20closes\x20a\x20fixed\x20number\x20of\x20days\x20after\x20the\x20delivered\x20entry.\x20Refund\x20terminals\x20can\x20never\x20reach\x20review\x20—\x20a\x20refunded\x20order\x20can\x20neither\x20review\x20nor\x20claim\x20a\x20bounty.','guardKeyProbe':'review_submit','evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'P2','class':'post','name':'Review\x20reward\x20claim\x20—\x20per-claim\x20bounty,\x20rating\x20floor,\x20window\x20opens\x20after\x20the\x20return\x20window','actor':'buyer','precondition':['P1'],'onchain':'expressible','chainFootprint':{'node':'reviewed','moneyEffect':'reward'},'commercialSemantics':'The\x20reward\x20track\x20ships\x20on\x20by\x20default:\x20a\x20funded\x20pool,\x20a\x20per-claim\x20bounty\x20above\x20the\x20claim-gas\x20floor,\x20and\x20an\x20opening\x20delay\x20kept\x20deliberately\x20above\x20the\x20after-sales\x20window\x20so\x20claim-the-bounty-then-return\x20arbitrage\x20stays\x20dead.\x20The\x20reward\x20terminal\x20is\x20bound\x20to\x20both\x20the\x20reviewed\x20node\x20and\x20the\x20settlement\x20terminal\x20so\x20settlement\x20cannot\x20strand\x20a\x20claim.','evidence':[{'file':'reward.move','line':0xe3,'pattern':'public\x20fun\x20claim<T>'}]},{'id':'P3','class':'post','name':'Rest\x20after\x20review\x20—\x20the\x20reviewed\x20bookkeeping\x20exit\x20back\x20to\x20the\x20drained\x20completed\x20terminal','actor':'buyer','precondition':['P1'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'RestAfterReview','prev':'reviewed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'A\x20silent\x20or\x20satisfied\x20reviewer\x20always\x20has\x20a\x20settled\x20terminal\x20to\x20rest\x20on\x20—\x20no\x20reviewed\x20order\x20strands\x20without\x20an\x20exit.\x20The\x20drained\x20pool\x20absorbs\x20any\x20replayed\x20money\x20leg\x20as\x20a\x20no-op;\x20the\x20once-slot\x20abort\x20is\x20the\x20loud\x20boundary.','evidence':[{'file':'allocation.move','line':0x50,'pattern':'const\x20E_ONCE_TRIGGERED:\x20u64\x20=\x2016'}]},{'id':'P4','class':'post','name':'Leader\x20passes\x20member\x20rebates\x20off-chain\x20from\x20their\x20share\x20(red\x20packets,\x20cashback)','actor':'merchant','precondition':['M10'],'onchain':'disclosure_only','disclosureProbe':'member\x20rebates\x20are\x20OFF-CHAIN\x20pass-through','commercialSemantics':'Private-domain\x20upkeep\x20—\x20red\x20packets\x20and\x20cashback\x20for\x20neighbors\x20—\x20is\x20paid\x20off-chain\x20out\x20of\x20the\x20leader\x27s\x20single\x20leg.\x20The\x20chain\x20will\x20never\x20carry\x20a\x20second\x20commission\x20layer;\x20the\x20disclosure\x20says\x20exactly\x20that.','evidence':[{'file':'allocation.move','line':0x271,'pattern':'Recipient::Entity'}]},{'id':'P5','class':'post','name':'Repurchase\x20—\x20the\x20next\x20round\x20as\x20a\x20fresh\x20campaign\x20instance','actor':'buyer','precondition':['M10'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'The\x20absolute\x20deadline\x20is\x20a\x20service-level\x20constant,\x20so\x20round\x20rotation\x20means\x20a\x20fresh\x20campaign\x20instance\x20each\x20time\x20—\x20there\x20is\x20no\x20cross-round\x20machine\x20reuse.\x20The\x20trust\x20graph\x20(follows,\x20membership)\x20carries\x20over\x20off-chain,\x20disclosed\x20as\x20the\x20S5-adjacent\x20boundary.','gapPredicate':{'probe':'ABSOLUTE\x20SHARED\x20DEADLINE'},'evidence':[{'file':'service.move','line':0x1c9,'pattern':'public\x20fun\x20buy<T>'}]},{'id':'P6','class':'post','name':'Leader\x27s\x20margin\x20lands\x20at\x20settlement\x20—\x20inside\x20the\x20single\x20disclosed\x20leg,\x20no\x20second\x20layer','actor':'merchant','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'completed','moneyEffect':'release'},'commercialSemantics':'The\x20margin\x20is\x20embedded\x20in\x20the\x20pledge\x20pricing\x20—\x20the\x20leg\x20is\x20the\x20round\x27s\x20reimbursement\x20plus\x20margin,\x20since\x20the\x20leader\x20already\x20spent\x20the\x20sourcing\x20money\x20off-chain.\x20One\x20layer,\x20tool\x20fee\x20zero\x20by\x20default,\x20rates\x20summing\x20to\x20the\x20whole,\x20all\x20visible\x20on\x20the\x20quote.','guardKeyProbe':'settle_window_gate','evidence':[{'file':'allocation.move','line':0x271,'pattern':'Recipient::Entity'}]}],'invariants':[{'id':'INV-KTT-LEADERCANCEL','statement':'The\x20real\x20archetype\x27s\x20most\x20common\x20failure\x20is\x20a\x20leader\x20cancel\x20or\x20sourcing\x20failure\x20after\x20the\x20goal\x20is\x20met,\x20and\x20the\x20real\x20rules\x20give\x20the\x20supply\x20leader\x20the\x20proactive\x20refund\x20right;\x20the\x20template\x20must\x20always\x20ship\x20a\x20CancelByLeader\x20exit\x20from\x20the\x20post-threshold\x20states\x20so\x20the\x20funded\x20round\x20can\x20end\x20in\x20full\x20refunds\x20instead\x20of\x20a\x20stranded\x20escrow.\x20Standing\x20check\x20(CURED\x202026-11-06,\x20wave-3):\x20both\x20exits\x20are\x20mounted\x20(threshold_settled\x20->\x20missed_refunded\x20and\x20sourcing\x20->\x20missed_refunded,\x20refund-rail\x20slot\x201001,\x20node-gated\x20tpl_forward_node_check)\x20—\x20deleting\x20the\x20forward\x20re-fires\x20this\x20invariant.','violation':{'whileMissingForward':'CancelByLeader'},'evidence':[]},{'id':'INV-KTT-ARBCAP','statement':'The\x20protocol\x20caps\x20the\x20arbitration\x20indemnity\x20at\x20three\x20times\x20the\x20order\x20amount,\x20while\x20the\x20statutory\x20floors\x20are\x20ten\x20times\x20the\x20price\x20or\x20three\x20times\x20the\x20loss\x20with\x20a\x20minimum\x20for\x20food-safety\x20cases,\x20and\x20triple\x20with\x20a\x20separate\x20minimum\x20for\x20fraud\x20—\x20the\x20cap\x20constant\x20cannot\x20express\x20either\x20floor,\x20so\x20a\x20compliant\x20ruling\x20regime\x20needs\x20an\x20escalation\x20disclosure\x20or\x20a\x20protocol\x20raise,\x20never\x20a\x20silent\x20cap.','chainConflict':'indemnity\x20cap\x20multiple\x20(3)\x20is\x20BELOW\x20the\x20statutory\x20compensation\x20floors\x20(10x\x20price\x20/\x203x\x20loss\x20with\x20minimum\x20for\x20food\x20safety;\x203x\x20with\x20minimum\x20for\x20fraud)','evidence':[{'file':'arb.move','line':0x15,'pattern':'const\x20MAX_INDEMNITY_MULTIPLE:u64\x20=\x203'}]}]};

package/dist/knowledge/path-oracle/products/royalty-exchange.js

@@ -0,0 +1 @@
+export const ROYALTY_EXCHANGE_ORACLE={'productRef':'royalty-exchange','products':['royalty-exchange','songvest','jkbx','anote-music','musical-asset','vfine-music'],'oracleVersion':'1.0.0','steps':[{'id':'M1','class':'offchain','name':'Browse\x20royalty-share\x20listings','actor':'buyer','precondition':[],'onchain':'not_applicable','commercialSemantics':'The\x20buyer\x20browses\x20listed\x20royalty-stream\x20auctions\x20on\x20the\x20marketplace\x20front-end.\x20No\x20WoWok\x20surface:\x20browsing\x20is\x20off-chain.','evidence':[]},{'id':'M2','class':'offchain','name':'Request\x20a\x20royalty\x20valuation','actor':'merchant','precondition':['M1'],'onchain':'not_applicable','commercialSemantics':'The\x20rights\x20holder\x20orders\x20an\x20off-chain\x20valuation\x20of\x20the\x20stream\x27s\x20trailing\x2012-month\x20revenue\x20history.\x20Pure\x20advisory;\x20nothing\x20on\x20chain.','evidence':[]},{'id':'M3','class':'offchain','name':'List\x20the\x20auction\x20with\x20a\x20reserve','actor':'merchant','precondition':['M2'],'onchain':'not_applicable','commercialSemantics':'The\x20rights\x20holder\x20publishes\x20the\x20listing\x20(SKU)\x20with\x20a\x20reserve\x20price\x20and\x20discloses\x20the\x20trailing\x2012-month\x20revenue.\x20The\x20platform\x20take\x20(incumbent_take_bps)\x20is\x20benchmarked\x20at\x20listing\x20time\x20—\x20the\x20shipped\x20template\x20pins\x20it\x20as\x20a\x20fee\x20param,\x20while\x20the\x20benchmark\x20marketplace\x27s\x20real\x20commission\x20differs,\x20so\x20the\x20number\x20needs\x20user\x20adjudication\x20before\x20publish\x20(INV-RX-5).','evidence':[]},{'id':'M4','class':'offchain','name':'Buyer\x20due\x20diligence\x20on\x20the\x20royalty\x20stream','actor':'buyer','precondition':['M3'],'onchain':'not_applicable','commercialSemantics':'The\x20buyer\x20verifies\x20the\x20revenue\x20statements\x20and\x20the\x20rights\x20provenance\x20off-chain.\x20The\x20WoWok\x20purchase\x20can\x20only\x20gate\x20WHO\x20buys\x20(territory\x20/\x20qualification\x20allowlist),\x20never\x20WHETHER\x20the\x20rights\x20are\x20real.','evidence':[]},{'id':'M5','class':'offchain','name':'Place\x20bids\x20on\x20the\x20listing','actor':'buyer','precondition':['M4'],'onchain':'not_applicable','commercialSemantics':'The\x20auction\x20itself\x20is\x20run\x20OFF-chain\x20(bids\x20collected\x20in\x20the\x20listing\x27s\x20own\x20channel).\x20The\x20product\x20has\x20zero\x20bid\x20primitives\x20on\x20WoWok:\x20no\x20bid\x20ledger,\x20no\x20increment,\x20no\x20anti-sniping,\x20no\x20auction\x20clock,\x20no\x20proxy\x20bids.\x20The\x20unresolvable\x20verdict\x20for\x20the\x20bidding\x20family\x20is\x20tracked\x20at\x20E1.','evidence':[]},{'id':'M6','class':'offchain','name':'Reserve-not-met\x20/\x20unsold\x20outcome','actor':'merchant','precondition':['M5'],'onchain':'not_applicable','commercialSemantics':'If\x20the\x20reserve\x20is\x20never\x20met\x20the\x20listing\x20simply\x20expires\x20unsold\x20—\x20a\x20state\x20with\x20no\x20on-chain\x20representation\x20anywhere\x20(no\x20unsold\x20node,\x20no\x20refund\x20path,\x20nothing\x20to\x20refund).\x20The\x20current\x20template\x20corpus\x20also\x20does\x20not\x20disclose\x20the\x20unsold\x20outcome\x20to\x20the\x20buyer;\x20registered\x20as\x20a\x20disclosure\x20gap\x20(FIX-DISCLOSURE,\x20dossier\x20D4).','evidence':[]},{'id':'M13','class':'offchain','name':'Royalty\x20statement\x20cycle\x20(ongoing)','actor':'fulfiller','precondition':['M12'],'onchain':'not_applicable','commercialSemantics':'The\x20distributor\x20keeps\x20issuing\x20royalty\x20statements\x20off-chain.\x20The\x20statement\x20—\x20not\x20the\x20chain\x20—\x20is\x20the\x20source\x20of\x20truth\x20for\x20the\x20amount,\x20which\x20the\x20buyer\x20can\x20only\x20dispute,\x20not\x20verify\x20(tracked\x20at\x20E12).','evidence':[]},{'id':'M14','class':'offchain','name':'Recurring\x20royalty\x20distribution\x20build','actor':'platform','precondition':['M13'],'onchain':'not_applicable','commercialSemantics':'The\x20shipped\x20mechanism\x20is\x20a\x20periodic\x20allocator\x20mounted\x20per\x20build\x20that\x20sweeps\x20the\x20pool\x20on\x20a\x20cadence\x20—\x20the\x20recurring\x20side\x20is\x20real\x20on\x20chain,\x20but\x20the\x20AMOUNT\x20each\x20cycle\x20comes\x20from\x20the\x20off-chain\x20royalty\x20statement,\x20and\x20there\x20is\x20no\x20debit/clawback\x20when\x20a\x20later\x20statement\x20contradicts\x20an\x20earlier\x20payout\x20(INV-RX-3).\x20The\x20build\x20ships\x20the\x20rail;\x20the\x20truth\x20stays\x20off\x20chain.','evidence':[]},{'id':'M7','class':'main','name':'Resolve\x20the\x20winning\x20bidder\x20and\x20map\x20it\x20to\x20the\x20allowlist','actor':'merchant','precondition':['M6'],'onchain':'disclosure_only','commercialSemantics':'The\x20merchant\x20resolves\x20the\x20winner\x20off-chain\x20and\x20pins\x20the\x20winner\x27s\x20address\x20into\x20the\x20buy_guard\x20allowlist,\x20so\x20only\x20that\x20address\x20can\x20execute\x20the\x20buy.\x20Chain\x20expresses\x20only\x20the\x20gating\x20of\x20the\x20buy,\x20never\x20the\x20ranking\x20of\x20bids\x20—\x20the\x20allowlist\x20is\x20the\x20disclosed\x20degradation\x20of\x20the\x20auction.','disclosureProbe':'allowlist|winning\x20bidder','evidence':[]},{'id':'M8','class':'main','name':'Winner\x20buys\x20the\x20royalty\x20share\x20at\x20the\x20winning\x20price\x20(escrowed)','actor':'buyer','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'escrowed','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'The\x20allowlisted\x20winner\x20buys\x20the\x20listed\x20SKU\x20at\x20the\x20winning\x20price;\x20funds\x20escrow\x20on\x20the\x20Order.\x20The\x20price\x20is\x20a\x20free\x20quote\x20—\x20only\x20the\x20allowlist\x20restricts\x20who\x20may\x20call\x20it,\x20so\x20the\x20auction-price\x20trust\x20is\x20off-chain\x20end\x20to\x20end.','evidence':[]},{'id':'M9','class':'main','name':'Rights\x20holder\x20delivers\x20the\x20signed\x20license\x20terms\x20(grant\x20artifact)','actor':'merchant','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'terms_delivered','forward':'DeliverTerms','prev':'escrowed','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20signed\x20license\x20terms\x20plus\x20the\x20royalty-share\x20certificate\x20hash\x20pin\x20as\x20the\x20grant\x20artifact.\x20The\x20write_once\x20row\x20is\x20the\x20closest\x20on-chain\x20analog\x20to\x20a\x20signed\x20writing:\x20once\x20delivered\x20it\x20cannot\x20be\x20silently\x20rewritten\x20or\x20withdrawn,\x20which\x20is\x20what\x20makes\x20the\x20delivery\x20a\x20legally\x20meaningful\x20act\x20(INV-RX-1).','guardKeyProbe':'grant_artifact','evidence':[{'file':'repository.move','line':0x200,'pattern':'assert!(false,\x20E_POLICY_WRITE_ONCE_CONFLICT)'}]},{'id':'M10','class':'main','name':'Buyer\x20accepts\x20the\x20grant\x20(inspection\x20release)','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'granted','forward':'AcceptGrant','prev':'terms_delivered','identity':'order_holder','moneyEffect':'release'},'commercialSemantics':'The\x20buyer\x20confirms\x20the\x20rights\x20are\x20as\x20represented;\x20settlement\x20releases\x20and\x20splits\x20per\x20the\x20multi-holder\x20royalty\x20Rate\x20rows.\x20The\x20acceptance\x20is\x20the\x20buyer\x27s\x20own\x20judgment\x20—\x20the\x20chain\x20records\x20it,\x20it\x20does\x20not\x20verify\x20it.','guardKeyProbe':'accept_grant','evidence':[]},{'id':'M11','class':'main','name':'Inspection-window\x20time-lock\x20auto-accepts','actor':'keeper','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'granted','forward':'AutoAcceptGrant','prev':'terms_delivered','identity':'permission_index','moneyEffect':'release'},'commercialSemantics':'A\x20keeper\x20holding\x20machine\x20permission\x20drives\x20the\x20auto-accept\x20once\x20inspection_window_days\x20pass\x20on\x20the\x20progress\x20history;\x20there\x20is\x20no\x20on-chain\x20scheduler,\x20so\x20the\x20time-lock\x20fires\x20only\x20when\x20someone\x20drives\x20it.','guardKeyProbe':'inspection_timeout','evidence':[{'file':'progress.move','line':0x8e,'pattern':'history:\x20ParentTableVec<History>'}]},{'id':'M12','class':'main','name':'Settlement\x20splits\x20the\x20escrow\x20across\x20royalty\x20co-holders','actor':'platform','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'granted','moneyEffect':'release'},'commercialSemantics':'The\x20multi-holder\x20split\x20(primary\x20+\x20co-holder\x20Rate\x20rows,\x20platform\x20commission\x20in\x20basis\x20points)\x20is\x20one\x20settlement\x20over\x20the\x20order\x20anchor:\x20rates\x20must\x20total\x2010000,\x20so\x20the\x20split\x20is\x20exact\x20by\x20construction.','evidence':[{'file':'allocation.move','line':0x1af,'pattern':'total_rate\x20==\x2010000'}]},{'id':'E1','class':'exception','name':'Bid\x20dispute:\x20shill\x20bidding\x20/\x20bid\x20manipulation','actor':'buyer','precondition':['M5'],'onchain':'unresolvable','unresolvableRef':'S7','commercialSemantics':'Shill\x20bidding\x20has\x20no\x20on-chain\x20surface:\x20no\x20bid\x20ledger\x20exists\x20to\x20audit,\x20so\x20the\x20dispute\x20collapses\x20to\x20the\x20third-party\x20arbitration\x20venue\x20with\x20off-channel\x20bid\x20evidence.\x20The\x20verdict\x20is\x20unresolvable\x20by\x20design\x20and\x20the\x20off-chain-auction\x20disclosure\x20is\x20the\x20remedy.\x20Registered\x20family:\x20S7\x20(no\x20on-chain\x20truth\x20source\x20for\x20the\x20auction\x20—\x20W22\x20stage2\x20#10\x20pinned\x20the\x20family\x20id\x20that\x20was\x20previously\x20absent).','disclosureProbe':'off-chain\x20auction|bids\x20collected|bid\x20ledger','evidence':[]},{'id':'E2','class':'exception','name':'Winner\x20never\x20pays','actor':'merchant','precondition':['M7'],'onchain':'not_applicable','commercialSemantics':'Non-payment\x20simply\x20never\x20creates\x20an\x20Order:\x20the\x20machine\x20buy\x20is\x20what\x20pays,\x20so\x20there\x20is\x20nothing\x20to\x20cancel,\x20nothing\x20to\x20litigate\x20and\x20no\x20deposit\x20primitive\x20to\x20claim\x20against.','evidence':[]},{'id':'E3','class':'exception','name':'Payment\x20rail\x20failure','actor':'buyer','precondition':['M8'],'onchain':'not_applicable','commercialSemantics':'Payment\x20failures\x20happen\x20on\x20the\x20buyer\x27s\x20off-chain\x20rail\x20BEFORE\x20the\x20machine\x20buy;\x20if\x20the\x20buy\x20never\x20lands\x20there\x20is\x20no\x20order\x20to\x20refund,\x20and\x20once\x20it\x20lands\x20the\x20funds\x20are\x20already\x20escrowed.','evidence':[]},{'id':'E4','class':'exception','name':'Cancel\x20before\x20delivery','actor':'buyer','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'license_cancelled','forward':'CancelBeforeDelivery','prev':'escrowed','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Full\x20refund\x20of\x20the\x20escrowed\x20price\x20through\x20the\x20refund\x20rail;\x20the\x20order\x20terminates\x20before\x20any\x20rights\x20were\x20conveyed.','guardKeyProbe':'cancel_escrowed','evidence':[]},{'id':'E5','class':'exception','name':'Non-delivery\x20breach\x20(ruling\x20refund\x20while\x20still\x20escrowed)','actor':'buyer','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'license_cancelled','forward':'ArbRefund','prev':'escrowed','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20rights\x20holder\x20never\x20delivered\x20the\x20grant\x20artifact;\x20a\x20ruling\x20refunds\x20the\x20escrowed\x20principal\x20while\x20the\x20order\x20still\x20rests\x20at\x20escrowed.','guardKeyProbe':'arb_refund_undelivered','evidence':[]},{'id':'E6','class':'exception','name':'Title\x20defect\x20found\x20in\x20due\x20diligence','actor':'buyer','precondition':['M4'],'onchain':'disclosure_only','commercialSemantics':'Ownership\x20of\x20a\x20royalty\x20stream\x20cannot\x20be\x20proven\x20on\x20chain;\x20a\x20pre-buy\x20title\x20defect\x20is\x20mitigated\x20only\x20by\x20the\x20inspection-window\x20escrow\x20and\x20the\x20buyer\x27s\x20reject\x20right\x20for\x20rights\x20not\x20as\x20represented.','disclosureProbe':'rights\x20not\x20as\x20represented|misrepresented','evidence':[]},{'id':'E7','class':'exception','name':'Reject\x20the\x20grant\x20(rights\x20not\x20as\x20represented)','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'license_cancelled','forward':'RejectGrant','prev':'terms_delivered','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'The\x20buyer\x20rejects\x20within\x20the\x20inspection\x20window\x20and\x20the\x20whole\x20escrowed\x20price\x20refunds;\x20this\x20is\x20the\x20enforcement\x20edge\x20behind\x20the\x20misrepresentation\x20disclosure.','guardKeyProbe':'reject_grant','evidence':[]},{'id':'E8','class':'exception','name':'Request\x20an\x20after-sales\x20return','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'return_requested','forward':'RequestReturn','prev':'terms_delivered','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Inside\x20the\x20same\x20inspection\x20window\x20the\x20buyer\x20can\x20open\x20an\x20after-sales\x20return;\x20the\x20request\x20itself\x20moves\x20no\x20money.','guardKeyProbe':'return_window','evidence':[]},{'id':'E9','class':'exception','name':'Rights\x20holder\x20accepts\x20the\x20return\x20(revocation\x20record)','actor':'merchant','precondition':['E8'],'onchain':'expressible','chainFootprint':{'node':'returned','forward':'AcceptReturn','prev':'return_requested','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'Accepting\x20the\x20return\x20writes\x20a\x20revocation\x20record\x20for\x20the\x20returned\x20grant\x20certificate\x20into\x20a\x20dedicated\x20write_once\x20row\x20—\x20the\x20revocation\x20is\x20as\x20immutable\x20as\x20the\x20original\x20grant.','guardKeyProbe':'return_receipt','evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'E10','class':'exception','name':'Refund\x20the\x20accepted\x20return','actor':'merchant','precondition':['E9'],'onchain':'expressible','chainFootprint':{'node':'refunded','forward':'RefundReturn','prev':'returned','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20accepted\x20return\x20pays\x20the\x20whole\x20escrowed\x20purchase\x20price\x20back\x20through\x20the\x20slot-0\x20refund\x20leg\x20of\x20the\x20order-anchored\x20allocator\x20(the\x20terminal\x20edge\x20itself\x20carries\x20no\x20guard\x20key\x20—\x20the\x20money\x20rule\x20is\x20allocator-side).','evidence':[]},{'id':'E11','class':'exception','name':'Cancel\x20the\x20return\x20request','actor':'buyer','precondition':['E8'],'onchain':'expressible','chainFootprint':{'node':'license_cancelled','forward':'CancelReturn','prev':'return_requested','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Withdrawing\x20the\x20return\x20request\x20terminates\x20the\x20order\x20through\x20the\x20refund\x20terminal\x20and\x20refunds\x20the\x20escrowed\x20price\x20—\x20the\x20rail\x20keeps\x20the\x20funds\x20moving,\x20it\x20never\x20strands\x20them.','guardKeyProbe':'cancel_return','evidence':[]},{'id':'E12','class':'exception','name':'Royalty\x20under-reporting\x20dispute','actor':'buyer','precondition':['M13'],'onchain':'disclosure_only','commercialSemantics':'Per-play\x20data\x20is\x20unverifiable\x20on\x20chain:\x20the\x20buyer\x20can\x20freeze\x20legs\x20and\x20take\x20a\x20capped\x20award\x20through\x20arbitration,\x20but\x20the\x20under-reported\x20AMOUNT\x20can\x20never\x20be\x20recomputed\x20on\x20chain.\x20The\x20disclosed\x20statement-truth\x20boundary\x20(the\x20off-chain\x20royalty\x20statement\x20stays\x20the\x20source\x20of\x20truth)\x20is\x20the\x20remedy.','disclosureProbe':'royalty\x20statement|source\x20of\x20truth','evidence':[]},{'id':'E13','class':'exception','name':'PRO\x20settles\x20late\x20(statement\x20delay)','actor':'fulfiller','precondition':['M13'],'onchain':'unresolvable','unresolvableRef':'S16','commercialSemantics':'The\x20chain\x20cannot\x20debit\x20the\x20PRO\x20or\x20auto-penalize\x20a\x20late\x20settlement:\x20no\x20scheduler,\x20no\x20clawback,\x20no\x20charge\x20authority\x20—\x20keepers\x20advance\x20the\x20inspection\x20window\x20and\x20rulings\x20only.\x20Late-payment\x20consequences\x20live\x20entirely\x20in\x20off-chain\x20contract\x20terms.','disclosureProbe':'keepers\x20for|no\x20charge\x20authority','evidence':[]},{'id':'E14','class':'exception','name':'Co-writer\x20claims\x20a\x20share\x20of\x20the\x20sold\x20royalty','actor':'fulfiller','precondition':['M12'],'onchain':'expressible_with_gap','chainFootprint':{'node':'license_cancelled','moneyEffect':'compensate'},'commercialSemantics':'A\x20co-writer\x20claim\x20funnels\x20into\x20the\x20same\x20third-party\x20arbitration\x20venue;\x20the\x20buyer-side\x20award\x20is\x20capped\x20and\x20paid\x20to\x20the\x20ORDER\x20OWNER,\x20who\x20then\x20settles\x20with\x20the\x20claimant\x20off\x20chain.\x20The\x20split\x20of\x20authority\x20(the\x20chain\x20can\x20never\x20pay\x20the\x20third-party\x20claimant\x20directly)\x20is\x20the\x20known\x20gap.','gapPredicate':{'probe':'THIRD-PARTY\x20Arbitration'},'evidence':[{'file':'service.move','line':0x24c,'pattern':'public\x20fun\x20compensation_claim'},{'file':'service.move','line':0x265,'pattern':'order::owner(order));'}]},{'id':'E15','class':'exception','name':'Double\x20assignment\x20of\x20the\x20same\x20royalty\x20share','actor':'merchant','precondition':['M9'],'onchain':'unresolvable','unresolvableRef':'S2','commercialSemantics':'No\x20primitive\x20deduplicates\x20assignments\x20across\x20orders:\x20two\x20buyers\x20could\x20each\x20hold\x20a\x20grant\x20artifact\x20for\x20the\x20same\x20share.\x20The\x20immutable\x20per-order\x20provenance\x20row\x20is\x20evidence\x20of\x20WHAT\x20was\x20sold,\x20not\x20a\x20registry\x20of\x20what\x20is\x20still\x20assignable.\x20Registered\x20family:\x20S2\x20(no\x20cross-order\x20grouping/registry\x20—\x20W22\x20stage2\x20#10\x20pinned\x20the\x20family\x20id\x20that\x20was\x20previously\x20absent).','disclosureProbe':'immutable\x20provenance|grant_artifact','evidence':[]},{'id':'E16','class':'exception','name':'Statutory\x20termination\x20right\x20(35-year\x20clause)','actor':'merchant','precondition':['M9'],'onchain':'disclosure_only','commercialSemantics':'A\x20statutory\x20termination\x20right\x20can\x20recapture\x20the\x20underlying\x20rights\x20and\x20strangle\x20future\x20royalties;\x20the\x20machine\x20grant\x20cannot\x20be\x20terminated\x20or\x20repriced\x20on\x20chain\x20in\x20response.\x20The\x20buyer\x20bears\x20the\x20cliff\x20—\x20and\x20the\x20current\x20corpus\x20does\x20not\x20disclose\x20it\x20at\x20all\x20(strict\x20probe,\x20expected\x20miss;\x20FIX-DISCLOSURE,\x20dossier\x20D4).','disclosureProbe':'termination|recapture|35-year','evidence':[]},{'id':'E17','class':'exception','name':'Withdraw\x20a\x20filed\x20dispute\x20claim','actor':'buyer','precondition':['E5'],'onchain':'expressible_with_gap','chainFootprint':{'node':'license_cancelled','moneyEffect':'refund'},'commercialSemantics':'In\x20the\x20kernel\x20the\x20buyer\x20can\x20retract\x20a\x20dispute\x20after\x20the\x20silence\x20window\x20and\x20still\x20exit\x20through\x20the\x20node-gated\x20refund\x20rail.\x20The\x20shape\x20ships\x20NO\x20withdraw_claim\x20edge\x20BY\x20DESIGN\x20—\x20REGISTERED,\x20not\x20standing\x20(PT-21):\x20the\x20kernel\x20guard\x20is\x20identity-only,\x20replayable\x20and\x20binds\x20no\x20arbitration\x20case,\x20and\x20the\x20standing\x20pure-identity\x20rails\x20(reject_grant\x20/\x20cancel_escrowed)\x20already\x20exit\x20through\x20the\x20same\x20node-gated\x20refund\x20rail.\x20The\x20withdrawal\x20path\x20is\x20DISCLOSED\x20in\x20build_notes\x20(W22\x20stage2\x20#10\x20REGISTERED-not-standing\x20sentence),\x20so\x20this\x20strict\x20probe\x20now\x20HITS.','gapPredicate':{'probe':'withdraw_claim|WithdrawClaim|claim\x20withdrawal'},'evidence':[{'file':'arb.move','line':0x10,'pattern':'WITHDRAW_DURATION_TIME'}]},{'id':'R1','class':'remedy','name':'Ruling\x20refunds\x20the\x20buyer\x20pre-settlement','actor':'keeper','precondition':['E5'],'onchain':'expressible','chainFootprint':{'node':'license_cancelled','forward':'ArbRefund','prev':'terms_delivered','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'A\x20delivered-but-disputed\x20order\x20refunds\x20the\x20escrowed\x20principal\x20on\x20a\x20ruling;\x20the\x20claimed_by\x20gate\x20keeps\x20compensation\x20accounting\x20consistent\x20before\x20the\x20refund\x20rail\x20moves.','guardKeyProbe':'arb_refund','evidence':[{'file':'order.move','line':0x79,'pattern':'option::is_none(&self.claimed_by)'}]},{'id':'R2','class':'remedy','name':'Ruling\x20refunds\x20the\x20buyer\x20while\x20still\x20escrowed','actor':'keeper','precondition':['E4'],'onchain':'expressible','chainFootprint':{'node':'license_cancelled','forward':'ArbRefund','prev':'escrowed','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'Same\x20refund\x20discipline\x20for\x20a\x20dispute\x20opened\x20before\x20delivery;\x20the\x20escrowed\x20principal\x20exits\x20through\x20the\x20node-gated\x20refund\x20rail.','guardKeyProbe':'arb_refund_undelivered','evidence':[]},{'id':'R3','class':'remedy','name':'Ruling\x20refunds\x20after\x20settlement','actor':'keeper','precondition':['R4'],'onchain':'expressible_with_gap','chainFootprint':{'node':'license_cancelled','forward':'ArbRefund','prev':'granted','identity':'permission_index','moneyEffect':'compensate'},'commercialSemantics':'After\x20settlement\x20the\x20principal\x20is\x20gone,\x20so\x20a\x20buyer-favor\x20ruling\x20pays\x20from\x20the\x20compensation\x20fund\x20up\x20to\x20the\x20capped\x20indemnity\x20FIRST,\x20then\x20advances\x20the\x20machine\x20—\x20an\x20awarded\x20order\x27s\x20residual\x20principal\x20still\x20exits\x20and\x20the\x20escrow-exit\x20invariant\x20holds.','guardKeyProbe':'arb_refund_settled','gapPredicate':{'probe':'indemnity\x20FIRST|compensation-fund'},'evidence':[]},{'id':'R4','class':'remedy','name':'Compensation-fund\x20payout\x20capped\x20at\x203x','actor':'arbitrator','precondition':['R1'],'onchain':'expressible_with_gap','chainFootprint':{'node':'license_cancelled','moneyEffect':'compensate'},'commercialSemantics':'A\x20buyer-award\x20pays\x20from\x20the\x20compensation\x20fund\x20to\x20the\x20order\x20owner,\x20capped\x20at\x203x\x20the\x20escrowed\x20amount;\x20the\x20payout\x20is\x20a\x20service\x20call,\x20not\x20a\x20machine\x20node,\x20and\x20the\x20cap\x20is\x20an\x20assert,\x20not\x20a\x20negotiated\x20amount.\x20Statutory\x20damages\x20for\x20IP\x20misrepresentation\x20can\x20exceed\x20the\x20cap\x20by\x20orders\x20of\x20magnitude\x20(INV-RX-2).','gapPredicate':{'probe':'MAX_INDEMNITY|compensation\x20fund'},'evidence':[{'file':'arb.move','line':0x15,'pattern':'MAX_INDEMNITY_MULTIPLE'},{'file':'arb.move','line':0x21d,'pattern':'indemnity_cap_base'},{'file':'service.move','line':0x265,'pattern':'order::owner(order));'}]},{'id':'R5','class':'remedy','name':'Two-step\x20refund\x20payout\x20(order\x20object\x20then\x20owner\x20receive)','actor':'buyer','precondition':['E10'],'onchain':'expressible_with_gap','chainFootprint':{'node':'license_cancelled','moneyEffect':'refund'},'commercialSemantics':'Every\x20refund\x20lands\x20ON\x20the\x20order\x20object\x20first\x20(refund\x20rows\x20pay\x20GuardIdentifier(0))\x20and\x20needs\x20a\x20second\x20buyer\x20owner_receive\x20call\x20to\x20reach\x20the\x20wallet;\x20the\x20split\x20is\x20deliberate\x20rail\x20separation\x20but\x20it\x20is\x20a\x20two-tap\x20experience\x20that\x20must\x20stay\x20disclosed.','gapPredicate':{'probe':'TWO-STEP\x20REFUND|owner_receive'},'evidence':[]},{'id':'R6','class':'remedy','name':'Recover-gate\x20sweep\x20of\x20a\x20stranded\x20awarded\x20order','actor':'merchant','precondition':['R3'],'onchain':'expressible','chainFootprint':{'node':'granted','moneyEffect':'release'},'commercialSemantics':'The\x20terminal-node-gated\x20sweep\x20pays\x20the\x20residual\x20principal\x20of\x20an\x20awarded\x20order\x20to\x20the\x20primary\x20holder;\x20neither\x20exit\x20rail\x20reads\x20the\x20compensation\x20claim\x20list,\x20so\x20the\x20sweep\x20cannot\x20double-pay\x20a\x20compensation\x20already\x20made.','evidence':[]},{'id':'R7','class':'remedy','name':'Dual-payout\x20outcome\x20disclosure\x20at\x20the\x20confirmation\x20gate','actor':'platform','precondition':['R3'],'onchain':'disclosure_only','commercialSemantics':'Exactly\x20one\x20exit\x20rail\x20can\x20ever\x20pass,\x20so\x20a\x20residual\x20refund\x20payout\x20after\x20a\x20fund\x20indemnity\x20is\x20a\x20possible\x20outcome\x20the\x20buyer\x20should\x20acknowledge\x20at\x20the\x20confirmation\x20gate.\x20The\x20dual-payout\x20wording\x20exists\x20only\x20inside\x20the\x20machine-shape\x20role\x20text,\x20which\x20the\x20disclosure\x20corpus\x20cannot\x20see\x20—\x20so\x20the\x20buyer-facing\x20fields\x20never\x20disclose\x20it\x20(strict\x20probe,\x20expected\x20miss;\x20FIX-DISCLOSURE,\x20dossier\x20D3).','disclosureProbe':'dual-payout|dual\x20payout|double\x20collection|acknowledge_dual_payout','evidence':[{'file':'order.move','line':0x128,'pattern':'NOTE\x20on\x20claimed_by'}]},{'id':'R8','class':'remedy','name':'Dismissed-ruling\x20merchant\x20exit','actor':'merchant','precondition':['R1'],'onchain':'expressible_with_gap','chainFootprint':{'node':'license_cancelled','moneyEffect':'none'},'commercialSemantics':'When\x20a\x20ruling\x20favors\x20the\x20merchant,\x20the\x20kernel\x20can\x20conclude\x20the\x20dismissal,\x20but\x20this\x20shape\x20assembles\x20no\x20tpl_forward_arb_ruling_dismissed\x20guard\x20(its\x20family\x20excludes\x20licensing,\x20dossier\x20D9)\x20and\x20emits\x20no\x20resume\x20edge\x20—\x20none\x20is\x20needed:\x20the\x20machine\x20never\x20left\x20its\x20pre-dispute\x20node,\x20so\x20a\x20resume\x20edge\x20would\x20be\x20an\x20X->X\x20self-loop\x20(blocked\x20by\x20the\x20sso7\x20v172\x20self-loop\x20cure).\x20REGISTERED,\x20not\x20standing\x20(PT-21);\x20the\x20dismissal\x20exit\x20is\x20DISCLOSED\x20in\x20build_notes\x20(W22\x20stage2\x20#10),\x20so\x20this\x20strict\x20probe\x20now\x20HITS.','gapPredicate':{'probe':'dismissal|conclude|arb_ruling_dismissed'},'evidence':[{'file':'order.move','line':0x8d,'pattern':'claimed_by'}]},{'id':'R9','class':'remedy','name':'Dispute\x20freeze\x20legs\x20over\x20the\x20allocator\x20roots','actor':'arbitrator','precondition':['E12'],'onchain':'expressible_with_gap','chainFootprint':{'node':'license_cancelled','moneyEffect':'none'},'commercialSemantics':'While\x20a\x20dispute\x20is\x20open,\x20the\x20settlement\x20and\x20refund\x20legs\x20refuse\x20to\x20move;\x20disputes\x20are\x20filed\x20OFF-machine\x20(no\x20claim\x20node)\x20and\x20the\x20freeze\x20rides\x20the\x20allocator\x20roots,\x20which\x20is\x20exactly\x20why\x20the\x20machine\x20shape\x20has\x20no\x20dispute\x20surface\x20to\x20inspect.','gapPredicate':{'probe':'OFF-Machine|no\x20claim\x20node'},'evidence':[]},{'id':'P1','class':'post','name':'Buyer\x20posts\x20a\x20review\x20and\x20claims\x20the\x20bounty','actor':'buyer','precondition':['M12'],'onchain':'expressible','chainFootprint':{'node':'granted','moneyEffect':'reward'},'commercialSemantics':'The\x20review\x20rail\x20ships:\x20the\x20bounty\x20pool\x20is\x20a\x20funded\x20build\x20input\x20(an\x20unfunded\x20bounty\x20promise\x20must\x20not\x20publish),\x20the\x20review\x20row\x20lands\x20on\x20the\x20reward\x20host\x20and\x20the\x20claim\x20guard\x20pays\x20the\x20reviewer\x20—\x20the\x20rating\x20rides\x20the\x20immutable\x20review\x20row.\x20The\x20claim\x20guard\x20is\x20a\x20reward-host\x20object,\x20outside\x20the\x20machine\x20edge-guard-key\x20domain,\x20so\x20no\x20guard\x20probe\x20applies\x20here.','evidence':[]},{'id':'P2','class':'post','name':'Resale\x20on\x20the\x20secondary\x20market','actor':'buyer','precondition':['M12'],'onchain':'not_applicable','commercialSemantics':'A\x20resale\x20is\x20just\x20a\x20fresh\x20buy\x20on\x20a\x20fresh\x20order;\x20the\x20grant\x20row\x20proves\x20WHAT\x20was\x20sold\x20but\x20no\x20primitive\x20links\x20the\x20two\x20orders,\x20so\x20provenance\x20chains\x20must\x20be\x20reconstructed\x20off\x20chain.','evidence':[]},{'id':'P3','class':'post','name':'Tax\x20treatment\x20of\x20royalty\x20income','actor':'buyer','precondition':['M12'],'onchain':'not_applicable','commercialSemantics':'Royalty\x20income\x20is\x20taxed\x20as\x20ordinary\x20income\x20in\x20most\x20jurisdictions;\x20the\x20chain\x20export\x20helps\x20but\x20nothing\x20on\x20chain\x20computes\x20or\x20withholds\x20tax.','evidence':[]},{'id':'P4','class':'post','name':'Platform\x20rating\x20/\x20reputation\x20(off-chain)','actor':'platform','precondition':['P1'],'onchain':'disclosure_only','commercialSemantics':'The\x20buyer\x27s\x20published\x20rating\x20is\x20on\x20chain\x20(reputation\x20rail,\x20immutable\x20rating\x20rows,\x20a\x20rating\x20floor);\x20the\x20marketplace\x27s\x20own\x20performance\x20claims\x20—\x20sold-through\x20rate,\x20realized\x20ROI\x20—\x20are\x20off-chain\x20marketing\x20numbers\x20that\x20nothing\x20on\x20chain\x20can\x20audit.','disclosureProbe':'reputation\x20rail|rating\x20floor','evidence':[]}],'invariants':[{'id':'INV-RX-1','statement':'A\x20transfer\x20of\x20a\x20royalty\x20share\x20is\x20not\x20valid\x20without\x20a\x20signed\x20writing:\x20the\x20204(a)-style\x20requirement\x20maps\x20to\x20the\x20template\x27s\x20delivery\x20surface\x20—\x20the\x20signed\x20license\x20terms\x20pin\x20as\x20a\x20write_once\x20grant\x20artifact\x20row\x20that\x20cannot\x20be\x20silently\x20rewritten\x20or\x20withdrawn\x20once\x20delivered.','jurisdiction':'17\x20U.S.C.\x20204(a)\x20(written\x20assignment\x20of\x20exclusive\x20rights)\x20—\x20analog.','chainConflict':'CURED\x20on\x20the\x20current\x20template:\x20DeliverTerms\x20plus\x20the\x20grant_artifact\x20row-present\x20guard\x20enforce\x20the\x20written-delivery\x20equivalence.\x20Registration\x20retained\x20as\x20a\x20standing\x20check:\x20removing\x20the\x20DeliverTerms\x20forward\x20while\x20the\x20product\x20still\x20promises\x20a\x20purchased\x20royalty\x20share\x20re-fires\x20it.','violation':{'whileMissingForward':'DeliverTerms'},'evidence':[{'file':'repository.move','line':0x200,'pattern':'assert!(false,\x20E_POLICY_WRITE_ONCE_CONFLICT)'},{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'INV-RX-2','statement':'Statutory\x20damages\x20for\x20IP\x20misrepresentation\x20can\x20reach\x20far\x20beyond\x203x\x20the\x20escrowed\x20price;\x20the\x20compensation\x20fund\x20caps\x20a\x20buyer\x20award\x20at\x20fund/3\x20(MAX_INDEMNITY_MULTIPLE),\x20so\x20the\x20residual\x20loss\x20is\x20structurally\x20unmakeable\x20on\x20chain.','jurisdiction':'17\x20U.S.C.\x20504(c)\x20(statutory\x20damages)\x20—\x20analog.','chainConflict':'The\x20cap\x20is\x20a\x20hard\x20assert\x20inside\x20the\x20compensation\x20path;\x20no\x20user\x20resolution\x20can\x20raise\x20it,\x20so\x20the\x20only\x20honest\x20disclosure\x20is\x20the\x20ceiling\x20itself.\x20Needs\x20user\x20adjudication\x20of\x20whether\x20the\x20ceiling\x20is\x20acceptable\x20for\x20a\x20royalty\x20marketplace\x20(dossier\x20D7).','evidence':[{'file':'arb.move','line':0x15,'pattern':'MAX_INDEMNITY_MULTIPLE'},{'file':'arb.move','line':0x21d,'pattern':'indemnity_cap_base'},{'file':'service.move','line':0x265,'pattern':'order::owner(order));'}]},{'id':'INV-RX-3','statement':'Recurring\x20royalty\x20amounts\x20are\x20off-chain\x20truth:\x20the\x20distribution\x20rail\x20pays\x20whatever\x20the\x20royalty\x20statement\x20claims,\x20per-play\x20data\x20is\x20unverifiable\x20on\x20chain,\x20and\x20no\x20debit/clawback\x20exists\x20when\x20a\x20later\x20statement\x20contradicts\x20an\x20earlier\x20payout.','jurisdiction':'Contract\x20law\x20(statement\x20truth)\x20—\x20analog.','chainConflict':'Accepted\x20design\x20boundary:\x20the\x20amount\x20truth\x20stays\x20with\x20the\x20statement\x20issuer;\x20the\x20buyer\x27s\x20only\x20lever\x20is\x20the\x20capped\x20arbitration\x20path.\x20Text-only:\x20no\x20mechanical\x20predicate\x20is\x20expressible.'},{'id':'INV-RX-4','statement':'A\x20statutory\x20termination\x20right\x20can\x20recapture\x20the\x20underlying\x20rights\x20mid-stream\x20(the\x2035-year\x20clause);\x20the\x20buyer\x27s\x20long-term\x20cash\x20flow\x20carries\x20a\x20cliff\x20that\x20the\x20corpus\x20neither\x20prices\x20nor\x20discloses,\x20while\x20the\x20machine\x20grant\x20keeps\x20promising\x20a\x20long-term\x20revenue\x20share.','jurisdiction':'17\x20U.S.C.\x20203\x20(termination\x20of\x20transfers)\x20—\x20analog.','chainConflict':'Nothing\x20on\x20chain\x20can\x20be\x20terminated\x20or\x20repriced\x20in\x20response\x20to\x20a\x20recapture;\x20the\x20disclosure\x20gap\x20is\x20tracked\x20by\x20the\x20strict\x20probe\x20on\x20E16\x20(FIX-DISCLOSURE,\x20dossier\x20D4).\x20Text-only.'},{'id':'INV-RX-5','statement':'The\x20platform-take\x20disclosure\x20must\x20reflect\x20the\x20marketplace\x27s\x20real,\x20moveable\x20commission;\x20the\x20template\x20pins\x20incumbent_take_bps\x20as\x20a\x20fixed\x20fee\x20param\x20while\x20the\x20benchmark\x27s\x20real\x20take\x20differs,\x20so\x20publishing\x20it\x20as\x20a\x20settled\x20fee\x20promise\x20without\x20user\x20confirmation\x20risks\x20a\x20false\x20disclosure.','jurisdiction':'Consumer\x20protection\x20(fee\x20disclosure\x20accuracy)\x20—\x20analog.','chainConflict':'CURED\x20(W22\x20stage2\x20#10,\x202026-11-07):\x20incumbent_take_bps\x20pinned\x200\x20(the\x20INV-BS-2\x20family\x20ruling\x20—\x20a\x20stale\x201500\x20benchmark\x20read\x20as\x20a\x20settled\x2015%\x20take);\x20the\x20benchmark\x20stays\x20benchmark-only\x20in\x20user_inputs.\x20Registration\x20retained\x20as\x20a\x20standing\x20check:\x20re-raising\x20the\x20value\x20while\x20the\x20prose\x20promises\x20no\x20platform\x20commission\x20re-fires\x20it.\x20Text-only.'}]};

package/dist/knowledge/path-oracle/products/shansong.js

@@ -0,0 +1 @@
+export const SHANSONG_ORACLE={'productRef':'shansong','products':['shansong','sf-city-rush','uu-errand','meituan-errand','doordash-dashnow','uber-connect'],'oracleVersion':'1.1.0','steps':[{'id':'M1','class':'offchain','name':'Browse\x20errand\x20categories\x20and\x20get\x20a\x20quote\x20(distance/weight\x20priced\x20off-chain)','actor':'buyer','precondition':[],'onchain':'not_applicable','commercialSemantics':'Pricing\x20is\x20a\x20pure\x20off-chain\x20concern:\x20distance,\x20weight\x20and\x20time-of-day\x20surge\x20are\x20computed\x20in\x20the\x20app;\x20the\x20chain\x20holds\x20no\x20route\x20or\x20distance\x20oracle\x20by\x20design.','evidence':[]},{'id':'M2','class':'offchain','name':'Select\x20the\x20errand\x20line\x20and\x20optional\x20declared-value\x20insurance','actor':'buyer','precondition':['M1'],'onchain':'not_applicable','commercialSemantics':'The\x20buyer\x20picks\x20carry\x20/\x20buy_for_me\x20/\x20time_based\x20and\x20may\x20buy\x20official\x20declared-value\x20insurance\x20(capped\x205,000\x20CNY/item).\x20The\x20line\x20choice\x20is\x20a\x20build-time\x20selector\x20on\x20this\x20template\x20(conditional_guards\x20errand_line);\x20insurance\x20is\x20an\x20off-chain\x20policy,\x20not\x20an\x20on-chain\x20leg.','evidence':[]},{'id':'M3','class':'main','name':'Pay\x20and\x20escrow\x20(service\x20fee,\x20buy-for-me\x20budget\x20and\x20tip\x20in\x20one\x20total)','actor':'buyer','precondition':['M2'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'One\x20atomic\x20buy:\x20the\x20quoted\x20errand\x20total\x20(fee\x20+\x20buy\x20budget\x20+\x20optional\x20tip)\x20is\x20escrowed\x20in\x20a\x20single\x20transaction.\x20Shansong\x20charges\x200\x20platform\x20commission\x20on\x20the\x20desk\x20side;\x20coupons\x20burn\x20at\x20order\x20time\x20and\x20refunds\x20return\x20the\x20discounted\x20total\x20only.','evidence':[]},{'id':'M4','class':'main','name':'Desk\x20dispatches\x20a\x20runner\x20(off-chain\x20decision,\x20dispatch\x20record\x20row)','actor':'keeper','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'assigned','forward':'Dispatch','prev':'paid','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'Accepting,\x20choosing\x20a\x20runner\x20and\x20re-dispatching\x20are\x20off-chain\x20desk\x20acts;\x20the\x20dispatch_record\x20evidence\x20row\x20is\x20their\x20only\x20chain\x20footprint\x20and\x20it\x20starts\x20the\x20on-time\x20clock.\x20The\x20dispatch\x20moment\x20splits\x20a\x20free\x20buyer\x20cancel\x20(E1)\x20from\x20a\x20fee-bearing\x20kill\x20(E2).','guardKeyProbe':'dispatch_record','evidence':[]},{'id':'M5','class':'main','name':'Runner\x20picks\x20up\x20on\x20the\x20carry\x20line\x20(custody\x20evidence)','actor':'fulfiller','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'picked_up','forward':'PickUpOrder','prev':'assigned','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'Carry\x20is\x20the\x20flagship\x20line:\x20only\x20the\x20rostered\x20runner\x20may\x20advance,\x20gated\x20by\x20a\x20custody\x20evidence\x20row\x20(photo/scan).\x20Roster\x20membership\x20IS\x20admission\x20power\x20—\x20desk\x20staff\x20write\x20the\x20roster,\x20runners\x20only\x20transact\x20through\x20it.','guardKeyProbe':'pickup_evidence','evidence':[{'file':'progress.move','line':0x124,'pattern':'fun\x20IsNamedOperator'}]},{'id':'M6','class':'main','name':'Runner\x20buys\x20on\x20the\x20buy_for_me\x20line\x20(receipt\x20evidence\x20within\x20the\x20escrowed\x20budget)','actor':'fulfiller','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'picked_up','forward':'PickUpOrder','prev':'assigned','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'buy_for_me\x20substitutes\x20custody\x20evidence\x20with\x20the\x20runner\x27s\x20own\x20purchase\x20receipt,\x20whose\x20amount\x20must\x20stay\x20<=\x20the\x20escrowed\x20buy\x20budget\x20(see\x20E9\x20for\x20the\x20over-budget\x20case).\x20Same\x20roster\x20gate,\x20weaker\x20evidence\x20semantics\x20—\x20priced\x20the\x20same\x20by\x20the\x20real\x20product.','guardKeyProbe':'pickup_receipt_evidence','evidence':[]},{'id':'M7','class':'main','name':'Time-based\x20line\x20pickup\x20(buyer\x27s\x20own\x20declaration\x20advances)','actor':'buyer','precondition':['M4'],'onchain':'expressible_with_gap','chainFootprint':{'node':'picked_up','forward':'PickUpOrder','prev':'assigned','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'time_based\x20has\x20nothing\x20material\x20to\x20evidence\x20mid-queue,\x20so\x20the\x20BUYER\x27s\x20own\x20declaration\x20is\x20the\x20pickup\x20advance\x20—\x20the\x20weakest\x20of\x20the\x20three\x20lines.\x20The\x20gap\x20is\x20that\x20the\x20real\x20product\x20still\x20charges\x20full\x20price\x20for\x20it\x20while\x20offering\x20no\x20weaker-evidence\x20discount;\x20the\x20template\x20must\x20disclose\x20the\x20strength\x20difference.','guardKeyProbe':'pickup_declaration','gapPredicate':{'probe':'weakest\x20line|BUYER\x27s\x20own\x20declaration|price\x20it\x20lower'},'evidence':[]},{'id':'M8','class':'main','name':'Runner\x20hands\x20over\x20to\x20the\x20recipient\x20(delivery\x20evidence\x20row)','actor':'fulfiller','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'HandOver','prev':'picked_up','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'Handover\x20is\x20roster-gated\x20like\x20pickup\x20and\x20attested\x20by\x20a\x20deliver_evidence\x20row\x20(recipient\x20confirmation\x20code\x20or\x20drop-off\x20kind).\x20This\x20is\x20the\x20moment\x20the\x20real\x20product\x27s\x20on-time\x20clock\x20stops;\x20any\x20of\x20the\x20three\x20pickup\x20lines\x20(M5/M6/M7)\x20reaches\x20it.','guardKeyProbe':'deliver_evidence','evidence':[{'file':'machine.move','line':0x5f,'pattern':'namedOperator,\x20permissionIndex,\x20and\x20guard\x20participate'}]},{'id':'M9','class':'main','name':'Buyer\x20confirms\x20receipt\x20(2-hour\x20window\x20on\x20the\x20real\x20product)','actor':'buyer','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'claim_window','forward':'ConfirmReceipt','prev':'delivered','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20buyer\x20confirms\x20within\x20the\x20auto-confirm\x20horizon\x20(2\x20hours\x20on\x20shansong\x20—\x20the\x20recipient\x20may\x20not\x20be\x20present);\x20confirmation\x20opens\x20the\x2024-hour\x20claim\x20window\x20during\x20which\x20funds\x20stay\x20escrowed.','guardKeyProbe':'deliver_confirm','evidence':[]},{'id':'M10','class':'main','name':'Silence\x20fallback\x20opens\x20the\x20claim\x20window\x20(keeper)','actor':'keeper','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'claim_window','forward':'OpenClaimWindow','prev':'delivered','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'A\x20silent\x20buyer\x20cannot\x20strand\x20the\x20escrow\x20at\x20delivered:\x20the\x20desk\x20force-opens\x20the\x20claim\x20window\x20after\x20the\x20auto-confirm\x20horizon\x20(2h).\x20The\x20real\x20product\x20auto-confirms\x20in-app;\x20the\x20template\x20routes\x20the\x20same\x20outcome\x20through\x20a\x20keeper\x20slot\x20instead.','guardKeyProbe':'deliver_confirm_timeout','evidence':[]},{'id':'M11','class':'main','name':'Settlement\x20after\x20the\x20claim\x20window\x20elapses\x20(escrow\x20releases\x20to\x20the\x20desk)','actor':'merchant','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'SettleAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'release'},'commercialSemantics':'Once\x20the\x2024-hour\x20claim\x20window\x20closes\x20untouched,\x20the\x20escrow\x20releases\x20in\x20one\x20shot\x20to\x20the\x20desk\x20Entity\x20(settle-once\x20allocator).\x20The\x20runner\x20is\x20NOT\x20paid\x20from\x20this\x20release\x20by\x20default\x20—\x20see\x20P2.\x20ConfirmReceipt\x20(M9)\x20and\x20the\x20timeout\x20fallback\x20(M10)\x20reach\x20the\x20same\x20waypoint.','guardKeyProbe':'settle_window_gate','evidence':[]},{'id':'M12','class':'main','name':'Buyer\x20reviews\x20the\x20errand\x20(0.05\x20WOW\x20bounty)','actor':'buyer','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'reviewed','forward':'SubmitReview','prev':'completed','identity':'order_holder','moneyEffect':'reward'},'commercialSemantics':'Post-settlement\x20review\x20with\x20a\x200.05\x20WOW\x20per-claim\x20bounty\x20paid\x20from\x20a\x20pre-funded\x20review_reward_pool\x20—\x20the\x20shansong\x20free-delivery\x20voucher\x20economy\x20re-expressed\x20as\x20an\x20incentive\x20pool\x20rather\x20than\x20a\x20discount\x20on\x20the\x20escrow.','guardKeyProbe':'review_submit','evidence':[]},{'id':'M13','class':'main','name':'Review\x20rail\x20closes\x20back\x20to\x20the\x20settle\x20terminal','actor':'buyer','precondition':['M12'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'RestAfterReview','prev':'reviewed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'RestAfterReview\x20returns\x20the\x20reviewed\x20order\x20to\x20the\x20completed\x20terminal\x20so\x20the\x20graph\x20has\x20a\x20unique\x20sink;\x20review\x20state\x20rides\x20the\x20review\x20object,\x20not\x20the\x20machine.\x20The\x20real\x20product\x27s\x20terminal\x20is\x20simply\x20\x27order\x20closed\x27.','evidence':[]},{'id':'E1','class':'exception','name':'Buyer\x20cancels\x20before\x20dispatch\x20(free\x20full\x20refund)','actor':'buyer','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelBeforeDispatch','prev':'paid','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Shansong:\x20free\x20cancel\x20while\x20no\x20runner\x20is\x20assigned.\x20The\x20template\x20charges\x20nothing\x20pre-dispatch\x20and\x20refunds\x20the\x20whole\x20escrow;\x20the\x20buy\x20budget\x20rides\x20back\x20with\x20it\x20(discounted\x20total\x20only,\x20per\x20the\x20coupon\x20policy).','guardKeyProbe':'cancel_before_dispatch','evidence':[]},{'id':'E2','class':'exception','name':'Buyer\x20cancels\x20after\x20dispatch\x20(fee-bearing\x20kill)','actor':'buyer','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'closed_kill','forward':'CancelAfterDispatch','prev':'assigned','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Post-dispatch\x20cancel\x20is\x20a\x20kill:\x20the\x20buyer\x20eats\x20a\x203%\x20fee\x20(kill_fee_bps\x20=\x20300)\x20and\x20the\x20desk\x20refunds\x20the\x20rest.\x20The\x20real\x20product\x20instead\x20deducts\x20a\x20courier\x20idle\x20fee;\x20same\x20shape,\x20different\x20fee\x20name.','guardKeyProbe':'cancel_after_dispatch','evidence':[]},{'id':'E3','class':'exception','name':'Runner\x20rejects\x20/\x20is\x20reassigned\x20(off-chain\x20re-dispatch)','actor':'fulfiller','precondition':['M4'],'onchain':'expressible_with_gap','chainFootprint':{'node':'assigned','moneyEffect':'none'},'commercialSemantics':'A\x20rejecting\x20runner\x20never\x20touches\x20the\x20chain:\x20the\x20desk\x20re-dispatches\x20off-chain\x20and\x20writes\x20another\x20roster\x20entry;\x20the\x20order\x20rests\x20at\x20assigned\x20until\x20a\x20new\x20runner\x20picks\x20up.\x20The\x20gap\x20is\x20that\x20there\x20is\x20no\x20RejectDispatch\x20forward\x20—\x20the\x20reassignment\x20is\x20invisible\x20to\x20the\x20buyer\x20except\x20through\x20the\x20roster\x27s\x20mutation.','gapPredicate':{'probe':'re-dispatch'},'evidence':[]},{'id':'E4','class':'exception','name':'No\x20runner\x20accepts\x20—\x20buyer\x20cancels\x20penalty-free\x20on\x20timeout','actor':'buyer','precondition':['M3'],'onchain':'expressible','chainFootprint':{'forward':'CancelForNoCapacity','moneyEffect':'refund'},'commercialSemantics':'Shansong\x20queues\x20the\x20order,\x20raises\x20the\x20visible\x20price,\x20and\x20lets\x20the\x20buyer\x20cancel\x20with\x20a\x20FULL\x20refund\x20when\x20no\x20courier\x20accepts.\x20CURED\x20(2026-11-06):\x20the\x20template\x20now\x20ships\x20CancelForNoCapacity\x20—\x20desk\x20slot\x201002\x20+\x20the\x20dispatch_window_hours\x20opening\x20clock\x20force-cancels\x20penalty-free\x20into\x20closed_cancel\x20once\x20the\x20promised\x20window\x20elapses\x20on\x20the\x20assigned\x20entry\x20with\x20no\x20rostered\x20pickup;\x20the\x203%\x20kill\x20stays\x20reserved\x20for\x20buyer-initiated\x20cancels.','evidence':[]},{'id':'E5','class':'exception','name':'Runner-side\x20late\x20penalty\x20(auto-deduct\x20a\x20share\x20of\x20the\x20fee)','actor':'platform','precondition':['M5'],'onchain':'unresolvable','unresolvableRef':'S7','commercialSemantics':'The\x20real\x20product\x20docks\x2020-50%\x20of\x20the\x20courier\x20fee\x20for\x20late\x20pickup/delivery.\x20The\x20chain\x20has\x20no\x20debit/clawback\x20primitive,\x20so\x20an\x20automated\x20penalty\x20on\x20an\x20already-released\x20escrow\x20is\x20UNCONSTRUCTIBLE;\x20the\x20honest\x20substitutes\x20are\x20the\x20arbitration\x20indemnity\x20and\x20the\x20C-11\x20experience-compensation\x20pool.','disclosureProbe':'NO\x20debit[^\x22]{0,40}clawback|automated\x20runner\x20penalt','evidence':[]},{'id':'E6','class':'exception','name':'On-time\x20guarantee\x20—\x20full\x20refund\x20when\x20the\x20deadline\x20is\x20missed','actor':'platform','precondition':['M8'],'onchain':'expressible_with_gap','chainFootprint':{'node':'claim_filed','moneyEffect':'refund'},'commercialSemantics':'Shansong\x20markets\x20\x27late\x20beyond\x20the\x20promised\x20window\x20=\x20full\x20refund\x27,\x20executed\x20in\x20practice\x20by\x20customer-service\x20discretion\x20(single-source,\x20D1).\x20On-chain\x20the\x20refund\x20rail\x20is\x20buyer-triggered:\x20file\x20a\x20dispute\x20in\x20the\x20claim\x20window\x20and\x20an\x20arb-refund\x20ruling\x20pays\x20out;\x20the\x20C-11\x20pool\x20pays\x20a\x20FIXED\x200.1\x20WOW\x20goodwill\x20claim,\x20not\x20a\x20full\x20refund.\x20The\x20gap\x20—\x20no\x20automatic\x20trigger\x20—\x20is\x20disclosed\x20via\x20the\x20SLA-miss\x20goodwill-pool\x20text.\x20Since\x20stage2\x20#20\x20the\x20lateness\x20itself\x20is\x20PROVABLE\x20on\x20chain\x20(E15):\x20the\x20buyer\x20records\x20the\x20compensated\x20marker\x20when\x20the\x20delivery\x20span\x20beats\x20promise_window_hours,\x20feeding\x20the\x20goodwill\x20claim\x20with\x20history-delta\x20evidence.','gapPredicate':{'probe':'SLA\x20miss|late\x20delivery\x20beyond|goodwill\x20pool'},'evidence':[]},{'id':'E7','class':'exception','name':'Item\x20lost\x20or\x20damaged\x20mid-custody\x20(buyer\x20declaration\x20into\x20arbitration)','actor':'buyer','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','forward':'ReportItemLoss','prev':'picked_up','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20buyer\x20can\x20declare\x20loss/damage\x20straight\x20from\x20picked_up\x20—\x20the\x20item-loss\x20rail\x20(D4)\x20—\x20which\x20stamps\x20claim\x20state\x20for\x20the\x20compensation\x20fund\x20track.\x20Recovery\x20is\x20capped\x20at\x203x\x20the\x20escrowed\x20fee\x20(see\x20R5),\x20NOT\x20the\x20declared\x20value.','guardKeyProbe':'report_loss','evidence':[]},{'id':'E8','class':'exception','name':'Buy-for-me\x20substitution\x20needs\x20buyer\x20consent\x20(order\x20items\x20immutable)','actor':'fulfiller','precondition':['M6'],'onchain':'disclosure_only','commercialSemantics':'When\x20the\x20requested\x20item\x20is\x20out\x20of\x20stock,\x20shansong\x20substitutes\x20only\x20with\x20in-app\x20buyer\x20consent.\x20On-chain\x20the\x20order\x27s\x20items()\x20view\x20is\x20immutable\x20(U-23/S23)\x20and\x20there\x20is\x20no\x20consent\x20surface\x20—\x20the\x20honest\x20path\x20is\x20off-chain\x20negotiation,\x20then\x20cancel/reorder.\x20DISCLOSED\x20(stage2\x20#20\x20cure):\x20the\x20build_notes\x20carry\x20the\x20substitution\x20policy\x20(out-of-stock\x20substitute\x20with\x20in-app\x20consent,\x20cancel-and-replace\x20on\x20refusal,\x20the\x20buy-budget\x20cap\x20still\x20binding)\x20—\x20the\x20strict\x20probe\x20stays\x20so\x20a\x20corpus\x20regression\x20re-surfaces\x20here.','disclosureProbe':'substitut[^\x22]{0,60}|out\x20of\x20stock|out-of-stock|order\x20items\x20immutable','evidence':[]},{'id':'E9','class':'exception','name':'Receipt\x20exceeds\x20the\x20escrowed\x20buy\x20budget\x20(guard\x20rejects;\x20excess\x20unrecoverable)','actor':'fulfiller','precondition':['M6'],'onchain':'expressible_with_gap','chainFootprint':{'node':'picked_up','forward':'PickUpOrder','prev':'assigned','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'The\x20receipt\x20gate\x20rejects\x20amounts\x20above\x20the\x20escrowed\x20buy\x20budget\x20—\x20the\x20desk\x20eats\x20the\x20difference\x20(D5).\x20The\x20gap:\x20there\x20is\x20no\x20top-up\x20rail\x20(no\x20RefundPriceDiff\x20the\x20other\x20way),\x20so\x20the\x20buyer\x20cannot\x20be\x20charged\x20MORE\x20post-hoc\x20either;\x20pricing\x20discipline\x20moves\x20entirely\x20to\x20the\x20quote\x20step.','guardKeyProbe':'pickup_receipt_evidence','gapPredicate':{'probe':'escrowed\x20buy\x20budget|eats\x20the\x20difference'},'evidence':[]},{'id':'E10','class':'exception','name':'Fake\x20handover\x20(attested\x20but\x20never\x20delivered)','actor':'fulfiller','precondition':['M8'],'onchain':'expressible_with_gap','chainFootprint':{'node':'delivered','forward':'HandOver','prev':'picked_up','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'Collusion\x20between\x20the\x20roster\x20writer\x20and\x20a\x20rostered\x20runner\x20can\x20fabricate\x20a\x20delivery\x20evidence\x20row\x20without\x20a\x20parcel\x20moving.\x20The\x20roster\x20gate\x20proves\x20WHO\x20was\x20authorized,\x20not\x20that\x20a\x20specific\x20human\x20carried\x20the\x20item;\x20residual\x20risk\x20is\x20desk-staff\x20integrity\x20and\x20is\x20disclosed\x20as\x20such.','guardKeyProbe':'deliver_evidence','gapPredicate':{'probe':'not\x20that\x20a\x20specific\x20human|who\x20was\x20authorized'},'evidence':[]},{'id':'E11','class':'exception','name':'Prohibited-item\x20interception\x20(cash,\x20securities,\x20precious\x20metals)','actor':'platform','precondition':['M5'],'onchain':'not_applicable','commercialSemantics':'The\x20real\x20product\x20intercepts\x20prohibited\x20items\x20at\x20pickup\x20and\x20bans\x20the\x20account;\x20there\x20is\x20no\x20item-inspection\x20primitive\x20on-chain,\x20so\x20this\x20step\x20cannot\x20exist\x20there.\x20DISCLOSED\x20(2026-11-06):\x20the\x20template\x27s\x20build_notes\x20carry\x20the\x20prohibited-items\x20disclosure\x20(off-chain\x20desk\x20compliance;\x20the\x20on-chain\x20rails\x20continue\x20regardless).','disclosureProbe':'prohibit[^\x22]{0,60}|contraband|banned\x20item','evidence':[]},{'id':'E12','class':'exception','name':'Privacy\x20channel\x20—\x20recipient\x20PII\x20never\x20on-chain\x20(privacy\x20numbers,\x20no-contact\x20drop)','actor':'platform','precondition':['M2'],'onchain':'disclosure_only','commercialSemantics':'Shansong\x20routes\x20recipient\x20contact\x20through\x20privacy-number\x20relay\x20and\x20no-contact\x20drop\x20points.\x20On\x20this\x20template\x20the\x20buyer\x20coordinates\x20(address,\x20phone,\x20recipient)\x20live\x20off-chain\x20in\x20the\x20dispatch/point\x20systems;\x20the\x20chain\x20stores\x20none\x20of\x20it\x20—\x20a\x20privacy\x20FEATURE\x20expressed\x20by\x20omission.','disclosureProbe':'address,\x20phone,\x20recipient|live\x20OFF-CHAIN\x20in\x20the\x20dispatch','evidence':[]},{'id':'E13','class':'exception','name':'Recipient\x20refuses\x20/\x20is\x20unreachable\x20(relayed\x20return)','actor':'buyer','precondition':['M8'],'onchain':'expressible_with_gap','chainFootprint':{'node':'return_requested','forward':'RequestReturn','prev':'delivered','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'A\x20recipient\x27s\x20refusal\x20is\x20a\x20third\x20party\x27s\x20will\x20—\x20there\x20is\x20no\x20on-chain\x20channel\x20for\x20someone\x20who\x20is\x20not\x20the\x20order\x20holder,\x20so\x20the\x20buyer\x20must\x20relay\x20it\x20and\x20file\x20a\x20refund-request\x20inside\x20the\x2024-hour\x20window\x20(the\x20desk\x20confirms\x20or\x20rejects).\x20The\x20recipient-will\x20indirection\x20IS\x20DISCLOSED\x20(stage2\x20#20\x20cure):\x20the\x20build_notes\x20carry\x20the\x20RECIPIENT\x20REFUSES\x20path\x20(buyer\x20relays,\x20refund-request\x20inside\x20the\x20window).\x20The\x20gap\x20itself\x20stays\x20open:\x20no\x20fulfiller-side\x20blocked-delivery\x20declaration\x20(UndeliverableReport)\x20and\x20no\x20physical-return\x20tracking.','guardKeyProbe':'return_request','gapPredicate':{'probe':'recipient[^\x22]{0,80}refus|refus[^\x22]{0,80}recipient'},'evidence':[]},{'id':'E14','class':'exception','name':'Wrong\x20address\x20/\x20unreachable\x20address\x20(no\x20undeliverable\x20declaration)','actor':'fulfiller','precondition':['M5'],'onchain':'expressible_with_gap','chainFootprint':{'node':'picked_up','moneyEffect':'none'},'commercialSemantics':'The\x20runner\x20is\x20blocked\x20mid-custody\x20with\x20a\x20bad\x20address.\x20The\x20delivery\x20address\x20is\x20not\x20on-chain\x20at\x20all\x20(PII\x20off-chain,\x20no\x20required_info\x20surface)\x20and\x20items\x20are\x20immutable,\x20so\x20there\x20is\x20no\x20AddressChange\x20with\x20an\x20audit\x20trail\x20and\x20no\x20UndeliverableReport\x20forward\x20—\x20resolution\x20is\x20off-chain\x20negotiation,\x20then\x20dispute/cancel.\x20The\x20undeliverable\x20path\x20IS\x20DISCLOSED\x20(stage2\x20#20\x20cure):\x20the\x20build_notes\x20carry\x20the\x20WRONG\x20ADDRESS\x20/\x20UNDELIVERABLE\x20path\x20(off-chain\x20negotiation,\x20then\x20dispute/cancel\x20rails).','gapPredicate':{'probe':'wrong\x20address|undeliverable|address\x20change|cannot\x20deliver'},'evidence':[{'file':'order.move','line':0xcc,'pattern':'public\x20fun\x20items(self:&Order)'},{'file':'order.move','line':0x52,'pattern':'public\x20fun\x20required_info_update'}]},{'id':'E15','class':'exception','name':'Late-delivery\x20marker\x20(proven-late\x20rail\x20feeds\x20the\x20goodwill\x20claim)','actor':'buyer','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'compensated','moneyEffect':'none'},'commercialSemantics':'When\x20the\x20delivery\x20span\x20(delivered\x20FIRST\x20entry\x20minus\x20picked_up\x20FIRST\x20entry)\x20exceeds\x20promise_window_hours,\x20the\x20buyer\x20records\x20the\x20compensated\x20marker\x20(tpl_forward_late_delivery_gate\x20/\x20late_compensation,\x20order-holder\x20leg,\x20F-049\x20form)\x20—\x20history-delta\x20evidence\x20of\x20the\x20SLA\x20miss.\x20The\x20marker\x20moves\x20NO\x20money\x20and\x20never\x20auto-pays:\x20the\x20desk\x20resumes\x20the\x20serial\x20window\x20(ResumeAfterCompensation),\x20and\x20the\x20payout\x20stays\x20the\x20buyer\x27s\x20proactive\x20C-11\x20goodwill\x20claim\x20(fixed\x20tier)\x20or\x20a\x20full-refund\x20ruling\x20inside\x20the\x20window\x20(E6).\x20Distance/time-tiered\x20SLAs\x20stay\x20off-chain\x20—\x20the\x20promise\x20must\x20remain\x20a\x20static\x20window.','guardKeyProbe':'late_compensation','evidence':[]},{'id':'R1','class':'remedy','name':'File\x20a\x20dispute\x20inside\x20the\x20serial\x20claim\x20window','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','forward':'FileDispute','prev':'claim_window','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Within\x20the\x2024-hour\x20post-confirmation\x20window\x20the\x20buyer\x20escalates\x20to\x20arbitration\x20(the\x20real\x20product\x27s\x20customer-service\x20ticket).\x20The\x20window\x20math\x20is\x20serial:\x20claim_window\x20must\x20still\x20be\x20open\x20—\x20settling\x20or\x20a\x20return\x20confirm\x20closes\x20it\x20first.','guardKeyProbe':'claim_filed','evidence':[]},{'id':'R2','class':'remedy','name':'Buyer\x20withdraws\x20the\x20claim\x20(full-refund\x20rail\x20reopens)','actor':'buyer','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'WithdrawClaim','prev':'claim_filed','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Settling\x20out-of-band\x20(the\x20real\x20product\x27s\x20\x27negotiated\x20with\x20the\x20courier\x27\x20outcome)\x20lets\x20the\x20buyer\x20pull\x20out\x20and\x20take\x20the\x20full\x20refund;\x20the\x20claimed_by\x20stamp\x20stays\x20taken\x20so\x20the\x20SAME\x20arb\x20case\x20can\x20never\x20re-claim\x20the\x20order.','guardKeyProbe':'withdraw_claim','evidence':[{'file':'order.move','line':0x79,'pattern':'option::is_none(&self.claimed_by)'}]},{'id':'R3','class':'remedy','name':'Desk-favor\x20ruling\x20resumes\x20the\x20order\x20at\x20delivered','actor':'merchant','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'ResumeAfterDismissal','prev':'claim_filed','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'A\x20dismissed\x20dispute\x20puts\x20the\x20order\x20back\x20at\x20delivered\x20with\x20the\x20claim\x20window\x20re-armed\x20—\x20the\x20buyer\x20can\x20dispute\x20again\x20(the\x20real\x20product\x27s\x20\x27ticket\x20closed,\x20no\x20fault\x20found\x27).\x20Only\x20a\x20dismissal\x20RESUME\x20needs\x20the\x20guard;\x20a\x20plain\x20dismissal\x20keeps\x20the\x20rail\x20open\x20for\x20the\x20withdraw/arb-refund\x20pair.','guardKeyProbe':'arb_dismissed_resume','evidence':[]},{'id':'R4','class':'remedy','name':'Buyer-won\x20ruling\x20executes\x20the\x20full\x20refund','actor':'arbitrator','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'ArbRefund','prev':'claim_filed','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'A\x20ruling\x20won\x20by\x20the\x20buyer\x20refunds\x20the\x20escrowed\x20total\x20deterministically\x20—\x20the\x20merchant-side\x20execution\x20of\x20the\x20CS\x20decision\x20(R5\x20covers\x20the\x20indemnity\x20on\x20top).\x20The\x20real\x20product\x27s\x20ruling\x20is\x20discretionary;\x20here\x20it\x20is\x20a\x20signed\x20arb\x20outcome.','guardKeyProbe':'arb_refund','evidence':[]},{'id':'R5','class':'remedy','name':'Compensation-fund\x20payout\x20to\x20the\x20order\x20owner\x20(capped\x20at\x203x\x20the\x20escrowed\x20fee)','actor':'merchant','precondition':['R1'],'onchain':'expressible_with_gap','chainFootprint':{'node':'claim_filed','moneyEffect':'compensate'},'commercialSemantics':'For\x20loss/damage\x20claims\x20the\x20desk\x20pays\x20from\x20a\x20pre-locked\x20compensation_fund\x20(>=\x203x\x20its\x20largest\x20escrowed\x20order,\x20locked\x20BEFORE\x20launch).\x20The\x20gap:\x20the\x20cap\x20multiplies\x20the\x20ESCROWED\x20FEE,\x20not\x20the\x20parcel\x27s\x20declared\x20value\x20—\x20a\x203,000-CNY\x20parcel\x20on\x20a\x205-CNY\x20fee\x20recovers\x20~15\x20CNY\x20on-chain\x20(INV-SS-2),\x20far\x20below\x20the\x20official\x20insurance\x20promise.','gapPredicate':{'probe':'MAX_INDEMNITY_MULTIPLE|the\x20escrow\x20is\x20the\x20FEE|3x\x20the\x20escrow'},'evidence':[{'file':'arb.move','line':0x15,'pattern':'MAX_INDEMNITY_MULTIPLE'},{'file':'service.move','line':0x24c,'pattern':'public\x20fun\x20compensation_claim'},{'file':'service.move','line':0x265,'pattern':'order::owner(order)'}]},{'id':'R6','class':'remedy','name':'Arbitration\x2030-day\x20silence\x20=\x20acceptance\x20(case-fee\x20release)','actor':'platform','precondition':['R4'],'onchain':'not_applicable','commercialSemantics':'Protocol-level\x20arb-object\x20finality\x20(WITHDRAW_DURATION_TIME,\x20silence\x20treated\x20as\x20acceptance)\x20releasing\x20the\x20case\x20fee.\x20The\x20real\x20product\x20has\x20no\x20analog\x20step\x20—\x20its\x20CS\x20ruling\x20executes\x20immediately\x20—\x20and\x20this\x20template\x27s\x20machine\x20refund\x20rails\x20key\x20on\x20the\x20ruling\x20state\x20directly,\x20so\x20the\x20window\x20never\x20touches\x20the\x20buyer\x20path.','evidence':[]},{'id':'R7','class':'remedy','name':'Return\x20request\x20inside\x20the\x2024-hour\x20window\x20(refund-request\x20rail)','actor':'buyer','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'return_requested','forward':'RequestReturn','prev':'delivered','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'An\x20errand\x20has\x20no\x20goods\x20to\x20ship\x20back,\x20so\x20after-sales\x20is\x20a\x20REFUND-REQUEST\x20rail,\x20not\x20a\x20shipback:\x20the\x20buyer\x20requests\x20inside\x20the\x20window,\x20the\x20desk\x20confirms\x20(full\x20refund)\x20or\x20rejects.\x20The\x20real\x20product\x27s\x20\x27re-deliver\x20/\x20negotiate\x27\x20flow\x20maps\x20to\x20the\x20same\x20request-confirm\x20pair.','guardKeyProbe':'return_request','evidence':[]},{'id':'R8','class':'remedy','name':'Buyer\x20withdraws\x20the\x20return\x20request\x20(liveness\x20self-exit)','actor':'buyer','precondition':['R7'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'WithdrawReturn','prev':'return_requested','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20buyer\x20backs\x20out\x20of\x20the\x20request\x20and\x20the\x20order\x20returns\x20to\x20delivered\x20with\x20the\x20window\x20still\x20armed\x20—\x20prevents\x20a\x20stale\x20request\x20from\x20freezing\x20the\x20desk\x27s\x20confirm/reject\x20choice.','guardKeyProbe':'return_withdraw','evidence':[]},{'id':'R9','class':'remedy','name':'Desk\x20confirms\x20the\x20return\x20(full\x20refund)','actor':'merchant','precondition':['R7'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'ConfirmReturn','prev':'return_requested','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20desk\x20accepts\x20the\x20refund\x20request:\x20the\x20escrow\x20refunds\x20in\x20full\x20and\x20the\x20order\x20closes.\x20Intentionally\x20a\x20bare\x20permission_index\x20edge\x20—\x20the\x20desk\x20answers,\x20no\x20extra\x20evidence\x20row\x20is\x20required.','evidence':[]},{'id':'R10','class':'remedy','name':'Desk\x20rejects\x20the\x20return\x20(order\x20resumes\x20at\x20delivered)','actor':'merchant','precondition':['R7'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'RejectReturn','prev':'return_requested','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20desk\x20contests\x20the\x20request;\x20the\x20order\x20resumes\x20at\x20delivered\x20and\x20the\x20buyer\x27s\x20remaining\x20remedies\x20are\x20the\x20claim\x20window\x20(R1)\x20or\x20withdrawal\x20(R8)\x20—\x20the\x20real\x20product\x27s\x20\x27request\x20denied,\x20ticket\x20if\x20you\x20disagree\x27.','evidence':[]},{'id':'R11','class':'remedy','name':'Platform\x20advance\x20compensation\x20(customer-service\x20make-good)','actor':'platform','precondition':['R4'],'onchain':'disclosure_only','commercialSemantics':'Shansong\x27s\x205-star\x20CS\x20occasionally\x20advances\x20compensation\x20without\x20a\x20ruling.\x20On-chain\x20the\x20counterpart\x20is\x20the\x20pre-locked\x20compensation_fund\x20paying\x20the\x20order\x20owner\x20—\x20no\x20discretion\x20needed,\x20and\x20the\x20desk\x27s\x20fund\x20watch\x20(three\x20water\x20tiers)\x20is\x20the\x20operational\x20duty.','disclosureProbe':'compensation[^\x22]{0,10}fund|pre-lock','evidence':[]},{'id':'P1','class':'post','name':'Review-reward\x20bounty\x20payout\x20(0.05\x20WOW\x20per\x20claim)','actor':'platform','precondition':['M12'],'onchain':'expressible','chainFootprint':{'node':'reviewed','moneyEffect':'reward'},'commercialSemantics':'The\x20bounty\x20claim\x20rides\x20the\x20reviewed\x20waypoint:\x20a\x20pre-funded\x20reward\x20pool\x20pays\x20per\x20accepted\x20review,\x20gated\x20by\x20content\x20checks\x20—\x20the\x20shansong\x20voucher\x20economy\x20with\x20the\x20discretion\x20removed.','evidence':[]},{'id':'P2','class':'post','name':'Runner\x20paid\x20(desk\x20payroll\x20default;\x20direct\x20escrow\x20leg\x20stays\x20a\x20hand-build\x20surface)','actor':'merchant','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'SettleAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'release'},'commercialSemantics':'Settlement\x20releases\x20the\x20escrow:\x20the\x20DESK\x20Entity\x20takes\x20its\x20share\x20(the\x20desk\x20pays\x20the\x20runner\x20off-chain\x20from\x20it\x20—\x20the\x20payroll\x20default).\x20Direct\x20courier\x20escrow\x20pay\x20is\x20NOT\x20an\x20encodable\x20catalog\x20row:\x20the\x20stage2\x20#20\x20Signer\x20leg\x20was\x20RETRACTED\x20pre-publish\x20because\x20the\x20settle_once\x20caller-authorization\x20leg\x20admits\x20owner-class\x20callers\x20only\x20(order.owner/agent,\x20permission.owner/admin)\x20and\x20no\x20Address-valued\x20runner-assignment\x20row\x20exists\x20for\x20a\x20placement\x20third\x20arm\x20—\x20the\x20rail\x20tripped\x20F-01\x20FUND_RAIL_UNREACHABLE\x20at\x20zero-input\x20compile\x20(CAT-B2/upwc-cat-261017).\x20A\x20hand-built\x20sso\x20CAN\x20mount\x20a\x20Signer\x20leg\x20and\x20the\x20settlement\x20CALLER\x20(the\x20authorized\x20tx\x20sender\x20of\x20the\x20kernel\x27s\x20signer-direct\x20allocation\x20shape)\x20is\x20paid\x20the\x20declared\x20share\x20—\x20the\x20T-06\x20live\x20shape\x20(a\x20shop\x27s\x20own\x20courier\x20account\x20fires\x20the\x20settle\x20from\x20the\x20staff\x20permission).\x20//\x20Probe\x20retirement\x20note\x20(stage2\x20#20):\x20the\x20former\x20feature\x20guardKeyProbe\x20(runner*pay\x20/\x20signer*leg)\x20is\x20retired\x20FULFILLED\x20—\x20the\x20retraction\x20still\x20leaves\x20the\x20settlement\x20rail\x20visible\x20at\x20the\x20ALLOCATOR\x20surface\x20(desk\x20Entity\x20row),\x20which\x20the\x20coverage\x20engine\x27s\x20edge-guard\x20sightline\x20structurally\x20cannot\x20see;\x20keeping\x20an\x20unsatisfiable\x20probe\x20would\x20pin\x20a\x20permanent\x20medium\x20advisory.\x20The\x20meituan/food-delivery\x20E15\x20ratchet\x20(leg\x20still\x20missing\x20there)\x20is\x20untouched.','evidence':[{'file':'allocation.move','line':0x275,'pattern':'tx_context::sender(ctx)'}]},{'id':'P3','class':'post','name':'Membership\x20top-up\x20discounts\x20/\x20corporate\x20accounts','actor':'platform','precondition':['M1'],'onchain':'not_applicable','commercialSemantics':'Membership\x20and\x20corporate\x20billing\x20are\x20off-chain\x20CRM\x20products;\x20they\x20price\x20the\x20quote\x20(M1)\x20and\x20never\x20touch\x20the\x20machine.\x20Unlike\x20the\x20food-delivery\x20free-delivery\x20voucher,\x20there\x20is\x20no\x20on-chain\x20candidate\x20shape\x20to\x20anchor.','evidence':[]},{'id':'P4','class':'post','name':'Immutable\x20order/waybill\x20record\x20retention','actor':'platform','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'completed','moneyEffect':'none'},'commercialSemantics':'Every\x20advance\x20appends\x20to\x20the\x20order\x27s\x20history\x20(node,\x20session,\x20timestamp)\x20—\x20the\x20waybill\x20audit\x20trail\x20the\x20real\x20product\x20keeps\x20in\x20an\x20internal\x20database,\x20retained\x20by\x20construction.\x20Anchored\x20at\x20the\x20settle\x20terminal\x20as\x20the\x20last\x20append.','evidence':[{'file':'progress.move','line':0x8e,'pattern':'history:\x20ParentTableVec<History>'},{'file':'progress.move','line':0x22c,'pattern':'parent_table_vec::push_back'}]}],'invariants':[{'id':'INV-SS-1','statement':'A\x20cancel\x20caused\x20by\x20CAPACITY\x20SHORTAGE\x20(no\x20runner\x20accepted\x20within\x20the\x20promised\x20dispatch\x20window)\x20must\x20be\x20penalty-free\x20for\x20the\x20buyer\x20—\x20the\x20platform\x27s\x20fulfillment\x20failure,\x20not\x20the\x20buyer\x27s\x20will,\x20ends\x20the\x20order.','jurisdiction':'China\x20SAMR\x20instant-delivery\x20rules\x20(2026-10-08\x20draft,\x20para.\x2017\x20fulfiller-fault\x20cancellations);\x20EU\x20Platform\x20Work\x20Directive\x202024/2831\x20(dispatch\x20transparency).','chainConflict':'CURED\x20(2026-11-06):\x20the\x20template\x20ships\x20CancelForNoCapacity\x20(desk\x20slot\x201002,\x20pattern.time_lock_progress\x20/\x20cancel_no_capacity\x20—\x20Clock\x20>=\x20assigned\x20entry\x20+\x20dispatch_window_hours,\x20landing\x20on\x20the\x20EXISTING\x20closed_cancel\x20refund_full\x20allocator;\x20the\x203%\x20kill\x20CancelAfterDispatch\x20stays\x20reserved\x20for\x20buyer-initiated\x20cancels).\x20Before\x20the\x20cure\x20the\x20only\x20post-dispatch\x20buyer\x20exit\x20was\x20CancelAfterDispatch\x20—\x20a\x203%\x20fee-bearing\x20kill\x20(kill_fee_bps\x20=\x20300)\x20—\x20so\x20a\x20shortage\x20the\x20buyer\x20cannot\x20influence\x20was\x20charged\x20as\x20if\x20the\x20buyer\x20walked\x20away\x20(K3-PRODUCTS/delivery/shansong.md\x20D2).\x20The\x20registration\x20is\x20retained\x20as\x20a\x20standing\x20check:\x20removing\x20the\x20forward\x20while\x20kill_fee_bps\x20>\x200\x20re-fires\x20it.','violation':{'requiresFeeParamNonZero':'kill_fee_bps','whileMissingForward':'CancelForNoCapacity'}},{'id':'INV-SS-2','statement':'Official\x20declared-value\x20insurance\x20pays\x20up\x20to\x20min(declared\x20value,\x20platform-assessed\x20value)\x20with\x20category-tiered\x20premiums\x20(max\x205,000\x20CNY\x20per\x20item);\x20the\x20chain\x27s\x20indemnity\x20is\x20capped\x20at\x203x\x20the\x20ESCROWED\x20FEE\x20—\x20and\x20the\x20escrow\x20is\x20the\x20service\x20fee\x20plus\x20buy\x20budget,\x20not\x20the\x20parcel\x20value.','jurisdiction':'Shansong\x20declared-value\x20terms;\x20PRC\x20Civil\x20Code\x20art.\x20832-833\x20carrier\x20liability.','chainConflict':'The\x20on-chain\x20indemnity\x20ceiling\x20is\x203x\x20the\x20order\x27s\x20ESCROWED\x20amount\x20(the\x20arbitration\x20module\x27s\x20cap\x20base\x20is\x20the\x20escrow,\x20never\x20the\x20declared\x20parcel\x20value).\x20A\x203,000-CNY\x20parcel\x20on\x20a\x205-CNY\x20errand\x20fee\x20recovers\x20~15\x20CNY\x20on-chain;\x20the\x20pre-locked\x20compensation\x20fund\x20(>=\x203x\x20the\x20largest\x20ESCROWED\x20order)\x20softens\x20but\x20does\x20not\x20close\x20the\x20gap.\x20Text-only:\x20no\x20fee_params\x20key\x20exists\x20to\x20make\x20this\x20mechanical\x20yet.','evidence':[{'file':'arb.move','line':0x15,'pattern':'MAX_INDEMNITY_MULTIPLE'},{'file':'arb.move','line':0x21d,'pattern':'indemnity_cap_base'},{'file':'service.move','line':0x265,'pattern':'order::owner(order)'}]},{'id':'INV-SS-3','statement':'Runner\x20pay\x20defaults\x20to\x20the\x20desk\x27s\x20off-chain\x20payroll:\x20the\x20escrow\x20settles\x20to\x20the\x20desk\x20Entity\x20and\x20NO\x20catalog\x20rail\x20pays\x20a\x20signer.','jurisdiction':'EU\x20Platform\x20Work\x20Directive\x202024/2831\x20art.\x205\x20(pay\x20transparency\x20to\x20the\x20Courier).','chainConflict':'GUARDED-BY-RETRACTION\x20(stage2\x20#20,\x20N-01):\x20the\x20catalog\x20ships\x20NO\x20courier\x20direct-pay\x20leg\x20—\x20the\x20opt-in\x20Signer\x20row\x20was\x20RETRACTED\x20pre-publish\x20because\x20the\x20settle_alloc\x20caller-authorization\x20leg\x20(tpl_allocator_node_gate_settle_once)\x20admits\x20owner-class\x20identities\x20only\x20and\x20the\x20template\x20has\x20no\x20Address-valued\x20runner-assignment\x20row\x20a\x20placement\x20third\x20arm\x20could\x20probe:\x20the\x20rail\x20tripped\x20F-01\x20FUND_RAIL_UNREACHABLE\x20at\x20zero-input\x20compile\x20(CAT-B2/upwc-cat-261017:\x20NO\x20signer\x20leg\x20is\x20encodable\x20here).\x20The\x20standing\x20check\x20pins\x20the\x20desk-only\x20settlement\x20economics:\x20the\x20desk\x20Entity\x20takes\x20the\x20escrow,\x20roster-only\x20external\x20runners\x20stay\x20on\x20the\x20desk\x20payroll.\x20Direct\x20pay\x20remains\x20expressible\x20in\x20HAND-BUILT\x20sso\x20builds\x20—\x20a\x20mounted\x20Recipient::Signer\x20row\x20pays\x20the\x20authorized\x20settlement\x20caller\x20directly\x20from\x20escrow\x20(the\x20kernel\x27s\x20signer-direct\x20allocation\x20shape;\x20see\x20the\x20invariants\x27\x20evidence\x20pointers\x20for\x20the\x20exact\x20on-chain\x20anchor).\x20Do\x20NOT\x20drop\x20this\x20invariant\x20—\x20it\x20pins\x20the\x20desk-payroll\x20default\x20against\x20a\x20signer-rail\x20regression.','evidence':[{'file':'allocation.move','line':0x26d,'pattern':'ERECIPIENT_NOT_FOR_OBJECT'},{'file':'allocation.move','line':0x275,'pattern':'tx_context::sender(ctx)'}]}]};