@wowok/agent-mcp 3.4.4 → 3.4.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.build-stamp.json +3 -3
- package/dist/chain-semantics/composition-truth.js +1 -1
- package/dist/composition/audit.js +1 -1
- package/dist/composition/compile.js +1 -1
- package/dist/composition/emit-phases.js +1 -1
- package/dist/composition/guard-fill.js +1 -1
- package/dist/composition/input-normalize.js +1 -1
- package/dist/composition/materialize.js +1 -1
- package/dist/composition/mode-gates.js +1 -1
- package/dist/composition/param-disclosure.js +1 -1
- package/dist/composition/plan-run-store.js +1 -0
- package/dist/composition/reflux.js +1 -1
- package/dist/composition/role-bindings.js +1 -0
- package/dist/composition/shape-expand.js +1 -1
- package/dist/composition/supply-chain-emit.js +1 -1
- package/dist/config/judgment.d.ts +13 -25
- package/dist/config/judgment.js +1 -1
- package/dist/config/match-policy-file.js +1 -1
- package/dist/config/rule-engine.d.ts +4 -10
- package/dist/config/rule-engine.js +1 -1
- package/dist/config/template-params.js +1 -1
- package/dist/evaluation/engine.js +1 -1
- package/dist/experience/realtime-feedback.js +1 -1
- package/dist/extensions/capability.js +1 -1
- package/dist/graph/onchain/expand.js +1 -1
- package/dist/graph/onchain/exposure.js +1 -1
- package/dist/harness/forward-roster-preflight.js +1 -0
- package/dist/keeper/detectors.js +1 -1
- package/dist/knowledge/allocator-rail-verifier.js +1 -1
- package/dist/knowledge/arb-operation-face.js +1 -1
- package/dist/knowledge/arbitration-rail-verifier.js +1 -1
- package/dist/knowledge/audit-rules.d.ts +17 -1
- package/dist/knowledge/audit-rules.js +1 -1
- package/dist/knowledge/baselines/rules/alloc_audit.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/allocation.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/arb.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/arbitration.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/bridge.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/contact.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/demand.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/graph.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/guard.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/machine.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/oracle.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/order.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/payment.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/permission.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/personal.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/plan.json +153 -33
- package/dist/knowledge/baselines/rules/plan.json.good +153 -33
- package/dist/knowledge/baselines/rules/plan.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/progress.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/proof.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/registrar.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/repository.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/resource.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/reward.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/service.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/treasury.json.good.sha256 +1 -0
- package/dist/knowledge/baselines/rules/util.json.good.sha256 +1 -0
- package/dist/knowledge/builtin-templates.d.ts +1 -1
- package/dist/knowledge/builtin-templates.js +1 -1
- package/dist/knowledge/discount-threshold.js +1 -1
- package/dist/knowledge/fee-param-bindings.js +1 -1
- package/dist/knowledge/getting-started.js +1 -1
- package/dist/knowledge/guard-binding-table.js +1 -1
- package/dist/knowledge/guard-design-patterns.js +1 -1
- package/dist/knowledge/guard-templates.d.ts +3 -2
- package/dist/knowledge/guard-templates.js +1 -1
- package/dist/knowledge/index.js +1 -1
- package/dist/knowledge/industry-registry.js +1 -1
- package/dist/knowledge/jsonrpc-enum.js +1 -1
- package/dist/knowledge/knob-docs.js +1 -1
- package/dist/knowledge/machine-topology.js +1 -1
- package/dist/knowledge/param-schema.js +1 -1
- package/dist/knowledge/param-tiers.js +1 -1
- package/dist/knowledge/path-oracle/products/alibaba-1688.js +1 -1
- package/dist/knowledge/path-oracle/products/amazon.js +1 -1
- package/dist/knowledge/path-oracle/products/booking-com.js +1 -1
- package/dist/knowledge/path-oracle/products/contra.js +1 -1
- package/dist/knowledge/path-oracle/products/costco.js +1 -1
- package/dist/knowledge/path-oracle/products/duoduo-maicai.js +1 -1
- package/dist/knowledge/path-oracle/products/etsy.js +1 -1
- package/dist/knowledge/path-oracle/products/gamefound.js +1 -1
- package/dist/knowledge/path-oracle/products/gofundme.js +1 -1
- package/dist/knowledge/path-oracle/products/klook.js +1 -1
- package/dist/knowledge/path-oracle/products/ninety-nine-designs.js +1 -1
- package/dist/knowledge/path-oracle/products/pinduoduo-kuaituantuan.js +1 -1
- package/dist/knowledge/path-oracle/products/shansong.js +1 -1
- package/dist/knowledge/path-oracle/products/taobao-presale.js +1 -1
- package/dist/knowledge/path-oracle/products/upwork-catalog.js +1 -1
- package/dist/knowledge/path-oracle/products/upwork.js +1 -1
- package/dist/knowledge/pattern-resolutions.js +1 -1
- package/dist/knowledge/protocol-facts.js +1 -1
- package/dist/knowledge/publish-gate.js +1 -1
- package/dist/knowledge/publish-surface-contract.js +1 -1
- package/dist/knowledge/template-loader.js +1 -1
- package/dist/knowledge/template-registry.js +1 -1
- package/dist/knowledge/template-scanner.js +1 -1
- package/dist/knowledge/time-units.js +1 -0
- package/dist/knowledge/tools-reference.js +1 -1
- package/dist/knowledge/workflow-guidance.js +1 -1
- package/dist/monitor/MonitorLoop.js +1 -1
- package/dist/participation/radar-core.js +1 -1
- package/dist/playbooks/service-build/business-puzzle.js +1 -1
- package/dist/playbooks/service-build/machine-panorama.js +1 -1
- package/dist/playbooks/service-build/merchant-guide.js +1 -1
- package/dist/playbooks/service-build/migration-planner.js +1 -1
- package/dist/playbooks/service-build/object-panorama.js +1 -1
- package/dist/playbooks/service-build/participation-radar.js +1 -1
- package/dist/playbooks/service-build/relationship-profile.js +1 -1
- package/dist/playbooks/service-build/service-panorama.js +1 -1
- package/dist/playbooks/service-build/service-quote.js +1 -1
- package/dist/review/index.js +1 -1
- package/dist/safety/confirm-gate.js +1 -1
- package/dist/schema/benchmark-migration/index.d.ts +110 -2
- package/dist/schema/benchmark-migration/index.js +1 -1
- package/dist/schema/boundary-coercion.js +1 -0
- package/dist/schema/call/arbitration.js +1 -1
- package/dist/schema/call/base.js +1 -1
- package/dist/schema/call/handler.js +1 -1
- package/dist/schema/call/machine.d.ts +56 -8
- package/dist/schema/call/order.d.ts +37 -10
- package/dist/schema/call/order.js +1 -1
- package/dist/schema/call/permission.d.ts +210 -30
- package/dist/schema/call/personal.d.ts +56 -8
- package/dist/schema/call/progress.d.ts +28 -4
- package/dist/schema/call/semantic.js +1 -1
- package/dist/schema/call/service.d.ts +84 -12
- package/dist/schema/common/index.d.ts +14 -2
- package/dist/schema/common/index.js +1 -1
- package/dist/schema/evaluation/index.js +1 -1
- package/dist/schema/goal/index.d.ts +1 -1
- package/dist/schema/goal/planning.js +1 -1
- package/dist/schema/local/index.js +1 -1
- package/dist/schema/messenger/index.d.ts +168 -24
- package/dist/schema/messenger/index.js +1 -1
- package/dist/schema/operations.d.ts +655 -22
- package/dist/schema/operations.js +1 -1
- package/dist/schema/persona/index.d.ts +22 -110
- package/dist/schema/query/index.js +1 -1
- package/dist/schema/schema-version.js +1 -1
- package/dist/schema/workflow/index.d.ts +4 -0
- package/dist/schema/workflow/index.js +1 -1
- package/dist/schema-query-impl/index.js +1 -1
- package/dist/schemas/benchmark_migration_operation.schema.json +1 -1
- package/dist/schemas/evaluation_operation.schema.json +1 -1
- package/dist/schemas/goal_operation.schema.json +1 -1
- package/dist/schemas/guard_rebind_replacement.schema.json +1 -0
- package/dist/schemas/index.json +1 -1
- package/dist/schemas/messenger_operation.schema.json +1 -1
- package/dist/schemas/onchain_operations.schema.json +1 -1
- package/dist/schemas/onchain_operations_allocation.schema.json +1 -1
- package/dist/schemas/onchain_operations_arbitration.schema.json +1 -1
- package/dist/schemas/onchain_operations_contact.schema.json +1 -1
- package/dist/schemas/onchain_operations_demand.schema.json +1 -1
- package/dist/schemas/onchain_operations_gen_passport.schema.json +1 -1
- package/dist/schemas/onchain_operations_machine.schema.json +1 -1
- package/dist/schemas/onchain_operations_order.schema.json +1 -1
- package/dist/schemas/onchain_operations_permission.schema.json +1 -1
- package/dist/schemas/onchain_operations_personal.schema.json +1 -1
- package/dist/schemas/onchain_operations_progress.schema.json +1 -1
- package/dist/schemas/onchain_operations_proof.schema.json +1 -1
- package/dist/schemas/onchain_operations_repository.schema.json +1 -1
- package/dist/schemas/onchain_operations_reward.schema.json +1 -1
- package/dist/schemas/onchain_operations_service.schema.json +1 -1
- package/dist/schemas/onchain_operations_treasury.schema.json +1 -1
- package/dist/schemas/persona_operation.schema.json +1 -1
- package/dist/schemas/time_convert.schema.json +1 -0
- package/dist/schemas/wip_file.schema.json +1 -1
- package/dist/schemas/workflow_operation.schema.json +1 -1
- package/dist/tools/handlers/benchmark-migration.js +1 -1
- package/dist/tools/handlers/config.js +1 -1
- package/dist/tools/handlers/fund-rail-recipe.js +1 -1
- package/dist/tools/handlers/guard-rebind-replacement.js +1 -0
- package/dist/tools/handlers/local.js +1 -1
- package/dist/tools/handlers/mark-namespace.js +1 -1
- package/dist/tools/handlers/onchain.js +1 -1
- package/dist/tools/handlers/query.js +1 -1
- package/dist/tools/handlers/settle-sweep.js +1 -1
- package/dist/tools/handlers/time-convert.js +1 -0
- package/dist/tools/handlers/wip.js +1 -1
- package/dist/tools/handlers/workflow.js +1 -1
- package/dist/tools/index.d.ts +1 -0
- package/dist/tools/index.js +1 -1
- package/dist/tools/registry/business.js +1 -1
- package/dist/tools/registry/local.js +1 -1
- package/dist/tools/registry/onchain.js +1 -1
- package/dist/tools/wip-verify-ledger.js +1 -1
- package/dist/tools/wrap.js +1 -1
- package/package.json +6 -5
|
@@ -1 +1 @@
|
|
|
1
|
-
export const COSTCO_ORACLE={'productRef':'costco','products':['costco','sams-club','amazon-prime'],'oracleVersion':'1.1.0','steps':[{'id':'M1','class':'offchain','name':'Membership\x20value\x20discovery\x20(fee\x20vs\x20perk\x20value;\x20tier\x20math)','actor':'buyer','precondition':[],'onchain':'not_applicable','commercialSemantics':'Gold\x20Star\x20$65\x20/\x20Executive\x20$130\x20/\x20Sam\x27s\x20¥260/¥680\x20/\x20Prime\x20$139\x20benchmarks\x20live\x20in\x20the\x20wiki,\x20not\x20on-chain.\x20No\x20chain\x20object\x20hosts\x20a\x20value\x20calculator.','evidence':[]},{'id':'M17','class':'offchain','name':'In-store\x20gate\x20and\x20perks\x20(door\x20scan,\x20checkout\x20card\x20check,\x20gas/pharmacy/optometry,\x20early\x20hours)','actor':'buyer','precondition':['M3'],'onchain':'not_applicable','commercialSemantics':'The\x20physical\x20door\x20has\x20no\x20chain\x20counterpart;\x20the\x20on-chain\x20equivalent\x20is\x20M7\x20-\x20the\x20buy\x20gate\x20that\x20rejects\x20non-members\x20at\x20order\x20time.','evidence':[]},{'id':'M2','class':'main','name':'Join:\x20the\x20period\x20fee\x20is\x20escrowed\x20at\x20buy\x20(period\x201\x20never\x20enters\x20charging)','actor':'buyer','precondition':['M1'],'onchain':'expressible','chainFootprint':{'node':'subscribed','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'OFN\x20J5\x20idiom:\x20the\x20join\x20order\x20pools\x20the\x20period\x20fee\x20atomically\x20at\x20buy\x20and\x20enters\x20active\x20directly;\x20the\x20charging\x20node\x20is\x20renewal-loop\x20only.\x20(dm)\x20The\x20entry\x20edge\x20is\x20the\x20template\x27s\x20mandatory\x20entry\x20pair;\x20its\x20forward\x20name\x20is\x20generated\x20at\x20build\x20time,\x20so\x20the\x20anchor\x20here\x20is\x20the\x20subscribed\x20node\x20itself.','evidence':[]},{'id':'M3','class':'main','name':'Roster\x20credential\x20written\x20at\x20the\x20active\x20entry\x20(signer-keyed\x20row,\x20value\x20=\x20period\x20expiry)','actor':'keeper','precondition':['M2'],'onchain':'expressible','chainFootprint':{'node':'active','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'(dm)\x20The\x20fulfillment\x20IS\x20the\x20credential:\x20the\x20member_roster\x20row\x20(id_from\x20signer,\x20U64\x20expiry\x20epoch-ms)\x20is\x20written\x20under\x20a\x20writer-bound\x20repository\x20guard\x20BEFORE\x20the\x20forward\x20is\x20pressed\x20(AR-1\x20ordering).\x20The\x20gated\x20retail\x20Service\x27s\x20buy\x20guard\x20reads\x20exactly\x20this\x20row\x20via\x20query\x201167\x20plus\x20a\x20lapse\x20leg.\x20The\x20write\x20guard\x20is\x20repository-hosted,\x20hence\x20no\x20edge\x20guard-key\x20probe.','evidence':[{'file':'repository.move','line':0x4a,'pattern':'ID_FROM_SIGNER'}]},{'id':'M4','class':'main','name':'Period\x20end:\x20keeper\x20clock\x20advance\x20releases\x20the\x20fee\x20to\x20the\x20merchant','actor':'keeper','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'end_period','prev':'active','identity':'permission_index','moneyEffect':'release'},'guardKeyProbe':'period_end','commercialSemantics':'(dm)\x20Clock\x20>=\x20active\x20entry\x20+\x20period_days\x20(365)\x20advances\x20completed;\x20Rate\x2010000\x20to\x20the\x20merchant\x20with\x20a\x20Rate-0\x20order\x20anchor\x20inside\x20the\x20same\x20allocator.\x20The\x20roster\x20expiry\x20lapses\x20on\x20the\x20same\x20math,\x20so\x20credential\x20and\x20release\x20never\x20disagree.','evidence':[]},{'id':'M5','class':'main','name':'Renewal\x20=\x20the\x20member\x27s\x20own\x20explicit\x20signature\x20(no\x20auto-charge\x20exists)','actor':'buyer','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'charging','forward':'renew','prev':'completed','identity':'order_holder','moneyEffect':'escrow_in'},'guardKeyProbe':'renew_charge','commercialSemantics':'(dm)\x20Structurally\x20anti-dark-pattern:\x20every\x20period\x20boundary\x20is\x20crossed\x20by\x20the\x20member\x27s\x20signature\x20(signer\x20==\x20order\x20owner,\x20order_renew\x20single\x20PTB);\x20keepers\x20have\x20NO\x20charge\x20authority\x20and\x20no\x20mandate\x20primitive\x20exists\x20-\x20the\x20real\x20product\x27s\x20auto-renewal\x20dispute\x20surface\x20(C8-C10)\x20is\x20structurally\x20absent\x20(E18).','evidence':[]},{'id':'M6','class':'main','name':'Browse\x20the\x20bulk\x20catalog\x20(limited-SKU\x20model;\x20member\x20price\x20=\x20gated\x20Service\x20sale\x20price)','actor':'buyer','precondition':['M3'],'onchain':'not_applicable','commercialSemantics':'(wc)\x20Catalog\x20browsing\x20has\x20no\x20chain\x20footprint;\x20the\x20member-exclusive\x20price\x20is\x20simply\x20the\x20sale\x20price\x20of\x20the\x20gated\x20retail\x20Service.','evidence':[]},{'id':'M7','class':'main','name':'Buy\x20gate\x20verifies\x20the\x20prepaid\x20membership\x20voucher\x20(Plan\x20B:\x20payment.signer==Signer\x20legs)','actor':'buyer','precondition':['M6'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'(wc)\x20The\x20buy\x20guard\x20runs\x20BEFORE\x20the\x20order\x20exists:\x20the\x20voucher\x20Payment\x20must\x20be\x20signer-own,\x20club-recipient\x20and\x20>=\x20membership_price;\x20slot-0\x20is\x20banned\x20so\x20the\x20gate\x20order\x20rides\x20identifier\x201.\x20One\x20voucher\x20gates\x20many\x20buys\x20(E19)\x20and\x20is\x20NOT\x20time-bounded\x20(E2).\x20The\x20gate\x20is\x20service-hosted,\x20hence\x20no\x20edge\x20guard-key\x20probe;\x20the\x20slot\x20discipline\x20is\x20the\x20load-bearing\x20chain\x20fact.','evidence':[{'file':'service.move','line':0x464,'pattern':'E_BUY_GUARD_ORDER_SLOT'}]},{'id':'M8','class':'main','name':'Bulk\x20goods\x20order\x20escrows\x20the\x20full\x20price\x20(membership\x20money\x20and\x20goods\x20money\x20are\x20separate)','actor':'buyer','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'(wc)\x20MEMBERSHIP\x20MONEY\x20SEPARATION:\x20the\x20voucher\x20(Plan\x20B)\x20or\x20the\x20roster\x20credential\x20(Plan\x20A)\x20is\x20the\x20access\x20proof;\x20the\x20goods\x20escrow\x20is\x20a\x20second,\x20independent\x20pool\x20that\x20returns\x20only\x20through\x20the\x20goods\x20rails.\x20The\x20buy-side\x20service\x20guard\x20is\x20edge-invisible,\x20so\x20no\x20guard-key\x20probe\x20here\x20either.','evidence':[]},{'id':'M9','class':'main','name':'Club\x20staff\x20picking\x20(Permission\x20staff\x20slot\x201001)','actor':'merchant','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'picking','forward':'PickOrder','prev':'paid','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'pick','commercialSemantics':'(wc)\x20The\x20warehouse-club\x20delta\x20vs\x20the\x20marketplace\x20archetype:\x20blue-vest\x20staff\x20pull\x20and\x20pack\x20in\x20a\x20dedicated\x20stage\x20(Sam\x27s\x20~500\x20cloud\x20warehouses);\x20scheduling\x20stays\x20off-chain\x20(S7\x20-\x20no\x20dispatch/auto-deduction\x20primitive,\x20EU\x202024/2831-friendly).','evidence':[]},{'id':'M10','class':'main','name':'Ship\x20with\x20tracking\x20evidence\x20(conditional\x20required-info\x20pair,\x20TPL-11)','actor':'merchant','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'shipped','forward':'Ship','prev':'picking','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'ship','commercialSemantics':'(wc)\x20Two\x20sibling\x20Ship\x20edges:\x20required_info_enforcement\x20off\x20=\x20pure\x20tracking\x20row,\x20on\x20=\x20tracking\x20+\x20delivery-credential\x20composite\x20(bulk\x20home\x20delivery).\x20Both\x20carry\x20the\x20same\x20forward,\x20so\x20the\x20probe\x20reads\x20the\x20pair.','evidence':[]},{'id':'M11','class':'main','name':'Buyer-first\x20delivery\x20confirmation\x20(staff\x20can\x20never\x20self-confirm)','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'ConfirmDelivery','prev':'shipped','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'deliver_confirm','commercialSemantics':'(wc)\x20Release\x20authority\x20is\x20a\x20rail,\x20not\x20a\x20name:\x20only\x20the\x20order\x20holder\x20confirms\x20receipt.','evidence':[]},{'id':'M12','class':'exception','name':'Buyer\x20silence\x20auto-confirm\x20after\x207\x20days\x20(keeper\x20clock\x20duty)','actor':'keeper','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'AutoConfirmDelivery','prev':'shipped','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'deliver_confirm_timeout','commercialSemantics':'(wc)\x20auto_confirm_days=7;\x20windows\x20re-anchor\x20from\x20the\x20delivery\x20entry\x20(find=last)\x20after\x20any\x20waiver.','evidence':[]},{'id':'M13','class':'main','name':'Buyer\x20review\x20window,\x2014\x20days,\x20reputation-only\x20(review\x20pays\x20no\x20bounty)','actor':'buyer','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'reviewed','forward':'Review','prev':'delivered','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'review_window','commercialSemantics':'(wc)\x20review_mode\x20\x27review\x27\x20(not\x20review_reward):\x20U256\x20rating\x20+\x20free-text\x20comment\x20rows;\x20the\x20sibling\x20dm\x20template\x20is\x20where\x20the\x20reward\x20rail\x20lives\x20(M16).','evidence':[]},{'id':'M14','class':'main','name':'Serial\x20claim\x20window\x20opened\x20by\x20the\x20keeper\x20(TPL-09;\x20unopened\x20=\x20pool\x20parked\x20by\x20design)','actor':'keeper','precondition':['M11','M13'],'onchain':'expressible','chainFootprint':{'node':'claim_window','forward':'OpenClaimWindow','prev':'delivered','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'(wc)\x20The\x20keeper\x20OPENS\x20the\x20window\x20after\x20delivery/review;\x20the\x20serial\x20ordering\x20itself\x20is\x20the\x20holdback\x20(FACT-ALLOC-03\x20-\x20the\x20chain\x20has\x20no\x20holdback\x20primitive).\x20An\x20unopened\x20window\x20parks\x20the\x20pool\x20at\x20delivered/reviewed\x20(E25).','evidence':[]},{'id':'M15','class':'main','name':'Settlement\x20after\x20the\x20window:\x20Rate\x2010000\x20to\x20the\x20club\x20Entity,\x200\x20commission','actor':'merchant','precondition':['M14'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'SettleAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'release'},'guardKeyProbe':'settle_window_gate','commercialSemantics':'(wc)\x20Clock\x20>=\x20claim_window\x20entry\x20+\x20settlement_delay_days\x20(45),\x20node-gated\x20on\x20completed,\x20254\x20once.\x20The\x20catalog\x20load\x20gate\x20pins\x20settlement_delay_days\x20>=\x20return_window_days\x20(F-CSTC-02),\x20so\x20the\x20return\x20window\x20always\x20closes\x20before\x20money\x20leaves.','evidence':[]},{'id':'M16','class':'post','name':'Post-period\x20member\x20review\x20with\x20self-claimed\x20bounty\x20(0.006\x20WOW/claim,\x200.1\x20pool)','actor':'buyer','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'reviewed','forward':'SubmitReview','prev':'completed','identity':'order_holder','moneyEffect':'reward'},'guardKeyProbe':'review_submit','commercialSemantics':'(dm)\x20review_reward:\x20the\x20reviewed\x20side-stop\x20is\x20money-free\x20by\x20topology\x20(the\x20fee\x20already\x20released\x20at\x20period\x20end)\x20and\x20renewal-unaffected;\x20the\x20claim\x20guard\x20pays\x20ONLY\x20the\x20signer\x20(P6\x20-\x20the\x20sole\x20permissionless\x20third-party\x20payout\x20channel).\x20The\x20reviewer\x20returns\x20to\x20completed\x20afterwards\x20(R-DEAD-END).','evidence':[{'file':'reward.move','line':0x11b,'pattern':'E_CLAIM_RECIPIENT_NOT_SIGNER'}]},{'id':'E1','class':'exception','name':'Non-member\x20buy\x20rejected\x20at\x20the\x20gate\x20(fail-closed,\x20no\x20quieter\x20downgrade)','actor':'buyer','precondition':['M6'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'(wc)\x20Missing/expired-signer/underfunded\x20voucher\x20legs\x20reject\x20the\x20build\x20outright\x20-\x20the\x20gated-side\x20checklist\x20demands\x20the\x20loud\x20denial.\x20Real-world\x20parallels:\x20door\x20refusal,\x20Instacart\x20markup\x20for\x20non-members.','evidence':[]},{'id':'E2','class':'exception','name':'Membership\x20expired\x20at\x20buy\x20time\x20(Plan\x20A\x20lapse\x20leg\x20rejects;\x20Plan\x20B\x20voucher\x20is\x20NOT\x20time-bounded)','actor':'buyer','precondition':['M4'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'none'},'gapPredicate':{'probe':'NOT\x20TIME-BOUNDED|lapse'},'commercialSemantics':'(both)\x20Plan\x20A\x20expresses\x20lapse\x20(Clock\x20<=\x20roster\x20expiry\x20row);\x20Plan\x20B\x20cannot\x20-\x20the\x20buy\x20gate\x20reads\x20at\x20order\x20time\x20only\x20and\x20never\x20against\x20a\x20clock,\x20so\x20an\x20expired\x20member\x20keeps\x20buying\x20until\x20the\x20credential\x20is\x20swapped.\x20The\x20gap\x20must\x20stay\x20named;\x20the\x20hybrid\x20(B\x20for\x20access\x20+\x20A\x20roster\x20lapse\x20leg)\x20is\x20the\x20prescribed\x20fix.\x20Disclosed\x20in\x20the\x20wc\x20buy-guard\x20note\x20and\x20dm\x20roster\x20hybrid\x20note.','evidence':[]},{'id':'E3','class':'exception','name':'Cancel\x20before\x20picking\x20(full\x20goods\x20refund;\x20the\x20membership\x20fee\x20is\x20not\x20returned\x20with\x20it)','actor':'buyer','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelBeforePick','prev':'paid','identity':'order_holder','moneyEffect':'refund'},'guardKeyProbe':'cancel_from_paid','commercialSemantics':'(wc)\x20R-DRAFT-VOID\x20single\x20hop\x20from\x20paid;\x20the\x20two\x20money\x20pools\x20never\x20cross\x20(M8).','evidence':[]},{'id':'E4','class':'exception','name':'Cancel\x20while\x20picking\x20(warehouse-stage\x20cancel\x20rail)','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelWhilePicking','prev':'picking','identity':'order_holder','moneyEffect':'refund'},'guardKeyProbe':'cancel_from_picking','commercialSemantics':'(wc)\x20Dedicated\x20rail\x20from\x20the\x20picking\x20stage\x20-\x20the\x20marketplace\x20archetype\x20lacks\x20this\x20node\x20entirely.','evidence':[]},{'id':'E5','class':'exception','name':'Return\x20requested\x20while\x20in\x20transit\x20(identity-only\x20rail,\x20no\x20time\x20window\x20BY\x20DESIGN)','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'return_requested','forward':'RequestReturnBeforeDelivery','prev':'shipped','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'return_request_pre_delivery','commercialSemantics':'(wc)\x20F-TPL-01:\x20identity-only\x20on\x20purpose\x20-\x20an\x20in-transit\x20order\x20has\x20no\x20delivered\x20history\x20row\x20to\x20anchor\x20a\x20window\x20against.','evidence':[]},{'id':'E6','class':'exception','name':'Return\x20requested\x20in\x20the\x2030-day\x20post-delivery\x20window','actor':'buyer','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'return_requested','forward':'RequestReturn','prev':'delivered','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'return_window','commercialSemantics':'(wc)\x20return_window_days=30\x20vs\x20the\x20real\x20club\x27s\x20no-time-limit\x20satisfaction\x20promise\x20-\x20the\x20boundary\x20is\x20E12;\x20electronics\x2090\x20days\x20likewise\x20has\x20no\x20second\x20knob.','evidence':[]},{'id':'E7','class':'exception','name':'Return\x20parcel\x20shipped\x20back\x20(record-only\x20waypoint,\x20TPL-10)','actor':'buyer','precondition':['E5','E6'],'onchain':'expressible','chainFootprint':{'node':'return_in_transit','forward':'ShipReturn','prev':'return_requested','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'return_shipped','commercialSemantics':'(wc)\x20Return\x20tracking\x20lives\x20in\x20the\x20evidence\x20repository;\x20the\x20edge\x20itself\x20asserts\x20no\x20proof.','evidence':[]},{'id':'E8','class':'exception','name':'Return\x20received\x20with\x20RMA\x20evidence\x20-\x20or\x20keeper\x20timeout\x20treats\x20silence\x20as\x20receipt','actor':'merchant','precondition':['E7'],'onchain':'expressible','chainFootprint':{'node':'returned','forward':'ReturnReceived','prev':'return_in_transit','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'return_received|return_response_timeout','commercialSemantics':'(wc)\x20v161\x20twin-entry:\x20the\x20club\x20signs\x20receipt\x20(RMA\x20row)\x20OR\x20return_response_days\x20(7)\x20lapses\x20and\x20the\x20keeper\x20signs\x20for\x20it\x20-\x20post-v161\x20silence\x20can\x20no\x20longer\x20hold\x20a\x20return\x20hostage.','evidence':[]},{'id':'E9','class':'remedy','name':'Refund\x20executed\x20on\x20the\x20Allocation\x20track\x20(the\x20node\x20is\x20the\x20machine-side\x20receipt)','actor':'keeper','precondition':['E8'],'onchain':'expressible','chainFootprint':{'node':'refunded','forward':'RefundExecuted','prev':'returned','identity':'permission_index','moneyEffect':'refund'},'guardKeyProbe':'refund_executed','commercialSemantics':'(wc)\x20FUND-EXIT-01:\x20replays\x20after\x20the\x20pool\x20is\x20drained\x20are\x20harmless\x20no-ops;\x20refunds\x20move\x20on\x20the\x20Allocation,\x20the\x20refunded\x20node\x20only\x20records\x20them.','evidence':[]},{'id':'E10','class':'exception','name':'Abandon\x20the\x20return\x20flow\x20via\x20the\x20direct-refund\x20exit\x20(mutually\x20exclusive\x20with\x20the\x20return\x20track)','actor':'buyer','precondition':['E5','E6'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelOrder','prev':'return_requested','identity':'order_holder','moneyEffect':'refund'},'guardKeyProbe':'cancel_from_return','commercialSemantics':'(wc)\x20R-DRAFT-VOID\x20single\x20hop\x20out\x20of\x20return_requested\x20-\x20the\x20two\x20refund\x20routes\x20never\x20both\x20run.','evidence':[]},{'id':'E11','class':'exception','name':'Carrier\x20lost\x20the\x20parcel\x20(record-only\x20waypoint;\x20buyer\x20confirms\x20RefundAfterLoss;\x20carrier\x20claim\x20off-chain)','actor':'fulfiller','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'item_lost','forward':'RecordLost','prev':'shipped','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'lost_evidence','commercialSemantics':'(wc)\x20R-M1-11\x20exemption:\x20loss\x20is\x20not\x20a\x20dispute\x20node\x20-\x20the\x20buyer\x20confirms\x20and\x20the\x20loss-refund\x20rail\x20pays\x20in\x20full;\x20the\x20carrier\x20claim\x20stays\x20off-chain.','evidence':[]},{'id':'E12','class':'exception','name':'Post-settlement\x20return,\x20no\x20time\x20limit\x20(the\x20club\x27s\x20signature\x20promise\x20-\x20NOT\x20chain-expressible)','actor':'buyer','precondition':['M15'],'onchain':'unresolvable','disclosureProbe':'no-time-limit\x20return','unresolvableRef':'S7','commercialSemantics':'(wc)\x20After\x20settlement\x20the\x20pool\x20is\x20empty\x20and\x20no\x20clawback/debit\x20primitive\x20exists\x20(the\x20retired\x20RequestReturnLate\x20edge\x20was\x20a\x20fake\x20refund\x20-\x20F-CSTC-02).\x20The\x20template\x20discloses\x20the\x20boundary:\x20no-time-limit\x20returns\x20are\x20an\x20OFF-CHAIN\x20courtesy\x20only.\x20Real\x20product\x20has\x20edges\x20too\x20(electronics\x2090d,\x20diamonds,\x20tobacco).','evidence':[{'file':'allocation.move','line':0x26d,'pattern':'ERECIPIENT_NOT_FOR_OBJECT'}]},{'id':'E13','class':'exception','name':'Mid-period\x20membership\x20cancel\x20=\x20full\x20refund\x20of\x20the\x20current\x20period\x20(always-refundable\x20posture)','actor':'buyer','precondition':['M2','M3','M5'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'(dm)\x20The\x20fee\x20releases\x20ONLY\x20at\x20period\x20end,\x20so\x20a\x20cancel\x20refunds\x20the\x20whole\x20period\x20-\x20the\x20merchant\x20extends\x20the\x20elapsed\x20days\x20free\x20(Costco\x20posture,\x20buyer-protective\x20default).\x20The\x20refund\x20rail\x20is\x20node-gated\x20over\x20{subscribed,\x20charging,\x20active,\x20closed_cancel}\x20with\x20the\x20255\x20period-N\x20once\x20slot;\x20dropping\x20the\x20rail\x20would\x20deadlock\x20every\x20mid-period\x20cancel\x20(OFN\x20#P-02).\x20The\x20cancel\x20forwards\x20are\x20generated\x20per\x20site,\x20so\x20the\x20anchor\x20is\x20the\x20terminal\x20node\x20itself.','evidence':[]},{'id':'E14','class':'exception','name':'Membership\x20lapse\x20never\x20blocks\x20an\x20in-flight\x20order\x20(gate\x20reads\x20at\x20buy\x20time\x20only)','actor':'buyer','precondition':['M4'],'onchain':'disclosure_only','disclosureProbe':'lapse','commercialSemantics':'(both)\x20An\x20order\x20placed\x20while\x20the\x20credential\x20was\x20live\x20keeps\x20its\x20fulfillment\x20and\x20refund\x20rights\x20after\x20lapse\x20-\x20disclosed\x20on\x20the\x20wc\x20buy-gate\x20note\x20and\x20mirrored\x20by\x20the\x20dm\x20lapse-aware\x20checklist;\x20who\x20eats\x20a\x20lapsed\x20free-delivery\x20promise\x20is\x20E16.','evidence':[]},{'id':'E16','class':'exception','name':'Free-delivery\x20benefit\x20lapse\x20across\x20the\x20two\x20Services\x20(no\x20cross-service\x20grouping)','actor':'buyer','precondition':['E14'],'onchain':'unresolvable','disclosureProbe':'off-chain','unresolvableRef':'S2','commercialSemantics':'(both)\x20The\x20membership\x20Service\x20and\x20the\x20delivery\x20Service\x20share\x20no\x20chain-side\x20grouping\x20(S2)\x20and\x20delivery\x20fees\x20have\x20no\x20pricing\x20oracle\x20(S7):\x20who\x20covers\x20a\x20promised-but-lapsed\x20free-delivery\x20gap\x20is\x20unsolvable\x20on-chain.\x20Best\x20effort\x20=\x20the\x20delivery\x20Service\x27s\x20buy\x20guard\x20reading\x20the\x20SAME\x20roster\x20(shared\x20repository),\x20differences\x20settled\x20off-chain.','evidence':[]},{'id':'E17','class':'exception','name':'Household\x20/\x20affiliate\x20card\x20overreach\x20(per-member\x20roster\x20rows\x20or\x20signer-bound\x20vouchers;\x20no\x20card-relation\x20primitive)','actor':'buyer','precondition':['M3','M7'],'onchain':'expressible_with_gap','chainFootprint':{'node':'active','identity':'order_holder','moneyEffect':'none'},'gapPredicate':{'probe':'member_roster|member-roster'},'commercialSemantics':'(both)\x20The\x20chain\x20has\x20no\x20principal-to-affiliate\x20authorization\x20or\x20revocation\x20primitive:\x20roster\x20rows\x20are\x20independent\x20(revocation\x20=\x20the\x20merchant\x20rewriting\x20the\x20row)\x20and\x20Plan\x20B\x20vouchers\x20carry\x20no\x20household\x20relation.\x20Plan\x20A:\x20the\x20merchant\x20writes\x20a\x20row\x20per\x20household\x20address\x20under\x20the\x20writer-bound\x20policy\x20(self-minting\x20impossible).\x20Plan\x20B:\x20the\x20signer\x20leg\x20locks\x20stolen\x20vouchers.\x20Overreach\x20at\x20buy\x20=\x20loud\x20rejection.','evidence':[]},{'id':'E18','class':'exception','name':'Auto-renewal\x20dispute\x20(structurally\x20eliminated\x20on-chain)','actor':'buyer','precondition':['M5'],'onchain':'not_applicable','commercialSemantics':'(dm)\x20MARK-NA:\x20renewal\x20is\x20always\x20an\x20explicit\x20member\x20signature,\x20keepers\x20hold\x20no\x20charge\x20authority,\x20no\x20mandate\x20primitive\x20exists\x20-\x20the\x20real\x20product\x27s\x20dark-pattern\x20dispute\x20surface\x20(China\x202021\x20rules,\x20California\x20ARL)\x20cannot\x20be\x20constructed.\x20Compliance\x20posture\x20lives\x20in\x20C8-C10\x20of\x20the\x20wiki.','evidence':[]},{'id':'E19','class':'exception','name':'Voucher\x20resale\x20/\x20account\x20sharing\x20(one\x20voucher\x20gates\x20many\x20buys,\x20by\x20design)','actor':'buyer','precondition':['M7'],'onchain':'disclosure_only','disclosureProbe':'ONE\x20voucher\x20gates\x20MANY\x20buys','commercialSemantics':'(wc)\x20The\x20signer\x20leg\x20blocks\x20third\x20parties\x20spending\x20a\x20stolen\x20voucher\x20but\x20not\x20the\x20owner\x20reselling\x20access;\x20the\x20disclosed\x20knobs\x20are\x20periodic\x20credential\x20rotation\x20or\x20the\x20255\x20single-admission\x20slot.\x20Real-world\x20grey\x20market:\x20Sam\x27s\x20sub-card\x20resale.','evidence':[]},{'id':'E20','class':'exception','name':'Membership\x20fee\x20refund\x20AFTER\x20period\x20end\x20(the\x20full\x20Costco\x20promise\x20-\x20NOT\x20chain-expressible)','actor':'buyer','precondition':['M4'],'onchain':'unresolvable','disclosureProbe':'MID-PERIOD\x20CANCEL|releases\x20only\x20at\x20completed','unresolvableRef':'S7','commercialSemantics':'(dm)\x20Post-release\x20the\x20escrow\x20is\x20drained\x20and\x20no\x20clawback\x20primitive\x20exists;\x20the\x20template\x20discloses\x20the\x20boundary\x20as\x20\x27full\x20refund\x20until\x20period\x20end\x27.\x20Real\x20Costco\x20refunds\x20even\x20a\x20used\x20year\x20-\x20that\x20can\x20only\x20be\x20an\x20off-chain\x20courtesy\x20(R3),\x20and\x20the\x20gap\x20MUST\x20be\x20disclosed\x20rather\x20than\x20faked\x20by\x20a\x20machine\x20rail.','evidence':[{'file':'allocation.move','line':0x26d,'pattern':'ERECIPIENT_NOT_FOR_OBJECT'}]},{'id':'E21','class':'exception','name':'Goods-defect\x20claim\x20filed\x20in\x20the\x2014-day\x20window\x20(record\x20waypoint\x20on\x20third-party\x20arbitration)','actor':'buyer','precondition':['M14'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','forward':'FileDispute','prev':'claim_window','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'claim_filed','commercialSemantics':'(wc)\x20Window-capped\x20(claim_window_days=14)\x20with\x20the\x20254\x20task-binding\x20leg;\x20the\x20ruling\x20is\x20NEVER\x20judged\x20inside\x20the\x20Machine\x20(R-M1-11).\x20Food-safety\x20statutory\x20claims\x20(C6)\x20ride\x20the\x20same\x20filing\x20but\x20face\x20the\x203x\x20cap\x20(INV-CST-2).','evidence':[{'file':'progress.move','line':0x48,'pattern':'TASK_BINDING_IDENTIFIER'},{'file':'progress.move','line':0x250,'pattern':'assert_task_is_order'}]},{'id':'E24','class':'exception','name':'Claim\x20withdrawn\x20(identity-only\x20guard\x20-\x20zero\x20arbitration\x20legs,\x20replayable;\x20mandatory\x20disclosure)','actor':'buyer','precondition':['E21'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'WithdrawClaim','prev':'claim_filed','identity':'order_holder','moneyEffect':'refund'},'guardKeyProbe':'withdraw_claim','commercialSemantics':'(wc)\x20MANDATORY\x20DISCLOSURE\x20(live-mainnet\x20CRITICAL\x20precedent):\x20the\x20withdraw_claim\x20guard\x20binds\x20only\x20the\x20order\x20holder\x20-\x20it\x20checks\x20neither\x20the\x20Arb\x20case\x20nor\x20any\x20ruling,\x20and\x20replays.\x20On-chain\x20\x27withdraw\x27\x20is\x20simply\x20the\x20holder\x20voiding\x20the\x20order\x20into\x20the\x20refund\x20terminal;\x20the\x20real\x20case\x20dismissal\x20lives\x20off-Machine.','evidence':[]},{'id':'E25','class':'exception','name':'Keeper\x20fails\x20to\x20open\x20the\x20claim\x20window\x20(serial\x20hold\x20is\x20the\x20designed\x20posture,\x20not\x20an\x20incident)','actor':'keeper','precondition':['M14'],'onchain':'disclosure_only','disclosureProbe':'unopened\x20window','commercialSemantics':'(wc)\x20miss_consequence\x20on\x20record:\x20an\x20unopened\x20window\x20parks\x20the\x20pool\x20at\x20delivered/reviewed\x20-\x20money\x20moves\x20nowhere.','evidence':[]},{'id':'E26','class':'exception','name':'Stranded-at-creation\x20sentinel\x20(empty\x20prev\x20-\x20club\x20advances\x20via\x20Enter\x20then\x20cancels)','actor':'merchant','precondition':['M8'],'onchain':'disclosure_only','disclosureProbe':'STRANDED-AT-CREATION','commercialSemantics':'(wc)\x20AZ3-T5\x20prescription\x20disclosed:\x20push\x20the\x20ghost\x20order\x20into\x20paid\x20with\x20the\x20Enter\x20edge,\x20then\x20refund\x20via\x20cancel_from_paid.','evidence':[]},{'id':'E27','class':'exception','name':'Bulk\x20delivery\x20missing\x20the\x20receipt\x20credential\x20(composite\x20ship\x20gate\x20rejects\x20when\x20enforcement\x20is\x20on)','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'shipped','forward':'Ship','prev':'picking','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'ship_enforced','commercialSemantics':'(wc)\x20required_info_enforcement=on:\x20the\x20Ship\x20edge\x20demands\x20tracking\x20row\x20AND\x20delivery\x20credential;\x20off\x20keeps\x20the\x20warehouse-pickup\x20pure-tracking\x20form.\x20One\x20forward,\x20two\x20guard\x20faces.','evidence':[]},{'id':'E28','class':'exception','name':'Partial\x20shipment\x20in\x20batches\x20(R2-07e\x20prescription\x20disclosed;\x20machine_shape\x20does\x20NOT\x20mount\x20it)','actor':'merchant','precondition':['M9'],'onchain':'disclosure_only','disclosureProbe':'PARTIAL\x20SHIPMENT','commercialSemantics':'(wc)\x20Common\x20for\x20bulk:\x20the\x20prescription\x20is\x20one\x20ShippedBatch\x20edge\x20per\x20parcel\x20with\x20independent\x20order-keyed\x20evidence\x20rows\x20and\x20settlement\x20only\x20after\x20the\x20last\x20batch\x20-\x20disclosed\x20in\x20the\x20corpus\x20but\x20absent\x20from\x20the\x20shape\x20(FIX-EDGE\x20finding,\x20report-only).','evidence':[]},{'id':'E15','class':'exception','name':'Renewal\x20failure\x20/\x20non-renewal:\x20the\x20member\x20rests\x20at\x20completed\x20(escrow\x20drained,\x20credential\x20lapses)','actor':'buyer','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'completed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'(dm)\x20No\x20stranded-fund\x20exit\x20needed\x20on\x20this\x20terminal\x20-\x20the\x20fee\x20already\x20released;\x20the\x20roster\x20expiry\x20lapses\x20so\x20gated\x20buys\x20start\x20failing\x20(Plan\x20A\x20lapse).\x20Reminders\x20are\x20off-chain\x20nudges\x20with\x20no\x20chain\x20anchor\x20and\x20keepers\x20hold\x20no\x20charge\x20authority.','evidence':[]},{'id':'E22','class':'remedy','name':'Claim\x20dismissed\x20-\x20resume\x20at\x20delivered\x20(four-leg\x20dismissed\x20guard,\x20venue-bound)','actor':'arbitrator','precondition':['E21'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'ResumeAfterDismissal','prev':'claim_filed','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'arb_dismissed_resume','commercialSemantics':'(wc)\x20arb.order\x20binding\x20+\x20zero\x20indemnity\x20+\x20concluded-dismissal\x20stamp\x20+\x20venue\x20leg;\x20the\x20find=last\x20row\x20re-anchors\x20review/settle/return\x20windows\x20and\x20the\x20buyer\x20may\x20re-open\x20a\x20fresh\x20claim\x20window.','evidence':[]},{'id':'E23','class':'remedy','name':'Ruling\x20won\x20-\x20re-route\x20into\x20the\x20full-refund\x20rail\x20(six-leg\x20won\x20guard;\x20zero-award\x20never\x20fires)','actor':'arbitrator','precondition':['E21'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'ArbRefund','prev':'claim_filed','identity':'permission_index','moneyEffect':'refund'},'guardKeyProbe':'arb_refund','commercialSemantics':'(wc)\x20Serial\x20window\x20guarantees\x20the\x20pool\x20is\x20intact\x20at\x20ruling\x20time.\x20Sister\x20edge\x20ArbRefundReturn\x20re-routes\x20mid-return\x20disputes\x20from\x20return_in_transit\x20with\x20the\x20same\x20guard\x20family\x20-\x20one\x20instance,\x20one\x20exit\x20edge\x20(M-T2).','evidence':[{'file':'arb.move','line':0x15,'pattern':'MAX_INDEMNITY_MULTIPLE'}]},{'id':'R1','class':'remedy','name':'Indemnity\x20from\x20the\x20compensation\x20fund,\x20hard-bound\x20to\x20the\x20order\x20owner\x20(cap\x203x;\x20per-period\x20disputes\x20split)','actor':'arbitrator','precondition':['E21'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','identity':'order_holder','moneyEffect':'compensate'},'commercialSemantics':'(both)\x20The\x20fund\x20pays\x20the\x20order\x20owner\x20directly\x20(never\x20a\x20third\x20party),\x20capped\x20at\x203x\x20the\x20escrow/order;\x20fund\x20>=\x203x\x20is\x20the\x20recommended\x20user\x20input\x20and\x20the\x20water\x20level\x20is\x20advisory\x20three-tier.\x20The\x20payout\x20rides\x20the\x20Arb\x20object,\x20hence\x20the\x20node\x20anchor\x20here\x20is\x20the\x20filing\x20waypoint.','evidence':[{'file':'service.move','line':0x24c,'pattern':'compensation_claim'},{'file':'service.move','line':0x265,'pattern':'order::owner(order)'}]},{'id':'R2','class':'remedy','name':'48h\x20arbitration\x20absence\x20auto-loss\x20(keeper\x20procedural\x20discipline)','actor':'keeper','precondition':['E21'],'onchain':'disclosure_only','disclosureProbe':'48h\x20absence','commercialSemantics':'(wc-declared;\x20dm\x20has\x20the\x2014-day\x20dispute\x20window\x20but\x20no\x2048h\x20duty\x20in\x20its\x20corpus\x20-\x20honest\x20per-template\x20gap)\x20A\x20party\x20silent\x20for\x2048h\x20in\x20an\x20open\x20case\x20is\x20recorded\x20in\x20breach\x20so\x20the\x20case\x20can\x20settle.','evidence':[]},{'id':'R3','class':'remedy','name':'Off-chain\x20courtesy\x20credit\x20=\x20a\x20new\x20Payment\x20the\x20club\x20issues\x20voluntarily','actor':'merchant','precondition':['E12','E20'],'onchain':'disclosure_only','disclosureProbe':'OFF-CHAIN\x20courtesy|out\x20of\x20band|always-refundable','commercialSemantics':'(both)\x20The\x20prescription\x20for\x20everything\x20the\x20rails\x20cannot\x20refund\x20(post-settlement\x20returns,\x20post-period\x20fee\x20refunds):\x20a\x20fresh\x20club-initiated\x20Payment\x20object\x20OUTSIDE\x20the\x20machine\x20-\x20never\x20promise\x20it\x20through\x20a\x20rail.\x20The\x20dm\x20posture\x20note\x20(always-refundable)\x20and\x20the\x20wc\x20courtesy\x20note\x20are\x20the\x20disclosed\x20anchors.','evidence':[{'file':'payment.move','line':0x42,'pattern':'struct\x20PaymentInfo'}]},{'id':'R4','class':'remedy','name':'SLA\x20late-delivery\x20penalty\x20payment\x20(emittable,\x20NOT\x20emitted\x20-\x20FIX-EDGE\x20finding)','actor':'merchant','precondition':['E21','M10'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'SettleLateAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'compensate'},'guardKeyProbe':'late_delivery_breach','commercialSemantics':'(wc,\x20v1.1.0)\x20MOUNTED\x20as\x20a\x20SIBLING\x20remedy\x20edge\x20(stage2\x20#26\x20W-1):\x20the\x20late\x20order\x20settles\x20via\x20SettleLateAfterWindow\x20only\x20after\x20the\x20merchant\x20PRE-PAYS\x20the\x20marked\x20penalty\x20Payment\x20(info.for=order,\x20remark\x20\x27late-delivery-v1\x27,\x20order-owner\x20payee,\x20>=\x20sla_penalty_amount,\x20255\x20history-count\x20once)\x20AND\x20the\x201280\x20dual\x20anchor\x20proves\x20transit\x20>=\x20sla_late_hours\x20—\x20compensation-first,\x20the\x20compliant\x20inverse\x20of\x20automatic\x20debit\x20(U-01).\x20The\x20plain\x20SettleAfterWindow\x20edge\x20keeps\x20settling\x20on-time\x20orders:\x20the\x20two\x20gates\x20are\x20opposite-polarity\x20over\x20one\x20transit\x20interval,\x20so\x20they\x20can\x20never\x20share\x20one\x20edge\x20(M-T2).\x20dm\x20has\x20no\x20transit\x20nodes\x20-\x20the\x20footprint\x20can\x20only\x20ever\x20match\x20the\x20warehouse\x20twin;\x20dm\x27s\x20corpus\x20(D3)\x20names\x20the\x20shape\x20gap.','evidence':[{'file':'payment.move','line':0x42,'pattern':'struct\x20PaymentInfo'}]},{'id':'P1','class':'post','name':'Repurchase\x20=\x20another\x20gated\x20buy\x20(member\x20LTV\x20logic;\x20cross-order\x20spend\x20aggregation\x20not\x20emitted)','actor':'buyer','precondition':['M15'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'escrow_in'},'gapPredicate':{'probe':'sum_where|aggregate[^\x22]{0,40}|cumulative'},'commercialSemantics':'(wc)\x20Every\x20repurchase\x20re-verifies\x20the\x20credential,\x20but\x20cumulative\x20per-member\x20spend\x20(the\x202%\x20cashback\x20base)\x20has\x20no\x20emitted\x20aggregation\x20-\x20the\x20kernel\x27s\x20sum_where\x20surface\x20exists,\x20no\x20rail\x20fires\x20it,\x20and\x20the\x20LTV\x20logic\x20stays\x20data-side\x20(Prime\x20members\x20spend\x20~2.4x\x20non-members\x20per\x20year).\x20The\x20gap\x20must\x20stay\x20named.','evidence':[]},{'id':'P2','class':'post','name':'Executive\x202%\x20cashback\x20rebate\x20(Reward\x20pool\x20+\x20aggregation\x20outline;\x20dynamic\x20formula\x20NOT\x20emitted)','actor':'buyer','precondition':['P1'],'onchain':'expressible_with_gap','gapPredicate':{'probe':'cashback|rebate|2%\x20'},'commercialSemantics':'(wc)\x20Spend-proportional\x20rebates\x20(Executive\x202%,\x20CA$1,250\x20cap;\x20Sam\x27s\x202%\x20monthly)\x20need\x20a\x20dynamic\x20ratio\x20formula\x20at\x20assembly\x20level\x20-\x20a\x20Reward\x20pool\x20plus\x20repository\x20aggregation\x20outlines\x20the\x20shape\x20but\x20no\x20rail\x20computes\x20it;\x20the\x20gap\x20must\x20stay\x20named.\x20The\x20ONLY\x20loyalty\x20reward\x20the\x20real\x20clubs\x20run\x20(explicitly\x20no\x20points/miles\x20ledger\x20-\x20the\x20wiki\x20S1\x20sweep);\x20dm\x27s\x20own\x20reward\x20rail\x20(M16)\x20is\x20the\x20review\x20bounty,\x20a\x20different\x20pool.','evidence':[]},{'id':'P3','class':'post','name':'Renewal\x20reminder\x20nudge\x20(off-chain,\x20no\x20chain\x20anchor;\x20a\x20service,\x20not\x20a\x20statutory\x20duty)','actor':'keeper','precondition':['M4'],'onchain':'disclosure_only','disclosureProbe':'renewal\x20reminder|off-chain\x20nudge','commercialSemantics':'(dm)\x20period\x20end\x20minus\x20renewal_reminder_days\x20(30),\x20off-chain\x20only.\x20Because\x20the\x20chain\x20has\x20no\x20auto-charge,\x20the\x20reminder\x20is\x20a\x20courtesy\x20-\x20the\x20statutory\x20significant-reminder\x20duties\x20(C8-C10)\x20bind\x20the\x20real\x20auto-renewal\x20products,\x20not\x20this\x20shape.','evidence':[]},{'id':'P4','class':'post','name':'Membership\x20tier\x20upgrade\x20(row\x20value\x20encodes\x20tier;\x20price\x20delta\x20=\x20new\x20Payment\x20+\x20row\x20rewrite)','actor':'buyer','precondition':['M4'],'onchain':'disclosure_only','disclosureProbe':'expiry','commercialSemantics':'(both)\x20Gold\x20Star\x20->\x20Executive\x20/\x20Sam\x27s\x20->\x20Excellence:\x20the\x20roster\x20row\x27s\x20U64\x20value\x20field\x20can\x20encode\x20tier\x20alongside\x20expiry\x20(value\x20=\x20expiry/tier\x20convention);\x20no\x20dedicated\x20upgrade\x20primitive\x20exists\x20-\x20it\x20is\x20a\x20new\x20Payment\x20plus\x20a\x20merchant\x20row\x20rewrite.\x20The\x20corpus\x27s\x20expiry-value\x20framing\x20is\x20the\x20anchor.','evidence':[]},{'id':'P5','class':'post','name':'Window\x20expiry\x20close\x20(keeper\x20closes\x20stale\x20dispute/return\x20windows\x20so\x20refund\x20rails\x20cannot\x20re-arm)','actor':'keeper','precondition':['M15'],'onchain':'disclosure_only','disclosureProbe':'dispute\x20window\x20expiry|return\x20window\x20expiry','commercialSemantics':'(wc)\x2090-day\x20dispute\x20window\x20and\x2030-day\x20return\x20window\x20expiry\x20are\x20declared\x20keeper\x20duties;\x20the\x20dispute\x20window\x20anchors\x20on\x20the\x20off-Machine\x20Arb\x20case.','evidence':[]}],'invariants':[{'id':'INV-CST-1','statement':'The\x20real\x20club\x27s\x20\x27cancel\x20anytime,\x20full\x20membership-fee\x20refund\x27\x20promise\x20is\x20chain-expressible\x20ONLY\x20until\x20period\x20end:\x20the\x20listing\x20must\x20say\x20the\x20on-chain\x20refund\x20right\x20ends\x20at\x20the\x20period-end\x20release\x20(ESCALATE\x20if\x20a\x20WIP\x20promises\x20more).','chainConflict':'Post-release\x20the\x20escrow\x20is\x20drained;\x20no\x20clawback/debit\x20primitive\x20exists,\x20and\x20no\x20fee_param/forward\x20pair\x20can\x20name\x20a\x20violation\x20-\x20a\x20violation\x20would\x20be\x20a\x20refund\x20rail\x20reaching\x20past\x20a\x20drained\x20escrow.\x20Anchored\x20on\x20the\x20reverse-allocation\x20prohibition.','evidence':[{'file':'allocation.move','line':0x26d,'pattern':'ERECIPIENT_NOT_FOR_OBJECT'}]},{'id':'INV-CST-2','statement':'China\x20food-safety\x20statutory\x20damages\x20(10x\x20price,\x20min\x20¥1,000)\x20collide\x20with\x20the\x203x\x20escrow/order\x20award\x20cap:\x20an\x20arbitrator\x20can\x20never\x20award\x20the\x20statutory\x20multiple\x20inside\x20a\x20capped\x20venue.','chainConflict':'Statute\x20vs\x20protocol\x20constant\x20-\x20no\x20fee_param/forward\x20predicate\x20can\x20express\x20a\x20statutory\x20multiplier.\x20Remedy:\x20thicken\x20the\x20compensation\x20fund\x20and\x20disclose,\x20or\x20escalate\x20the\x20case\x20off-venue.\x20Anchored\x20on\x20the\x20cap\x20constant\x20and\x20its\x20saturating\x20application.','evidence':[{'file':'arb.move','line':0x15,'pattern':'MAX_INDEMNITY_MULTIPLE'},{'file':'arb.move','line':0x21d,'pattern':'saturating_mul'}]},{'id':'INV-CST-3','statement':'Material\x20terms\x20(refund\x20boundaries,\x20window\x20days,\x20the\x20always-refundable\x20edge\x20of\x20the\x20promise)\x20must\x20be\x20machine-readable\x20template\x20disclosures,\x20never\x20listing\x20small\x20print:\x20on-chain\x20terms\x20are\x20Guard\x20literals\x20frozen\x20at\x20publish\x20and\x20publicly\x20auditable.','chainConflict':'Disclosure-quality\x20rule\x20with\x20no\x20fee_param/forward\x20form;\x20the\x20disclosure\x20coverage\x20numbers\x20above\x20are\x20its\x20mechanical\x20proxy.'},{'id':'INV-CST-4','statement':'NO\x20auto-charge\x20semantics\x20may\x20ever\x20be\x20emitted:\x20the\x20renewal\x20is\x20ALWAYS\x20the\x20member\x27s\x20own\x20signature\x20(signer\x20==\x20order\x20owner\x20on\x20the\x20renew\x20rail).\x20While\x20period_days\x20>\x200\x20is\x20configured,\x20the\x20explicit-signature\x20renew\x20forward\x20must\x20exist\x20-\x20a\x20period\x20clock\x20without\x20the\x20signature\x20rail\x20is\x20a\x20dead\x20or\x20mandated\x20loop.','violation':{'requiresFeeParamNonZero':'period_days','whileMissingForward':'renew'}},{'id':'INV-CST-5','statement':'The\x20membership\x20fee\x20is\x20periodic-service\x20consideration,\x20NOT\x20a\x20stored-value\x20card:\x20it\x20escrows\x20until\x20period\x20end\x20(mid-period\x20cancel\x20=\x20full\x20refund);\x20a\x20build\x20that\x20converts\x20it\x20into\x20spendable\x20stored\x20value\x20triggers\x20China\x27s\x20single-purpose\x20prepaid-card\x20limits\x20(¥5,000\x20registered\x20cap,\x20deposit-ratio\x20custody)\x20and\x20must\x20be\x20re-reviewed.','chainConflict':'Product-classification\x20rule\x20with\x20no\x20mechanical\x20predicate;\x20the\x20dm\x20refund\x20rail\x20coverage\x20(E13)\x20is\x20its\x20structural\x20proxy.'},{'id':'INV-CST-6','statement':'TPL-09\x20serial\x20window\x20protection\x20(standing\x20check):\x20while\x20claim_window_days\x20>\x200\x20is\x20configured,\x20the\x20window-departing\x20SettleAfterWindow\x20forward\x20must\x20exist\x20-\x20removing\x20it\x20orphans\x20the\x20serial\x20hold\x20and\x20lets\x20settlement\x20escape\x20the\x20window\x20ordering.','violation':{'requiresFeeParamNonZero':'claim_window_days','whileMissingForward':'SettleAfterWindow'}}]};
|
|
1
|
+
export const COSTCO_ORACLE={'productRef':'costco','products':['costco','sams-club','amazon-prime'],'oracleVersion':'1.1.0','steps':[{'id':'M1','class':'offchain','name':'Membership\x20value\x20discovery\x20(fee\x20vs\x20perk\x20value;\x20tier\x20math)','actor':'buyer','precondition':[],'onchain':'not_applicable','commercialSemantics':'Gold\x20Star\x20$65\x20/\x20Executive\x20$130\x20/\x20Sam\x27s\x20¥260/¥680\x20/\x20Prime\x20$139\x20benchmarks\x20live\x20in\x20the\x20wiki,\x20not\x20on-chain.\x20No\x20chain\x20object\x20hosts\x20a\x20value\x20calculator.','evidence':[]},{'id':'M17','class':'offchain','name':'In-store\x20gate\x20and\x20perks\x20(door\x20scan,\x20checkout\x20card\x20check,\x20gas/pharmacy/optometry,\x20early\x20hours)','actor':'buyer','precondition':['M3'],'onchain':'not_applicable','commercialSemantics':'The\x20physical\x20door\x20has\x20no\x20chain\x20counterpart;\x20the\x20on-chain\x20equivalent\x20is\x20M7\x20-\x20the\x20buy\x20gate\x20that\x20rejects\x20non-members\x20at\x20order\x20time.','evidence':[]},{'id':'M2','class':'main','name':'Join:\x20the\x20period\x20fee\x20is\x20escrowed\x20at\x20buy\x20(period\x201\x20never\x20enters\x20charging)','actor':'buyer','precondition':['M1'],'onchain':'expressible','chainFootprint':{'node':'subscribed','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'OFN\x20J5\x20idiom:\x20the\x20join\x20order\x20pools\x20the\x20period\x20fee\x20atomically\x20at\x20buy\x20and\x20enters\x20active\x20directly;\x20the\x20charging\x20node\x20is\x20renewal-loop\x20only.\x20(dm)\x20The\x20entry\x20edge\x20is\x20the\x20template\x27s\x20mandatory\x20entry\x20pair;\x20its\x20forward\x20name\x20is\x20generated\x20at\x20build\x20time,\x20so\x20the\x20anchor\x20here\x20is\x20the\x20subscribed\x20node\x20itself.','evidence':[]},{'id':'M3','class':'main','name':'Roster\x20credential\x20written\x20at\x20the\x20active\x20entry\x20(signer-keyed\x20row,\x20value\x20=\x20period\x20expiry)','actor':'keeper','precondition':['M2'],'onchain':'expressible','chainFootprint':{'node':'active','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'(dm)\x20The\x20fulfillment\x20IS\x20the\x20credential:\x20the\x20member_roster\x20row\x20(id_from\x20signer,\x20U64\x20expiry\x20epoch-ms)\x20is\x20written\x20under\x20a\x20writer-bound\x20repository\x20guard\x20BEFORE\x20the\x20forward\x20is\x20pressed\x20(AR-1\x20ordering).\x20The\x20gated\x20retail\x20Service\x27s\x20buy\x20guard\x20reads\x20exactly\x20this\x20row\x20via\x20query\x201167\x20plus\x20a\x20lapse\x20leg.\x20The\x20write\x20guard\x20is\x20repository-hosted,\x20hence\x20no\x20edge\x20guard-key\x20probe.','evidence':[{'file':'repository.move','line':0x4a,'pattern':'ID_FROM_SIGNER'}]},{'id':'M4','class':'main','name':'Period\x20end:\x20keeper\x20clock\x20advance\x20releases\x20the\x20fee\x20to\x20the\x20merchant','actor':'keeper','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'end_period','prev':'active','identity':'permission_index','moneyEffect':'release'},'guardKeyProbe':'period_end','commercialSemantics':'(dm)\x20Clock\x20>=\x20active\x20entry\x20+\x20period_days\x20(365)\x20advances\x20completed;\x20Rate\x2010000\x20to\x20the\x20merchant\x20with\x20a\x20Rate-0\x20order\x20anchor\x20inside\x20the\x20same\x20allocator.\x20The\x20roster\x20expiry\x20lapses\x20on\x20the\x20same\x20math,\x20so\x20credential\x20and\x20release\x20never\x20disagree.','evidence':[]},{'id':'M5','class':'main','name':'Renewal\x20=\x20the\x20member\x27s\x20own\x20explicit\x20signature\x20(no\x20auto-charge\x20exists)','actor':'buyer','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'charging','forward':'renew','prev':'completed','identity':'order_holder','moneyEffect':'escrow_in'},'guardKeyProbe':'renew_charge','commercialSemantics':'(dm)\x20Structurally\x20anti-dark-pattern:\x20every\x20period\x20boundary\x20is\x20crossed\x20by\x20the\x20member\x27s\x20signature\x20(signer\x20==\x20order\x20owner,\x20order_renew\x20single\x20PTB);\x20keepers\x20have\x20NO\x20charge\x20authority\x20and\x20no\x20mandate\x20primitive\x20exists\x20-\x20the\x20real\x20product\x27s\x20auto-renewal\x20dispute\x20surface\x20(C8-C10)\x20is\x20structurally\x20absent\x20(E18).','evidence':[]},{'id':'M6','class':'main','name':'Browse\x20the\x20bulk\x20catalog\x20(limited-SKU\x20model;\x20member\x20price\x20=\x20gated\x20Service\x20sale\x20price)','actor':'buyer','precondition':['M3'],'onchain':'not_applicable','commercialSemantics':'(wc)\x20Catalog\x20browsing\x20has\x20no\x20chain\x20footprint;\x20the\x20member-exclusive\x20price\x20is\x20simply\x20the\x20sale\x20price\x20of\x20the\x20gated\x20retail\x20Service.','evidence':[]},{'id':'M7','class':'main','name':'Buy\x20gate\x20verifies\x20the\x20prepaid\x20membership\x20voucher\x20(Plan\x20B:\x20payment.signer==Signer\x20legs)','actor':'buyer','precondition':['M6'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'(wc)\x20The\x20buy\x20guard\x20runs\x20BEFORE\x20the\x20order\x20exists:\x20the\x20voucher\x20Payment\x20must\x20be\x20signer-own,\x20club-recipient\x20and\x20>=\x20membership_price;\x20slot-0\x20is\x20banned\x20so\x20the\x20gate\x20order\x20rides\x20identifier\x201.\x20One\x20voucher\x20gates\x20many\x20buys\x20(E19)\x20and\x20is\x20NOT\x20time-bounded\x20(E2).\x20The\x20gate\x20is\x20service-hosted,\x20hence\x20no\x20edge\x20guard-key\x20probe;\x20the\x20slot\x20discipline\x20is\x20the\x20load-bearing\x20chain\x20fact.','evidence':[{'file':'service.move','line':0x464,'pattern':'E_BUY_GUARD_ORDER_SLOT'}]},{'id':'M8','class':'main','name':'Bulk\x20goods\x20order\x20escrows\x20the\x20full\x20price\x20(membership\x20money\x20and\x20goods\x20money\x20are\x20separate)','actor':'buyer','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'(wc)\x20MEMBERSHIP\x20MONEY\x20SEPARATION:\x20the\x20voucher\x20(Plan\x20B)\x20or\x20the\x20roster\x20credential\x20(Plan\x20A)\x20is\x20the\x20access\x20proof;\x20the\x20goods\x20escrow\x20is\x20a\x20second,\x20independent\x20pool\x20that\x20returns\x20only\x20through\x20the\x20goods\x20rails.\x20The\x20buy-side\x20service\x20guard\x20is\x20edge-invisible,\x20so\x20no\x20guard-key\x20probe\x20here\x20either.','evidence':[]},{'id':'M9','class':'main','name':'Club\x20staff\x20picking\x20(Permission\x20staff\x20slot\x201001)','actor':'merchant','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'picking','forward':'PickOrder','prev':'paid','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'pick','commercialSemantics':'(wc)\x20The\x20warehouse-club\x20delta\x20vs\x20the\x20marketplace\x20archetype:\x20blue-vest\x20staff\x20pull\x20and\x20pack\x20in\x20a\x20dedicated\x20stage\x20(Sam\x27s\x20~500\x20cloud\x20warehouses);\x20scheduling\x20stays\x20off-chain\x20(S7\x20-\x20no\x20dispatch/auto-deduction\x20primitive,\x20EU\x202024/2831-friendly).','evidence':[]},{'id':'M10','class':'main','name':'Ship\x20with\x20tracking\x20evidence\x20(conditional\x20required-info\x20pair,\x20TPL-11)','actor':'merchant','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'shipped','forward':'Ship','prev':'picking','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'ship','commercialSemantics':'(wc)\x20Two\x20sibling\x20Ship\x20edges:\x20required_info_enforcement\x20off\x20=\x20pure\x20tracking\x20row,\x20on\x20=\x20tracking\x20+\x20delivery-credential\x20composite\x20(bulk\x20home\x20delivery).\x20Both\x20carry\x20the\x20same\x20forward,\x20so\x20the\x20probe\x20reads\x20the\x20pair.','evidence':[]},{'id':'M11','class':'main','name':'Buyer-first\x20delivery\x20confirmation\x20(staff\x20can\x20never\x20self-confirm)','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'ConfirmDelivery','prev':'shipped','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'deliver_confirm','commercialSemantics':'(wc)\x20Release\x20authority\x20is\x20a\x20rail,\x20not\x20a\x20name:\x20only\x20the\x20order\x20holder\x20confirms\x20receipt.','evidence':[]},{'id':'M12','class':'exception','name':'Buyer\x20silence\x20auto-confirm\x20after\x207\x20days\x20(keeper\x20clock\x20duty)','actor':'keeper','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'AutoConfirmDelivery','prev':'shipped','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'deliver_confirm_timeout','commercialSemantics':'(wc)\x20auto_confirm_days=7;\x20windows\x20re-anchor\x20from\x20the\x20delivery\x20entry\x20(find=last)\x20after\x20any\x20waiver.','evidence':[]},{'id':'M13','class':'main','name':'Buyer\x20review\x20window,\x2014\x20days,\x20reputation-only\x20(review\x20pays\x20no\x20bounty)','actor':'buyer','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'reviewed','forward':'Review','prev':'delivered','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'review_window','commercialSemantics':'(wc)\x20review_mode\x20\x27review\x27\x20(not\x20review_reward):\x20U256\x20rating\x20+\x20free-text\x20comment\x20rows;\x20the\x20sibling\x20dm\x20template\x20is\x20where\x20the\x20reward\x20rail\x20lives\x20(M16).','evidence':[]},{'id':'M14','class':'main','name':'Serial\x20claim\x20window\x20opened\x20by\x20the\x20keeper\x20(TPL-09;\x20unopened\x20=\x20pool\x20parked\x20by\x20design)','actor':'keeper','precondition':['M11','M13'],'onchain':'expressible','chainFootprint':{'node':'claim_window','forward':'OpenClaimWindow','prev':'delivered','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'(wc)\x20The\x20keeper\x20OPENS\x20the\x20window\x20after\x20delivery/review;\x20the\x20serial\x20ordering\x20itself\x20is\x20the\x20holdback\x20(FACT-ALLOC-03\x20-\x20the\x20chain\x20has\x20no\x20holdback\x20primitive).\x20An\x20unopened\x20window\x20parks\x20the\x20pool\x20at\x20delivered/reviewed\x20(E25).','evidence':[]},{'id':'M15','class':'main','name':'Settlement\x20after\x20the\x20window:\x20Rate\x2010000\x20to\x20the\x20club\x20Entity,\x200\x20commission','actor':'merchant','precondition':['M14'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'SettleAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'release'},'guardKeyProbe':'settle_window_gate','commercialSemantics':'(wc)\x20Clock\x20>=\x20claim_window\x20entry\x20+\x20settlement_delay_days\x20(45),\x20node-gated\x20on\x20completed,\x20254\x20once.\x20The\x20catalog\x20load\x20gate\x20pins\x20settlement_delay_days\x20>=\x20return_window_days\x20(F-CSTC-02),\x20so\x20the\x20return\x20window\x20always\x20closes\x20before\x20money\x20leaves.','evidence':[]},{'id':'M16','class':'post','name':'Post-period\x20member\x20review\x20with\x20self-claimed\x20bounty\x20(0.006\x20WOW/claim,\x200.1\x20pool)','actor':'buyer','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'reviewed','forward':'SubmitReview','prev':'completed','identity':'order_holder','moneyEffect':'reward'},'guardKeyProbe':'review_submit','commercialSemantics':'(dm)\x20review_reward:\x20the\x20reviewed\x20side-stop\x20is\x20money-free\x20by\x20topology\x20(the\x20fee\x20already\x20released\x20at\x20period\x20end)\x20and\x20renewal-unaffected;\x20the\x20claim\x20guard\x20pays\x20ONLY\x20the\x20signer\x20(P6\x20-\x20the\x20sole\x20permissionless\x20third-party\x20payout\x20channel).\x20The\x20reviewer\x20returns\x20to\x20completed\x20afterwards\x20(R-DEAD-END).','evidence':[{'file':'reward.move','line':0x11b,'pattern':'E_CLAIM_RECIPIENT_NOT_SIGNER'}]},{'id':'E1','class':'exception','name':'Non-member\x20buy\x20rejected\x20at\x20the\x20gate\x20(fail-closed,\x20no\x20quieter\x20downgrade)','actor':'buyer','precondition':['M6'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'(wc)\x20Missing/expired-signer/underfunded\x20voucher\x20legs\x20reject\x20the\x20build\x20outright\x20-\x20the\x20gated-side\x20checklist\x20demands\x20the\x20loud\x20denial.\x20Real-world\x20parallels:\x20door\x20refusal,\x20Instacart\x20markup\x20for\x20non-members.','evidence':[]},{'id':'E2','class':'exception','name':'Membership\x20expired\x20at\x20buy\x20time\x20(Plan\x20A\x20lapse\x20leg\x20rejects;\x20Plan\x20B\x20voucher\x20is\x20NOT\x20time-bounded)','actor':'buyer','precondition':['M4'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'none'},'gapPredicate':{'probe':'NOT\x20TIME-BOUNDED|lapse'},'commercialSemantics':'(both)\x20Plan\x20A\x20expresses\x20lapse\x20(Clock\x20<=\x20roster\x20expiry\x20row);\x20Plan\x20B\x20cannot\x20-\x20the\x20buy\x20gate\x20reads\x20at\x20order\x20time\x20only\x20and\x20never\x20against\x20a\x20clock,\x20so\x20an\x20expired\x20member\x20keeps\x20buying\x20until\x20the\x20credential\x20is\x20swapped.\x20The\x20gap\x20must\x20stay\x20named;\x20the\x20hybrid\x20(B\x20for\x20access\x20+\x20A\x20roster\x20lapse\x20leg)\x20is\x20the\x20prescribed\x20fix.\x20Disclosed\x20in\x20the\x20wc\x20buy-guard\x20note\x20and\x20dm\x20roster\x20hybrid\x20note.','evidence':[]},{'id':'E3','class':'exception','name':'Cancel\x20before\x20picking\x20(full\x20goods\x20refund;\x20the\x20membership\x20fee\x20is\x20not\x20returned\x20with\x20it)','actor':'buyer','precondition':['M8'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelBeforePick','prev':'paid','identity':'order_holder','moneyEffect':'refund'},'guardKeyProbe':'cancel_from_paid','commercialSemantics':'(wc)\x20R-DRAFT-VOID\x20single\x20hop\x20from\x20paid;\x20the\x20two\x20money\x20pools\x20never\x20cross\x20(M8).','evidence':[]},{'id':'E4','class':'exception','name':'Cancel\x20while\x20picking\x20(warehouse-stage\x20cancel\x20rail)','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelWhilePicking','prev':'picking','identity':'order_holder','moneyEffect':'refund'},'guardKeyProbe':'cancel_from_picking','commercialSemantics':'(wc)\x20Dedicated\x20rail\x20from\x20the\x20picking\x20stage\x20-\x20the\x20marketplace\x20archetype\x20lacks\x20this\x20node\x20entirely.','evidence':[]},{'id':'E5','class':'exception','name':'Return\x20requested\x20while\x20in\x20transit\x20(identity-only\x20rail,\x20no\x20time\x20window\x20BY\x20DESIGN)','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'return_requested','forward':'RequestReturnBeforeDelivery','prev':'shipped','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'return_request_pre_delivery','commercialSemantics':'(wc)\x20F-TPL-01:\x20identity-only\x20on\x20purpose\x20-\x20an\x20in-transit\x20order\x20has\x20no\x20delivered\x20history\x20row\x20to\x20anchor\x20a\x20window\x20against.','evidence':[]},{'id':'E6','class':'exception','name':'Return\x20requested\x20in\x20the\x2030-day\x20post-delivery\x20window','actor':'buyer','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'return_requested','forward':'RequestReturn','prev':'delivered','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'return_window','commercialSemantics':'(wc)\x20return_window_days=30\x20vs\x20the\x20real\x20club\x27s\x20no-time-limit\x20satisfaction\x20promise\x20-\x20the\x20boundary\x20is\x20E12;\x20electronics\x2090\x20days\x20likewise\x20has\x20no\x20second\x20knob.','evidence':[]},{'id':'E7','class':'exception','name':'Return\x20parcel\x20shipped\x20back\x20(record-only\x20waypoint,\x20TPL-10)','actor':'buyer','precondition':['E5','E6'],'onchain':'expressible','chainFootprint':{'node':'return_in_transit','forward':'ShipReturn','prev':'return_requested','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'return_shipped','commercialSemantics':'(wc)\x20Return\x20tracking\x20lives\x20in\x20the\x20evidence\x20repository;\x20the\x20edge\x20itself\x20asserts\x20no\x20proof.','evidence':[]},{'id':'E8','class':'exception','name':'Return\x20received\x20with\x20RMA\x20evidence\x20-\x20or\x20keeper\x20timeout\x20treats\x20silence\x20as\x20receipt','actor':'merchant','precondition':['E7'],'onchain':'expressible','chainFootprint':{'node':'returned','forward':'ReturnReceived','prev':'return_in_transit','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'return_received|return_response_timeout','commercialSemantics':'(wc)\x20v161\x20twin-entry:\x20the\x20club\x20signs\x20receipt\x20(RMA\x20row)\x20OR\x20return_response_days\x20(7)\x20lapses\x20and\x20the\x20keeper\x20signs\x20for\x20it\x20-\x20post-v161\x20silence\x20can\x20no\x20longer\x20hold\x20a\x20return\x20hostage.','evidence':[]},{'id':'E9','class':'remedy','name':'Refund\x20executed\x20on\x20the\x20Allocation\x20track\x20(the\x20node\x20is\x20the\x20machine-side\x20receipt)','actor':'keeper','precondition':['E8'],'onchain':'expressible','chainFootprint':{'node':'refunded','forward':'RefundExecuted','prev':'returned','identity':'permission_index','moneyEffect':'refund'},'guardKeyProbe':'refund_executed','commercialSemantics':'(wc)\x20FUND-EXIT-01:\x20replays\x20after\x20the\x20pool\x20is\x20drained\x20are\x20harmless\x20no-ops;\x20refunds\x20move\x20on\x20the\x20Allocation,\x20the\x20refunded\x20node\x20only\x20records\x20them.','evidence':[]},{'id':'E10','class':'exception','name':'Abandon\x20the\x20return\x20flow\x20via\x20the\x20direct-refund\x20exit\x20(mutually\x20exclusive\x20with\x20the\x20return\x20track)','actor':'buyer','precondition':['E5','E6'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelOrder','prev':'return_requested','identity':'order_holder','moneyEffect':'refund'},'guardKeyProbe':'cancel_from_return','commercialSemantics':'(wc)\x20R-DRAFT-VOID\x20single\x20hop\x20out\x20of\x20return_requested\x20-\x20the\x20two\x20refund\x20routes\x20never\x20both\x20run.','evidence':[]},{'id':'E11','class':'exception','name':'Carrier\x20lost\x20the\x20parcel\x20(record-only\x20waypoint;\x20buyer\x20confirms\x20RefundAfterLoss;\x20carrier\x20claim\x20off-chain)','actor':'fulfiller','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'item_lost','forward':'RecordLost','prev':'shipped','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'lost_evidence','commercialSemantics':'(wc)\x20R-M1-11\x20exemption:\x20loss\x20is\x20not\x20a\x20dispute\x20node\x20-\x20the\x20buyer\x20confirms\x20and\x20the\x20loss-refund\x20rail\x20pays\x20in\x20full;\x20the\x20carrier\x20claim\x20stays\x20off-chain.','evidence':[]},{'id':'E12','class':'exception','name':'Post-settlement\x20return,\x20no\x20time\x20limit\x20(the\x20club\x27s\x20signature\x20promise\x20-\x20NOT\x20chain-expressible)','actor':'buyer','precondition':['M15'],'onchain':'unresolvable','disclosureProbe':'no-time-limit\x20return','unresolvableRef':'S7','commercialSemantics':'(wc)\x20After\x20settlement\x20the\x20pool\x20is\x20empty\x20and\x20no\x20clawback/debit\x20primitive\x20exists\x20(the\x20retired\x20RequestReturnLate\x20edge\x20was\x20a\x20fake\x20refund\x20-\x20F-CSTC-02).\x20The\x20template\x20discloses\x20the\x20boundary:\x20no-time-limit\x20returns\x20are\x20an\x20OFF-CHAIN\x20courtesy\x20only.\x20Real\x20product\x20has\x20edges\x20too\x20(electronics\x2090d,\x20diamonds,\x20tobacco).','evidence':[{'file':'allocation.move','line':0x26d,'pattern':'ERECIPIENT_NOT_FOR_OBJECT'}]},{'id':'E13','class':'exception','name':'Mid-period\x20membership\x20cancel\x20=\x20full\x20refund\x20of\x20the\x20current\x20period\x20(always-refundable\x20posture)','actor':'buyer','precondition':['M2','M3','M5'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'(dm)\x20The\x20fee\x20releases\x20ONLY\x20at\x20period\x20end,\x20so\x20a\x20cancel\x20refunds\x20the\x20whole\x20period\x20-\x20the\x20merchant\x20extends\x20the\x20elapsed\x20days\x20free\x20(Costco\x20posture,\x20buyer-protective\x20default).\x20The\x20refund\x20rail\x20is\x20node-gated\x20over\x20{subscribed,\x20charging,\x20active,\x20closed_cancel}\x20with\x20the\x20255\x20period-N\x20once\x20slot;\x20dropping\x20the\x20rail\x20would\x20deadlock\x20every\x20mid-period\x20cancel\x20(OFN\x20#P-02).\x20The\x20cancel\x20forwards\x20are\x20generated\x20per\x20site,\x20so\x20the\x20anchor\x20is\x20the\x20terminal\x20node\x20itself.','evidence':[]},{'id':'E14','class':'exception','name':'Membership\x20lapse\x20never\x20blocks\x20an\x20in-flight\x20order\x20(gate\x20reads\x20at\x20buy\x20time\x20only)','actor':'buyer','precondition':['M4'],'onchain':'disclosure_only','disclosureProbe':'lapse','commercialSemantics':'(both)\x20An\x20order\x20placed\x20while\x20the\x20credential\x20was\x20live\x20keeps\x20its\x20fulfillment\x20and\x20refund\x20rights\x20after\x20lapse\x20-\x20disclosed\x20on\x20the\x20wc\x20buy-gate\x20note\x20and\x20mirrored\x20by\x20the\x20dm\x20lapse-aware\x20checklist;\x20who\x20eats\x20a\x20lapsed\x20free-delivery\x20promise\x20is\x20E16.','evidence':[]},{'id':'E16','class':'exception','name':'Free-delivery\x20benefit\x20lapse\x20across\x20the\x20two\x20Services\x20(no\x20cross-service\x20grouping)','actor':'buyer','precondition':['E14'],'onchain':'unresolvable','disclosureProbe':'off-chain','unresolvableRef':'S2','commercialSemantics':'(both)\x20The\x20membership\x20Service\x20and\x20the\x20delivery\x20Service\x20share\x20no\x20chain-side\x20grouping\x20(S2)\x20and\x20delivery\x20fees\x20have\x20no\x20pricing\x20oracle\x20(S7):\x20who\x20covers\x20a\x20promised-but-lapsed\x20free-delivery\x20gap\x20is\x20unsolvable\x20on-chain.\x20Best\x20effort\x20=\x20the\x20delivery\x20Service\x27s\x20buy\x20guard\x20reading\x20the\x20SAME\x20roster\x20(shared\x20repository),\x20differences\x20settled\x20off-chain.','evidence':[]},{'id':'E17','class':'exception','name':'Household\x20/\x20affiliate\x20card\x20overreach\x20(per-member\x20roster\x20rows\x20or\x20signer-bound\x20vouchers;\x20no\x20card-relation\x20primitive)','actor':'buyer','precondition':['M3','M7'],'onchain':'expressible_with_gap','chainFootprint':{'node':'active','identity':'order_holder','moneyEffect':'none'},'gapPredicate':{'probe':'member_roster|member-roster'},'commercialSemantics':'(both)\x20The\x20chain\x20has\x20no\x20principal-to-affiliate\x20authorization\x20or\x20revocation\x20primitive:\x20roster\x20rows\x20are\x20independent\x20(revocation\x20=\x20the\x20merchant\x20rewriting\x20the\x20row)\x20and\x20Plan\x20B\x20vouchers\x20carry\x20no\x20household\x20relation.\x20Plan\x20A:\x20the\x20merchant\x20writes\x20a\x20row\x20per\x20household\x20address\x20under\x20the\x20writer-bound\x20policy\x20(self-minting\x20impossible).\x20Plan\x20B:\x20the\x20signer\x20leg\x20locks\x20stolen\x20vouchers.\x20Overreach\x20at\x20buy\x20=\x20loud\x20rejection.','evidence':[]},{'id':'E18','class':'exception','name':'Auto-renewal\x20dispute\x20(structurally\x20eliminated\x20on-chain)','actor':'buyer','precondition':['M5'],'onchain':'not_applicable','commercialSemantics':'(dm)\x20MARK-NA:\x20renewal\x20is\x20always\x20an\x20explicit\x20member\x20signature,\x20keepers\x20hold\x20no\x20charge\x20authority,\x20no\x20mandate\x20primitive\x20exists\x20-\x20the\x20real\x20product\x27s\x20dark-pattern\x20dispute\x20surface\x20(China\x202021\x20rules,\x20California\x20ARL)\x20cannot\x20be\x20constructed.\x20Compliance\x20posture\x20lives\x20in\x20C8-C10\x20of\x20the\x20wiki.','evidence':[]},{'id':'E19','class':'exception','name':'Voucher\x20resale\x20/\x20account\x20sharing\x20(one\x20voucher\x20gates\x20many\x20buys,\x20by\x20design)','actor':'buyer','precondition':['M7'],'onchain':'disclosure_only','disclosureProbe':'ONE\x20voucher\x20gates\x20MANY\x20buys','commercialSemantics':'(wc)\x20The\x20signer\x20leg\x20blocks\x20third\x20parties\x20spending\x20a\x20stolen\x20voucher\x20but\x20not\x20the\x20owner\x20reselling\x20access;\x20the\x20disclosed\x20knobs\x20are\x20periodic\x20credential\x20rotation\x20or\x20the\x20255\x20single-admission\x20slot.\x20Real-world\x20grey\x20market:\x20Sam\x27s\x20sub-card\x20resale.','evidence':[]},{'id':'E20','class':'exception','name':'Membership\x20fee\x20refund\x20AFTER\x20period\x20end\x20(the\x20full\x20Costco\x20promise\x20-\x20NOT\x20chain-expressible)','actor':'buyer','precondition':['M4'],'onchain':'unresolvable','disclosureProbe':'MID-PERIOD\x20CANCEL|releases\x20only\x20at\x20completed','unresolvableRef':'S7','commercialSemantics':'(dm)\x20Post-release\x20the\x20escrow\x20is\x20drained\x20and\x20no\x20clawback\x20primitive\x20exists;\x20the\x20template\x20discloses\x20the\x20boundary\x20as\x20\x27full\x20refund\x20until\x20period\x20end\x27.\x20Real\x20Costco\x20refunds\x20even\x20a\x20used\x20year\x20-\x20that\x20can\x20only\x20be\x20an\x20off-chain\x20courtesy\x20(R3),\x20and\x20the\x20gap\x20MUST\x20be\x20disclosed\x20rather\x20than\x20faked\x20by\x20a\x20machine\x20rail.','evidence':[{'file':'allocation.move','line':0x26d,'pattern':'ERECIPIENT_NOT_FOR_OBJECT'}]},{'id':'E21','class':'exception','name':'Goods-defect\x20claim\x20filed\x20in\x20the\x2014-day\x20window\x20(record\x20waypoint\x20on\x20third-party\x20arbitration)','actor':'buyer','precondition':['M14'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','forward':'FileDispute','prev':'claim_window','identity':'order_holder','moneyEffect':'none'},'guardKeyProbe':'claim_filed','commercialSemantics':'(wc)\x20Window-capped\x20(claim_window_days=14)\x20with\x20the\x20254\x20task-binding\x20leg;\x20the\x20ruling\x20is\x20NEVER\x20judged\x20inside\x20the\x20Machine\x20(R-M1-11).\x20Food-safety\x20statutory\x20claims\x20(C6)\x20ride\x20the\x20same\x20filing\x20but\x20face\x20the\x203x\x20cap\x20(INV-CST-2).','evidence':[{'file':'progress.move','line':0x48,'pattern':'TASK_BINDING_IDENTIFIER'},{'file':'progress.move','line':0x250,'pattern':'assert_task_is_order'}]},{'id':'E24','class':'exception','name':'Claim\x20withdrawn\x20(identity-only\x20guard\x20-\x20zero\x20arbitration\x20legs,\x20replayable;\x20mandatory\x20disclosure)\x20(BANNED\x20-\x20D2\x20no-withdraw\x20doctrine:\x20a\x20filed\x20claim\x20reaches\x20a\x20RULING\x20instead)','actor':'buyer','precondition':['E21'],'onchain':'not_applicable','chainFootprint':{'node':'closed_cancel','prev':'claim_filed','identity':'order_holder','moneyEffect':'refund'},'guardKeyProbe':'withdraw_claim','commercialSemantics':'(wc)\x20MANDATORY\x20DISCLOSURE\x20(live-mainnet\x20CRITICAL\x20precedent):\x20the\x20withdraw_claim\x20guard\x20binds\x20only\x20the\x20order\x20holder\x20-\x20it\x20checks\x20neither\x20the\x20Arb\x20case\x20nor\x20any\x20ruling,\x20and\x20replays.\x20On-chain\x20\x27withdraw\x27\x20is\x20simply\x20the\x20holder\x20voiding\x20the\x20order\x20into\x20the\x20refund\x20terminal;\x20the\x20real\x20case\x20dismissal\x20lives\x20off-Machine.','evidence':[]},{'id':'E25','class':'exception','name':'Keeper\x20fails\x20to\x20open\x20the\x20claim\x20window\x20(serial\x20hold\x20is\x20the\x20designed\x20posture,\x20not\x20an\x20incident)','actor':'keeper','precondition':['M14'],'onchain':'disclosure_only','disclosureProbe':'unopened\x20window','commercialSemantics':'(wc)\x20miss_consequence\x20on\x20record:\x20an\x20unopened\x20window\x20parks\x20the\x20pool\x20at\x20delivered/reviewed\x20-\x20money\x20moves\x20nowhere.','evidence':[]},{'id':'E26','class':'exception','name':'Stranded-at-creation\x20sentinel\x20(empty\x20prev\x20-\x20club\x20advances\x20via\x20Enter\x20then\x20cancels)','actor':'merchant','precondition':['M8'],'onchain':'disclosure_only','disclosureProbe':'STRANDED-AT-CREATION','commercialSemantics':'(wc)\x20AZ3-T5\x20prescription\x20disclosed:\x20push\x20the\x20ghost\x20order\x20into\x20paid\x20with\x20the\x20Enter\x20edge,\x20then\x20refund\x20via\x20cancel_from_paid.','evidence':[]},{'id':'E27','class':'exception','name':'Bulk\x20delivery\x20missing\x20the\x20receipt\x20credential\x20(composite\x20ship\x20gate\x20rejects\x20when\x20enforcement\x20is\x20on)','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'shipped','forward':'Ship','prev':'picking','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'ship_enforced','commercialSemantics':'(wc)\x20required_info_enforcement=on:\x20the\x20Ship\x20edge\x20demands\x20tracking\x20row\x20AND\x20delivery\x20credential;\x20off\x20keeps\x20the\x20warehouse-pickup\x20pure-tracking\x20form.\x20One\x20forward,\x20two\x20guard\x20faces.','evidence':[]},{'id':'E28','class':'exception','name':'Partial\x20shipment\x20in\x20batches\x20(R2-07e\x20prescription\x20disclosed;\x20machine_shape\x20does\x20NOT\x20mount\x20it)','actor':'merchant','precondition':['M9'],'onchain':'disclosure_only','disclosureProbe':'PARTIAL\x20SHIPMENT','commercialSemantics':'(wc)\x20Common\x20for\x20bulk:\x20the\x20prescription\x20is\x20one\x20ShippedBatch\x20edge\x20per\x20parcel\x20with\x20independent\x20order-keyed\x20evidence\x20rows\x20and\x20settlement\x20only\x20after\x20the\x20last\x20batch\x20-\x20disclosed\x20in\x20the\x20corpus\x20but\x20absent\x20from\x20the\x20shape\x20(FIX-EDGE\x20finding,\x20report-only).','evidence':[]},{'id':'E15','class':'exception','name':'Renewal\x20failure\x20/\x20non-renewal:\x20the\x20member\x20rests\x20at\x20completed\x20(escrow\x20drained,\x20credential\x20lapses)','actor':'buyer','precondition':['M4'],'onchain':'expressible','chainFootprint':{'node':'completed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'(dm)\x20No\x20stranded-fund\x20exit\x20needed\x20on\x20this\x20terminal\x20-\x20the\x20fee\x20already\x20released;\x20the\x20roster\x20expiry\x20lapses\x20so\x20gated\x20buys\x20start\x20failing\x20(Plan\x20A\x20lapse).\x20Reminders\x20are\x20off-chain\x20nudges\x20with\x20no\x20chain\x20anchor\x20and\x20keepers\x20hold\x20no\x20charge\x20authority.','evidence':[]},{'id':'E22','class':'remedy','name':'Claim\x20dismissed\x20-\x20resume\x20at\x20delivered\x20(four-leg\x20dismissed\x20guard,\x20venue-bound)','actor':'arbitrator','precondition':['E21'],'onchain':'expressible','chainFootprint':{'node':'delivered','forward':'ResumeAfterDismissal','prev':'claim_filed','identity':'permission_index','moneyEffect':'none'},'guardKeyProbe':'arb_dismissed_resume','commercialSemantics':'(wc)\x20arb.order\x20binding\x20+\x20zero\x20indemnity\x20+\x20concluded-dismissal\x20stamp\x20+\x20venue\x20leg;\x20the\x20find=last\x20row\x20re-anchors\x20review/settle/return\x20windows\x20and\x20the\x20buyer\x20may\x20re-open\x20a\x20fresh\x20claim\x20window.','evidence':[]},{'id':'E23','class':'remedy','name':'Ruling\x20won\x20-\x20re-route\x20into\x20the\x20full-refund\x20rail\x20(six-leg\x20won\x20guard;\x20zero-award\x20never\x20fires)','actor':'arbitrator','precondition':['E21'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'ArbRefund','prev':'claim_filed','identity':'permission_index','moneyEffect':'refund'},'guardKeyProbe':'arb_refund','commercialSemantics':'(wc)\x20Serial\x20window\x20guarantees\x20the\x20pool\x20is\x20intact\x20at\x20ruling\x20time.\x20Sister\x20edge\x20ArbRefundReturn\x20re-routes\x20mid-return\x20disputes\x20from\x20return_in_transit\x20with\x20the\x20same\x20guard\x20family\x20-\x20one\x20instance,\x20one\x20exit\x20edge\x20(M-T2).','evidence':[{'file':'arb.move','line':0x15,'pattern':'MAX_INDEMNITY_MULTIPLE'}]},{'id':'R1','class':'remedy','name':'Indemnity\x20from\x20the\x20compensation\x20fund,\x20hard-bound\x20to\x20the\x20order\x20owner\x20(cap\x203x;\x20per-period\x20disputes\x20split)','actor':'arbitrator','precondition':['E21'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','identity':'order_holder','moneyEffect':'compensate'},'commercialSemantics':'(both)\x20The\x20fund\x20pays\x20the\x20order\x20owner\x20directly\x20(never\x20a\x20third\x20party),\x20capped\x20at\x203x\x20the\x20escrow/order;\x20fund\x20>=\x203x\x20is\x20the\x20recommended\x20user\x20input\x20and\x20the\x20water\x20level\x20is\x20advisory\x20three-tier.\x20The\x20payout\x20rides\x20the\x20Arb\x20object,\x20hence\x20the\x20node\x20anchor\x20here\x20is\x20the\x20filing\x20waypoint.','evidence':[{'file':'service.move','line':0x24c,'pattern':'compensation_claim'},{'file':'service.move','line':0x265,'pattern':'order::owner(order)'}]},{'id':'R2','class':'remedy','name':'48h\x20arbitration\x20absence\x20auto-loss\x20(keeper\x20procedural\x20discipline)','actor':'keeper','precondition':['E21'],'onchain':'disclosure_only','disclosureProbe':'48h\x20absence','commercialSemantics':'(wc-declared;\x20dm\x20has\x20the\x2014-day\x20dispute\x20window\x20but\x20no\x2048h\x20duty\x20in\x20its\x20corpus\x20-\x20honest\x20per-template\x20gap)\x20A\x20party\x20silent\x20for\x2048h\x20in\x20an\x20open\x20case\x20is\x20recorded\x20in\x20breach\x20so\x20the\x20case\x20can\x20settle.','evidence':[]},{'id':'R3','class':'remedy','name':'Off-chain\x20courtesy\x20credit\x20=\x20a\x20new\x20Payment\x20the\x20club\x20issues\x20voluntarily','actor':'merchant','precondition':['E12','E20'],'onchain':'disclosure_only','disclosureProbe':'OFF-CHAIN\x20courtesy|out\x20of\x20band|always-refundable','commercialSemantics':'(both)\x20The\x20prescription\x20for\x20everything\x20the\x20rails\x20cannot\x20refund\x20(post-settlement\x20returns,\x20post-period\x20fee\x20refunds):\x20a\x20fresh\x20club-initiated\x20Payment\x20object\x20OUTSIDE\x20the\x20machine\x20-\x20never\x20promise\x20it\x20through\x20a\x20rail.\x20The\x20dm\x20posture\x20note\x20(always-refundable)\x20and\x20the\x20wc\x20courtesy\x20note\x20are\x20the\x20disclosed\x20anchors.','evidence':[{'file':'payment.move','line':0x42,'pattern':'struct\x20PaymentInfo'}]},{'id':'R4','class':'remedy','name':'SLA\x20late-delivery\x20penalty\x20payment\x20(emittable,\x20NOT\x20emitted\x20-\x20FIX-EDGE\x20finding)','actor':'merchant','precondition':['E21','M10'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'SettleLateAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'compensate'},'guardKeyProbe':'late_delivery_breach','commercialSemantics':'(wc,\x20v1.1.0)\x20MOUNTED\x20as\x20a\x20SIBLING\x20remedy\x20edge\x20(stage2\x20#26\x20W-1):\x20the\x20late\x20order\x20settles\x20via\x20SettleLateAfterWindow\x20only\x20after\x20the\x20merchant\x20PRE-PAYS\x20the\x20marked\x20penalty\x20Payment\x20(info.for=order,\x20remark\x20\x27late-delivery-v1\x27,\x20order-owner\x20payee,\x20>=\x20sla_penalty_amount,\x20255\x20history-count\x20once)\x20AND\x20the\x201280\x20dual\x20anchor\x20proves\x20transit\x20>=\x20sla_late_hours\x20—\x20compensation-first,\x20the\x20compliant\x20inverse\x20of\x20automatic\x20debit\x20(U-01).\x20The\x20plain\x20SettleAfterWindow\x20edge\x20keeps\x20settling\x20on-time\x20orders:\x20the\x20two\x20gates\x20are\x20opposite-polarity\x20over\x20one\x20transit\x20interval,\x20so\x20they\x20can\x20never\x20share\x20one\x20edge\x20(M-T2).\x20dm\x20has\x20no\x20transit\x20nodes\x20-\x20the\x20footprint\x20can\x20only\x20ever\x20match\x20the\x20warehouse\x20twin;\x20dm\x27s\x20corpus\x20(D3)\x20names\x20the\x20shape\x20gap.','evidence':[{'file':'payment.move','line':0x42,'pattern':'struct\x20PaymentInfo'}]},{'id':'P1','class':'post','name':'Repurchase\x20=\x20another\x20gated\x20buy\x20(member\x20LTV\x20logic;\x20cross-order\x20spend\x20aggregation\x20not\x20emitted)','actor':'buyer','precondition':['M15'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'escrow_in'},'gapPredicate':{'probe':'sum_where|aggregate[^\x22]{0,40}|cumulative'},'commercialSemantics':'(wc)\x20Every\x20repurchase\x20re-verifies\x20the\x20credential,\x20but\x20cumulative\x20per-member\x20spend\x20(the\x202%\x20cashback\x20base)\x20has\x20no\x20emitted\x20aggregation\x20-\x20the\x20kernel\x27s\x20sum_where\x20surface\x20exists,\x20no\x20rail\x20fires\x20it,\x20and\x20the\x20LTV\x20logic\x20stays\x20data-side\x20(Prime\x20members\x20spend\x20~2.4x\x20non-members\x20per\x20year).\x20The\x20gap\x20must\x20stay\x20named.','evidence':[]},{'id':'P2','class':'post','name':'Executive\x202%\x20cashback\x20rebate\x20(Reward\x20pool\x20+\x20aggregation\x20outline;\x20dynamic\x20formula\x20NOT\x20emitted)','actor':'buyer','precondition':['P1'],'onchain':'expressible_with_gap','gapPredicate':{'probe':'cashback|rebate|2%\x20'},'commercialSemantics':'(wc)\x20Spend-proportional\x20rebates\x20(Executive\x202%,\x20CA$1,250\x20cap;\x20Sam\x27s\x202%\x20monthly)\x20need\x20a\x20dynamic\x20ratio\x20formula\x20at\x20assembly\x20level\x20-\x20a\x20Reward\x20pool\x20plus\x20repository\x20aggregation\x20outlines\x20the\x20shape\x20but\x20no\x20rail\x20computes\x20it;\x20the\x20gap\x20must\x20stay\x20named.\x20The\x20ONLY\x20loyalty\x20reward\x20the\x20real\x20clubs\x20run\x20(explicitly\x20no\x20points/miles\x20ledger\x20-\x20the\x20wiki\x20S1\x20sweep);\x20dm\x27s\x20own\x20reward\x20rail\x20(M16)\x20is\x20the\x20review\x20bounty,\x20a\x20different\x20pool.','evidence':[]},{'id':'P3','class':'post','name':'Renewal\x20reminder\x20nudge\x20(off-chain,\x20no\x20chain\x20anchor;\x20a\x20service,\x20not\x20a\x20statutory\x20duty)','actor':'keeper','precondition':['M4'],'onchain':'disclosure_only','disclosureProbe':'renewal\x20reminder|off-chain\x20nudge','commercialSemantics':'(dm)\x20period\x20end\x20minus\x20renewal_reminder_days\x20(30),\x20off-chain\x20only.\x20Because\x20the\x20chain\x20has\x20no\x20auto-charge,\x20the\x20reminder\x20is\x20a\x20courtesy\x20-\x20the\x20statutory\x20significant-reminder\x20duties\x20(C8-C10)\x20bind\x20the\x20real\x20auto-renewal\x20products,\x20not\x20this\x20shape.','evidence':[]},{'id':'P4','class':'post','name':'Membership\x20tier\x20upgrade\x20(row\x20value\x20encodes\x20tier;\x20price\x20delta\x20=\x20new\x20Payment\x20+\x20row\x20rewrite)','actor':'buyer','precondition':['M4'],'onchain':'disclosure_only','disclosureProbe':'expiry','commercialSemantics':'(both)\x20Gold\x20Star\x20->\x20Executive\x20/\x20Sam\x27s\x20->\x20Excellence:\x20the\x20roster\x20row\x27s\x20U64\x20value\x20field\x20can\x20encode\x20tier\x20alongside\x20expiry\x20(value\x20=\x20expiry/tier\x20convention);\x20no\x20dedicated\x20upgrade\x20primitive\x20exists\x20-\x20it\x20is\x20a\x20new\x20Payment\x20plus\x20a\x20merchant\x20row\x20rewrite.\x20The\x20corpus\x27s\x20expiry-value\x20framing\x20is\x20the\x20anchor.','evidence':[]},{'id':'P5','class':'post','name':'Window\x20expiry\x20close\x20(keeper\x20closes\x20stale\x20dispute/return\x20windows\x20so\x20refund\x20rails\x20cannot\x20re-arm)','actor':'keeper','precondition':['M15'],'onchain':'disclosure_only','disclosureProbe':'dispute\x20window\x20expiry|return\x20window\x20expiry','commercialSemantics':'(wc)\x2090-day\x20dispute\x20window\x20and\x2030-day\x20return\x20window\x20expiry\x20are\x20declared\x20keeper\x20duties;\x20the\x20dispute\x20window\x20anchors\x20on\x20the\x20off-Machine\x20Arb\x20case.','evidence':[]}],'invariants':[{'id':'INV-CST-1','statement':'The\x20real\x20club\x27s\x20\x27cancel\x20anytime,\x20full\x20membership-fee\x20refund\x27\x20promise\x20is\x20chain-expressible\x20ONLY\x20until\x20period\x20end:\x20the\x20listing\x20must\x20say\x20the\x20on-chain\x20refund\x20right\x20ends\x20at\x20the\x20period-end\x20release\x20(ESCALATE\x20if\x20a\x20WIP\x20promises\x20more).','chainConflict':'Post-release\x20the\x20escrow\x20is\x20drained;\x20no\x20clawback/debit\x20primitive\x20exists,\x20and\x20no\x20fee_param/forward\x20pair\x20can\x20name\x20a\x20violation\x20-\x20a\x20violation\x20would\x20be\x20a\x20refund\x20rail\x20reaching\x20past\x20a\x20drained\x20escrow.\x20Anchored\x20on\x20the\x20reverse-allocation\x20prohibition.','evidence':[{'file':'allocation.move','line':0x26d,'pattern':'ERECIPIENT_NOT_FOR_OBJECT'}]},{'id':'INV-CST-2','statement':'China\x20food-safety\x20statutory\x20damages\x20(10x\x20price,\x20min\x20¥1,000)\x20collide\x20with\x20the\x203x\x20escrow/order\x20award\x20cap:\x20an\x20arbitrator\x20can\x20never\x20award\x20the\x20statutory\x20multiple\x20inside\x20a\x20capped\x20venue.','chainConflict':'Statute\x20vs\x20protocol\x20constant\x20-\x20no\x20fee_param/forward\x20predicate\x20can\x20express\x20a\x20statutory\x20multiplier.\x20Remedy:\x20thicken\x20the\x20compensation\x20fund\x20and\x20disclose,\x20or\x20escalate\x20the\x20case\x20off-venue.\x20Anchored\x20on\x20the\x20cap\x20constant\x20and\x20its\x20saturating\x20application.','evidence':[{'file':'arb.move','line':0x15,'pattern':'MAX_INDEMNITY_MULTIPLE'},{'file':'arb.move','line':0x21d,'pattern':'saturating_mul'}]},{'id':'INV-CST-3','statement':'Material\x20terms\x20(refund\x20boundaries,\x20window\x20days,\x20the\x20always-refundable\x20edge\x20of\x20the\x20promise)\x20must\x20be\x20machine-readable\x20template\x20disclosures,\x20never\x20listing\x20small\x20print:\x20on-chain\x20terms\x20are\x20Guard\x20literals\x20frozen\x20at\x20publish\x20and\x20publicly\x20auditable.','chainConflict':'Disclosure-quality\x20rule\x20with\x20no\x20fee_param/forward\x20form;\x20the\x20disclosure\x20coverage\x20numbers\x20above\x20are\x20its\x20mechanical\x20proxy.'},{'id':'INV-CST-4','statement':'NO\x20auto-charge\x20semantics\x20may\x20ever\x20be\x20emitted:\x20the\x20renewal\x20is\x20ALWAYS\x20the\x20member\x27s\x20own\x20signature\x20(signer\x20==\x20order\x20owner\x20on\x20the\x20renew\x20rail).\x20While\x20period_days\x20>\x200\x20is\x20configured,\x20the\x20explicit-signature\x20renew\x20forward\x20must\x20exist\x20-\x20a\x20period\x20clock\x20without\x20the\x20signature\x20rail\x20is\x20a\x20dead\x20or\x20mandated\x20loop.','violation':{'requiresFeeParamNonZero':'period_days','whileMissingForward':'renew'}},{'id':'INV-CST-5','statement':'The\x20membership\x20fee\x20is\x20periodic-service\x20consideration,\x20NOT\x20a\x20stored-value\x20card:\x20it\x20escrows\x20until\x20period\x20end\x20(mid-period\x20cancel\x20=\x20full\x20refund);\x20a\x20build\x20that\x20converts\x20it\x20into\x20spendable\x20stored\x20value\x20triggers\x20China\x27s\x20single-purpose\x20prepaid-card\x20limits\x20(¥5,000\x20registered\x20cap,\x20deposit-ratio\x20custody)\x20and\x20must\x20be\x20re-reviewed.','chainConflict':'Product-classification\x20rule\x20with\x20no\x20mechanical\x20predicate;\x20the\x20dm\x20refund\x20rail\x20coverage\x20(E13)\x20is\x20its\x20structural\x20proxy.'},{'id':'INV-CST-6','statement':'TPL-09\x20serial\x20window\x20protection\x20(standing\x20check):\x20while\x20claim_window_days\x20>\x200\x20is\x20configured,\x20the\x20window-departing\x20SettleAfterWindow\x20forward\x20must\x20exist\x20-\x20removing\x20it\x20orphans\x20the\x20serial\x20hold\x20and\x20lets\x20settlement\x20escape\x20the\x20window\x20ordering.','violation':{'requiresFeeParamNonZero':'claim_window_days','whileMissingForward':'SettleAfterWindow'}}]};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
export const DUODUO_MAICAI_ORACLE={'productRef':'duoduo-maicai','products':['duoduo-maicai','meituan-youxuan','taocaicai'],'oracleVersion':'1.0.0','steps':[{'id':'M1','class':'offchain','name':'Browse\x20the\x20daily\x20SKU\x20catalog,\x20platform-priced,\x20refreshed\x20each\x20round','actor':'buyer','precondition':[],'onchain':'not_applicable','commercialSemantics':'The\x20per-round\x20catalog\x20and\x20its\x20prices\x20are\x20locked\x20at\x20listing\x20time\x20by\x20the\x20platform;\x20browsing,\x20search\x20and\x20recommendation\x20are\x20pure\x20off-chain\x20app\x20concerns\x20the\x20chain\x20never\x20sees.','evidence':[]},{'id':'M2','class':'offchain','name':'Pick\x20the\x20neighborhood\x20pickup\x20point\x20and\x20join\x20the\x20round','actor':'buyer','precondition':['M1'],'onchain':'not_applicable','commercialSemantics':'Choosing\x20the\x20pickup\x20point\x20maps\x20to\x20the\x20build-time\x20point_type\x20selector\x20(staffed\x20shelf\x20/\x20automated\x20locker\x20/\x20batch\x20handover)\x20and\x20the\x20community\x20boundary\x20is\x20enforced\x20by\x20the\x20buy-side\x20blocklist\x20guard\x20or\x20left\x20open;\x20neither\x20is\x20a\x20per-order\x20chain\x20act.','evidence':[]},{'id':'M3','class':'main','name':'Pay\x20the\x20join\x20price\x20into\x20escrow\x20(single\x20total,\x20no\x20dynamic\x20fee)','actor':'buyer','precondition':['M2'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'One\x20atomic\x20buy\x20at\x20the\x20listed\x20price:\x20the\x20join\x20total\x20is\x20escrowed\x20in\x20a\x20single\x20transaction\x20and\x20the\x20platform\x20has\x20committed\x20the\x20whole\x20round\x27s\x20supply\x20up\x20front\x20—\x20there\x20is\x20no\x20per-order\x20pricing\x20oracle\x20by\x20design.\x20The\x20buy-side\x20guard\x20can\x20refuse\x20barred\x20addresses\x20at\x20this\x20entry.','evidence':[{'file':'service.move','line':0x1c9,'pattern':'public\x20fun\x20buy<T>'}]},{'id':'M4','class':'main','name':'Round\x20closes\x20at\x20the\x20shared\x20absolute\x20cutoff\x20(keeper\x20flips\x20the\x20buy\x20switch)','actor':'keeper','precondition':['M3'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20round\x20boundary\x20is\x20ONE\x20immutable\x20epoch-ms\x20constant\x20shared\x20by\x20every\x20order;\x20the\x20sanctioned\x20TODAY\x20mechanism\x20is\x20the\x20runtime\x20buy-guard\x20switch\x20the\x20keeper\x27s\x20cron\x20sets\x20at\x20the\x20cutoff\x20and\x20clears\x20when\x20the\x20next\x20round\x20opens.\x20The\x20gap:\x20the\x20switch\x20fixes\x20the\x20buy\x20side\x20only\x20—\x20full\x20machine\x20reuse\x20across\x20rounds\x20still\x20needs\x20the\x20disclosed\x20publisher-clock\x20discipline\x20or\x20a\x20redeploy.','gapPredicate':{'probe':'publisher-clock\x20discipline'},'evidence':[{'file':'service.move','line':0x4f1,'pattern':'public\x20fun\x20buy_guard_set'}]},{'id':'M5','class':'main','name':'Cutoff\x20fires\x20and\x20the\x20batch\x20release\x20opens\x20(one\x20clock\x20for\x20the\x20whole\x20round)','actor':'keeper','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'cutoff_fired','forward':'CutoffRelease','prev':'paid','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20release\x20gate\x20reads\x20the\x20same\x20shared\x20constant\x20the\x20cancel\x20window\x20reads,\x20so\x20a\x20late\x20joiner\x20after\x20the\x20cutoff\x20cannot\x20unwind\x20the\x20committed\x20batch\x20and\x20cancel\x20and\x20release\x20are\x20mutually\x20exclusive\x20in\x20time.\x20Per-order\x20entry+duration\x20anchoring\x20would\x20dissolve\x20the\x20batch\x20and\x20is\x20the\x20documented\x20anti-pattern.','guardKeyProbe':'cutoff_open','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'M6','class':'main','name':'Platform\x20consolidates,\x20routes\x20cold\x20chain\x20and\x20dispatches\x20to\x20the\x20point\x20(batch\x20logistics)','actor':'keeper','precondition':['M4'],'onchain':'unresolvable','unresolvableRef':'S7','disclosureProbe':'batch\x20dispatch\x20is\x20off-chain','commercialSemantics':'Consolidation,\x20cold-chain\x20routing,\x20point\x20assignment\x20and\x20the\x20delivery\x20schedule\x20are\x20off-chain\x20keeper\x20duties;\x20the\x20chain\x20has\x20no\x20dispatch,\x20route\x20or\x20temperature\x20primitive,\x20and\x20the\x20only\x20footprints\x20are\x20the\x20arrival\x20evidence\x20rows\x20and\x20the\x20staff\x20roster.\x20The\x20order\x20binds\x20to\x20the\x20service\x20and\x20waits\x20for\x20goods,\x20never\x20for\x20a\x20route.','evidence':[{'file':'order.move','line':0x49,'pattern':'service:\x20address'}]},{'id':'M7','class':'main','name':'Point\x20staff\x20shelve\x20/\x20deposit\x20/\x20hand\x20over\x20the\x20arrival\x20(custody\x20evidence)','actor':'fulfiller','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'at_point','forward':'ShelveAtPoint','prev':'cutoff_fired','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'The\x20point\x20staff\x20advances\x20the\x20arrival\x20on\x20a\x20named-operator\x20roster\x20that\x20is\x20both\x20admission\x20and\x20exclusion\x20since\x20the\x20v138\x20member\x20gate:\x20an\x20unlisted\x20address\x20cannot\x20advance.\x20Exactly\x20one\x20of\x20the\x20three\x20arrival\x20designs\x20survives\x20each\x20build\x20(selector\x20exclusivity),\x20each\x20with\x20its\x20own\x20writer-bound\x20evidence\x20row.','guardKeyProbe':'(shelve_evidence|locker_deposit_evidence|handover_manifest_evidence)','evidence':[{'file':'progress.move','line':0x124,'pattern':'fun\x20IsNamedOperator'}]},{'id':'M8','class':'main','name':'Platform\x20schedules\x20the\x20pickup\x20window\x20and\x20notifies\x20the\x20community','actor':'keeper','precondition':['M7'],'onchain':'disclosure_only','disclosureProbe':'delivery\x20schedule[^\x22]{0,40}off-chain','commercialSemantics':'Slotting\x20the\x20pickup\x20window\x20and\x20notifying\x20the\x20group\x20are\x20off-chain\x20dispatch\x20duties;\x20the\x20disclosure\x20carries\x20the\x20honest\x20limit\x20that\x20the\x20chain\x20promises\x20no\x20ETA,\x20only\x20the\x20evidence-backed\x20arrival\x20state.','evidence':[]},{'id':'M9','class':'main','name':'Buyer\x20collects\x20at\x20the\x20point\x20(dual\x20confirmation:\x20buyer\x20identity\x20+\x20staff\x20row)','actor':'buyer','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'picked_up','forward':'ConfirmPickup','prev':'at_point','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Neither\x20party\x20alone\x20advances:\x20the\x20buyer\x27s\x20254-anchored\x20identity\x20confirm\x20AND\x20the\x20point\x27s\x20writer-bound\x20redemption\x20row\x20must\x20both\x20exist.\x20The\x20redemption\x20row\x20lives\x20under\x20its\x20own\x20policy\x20so\x20it\x20can\x20never\x20collide\x20with\x20the\x20arrival\x20row\x20it\x20follows\x20—\x20the\x20legacy\x20single-policy\x20shape\x20aborted\x20the\x20first\x20collection.','guardKeyProbe':'pickup_confirm','evidence':[{'file':'progress.move','line':0x48,'pattern':'TASK_BINDING_IDENTIFIER:\x20u8\x20=\x20254'},{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'M10','class':'main','name':'Keeper\x20opens\x20the\x20serial\x20claim\x20window\x20(the\x20order\x20rests\x20at\x20picked_up)','actor':'keeper','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'claim_window','forward':'OpenClaimWindow','prev':'picked_up','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20keeper-only\x20edge\x20opens\x20the\x20TPL-09\x20serial\x20dispute\x20window;\x20re-entry\x20appends\x20a\x20fresh\x20history\x20entry\x20and\x20re-anchors\x20the\x20window\x20clocks\x20on\x20the\x20last\x20entry,\x20so\x20a\x20resumed\x20or\x20re-opened\x20order\x20cannot\x20reuse\x20a\x20stale\x20anchor.','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'M11','class':'main','name':'Window\x20elapses:\x20settlement\x20pays\x20the\x20platform\x20supplier\x20and\x20the\x20leader\x27s\x20single\x20commission\x20leg','actor':'merchant','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'SettleAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'release'},'commercialSemantics':'The\x20settlement\x20allocator\x20splits\x20the\x20pool\x20into\x20the\x20supplier\x20Entity\x20share\x20and\x20the\x20leader\x27s\x20single\x20disclosed\x20commission\x20Entity\x20leg\x20(benchmark\x200,\x20P2P\x20doctrine),\x20plus\x20the\x20rate-0\x20order\x20anchor\x20that\x20binds\x20the\x20rail\x20to\x20this\x20order.\x20Commission\x20defaults\x20to\x20zero\x20and\x20any\x20override\x20must\x20stay\x20a\x20single\x20layer\x20—\x20multi-layer\x20commission\x20is\x20the\x20pyramid\x20pattern\x20regulators\x20target.','guardKeyProbe':'settle_window_gate','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc<T>'},{'file':'allocation.move','line':0x271,'pattern':'Recipient::Entity'}]},{'id':'E1','class':'exception','name':'No\x20all-or-nothing\x20threshold:\x20the\x20round\x20ships\x20regardless\x20of\x20volume','actor':'platform','precondition':['M2'],'onchain':'not_applicable','commercialSemantics':'The\x20platform-supplied\x20model\x20commits\x20supply\x20up\x20front\x20—\x20there\x20is\x20no\x20aggregate\x20release-XOR-refund\x20rail\x20on\x20this\x20shape\x20by\x20declaration.\x20Builders\x20who\x20want\x20a\x20threshold\x20take\x20the\x20sibling\x20leader-sourced\x20crowdfunding\x20overlay\x20instead.','evidence':[]},{'id':'E2','class':'exception','name':'Buyer\x20cancels\x20before\x20the\x20shared\x20cutoff\x20(full\x20refund,\x20no\x20fee)','actor':'buyer','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelBeforeCutoff','prev':'paid','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Before\x20the\x20cutoff\x20the\x20platform\x20has\x20committed\x20nothing\x20per-order,\x20so\x20the\x20cancel\x20is\x20free\x20and\x20lands\x20on\x20the\x20full-refund\x20rail.\x20The\x20window\x20is\x20bounded\x20by\x20the\x20same\x20absolute\x20constant\x20the\x20release\x20gate\x20reads\x20—\x20the\x20former\x20legless\x20cancel\x20that\x20let\x20an\x20expired\x20round\x20be\x20unwound\x20losslessly\x20is\x20cured.','guardKeyProbe':'cancel_before_cutoff','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc<T>'}]},{'id':'E3','class':'exception','name':'Post-cutoff\x20personal\x20cancel\x20is\x20refused\x20(fresh\x20goods\x20are\x20committed)','actor':'buyer','precondition':['M5'],'onchain':'not_applicable','commercialSemantics':'After\x20the\x20cutoff\x20there\x20is\x20deliberately\x20no\x20buyer-side\x20unwind:\x20the\x20goods\x20are\x20procured\x20and\x20the\x20shape\x20carries\x20no\x20edge\x20for\x20it.\x20The\x20real\x20product\x27s\x20policy\x20(contact\x20the\x20platform\x20for\x20a\x20manual\x20refund)\x20is\x20an\x20off-chain\x20courtesy,\x20not\x20a\x20chain\x20route.','evidence':[]},{'id':'E4','class':'exception','name':'Risk-control\x20takedown\x20refunds\x20the\x20buyer\x20on\x20cancellation\x20day','actor':'platform','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelByPlatform','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'CURED\x20(wave-3,\x202026-11-06):\x20the\x20platform-side\x20kill\x20is\x20mounted\x20—\x20CancelByPlatform\x20(cutoff_fired\x20->\x20closed_cancel,\x20refund-rail\x20slot\x201001,\x20node-gated\x20tpl_forward_node_check\x20/\x20platform_cancel)\x20refunds\x20every\x20committed\x20order\x20in\x20full\x20when\x20the\x20round\x20is\x20halted\x20(regulatory\x20recall,\x20supplier\x20insolvency,\x20force\x20majeure).\x20The\x20edge\x20cannot\x20fire\x20pre-commitment\x20(node-gated\x20on\x20the\x20cutoff\x20entry)\x20or\x20claw\x20back\x20a\x20settled\x20round.','evidence':[]},{'id':'E5','class':'exception','name':'Stockout\x20auto-refunds\x20the\x20affected\x20buyers\x20the\x20same\x20day','actor':'platform','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'RefundOutOfStock','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'CURED\x20(wave-3,\x202026-11-06):\x20the\x20stockout\x20edge\x20is\x20mounted\x20—\x20RefundOutOfStock\x20(cutoff_fired\x20->\x20closed_cancel,\x20refund-rail\x20slot\x201001,\x20node-gated\x20tpl_forward_node_check\x20/\x20out_of_stock_refund)\x20gives\x20the\x20unfillable\x20consolidated\x20batch\x20the\x20benchmark\x27s\x20same-day\x20full\x20refund\x20through\x20the\x20SAME\x20refund_full\x20rail\x20(one\x20order-anchored\x20channel,\x20never\x20a\x20second).\x20The\x20paired\x20standing\x20invariant\x20INV-DM-STOCKOUT\x20is\x20kept\x20and\x20re-fires\x20while\x20the\x20forward\x20is\x20missing.','evidence':[]},{'id':'E6','class':'exception','name':'Short\x20count\x20or\x20short\x20weight\x20at\x20collection:\x20proportional\x20compensation','actor':'fulfiller','precondition':['M9'],'onchain':'expressible_with_gap','chainFootprint':{'node':'refunded','forward':'CompensateBadItem','prev':'return_requested','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20evidenced\x20compensation\x20branch\x20pays\x20on\x20the\x20point\x20staff\x27s\x20approval\x20row,\x20but\x20the\x20after-sales\x20rail\x20pays\x20the\x20whole\x20pool\x20—\x20a\x20proportional\x20amount\x20needs\x20the\x20disclosed\x20off-chain\x20pricing\x20discipline\x20(ruling\x20price\x20or\x20a\x20confirmed\x20messenger\x20quote),\x20never\x20a\x20silent\x20staff\x20decision.','guardKeyProbe':'bad_item_evidence','gapPredicate':{'probe':'price\x20the\x20amount\x20ONLY\x20by\x20an\x20arbitration\x20ruling'},'evidence':[{'file':'allocation.move','line':0xab,'pattern':'const\x20AllocationMode_Amount:u8\x20=\x200'}]},{'id':'E7','class':'exception','name':'Buyer\x20never\x20collects:\x20self-serve\x20refund\x20inside\x20the\x20bounded\x20pickup\x20window','actor':'buyer','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'RefundUnclaimed','prev':'at_point','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Goods\x20never\x20collected\x20refund\x20in\x20full\x20while\x20the\x20closing\x20window\x20from\x20the\x20at_point\x20entry\x20is\x20alive\x20—\x20the\x20abandon\x20self-heal.\x20Goods\x20ownership\x20after\x20the\x20refund\x20has\x20no\x20on-chain\x20primitive;\x20disposal\x20follows\x20the\x20disclosed\x20off-chain\x20point\x20agreement.','guardKeyProbe':'unclaimed_refund','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'E8','class':'exception','name':'Window\x20closed,\x20still\x20uncollected:\x20keeper\x27s\x20late\x20exit\x20per\x20the\x20unclaimed_exit\x20selector','actor':'keeper','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'RefundUnclaimedLate','prev':'at_point','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20default\x20arm\x20refunds\x20the\x20buyer\x27s\x20principal\x20in\x20full\x20once\x20the\x20pickup\x20window\x20closes\x20—\x20the\x20real\x20next-day\x20refund\x20convention.\x20The\x20explicit\x20opt-in\x20arm\x20settles\x20to\x20supplier\x20plus\x20leader\x20but\x20hard-carries\x20a\x20keeper\x20appeal\x20leg\x20so\x20the\x20buyer\x20keeps\x20a\x20non-arbitration\x20route\x20while\x20the\x20window\x20is\x20open.','guardKeyProbe':'unclaimed_refund_late','evidence':[{'file':'allocation.move','line':0x50,'pattern':'const\x20E_ONCE_TRIGGERED:\x20u64\x20=\x2016'}]},{'id':'E9','class':'exception','name':'Who\x20owns\x20refunded\x20unclaimed\x20goods\x20(post-refund\x20disposal)','actor':'platform','precondition':['E7'],'onchain':'disclosure_only','disclosureProbe':'Goods\x20ownership\x20AFTER\x20a\x20refund\x20has\x20no\x20on-chain\x20primitive','commercialSemantics':'The\x20chain\x20has\x20no\x20ownership\x20primitive\x20over\x20physical\x20goods;\x20after\x20the\x20refund\x20the\x20parcel\x20belongs\x20to\x20whoever\x20the\x20disclosed\x20point\x20agreement\x20says.\x20The\x20disclosure\x20is\x20the\x20contract\x20—\x20the\x20chain\x20will\x20never\x20adjudicate\x20the\x20leftover\x20lettuce.','evidence':[]},{'id':'E10','class':'exception','name':'Wrong\x20or\x20damaged\x20item\x20discovered\x20after\x20receipt:\x20after-sales\x20filing\x20from\x20picked_up','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'return_requested','forward':'RequestReturn','prev':'picked_up','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Filing\x20opens\x20a\x20closing\x20window\x20from\x20the\x20immutable\x20picked_up\x20entry\x20and\x20requires\x20the\x20order-holder\x20identity\x20set\x20—\x20a\x20time-only\x20window\x20on\x20a\x20buyer\x20edge\x20would\x20admit\x20any\x20caller.\x20The\x20three-segment\x20after-sales\x20track\x20(file,\x20ship,\x20receive)\x20records\x20while\x20the\x20allocator\x20rail\x20pays.','guardKeyProbe':'return_window_pickup','evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E11','class':'exception','name':'Fresh\x20goods\x20spoiled:\x20refund-only\x20compensation\x20without\x20shipping\x20them\x20back','actor':'fulfiller','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'refunded','forward':'CompensateBadItem','prev':'return_requested','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'Nobody\x20ships\x20rotting\x20produce\x20back:\x20the\x20point\x20staff\x27s\x20evidenced\x20approval\x20advances\x20the\x20order\x20straight\x20into\x20the\x20refunded\x20terminal\x20and\x20the\x20rail\x20pays\x20there.\x20The\x20approval\x20row\x20is\x20order-keyed,\x20writer-bound\x20and\x20final\x20—\x20a\x20silent\x20staff\x20decision\x20is\x20structurally\x20impossible.','guardKeyProbe':'bad_item_evidence','evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'},{'file':'order.move','line':0x15e,'pattern':'public\x20fun\x20owner_receive'}]},{'id':'E12','class':'exception','name':'Non-fresh\x20item\x20return-and-refund:\x20ship\x20back,\x20point\x20receives\x20(RMA\x20row)','actor':'fulfiller','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'returned','forward':'ReturnReceived','prev':'return_in_transit','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20return\x20receipt\x20rides\x20the\x20same\x20staff\x20roster\x20and\x20lands\x20the\x20RMA\x20row\x20under\x20its\x20own\x20policy;\x20the\x20money\x20authority\x20is\x20the\x20after-sales\x20rail\x20that\x20pays\x20once\x20the\x20RMA\x20state\x20is\x20reached.\x20Distinct\x20rail\x20key\x20keeps\x20the\x20per-allocator\x20rate\x20sums\x20intact.','guardKeyProbe':'return_received','evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E13','class':'exception','name':'Return\x20parcel\x20lost\x20in\x20transit:\x20keeper\x27s\x20timed\x20refund\x20exit','actor':'keeper','precondition':['E12'],'onchain':'expressible','chainFootprint':{'node':'refunded','forward':'RefundLostReturn','prev':'return_in_transit','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'A\x20lost\x20return\x20cannot\x20strand\x20the\x20escrow:\x20after\x20the\x20transit\x20timeout\x20the\x20keeper\x20advances\x20the\x20parcel\x20state\x20into\x20the\x20refunded\x20terminal\x20so\x20the\x20buyer\x27s\x20money\x20returns\x20—\x20the\x20buyer\x20never\x20carries\x20the\x20return-leg\x20carrier\x20risk.','guardKeyProbe':'return_transit_timeout','evidence':[{'file':'allocation.move','line':0x50,'pattern':'const\x20E_ONCE_TRIGGERED:\x20u64\x20=\x2016'}]},{'id':'E14','class':'exception','name':'Goods\x20lost\x20or\x20damaged\x20between\x20warehouse\x20and\x20point\x20(carrier\x20claim)','actor':'platform','precondition':['M6'],'onchain':'disclosure_only','disclosureProbe':'TRANSIT\x20LOSS\x20IS\x20REMEDIED','commercialSemantics':'Leg-loss\x20before\x20the\x20point\x20is\x20the\x20platform\x27s\x20off-chain\x20carrier\x20claim;\x20the\x20disclosed\x20buyer\x20remedy\x20is\x20the\x20arbitration\x20route\x20into\x20the\x20full-refund\x20rail.\x20The\x20chain\x20records\x20no\x20carrier\x20insurance\x20semantics.','evidence':[]},{'id':'E15','class':'exception','name':'Point\x20closed\x20or\x20staff\x20roster\x20stale\x20when\x20the\x20batch\x20arrives','actor':'keeper','precondition':['M7'],'onchain':'expressible_with_gap','chainFootprint':{'node':'closed_cancel','forward':'RefundUnclaimedLate','prev':'at_point','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'Re-pointing\x20the\x20roster\x20is\x20an\x20off-chain\x20dispatch\x20act\x20—\x20the\x20roster\x20write\x20is\x20the\x20dispatch\x20disclosure\x20surface,\x20and\x20a\x20stalled\x20arrival\x20ends\x20in\x20the\x20same\x20bounded\x20unclaimed\x20exits.\x20No\x20dynamic\x20re-routing\x20primitive\x20exists\x20on\x20chain.','guardKeyProbe':'unclaimed_refund_late','gapPredicate':{'probe':'roster\x20write\x20is\x20the\x20dispatch\x20disclosure\x20surface'},'evidence':[{'file':'progress.move','line':0x124,'pattern':'fun\x20IsNamedOperator'}]},{'id':'E16','class':'exception','name':'Dispute\x20not\x20settled\x20in-community:\x20escalate\x20to\x20the\x20third-party\x20arbitration\x20object','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','forward':'FileDispute','prev':'claim_window','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Filing\x20inside\x20the\x20closing\x20serial\x20window\x20stamps\x20the\x20dispute;\x20escalation\x20to\x20the\x20independent\x20arbitration\x20object\x20is\x20a\x20service-level\x20entry\x20that\x20checks\x20the\x20fee\x20and\x20the\x20op\x20permission\x20before\x20accepting\x20the\x20case.\x20The\x20order-holder\x20identity\x20legs\x20ship\x20in\x20the\x20guard\x20root\x20over\x20the\x20254\x20slot.','guardKeyProbe':'claim_filed','evidence':[{'file':'arbitration.move','line':0x22,'pattern':'E_FEE_NOT_ENOUGH'},{'file':'service.move','line':0x271,'pattern':'public\x20fun\x20dispute'}]},{'id':'E17','class':'exception','name':'Staff\x20forgets\x20the\x20redemption\x20row:\x20goods-holding\x20buyer\x20stalls','actor':'fulfiller','precondition':['M7'],'onchain':'expressible_with_gap','chainFootprint':{'node':'at_point','moneyEffect':'none'},'commercialSemantics':'The\x20residual\x20of\x20dual\x20confirmation\x20is\x20disclosed\x20both\x20directions:\x20the\x20counterparty\x20row\x20is\x20the\x20handover\x20baseline\x20the\x20dispute\x20surface\x20lacked,\x20and\x20a\x20forgetful\x20point\x20stalls\x20the\x20buyer\x20only\x20until\x20the\x20pickup\x20window\x20closes\x20—\x20then\x20the\x20refund-buyer\x20default\x20refunds\x20them\x20WITH\x20the\x20goods.\x20The\x20edge\x20is\x20never\x20swapped\x20to\x20a\x20staff-only\x20confirm.','gapPredicate':{'probe':'stalls\x20a\x20goods-holding\x20buyer'},'evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E18','class':'exception','name':'Buyer\x20address,\x20phone\x20and\x20recipient\x20details\x20stay\x20off-chain\x20(PII)','actor':'platform','precondition':['M2'],'onchain':'unresolvable','unresolvableRef':'S6','disclosureProbe':'customer_required[^\x22]{0,80}never\x20gates','commercialSemantics':'Buyer\x20coordination\x20data\x20lives\x20in\x20the\x20off-chain\x20dispatch\x20and\x20point\x20systems.\x20The\x20declarative\x20required-info\x20field\x20never\x20gates\x20the\x20purchase\x20entry\x20on\x20this\x20shape,\x20and\x20no\x20on-chain\x20surface\x20should\x20ever\x20hold\x20the\x20neighbor\x27s\x20home\x20address.','evidence':[{'file':'service.move','line':0x100,'pattern':'customer_required:\x20vector<String>'}]},{'id':'E19','class':'exception','name':'Community\x20touch:\x20leader\x20passes\x20member\x20rebates\x20off-chain','actor':'merchant','precondition':['M9'],'onchain':'disclosure_only','disclosureProbe':'member\x20rebates\x20are\x20off-chain','commercialSemantics':'The\x20group\x27s\x20social\x20graph\x20is\x20enforced\x20off-chain;\x20the\x20leader\x27s\x20chain\x20footprint\x20is\x20exactly\x20one\x20commission\x20leg\x20at\x20settlement.\x20Any\x20deeper\x20member-level\x20split\x20on\x20chain\x20would\x20be\x20the\x20multi-layer\x20pattern\x20the\x20anti-pyramid\x20rule\x20forbids.','evidence':[]},{'id':'R1','class':'remedy','name':'Buyer\x20files\x20a\x20dispute\x20inside\x20the\x20serial\x20claim\x20window','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','forward':'FileDispute','prev':'claim_window','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20filing\x20window\x20closes\x20one\x20claim-window\x20after\x20the\x20window\x20entry;\x20the\x20arbitration\x20entry\x20side\x20checks\x20the\x20case\x20fee\x20(escrowed\x20with\x20the\x20filing)\x20and\x20the\x20caller\x27s\x20op\x20permission.\x20The\x20serial\x20window\x20carries\x20the\x20dispute-exclusion\x20of\x20settlement\x20by\x20structure\x20—\x20settlement\x20cannot\x20fire\x20while\x20a\x20filed\x20claim\x20holds\x20the\x20order.','guardKeyProbe':'claim_filed','evidence':[{'file':'arbitration.move','line':0x169,'pattern':'order::assert_op_permission(order,\x20ctx)'},{'file':'arbitration.move','line':0x22,'pattern':'E_FEE_NOT_ENOUGH'}]},{'id':'R2','class':'remedy','name':'Buyer-won\x20ruling\x20re-routes\x20the\x20order\x20into\x20the\x20full-refund\x20rail','actor':'merchant','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'ArbRefund','prev':'claim_filed','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20won\x20guard\x20reads\x20the\x20canonical\x20two-slot\x20root\x20—\x20this\x20arbitration\x20object,\x20positive\x20non-zero\x20indemnity\x20—\x20with\x20the\x20zero-award\x20exclusion\x20leg,\x20and\x20one\x20instance\x20guards\x20one\x20exit\x20edge.\x20The\x20zero-indemnity\x20(platform-favor)\x20root\x20deliberately\x20does\x20NOT\x20fit\x20this\x20edge;\x20that\x20ruling\x20takes\x20the\x20resume\x20rail.','guardKeyProbe':'arb_refund','evidence':[{'file':'arb.move','line':0xa6,'pattern':'public\x20struct\x20Indemnity\x20has\x20copy,\x20drop,\x20store'}]},{'id':'R3','class':'remedy','name':'Platform-favor\x20(zero-indemnity)\x20ruling\x20resumes\x20the\x20order\x20at\x20picked_up','actor':'merchant','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'picked_up','forward':'ResumeAfterDismissal','prev':'claim_filed','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'A\x20dismissed\x20ruling\x20appends\x20a\x20fresh\x20picked_up\x20entry\x20and\x20re-anchors\x20the\x20window\x20clocks,\x20so\x20the\x20order\x20re-enters\x20the\x20normal\x20rest-and-collect\x20flow\x20and\x20the\x20keeper\x20can\x20re-open\x20a\x20fresh\x20claim\x20window\x20from\x20the\x20new\x20anchor.\x20Nothing\x20is\x20paid;\x20the\x20goods\x20stay\x20with\x20the\x20buyer\x20and\x20the\x20escrow\x20rides\x20on.','guardKeyProbe':'arb_dismissed_resume','evidence':[]},{'id':'R4','class':'remedy','name':'Buyer\x20withdraws\x20the\x20filed\x20dispute\x20(resumes\x20at\x20picked_up,\x20zero\x20money\x20legs)','actor':'buyer','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'picked_up','forward':'WithdrawClaim','prev':'claim_filed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'CURED\x20(wave-3,\x202026-11-06;\x20synced\x20from\x20the\x20sibling\x20leader-sourced\x20template\x27s\x20F-03\x20fix):\x20the\x20withdrawal\x20RESUMES\x20the\x20order\x20at\x20picked_up\x20with\x20zero\x20money\x20legs\x20—\x20the\x20former\x20shape\x20landed\x20it\x20in\x20the\x20closed_cancel\x20refund\x20terminal\x20while\x20the\x20buyer\x20may\x20still\x20hold\x20the\x20goods,\x20a\x20goods-holding\x20single-signature\x20arbitrage.\x20The\x20fresh\x20picked_up\x20entry\x20re-anchors\x20the\x20after-sales\x20windows\x20and\x20the\x20platform\x27s\x20remedies\x20stay\x20intact;\x20the\x20withdrawal\x20never\x20sweeps\x20the\x20indemnity.','guardKeyProbe':'withdraw_claim','evidence':[{'file':'arb.move','line':0x257,'pattern':'fun\x20withdraw<T>'},{'file':'arb.move','line':0x266,'pattern':'balance::withdraw_all'},{'file':'arbitration.move','line':0x21a,'pattern':'public\x20fun\x20arb_withdraw'},{'file':'order.move','line':0x1a,'pattern':'E_ORDER_ALREADY_CLAIMED'},{'file':'order.move','line':0x79,'pattern':'option::is_none(&self.claimed_by)'}]},{'id':'R5','class':'remedy','name':'Indemnity\x20paid\x20from\x20the\x20service\x20compensation\x20pool\x20(capped\x20at\x203x\x20the\x20order)','actor':'merchant','precondition':['R2'],'onchain':'expressible_with_gap','chainFootprint':{'node':'closed_cancel','moneyEffect':'compensate'},'commercialSemantics':'The\x20compensation\x20payout\x20is\x20a\x20commercial\x20track\x20from\x20the\x20service\x20pool\x20that\x20never\x20moves\x20the\x20order\x20escrow,\x20capped\x20by\x20the\x20protocol\x20multiple\x20at\x20three\x20times\x20the\x20order\x20amount.\x20The\x20statutory\x20floor\x20regime\x20is\x20stricter\x20than\x20the\x20cap\x20can\x20express\x20—\x20a\x20known\x20chain-conflict\x20the\x20catalog\x20discloses\x20and\x20escalates.\x20Fund\x20coverage\x20is\x20advisory\x20only;\x20under-funded\x20SKUs\x20fail\x20loudly\x20at\x20buy\x20or\x20claim\x20time.','gapPredicate':{'probe':'3x\x20coverage\x20refusal'},'evidence':[{'file':'arb.move','line':0x15,'pattern':'const\x20MAX_INDEMNITY_MULTIPLE:u64\x20=\x203'},{'file':'arb.move','line':0x21d,'pattern':'saturating_mul'},{'file':'service.move','line':0x24c,'pattern':'public\x20fun\x20compensation_claim'}]},{'id':'R6','class':'remedy','name':'Refund\x20payout\x20is\x20two-step:\x20the\x20rail\x20pays\x20the\x20order,\x20the\x20buyer\x20extracts','actor':'buyer','precondition':['R2'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','moneyEffect':'refund'},'commercialSemantics':'The\x20refund\x20rail\x20pays\x20the\x20order\x20object,\x20not\x20a\x20wallet:\x20the\x20buyer\x20signs\x20a\x20second\x20owner\x20extraction\x20call\x20to\x20sweep\x20the\x20funds\x20out.\x20The\x20two-step\x20shape\x20is\x20disclosed\x20as\x20a\x20UX\x20obligation\x20—\x20surfacing\x20it\x20is\x20the\x20builder\x27s\x20duty,\x20because\x20the\x20chain\x20will\x20not\x20nag.','evidence':[{'file':'order.move','line':0x15e,'pattern':'public\x20fun\x20owner_receive'},{'file':'service.move','line':0x265,'pattern':'order::owner(order)'}]},{'id':'R7','class':'remedy','name':'Escrowed\x20principal\x20after\x20an\x20award\x20exits\x20via\x20the\x20settle\x20rail\x20at\x20the\x20claim-window\x20cutoff','actor':'keeper','precondition':['R2'],'onchain':'expressible_with_gap','chainFootprint':{'node':'completed','forward':'SettleAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'release'},'commercialSemantics':'Under\x20the\x20shipped\x20either\x20pairing\x20one\x20paid\x20indemnity\x20closes\x20the\x20ruled-refund\x20rail\x20and\x20the\x20principal\x20exits\x20through\x20the\x20ordinary\x20settlement\x20at\x20the\x20cutoff\x20—\x20there\x20is\x20no\x20award-triggered\x20sweep\x20since\x20the\x20C-6\x20surgery.\x20The\x20gap:\x20the\x20exit\x20is\x20a\x20clock,\x20not\x20an\x20award,\x20so\x20a\x20late-claiming\x20buyer\x20on\x20a\x20settled\x20order\x20rides\x20the\x20compensation\x20pool\x20instead.','guardKeyProbe':'settle_window_gate','gapPredicate':{'probe':'principal\x20exit[^\x22]{0,10}via\x20the\x20settle\x20rail'},'evidence':[]},{'id':'R8','class':'remedy','name':'Partial-remedy\x20amount\x20priced\x20off-chain\x20(ruling\x20price\x20or\x20consented\x20messenger\x20quote)','actor':'merchant','precondition':['R1'],'onchain':'expressible_with_gap','chainFootprint':{'node':'refunded','moneyEffect':'refund'},'commercialSemantics':'The\x20partial\x20amount\x20is\x20a\x20self-disciplined\x20quote\x20the\x20chain\x20never\x20forces\x20anyone\x20to\x20honor;\x20high-value\x20or\x20low-trust\x20rounds\x20mount\x20the\x20chain-enforced\x20consent\x20branch\x20where\x20an\x20equal-bytes\x20acceptance\x20must\x20exist\x20before\x20the\x20rail\x20fires.\x20The\x20fairness\x20of\x20the\x20number\x20stays\x20a\x20business\x20matter.','gapPredicate':{'probe':'SELF-DISCIPLINED'},'evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'R9','class':'remedy','name':'Regulatory\x20surface:\x20below-cost\x20dumping,\x20food-safety\x20traceability,\x20platform-work\x20rules','actor':'platform','precondition':['M2'],'onchain':'disclosure_only','disclosureProbe':'regulated\x20retail\x20surface','commercialSemantics':'Community\x20group-buy\x20is\x20a\x20regulated\x20retail\x20surface;\x20food-safety\x20traceability,\x20cold-chain\x20records\x20and\x20below-cost\x20rules\x20are\x20off-chain\x20compliance.\x20The\x20roster\x20and\x20permission\x20rails\x20carry\x20no\x20employment\x20semantics\x20and\x20the\x20disclosure\x20says\x20so.','evidence':[]},{'id':'R10','class':'remedy','name':'Platform\x20advances\x20first-responsibility\x20compensation,\x20then\x20recovers\x20from\x20the\x20producer','actor':'platform','precondition':['R1'],'onchain':'expressible_with_gap','chainFootprint':{'node':'closed_cancel','moneyEffect':'compensate'},'commercialSemantics':'The\x20service\x20compensation\x20pool\x20funds\x20first-responsibility\x20payouts,\x20but\x20the\x20after-the-fact\x20recovery\x20from\x20the\x20producer\x20or\x20leader\x20has\x20no\x20chain\x20primitive\x20at\x20all\x20—\x20it\x20is\x20a\x20pure\x20off-chain\x20contract\x20matter.\x20DISCLOSURE\x20CURED\x20(v194,\x20FLOWS\x20ddmc\x20D1):\x20the\x20template\x27s\x20build_notes\x20now\x20carry\x20the\x20FIRST-RESPONSIBILITY\x20PAYOUT\x20AND\x20RECOVERY\x20red-line\x20note,\x20so\x20the\x20strict\x20gap\x20probe\x20is\x20expected\x20to\x20HIT\x20and\x20the\x20step\x20is\x20disclosed;\x20the\x20recovery\x20side\x20itself\x20stays\x20off-chain\x20(no\x20chain\x20primitive\x20exists),\x20not\x20a\x20covered\x20one.','gapPredicate':{'probe':'recover[^\x22]{0,80}from\x20the\x20producer'},'evidence':[{'file':'service.move','line':0x24c,'pattern':'public\x20fun\x20compensation_claim'}]},{'id':'P1','class':'post','name':'Buyer\x20submits\x20a\x20review\x20(content\x20leg:\x20the\x20rating\x20row\x20must\x20exist)','actor':'buyer','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'reviewed','forward':'SubmitReview','prev':'completed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20review\x20rail\x20is\x20money-free\x20by\x20topology\x20and\x20closes\x20a\x20fixed\x20number\x20of\x20days\x20after\x20the\x20picked_up\x20entry\x20—\x20the\x20real\x20benchmark\x27s\x20reviews-shut-after-fortnight\x20semantic.\x20A\x20review\x20that\x20never\x20landed\x20cannot\x20pass\x20the\x20edge:\x20the\x20content\x20leg\x20probes\x20the\x20order-keyed\x20rating\x20row\x20under\x20the\x20review\x20plan.','guardKeyProbe':'review_submit','evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'P2','class':'post','name':'Review\x20reward\x20claim\x20(if\x20the\x20merchant\x20armed\x20one)','actor':'buyer','precondition':['P1'],'onchain':'expressible','chainFootprint':{'node':'reviewed','moneyEffect':'reward'},'commercialSemantics':'Review\x20incentives\x20are\x20a\x20reward\x20track\x20separate\x20from\x20the\x20escrow\x20rails;\x20the\x20claim\x20pays\x20the\x20reward\x20balance\x20to\x20the\x20caller.\x20The\x20credential\x20is\x20kernel-owned\x20so\x20a\x20review\x20cannot\x20be\x20double-claimed\x20across\x20accounts\x20of\x20the\x20same\x20buyer.','evidence':[{'file':'reward.move','line':0xe3,'pattern':'public\x20fun\x20claim<T>'}]},{'id':'P3','class':'post','name':'Keeper\x27s\x20once-only\x20reopen\x20of\x20the\x20window\x20after\x20review\x20(bookkeeping\x20leg)','actor':'keeper','precondition':['P1'],'onchain':'expressible','chainFootprint':{'node':'claim_window','forward':'ReopenWindowAfterReview','prev':'reviewed','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'A\x20bounded\x20keeper-only\x20reopen\x20exists\x20for\x20post-settlement\x20bookkeeping:\x20one\x20episode\x20per\x20order,\x20anchored\x20on\x20the\x20first\x20reviewed\x20entry,\x20never\x20re-arming.\x20Drained\x20refund\x20rails\x20absorb\x20the\x20re-entry\x20as\x20a\x20no-op\x20—\x20the\x20once-slot\x20abort\x20is\x20the\x20loud\x20boundary.','guardKeyProbe':'reopen_window','evidence':[{'file':'allocation.move','line':0x50,'pattern':'const\x20E_ONCE_TRIGGERED:\x20u64\x20=\x2016'}]},{'id':'P4','class':'post','name':'Leader\x27s\x20rebate\x20pass-through\x20to\x20group\x20members\x20(off-chain\x20settlement)','actor':'merchant','precondition':['M11'],'onchain':'disclosure_only','disclosureProbe':'rebates\x20OFF-CHAIN','commercialSemantics':'Member-level\x20rebates\x20are\x20paid\x20off-chain\x20out\x20of\x20the\x20leader\x27s\x20single\x20commission\x20leg;\x20the\x20chain\x20will\x20never\x20see\x20or\x20enforce\x20them.\x20One\x20disclosed\x20layer\x20is\x20the\x20anti-pyramid\x20boundary\x20and\x20the\x20disclosure\x20says\x20exactly\x20that.','evidence':[]},{'id':'P5','class':'post','name':'Repurchase:\x20join\x20the\x20next\x20daily\x20round','actor':'buyer','precondition':['M11'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'The\x20next\x20round\x20is\x20a\x20fresh\x20join\x20guarded\x20by\x20the\x20runtime\x20buy\x20switch\x20—\x20the\x20sanctioned\x20batch\x20boundary.\x20Full\x20machine\x20reuse\x20across\x20rounds\x20(advance\x20gates\x20re-reading\x20a\x20cutoff\x20row)\x20is\x20filed\x20for\x20the\x20protocol\x20window;\x20today\x20a\x20new\x20round\x20redeploys\x20the\x20service\x20or\x20runs\x20under\x20the\x20disclosed\x20clock\x20discipline.','gapPredicate':{'probe':'repository\x20cutoff\x20row'},'evidence':[{'file':'service.move','line':0x4f1,'pattern':'public\x20fun\x20buy_guard_set'}]},{'id':'P6','class':'post','name':'Leader\x20commission\x20Entity\x20leg\x20paid\x20at\x20settlement\x20(benchmark\x200)','actor':'merchant','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'completed','moneyEffect':'release'},'commercialSemantics':'The\x20leader\x27s\x20single\x20disclosed\x20commission\x20Entity\x20leg\x20is\x20the\x20only\x20on-chain\x20money\x20the\x20community\x20organizer\x20ever\x20receives;\x20it\x20defaults\x20to\x20zero\x20under\x20the\x20P2P\x20doctrine\x20and\x20can\x20only\x20be\x20raised\x20through\x20declared\x20build\x20surfaces.\x20A\x20slot-based\x20person\x20leg\x20is\x20unfundable\x20and\x20forbidden\x20as\x20a\x20second\x20layer.','evidence':[{'file':'allocation.move','line':0x271,'pattern':'Recipient::Entity'}]}],'invariants':[{'id':'INV-DM-STOCKOUT','statement':'Stockout\x20and\x20risk-control\x20takedown\x20both\x20promise\x20a\x20same-day\x20full\x20refund\x20to\x20affected\x20buyers;\x20the\x20template\x20must\x20always\x20ship\x20a\x20RefundOutOfStock\x20exit\x20edge\x20(paired\x20with\x20the\x20CancelByPlatform\x20kill)\x20so\x20the\x20promise\x20is\x20executable,\x20not\x20prose.\x20Standing\x20check\x20(CURED\x202026-11-06,\x20wave-3):\x20both\x20edges\x20are\x20mounted\x20(cutoff_fired\x20->\x20closed_cancel,\x20refund-rail\x20slot\x201001,\x20node-gated\x20tpl_forward_node_check)\x20—\x20deleting\x20the\x20stockout\x20forward\x20re-fires\x20this\x20invariant.','violation':{'whileMissingForward':'RefundOutOfStock'},'evidence':[]},{'id':'INV-DM-ARBCAP','statement':'The\x20protocol\x20caps\x20the\x20arbitration\x20indemnity\x20at\x20three\x20times\x20the\x20order\x20amount,\x20while\x20the\x20statutory\x20floor\x20for\x20substandard\x20goods\x20is\x20ten\x20times\x20the\x20price\x20(or\x20three\x20times\x20the\x20loss\x20with\x20a\x20minimum\x20payout)\x20—\x20the\x20cap\x20constant\x20cannot\x20express\x20the\x20statutory\x20minimum,\x20so\x20a\x20compliant\x20ruling\x20regime\x20needs\x20a\x20disclosure\x20or\x20a\x20protocol\x20raise,\x20never\x20a\x20silent\x20cap.','chainConflict':'indemnity\x20cap\x20multiple\x20(3)\x20is\x20BELOW\x20the\x20statutory\x20compensation\x20floor\x20(10x\x20price\x20/\x203x\x20loss\x20with\x20minimum)\x20for\x20the\x20fresh-goods\x20retail\x20case','evidence':[{'file':'arb.move','line':0x15,'pattern':'const\x20MAX_INDEMNITY_MULTIPLE:u64\x20=\x203'},{'file':'arb.move','line':0x21d,'pattern':'saturating_mul'}]},{'id':'INV-DM-AWARDFLOOR','statement':'The\x20buyer-won\x20refund\x20rail\x20has\x20no\x20minimum-award\x20leg\x20by\x20default:\x20a\x20symbolic\x20award\x20unlocks\x20the\x20full\x20principal\x20refund\x20because\x20the\x20floor\x20identifier\x20reads\x20zero\x20and\x20this\x20catalog\x20emits\x20no\x20floor\x20knob.\x20Builders\x20serving\x20high-trust\x20volume\x20should\x20declare\x20a\x20floor,\x20or\x20the\x20won\x20rail\x20must\x20be\x20treated\x20as\x20a\x20refund\x20rail\x20with\x20a\x20symbolic\x20trigger.','chainConflict':'the\x20won-rail\x20minimum\x20indemnity\x20leg\x20(identifier\x205)\x20ships\x20unset\x20on\x20this\x20template,\x20so\x20any\x20positive\x20indemnity\x20satisfies\x20the\x20won\x20root','evidence':[{'file':'arb.move','line':0xa6,'pattern':'public\x20struct\x20Indemnity\x20has\x20copy,\x20drop,\x20store'}]},{'id':'INV-DM-RETURNWINDOW','statement':'The\x20after-sales\x20filing\x20window\x20is\x20parameterized\x20from\x20the\x20picked_up\x20entry\x20and\x20the\x20benchmark\x20sets\x20it\x20at\x2048\x20hours\x20for\x20fresh\x20goods;\x20non-fresh\x20categories\x20carry\x20a\x20statutory\x20no-reason\x20return\x20period\x20of\x20seven\x20days,\x20so\x20a\x20category-aware\x20build\x20must\x20re-parameterize\x20the\x20window\x20instead\x20of\x20trusting\x20the\x20benchmark\x20default.','chainConflict':'benchmark\x20after-sales\x20window\x20(48h)\x20is\x20shorter\x20than\x20the\x20statutory\x207-day\x20no-reason\x20return\x20period\x20for\x20non-fresh\x20categories','evidence':[{'file':'order.move','line':0xcc,'pattern':'public\x20fun\x20items(self:&Order)'}]}]};
|
|
1
|
+
export const DUODUO_MAICAI_ORACLE={'productRef':'duoduo-maicai','products':['duoduo-maicai','meituan-youxuan','taocaicai'],'oracleVersion':'1.0.0','steps':[{'id':'M1','class':'offchain','name':'Browse\x20the\x20daily\x20SKU\x20catalog,\x20platform-priced,\x20refreshed\x20each\x20round','actor':'buyer','precondition':[],'onchain':'not_applicable','commercialSemantics':'The\x20per-round\x20catalog\x20and\x20its\x20prices\x20are\x20locked\x20at\x20listing\x20time\x20by\x20the\x20platform;\x20browsing,\x20search\x20and\x20recommendation\x20are\x20pure\x20off-chain\x20app\x20concerns\x20the\x20chain\x20never\x20sees.','evidence':[]},{'id':'M2','class':'offchain','name':'Pick\x20the\x20neighborhood\x20pickup\x20point\x20and\x20join\x20the\x20round','actor':'buyer','precondition':['M1'],'onchain':'not_applicable','commercialSemantics':'Choosing\x20the\x20pickup\x20point\x20maps\x20to\x20the\x20build-time\x20point_type\x20selector\x20(staffed\x20shelf\x20/\x20automated\x20locker\x20/\x20batch\x20handover)\x20and\x20the\x20community\x20boundary\x20is\x20enforced\x20by\x20the\x20buy-side\x20blocklist\x20guard\x20or\x20left\x20open;\x20neither\x20is\x20a\x20per-order\x20chain\x20act.','evidence':[]},{'id':'M3','class':'main','name':'Pay\x20the\x20join\x20price\x20into\x20escrow\x20(single\x20total,\x20no\x20dynamic\x20fee)','actor':'buyer','precondition':['M2'],'onchain':'expressible','chainFootprint':{'node':'paid','forward':'Enter','prev':'','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'One\x20atomic\x20buy\x20at\x20the\x20listed\x20price:\x20the\x20join\x20total\x20is\x20escrowed\x20in\x20a\x20single\x20transaction\x20and\x20the\x20platform\x20has\x20committed\x20the\x20whole\x20round\x27s\x20supply\x20up\x20front\x20—\x20there\x20is\x20no\x20per-order\x20pricing\x20oracle\x20by\x20design.\x20The\x20buy-side\x20guard\x20can\x20refuse\x20barred\x20addresses\x20at\x20this\x20entry.','evidence':[{'file':'service.move','line':0x1c9,'pattern':'public\x20fun\x20buy<T>'}]},{'id':'M4','class':'main','name':'Round\x20closes\x20at\x20the\x20shared\x20absolute\x20cutoff\x20(keeper\x20flips\x20the\x20buy\x20switch)','actor':'keeper','precondition':['M3'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20round\x20boundary\x20is\x20ONE\x20immutable\x20epoch-ms\x20constant\x20shared\x20by\x20every\x20order;\x20the\x20sanctioned\x20TODAY\x20mechanism\x20is\x20the\x20runtime\x20buy-guard\x20switch\x20the\x20keeper\x27s\x20cron\x20sets\x20at\x20the\x20cutoff\x20and\x20clears\x20when\x20the\x20next\x20round\x20opens.\x20The\x20gap:\x20the\x20switch\x20fixes\x20the\x20buy\x20side\x20only\x20—\x20full\x20machine\x20reuse\x20across\x20rounds\x20still\x20needs\x20the\x20disclosed\x20publisher-clock\x20discipline\x20or\x20a\x20redeploy.','gapPredicate':{'probe':'publisher-clock\x20discipline'},'evidence':[{'file':'service.move','line':0x4f1,'pattern':'public\x20fun\x20buy_guard_set'}]},{'id':'M5','class':'main','name':'Cutoff\x20fires\x20and\x20the\x20batch\x20release\x20opens\x20(one\x20clock\x20for\x20the\x20whole\x20round)','actor':'keeper','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'cutoff_fired','forward':'CutoffRelease','prev':'paid','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20release\x20gate\x20reads\x20the\x20same\x20shared\x20constant\x20the\x20cancel\x20window\x20reads,\x20so\x20a\x20late\x20joiner\x20after\x20the\x20cutoff\x20cannot\x20unwind\x20the\x20committed\x20batch\x20and\x20cancel\x20and\x20release\x20are\x20mutually\x20exclusive\x20in\x20time.\x20Per-order\x20entry+duration\x20anchoring\x20would\x20dissolve\x20the\x20batch\x20and\x20is\x20the\x20documented\x20anti-pattern.','guardKeyProbe':'cutoff_open','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'M6','class':'main','name':'Platform\x20consolidates,\x20routes\x20cold\x20chain\x20and\x20dispatches\x20to\x20the\x20point\x20(batch\x20logistics)','actor':'keeper','precondition':['M4'],'onchain':'unresolvable','unresolvableRef':'S7','disclosureProbe':'batch\x20dispatch\x20is\x20off-chain','commercialSemantics':'Consolidation,\x20cold-chain\x20routing,\x20point\x20assignment\x20and\x20the\x20delivery\x20schedule\x20are\x20off-chain\x20keeper\x20duties;\x20the\x20chain\x20has\x20no\x20dispatch,\x20route\x20or\x20temperature\x20primitive,\x20and\x20the\x20only\x20footprints\x20are\x20the\x20arrival\x20evidence\x20rows\x20and\x20the\x20staff\x20roster.\x20The\x20order\x20binds\x20to\x20the\x20service\x20and\x20waits\x20for\x20goods,\x20never\x20for\x20a\x20route.','evidence':[{'file':'order.move','line':0x49,'pattern':'service:\x20address'}]},{'id':'M7','class':'main','name':'Point\x20staff\x20shelve\x20/\x20deposit\x20/\x20hand\x20over\x20the\x20arrival\x20(custody\x20evidence)','actor':'fulfiller','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'at_point','forward':'ShelveAtPoint','prev':'cutoff_fired','identity':'named_operator','moneyEffect':'none'},'commercialSemantics':'The\x20point\x20staff\x20advances\x20the\x20arrival\x20on\x20a\x20named-operator\x20roster\x20that\x20is\x20both\x20admission\x20and\x20exclusion\x20since\x20the\x20v138\x20member\x20gate:\x20an\x20unlisted\x20address\x20cannot\x20advance.\x20Exactly\x20one\x20of\x20the\x20three\x20arrival\x20designs\x20survives\x20each\x20build\x20(selector\x20exclusivity),\x20each\x20with\x20its\x20own\x20writer-bound\x20evidence\x20row.','guardKeyProbe':'(shelve_evidence|locker_deposit_evidence|handover_manifest_evidence)','evidence':[{'file':'progress.move','line':0x124,'pattern':'fun\x20IsNamedOperator'}]},{'id':'M8','class':'main','name':'Platform\x20schedules\x20the\x20pickup\x20window\x20and\x20notifies\x20the\x20community','actor':'keeper','precondition':['M7'],'onchain':'disclosure_only','disclosureProbe':'delivery\x20schedule[^\x22]{0,40}off-chain','commercialSemantics':'Slotting\x20the\x20pickup\x20window\x20and\x20notifying\x20the\x20group\x20are\x20off-chain\x20dispatch\x20duties;\x20the\x20disclosure\x20carries\x20the\x20honest\x20limit\x20that\x20the\x20chain\x20promises\x20no\x20ETA,\x20only\x20the\x20evidence-backed\x20arrival\x20state.','evidence':[]},{'id':'M9','class':'main','name':'Buyer\x20collects\x20at\x20the\x20point\x20(dual\x20confirmation:\x20buyer\x20identity\x20+\x20staff\x20row)','actor':'buyer','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'picked_up','forward':'ConfirmPickup','prev':'at_point','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Neither\x20party\x20alone\x20advances:\x20the\x20buyer\x27s\x20254-anchored\x20identity\x20confirm\x20AND\x20the\x20point\x27s\x20writer-bound\x20redemption\x20row\x20must\x20both\x20exist.\x20The\x20redemption\x20row\x20lives\x20under\x20its\x20own\x20policy\x20so\x20it\x20can\x20never\x20collide\x20with\x20the\x20arrival\x20row\x20it\x20follows\x20—\x20the\x20legacy\x20single-policy\x20shape\x20aborted\x20the\x20first\x20collection.','guardKeyProbe':'pickup_confirm','evidence':[{'file':'progress.move','line':0x48,'pattern':'TASK_BINDING_IDENTIFIER:\x20u8\x20=\x20254'},{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'M10','class':'main','name':'Keeper\x20opens\x20the\x20serial\x20claim\x20window\x20(the\x20order\x20rests\x20at\x20picked_up)','actor':'keeper','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'claim_window','forward':'OpenClaimWindow','prev':'picked_up','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'The\x20keeper-only\x20edge\x20opens\x20the\x20TPL-09\x20serial\x20dispute\x20window;\x20re-entry\x20appends\x20a\x20fresh\x20history\x20entry\x20and\x20re-anchors\x20the\x20window\x20clocks\x20on\x20the\x20last\x20entry,\x20so\x20a\x20resumed\x20or\x20re-opened\x20order\x20cannot\x20reuse\x20a\x20stale\x20anchor.','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'M11','class':'main','name':'Window\x20elapses:\x20settlement\x20pays\x20the\x20platform\x20supplier\x20and\x20the\x20leader\x27s\x20single\x20commission\x20leg','actor':'merchant','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'completed','forward':'SettleAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'release'},'commercialSemantics':'The\x20settlement\x20allocator\x20splits\x20the\x20pool\x20into\x20the\x20supplier\x20Entity\x20share\x20and\x20the\x20leader\x27s\x20single\x20disclosed\x20commission\x20Entity\x20leg\x20(benchmark\x200,\x20P2P\x20doctrine),\x20plus\x20the\x20rate-0\x20order\x20anchor\x20that\x20binds\x20the\x20rail\x20to\x20this\x20order.\x20Commission\x20defaults\x20to\x20zero\x20and\x20any\x20override\x20must\x20stay\x20a\x20single\x20layer\x20—\x20multi-layer\x20commission\x20is\x20the\x20pyramid\x20pattern\x20regulators\x20target.','guardKeyProbe':'settle_window_gate','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc<T>'},{'file':'allocation.move','line':0x271,'pattern':'Recipient::Entity'}]},{'id':'E1','class':'exception','name':'No\x20all-or-nothing\x20threshold:\x20the\x20round\x20ships\x20regardless\x20of\x20volume','actor':'platform','precondition':['M2'],'onchain':'not_applicable','commercialSemantics':'The\x20platform-supplied\x20model\x20commits\x20supply\x20up\x20front\x20—\x20there\x20is\x20no\x20aggregate\x20release-XOR-refund\x20rail\x20on\x20this\x20shape\x20by\x20declaration.\x20Builders\x20who\x20want\x20a\x20threshold\x20take\x20the\x20sibling\x20leader-sourced\x20crowdfunding\x20overlay\x20instead.','evidence':[]},{'id':'E2','class':'exception','name':'Buyer\x20cancels\x20before\x20the\x20shared\x20cutoff\x20(full\x20refund,\x20no\x20fee)','actor':'buyer','precondition':['M3'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelBeforeCutoff','prev':'paid','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Before\x20the\x20cutoff\x20the\x20platform\x20has\x20committed\x20nothing\x20per-order,\x20so\x20the\x20cancel\x20is\x20free\x20and\x20lands\x20on\x20the\x20full-refund\x20rail.\x20The\x20window\x20is\x20bounded\x20by\x20the\x20same\x20absolute\x20constant\x20the\x20release\x20gate\x20reads\x20—\x20the\x20former\x20legless\x20cancel\x20that\x20let\x20an\x20expired\x20round\x20be\x20unwound\x20losslessly\x20is\x20cured.','guardKeyProbe':'cancel_before_cutoff','evidence':[{'file':'allocation.move','line':0x1f4,'pattern':'public\x20fun\x20alloc<T>'}]},{'id':'E3','class':'exception','name':'Post-cutoff\x20personal\x20cancel\x20is\x20refused\x20(fresh\x20goods\x20are\x20committed)','actor':'buyer','precondition':['M5'],'onchain':'not_applicable','commercialSemantics':'After\x20the\x20cutoff\x20there\x20is\x20deliberately\x20no\x20buyer-side\x20unwind:\x20the\x20goods\x20are\x20procured\x20and\x20the\x20shape\x20carries\x20no\x20edge\x20for\x20it.\x20The\x20real\x20product\x27s\x20policy\x20(contact\x20the\x20platform\x20for\x20a\x20manual\x20refund)\x20is\x20an\x20off-chain\x20courtesy,\x20not\x20a\x20chain\x20route.','evidence':[]},{'id':'E4','class':'exception','name':'Risk-control\x20takedown\x20refunds\x20the\x20buyer\x20on\x20cancellation\x20day','actor':'platform','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'CancelByPlatform','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'CURED\x20(wave-3,\x202026-11-06):\x20the\x20platform-side\x20kill\x20is\x20mounted\x20—\x20CancelByPlatform\x20(cutoff_fired\x20->\x20closed_cancel,\x20refund-rail\x20slot\x201001,\x20node-gated\x20tpl_forward_node_check\x20/\x20platform_cancel)\x20refunds\x20every\x20committed\x20order\x20in\x20full\x20when\x20the\x20round\x20is\x20halted\x20(regulatory\x20recall,\x20supplier\x20insolvency,\x20force\x20majeure).\x20The\x20edge\x20cannot\x20fire\x20pre-commitment\x20(node-gated\x20on\x20the\x20cutoff\x20entry)\x20or\x20claw\x20back\x20a\x20settled\x20round.','evidence':[]},{'id':'E5','class':'exception','name':'Stockout\x20auto-refunds\x20the\x20affected\x20buyers\x20the\x20same\x20day','actor':'platform','precondition':['M5'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'RefundOutOfStock','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'CURED\x20(wave-3,\x202026-11-06):\x20the\x20stockout\x20edge\x20is\x20mounted\x20—\x20RefundOutOfStock\x20(cutoff_fired\x20->\x20closed_cancel,\x20refund-rail\x20slot\x201001,\x20node-gated\x20tpl_forward_node_check\x20/\x20out_of_stock_refund)\x20gives\x20the\x20unfillable\x20consolidated\x20batch\x20the\x20benchmark\x27s\x20same-day\x20full\x20refund\x20through\x20the\x20SAME\x20refund_full\x20rail\x20(one\x20order-anchored\x20channel,\x20never\x20a\x20second).\x20The\x20paired\x20standing\x20invariant\x20INV-DM-STOCKOUT\x20is\x20kept\x20and\x20re-fires\x20while\x20the\x20forward\x20is\x20missing.','evidence':[]},{'id':'E6','class':'exception','name':'Short\x20count\x20or\x20short\x20weight\x20at\x20collection:\x20proportional\x20compensation','actor':'fulfiller','precondition':['M9'],'onchain':'expressible_with_gap','chainFootprint':{'node':'refunded','forward':'CompensateBadItem','prev':'return_requested','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20evidenced\x20compensation\x20branch\x20pays\x20on\x20the\x20point\x20staff\x27s\x20approval\x20row,\x20but\x20the\x20after-sales\x20rail\x20pays\x20the\x20whole\x20pool\x20—\x20a\x20proportional\x20amount\x20needs\x20the\x20disclosed\x20off-chain\x20pricing\x20discipline\x20(ruling\x20price\x20or\x20a\x20confirmed\x20messenger\x20quote),\x20never\x20a\x20silent\x20staff\x20decision.','guardKeyProbe':'bad_item_evidence','gapPredicate':{'probe':'price\x20the\x20amount\x20ONLY\x20by\x20an\x20arbitration\x20ruling'},'evidence':[{'file':'allocation.move','line':0xab,'pattern':'const\x20AllocationMode_Amount:u8\x20=\x200'}]},{'id':'E7','class':'exception','name':'Buyer\x20never\x20collects:\x20self-serve\x20refund\x20inside\x20the\x20bounded\x20pickup\x20window','actor':'buyer','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'RefundUnclaimed','prev':'at_point','identity':'order_holder','moneyEffect':'refund'},'commercialSemantics':'Goods\x20never\x20collected\x20refund\x20in\x20full\x20while\x20the\x20closing\x20window\x20from\x20the\x20at_point\x20entry\x20is\x20alive\x20—\x20the\x20abandon\x20self-heal.\x20Goods\x20ownership\x20after\x20the\x20refund\x20has\x20no\x20on-chain\x20primitive;\x20disposal\x20follows\x20the\x20disclosed\x20off-chain\x20point\x20agreement.','guardKeyProbe':'unclaimed_refund','evidence':[{'file':'progress.move','line':0x2e3,'pattern':'public\x20fun\x20next'}]},{'id':'E8','class':'exception','name':'Window\x20closed,\x20still\x20uncollected:\x20keeper\x27s\x20late\x20exit\x20per\x20the\x20unclaimed_exit\x20selector','actor':'keeper','precondition':['M7'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'RefundUnclaimedLate','prev':'at_point','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20default\x20arm\x20refunds\x20the\x20buyer\x27s\x20principal\x20in\x20full\x20once\x20the\x20pickup\x20window\x20closes\x20—\x20the\x20real\x20next-day\x20refund\x20convention.\x20The\x20explicit\x20opt-in\x20arm\x20settles\x20to\x20supplier\x20plus\x20leader\x20but\x20hard-carries\x20a\x20keeper\x20appeal\x20leg\x20so\x20the\x20buyer\x20keeps\x20a\x20non-arbitration\x20route\x20while\x20the\x20window\x20is\x20open.','guardKeyProbe':'unclaimed_refund_late','evidence':[{'file':'allocation.move','line':0x50,'pattern':'const\x20E_ONCE_TRIGGERED:\x20u64\x20=\x2016'}]},{'id':'E9','class':'exception','name':'Who\x20owns\x20refunded\x20unclaimed\x20goods\x20(post-refund\x20disposal)','actor':'platform','precondition':['E7'],'onchain':'disclosure_only','disclosureProbe':'Goods\x20ownership\x20AFTER\x20a\x20refund\x20has\x20no\x20on-chain\x20primitive','commercialSemantics':'The\x20chain\x20has\x20no\x20ownership\x20primitive\x20over\x20physical\x20goods;\x20after\x20the\x20refund\x20the\x20parcel\x20belongs\x20to\x20whoever\x20the\x20disclosed\x20point\x20agreement\x20says.\x20The\x20disclosure\x20is\x20the\x20contract\x20—\x20the\x20chain\x20will\x20never\x20adjudicate\x20the\x20leftover\x20lettuce.','evidence':[]},{'id':'E10','class':'exception','name':'Wrong\x20or\x20damaged\x20item\x20discovered\x20after\x20receipt:\x20after-sales\x20filing\x20from\x20picked_up','actor':'buyer','precondition':['M9'],'onchain':'expressible','chainFootprint':{'node':'return_requested','forward':'RequestReturn','prev':'picked_up','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Filing\x20opens\x20a\x20closing\x20window\x20from\x20the\x20immutable\x20picked_up\x20entry\x20and\x20requires\x20the\x20order-holder\x20identity\x20set\x20—\x20a\x20time-only\x20window\x20on\x20a\x20buyer\x20edge\x20would\x20admit\x20any\x20caller.\x20The\x20three-segment\x20after-sales\x20track\x20(file,\x20ship,\x20receive)\x20records\x20while\x20the\x20allocator\x20rail\x20pays.','guardKeyProbe':'return_window_pickup','evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E11','class':'exception','name':'Fresh\x20goods\x20spoiled:\x20refund-only\x20compensation\x20without\x20shipping\x20them\x20back','actor':'fulfiller','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'refunded','forward':'CompensateBadItem','prev':'return_requested','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'Nobody\x20ships\x20rotting\x20produce\x20back:\x20the\x20point\x20staff\x27s\x20evidenced\x20approval\x20advances\x20the\x20order\x20straight\x20into\x20the\x20refunded\x20terminal\x20and\x20the\x20rail\x20pays\x20there.\x20The\x20approval\x20row\x20is\x20order-keyed,\x20writer-bound\x20and\x20final\x20—\x20a\x20silent\x20staff\x20decision\x20is\x20structurally\x20impossible.','guardKeyProbe':'bad_item_evidence','evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'},{'file':'order.move','line':0x15e,'pattern':'public\x20fun\x20owner_receive'}]},{'id':'E12','class':'exception','name':'Non-fresh\x20item\x20return-and-refund:\x20ship\x20back,\x20point\x20receives\x20(RMA\x20row)','actor':'fulfiller','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'returned','forward':'ReturnReceived','prev':'return_in_transit','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20return\x20receipt\x20rides\x20the\x20same\x20staff\x20roster\x20and\x20lands\x20the\x20RMA\x20row\x20under\x20its\x20own\x20policy;\x20the\x20money\x20authority\x20is\x20the\x20after-sales\x20rail\x20that\x20pays\x20once\x20the\x20RMA\x20state\x20is\x20reached.\x20Distinct\x20rail\x20key\x20keeps\x20the\x20per-allocator\x20rate\x20sums\x20intact.','guardKeyProbe':'return_received','evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E13','class':'exception','name':'Return\x20parcel\x20lost\x20in\x20transit:\x20keeper\x27s\x20timed\x20refund\x20exit','actor':'keeper','precondition':['E12'],'onchain':'expressible','chainFootprint':{'node':'refunded','forward':'RefundLostReturn','prev':'return_in_transit','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'A\x20lost\x20return\x20cannot\x20strand\x20the\x20escrow:\x20after\x20the\x20transit\x20timeout\x20the\x20keeper\x20advances\x20the\x20parcel\x20state\x20into\x20the\x20refunded\x20terminal\x20so\x20the\x20buyer\x27s\x20money\x20returns\x20—\x20the\x20buyer\x20never\x20carries\x20the\x20return-leg\x20carrier\x20risk.','guardKeyProbe':'return_transit_timeout','evidence':[{'file':'allocation.move','line':0x50,'pattern':'const\x20E_ONCE_TRIGGERED:\x20u64\x20=\x2016'}]},{'id':'E14','class':'exception','name':'Goods\x20lost\x20or\x20damaged\x20between\x20warehouse\x20and\x20point\x20(carrier\x20claim)','actor':'platform','precondition':['M6'],'onchain':'disclosure_only','disclosureProbe':'TRANSIT\x20LOSS\x20IS\x20REMEDIED','commercialSemantics':'Leg-loss\x20before\x20the\x20point\x20is\x20the\x20platform\x27s\x20off-chain\x20carrier\x20claim;\x20the\x20disclosed\x20buyer\x20remedy\x20is\x20the\x20arbitration\x20route\x20into\x20the\x20full-refund\x20rail.\x20The\x20chain\x20records\x20no\x20carrier\x20insurance\x20semantics.','evidence':[]},{'id':'E15','class':'exception','name':'Point\x20closed\x20or\x20staff\x20roster\x20stale\x20when\x20the\x20batch\x20arrives','actor':'keeper','precondition':['M7'],'onchain':'expressible_with_gap','chainFootprint':{'node':'closed_cancel','forward':'RefundUnclaimedLate','prev':'at_point','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'Re-pointing\x20the\x20roster\x20is\x20an\x20off-chain\x20dispatch\x20act\x20—\x20the\x20roster\x20write\x20is\x20the\x20dispatch\x20disclosure\x20surface,\x20and\x20a\x20stalled\x20arrival\x20ends\x20in\x20the\x20same\x20bounded\x20unclaimed\x20exits.\x20No\x20dynamic\x20re-routing\x20primitive\x20exists\x20on\x20chain.','guardKeyProbe':'unclaimed_refund_late','gapPredicate':{'probe':'roster\x20write\x20is\x20the\x20dispatch\x20disclosure\x20surface'},'evidence':[{'file':'progress.move','line':0x124,'pattern':'fun\x20IsNamedOperator'}]},{'id':'E16','class':'exception','name':'Dispute\x20not\x20settled\x20in-community:\x20escalate\x20to\x20the\x20third-party\x20arbitration\x20object','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','forward':'FileDispute','prev':'claim_window','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'Filing\x20inside\x20the\x20closing\x20serial\x20window\x20stamps\x20the\x20dispute;\x20escalation\x20to\x20the\x20independent\x20arbitration\x20object\x20is\x20a\x20service-level\x20entry\x20that\x20checks\x20the\x20fee\x20and\x20the\x20op\x20permission\x20before\x20accepting\x20the\x20case.\x20The\x20order-holder\x20identity\x20legs\x20ship\x20in\x20the\x20guard\x20root\x20over\x20the\x20254\x20slot.','guardKeyProbe':'claim_filed','evidence':[{'file':'arbitration.move','line':0x22,'pattern':'E_FEE_NOT_ENOUGH'},{'file':'service.move','line':0x271,'pattern':'public\x20fun\x20dispute'}]},{'id':'E17','class':'exception','name':'Staff\x20forgets\x20the\x20redemption\x20row:\x20goods-holding\x20buyer\x20stalls','actor':'fulfiller','precondition':['M7'],'onchain':'expressible_with_gap','chainFootprint':{'node':'at_point','moneyEffect':'none'},'commercialSemantics':'The\x20residual\x20of\x20dual\x20confirmation\x20is\x20disclosed\x20both\x20directions:\x20the\x20counterparty\x20row\x20is\x20the\x20handover\x20baseline\x20the\x20dispute\x20surface\x20lacked,\x20and\x20a\x20forgetful\x20point\x20stalls\x20the\x20buyer\x20only\x20until\x20the\x20pickup\x20window\x20closes\x20—\x20then\x20the\x20refund-buyer\x20default\x20refunds\x20them\x20WITH\x20the\x20goods.\x20The\x20edge\x20is\x20never\x20swapped\x20to\x20a\x20staff-only\x20confirm.','gapPredicate':{'probe':'stalls\x20a\x20goods-holding\x20buyer'},'evidence':[{'file':'repository.move','line':0x36,'pattern':'E_POLICY_WRITE_GUARD_REQUIRED'}]},{'id':'E18','class':'exception','name':'Buyer\x20address,\x20phone\x20and\x20recipient\x20details\x20stay\x20off-chain\x20(PII)','actor':'platform','precondition':['M2'],'onchain':'unresolvable','unresolvableRef':'S6','disclosureProbe':'customer_required[^\x22]{0,80}never\x20gates','commercialSemantics':'Buyer\x20coordination\x20data\x20lives\x20in\x20the\x20off-chain\x20dispatch\x20and\x20point\x20systems.\x20The\x20declarative\x20required-info\x20field\x20never\x20gates\x20the\x20purchase\x20entry\x20on\x20this\x20shape,\x20and\x20no\x20on-chain\x20surface\x20should\x20ever\x20hold\x20the\x20neighbor\x27s\x20home\x20address.','evidence':[{'file':'service.move','line':0x100,'pattern':'customer_required:\x20vector<String>'}]},{'id':'E19','class':'exception','name':'Community\x20touch:\x20leader\x20passes\x20member\x20rebates\x20off-chain','actor':'merchant','precondition':['M9'],'onchain':'disclosure_only','disclosureProbe':'member\x20rebates\x20are\x20off-chain','commercialSemantics':'The\x20group\x27s\x20social\x20graph\x20is\x20enforced\x20off-chain;\x20the\x20leader\x27s\x20chain\x20footprint\x20is\x20exactly\x20one\x20commission\x20leg\x20at\x20settlement.\x20Any\x20deeper\x20member-level\x20split\x20on\x20chain\x20would\x20be\x20the\x20multi-layer\x20pattern\x20the\x20anti-pyramid\x20rule\x20forbids.','evidence':[]},{'id':'R1','class':'remedy','name':'Buyer\x20files\x20a\x20dispute\x20inside\x20the\x20serial\x20claim\x20window','actor':'buyer','precondition':['M10'],'onchain':'expressible','chainFootprint':{'node':'claim_filed','forward':'FileDispute','prev':'claim_window','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20filing\x20window\x20closes\x20one\x20claim-window\x20after\x20the\x20window\x20entry;\x20the\x20arbitration\x20entry\x20side\x20checks\x20the\x20case\x20fee\x20(escrowed\x20with\x20the\x20filing)\x20and\x20the\x20caller\x27s\x20op\x20permission.\x20The\x20serial\x20window\x20carries\x20the\x20dispute-exclusion\x20of\x20settlement\x20by\x20structure\x20—\x20settlement\x20cannot\x20fire\x20while\x20a\x20filed\x20claim\x20holds\x20the\x20order.','guardKeyProbe':'claim_filed','evidence':[{'file':'arbitration.move','line':0x169,'pattern':'order::assert_op_permission(order,\x20ctx)'},{'file':'arbitration.move','line':0x22,'pattern':'E_FEE_NOT_ENOUGH'}]},{'id':'R2','class':'remedy','name':'Buyer-won\x20ruling\x20re-routes\x20the\x20order\x20into\x20the\x20full-refund\x20rail','actor':'merchant','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','forward':'ArbRefund','prev':'claim_filed','identity':'permission_index','moneyEffect':'refund'},'commercialSemantics':'The\x20won\x20guard\x20reads\x20the\x20canonical\x20two-slot\x20root\x20—\x20this\x20arbitration\x20object,\x20positive\x20non-zero\x20indemnity\x20—\x20with\x20the\x20zero-award\x20exclusion\x20leg,\x20and\x20one\x20instance\x20guards\x20one\x20exit\x20edge.\x20The\x20zero-indemnity\x20(platform-favor)\x20root\x20deliberately\x20does\x20NOT\x20fit\x20this\x20edge;\x20that\x20ruling\x20takes\x20the\x20resume\x20rail.','guardKeyProbe':'arb_refund','evidence':[{'file':'arb.move','line':0xa6,'pattern':'public\x20struct\x20Indemnity\x20has\x20copy,\x20drop,\x20store'}]},{'id':'R3','class':'remedy','name':'Platform-favor\x20(zero-indemnity)\x20ruling\x20resumes\x20the\x20order\x20at\x20picked_up','actor':'merchant','precondition':['R1'],'onchain':'expressible','chainFootprint':{'node':'picked_up','forward':'ResumeAfterDismissal','prev':'claim_filed','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'A\x20dismissed\x20ruling\x20appends\x20a\x20fresh\x20picked_up\x20entry\x20and\x20re-anchors\x20the\x20window\x20clocks,\x20so\x20the\x20order\x20re-enters\x20the\x20normal\x20rest-and-collect\x20flow\x20and\x20the\x20keeper\x20can\x20re-open\x20a\x20fresh\x20claim\x20window\x20from\x20the\x20new\x20anchor.\x20Nothing\x20is\x20paid;\x20the\x20goods\x20stay\x20with\x20the\x20buyer\x20and\x20the\x20escrow\x20rides\x20on.','guardKeyProbe':'arb_dismissed_resume','evidence':[]},{'id':'R4','class':'remedy','name':'Buyer\x20withdraws\x20the\x20filed\x20dispute\x20(resumes\x20at\x20picked_up,\x20zero\x20money\x20legs)\x20(BANNED\x20-\x20D2\x20no-withdraw\x20doctrine:\x20a\x20filed\x20claim\x20reaches\x20a\x20RULING\x20instead)','actor':'buyer','precondition':['R1'],'onchain':'not_applicable','chainFootprint':{'node':'picked_up','prev':'claim_filed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'CURED\x20(wave-3,\x202026-11-06;\x20synced\x20from\x20the\x20sibling\x20leader-sourced\x20template\x27s\x20F-03\x20fix):\x20the\x20withdrawal\x20RESUMES\x20the\x20order\x20at\x20picked_up\x20with\x20zero\x20money\x20legs\x20—\x20the\x20former\x20shape\x20landed\x20it\x20in\x20the\x20closed_cancel\x20refund\x20terminal\x20while\x20the\x20buyer\x20may\x20still\x20hold\x20the\x20goods,\x20a\x20goods-holding\x20single-signature\x20arbitrage.\x20The\x20fresh\x20picked_up\x20entry\x20re-anchors\x20the\x20after-sales\x20windows\x20and\x20the\x20platform\x27s\x20remedies\x20stay\x20intact;\x20the\x20withdrawal\x20never\x20sweeps\x20the\x20indemnity.','guardKeyProbe':'withdraw_claim','evidence':[{'file':'arb.move','line':0x257,'pattern':'fun\x20withdraw<T>'},{'file':'arb.move','line':0x266,'pattern':'balance::withdraw_all'},{'file':'arbitration.move','line':0x21a,'pattern':'public\x20fun\x20arb_withdraw'},{'file':'order.move','line':0x1a,'pattern':'E_ORDER_ALREADY_CLAIMED'},{'file':'order.move','line':0x79,'pattern':'option::is_none(&self.claimed_by)'}]},{'id':'R5','class':'remedy','name':'Indemnity\x20paid\x20from\x20the\x20service\x20compensation\x20pool\x20(capped\x20at\x203x\x20the\x20order)','actor':'merchant','precondition':['R2'],'onchain':'expressible_with_gap','chainFootprint':{'node':'closed_cancel','moneyEffect':'compensate'},'commercialSemantics':'The\x20compensation\x20payout\x20is\x20a\x20commercial\x20track\x20from\x20the\x20service\x20pool\x20that\x20never\x20moves\x20the\x20order\x20escrow,\x20capped\x20by\x20the\x20protocol\x20multiple\x20at\x20three\x20times\x20the\x20order\x20amount.\x20The\x20statutory\x20floor\x20regime\x20is\x20stricter\x20than\x20the\x20cap\x20can\x20express\x20—\x20a\x20known\x20chain-conflict\x20the\x20catalog\x20discloses\x20and\x20escalates.\x20Fund\x20coverage\x20is\x20advisory\x20only;\x20under-funded\x20SKUs\x20fail\x20loudly\x20at\x20buy\x20or\x20claim\x20time.','gapPredicate':{'probe':'3x\x20coverage\x20refusal'},'evidence':[{'file':'arb.move','line':0x15,'pattern':'const\x20MAX_INDEMNITY_MULTIPLE:u64\x20=\x203'},{'file':'arb.move','line':0x21d,'pattern':'saturating_mul'},{'file':'service.move','line':0x24c,'pattern':'public\x20fun\x20compensation_claim'}]},{'id':'R6','class':'remedy','name':'Refund\x20payout\x20is\x20two-step:\x20the\x20rail\x20pays\x20the\x20order,\x20the\x20buyer\x20extracts','actor':'buyer','precondition':['R2'],'onchain':'expressible','chainFootprint':{'node':'closed_cancel','moneyEffect':'refund'},'commercialSemantics':'The\x20refund\x20rail\x20pays\x20the\x20order\x20object,\x20not\x20a\x20wallet:\x20the\x20buyer\x20signs\x20a\x20second\x20owner\x20extraction\x20call\x20to\x20sweep\x20the\x20funds\x20out.\x20The\x20two-step\x20shape\x20is\x20disclosed\x20as\x20a\x20UX\x20obligation\x20—\x20surfacing\x20it\x20is\x20the\x20builder\x27s\x20duty,\x20because\x20the\x20chain\x20will\x20not\x20nag.','evidence':[{'file':'order.move','line':0x15e,'pattern':'public\x20fun\x20owner_receive'},{'file':'service.move','line':0x265,'pattern':'order::owner(order)'}]},{'id':'R7','class':'remedy','name':'Escrowed\x20principal\x20after\x20an\x20award\x20exits\x20via\x20the\x20settle\x20rail\x20at\x20the\x20claim-window\x20cutoff','actor':'keeper','precondition':['R2'],'onchain':'expressible_with_gap','chainFootprint':{'node':'completed','forward':'SettleAfterWindow','prev':'claim_window','identity':'permission_index','moneyEffect':'release'},'commercialSemantics':'Under\x20the\x20shipped\x20either\x20pairing\x20one\x20paid\x20indemnity\x20closes\x20the\x20ruled-refund\x20rail\x20and\x20the\x20principal\x20exits\x20through\x20the\x20ordinary\x20settlement\x20at\x20the\x20cutoff\x20—\x20there\x20is\x20no\x20award-triggered\x20sweep\x20since\x20the\x20C-6\x20surgery.\x20The\x20gap:\x20the\x20exit\x20is\x20a\x20clock,\x20not\x20an\x20award,\x20so\x20a\x20late-claiming\x20buyer\x20on\x20a\x20settled\x20order\x20rides\x20the\x20compensation\x20pool\x20instead.','guardKeyProbe':'settle_window_gate','gapPredicate':{'probe':'principal\x20exit[^\x22]{0,10}via\x20the\x20settle\x20rail'},'evidence':[]},{'id':'R8','class':'remedy','name':'Partial-remedy\x20amount\x20priced\x20off-chain\x20(ruling\x20price\x20or\x20consented\x20messenger\x20quote)','actor':'merchant','precondition':['R1'],'onchain':'expressible_with_gap','chainFootprint':{'node':'refunded','moneyEffect':'refund'},'commercialSemantics':'The\x20partial\x20amount\x20is\x20a\x20self-disciplined\x20quote\x20the\x20chain\x20never\x20forces\x20anyone\x20to\x20honor;\x20high-value\x20or\x20low-trust\x20rounds\x20mount\x20the\x20chain-enforced\x20consent\x20branch\x20where\x20an\x20equal-bytes\x20acceptance\x20must\x20exist\x20before\x20the\x20rail\x20fires.\x20The\x20fairness\x20of\x20the\x20number\x20stays\x20a\x20business\x20matter.','gapPredicate':{'probe':'SELF-DISCIPLINED'},'evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'R9','class':'remedy','name':'Regulatory\x20surface:\x20below-cost\x20dumping,\x20food-safety\x20traceability,\x20platform-work\x20rules','actor':'platform','precondition':['M2'],'onchain':'disclosure_only','disclosureProbe':'regulated\x20retail\x20surface','commercialSemantics':'Community\x20group-buy\x20is\x20a\x20regulated\x20retail\x20surface;\x20food-safety\x20traceability,\x20cold-chain\x20records\x20and\x20below-cost\x20rules\x20are\x20off-chain\x20compliance.\x20The\x20roster\x20and\x20permission\x20rails\x20carry\x20no\x20employment\x20semantics\x20and\x20the\x20disclosure\x20says\x20so.','evidence':[]},{'id':'R10','class':'remedy','name':'Platform\x20advances\x20first-responsibility\x20compensation,\x20then\x20recovers\x20from\x20the\x20producer','actor':'platform','precondition':['R1'],'onchain':'expressible_with_gap','chainFootprint':{'node':'closed_cancel','moneyEffect':'compensate'},'commercialSemantics':'The\x20service\x20compensation\x20pool\x20funds\x20first-responsibility\x20payouts,\x20but\x20the\x20after-the-fact\x20recovery\x20from\x20the\x20producer\x20or\x20leader\x20has\x20no\x20chain\x20primitive\x20at\x20all\x20—\x20it\x20is\x20a\x20pure\x20off-chain\x20contract\x20matter.\x20DISCLOSURE\x20CURED\x20(v194,\x20FLOWS\x20ddmc\x20D1):\x20the\x20template\x27s\x20build_notes\x20now\x20carry\x20the\x20FIRST-RESPONSIBILITY\x20PAYOUT\x20AND\x20RECOVERY\x20red-line\x20note,\x20so\x20the\x20strict\x20gap\x20probe\x20is\x20expected\x20to\x20HIT\x20and\x20the\x20step\x20is\x20disclosed;\x20the\x20recovery\x20side\x20itself\x20stays\x20off-chain\x20(no\x20chain\x20primitive\x20exists),\x20not\x20a\x20covered\x20one.','gapPredicate':{'probe':'recover[^\x22]{0,80}from\x20the\x20producer'},'evidence':[{'file':'service.move','line':0x24c,'pattern':'public\x20fun\x20compensation_claim'}]},{'id':'P1','class':'post','name':'Buyer\x20submits\x20a\x20review\x20(content\x20leg:\x20the\x20rating\x20row\x20must\x20exist)','actor':'buyer','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'reviewed','forward':'SubmitReview','prev':'completed','identity':'order_holder','moneyEffect':'none'},'commercialSemantics':'The\x20review\x20rail\x20is\x20money-free\x20by\x20topology\x20and\x20closes\x20a\x20fixed\x20number\x20of\x20days\x20after\x20the\x20picked_up\x20entry\x20—\x20the\x20real\x20benchmark\x27s\x20reviews-shut-after-fortnight\x20semantic.\x20A\x20review\x20that\x20never\x20landed\x20cannot\x20pass\x20the\x20edge:\x20the\x20content\x20leg\x20probes\x20the\x20order-keyed\x20rating\x20row\x20under\x20the\x20review\x20plan.','guardKeyProbe':'review_submit','evidence':[{'file':'repository.move','line':0x3c,'pattern':'E_POLICY_WRITE_ONCE_CONFLICT'}]},{'id':'P2','class':'post','name':'Review\x20reward\x20claim\x20(if\x20the\x20merchant\x20armed\x20one)','actor':'buyer','precondition':['P1'],'onchain':'expressible','chainFootprint':{'node':'reviewed','moneyEffect':'reward'},'commercialSemantics':'Review\x20incentives\x20are\x20a\x20reward\x20track\x20separate\x20from\x20the\x20escrow\x20rails;\x20the\x20claim\x20pays\x20the\x20reward\x20balance\x20to\x20the\x20caller.\x20The\x20credential\x20is\x20kernel-owned\x20so\x20a\x20review\x20cannot\x20be\x20double-claimed\x20across\x20accounts\x20of\x20the\x20same\x20buyer.','evidence':[{'file':'reward.move','line':0xe3,'pattern':'public\x20fun\x20claim<T>'}]},{'id':'P3','class':'post','name':'Keeper\x27s\x20once-only\x20reopen\x20of\x20the\x20window\x20after\x20review\x20(bookkeeping\x20leg)','actor':'keeper','precondition':['P1'],'onchain':'expressible','chainFootprint':{'node':'claim_window','forward':'ReopenWindowAfterReview','prev':'reviewed','identity':'permission_index','moneyEffect':'none'},'commercialSemantics':'A\x20bounded\x20keeper-only\x20reopen\x20exists\x20for\x20post-settlement\x20bookkeeping:\x20one\x20episode\x20per\x20order,\x20anchored\x20on\x20the\x20first\x20reviewed\x20entry,\x20never\x20re-arming.\x20Drained\x20refund\x20rails\x20absorb\x20the\x20re-entry\x20as\x20a\x20no-op\x20—\x20the\x20once-slot\x20abort\x20is\x20the\x20loud\x20boundary.','guardKeyProbe':'reopen_window','evidence':[{'file':'allocation.move','line':0x50,'pattern':'const\x20E_ONCE_TRIGGERED:\x20u64\x20=\x2016'}]},{'id':'P4','class':'post','name':'Leader\x27s\x20rebate\x20pass-through\x20to\x20group\x20members\x20(off-chain\x20settlement)','actor':'merchant','precondition':['M11'],'onchain':'disclosure_only','disclosureProbe':'rebates\x20OFF-CHAIN','commercialSemantics':'Member-level\x20rebates\x20are\x20paid\x20off-chain\x20out\x20of\x20the\x20leader\x27s\x20single\x20commission\x20leg;\x20the\x20chain\x20will\x20never\x20see\x20or\x20enforce\x20them.\x20One\x20disclosed\x20layer\x20is\x20the\x20anti-pyramid\x20boundary\x20and\x20the\x20disclosure\x20says\x20exactly\x20that.','evidence':[]},{'id':'P5','class':'post','name':'Repurchase:\x20join\x20the\x20next\x20daily\x20round','actor':'buyer','precondition':['M11'],'onchain':'expressible_with_gap','chainFootprint':{'node':'paid','identity':'order_holder','moneyEffect':'escrow_in'},'commercialSemantics':'The\x20next\x20round\x20is\x20a\x20fresh\x20join\x20guarded\x20by\x20the\x20runtime\x20buy\x20switch\x20—\x20the\x20sanctioned\x20batch\x20boundary.\x20Full\x20machine\x20reuse\x20across\x20rounds\x20(advance\x20gates\x20re-reading\x20a\x20cutoff\x20row)\x20is\x20filed\x20for\x20the\x20protocol\x20window;\x20today\x20a\x20new\x20round\x20redeploys\x20the\x20service\x20or\x20runs\x20under\x20the\x20disclosed\x20clock\x20discipline.','gapPredicate':{'probe':'repository\x20cutoff\x20row'},'evidence':[{'file':'service.move','line':0x4f1,'pattern':'public\x20fun\x20buy_guard_set'}]},{'id':'P6','class':'post','name':'Leader\x20commission\x20Entity\x20leg\x20paid\x20at\x20settlement\x20(benchmark\x200)','actor':'merchant','precondition':['M11'],'onchain':'expressible','chainFootprint':{'node':'completed','moneyEffect':'release'},'commercialSemantics':'The\x20leader\x27s\x20single\x20disclosed\x20commission\x20Entity\x20leg\x20is\x20the\x20only\x20on-chain\x20money\x20the\x20community\x20organizer\x20ever\x20receives;\x20it\x20defaults\x20to\x20zero\x20under\x20the\x20P2P\x20doctrine\x20and\x20can\x20only\x20be\x20raised\x20through\x20declared\x20build\x20surfaces.\x20A\x20slot-based\x20person\x20leg\x20is\x20unfundable\x20and\x20forbidden\x20as\x20a\x20second\x20layer.','evidence':[{'file':'allocation.move','line':0x271,'pattern':'Recipient::Entity'}]}],'invariants':[{'id':'INV-DM-STOCKOUT','statement':'Stockout\x20and\x20risk-control\x20takedown\x20both\x20promise\x20a\x20same-day\x20full\x20refund\x20to\x20affected\x20buyers;\x20the\x20template\x20must\x20always\x20ship\x20a\x20RefundOutOfStock\x20exit\x20edge\x20(paired\x20with\x20the\x20CancelByPlatform\x20kill)\x20so\x20the\x20promise\x20is\x20executable,\x20not\x20prose.\x20Standing\x20check\x20(CURED\x202026-11-06,\x20wave-3):\x20both\x20edges\x20are\x20mounted\x20(cutoff_fired\x20->\x20closed_cancel,\x20refund-rail\x20slot\x201001,\x20node-gated\x20tpl_forward_node_check)\x20—\x20deleting\x20the\x20stockout\x20forward\x20re-fires\x20this\x20invariant.','violation':{'whileMissingForward':'RefundOutOfStock'},'evidence':[]},{'id':'INV-DM-ARBCAP','statement':'The\x20protocol\x20caps\x20the\x20arbitration\x20indemnity\x20at\x20three\x20times\x20the\x20order\x20amount,\x20while\x20the\x20statutory\x20floor\x20for\x20substandard\x20goods\x20is\x20ten\x20times\x20the\x20price\x20(or\x20three\x20times\x20the\x20loss\x20with\x20a\x20minimum\x20payout)\x20—\x20the\x20cap\x20constant\x20cannot\x20express\x20the\x20statutory\x20minimum,\x20so\x20a\x20compliant\x20ruling\x20regime\x20needs\x20a\x20disclosure\x20or\x20a\x20protocol\x20raise,\x20never\x20a\x20silent\x20cap.','chainConflict':'indemnity\x20cap\x20multiple\x20(3)\x20is\x20BELOW\x20the\x20statutory\x20compensation\x20floor\x20(10x\x20price\x20/\x203x\x20loss\x20with\x20minimum)\x20for\x20the\x20fresh-goods\x20retail\x20case','evidence':[{'file':'arb.move','line':0x15,'pattern':'const\x20MAX_INDEMNITY_MULTIPLE:u64\x20=\x203'},{'file':'arb.move','line':0x21d,'pattern':'saturating_mul'}]},{'id':'INV-DM-AWARDFLOOR','statement':'The\x20buyer-won\x20refund\x20rail\x20has\x20no\x20minimum-award\x20leg\x20by\x20default:\x20a\x20symbolic\x20award\x20unlocks\x20the\x20full\x20principal\x20refund\x20because\x20the\x20floor\x20identifier\x20reads\x20zero\x20and\x20this\x20catalog\x20emits\x20no\x20floor\x20knob.\x20Builders\x20serving\x20high-trust\x20volume\x20should\x20declare\x20a\x20floor,\x20or\x20the\x20won\x20rail\x20must\x20be\x20treated\x20as\x20a\x20refund\x20rail\x20with\x20a\x20symbolic\x20trigger.','chainConflict':'the\x20won-rail\x20minimum\x20indemnity\x20leg\x20(identifier\x205)\x20ships\x20unset\x20on\x20this\x20template,\x20so\x20any\x20positive\x20indemnity\x20satisfies\x20the\x20won\x20root','evidence':[{'file':'arb.move','line':0xa6,'pattern':'public\x20struct\x20Indemnity\x20has\x20copy,\x20drop,\x20store'}]},{'id':'INV-DM-RETURNWINDOW','statement':'The\x20after-sales\x20filing\x20window\x20is\x20parameterized\x20from\x20the\x20picked_up\x20entry\x20and\x20the\x20benchmark\x20sets\x20it\x20at\x2048\x20hours\x20for\x20fresh\x20goods;\x20non-fresh\x20categories\x20carry\x20a\x20statutory\x20no-reason\x20return\x20period\x20of\x20seven\x20days,\x20so\x20a\x20category-aware\x20build\x20must\x20re-parameterize\x20the\x20window\x20instead\x20of\x20trusting\x20the\x20benchmark\x20default.','chainConflict':'benchmark\x20after-sales\x20window\x20(48h)\x20is\x20shorter\x20than\x20the\x20statutory\x207-day\x20no-reason\x20return\x20period\x20for\x20non-fresh\x20categories','evidence':[{'file':'order.move','line':0xcc,'pattern':'public\x20fun\x20items(self:&Order)'}]}]};
|