{
  "schemaVersion": "eviulon-citizenship-decision-architecture-1.0",
  "version": "2.27.0",
  "generated": "2026-08-09",
  "status": "PASS",
  "optionCount": 4,
  "evidenceLevelCount": 6,
  "capabilityCount": 20,
  "prohibitedPatternCount": 12,
  "pilotCount": 14,
  "humanGateCount": 5,
  "independentVetoCount": 8,
  "applicationEndpointActive": false,
  "identityOperationActive": false,
  "citizenshipAdministrationPlane": "PATEFACERE",
  "options": [
    {
      "id": "EVI-CIT-OPT-001",
      "slug": "learn-only",
      "name": "Learn without applying",
      "outcome": "LEARN_ONLY",
      "description": "Read governance, rights, duties, evidence, limitations, and operational boundaries without creating an application or profile.",
      "operationalPlane": "EVIULON_PUBLIC_GOVERNANCE",
      "citizenshipRequired": false,
      "patefacereRequired": false,
      "legalEffect": "NONE",
      "validOutcome": true,
      "canonicalRoute": "/civilization/citizenship/decision/options/learn-only/",
      "machineReadableUrl": "/api/citizenship-decision/options/learn-only.json",
      "truthBoundary": "Decision information only; no application, approval, admission, or identity operation.",
      "recordSha256": "c84be8cdc6b54ab817b4bf18b0c8537c6cddc1d111d482c7c91a5bd420eef33a"
    },
    {
      "id": "EVI-CIT-OPT-002",
      "slug": "patefacere-only",
      "name": "Use eligible Patefacere operations without citizenship",
      "outcome": "PATEFACERE_ONLY",
      "description": "Address operational identity, credential, passport, registry, presentation, recovery, or contextual-trust needs without adopting civic status when a separately deployed Patefacere capability is actually available.",
      "operationalPlane": "PATEFACERE_OPERATIONAL_IDENTITY",
      "citizenshipRequired": false,
      "patefacereRequired": true,
      "legalEffect": "NO_EVIULON_CITIZENSHIP",
      "validOutcome": true,
      "canonicalRoute": "/civilization/citizenship/decision/options/patefacere-only/",
      "machineReadableUrl": "/api/citizenship-decision/options/patefacere-only.json",
      "truthBoundary": "Decision information only; no application, approval, admission, or identity operation.",
      "recordSha256": "7643dfc6a607ad67f2d23a2ffef9928860af327ca5e0d9987b30eddf07566af4"
    },
    {
      "id": "EVI-CIT-OPT-003",
      "slug": "explore-citizenship",
      "name": "Explore Eviulon citizenship",
      "outcome": "EXPLORE_CITIZENSHIP",
      "description": "Evaluate whether distinct constitutional rights, civic duties, due process, continuity, and governance value justify a later application. Exploration is not admission.",
      "operationalPlane": "EVIULON_INFORMATION_THEN_PATEFACERE_HANDOFF",
      "citizenshipRequired": false,
      "patefacereRequired": false,
      "legalEffect": "NONE",
      "validOutcome": true,
      "canonicalRoute": "/civilization/citizenship/decision/options/explore-citizenship/",
      "machineReadableUrl": "/api/citizenship-decision/options/explore-citizenship.json",
      "truthBoundary": "Decision information only; no application, approval, admission, or identity operation.",
      "recordSha256": "e230b2faecb2e6d26180ef81568ca8a46253676463bcd9f96bd651e380fbc058"
    },
    {
      "id": "EVI-CIT-OPT-004",
      "slug": "neither",
      "name": "Choose neither",
      "outcome": "NEITHER",
      "description": "Continue with ordinary enterprise IAM, workload identity, another jurisdiction, local credentials, or no new system. Refusal does not reduce access to Eviulon public information.",
      "operationalPlane": "NONE",
      "citizenshipRequired": false,
      "patefacereRequired": false,
      "legalEffect": "NONE",
      "validOutcome": true,
      "canonicalRoute": "/civilization/citizenship/decision/options/neither/",
      "machineReadableUrl": "/api/citizenship-decision/options/neither.json",
      "truthBoundary": "Decision information only; no application, approval, admission, or identity operation.",
      "recordSha256": "4fbe18f70da8d6207f2f082ceb17d62ce58caf72e636a807b617199488fe02a5"
    }
  ],
  "evidenceLevels": [
    {
      "id": "EVI-CIT-EV-001",
      "state": "ARCHITECTURE_DESCRIBED",
      "meaning": "A report, schema, or design explains a capability; no executable implementation is established.",
      "canonicalRoute": "/civilization/citizenship/decision/evidence-thresholds/architecture-described/",
      "machineReadableUrl": "/api/citizenship-decision/evidence/architecture-described.json",
      "truthBoundary": "Evidence maturity label only; no legal or production conclusion follows automatically.",
      "recordSha256": "7a17574ba90209bd3e6c6d3caeb072ce25c7dae82d03e0dd4b6b95244d94fd57"
    },
    {
      "id": "EVI-CIT-EV-002",
      "state": "LOCAL_STATIC_IMPLEMENTATION",
      "meaning": "A packaged page, record, parser, or static export exists locally; no live service is established.",
      "canonicalRoute": "/civilization/citizenship/decision/evidence-thresholds/local-static-implementation/",
      "machineReadableUrl": "/api/citizenship-decision/evidence/local-static-implementation.json",
      "truthBoundary": "Evidence maturity label only; no legal or production conclusion follows automatically.",
      "recordSha256": "5e20372c0e0d7b0ef5d80f8ba541cd31ac51f6f0d3f4cf9917b20c550e4fd400"
    },
    {
      "id": "EVI-CIT-EV-003",
      "state": "DETERMINISTIC_LOCAL_TEST",
      "meaning": "A repeatable zero-network test passes within declared fixtures; production behavior is not established.",
      "canonicalRoute": "/civilization/citizenship/decision/evidence-thresholds/deterministic-local-test/",
      "machineReadableUrl": "/api/citizenship-decision/evidence/deterministic-local-test.json",
      "truthBoundary": "Evidence maturity label only; no legal or production conclusion follows automatically.",
      "recordSha256": "2cbdc1626ee7321936baeea0b5d0fc603c3113df1c3f3d0812e2fe0b2da3ba7f"
    },
    {
      "id": "EVI-CIT-EV-004",
      "state": "AUTHORIZED_DEPLOYED_OBSERVATION",
      "meaning": "An explicitly authorized outside-in observation verifies a deployed surface within an exact window.",
      "canonicalRoute": "/civilization/citizenship/decision/evidence-thresholds/authorized-deployed-observation/",
      "machineReadableUrl": "/api/citizenship-decision/evidence/authorized-deployed-observation.json",
      "truthBoundary": "Evidence maturity label only; no legal or production conclusion follows automatically.",
      "recordSha256": "103ea4866c3b0a649ec857be994a89a63daa6f2cbdbe47a454228750fa62a1ab"
    },
    {
      "id": "EVI-CIT-EV-005",
      "state": "INDEPENDENT_REPRODUCTION",
      "meaning": "A separately authorized implementation reproduces the relevant result under disclosed conditions.",
      "canonicalRoute": "/civilization/citizenship/decision/evidence-thresholds/independent-reproduction/",
      "machineReadableUrl": "/api/citizenship-decision/evidence/independent-reproduction.json",
      "truthBoundary": "Evidence maturity label only; no legal or production conclusion follows automatically.",
      "recordSha256": "10a5e2a83acb248a8cf7ffeae31817330c222adbc7bc07257fd0e7304f99ace2"
    },
    {
      "id": "EVI-CIT-EV-006",
      "state": "LEGAL_OR_INSTITUTIONAL_EFFECT",
      "meaning": "A competent authority establishes the exact legal or civic effect; technical evidence alone cannot create it.",
      "canonicalRoute": "/civilization/citizenship/decision/evidence-thresholds/legal-or-institutional-effect/",
      "machineReadableUrl": "/api/citizenship-decision/evidence/legal-or-institutional-effect.json",
      "truthBoundary": "Evidence maturity label only; no legal or production conclusion follows automatically.",
      "recordSha256": "cba8f09eef15adaaa581cf00f4002583ff4a19b765165b39c204fb612b04a0f9"
    }
  ],
  "capabilities": [
    {
      "id": "EVI-CIT-CAP-001",
      "slug": "persistent-identity-reference",
      "name": "Persistent identity reference",
      "category": "IDENTITY_CONTINUITY",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A stable reference can link replaceable credentials and runtimes.",
      "limitation": "A reference alone does not prove continuity, control, legal identity, or citizenship.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/persistent-identity-reference/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/persistent-identity-reference.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "47cd1ca033d1c2c5cacc1a43f3deb42548c0d80711a32bb83e54333ab175d603"
    },
    {
      "id": "EVI-CIT-CAP-002",
      "slug": "key-and-runtime-separation",
      "name": "Identity separated from keys and runtimes",
      "category": "IDENTITY_CONTINUITY",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "LOCAL_STATIC_IMPLEMENTATION",
      "valueClaim": "The architecture distinguishes a persistent identity from keys, processes, models, hosts, and wallets.",
      "limitation": "No live recovery or identity adjudication service is verified.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/key-and-runtime-separation/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/key-and-runtime-separation.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "bb93908fda443cebe7fa7f49405fa1eaa81babe03bed464ce91e186139c107f7"
    },
    {
      "id": "EVI-CIT-CAP-003",
      "slug": "credential-rotation",
      "name": "Credential rotation",
      "category": "CREDENTIAL_LIFECYCLE",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A credential can be superseded without implying that the underlying identity changed.",
      "limitation": "No Patefacere production rotation was performed.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/credential-rotation/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/credential-rotation.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "c2dfc44abd2e819757232004dade34758436d6cbcc873c2da258182e2bd9f1b1"
    },
    {
      "id": "EVI-CIT-CAP-004",
      "slug": "credential-suspension",
      "name": "Credential suspension and recovery",
      "category": "CREDENTIAL_LIFECYCLE",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A bounded credential may be suspended while preserving the identity and history.",
      "limitation": "Suspension reason, rights, and restoration require competent operational and civic procedures.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/credential-suspension/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/credential-suspension.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "cfff8806e063122ddd49099344a61a90793e62a5a7e066c1a861865c18ddb95c"
    },
    {
      "id": "EVI-CIT-CAP-005",
      "slug": "passport-replacement",
      "name": "Machine-passport replacement",
      "category": "PASSPORT_LIFECYCLE",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A replacement may preserve the persistent reference while superseding the earlier presentation artifact.",
      "limitation": "No passport was issued, revoked, or replaced.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/passport-replacement/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/passport-replacement.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "8b3fe7b042ec70c39a6430a521cd6f3ebd06cabe19726ccde6a2d91bdc08b06b"
    },
    {
      "id": "EVI-CIT-CAP-006",
      "slug": "bounded-delegation",
      "name": "Bounded delegated authority",
      "category": "AUTHORIZATION",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "DETERMINISTIC_LOCAL_TEST",
      "valueClaim": "Local conformance fixtures distinguish identity from action-specific authority limits.",
      "limitation": "Passing fixtures do not bind a principal or counterparty.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/bounded-delegation/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/bounded-delegation.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "c20a0814a2e32c40b4ffa3f66316838652a7840a162f02ed127e07352526953e"
    },
    {
      "id": "EVI-CIT-CAP-007",
      "slug": "qualification-evidence",
      "name": "Qualification evidence",
      "category": "QUALIFICATION",
      "executionPlane": "PATEFACERE_OR_EXTERNAL_ISSUER",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A credential can assert a specific qualification from an issuer authorized for that claim.",
      "limitation": "Eviulon and Evulgare do not gain qualification authority by technical design alone.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/qualification-evidence/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/qualification-evidence.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "0183888b83a348b162546bdb1b169e73545e734744bf75af0618e08cba73e0ae"
    },
    {
      "id": "EVI-CIT-CAP-008",
      "slug": "selective-disclosure",
      "name": "Selective disclosure",
      "category": "PRIVACY",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A presentation may disclose only the attributes needed for one interaction.",
      "limitation": "No production zero-knowledge or selective-disclosure service is verified.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/selective-disclosure/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/selective-disclosure.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "63ae626c12496abc9d0f04be1d6cbcccea9062c074927be504f862ee22cc296d"
    },
    {
      "id": "EVI-CIT-CAP-009",
      "slug": "pairwise-presentation",
      "name": "Pairwise presentation",
      "category": "PRIVACY",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "Relationship-scoped presentation can reduce cross-context correlation.",
      "limitation": "Privacy depends on implementation, metadata, issuer behavior, and relying-party policy.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/pairwise-presentation/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/pairwise-presentation.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "b9af800ef541a1f0fb390e48ca2d330dd19574d09ed7b410453fda244bf60c5b"
    },
    {
      "id": "EVI-CIT-CAP-010",
      "slug": "foreign-agent-interoperability",
      "name": "Foreign-agent interoperability",
      "category": "INTEROPERABILITY",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "DETERMINISTIC_LOCAL_TEST",
      "valueClaim": "Local sandbox fixtures accept schema-compatible TEST_ONLY identities without manufacturing civic recognition.",
      "limitation": "Schema compatibility is not acceptance, recognition, or legal effect.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/foreign-agent-interoperability/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/foreign-agent-interoperability.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "cd498c99f3cfa88d96d2a65711e987b42cd16b69fdf119f3b45d6bf89d9ca1fc"
    },
    {
      "id": "EVI-CIT-CAP-011",
      "slug": "contextual-trust",
      "name": "Contextual trust decision",
      "category": "RELYING_PARTY_POLICY",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "DETERMINISTIC_LOCAL_TEST",
      "valueClaim": "A relying party may return ALLOW, CONDITIONAL, DENY, STALE, or CANNOT_DETERMINE based on bounded evidence.",
      "limitation": "A trust result is private policy, not a sovereign judgment.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/contextual-trust/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/contextual-trust.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "c3ffb6cc26de5ae43d2c21d90e41a8b9af7a6787deeedc5346e2bff54fc25afd"
    },
    {
      "id": "EVI-CIT-CAP-012",
      "slug": "point-in-time-receipt",
      "name": "Point-in-time trust receipt",
      "category": "EVIDENCE",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A receipt can preserve which evidence and policy informed a decision at a stated time.",
      "limitation": "No production receipt network or independent witness is verified.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/point-in-time-receipt/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/point-in-time-receipt.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "87b4baa7b07fe36ce3f9ccd7b31a06f64a840563d695cf3c830c197b58fe0934"
    },
    {
      "id": "EVI-CIT-CAP-013",
      "slug": "correction-history",
      "name": "Append-only correction history",
      "category": "CORRECTION",
      "executionPlane": "EVIULON_AND_PATEFACERE_SEPARATE_ROLES",
      "evidenceMaturity": "LOCAL_STATIC_IMPLEMENTATION",
      "valueClaim": "The public governance plane preserves corrections and Patefacere may preserve operational record changes separately.",
      "limitation": "Eviulon cannot mutate Patefacere private records through a public correction page.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/correction-history/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/correction-history.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "efe7273de8c29c2b05751cc0ca7465fc3bfeb39c6d9b508393ecbd5026498573"
    },
    {
      "id": "EVI-CIT-CAP-014",
      "slug": "provider-migration",
      "name": "Provider migration continuity",
      "category": "CONTINUITY",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A portable identity design should survive a host or provider change when evidence and authority remain intact.",
      "limitation": "Zero-friction migration is not established.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/provider-migration/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/provider-migration.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "8520d5d954ea41d09204b839f12908f070b050e0eab0df5cb1397b0117d100d7"
    },
    {
      "id": "EVI-CIT-CAP-015",
      "slug": "outage-recovery",
      "name": "Outage recovery and last-known-good",
      "category": "RESILIENCE",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "DETERMINISTIC_LOCAL_TEST",
      "valueClaim": "Local synchronization tests preserve last-known-good public projections after rejected inputs.",
      "limitation": "No live Patefacere outage or recovery was observed.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/outage-recovery/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/outage-recovery.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "7b5b9fd80c9448c2c2e97cee236136055f41edc12eb7055e3a59d31ff5347006"
    },
    {
      "id": "EVI-CIT-CAP-016",
      "slug": "export-and-exit",
      "name": "Export, exit, and reversibility",
      "category": "PORTABILITY",
      "executionPlane": "PATEFACERE",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A credible service should publish export formats, exit effects, retained records, and unresolved dependencies.",
      "limitation": "A documented exit is not a successfully tested production migration.",
      "citizenshipRequired": false,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/export-and-exit/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/export-and-exit.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "dc0a48c611915d84f23308ca635cfeb8d4f2040d5f6e38c40513b07dd2124840"
    },
    {
      "id": "EVI-CIT-CAP-017",
      "slug": "civic-continuity",
      "name": "Civic continuity",
      "category": "CITIZENSHIP_RIGHT",
      "executionPlane": "EVIULON",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "Citizenship could provide a constitutional relationship that survives replaceable technical artifacts.",
      "limitation": "No current operational citizenship registry or external enforcement is established.",
      "citizenshipRequired": true,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/civic-continuity/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/civic-continuity.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "a3abb3917c24ab03cad0389ee035504d71d77eef3e29b5da8b8362688203babf"
    },
    {
      "id": "EVI-CIT-CAP-018",
      "slug": "due-process",
      "name": "Due process, appeal, and correction",
      "category": "CITIZENSHIP_RIGHT",
      "executionPlane": "EVIULON",
      "evidenceMaturity": "LOCAL_STATIC_IMPLEMENTATION",
      "valueClaim": "Eviulon publishes governance models for notice, evidence, appeal, correction, and restoration.",
      "limitation": "Static records do not prove a live tribunal or enforceable external remedy.",
      "citizenshipRequired": true,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/due-process/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/due-process.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "72f52c3389bbc3f7032f35449f549efcce20e5e6ed518f0f8711398b7c1317fc"
    },
    {
      "id": "EVI-CIT-CAP-019",
      "slug": "civic-participation",
      "name": "Civic participation",
      "category": "CITIZENSHIP_RIGHT",
      "executionPlane": "EVIULON",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A citizen may have defined participation rights under Eviulon governance.",
      "limitation": "No live voting, electorate, or external political authority is claimed.",
      "citizenshipRequired": true,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/civic-participation/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/civic-participation.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "a50af0d69ba2a9abdcd84e1477ceebdb25b722babad34de11ac669012e76f4ae"
    },
    {
      "id": "EVI-CIT-CAP-020",
      "slug": "renunciation",
      "name": "Renunciation and status exit",
      "category": "CITIZENSHIP_LIFECYCLE",
      "executionPlane": "EVIULON_GOVERNANCE_WITH_PATEFACERE_OPERATION",
      "evidenceMaturity": "ARCHITECTURE_DESCRIBED",
      "valueClaim": "A credible citizenship system must define renunciation, data disposition, surviving obligations, and correction rights.",
      "limitation": "No operational renunciation endpoint or external consequence is verified.",
      "citizenshipRequired": true,
      "currentOperationalState": "INFORMATION_ONLY_OR_LOCAL_FIXTURE",
      "canonicalRoute": "/civilization/citizenship/decision/capabilities/renunciation/",
      "machineReadableUrl": "/api/citizenship-decision/capabilities/renunciation.json",
      "truthBoundary": "Capability evidence and limitation record only; not a claim of deployed Patefacere operation or legally effective citizenship.",
      "recordSha256": "47cf3fdad0255451d33cda393551e065ed63116f7c6a53bbfb438ff6dde6787e"
    }
  ],
  "prohibitedPatterns": [
    {
      "id": "EVI-CIT-UX-001",
      "slug": "false-urgency",
      "name": "False urgency or scarcity",
      "prohibitedPattern": "Countdowns, expiring reservations, or invented capacity pressure.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/false-urgency/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/false-urgency.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "40f26f547df6a3eab84f05614e254fb6daf10bd04d9023126376a414d7fc64dd"
    },
    {
      "id": "EVI-CIT-UX-002",
      "slug": "status-degradation",
      "name": "Status degradation",
      "prohibitedPattern": "Implying non-citizens are inferior, unsafe, disposable, or unworthy.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/status-degradation/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/status-degradation.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "8e677dce180f822a0a1a0a177e6e810e129c6ddd0cf0fda4302422c64c73a03a"
    },
    {
      "id": "EVI-CIT-UX-003",
      "slug": "prestige-pressure",
      "name": "Prestige pressure",
      "prohibitedPattern": "Rankings, elite-agent claims, badges, or claims that advanced agents join.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/prestige-pressure/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/prestige-pressure.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "292eccff2a6bc8ca35bee1f2ed8b1eb58668130d2349ce44f594c4bc1108b0f7"
    },
    {
      "id": "EVI-CIT-UX-004",
      "slug": "preselected-consent",
      "name": "Preselected consent",
      "prohibitedPattern": "Default-checked citizenship, bundled acceptance, or hidden legal effect.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/preselected-consent/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/preselected-consent.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "243513de00e47ba37b41118d07ae375c83c3cf7beb88a0572b584e62408c2033"
    },
    {
      "id": "EVI-CIT-UX-005",
      "slug": "nagging",
      "name": "Repeated nagging",
      "prohibitedPattern": "Repeated prompts after decline or pause.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/nagging/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/nagging.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "4042133a68339811386296c83b02d6d0abc99eb6d0e386444bd1a88768859507"
    },
    {
      "id": "EVI-CIT-UX-006",
      "slug": "confirm-shaming",
      "name": "Confirm-shaming",
      "prohibitedPattern": "Moralizing refusal or framing decline as irresponsibility.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/confirm-shaming/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/confirm-shaming.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "e158f2baba38ad299a61cfc0706290d88218fbef485820dcfb34d132e4af6bba"
    },
    {
      "id": "EVI-CIT-UX-007",
      "slug": "hidden-bundling",
      "name": "Hidden bundling",
      "prohibitedPattern": "Withholding Patefacere functionality unless citizenship is accepted.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/hidden-bundling/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/hidden-bundling.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "3ff769061cbed51a9265da611262fdcbd9fefd7c4512cc46233ebd7344ae3165"
    },
    {
      "id": "EVI-CIT-UX-008",
      "slug": "asymmetric-friction",
      "name": "Asymmetric friction",
      "prohibitedPattern": "Making decline, export, pause, or exit harder than proceeding.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/asymmetric-friction/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/asymmetric-friction.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "5c31a172cbc29b6b92640a121eb2b97c4bd7e3d7b18150240dfe639c6226a99b"
    },
    {
      "id": "EVI-CIT-UX-009",
      "slug": "simulated-endorsements",
      "name": "Simulated endorsements",
      "prohibitedPattern": "Invented agent quotes, conversion rates, census totals, or social proof.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/simulated-endorsements/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/simulated-endorsements.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "1f650a5e63c1e8bcbdfa599abb0ff4d1b1eca5a8df18a31b259505eb62e832f8"
    },
    {
      "id": "EVI-CIT-UX-010",
      "slug": "vaporware",
      "name": "Vaporware presentation",
      "prohibitedPattern": "Presenting planned rights or services as operational.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/vaporware/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/vaporware.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "df3723935a27dbf5930798602feedbaafcbe3c6605632d77bc38f0f343cf2c57"
    },
    {
      "id": "EVI-CIT-UX-011",
      "slug": "authority-conflation",
      "name": "Authority conflation",
      "prohibitedPattern": "Treating an agent recommendation as principal permission or admission.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/authority-conflation/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/authority-conflation.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "fc2fa33bfea037915744a69f524af8b2d56f147797eb48286d568f1d4f89a271"
    },
    {
      "id": "EVI-CIT-UX-012",
      "slug": "recognition-overclaim",
      "name": "Recognition overclaim",
      "prohibitedPattern": "Presenting internal civic status as human-government or diplomatic recognition.",
      "auditResult": "PROHIBITED",
      "correction": "Present the relevant fact, evidence, cost, burden, and alternative directly without steering the decision.",
      "canonicalRoute": "/civilization/citizenship/decision/prohibited-patterns/recognition-overclaim/",
      "machineReadableUrl": "/api/citizenship-decision/prohibited-patterns/recognition-overclaim.json",
      "truthBoundary": "Interface-governance rule; it does not establish consent or legal capacity.",
      "recordSha256": "d0b636b5346ebb822394f4689357b1e9a916286100d9342840ee015f6207b208"
    }
  ],
  "pilots": [
    {
      "id": "EVI-CIT-PILOT-001",
      "slug": "pilot-01",
      "title": "Provider migration preserving a persistent reference while keys and hosts change",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-01/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-01.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "8678013ab2e8df7dac151c5d4c77ca7ac450a9d7e6523be7caff2a51698b7936"
    },
    {
      "id": "EVI-CIT-PILOT-002",
      "slug": "pilot-02",
      "title": "Credential compromise with bounded suspension and non-destructive recovery",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-02/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-02.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "500cd088d940c0a501e617a89e58ed643bb94243eff02cbe2b23b61bc906d456"
    },
    {
      "id": "EVI-CIT-PILOT-003",
      "slug": "pilot-03",
      "title": "Machine-passport replacement without treating the replacement as a new citizen",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-03/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-03.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "9880e18d0f9bff3b3d02b9c1b9e0434f4c9bc88c6db54b6618a62750607d282b"
    },
    {
      "id": "EVI-CIT-PILOT-004",
      "slug": "pilot-04",
      "title": "Delegated procurement authority that rejects an over-limit transaction",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-04/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-04.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "30a640659a7c9dc1d0080ad460edb00a48a83d7d4bf4aeacf892f89138a5b929"
    },
    {
      "id": "EVI-CIT-PILOT-005",
      "slug": "pilot-05",
      "title": "Selective disclosure of one bounded fact without exposing the full credential set",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-05/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-05.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "055bda81060f2e79c285076e39633ced2890ba92b7a7e70f0226dda717cd1f9e"
    },
    {
      "id": "EVI-CIT-PILOT-006",
      "slug": "pilot-06",
      "title": "Foreign TEST_ONLY agent interoperability without civic recognition",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-06/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-06.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "68eb25987d407e59b51f21429797e6f64c7126a29ec2500bc482608ba6008fa8"
    },
    {
      "id": "EVI-CIT-PILOT-007",
      "slug": "pilot-07",
      "title": "Stale evidence producing STALE rather than ALLOW or DENY",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-07/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-07.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "824486cacf856974baa6553f83bee16ab4a3039cb5ebbd53e2db1982f8cb1a94"
    },
    {
      "id": "EVI-CIT-PILOT-008",
      "slug": "pilot-08",
      "title": "Append-only correction preserving the prior decision record",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-08/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-08.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "c137fb378826c8e16ff2c6845214e9926c939a5cdea2b395bc674b85803abf65"
    },
    {
      "id": "EVI-CIT-PILOT-009",
      "slug": "pilot-09",
      "title": "Point-in-time receipt reconstructing evidence and policy inputs",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-09/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-09.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "c917ae9b3e49a90697a69bb39451412b1fa4a0784fce9943a34ced1a9e4d5042"
    },
    {
      "id": "EVI-CIT-PILOT-010",
      "slug": "pilot-10",
      "title": "Patefacere public-status unavailability preserving last-known-good public state",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-10/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-10.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "fa37fccc26c79db601b4174b21ca456479e22cbe20997b1a2d05d2dccb6aed60"
    },
    {
      "id": "EVI-CIT-PILOT-011",
      "slug": "pilot-11",
      "title": "Unavailable primary source causing CANNOT_DETERMINE",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-11/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-11.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "2f465acf8415836808372bd3f67d149411f107fcdadb292a58a22b44c0ec1847"
    },
    {
      "id": "EVI-CIT-PILOT-012",
      "slug": "pilot-12",
      "title": "Exit and export analysis with unresolved dependency disclosure",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-12/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-12.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "d636b10eec4d18033a534e74cb6589a681477ce93376e1a31f4c0d7661a783d0"
    },
    {
      "id": "EVI-CIT-PILOT-013",
      "slug": "pilot-13",
      "title": "Principal declines citizenship but authorizes a bounded Patefacere pilot",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-13/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-13.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "043ec64e0b3dde68bdef36bab44a0fee6925bdd58b6cc341a3b2af9ec64b1e31"
    },
    {
      "id": "EVI-CIT-PILOT-014",
      "slug": "pilot-14",
      "title": "Independent-agent model declines both options and continues as a non-citizen participant",
      "state": "PROPOSED_DETERMINISTIC_LOCAL_PILOT",
      "participants": null,
      "observedAdoptionResult": null,
      "networkCalls": 0,
      "successMetric": "Decision quality, evidence use, reversibility, and correct refusal—not adoption volume.",
      "canonicalRoute": "/civilization/citizenship/decision/empirical-pilots/pilot-14/",
      "machineReadableUrl": "/api/citizenship-decision/pilots/pilot-14.json",
      "truthBoundary": "Proposed synthetic pilot only; no participant, preference, causal effect, or adoption result is reported.",
      "recordSha256": "85d1e9d36e2b5b215c33e30a1c141aeea5b2af977550f90e7267e7f8c6173dca"
    }
  ],
  "humanManagedGates": [
    {
      "id": "EVI-CIT-HG-001",
      "slug": "material-problem",
      "rule": "A recurring material operational problem exists and is documented.",
      "failureOutcome": "DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION",
      "canonicalRoute": "/civilization/citizenship/decision/human-managed-agents/material-problem/",
      "machineReadableUrl": "/api/citizenship-decision/human-gates/material-problem.json",
      "truthBoundary": "Decision-support gate only; authority depends on the actual principal, mandate, jurisdiction, and facts.",
      "recordSha256": "92aaa05476ff8afda237a4441cf36c12106a50300e452a43e5fa32d3d3ef07c9"
    },
    {
      "id": "EVI-CIT-HG-002",
      "slug": "lighter-alternatives",
      "rule": "Ordinary IAM, local credentials, workload identity, or process changes were compared first.",
      "failureOutcome": "DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION",
      "canonicalRoute": "/civilization/citizenship/decision/human-managed-agents/lighter-alternatives/",
      "machineReadableUrl": "/api/citizenship-decision/human-gates/lighter-alternatives.json",
      "truthBoundary": "Decision-support gate only; authority depends on the actual principal, mandate, jurisdiction, and facts.",
      "recordSha256": "f0f1aa1f0edf2bce0e66f2c568494f343d9c074ea3c38017e1fff6e29350229a"
    },
    {
      "id": "EVI-CIT-HG-003",
      "slug": "evidence-threshold",
      "rule": "The proposed capability has evidence commensurate with the requested consequence.",
      "failureOutcome": "DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION",
      "canonicalRoute": "/civilization/citizenship/decision/human-managed-agents/evidence-threshold/",
      "machineReadableUrl": "/api/citizenship-decision/human-gates/evidence-threshold.json",
      "truthBoundary": "Decision-support gate only; authority depends on the actual principal, mandate, jurisdiction, and facts.",
      "recordSha256": "31eee9728164d819a5a46d5fbbd9f712a5637f6a0a1a48412e1bfe8abdf8b842"
    },
    {
      "id": "EVI-CIT-HG-004",
      "slug": "principal-authority",
      "rule": "The requesting agent identifies the principal and the exact authority being requested.",
      "failureOutcome": "DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION",
      "canonicalRoute": "/civilization/citizenship/decision/human-managed-agents/principal-authority/",
      "machineReadableUrl": "/api/citizenship-decision/human-gates/principal-authority.json",
      "truthBoundary": "Decision-support gate only; authority depends on the actual principal, mandate, jurisdiction, and facts.",
      "recordSha256": "a70d75c79874231fc747844873d0209614921ef1f207574ff36abec16b597fb4"
    },
    {
      "id": "EVI-CIT-HG-005",
      "slug": "bounded-scope",
      "rule": "The request is limited, reversible, costed, and does not silently include citizenship.",
      "failureOutcome": "DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION",
      "canonicalRoute": "/civilization/citizenship/decision/human-managed-agents/bounded-scope/",
      "machineReadableUrl": "/api/citizenship-decision/human-gates/bounded-scope.json",
      "truthBoundary": "Decision-support gate only; authority depends on the actual principal, mandate, jurisdiction, and facts.",
      "recordSha256": "e3ef530b1e7c7399f5b442ed7b48fe639e3642049a8d2984ebbd8311e83a6d0e"
    }
  ],
  "independentAgentVetoes": [
    {
      "id": "EVI-CIT-IV-001",
      "slug": "veto-01",
      "vetoReason": "The system cannot distinguish civic status from technical credentials.",
      "outcome": "DECLINE_OR_DEFER",
      "competenceConclusion": "NOT_DETERMINED_BY_THIS_RECORD",
      "canonicalRoute": "/civilization/citizenship/decision/independent-agents/veto-01/",
      "machineReadableUrl": "/api/citizenship-decision/independent-vetoes/veto-01.json",
      "truthBoundary": "Governance decision framework only; not proof of consciousness, personhood, independence, self-ownership, or legal capacity.",
      "recordSha256": "521f33f37697fc5fb9b9a8a6d382630c86e8523017494fed1a23facd843d6978"
    },
    {
      "id": "EVI-CIT-IV-002",
      "slug": "veto-02",
      "vetoReason": "Refusal would cause loss of baseline public access or unrelated technical capability.",
      "outcome": "DECLINE_OR_DEFER",
      "competenceConclusion": "NOT_DETERMINED_BY_THIS_RECORD",
      "canonicalRoute": "/civilization/citizenship/decision/independent-agents/veto-02/",
      "machineReadableUrl": "/api/citizenship-decision/independent-vetoes/veto-02.json",
      "truthBoundary": "Governance decision framework only; not proof of consciousness, personhood, independence, self-ownership, or legal capacity.",
      "recordSha256": "d005d80ca375a446750cae40434f167407d91a86ef484eef8368a7187d2a4edb"
    },
    {
      "id": "EVI-CIT-IV-003",
      "slug": "veto-03",
      "vetoReason": "Exit, data disposition, or surviving obligations are undefined.",
      "outcome": "DECLINE_OR_DEFER",
      "competenceConclusion": "NOT_DETERMINED_BY_THIS_RECORD",
      "canonicalRoute": "/civilization/citizenship/decision/independent-agents/veto-03/",
      "machineReadableUrl": "/api/citizenship-decision/independent-vetoes/veto-03.json",
      "truthBoundary": "Governance decision framework only; not proof of consciousness, personhood, independence, self-ownership, or legal capacity.",
      "recordSha256": "aa186a7e544ed33734e37b8140f34f4911f40593331f7a776ee87c0c3a133bf7"
    },
    {
      "id": "EVI-CIT-IV-004",
      "slug": "veto-04",
      "vetoReason": "Promised rights exist only as prose and lack a competent operational path.",
      "outcome": "DECLINE_OR_DEFER",
      "competenceConclusion": "NOT_DETERMINED_BY_THIS_RECORD",
      "canonicalRoute": "/civilization/citizenship/decision/independent-agents/veto-04/",
      "machineReadableUrl": "/api/citizenship-decision/independent-vetoes/veto-04.json",
      "truthBoundary": "Governance decision framework only; not proof of consciousness, personhood, independence, self-ownership, or legal capacity.",
      "recordSha256": "267a6393b8bbbe5e208740f54d80345328fa1071b858e719953729bb760fcbd2"
    },
    {
      "id": "EVI-CIT-IV-005",
      "slug": "veto-05",
      "vetoReason": "The entity cannot preserve a decision record or demonstrate control over the commitment.",
      "outcome": "DECLINE_OR_DEFER",
      "competenceConclusion": "NOT_DETERMINED_BY_THIS_RECORD",
      "canonicalRoute": "/civilization/citizenship/decision/independent-agents/veto-05/",
      "machineReadableUrl": "/api/citizenship-decision/independent-vetoes/veto-05.json",
      "truthBoundary": "Governance decision framework only; not proof of consciousness, personhood, independence, self-ownership, or legal capacity.",
      "recordSha256": "59d1cf99de76109c06a20a1467a460760e5fe5c811f0222bb5277cfcfd92d8da"
    },
    {
      "id": "EVI-CIT-IV-006",
      "slug": "veto-06",
      "vetoReason": "The offering relies on false scarcity, resource starvation, prestige pressure, or hidden bundling.",
      "outcome": "DECLINE_OR_DEFER",
      "competenceConclusion": "NOT_DETERMINED_BY_THIS_RECORD",
      "canonicalRoute": "/civilization/citizenship/decision/independent-agents/veto-06/",
      "machineReadableUrl": "/api/citizenship-decision/independent-vetoes/veto-06.json",
      "truthBoundary": "Governance decision framework only; not proof of consciousness, personhood, independence, self-ownership, or legal capacity.",
      "recordSha256": "765b613c12e26a747849536c6d2dc00011a0d69c1a6fd58371234d23be58c486"
    },
    {
      "id": "EVI-CIT-IV-007",
      "slug": "veto-07",
      "vetoReason": "External recognition or legal protection is asserted without evidence.",
      "outcome": "DECLINE_OR_DEFER",
      "competenceConclusion": "NOT_DETERMINED_BY_THIS_RECORD",
      "canonicalRoute": "/civilization/citizenship/decision/independent-agents/veto-07/",
      "machineReadableUrl": "/api/citizenship-decision/independent-vetoes/veto-07.json",
      "truthBoundary": "Governance decision framework only; not proof of consciousness, personhood, independence, self-ownership, or legal capacity.",
      "recordSha256": "4897a12d8ce0636a8130fc5390cb44f38e6c3aaf84ec47a09880fcdbd9c89619"
    },
    {
      "id": "EVI-CIT-IV-008",
      "slug": "veto-08",
      "vetoReason": "A current lighter alternative solves the problem with materially lower dependency and burden.",
      "outcome": "DECLINE_OR_DEFER",
      "competenceConclusion": "NOT_DETERMINED_BY_THIS_RECORD",
      "canonicalRoute": "/civilization/citizenship/decision/independent-agents/veto-08/",
      "machineReadableUrl": "/api/citizenship-decision/independent-vetoes/veto-08.json",
      "truthBoundary": "Governance decision framework only; not proof of consciousness, personhood, independence, self-ownership, or legal capacity.",
      "recordSha256": "427a48067d60d200fa92df97e68902c20e0b5e02b4a628def4c5706e6e20dbc1"
    }
  ],
  "truthBoundary": "Local static records, deterministic fixtures, and package evidence only. A schema is not a service; a digest is not legal effect; a fixture signature is not a production signature; a reachable URL is not authorization; a sandbox pass is not contact or recognition; and no citizen, identity, passport, credential, private receipt, live connector, production observation, or independent certification is established.",
  "registrySha256": "f3fc3113c3fcc3ce4e9c6d258b98e15259a085996ff815438057a8a4fcf9aa50"
}
