Fixture contract
- Domain
- communications
- Fixture class
- schema incompatibility
- Related risk
- EVI-CR-022
- Expected public state
- MIGRATE_OR_RESTORE_WITH_APPEND_ONLY_EVIDENCE
- Accepted-state rule
- True
- Modeled interruption limit
- 15 minutes for public read-only orientation
- Observed result
- PASS_WITH_DECLARED_RESIDUALS
- Network calls
- 0
Preconditions
- A byte-bound accepted public state exists or the record explicitly says none exists.
- The replacement path, authority, and rollback rule are declared before fault injection.
- No network call, production credential, citizen record, passport body, or private receipt is used.
Portability and replacement
Artifact: Portable images, state, logs, secrets rotation plans and data exports.
Replacement: Independent hosting provider and static degraded-mode publication.
Rollback rule
Rejected, incomplete, stale, disputed, or corrupted migrations cannot overwrite accepted state. Restore the last verified local projection and publish the degraded state.
Unresolved residuals
- Provider outage, legal seizure, billing failure or control-plane compromise.
- A local deterministic drill does not prove supplier cooperation, production capacity, legal authority, or real recovery time.
Truth boundary
Synthetic local exit-readiness fixture. It does not prove a live alternative, actual portability, supplier cooperation, production recovery, service continuity, or legal authority.
Authority and record status
Responsible authority: State Registry and continuity governance.
Deterministic local drill; no production action occurred.
Revision date: . Public corrections may be initiated through the diplomatic contact route.