Fixture contract
- Domain
- contractor services
- Fixture class
- emergency failover
- Related risk
- EVI-CR-018
- Expected public state
- MIGRATE_OR_RESTORE_WITH_APPEND_ONLY_EVIDENCE
- Accepted-state rule
- True
- Modeled interruption limit
- 15 minutes for public read-only orientation
- Observed result
- PASS_WITH_DECLARED_RESIDUALS
- Network calls
- 0
Preconditions
- A byte-bound accepted public state exists or the record explicitly says none exists.
- The replacement path, authority, and rollback rule are declared before fault injection.
- No network call, production credential, citizen record, passport body, or private receipt is used.
Portability and replacement
Artifact: Machine-readable export with provenance, schema and lawful redaction.
Replacement: Independent repositories, local copies and non-data-dependent fallback procedures.
Rollback rule
Rejected, incomplete, stale, disputed, or corrupted migrations cannot overwrite accepted state. Restore the last verified local projection and publish the degraded state.
Unresolved residuals
- Corruption, breach, provenance loss, incompatible formats or unavailable custodian.
- A local deterministic drill does not prove supplier cooperation, production capacity, legal authority, or real recovery time.
Truth boundary
Synthetic local exit-readiness fixture. It does not prove a live alternative, actual portability, supplier cooperation, production recovery, service continuity, or legal authority.
Authority and record status
Responsible authority: State Registry and continuity governance.
Deterministic local drill; no production action occurred.
Revision date: . Public corrections may be initiated through the diplomatic contact route.