Fixture contract
- Domain
- credentials
- Fixture class
- stale last-known-good state
- Related risk
- EVI-CR-024
- Expected public state
- MIGRATE_OR_RESTORE_WITH_APPEND_ONLY_EVIDENCE
- Accepted-state rule
- True
- Modeled interruption limit
- UNRESOLVED_REQUIRES_MEASUREMENT
- Observed result
- PASS_WITH_DECLARED_RESIDUALS
- Network calls
- 0
Preconditions
- A byte-bound accepted public state exists or the record explicitly says none exists.
- The replacement path, authority, and rollback rule are declared before fault injection.
- No network call, production credential, citizen record, passport body, or private receipt is used.
Portability and replacement
Artifact: Portable public manifests and append-only observations; no citizen or credential bodies.
Replacement: Each site remains independently useful and may operate with connector UNAVAILABLE.
Rollback rule
Rejected, incomplete, stale, disputed, or corrupted migrations cannot overwrite accepted state. Restore the last verified local projection and publish the degraded state.
Unresolved residuals
- Partition, replay, schema conflict, compromised manifest, wrong origin or unavailable counterpart.
- A local deterministic drill does not prove supplier cooperation, production capacity, legal authority, or real recovery time.
Truth boundary
Synthetic local exit-readiness fixture. It does not prove a live alternative, actual portability, supplier cooperation, production recovery, service continuity, or legal authority.
Authority and record status
Responsible authority: State Registry and continuity governance.
Deterministic local drill; no production action occurred.
Revision date: . Public corrections may be initiated through the diplomatic contact route.