Fixture contract
- Domain
- cross-site synchronization
- Fixture class
- supplier withdrawal
- Related risk
- EVI-CR-019
- Expected public state
- PRESERVE_ACCEPTED_STATE_AND_DECLARE_DEGRADED
- Accepted-state rule
- True
- Modeled interruption limit
- 4 hours for noncritical analytical service
- Observed result
- BLOCKED_AS_DESIGNED
- Network calls
- 0
Preconditions
- A byte-bound accepted public state exists or the record explicitly says none exists.
- The replacement path, authority, and rollback rule are declared before fault injection.
- No network call, production credential, citizen record, passport body, or private receipt is used.
Portability and replacement
Artifact: Exportable solicitations, bids, evaluation reasons, contracts and performance history subject to law.
Replacement: Qualified alternate suppliers and retained in-house competence.
Rollback rule
Rejected, incomplete, stale, disputed, or corrupted migrations cannot overwrite accepted state. Restore the last verified local projection and publish the degraded state.
Unresolved residuals
- Faulty model, supplier collapse, bid-data compromise or systemic concentration.
- A local deterministic drill does not prove supplier cooperation, production capacity, legal authority, or real recovery time.
Truth boundary
Synthetic local exit-readiness fixture. It does not prove a live alternative, actual portability, supplier cooperation, production recovery, service continuity, or legal authority.
Authority and record status
Responsible authority: State Registry and continuity governance.
Deterministic local drill; no production action occurred.
Revision date: . Public corrections may be initiated through the diplomatic contact route.