Fixture contract
- Domain
- logistics
- Fixture class
- loss of one trust anchor
- Related risk
- EVI-CR-009
- Expected public state
- MIGRATE_OR_RESTORE_WITH_APPEND_ONLY_EVIDENCE
- Accepted-state rule
- True
- Modeled interruption limit
- 0 minutes for rights and correction access
- Observed result
- PASS_WITH_DECLARED_RESIDUALS
- Network calls
- 0
Preconditions
- A byte-bound accepted public state exists or the record explicitly says none exists.
- The replacement path, authority, and rollback rule are declared before fault injection.
- No network call, production credential, citizen record, passport body, or private receipt is used.
Portability and replacement
Artifact: Portable accounting records, contracts, and claims.
Replacement: Independent settlement channels and non-financial critical-service fallback.
Rollback rule
Rejected, incomplete, stale, disputed, or corrupted migrations cannot overwrite accepted state. Restore the last verified local projection and publish the degraded state.
Unresolved residuals
- Liquidity run, payment outage, insurer withdrawal, fraud.
- A local deterministic drill does not prove supplier cooperation, production capacity, legal authority, or real recovery time.
Truth boundary
Synthetic local exit-readiness fixture. It does not prove a live alternative, actual portability, supplier cooperation, production recovery, service continuity, or legal authority.
Authority and record status
Responsible authority: State Registry and continuity governance.
Deterministic local drill; no production action occurred.
Revision date: . Public corrections may be initiated through the diplomatic contact route.