Fixture contract
- Domain
- standards
- Fixture class
- verified restoration
- Related risk
- EVI-CR-008
- Expected public state
- MIGRATE_OR_RESTORE_WITH_APPEND_ONLY_EVIDENCE
- Accepted-state rule
- True
- Modeled interruption limit
- UNRESOLVED_REQUIRES_MEASUREMENT
- Observed result
- PASS_WITH_DECLARED_RESIDUALS
- Network calls
- 0
Preconditions
- A byte-bound accepted public state exists or the record explicitly says none exists.
- The replacement path, authority, and rollback rule are declared before fault injection.
- No network call, production credential, citizen record, passport body, or private receipt is used.
Portability and replacement
Artifact: Exportable domains, certificates, public manifests, local contact routes.
Replacement: At least two physical paths plus delayed store-and-forward.
Rollback rule
Rejected, incomplete, stale, disputed, or corrupted migrations cannot overwrite accepted state. Restore the last verified local projection and publish the degraded state.
Unresolved residuals
- Cable cut, satellite loss, DNS failure, partition.
- A local deterministic drill does not prove supplier cooperation, production capacity, legal authority, or real recovery time.
Truth boundary
Synthetic local exit-readiness fixture. It does not prove a live alternative, actual portability, supplier cooperation, production recovery, service continuity, or legal authority.
Authority and record status
Responsible authority: State Registry and continuity governance.
Deterministic local drill; no production action occurred.
Revision date: . Public corrections may be initiated through the diplomatic contact route.