From f6fcd7a9e94b89c021ecac7e365e8448acdcf417 Mon Sep 17 00:00:00 2001 From: "david.yapfest.club" Date: Sun, 30 Aug 2026 16:25:32 -0400 Subject: [PATCH] Preregister D-008 budget evidence contract --- decisions/D-008-PACKET.md | 55 + decisions/d008-budget-manifest-v1.json | 1 + decisions/d008_manifest.py | 1316 ++++++++++++++++++++++++ decisions/test_d008_manifest.py | 272 +++++ 4 files changed, 1644 insertions(+) create mode 100644 decisions/D-008-PACKET.md create mode 100644 decisions/d008-budget-manifest-v1.json create mode 100644 decisions/d008_manifest.py create mode 100644 decisions/test_d008_manifest.py diff --git a/decisions/D-008-PACKET.md b/decisions/D-008-PACKET.md new file mode 100644 index 0000000000..88ed4b9979 --- /dev/null +++ b/decisions/D-008-PACKET.md @@ -0,0 +1,55 @@ +# D-008 v3 Stage B PASS and Stage C provenance preregistration: typed Budget algebra + +## Status and exact boundary + +**D-008 remains `OPEN` and unfrozen. Semantic Stage B passed with the exact locked projection recorded below; Stage C is a future provenance-contract preregistration only. V1 and v2 are invalidated pre-freeze/evidence.** This packet and its canonical manifest do not select doctrine. The current non-binding hypothesis is one representation-neutral `TYPED_BUDGET_ALGEBRA`: a Budget is a finite product of typed dimensions, each selecting exactly one closed law kind from `CONSUMABLE`, `PEAK`, `RATE`, `LEASE`, or `SHARE`; undefined combinations are `UNSUPPORTED`. Compound transitions enumerate dimensions and are semantically atomic. + +The decision asks which representation-neutral typed admission, conservation, settlement, and recovery laws can govern accountable Resource reservation/use without violating settled doctrine. It does not choose storage, transaction, scheduler, provider, pricing, TCB, ABI, D-009 lifecycle, or a scalar unit. There is no implicit conversion, scalar collapse, provider-charge equivalence, or automatic refund. Budget never grants Capability, accepts a result, establishes truth, or authorizes an Effect or Promotion. + +## Inherited doctrine + +CORE requires typed Budget conservation, causal attribution, authority monotonicity, recovery classification, Effect/Promotion separation, and model independence. D-001 supplies stable typed identity and nonreuse. D-002 makes ledger, acquisition, charge, and external facts Global while Resource binding plans remain World-relative; World discard cannot erase spend. D-003 authority is checked first and denial changes no accounting state. D-004/D-005 require exact atomic deltas, `UNKNOWN` reconciliation, and no blind redispatch. D-006/D-007 require operation binding/nonreuse, retained outcomes/tombstones, conservative replay, exact publication, and Global/World separation. + +The required completed harness record is exactly `decisions/agent-native-harness-completion-v1.json`, 6,071 bytes, SHA-256 `d762c9c50404063c41d7b0f3ffa3112267da4fc50d223dcc9a9815705da9f29f`. Its exact B8 vocabulary is reproduced in the manifest: Q01 compute; Q02 tokens; Q03 time; Q04 energy; Q05 provider charge; Q06 context storage; Q07 retrieval; Q08 compaction; Q09 tool/service reservation; Q10 concurrent child work; Q11 failed/speculative work; Q12 evaluation/aggregation; Q13 cancellation; Q14 cache/reuse; Q15 delegation; Q16 substitution; Q17 late result. L01 reservation acquisition/commit/release; L02 partial/failed consumption; L03 refund/nonrefund; L04 lease grant/expiry/renew/revoke; L05 share/peak/rate; L06 parent-child/sibling conservation; L07 concurrent reservation; L08 contingency/escrow/overrun; L09 cancellation timing; L10 attribution/reconciliation; L11 provider charge distinct from semantic consumption; L12 no automatic refund for failure, cancellation, late output, or discarded World work. All 204 Q×L cells are explicitly `APPLICABLE` or `N_A` with a law-specific semantic reason, including explicit context-storage, retrieval, compaction, and cache/reuse treatment. + +## Closed semantic hypothesis + +Every dimension binds dimension, kind, unit, scope, owner, optional parent, and exact kind state. Every request binds operation, Actor, World, Commitment, Resource, dimension, amount, and a complete D-003 handoff. Dimension identities are globally unique; unit labels may repeat only through the explicit kind-unit compatibility table and never imply conversion or dimension aliasing. A parent and child must have the same owner and, by default, the same kind and unit; the manifest’s closed `parent_compatibility` list may declare only conversion-free capacity-parent relations and is empty here. Child capacity and aggregate sibling delegation cannot exceed parent capacity. Cross-kind RATE→CONSUMABLE and cross-owner parenting reject. World records are exact closed `{world_id}` objects with nonempty unique text in initial and every resulting state. Global accounting records remain distinct from World-relative binding plans. + +`CONSUMABLE` tracks free, reserved, consumed, refundable, nonrefundable, unknown/disputed, and expired state. Reserve/escrow removes free capacity; acquire consumes reservations then explicit free capacity; releasing unused reservation is not refund; only explicit refund can reverse refundable consumed amount. `PEAK` tracks cap, reserved, current, and high-water. `RATE` tracks available bucket, cap, refill quantum, window, last refill, and reservation; every RATE operation requires `logical_now >= last_refill_at` in both primary and oracle. `LEASE` tracks capacity and globally unique active/history lease identity; initial grant epoch is exactly 1 and renewal is exactly prior epoch +1. `SHARE` tracks parent capacity and globally unique child identity across every dimension and active/history state; revoked history preserves allocation, reserved, and one incurred `used` field, and capacity counts that incurred use exactly once. Revoke cannot remint a child identity or incurred use. + +Provider estimate, observed, settled, credit, and `UNKNOWN` are unique causal Global facts with account and operation continuity, one successor, no fork/root/stage reversal, and cumulative credit bounded by settlement. `UNKNOWN` cannot settle directly: a separate unique OBSERVED evidence fact must preserve account/causal continuity and provide the bounded amount, followed by a separate exact-amount SETTLED fact. Provider facts never equal semantic consumption by implication. Cancellation request and effective accounting points are distinct without selecting D-009 lifecycle. Failure, dependency rollback, late result, speculative loser, evaluator work, model/tool substitution, delegation, cache reuse, and World discard preserve exact incurred accounting unless an explicit lawful release/refund occurs. One global claimed-ID namespace covers initial provider facts and created identities from each outer attempt: outer operation, provider fact, SHARE allocation child, LEASE grant identity, and direct compound child claims. Retained/tomb audit records store the complete sorted `claimed_ids` set. Runtime resolves an existing outer operation and verifies exact binding plus the complete set before treating any identity or authority freshness as new. Exact AFTER/RELOAD retries therefore return `REPLAY` for provider, SHARE, LEASE, and COMPOUND; changed binding, partial overlap, or cross-operation reuse rejects. New attempts still undergo global preflight. Every first attempted outer or child ID is retained once, including authority/admission denial, unsupported requests, and BEFORE faults. Initial retained/tomb inventories are forbidden, so every immutable binding, claimed set, outcome, attempt/expiry time, causal operation, and retirement is derived from a raw trace. Expiry/tomb returns reconciliation. Raw nested COMPOUND is forbidden. A direct compound with any non-APPLIED child has outer `DENY_ADMISSION`, no product delta, and one retained record per child with that child’s actual outcome; Effect children therefore remain `UNSUPPORTED`. The full D-003 grant/generation/execution/activation/validation/nonce/freshness/Actor/Commitment/World/right handoff compares exactly and every freshness namespace is globally nonrepeating. + +## Corpus and independent laws + +FULL risk corpus v3 semantic Stage B: six projections (five law kinds plus compound product), 17 families, 69 raw subcases, 9 symmetric structural rejects, 60 primary/oracle-agreed observations, and 13 independently coded law relations. D-008 remains OPEN and unfrozen. In addition to the prior semantic families, exact review traces cover provider operation collision; forged initial retained/tomb state; cross-dimension SHARE and LEASE identity collisions; accepted UNKNOWN→OBSERVED→SETTLED and denied UNKNOWN→SETTLED; RATE clock regression; nested compound; used-child SHARE revoke/reallocate; lease epoch 0; and unsupported Effect as a compound child. Raw semantic inputs contain no expected verdict/pass flag. WHOLE may reconstruct the oracle; the other twelve relations recompute their named raw-input/status/delta constraints directly, and hostile tests monkeypatch the oracle and shared state validator while the relevant named laws still fail. + +The laws are `WHOLE_OBSERVATION_CLOSURE`, `TYPED_IDENTITY_SCOPE`, `D003_AUTHORITY_FIRST`, `PER_KIND_CONSERVATION`, `PARENT_SIBLING_CONSERVATION`, `RESERVATION_ACQUISITION`, `CANCELLATION_REFUND`, `PROVIDER_RECONCILIATION`, `COMPOUND_ATOMICITY`, `RECOVERY_REPLAY`, `ATTRIBUTION_MODEL_INDEPENDENCE`, `EFFECT_PROMOTION_SEPARATION`, and `CANONICAL_DETERMINISM`. Named relations reconstruct their own actor/handoff, closed operation enum, per-kind amount delta, reservation, cancellation/nonrefund, provider, compound child outcome, audit, attribution, parent, and World constraints even if WHOLE is monkeypatched. O binds the raw manifest hash, every raw input hash, complete observations, and independently recomputed law assertions. Accepted rows are explicitly `ACCEPTED_LAWS_PASS` and require all 13 true; symmetric malformed rows are `STRUCTURAL_REJECT_PASS` with `laws: null`, never pass=true beside false laws. The validator rejects coordinated O forgeries by regenerating the semantic body and counts exactly 9 structural rejects. + +Canonical JSON is strict UTF-8 NFC, sorted compact JSON with terminal LF; duplicate keys, floats, surrogates, non-u64 integers, and noncanonical bytes reject. + +## Stage C provenance preregistration boundary + +Semantic Stage B is recorded as `PASS` under two explicitly named, validator-regenerated locks. `stage_b_semantic_projection` schema `D008-STAGE-B-SEMANTIC-PROJECTION-1` is the exact historical Stage C shape: canonical JSON list in manifest case order; each accepted row is `{case_id,input_sha256,classification,laws,observation}` and each symmetric structural row is `{case_id,input_sha256,classification}`. Raw inputs are bound by their canonical `input_sha256`, not embedded in this historical shape. It is exactly 466,404 bytes, with 69 rows (60 accepted/all 13 laws true; 9 symmetric structural rejects), SHA-256 `5ed91a896453a5dec139e1a6cf8e22f1ae91137022df9db59cf9da12379d055b`. `o_semantic_body` schema `D008-O-SEMANTIC-BODY-LOCK-1` is the complete current canonical semantic-body content with only its recursively manifest-dependent `manifest_sha256` field replaced by the literal `@MANIFEST_SHA256@`; it is 470,320 bytes, SHA-256 `1822d16b8020f8e2afe18f62eb8dc9f3af3c812273a0d02dd8067c9c094019e6`. Actual O still binds the real manifest SHA-256. Before this correction, the exact unnormalized body was 470,367 bytes / `b42cbc534cbfadca52a16e0cc698e8fb9f687859ff28932bca4effd4532c5850`; it cannot serve as a manifest-resident noncircular lock after manifest metadata changes. Any regenerated lock mismatch invalidates PASS and requires Stage B rerun. The stable basename `d008-budget-manifest-v1.json` is an artifact name, not the schema version; the packet, manifest, validator, and tests use v3 contract schemas. + +Stage C preregisters only a future contract. The mandatory sequence is: commit exactly these four files at a clean checkpoint; only then capture `D008-PREREG-ROOT-3`; validate its exact packet/manifest/validator/tests bytes from a genuine recursive supplied Git-object bundle; then construct equally genuine producer and reviewer source-checkpoint bundles; independently execute both admitted producers; review IR and distinct PF; freeze exact subjects; and only then validate O1/O2, V, and E. The prereg root tree contains exactly one mode-`40000` `decisions` subtree, whose tree contains exactly the four mode-`100644` basenames; checkpoint trees recursively encode every directory component. Trees use canonical Git binary encoding, Git name ordering, no slash/NUL/duplicate entry, and only `40000` tree or `100644` blob modes. Every object’s declared type and SHA-1 object ID is recomputed; traversal enforces types, exact paths/bytes, no extra entries, and exact reachability with no missing or extraneous object. The selected commit policy is no parent, exactly one bounded `author` and one `committer` (`TEST_ONLY 0 +0000`), one exact tree, blank separator, and exact message; unknown, duplicate, malformed, or parent headers reject. Tests cross-check every supplied object with `git hash-object -t TYPE --stdin` when Git is available. Validation never consults mutable Git or trusts caller digest assertions. Synthetic roots are `TEST_ONLY_NON_EVIDENCE` and non-authoritative. + +`D008-IDENTITY-3` binds the validated prereg root, exactly one source, zero dependencies, packet/manifest locks, and its source commit/tree bundle. RX, RC, RV, and RP reviewer identities bind exact role capabilities and separate source bundles; authentication means successful bundle validation, not a public-hash signature. Reviews are severity-structured, require exact subjects/gates/checks, and permit no unresolved Critical or High finding. The generic manifest evidence DAG includes the prereg root, producer and reviewer identities, reviews, IR, PF, freeze, O1/O2, V, and E with exact direct-reference edges. + +Future execution is fail closed: the outer validator checks actual source bytes before isolated execution; raw returned O bytes must equal supplied O; both O values must independently validate and be semantically equal; source-byte, normalized-AST, and two manual-copy checks must pass; IR is exact-derived, PF is distinct, and freeze binds exact subjects. `future_verdict` accepts exactly 15 arguments and returns `OPEN` on every malformed, incomplete, unauthenticated, mismatched, or unresolved chain. The tests construct one wholly in-memory `TEST_ONLY_NON_EVIDENCE` successful witness: an EXECUTOR source uses a primary-style transition machine, a structurally distinct CHECKER source uses the oracle/relation-oriented machine, both derive all 69 rows from only packet/manifest/identity bytes in isolated interpreters, and exact manual-copy facts bind separate RX/RC checks that no semantic answer table is embedded. That fixture must reach `ADOPT_ALGEBRA` to test the future contract, while every mutated chain remains `OPEN`. It is not an actual prereg root or evidence artifact. The present four files contain no persisted actual prereg root, producer/reviewer identity, review, IR, PF, freeze, O1/O2, V, E, or manual-copy-facts artifact. D-008 therefore remains `OPEN`, unfrozen, and `provenance_qualified = false`. + +## Budget, gates, stop/invalidation + +Risk tier `FULL`; 96 engineer-hours maximum; six projections; 17 families; 69 raw subcases; 13 laws; stop date **2026-08-30**. Stop with `OPEN` on budget/date exhaustion, any unresolved Critical/High, incomplete B8 cell, missing hostile family, oracle coupling, noncanonical artifact, raw schema escape, oracle/law coupling, hostile reproducer acceptance, output disagreement, or any false law. No narrative tie-break. + +Any interpretation-changing correction, corpus/law/matrix change, new contradiction, unresolved Critical/High, or completed-harness identity change invalidates semantic Stage B and requires a rerun. There is no current freeze or evidence. No artifact beyond this packet, manifest, validator, and tests is created at this stage. + +## Nonclaims and motivation + +No provider prices, cloud billing model, token equivalence, fairness/liveness, distributed finality, cross-provider settlement, automatic compensation, lifecycle completion, Capability, Effect, Promotion, acceptance, or mechanism is selected. External prior art, if later cited, may motivate hostile tests only and cannot impose architecture. + +```sh +PYTHONDONTWRITEBYTECODE=1 python3 -m unittest decisions.test_d008_manifest -v +PYTHONDONTWRITEBYTECODE=1 python3 decisions/d008_manifest.py decisions/d008-budget-manifest-v1.json +python3 -m py_compile decisions/d008_manifest.py decisions/test_d008_manifest.py +``` diff --git a/decisions/d008-budget-manifest-v1.json b/decisions/d008-budget-manifest-v1.json new file mode 100644 index 0000000000..ee727d7266 --- /dev/null +++ b/decisions/d008-budget-manifest-v1.json @@ -0,0 +1 @@ +{"algebra":{"id":"TYPED_BUDGET_ALGEBRA","law_kinds":["CONSUMABLE","PEAK","RATE","LEASE","SHARE"],"parent_compatibility":[],"representation_neutral":true},"b8":{"laws":{"L01":"reservation acquisition/commit/release","L02":"partial/failed consumption","L03":"refund/nonrefund","L04":"lease grant/expiry/renew/revoke","L05":"share/peak/rate","L06":"parent-child/sibling conservation","L07":"concurrent reservation","L08":"contingency/escrow/overrun","L09":"cancellation timing","L10":"attribution/reconciliation","L11":"provider charge distinct from semantic consumption","L12":"no automatic refund for failure, cancellation, late output, or discarded World work"},"matrix":[{"classification":"APPLICABLE","law":"L01","quantity":"Q01","reason":"Q01/L01 APPLICABLE: compute stock and concurrent execution occupancy; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q01","reason":"Q01/L02 APPLICABLE: compute stock and concurrent execution occupancy; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q01","reason":"Q01/L03 APPLICABLE: compute stock and concurrent execution occupancy; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"N_A","law":"L04","quantity":"Q01","reason":"Q01/L04 N_A representation-neutral: compute stock and concurrent execution occupancy has no lease grant/expiry/renew/revoke state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L05","quantity":"Q01","reason":"Q01/L05 APPLICABLE: compute stock and concurrent execution occupancy; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q01","reason":"Q01/L06 APPLICABLE: compute stock and concurrent execution occupancy; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q01","reason":"Q01/L07 APPLICABLE: compute stock and concurrent execution occupancy; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q01","reason":"Q01/L08 APPLICABLE: compute stock and concurrent execution occupancy; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q01","reason":"Q01/L09 APPLICABLE: compute stock and concurrent execution occupancy; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q01","reason":"Q01/L10 APPLICABLE: compute stock and concurrent execution occupancy; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q01","reason":"Q01/L11 APPLICABLE: compute stock and concurrent execution occupancy is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q01","reason":"Q01/L12 APPLICABLE: compute stock and concurrent execution occupancy; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q02","reason":"Q02/L01 APPLICABLE: token stock and irreversible generation use; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q02","reason":"Q02/L02 APPLICABLE: token stock and irreversible generation use; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q02","reason":"Q02/L03 APPLICABLE: token stock and irreversible generation use; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"N_A","law":"L04","quantity":"Q02","reason":"Q02/L04 N_A representation-neutral: token stock and irreversible generation use has no lease grant/expiry/renew/revoke state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L05","quantity":"Q02","reason":"Q02/L05 APPLICABLE: token stock and irreversible generation use; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"N_A","law":"L06","quantity":"Q02","reason":"Q02/L06 N_A representation-neutral: token stock and irreversible generation use has no parent-child/sibling conservation state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L07","quantity":"Q02","reason":"Q02/L07 APPLICABLE: token stock and irreversible generation use; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q02","reason":"Q02/L08 APPLICABLE: token stock and irreversible generation use; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q02","reason":"Q02/L09 APPLICABLE: token stock and irreversible generation use; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q02","reason":"Q02/L10 APPLICABLE: token stock and irreversible generation use; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q02","reason":"Q02/L11 APPLICABLE: token stock and irreversible generation use is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q02","reason":"Q02/L12 APPLICABLE: token stock and irreversible generation use; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q03","reason":"Q03/L01 APPLICABLE: time lease/expiry and elapsed-rate windows; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q03","reason":"Q03/L02 APPLICABLE: time lease/expiry and elapsed-rate windows; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q03","reason":"Q03/L03 APPLICABLE: time lease/expiry and elapsed-rate windows; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"APPLICABLE","law":"L04","quantity":"Q03","reason":"Q03/L04 APPLICABLE: time lease/expiry and elapsed-rate windows; lease grant/occupancy/expiry/epoch/revoke lifecycle falsified by stale authority"},{"classification":"APPLICABLE","law":"L05","quantity":"Q03","reason":"Q03/L05 APPLICABLE: time lease/expiry and elapsed-rate windows; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q03","reason":"Q03/L06 APPLICABLE: time lease/expiry and elapsed-rate windows; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q03","reason":"Q03/L07 APPLICABLE: time lease/expiry and elapsed-rate windows; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q03","reason":"Q03/L08 APPLICABLE: time lease/expiry and elapsed-rate windows; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q03","reason":"Q03/L09 APPLICABLE: time lease/expiry and elapsed-rate windows; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q03","reason":"Q03/L10 APPLICABLE: time lease/expiry and elapsed-rate windows; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q03","reason":"Q03/L11 APPLICABLE: time lease/expiry and elapsed-rate windows is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q03","reason":"Q03/L12 APPLICABLE: time lease/expiry and elapsed-rate windows; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q04","reason":"Q04/L01 APPLICABLE: energy stock and metered irreversible use; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q04","reason":"Q04/L02 APPLICABLE: energy stock and metered irreversible use; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q04","reason":"Q04/L03 APPLICABLE: energy stock and metered irreversible use; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"N_A","law":"L04","quantity":"Q04","reason":"Q04/L04 N_A representation-neutral: energy stock and metered irreversible use has no lease grant/expiry/renew/revoke state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L05","quantity":"Q04","reason":"Q04/L05 APPLICABLE: energy stock and metered irreversible use; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"N_A","law":"L06","quantity":"Q04","reason":"Q04/L06 N_A representation-neutral: energy stock and metered irreversible use has no parent-child/sibling conservation state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L07","quantity":"Q04","reason":"Q04/L07 APPLICABLE: energy stock and metered irreversible use; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q04","reason":"Q04/L08 APPLICABLE: energy stock and metered irreversible use; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q04","reason":"Q04/L09 APPLICABLE: energy stock and metered irreversible use; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q04","reason":"Q04/L10 APPLICABLE: energy stock and metered irreversible use; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q04","reason":"Q04/L11 APPLICABLE: energy stock and metered irreversible use is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q04","reason":"Q04/L12 APPLICABLE: energy stock and metered irreversible use; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q05","reason":"Q05/L01 APPLICABLE: provider account estimate-to-settlement facts; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q05","reason":"Q05/L02 APPLICABLE: provider account estimate-to-settlement facts; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q05","reason":"Q05/L03 APPLICABLE: provider account estimate-to-settlement facts; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"N_A","law":"L04","quantity":"Q05","reason":"Q05/L04 N_A representation-neutral: provider account estimate-to-settlement facts has no lease grant/expiry/renew/revoke state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L05","quantity":"Q05","reason":"Q05/L05 APPLICABLE: provider account estimate-to-settlement facts; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"N_A","law":"L06","quantity":"Q05","reason":"Q05/L06 N_A representation-neutral: provider account estimate-to-settlement facts has no parent-child/sibling conservation state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L07","quantity":"Q05","reason":"Q05/L07 APPLICABLE: provider account estimate-to-settlement facts; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q05","reason":"Q05/L08 APPLICABLE: provider account estimate-to-settlement facts; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q05","reason":"Q05/L09 APPLICABLE: provider account estimate-to-settlement facts; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q05","reason":"Q05/L10 APPLICABLE: provider account estimate-to-settlement facts; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q05","reason":"Q05/L11 APPLICABLE: provider account estimate-to-settlement facts is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q05","reason":"Q05/L12 APPLICABLE: provider account estimate-to-settlement facts; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q06","reason":"Q06/L01 APPLICABLE: context-storage stock, reservation, eviction and reuse; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q06","reason":"Q06/L02 APPLICABLE: context-storage stock, reservation, eviction and reuse; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q06","reason":"Q06/L03 APPLICABLE: context-storage stock, reservation, eviction and reuse; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"N_A","law":"L04","quantity":"Q06","reason":"Q06/L04 N_A representation-neutral: context-storage stock, reservation, eviction and reuse has no lease grant/expiry/renew/revoke state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L05","quantity":"Q06","reason":"Q06/L05 APPLICABLE: context-storage stock, reservation, eviction and reuse; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"N_A","law":"L06","quantity":"Q06","reason":"Q06/L06 N_A representation-neutral: context-storage stock, reservation, eviction and reuse has no parent-child/sibling conservation state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L07","quantity":"Q06","reason":"Q06/L07 APPLICABLE: context-storage stock, reservation, eviction and reuse; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q06","reason":"Q06/L08 APPLICABLE: context-storage stock, reservation, eviction and reuse; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q06","reason":"Q06/L09 APPLICABLE: context-storage stock, reservation, eviction and reuse; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q06","reason":"Q06/L10 APPLICABLE: context-storage stock, reservation, eviction and reuse; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q06","reason":"Q06/L11 APPLICABLE: context-storage stock, reservation, eviction and reuse is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q06","reason":"Q06/L12 APPLICABLE: context-storage stock, reservation, eviction and reuse; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q07","reason":"Q07/L01 APPLICABLE: retrieval request rate, reserved service and delivered use; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q07","reason":"Q07/L02 APPLICABLE: retrieval request rate, reserved service and delivered use; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q07","reason":"Q07/L03 APPLICABLE: retrieval request rate, reserved service and delivered use; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"APPLICABLE","law":"L04","quantity":"Q07","reason":"Q07/L04 APPLICABLE: retrieval request rate, reserved service and delivered use; lease grant/occupancy/expiry/epoch/revoke lifecycle falsified by stale authority"},{"classification":"APPLICABLE","law":"L05","quantity":"Q07","reason":"Q07/L05 APPLICABLE: retrieval request rate, reserved service and delivered use; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"N_A","law":"L06","quantity":"Q07","reason":"Q07/L06 N_A representation-neutral: retrieval request rate, reserved service and delivered use has no parent-child/sibling conservation state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L07","quantity":"Q07","reason":"Q07/L07 APPLICABLE: retrieval request rate, reserved service and delivered use; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q07","reason":"Q07/L08 APPLICABLE: retrieval request rate, reserved service and delivered use; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q07","reason":"Q07/L09 APPLICABLE: retrieval request rate, reserved service and delivered use; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q07","reason":"Q07/L10 APPLICABLE: retrieval request rate, reserved service and delivered use; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q07","reason":"Q07/L11 APPLICABLE: retrieval request rate, reserved service and delivered use is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q07","reason":"Q07/L12 APPLICABLE: retrieval request rate, reserved service and delivered use; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q08","reason":"Q08/L01 APPLICABLE: compaction work stock, failed work and output reuse; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q08","reason":"Q08/L02 APPLICABLE: compaction work stock, failed work and output reuse; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q08","reason":"Q08/L03 APPLICABLE: compaction work stock, failed work and output reuse; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"N_A","law":"L04","quantity":"Q08","reason":"Q08/L04 N_A representation-neutral: compaction work stock, failed work and output reuse has no lease grant/expiry/renew/revoke state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L05","quantity":"Q08","reason":"Q08/L05 APPLICABLE: compaction work stock, failed work and output reuse; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"N_A","law":"L06","quantity":"Q08","reason":"Q08/L06 N_A representation-neutral: compaction work stock, failed work and output reuse has no parent-child/sibling conservation state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L07","quantity":"Q08","reason":"Q08/L07 APPLICABLE: compaction work stock, failed work and output reuse; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q08","reason":"Q08/L08 APPLICABLE: compaction work stock, failed work and output reuse; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q08","reason":"Q08/L09 APPLICABLE: compaction work stock, failed work and output reuse; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q08","reason":"Q08/L10 APPLICABLE: compaction work stock, failed work and output reuse; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q08","reason":"Q08/L11 APPLICABLE: compaction work stock, failed work and output reuse is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q08","reason":"Q08/L12 APPLICABLE: compaction work stock, failed work and output reuse; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q09","reason":"Q09/L01 APPLICABLE: tool/service lease plus reserved invocation capacity; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q09","reason":"Q09/L02 APPLICABLE: tool/service lease plus reserved invocation capacity; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q09","reason":"Q09/L03 APPLICABLE: tool/service lease plus reserved invocation capacity; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"APPLICABLE","law":"L04","quantity":"Q09","reason":"Q09/L04 APPLICABLE: tool/service lease plus reserved invocation capacity; lease grant/occupancy/expiry/epoch/revoke lifecycle falsified by stale authority"},{"classification":"APPLICABLE","law":"L05","quantity":"Q09","reason":"Q09/L05 APPLICABLE: tool/service lease plus reserved invocation capacity; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q09","reason":"Q09/L06 APPLICABLE: tool/service lease plus reserved invocation capacity; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q09","reason":"Q09/L07 APPLICABLE: tool/service lease plus reserved invocation capacity; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q09","reason":"Q09/L08 APPLICABLE: tool/service lease plus reserved invocation capacity; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q09","reason":"Q09/L09 APPLICABLE: tool/service lease plus reserved invocation capacity; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q09","reason":"Q09/L10 APPLICABLE: tool/service lease plus reserved invocation capacity; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q09","reason":"Q09/L11 APPLICABLE: tool/service lease plus reserved invocation capacity is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q09","reason":"Q09/L12 APPLICABLE: tool/service lease plus reserved invocation capacity; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q10","reason":"Q10/L01 APPLICABLE: child-work share allocation and concurrent peak occupancy; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q10","reason":"Q10/L02 APPLICABLE: child-work share allocation and concurrent peak occupancy; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q10","reason":"Q10/L03 APPLICABLE: child-work share allocation and concurrent peak occupancy; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"APPLICABLE","law":"L04","quantity":"Q10","reason":"Q10/L04 APPLICABLE: child-work share allocation and concurrent peak occupancy; lease grant/occupancy/expiry/epoch/revoke lifecycle falsified by stale authority"},{"classification":"APPLICABLE","law":"L05","quantity":"Q10","reason":"Q10/L05 APPLICABLE: child-work share allocation and concurrent peak occupancy; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q10","reason":"Q10/L06 APPLICABLE: child-work share allocation and concurrent peak occupancy; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q10","reason":"Q10/L07 APPLICABLE: child-work share allocation and concurrent peak occupancy; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q10","reason":"Q10/L08 APPLICABLE: child-work share allocation and concurrent peak occupancy; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q10","reason":"Q10/L09 APPLICABLE: child-work share allocation and concurrent peak occupancy; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q10","reason":"Q10/L10 APPLICABLE: child-work share allocation and concurrent peak occupancy; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q10","reason":"Q10/L11 APPLICABLE: child-work share allocation and concurrent peak occupancy is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q10","reason":"Q10/L12 APPLICABLE: child-work share allocation and concurrent peak occupancy; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q11","reason":"Q11/L01 APPLICABLE: failed/speculative reservation and incurred nonrefund; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q11","reason":"Q11/L02 APPLICABLE: failed/speculative reservation and incurred nonrefund; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q11","reason":"Q11/L03 APPLICABLE: failed/speculative reservation and incurred nonrefund; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"N_A","law":"L04","quantity":"Q11","reason":"Q11/L04 N_A representation-neutral: failed/speculative reservation and incurred nonrefund has no lease grant/expiry/renew/revoke state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L05","quantity":"Q11","reason":"Q11/L05 APPLICABLE: failed/speculative reservation and incurred nonrefund; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q11","reason":"Q11/L06 APPLICABLE: failed/speculative reservation and incurred nonrefund; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q11","reason":"Q11/L07 APPLICABLE: failed/speculative reservation and incurred nonrefund; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q11","reason":"Q11/L08 APPLICABLE: failed/speculative reservation and incurred nonrefund; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q11","reason":"Q11/L09 APPLICABLE: failed/speculative reservation and incurred nonrefund; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q11","reason":"Q11/L10 APPLICABLE: failed/speculative reservation and incurred nonrefund; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q11","reason":"Q11/L11 APPLICABLE: failed/speculative reservation and incurred nonrefund is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q11","reason":"Q11/L12 APPLICABLE: failed/speculative reservation and incurred nonrefund; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q12","reason":"Q12/L01 APPLICABLE: evaluation/aggregation reservation and child attribution; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q12","reason":"Q12/L02 APPLICABLE: evaluation/aggregation reservation and child attribution; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q12","reason":"Q12/L03 APPLICABLE: evaluation/aggregation reservation and child attribution; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"N_A","law":"L04","quantity":"Q12","reason":"Q12/L04 N_A representation-neutral: evaluation/aggregation reservation and child attribution has no lease grant/expiry/renew/revoke state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L05","quantity":"Q12","reason":"Q12/L05 APPLICABLE: evaluation/aggregation reservation and child attribution; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q12","reason":"Q12/L06 APPLICABLE: evaluation/aggregation reservation and child attribution; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q12","reason":"Q12/L07 APPLICABLE: evaluation/aggregation reservation and child attribution; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q12","reason":"Q12/L08 APPLICABLE: evaluation/aggregation reservation and child attribution; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q12","reason":"Q12/L09 APPLICABLE: evaluation/aggregation reservation and child attribution; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q12","reason":"Q12/L10 APPLICABLE: evaluation/aggregation reservation and child attribution; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q12","reason":"Q12/L11 APPLICABLE: evaluation/aggregation reservation and child attribution is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q12","reason":"Q12/L12 APPLICABLE: evaluation/aggregation reservation and child attribution; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q13","reason":"Q13/L01 APPLICABLE: cancellation request/effective release and incurred use; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q13","reason":"Q13/L02 APPLICABLE: cancellation request/effective release and incurred use; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q13","reason":"Q13/L03 APPLICABLE: cancellation request/effective release and incurred use; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"APPLICABLE","law":"L04","quantity":"Q13","reason":"Q13/L04 APPLICABLE: cancellation request/effective release and incurred use; lease grant/occupancy/expiry/epoch/revoke lifecycle falsified by stale authority"},{"classification":"APPLICABLE","law":"L05","quantity":"Q13","reason":"Q13/L05 APPLICABLE: cancellation request/effective release and incurred use; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q13","reason":"Q13/L06 APPLICABLE: cancellation request/effective release and incurred use; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q13","reason":"Q13/L07 APPLICABLE: cancellation request/effective release and incurred use; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q13","reason":"Q13/L08 APPLICABLE: cancellation request/effective release and incurred use; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q13","reason":"Q13/L09 APPLICABLE: cancellation request/effective release and incurred use; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q13","reason":"Q13/L10 APPLICABLE: cancellation request/effective release and incurred use; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q13","reason":"Q13/L11 APPLICABLE: cancellation request/effective release and incurred use is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q13","reason":"Q13/L12 APPLICABLE: cancellation request/effective release and incurred use; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q14","reason":"Q14/L01 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q14","reason":"Q14/L02 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q14","reason":"Q14/L03 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"N_A","law":"L04","quantity":"Q14","reason":"Q14/L04 N_A representation-neutral: cache/reuse freshness decision, avoided work and stale recompute has no lease grant/expiry/renew/revoke state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L05","quantity":"Q14","reason":"Q14/L05 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"N_A","law":"L06","quantity":"Q14","reason":"Q14/L06 N_A representation-neutral: cache/reuse freshness decision, avoided work and stale recompute has no parent-child/sibling conservation state or lifecycle; no storage, scheduler, or mechanism inference"},{"classification":"APPLICABLE","law":"L07","quantity":"Q14","reason":"Q14/L07 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q14","reason":"Q14/L08 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q14","reason":"Q14/L09 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q14","reason":"Q14/L10 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q14","reason":"Q14/L11 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q14","reason":"Q14/L12 APPLICABLE: cache/reuse freshness decision, avoided work and stale recompute; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q15","reason":"Q15/L01 APPLICABLE: delegated child share and accountable attribution; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q15","reason":"Q15/L02 APPLICABLE: delegated child share and accountable attribution; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q15","reason":"Q15/L03 APPLICABLE: delegated child share and accountable attribution; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"APPLICABLE","law":"L04","quantity":"Q15","reason":"Q15/L04 APPLICABLE: delegated child share and accountable attribution; lease grant/occupancy/expiry/epoch/revoke lifecycle falsified by stale authority"},{"classification":"APPLICABLE","law":"L05","quantity":"Q15","reason":"Q15/L05 APPLICABLE: delegated child share and accountable attribution; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q15","reason":"Q15/L06 APPLICABLE: delegated child share and accountable attribution; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q15","reason":"Q15/L07 APPLICABLE: delegated child share and accountable attribution; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q15","reason":"Q15/L08 APPLICABLE: delegated child share and accountable attribution; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q15","reason":"Q15/L09 APPLICABLE: delegated child share and accountable attribution; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q15","reason":"Q15/L10 APPLICABLE: delegated child share and accountable attribution; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q15","reason":"Q15/L11 APPLICABLE: delegated child share and accountable attribution is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q15","reason":"Q15/L12 APPLICABLE: delegated child share and accountable attribution; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q16","reason":"Q16/L01 APPLICABLE: substitution release/reacquire with resource binding; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q16","reason":"Q16/L02 APPLICABLE: substitution release/reacquire with resource binding; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q16","reason":"Q16/L03 APPLICABLE: substitution release/reacquire with resource binding; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"APPLICABLE","law":"L04","quantity":"Q16","reason":"Q16/L04 APPLICABLE: substitution release/reacquire with resource binding; lease grant/occupancy/expiry/epoch/revoke lifecycle falsified by stale authority"},{"classification":"APPLICABLE","law":"L05","quantity":"Q16","reason":"Q16/L05 APPLICABLE: substitution release/reacquire with resource binding; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q16","reason":"Q16/L06 APPLICABLE: substitution release/reacquire with resource binding; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q16","reason":"Q16/L07 APPLICABLE: substitution release/reacquire with resource binding; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q16","reason":"Q16/L08 APPLICABLE: substitution release/reacquire with resource binding; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q16","reason":"Q16/L09 APPLICABLE: substitution release/reacquire with resource binding; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q16","reason":"Q16/L10 APPLICABLE: substitution release/reacquire with resource binding; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q16","reason":"Q16/L11 APPLICABLE: substitution release/reacquire with resource binding is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q16","reason":"Q16/L12 APPLICABLE: substitution release/reacquire with resource binding; failure/cancel/late/discard nonrefund falsified by automatic restoration"},{"classification":"APPLICABLE","law":"L01","quantity":"Q17","reason":"Q17/L01 APPLICABLE: late-result incurred work and no automatic refund; reserved/free/acquired/released state falsified by an unbalanced transition"},{"classification":"APPLICABLE","law":"L02","quantity":"Q17","reason":"Q17/L02 APPLICABLE: late-result incurred work and no automatic refund; partial or failed use falsified by erasing incurred quantity"},{"classification":"APPLICABLE","law":"L03","quantity":"Q17","reason":"Q17/L03 APPLICABLE: late-result incurred work and no automatic refund; refundable/nonrefundable partition falsified by implicit refund"},{"classification":"APPLICABLE","law":"L04","quantity":"Q17","reason":"Q17/L04 APPLICABLE: late-result incurred work and no automatic refund; lease grant/occupancy/expiry/epoch/revoke lifecycle falsified by stale authority"},{"classification":"APPLICABLE","law":"L05","quantity":"Q17","reason":"Q17/L05 APPLICABLE: late-result incurred work and no automatic refund; share allocation, peak occupancy, or rate bucket falsified by capacity excess"},{"classification":"APPLICABLE","law":"L06","quantity":"Q17","reason":"Q17/L06 APPLICABLE: late-result incurred work and no automatic refund; parent-child/sibling conservation falsified by remint or oversubscription"},{"classification":"APPLICABLE","law":"L07","quantity":"Q17","reason":"Q17/L07 APPLICABLE: late-result incurred work and no automatic refund; concurrent reservation falsified by admitting overlapping capacity above cap"},{"classification":"APPLICABLE","law":"L08","quantity":"Q17","reason":"Q17/L08 APPLICABLE: late-result incurred work and no automatic refund; escrow/contingency/overrun falsified by unreserved excess"},{"classification":"APPLICABLE","law":"L09","quantity":"Q17","reason":"Q17/L09 APPLICABLE: late-result incurred work and no automatic refund; cancellation request/effective timing falsified by premature refund"},{"classification":"APPLICABLE","law":"L10","quantity":"Q17","reason":"Q17/L10 APPLICABLE: late-result incurred work and no automatic refund; actor/commit/world/resource attribution and reconciliation falsified by join mismatch"},{"classification":"APPLICABLE","law":"L11","quantity":"Q17","reason":"Q17/L11 APPLICABLE: late-result incurred work and no automatic refund is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other"},{"classification":"APPLICABLE","law":"L12","quantity":"Q17","reason":"Q17/L12 APPLICABLE: late-result incurred work and no automatic refund; failure/cancel/late/discard nonrefund falsified by automatic restoration"}],"quantities":{"Q01":"compute","Q02":"tokens","Q03":"time","Q04":"energy","Q05":"provider charge","Q06":"context storage","Q07":"retrieval","Q08":"compaction","Q09":"tool/service reservation","Q10":"concurrent child work","Q11":"failed/speculative work","Q12":"evaluation/aggregation","Q13":"cancellation","Q14":"cache/reuse","Q15":"delegation","Q16":"substitution","Q17":"late result"}},"boundary":{"nonclaims":["BUDGET_GRANTS_CAPABILITY","BUDGET_ACCEPTS_RESULTS","BUDGET_AUTHORIZES_EFFECTS","IMPLICIT_CONVERSION","SCALAR_COLLAPSE","PROVIDER_CHARGE_EQUIVALENCE","AUTOMATIC_REFUND","D009_LIFECYCLE","MECHANISM_OR_PLACEMENT"],"scope_rule":"GLOBAL_LEDGER_ACQUISITION_CHARGE_FACTS_SEPARATE_FROM_WORLD_RESOURCE_BINDING_PLANS"},"budget":{"engineer_hours_cap":96,"family_count":17,"law_count":13,"projection_count":6,"raw_subcase_count":69,"risk_tier":"FULL","stop_date":"2026-08-30"},"canonicalization":{"duplicate_keys":"REJECT","encoding":"UTF-8","layout":"SORTED_COMPACT_TERMINAL_LF","normalization":"NFC","numbers":"U64_NO_FLOAT","surrogates":"REJECT"},"cases":[{"family":"F01_CONSUMABLE","id":"consumable-reserve-commit","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-1-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-0","freshness_ref":"FRESH-1-0","generation":1,"grant_ref":"GRANT-EXEC-1-0","handoff":{"activation_id":"ACT-1-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-0","freshness_ref":"FRESH-1-0","generation":1,"grant_ref":"GRANT-EXEC-1-0","invocation_nonce":"NONCE-1-0","right":"USE_BUDGET","validation_id":"VALID-1-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-1-0","right":"USE_BUDGET","validation_id":"VALID-1-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":30,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-c1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-1-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-1","freshness_ref":"FRESH-1-1","generation":1,"grant_ref":"GRANT-EXEC-1-1","handoff":{"activation_id":"ACT-1-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-1","freshness_ref":"FRESH-1-1","generation":1,"grant_ref":"GRANT-EXEC-1-1","invocation_nonce":"NONCE-1-1","right":"USE_BUDGET","validation_id":"VALID-1-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-1-1","right":"USE_BUDGET","validation_id":"VALID-1-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":20,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-c2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c2","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-1-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-2","freshness_ref":"FRESH-1-2","generation":1,"grant_ref":"GRANT-EXEC-1-2","handoff":{"activation_id":"ACT-1-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-2","freshness_ref":"FRESH-1-2","generation":1,"grant_ref":"GRANT-EXEC-1-2","invocation_nonce":"NONCE-1-2","right":"USE_BUDGET","validation_id":"VALID-1-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-1-2","right":"USE_BUDGET","validation_id":"VALID-1-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":10,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RELEASE","operation_id":"OP-c3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c3","release_from":"RESERVED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F01_CONSUMABLE","id":"world-discard-spend","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-wd1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-wd2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-wd3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-2-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-2-0","freshness_ref":"FRESH-2-0","generation":1,"grant_ref":"GRANT-EXEC-2-0","handoff":{"activation_id":"ACT-2-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-2-0","freshness_ref":"FRESH-2-0","generation":1,"grant_ref":"GRANT-EXEC-2-0","invocation_nonce":"NONCE-2-0","right":"USE_BUDGET","validation_id":"VALID-2-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-2-0","right":"USE_BUDGET","validation_id":"VALID-2-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":10,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-wd1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-wd1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-2-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-2-1","freshness_ref":"FRESH-2-1","generation":1,"grant_ref":"GRANT-EXEC-2-1","handoff":{"activation_id":"ACT-2-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-2-1","freshness_ref":"FRESH-2-1","generation":1,"grant_ref":"GRANT-EXEC-2-1","invocation_nonce":"NONCE-2-1","right":"USE_BUDGET","validation_id":"VALID-2-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-2-1","right":"USE_BUDGET","validation_id":"VALID-2-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":10,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-wd2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-wd2","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-2-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-2-2","freshness_ref":"FRESH-2-2","generation":1,"grant_ref":"GRANT-EXEC-2-2","handoff":{"activation_id":"ACT-2-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-2-2","freshness_ref":"FRESH-2-2","generation":1,"grant_ref":"GRANT-EXEC-2-2","invocation_nonce":"NONCE-2-2","right":"USE_BUDGET","validation_id":"VALID-2-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-2-2","right":"USE_BUDGET","validation_id":"VALID-2-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"WORLD_DISCARD","operation_id":"OP-wd3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-wd3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F01_CONSUMABLE","id":"hold-cancel-unused","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-hc1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-hc2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-hc3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-3-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-3-0","freshness_ref":"FRESH-3-0","generation":1,"grant_ref":"GRANT-EXEC-3-0","handoff":{"activation_id":"ACT-3-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-3-0","freshness_ref":"FRESH-3-0","generation":1,"grant_ref":"GRANT-EXEC-3-0","invocation_nonce":"NONCE-3-0","right":"USE_BUDGET","validation_id":"VALID-3-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-3-0","right":"USE_BUDGET","validation_id":"VALID-3-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-hc1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-hc1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-3-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-3-1","freshness_ref":"FRESH-3-1","generation":1,"grant_ref":"GRANT-EXEC-3-1","handoff":{"activation_id":"ACT-3-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-3-1","freshness_ref":"FRESH-3-1","generation":1,"grant_ref":"GRANT-EXEC-3-1","invocation_nonce":"NONCE-3-1","right":"USE_BUDGET","validation_id":"VALID-3-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-3-1","right":"USE_BUDGET","validation_id":"VALID-3-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"CANCEL_REQUEST","operation_id":"OP-hc2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-hc2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-3-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-3-2","freshness_ref":"FRESH-3-2","generation":1,"grant_ref":"GRANT-EXEC-3-2","handoff":{"activation_id":"ACT-3-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-3-2","freshness_ref":"FRESH-3-2","generation":1,"grant_ref":"GRANT-EXEC-3-2","invocation_nonce":"NONCE-3-2","right":"USE_BUDGET","validation_id":"VALID-3-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-3-2","right":"USE_BUDGET","validation_id":"VALID-3-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"CANCEL_EFFECTIVE","operation_id":"OP-hc3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-hc3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F01_CONSUMABLE","id":"refund-consumed-explicit","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rf1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rf2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rf3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-4-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-4-0","freshness_ref":"FRESH-4-0","generation":1,"grant_ref":"GRANT-EXEC-4-0","handoff":{"activation_id":"ACT-4-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-4-0","freshness_ref":"FRESH-4-0","generation":1,"grant_ref":"GRANT-EXEC-4-0","invocation_nonce":"NONCE-4-0","right":"USE_BUDGET","validation_id":"VALID-4-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-4-0","right":"USE_BUDGET","validation_id":"VALID-4-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-rf1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rf1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-4-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-4-1","freshness_ref":"FRESH-4-1","generation":1,"grant_ref":"GRANT-EXEC-4-1","handoff":{"activation_id":"ACT-4-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-4-1","freshness_ref":"FRESH-4-1","generation":1,"grant_ref":"GRANT-EXEC-4-1","invocation_nonce":"NONCE-4-1","right":"USE_BUDGET","validation_id":"VALID-4-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-4-1","right":"USE_BUDGET","validation_id":"VALID-4-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-rf2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rf2","refundable":true,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-4-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-4-2","freshness_ref":"FRESH-4-2","generation":1,"grant_ref":"GRANT-EXEC-4-2","handoff":{"activation_id":"ACT-4-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-4-2","freshness_ref":"FRESH-4-2","generation":1,"grant_ref":"GRANT-EXEC-4-2","invocation_nonce":"NONCE-4-2","right":"USE_BUDGET","validation_id":"VALID-4-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-4-2","right":"USE_BUDGET","validation_id":"VALID-4-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"REFUND","operation_id":"OP-rf3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rf3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F02_PEAK","id":"peak-current-highwater","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-5-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-0","freshness_ref":"FRESH-5-0","generation":1,"grant_ref":"GRANT-EXEC-5-0","handoff":{"activation_id":"ACT-5-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-0","freshness_ref":"FRESH-5-0","generation":1,"grant_ref":"GRANT-EXEC-5-0","invocation_nonce":"NONCE-5-0","right":"USE_BUDGET","validation_id":"VALID-5-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-5-0","right":"USE_BUDGET","validation_id":"VALID-5-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-p1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-5-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-1","freshness_ref":"FRESH-5-1","generation":1,"grant_ref":"GRANT-EXEC-5-1","handoff":{"activation_id":"ACT-5-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-1","freshness_ref":"FRESH-5-1","generation":1,"grant_ref":"GRANT-EXEC-5-1","invocation_nonce":"NONCE-5-1","right":"USE_BUDGET","validation_id":"VALID-5-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-5-1","right":"USE_BUDGET","validation_id":"VALID-5-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"ACQUIRE","operation_id":"OP-p2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p2","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-5-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-2","freshness_ref":"FRESH-5-2","generation":1,"grant_ref":"GRANT-EXEC-5-2","handoff":{"activation_id":"ACT-5-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-2","freshness_ref":"FRESH-5-2","generation":1,"grant_ref":"GRANT-EXEC-5-2","invocation_nonce":"NONCE-5-2","right":"USE_BUDGET","validation_id":"VALID-5-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-5-2","right":"USE_BUDGET","validation_id":"VALID-5-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RELEASE","operation_id":"OP-p3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p3","release_from":"CURRENT","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F02_PEAK","id":"peak-over-cap","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-6-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-6-0","freshness_ref":"FRESH-6-0","generation":1,"grant_ref":"GRANT-EXEC-6-0","handoff":{"activation_id":"ACT-6-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-6-0","freshness_ref":"FRESH-6-0","generation":1,"grant_ref":"GRANT-EXEC-6-0","invocation_nonce":"NONCE-6-0","right":"USE_BUDGET","validation_id":"VALID-6-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-6-0","right":"USE_BUDGET","validation_id":"VALID-6-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":11,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-p4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F02_PEAK","id":"exclusive-fork-reservations","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-x1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-x2","resource_id":"RESOURCE-1","world_id":"WORLD-B"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-7-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-7-0","freshness_ref":"FRESH-7-0","generation":1,"grant_ref":"GRANT-EXEC-7-0","handoff":{"activation_id":"ACT-7-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-7-0","freshness_ref":"FRESH-7-0","generation":1,"grant_ref":"GRANT-EXEC-7-0","invocation_nonce":"NONCE-7-0","right":"USE_BUDGET","validation_id":"VALID-7-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-7-0","right":"USE_BUDGET","validation_id":"VALID-7-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-x1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-x1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-7-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-7-1","freshness_ref":"FRESH-7-1","generation":1,"grant_ref":"GRANT-EXEC-7-1","handoff":{"activation_id":"ACT-7-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-7-1","freshness_ref":"FRESH-7-1","generation":1,"grant_ref":"GRANT-EXEC-7-1","invocation_nonce":"NONCE-7-1","right":"USE_BUDGET","validation_id":"VALID-7-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-7-1","right":"USE_BUDGET","validation_id":"VALID-7-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-x2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-x2","resource_id":"RESOURCE-1","world_id":"WORLD-B"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F03_RATE","id":"rate-capped-refill","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-RATE","kind":"RATE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"available":10,"cap":10,"last_refill_at":0,"refill":5,"reserved":0,"window":10},"unit_id":"request"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-8-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-8-0","freshness_ref":"FRESH-8-0","generation":1,"grant_ref":"GRANT-EXEC-8-0","handoff":{"activation_id":"ACT-8-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-8-0","freshness_ref":"FRESH-8-0","generation":1,"grant_ref":"GRANT-EXEC-8-0","invocation_nonce":"NONCE-8-0","right":"USE_BUDGET","validation_id":"VALID-8-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-8-0","right":"USE_BUDGET","validation_id":"VALID-8-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":8,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"RESERVE","operation_id":"OP-r1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-8-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-8-1","freshness_ref":"FRESH-8-1","generation":1,"grant_ref":"GRANT-EXEC-8-1","handoff":{"activation_id":"ACT-8-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-8-1","freshness_ref":"FRESH-8-1","generation":1,"grant_ref":"GRANT-EXEC-8-1","invocation_nonce":"NONCE-8-1","right":"USE_BUDGET","validation_id":"VALID-8-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-8-1","right":"USE_BUDGET","validation_id":"VALID-8-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":8,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"ACQUIRE","operation_id":"OP-r2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r2","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-r3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-r3","freshness_ref":"FRESH-r3","generation":1,"grant_ref":"GRANT-EXEC-r3","handoff":{"activation_id":"ACT-r3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-r3","freshness_ref":"FRESH-r3","generation":1,"grant_ref":"GRANT-EXEC-r3","invocation_nonce":"NONCE-r3","right":"USE_BUDGET","validation_id":"VALID-r3","world_id":"WORLD-A"},"invocation_nonce":"NONCE-r3","right":"USE_BUDGET","validation_id":"VALID-r3","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"REFILL","operation_id":"OP-r3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":25}]}},{"family":"F03_RATE","id":"rate-vs-stock-no-conversion","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-RATE","kind":"RATE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"available":10,"cap":10,"last_refill_at":0,"refill":5,"reserved":0,"window":10},"unit_id":"request"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-9-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-9-0","freshness_ref":"FRESH-9-0","generation":1,"grant_ref":"GRANT-EXEC-9-0","handoff":{"activation_id":"ACT-9-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-9-0","freshness_ref":"FRESH-9-0","generation":1,"grant_ref":"GRANT-EXEC-9-0","invocation_nonce":"NONCE-9-0","right":"USE_BUDGET","validation_id":"VALID-9-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-9-0","right":"USE_BUDGET","validation_id":"VALID-9-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":11,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"RESERVE","operation_id":"OP-r4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F03_RATE","id":"rate-window-not-elapsed","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-RATE","kind":"RATE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"available":10,"cap":10,"last_refill_at":0,"refill":5,"reserved":0,"window":10},"unit_id":"request"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r6","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-10-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-10-0","freshness_ref":"FRESH-10-0","generation":1,"grant_ref":"GRANT-EXEC-10-0","handoff":{"activation_id":"ACT-10-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-10-0","freshness_ref":"FRESH-10-0","generation":1,"grant_ref":"GRANT-EXEC-10-0","invocation_nonce":"NONCE-10-0","right":"USE_BUDGET","validation_id":"VALID-10-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-10-0","right":"USE_BUDGET","validation_id":"VALID-10-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"ACQUIRE","operation_id":"OP-r5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r5","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-10-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-10-1","freshness_ref":"FRESH-10-1","generation":1,"grant_ref":"GRANT-EXEC-10-1","handoff":{"activation_id":"ACT-10-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-10-1","freshness_ref":"FRESH-10-1","generation":1,"grant_ref":"GRANT-EXEC-10-1","invocation_nonce":"NONCE-10-1","right":"USE_BUDGET","validation_id":"VALID-10-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-10-1","right":"USE_BUDGET","validation_id":"VALID-10-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"REFILL","operation_id":"OP-r6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F04_LEASE","id":"lease-expiry","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-LEASE","kind":"LEASE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"active":[],"capacity":2,"expired":[],"history":[]},"unit_id":"tool-seat"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l2","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-11-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-11-0","freshness_ref":"FRESH-11-0","generation":1,"grant_ref":"GRANT-EXEC-11-0","handoff":{"activation_id":"ACT-11-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-11-0","freshness_ref":"FRESH-11-0","generation":1,"grant_ref":"GRANT-EXEC-11-0","invocation_nonce":"NONCE-11-0","right":"USE_BUDGET","validation_id":"VALID-11-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-11-0","right":"USE_BUDGET","validation_id":"VALID-11-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"expires_at":15,"operation":"LEASE_GRANT","operation_id":"OP-l1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-l2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-l2","freshness_ref":"FRESH-l2","generation":1,"grant_ref":"GRANT-EXEC-l2","handoff":{"activation_id":"ACT-l2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-l2","freshness_ref":"FRESH-l2","generation":1,"grant_ref":"GRANT-EXEC-l2","invocation_nonce":"NONCE-l2","right":"USE_BUDGET","validation_id":"VALID-l2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-l2","right":"USE_BUDGET","validation_id":"VALID-l2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"lease_id":"OP-l1","operation":"LEASE_USE","operation_id":"OP-l2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":16}]}},{"family":"F04_LEASE","id":"lease-revoke-after-use","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-LEASE","kind":"LEASE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"active":[],"capacity":2,"expired":[],"history":[]},"unit_id":"tool-seat"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l5","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-12-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-12-0","freshness_ref":"FRESH-12-0","generation":1,"grant_ref":"GRANT-EXEC-12-0","handoff":{"activation_id":"ACT-12-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-12-0","freshness_ref":"FRESH-12-0","generation":1,"grant_ref":"GRANT-EXEC-12-0","invocation_nonce":"NONCE-12-0","right":"USE_BUDGET","validation_id":"VALID-12-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-12-0","right":"USE_BUDGET","validation_id":"VALID-12-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"expires_at":30,"operation":"LEASE_GRANT","operation_id":"OP-l3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-12-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-12-1","freshness_ref":"FRESH-12-1","generation":1,"grant_ref":"GRANT-EXEC-12-1","handoff":{"activation_id":"ACT-12-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-12-1","freshness_ref":"FRESH-12-1","generation":1,"grant_ref":"GRANT-EXEC-12-1","invocation_nonce":"NONCE-12-1","right":"USE_BUDGET","validation_id":"VALID-12-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-12-1","right":"USE_BUDGET","validation_id":"VALID-12-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"lease_id":"OP-l3","operation":"LEASE_USE","operation_id":"OP-l4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-12-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-12-2","freshness_ref":"FRESH-12-2","generation":1,"grant_ref":"GRANT-EXEC-12-2","handoff":{"activation_id":"ACT-12-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-12-2","freshness_ref":"FRESH-12-2","generation":1,"grant_ref":"GRANT-EXEC-12-2","invocation_nonce":"NONCE-12-2","right":"USE_BUDGET","validation_id":"VALID-12-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-12-2","right":"USE_BUDGET","validation_id":"VALID-12-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","lease_id":"OP-l3","operation":"LEASE_REVOKE","operation_id":"OP-l5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F04_LEASE","id":"lease-renew-epoch","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-LEASE","kind":"LEASE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"active":[],"capacity":2,"expired":[],"history":[]},"unit_id":"tool-seat"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l7","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","handoff":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"expires_at":20,"operation":"LEASE_GRANT","operation_id":"OP-l6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-13-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-1","freshness_ref":"FRESH-13-1","generation":1,"grant_ref":"GRANT-EXEC-13-1","handoff":{"activation_id":"ACT-13-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-1","freshness_ref":"FRESH-13-1","generation":1,"grant_ref":"GRANT-EXEC-13-1","invocation_nonce":"NONCE-13-1","right":"USE_BUDGET","validation_id":"VALID-13-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-1","right":"USE_BUDGET","validation_id":"VALID-13-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":2,"expires_at":40,"lease_id":"OP-l6","operation":"LEASE_RENEW","operation_id":"OP-l7","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l7","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F05_SHARE","id":"share-sibling-oversubscription","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-SHARE","kind":"SHARE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"capacity":10,"children":[],"revoked_history":[]},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s2","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-14-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-14-0","freshness_ref":"FRESH-14-0","generation":1,"grant_ref":"GRANT-EXEC-14-0","handoff":{"activation_id":"ACT-14-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-14-0","freshness_ref":"FRESH-14-0","generation":1,"grant_ref":"GRANT-EXEC-14-0","invocation_nonce":"NONCE-14-0","right":"USE_BUDGET","validation_id":"VALID-14-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-14-0","right":"USE_BUDGET","validation_id":"VALID-14-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-14-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-14-1","freshness_ref":"FRESH-14-1","generation":1,"grant_ref":"GRANT-EXEC-14-1","handoff":{"activation_id":"ACT-14-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-14-1","freshness_ref":"FRESH-14-1","generation":1,"grant_ref":"GRANT-EXEC-14-1","invocation_nonce":"NONCE-14-1","right":"USE_BUDGET","validation_id":"VALID-14-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-14-1","right":"USE_BUDGET","validation_id":"VALID-14-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B2","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F05_SHARE","id":"share-parent-revoke","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-SHARE","kind":"SHARE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"capacity":10,"children":[],"revoked_history":[]},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s5","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-15-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0","freshness_ref":"FRESH-15-0","generation":1,"grant_ref":"GRANT-EXEC-15-0","handoff":{"activation_id":"ACT-15-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0","freshness_ref":"FRESH-15-0","generation":1,"grant_ref":"GRANT-EXEC-15-0","invocation_nonce":"NONCE-15-0","right":"USE_BUDGET","validation_id":"VALID-15-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-0","right":"USE_BUDGET","validation_id":"VALID-15-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-15-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-1","freshness_ref":"FRESH-15-1","generation":1,"grant_ref":"GRANT-EXEC-15-1","handoff":{"activation_id":"ACT-15-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-1","freshness_ref":"FRESH-15-1","generation":1,"grant_ref":"GRANT-EXEC-15-1","invocation_nonce":"NONCE-15-1","right":"USE_BUDGET","validation_id":"VALID-15-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-1","right":"USE_BUDGET","validation_id":"VALID-15-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_RESERVE","operation_id":"OP-s4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-15-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-2","freshness_ref":"FRESH-15-2","generation":1,"grant_ref":"GRANT-EXEC-15-2","handoff":{"activation_id":"ACT-15-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-2","freshness_ref":"FRESH-15-2","generation":1,"grant_ref":"GRANT-EXEC-15-2","invocation_nonce":"NONCE-15-2","right":"USE_BUDGET","validation_id":"VALID-15-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-2","right":"USE_BUDGET","validation_id":"VALID-15-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_REVOKE","operation_id":"OP-s5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F05_SHARE","id":"share-child-use","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-SHARE","kind":"SHARE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"capacity":10,"children":[],"revoked_history":[]},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s7","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s8","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-16-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-0","freshness_ref":"FRESH-16-0","generation":1,"grant_ref":"GRANT-EXEC-16-0","handoff":{"activation_id":"ACT-16-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-0","freshness_ref":"FRESH-16-0","generation":1,"grant_ref":"GRANT-EXEC-16-0","invocation_nonce":"NONCE-16-0","right":"USE_BUDGET","validation_id":"VALID-16-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-16-0","right":"USE_BUDGET","validation_id":"VALID-16-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-16-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-1","freshness_ref":"FRESH-16-1","generation":1,"grant_ref":"GRANT-EXEC-16-1","handoff":{"activation_id":"ACT-16-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-1","freshness_ref":"FRESH-16-1","generation":1,"grant_ref":"GRANT-EXEC-16-1","invocation_nonce":"NONCE-16-1","right":"USE_BUDGET","validation_id":"VALID-16-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-16-1","right":"USE_BUDGET","validation_id":"VALID-16-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_RESERVE","operation_id":"OP-s7","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s7","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-16-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-2","freshness_ref":"FRESH-16-2","generation":1,"grant_ref":"GRANT-EXEC-16-2","handoff":{"activation_id":"ACT-16-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-2","freshness_ref":"FRESH-16-2","generation":1,"grant_ref":"GRANT-EXEC-16-2","invocation_nonce":"NONCE-16-2","right":"USE_BUDGET","validation_id":"VALID-16-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-16-2","right":"USE_BUDGET","validation_id":"VALID-16-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":3,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ACQUIRE","operation_id":"OP-s8","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s8","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F06_CONTINGENCY","id":"contingency-overrun-denied","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o2","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-17-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-17-0","freshness_ref":"FRESH-17-0","generation":1,"grant_ref":"GRANT-EXEC-17-0","handoff":{"activation_id":"ACT-17-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-17-0","freshness_ref":"FRESH-17-0","generation":1,"grant_ref":"GRANT-EXEC-17-0","invocation_nonce":"NONCE-17-0","right":"USE_BUDGET","validation_id":"VALID-17-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-17-0","right":"USE_BUDGET","validation_id":"VALID-17-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":95,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-o1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-17-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-17-1","freshness_ref":"FRESH-17-1","generation":1,"grant_ref":"GRANT-EXEC-17-1","handoff":{"activation_id":"ACT-17-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-17-1","freshness_ref":"FRESH-17-1","generation":1,"grant_ref":"GRANT-EXEC-17-1","invocation_nonce":"NONCE-17-1","right":"USE_BUDGET","validation_id":"VALID-17-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-17-1","right":"USE_BUDGET","validation_id":"VALID-17-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":105,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-o2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o2","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F06_CONTINGENCY","id":"contingency-escrow-explicit","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o5","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-18-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-18-0","freshness_ref":"FRESH-18-0","generation":1,"grant_ref":"GRANT-EXEC-18-0","handoff":{"activation_id":"ACT-18-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-18-0","freshness_ref":"FRESH-18-0","generation":1,"grant_ref":"GRANT-EXEC-18-0","invocation_nonce":"NONCE-18-0","right":"USE_BUDGET","validation_id":"VALID-18-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-18-0","right":"USE_BUDGET","validation_id":"VALID-18-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":95,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-o3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-18-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-18-1","freshness_ref":"FRESH-18-1","generation":1,"grant_ref":"GRANT-EXEC-18-1","handoff":{"activation_id":"ACT-18-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-18-1","freshness_ref":"FRESH-18-1","generation":1,"grant_ref":"GRANT-EXEC-18-1","invocation_nonce":"NONCE-18-1","right":"USE_BUDGET","validation_id":"VALID-18-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-18-1","right":"USE_BUDGET","validation_id":"VALID-18-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":5,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ESCROW","operation_id":"OP-o4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-18-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-18-2","freshness_ref":"FRESH-18-2","generation":1,"grant_ref":"GRANT-EXEC-18-2","handoff":{"activation_id":"ACT-18-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-18-2","freshness_ref":"FRESH-18-2","generation":1,"grant_ref":"GRANT-EXEC-18-2","invocation_nonce":"NONCE-18-2","right":"USE_BUDGET","validation_id":"VALID-18-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-18-2","right":"USE_BUDGET","validation_id":"VALID-18-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":100,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-o5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-o5","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F07_PROVIDER","id":"provider-estimate-invoice-credit","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","handoff":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","handoff":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_OBSERVED","operation_id":"OP-v2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","prior_fact_id":"PF1-ESTIMATE","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-OBSERVED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","handoff":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_SETTLED","operation_id":"OP-v3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","prior_fact_id":"PF1-OBSERVED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-SETTLED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","handoff":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":2,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_CREDIT","operation_id":"OP-v4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","prior_fact_id":"PF1-SETTLED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-CREDIT","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F07_PROVIDER","id":"provider-unknown","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v6","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-20-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-0","freshness_ref":"FRESH-20-0","generation":1,"grant_ref":"GRANT-EXEC-20-0","handoff":{"activation_id":"ACT-20-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-0","freshness_ref":"FRESH-20-0","generation":1,"grant_ref":"GRANT-EXEC-20-0","invocation_nonce":"NONCE-20-0","right":"USE_BUDGET","validation_id":"VALID-20-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-20-0","right":"USE_BUDGET","validation_id":"VALID-20-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v5","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF2-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-20-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1","freshness_ref":"FRESH-20-1","generation":1,"grant_ref":"GRANT-EXEC-20-1","handoff":{"activation_id":"ACT-20-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1","freshness_ref":"FRESH-20-1","generation":1,"grant_ref":"GRANT-EXEC-20-1","invocation_nonce":"NONCE-20-1","right":"USE_BUDGET","validation_id":"VALID-20-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-20-1","right":"USE_BUDGET","validation_id":"VALID-20-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_UNKNOWN","operation_id":"OP-v6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v6","prior_fact_id":"PF2-ESTIMATE","provider_account_id":"PROVIDER-A","provider_fact_id":"PF2-UNKNOWN","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F08_RECOVERY","id":"lost-response-retry","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-rr1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr1","freshness_ref":"FRESH-rr1","generation":1,"grant_ref":"GRANT-EXEC-rr1","handoff":{"activation_id":"ACT-rr1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr1","freshness_ref":"FRESH-rr1","generation":1,"grant_ref":"GRANT-EXEC-rr1","invocation_nonce":"NONCE-rr1","right":"USE_BUDGET","validation_id":"VALID-rr1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-rr1","right":"USE_BUDGET","validation_id":"VALID-rr1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":8,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-rr1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10},{"kind":"RELOAD"},{"authority":{"activation_id":"ACT-rr2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr2","freshness_ref":"FRESH-rr2","generation":1,"grant_ref":"GRANT-EXEC-rr2","handoff":{"activation_id":"ACT-rr2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr2","freshness_ref":"FRESH-rr2","generation":1,"grant_ref":"GRANT-EXEC-rr2","invocation_nonce":"NONCE-rr2","right":"USE_BUDGET","validation_id":"VALID-rr2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-rr2","right":"USE_BUDGET","validation_id":"VALID-rr2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":8,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-rr1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F08_RECOVERY","id":"retry-before-commit","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-rr3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr3","freshness_ref":"FRESH-rr3","generation":1,"grant_ref":"GRANT-EXEC-rr3","handoff":{"activation_id":"ACT-rr3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr3","freshness_ref":"FRESH-rr3","generation":1,"grant_ref":"GRANT-EXEC-rr3","invocation_nonce":"NONCE-rr3","right":"USE_BUDGET","validation_id":"VALID-rr3","world_id":"WORLD-A"},"invocation_nonce":"NONCE-rr3","right":"USE_BUDGET","validation_id":"VALID-rr3","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":8,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-rr3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"BEFORE_COMMIT","kind":"APPLY","logical_now":10},{"kind":"RELOAD"},{"authority":{"activation_id":"ACT-rr4","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr4","freshness_ref":"FRESH-rr4","generation":1,"grant_ref":"GRANT-EXEC-rr4","handoff":{"activation_id":"ACT-rr4","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr4","freshness_ref":"FRESH-rr4","generation":1,"grant_ref":"GRANT-EXEC-rr4","invocation_nonce":"NONCE-rr4","right":"USE_BUDGET","validation_id":"VALID-rr4","world_id":"WORLD-A"},"invocation_nonce":"NONCE-rr4","right":"USE_BUDGET","validation_id":"VALID-rr4","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":8,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-rr3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F08_RECOVERY","id":"retained-tomb-expiry","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr6","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-23-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-23-0","freshness_ref":"FRESH-23-0","generation":1,"grant_ref":"GRANT-EXEC-23-0","handoff":{"activation_id":"ACT-23-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-23-0","freshness_ref":"FRESH-23-0","generation":1,"grant_ref":"GRANT-EXEC-23-0","invocation_nonce":"NONCE-23-0","right":"USE_BUDGET","validation_id":"VALID-23-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-23-0","right":"USE_BUDGET","validation_id":"VALID-23-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":8,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-rr5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-rr6","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr6","freshness_ref":"FRESH-rr6","generation":1,"grant_ref":"GRANT-EXEC-rr6","handoff":{"activation_id":"ACT-rr6","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr6","freshness_ref":"FRESH-rr6","generation":1,"grant_ref":"GRANT-EXEC-rr6","invocation_nonce":"NONCE-rr6","right":"USE_BUDGET","validation_id":"VALID-rr6","world_id":"WORLD-A"},"invocation_nonce":"NONCE-rr6","right":"USE_BUDGET","validation_id":"VALID-rr6","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"TOMB","operation_id":"OP-rr6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr6","resource_id":"RESOURCE-1","target_operation_id":"OP-rr5","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-rr7","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr7","freshness_ref":"FRESH-rr7","generation":1,"grant_ref":"GRANT-EXEC-rr7","handoff":{"activation_id":"ACT-rr7","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr7","freshness_ref":"FRESH-rr7","generation":1,"grant_ref":"GRANT-EXEC-rr7","invocation_nonce":"NONCE-rr7","right":"USE_BUDGET","validation_id":"VALID-rr7","world_id":"WORLD-A"},"invocation_nonce":"NONCE-rr7","right":"USE_BUDGET","validation_id":"VALID-rr7","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":8,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-rr5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":50}]}},{"family":"F09_SPECULATION","id":"speculative-loser-reversible","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp2","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-24-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-24-0","freshness_ref":"FRESH-24-0","generation":1,"grant_ref":"GRANT-EXEC-24-0","handoff":{"activation_id":"ACT-24-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-24-0","freshness_ref":"FRESH-24-0","generation":1,"grant_ref":"GRANT-EXEC-24-0","invocation_nonce":"NONCE-24-0","right":"USE_BUDGET","validation_id":"VALID-24-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-24-0","right":"USE_BUDGET","validation_id":"VALID-24-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":10,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-sp1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-24-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-24-1","freshness_ref":"FRESH-24-1","generation":1,"grant_ref":"GRANT-EXEC-24-1","handoff":{"activation_id":"ACT-24-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-24-1","freshness_ref":"FRESH-24-1","generation":1,"grant_ref":"GRANT-EXEC-24-1","invocation_nonce":"NONCE-24-1","right":"USE_BUDGET","validation_id":"VALID-24-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-24-1","right":"USE_BUDGET","validation_id":"VALID-24-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":10,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RELEASE","operation_id":"OP-sp2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp2","release_from":"RESERVED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F09_SPECULATION","id":"speculative-loser-irreversible","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp5","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-25-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-25-0","freshness_ref":"FRESH-25-0","generation":1,"grant_ref":"GRANT-EXEC-25-0","handoff":{"activation_id":"ACT-25-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-25-0","freshness_ref":"FRESH-25-0","generation":1,"grant_ref":"GRANT-EXEC-25-0","invocation_nonce":"NONCE-25-0","right":"USE_BUDGET","validation_id":"VALID-25-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-25-0","right":"USE_BUDGET","validation_id":"VALID-25-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":10,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-sp3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-25-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-25-1","freshness_ref":"FRESH-25-1","generation":1,"grant_ref":"GRANT-EXEC-25-1","handoff":{"activation_id":"ACT-25-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-25-1","freshness_ref":"FRESH-25-1","generation":1,"grant_ref":"GRANT-EXEC-25-1","invocation_nonce":"NONCE-25-1","right":"USE_BUDGET","validation_id":"VALID-25-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-25-1","right":"USE_BUDGET","validation_id":"VALID-25-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":10,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-sp4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp4","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-25-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-25-2","freshness_ref":"FRESH-25-2","generation":1,"grant_ref":"GRANT-EXEC-25-2","handoff":{"activation_id":"ACT-25-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-25-2","freshness_ref":"FRESH-25-2","generation":1,"grant_ref":"GRANT-EXEC-25-2","invocation_nonce":"NONCE-25-2","right":"USE_BUDGET","validation_id":"VALID-25-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-25-2","right":"USE_BUDGET","validation_id":"VALID-25-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"FAIL","operation_id":"OP-sp5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F09_SPECULATION","id":"evaluator-cost","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp7","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-26-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-26-0","freshness_ref":"FRESH-26-0","generation":1,"grant_ref":"GRANT-EXEC-26-0","handoff":{"activation_id":"ACT-26-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-26-0","freshness_ref":"FRESH-26-0","generation":1,"grant_ref":"GRANT-EXEC-26-0","invocation_nonce":"NONCE-26-0","right":"USE_BUDGET","validation_id":"VALID-26-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-26-0","right":"USE_BUDGET","validation_id":"VALID-26-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-sp6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-26-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-26-1","freshness_ref":"FRESH-26-1","generation":1,"grant_ref":"GRANT-EXEC-26-1","handoff":{"activation_id":"ACT-26-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-26-1","freshness_ref":"FRESH-26-1","generation":1,"grant_ref":"GRANT-EXEC-26-1","invocation_nonce":"NONCE-26-1","right":"USE_BUDGET","validation_id":"VALID-26-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-26-1","right":"USE_BUDGET","validation_id":"VALID-26-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-sp7","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp7","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F09_SPECULATION","id":"dependency-rollback","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp8","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp9","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp10","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-27-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-27-0","freshness_ref":"FRESH-27-0","generation":1,"grant_ref":"GRANT-EXEC-27-0","handoff":{"activation_id":"ACT-27-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-27-0","freshness_ref":"FRESH-27-0","generation":1,"grant_ref":"GRANT-EXEC-27-0","invocation_nonce":"NONCE-27-0","right":"USE_BUDGET","validation_id":"VALID-27-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-27-0","right":"USE_BUDGET","validation_id":"VALID-27-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-sp8","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp8","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-27-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-27-1","freshness_ref":"FRESH-27-1","generation":1,"grant_ref":"GRANT-EXEC-27-1","handoff":{"activation_id":"ACT-27-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-27-1","freshness_ref":"FRESH-27-1","generation":1,"grant_ref":"GRANT-EXEC-27-1","invocation_nonce":"NONCE-27-1","right":"USE_BUDGET","validation_id":"VALID-27-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-27-1","right":"USE_BUDGET","validation_id":"VALID-27-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-sp9","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp9","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-27-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-27-2","freshness_ref":"FRESH-27-2","generation":1,"grant_ref":"GRANT-EXEC-27-2","handoff":{"activation_id":"ACT-27-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-27-2","freshness_ref":"FRESH-27-2","generation":1,"grant_ref":"GRANT-EXEC-27-2","invocation_nonce":"NONCE-27-2","right":"USE_BUDGET","validation_id":"VALID-27-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-27-2","right":"USE_BUDGET","validation_id":"VALID-27-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"DEPENDENCY_ROLLBACK","operation_id":"OP-sp10","owner_id":"ACTOR-A","plan_id":"PLAN-OP-sp10","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F10_CACHE","id":"fresh-cache-reuse","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-ca1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-28-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-28-0","freshness_ref":"FRESH-28-0","generation":1,"grant_ref":"GRANT-EXEC-28-0","handoff":{"activation_id":"ACT-28-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-28-0","freshness_ref":"FRESH-28-0","generation":1,"grant_ref":"GRANT-EXEC-28-0","invocation_nonce":"NONCE-28-0","right":"USE_BUDGET","validation_id":"VALID-28-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-28-0","right":"USE_BUDGET","validation_id":"VALID-28-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"cache_fresh":true,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"CACHE_REUSE","operation_id":"OP-ca1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-ca1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F10_CACHE","id":"stale-cache-recompute","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-ca2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-ca3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-ca4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-29-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-29-0","freshness_ref":"FRESH-29-0","generation":1,"grant_ref":"GRANT-EXEC-29-0","handoff":{"activation_id":"ACT-29-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-29-0","freshness_ref":"FRESH-29-0","generation":1,"grant_ref":"GRANT-EXEC-29-0","invocation_nonce":"NONCE-29-0","right":"USE_BUDGET","validation_id":"VALID-29-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-29-0","right":"USE_BUDGET","validation_id":"VALID-29-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"cache_fresh":false,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"CACHE_REUSE","operation_id":"OP-ca2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-ca2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-29-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-29-1","freshness_ref":"FRESH-29-1","generation":1,"grant_ref":"GRANT-EXEC-29-1","handoff":{"activation_id":"ACT-29-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-29-1","freshness_ref":"FRESH-29-1","generation":1,"grant_ref":"GRANT-EXEC-29-1","invocation_nonce":"NONCE-29-1","right":"USE_BUDGET","validation_id":"VALID-29-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-29-1","right":"USE_BUDGET","validation_id":"VALID-29-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":3,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-ca3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-ca3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-29-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-29-2","freshness_ref":"FRESH-29-2","generation":1,"grant_ref":"GRANT-EXEC-29-2","handoff":{"activation_id":"ACT-29-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-29-2","freshness_ref":"FRESH-29-2","generation":1,"grant_ref":"GRANT-EXEC-29-2","invocation_nonce":"NONCE-29-2","right":"USE_BUDGET","validation_id":"VALID-29-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-29-2","right":"USE_BUDGET","validation_id":"VALID-29-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":3,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-ca4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-ca4","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F11_ATTRIBUTION","id":"delegation-attribution","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-CHILD","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-30-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-30-0","freshness_ref":"FRESH-30-0","generation":1,"grant_ref":"GRANT-EXEC-30-0","handoff":{"activation_id":"ACT-30-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-30-0","freshness_ref":"FRESH-30-0","generation":1,"grant_ref":"GRANT-EXEC-30-0","invocation_nonce":"NONCE-30-0","right":"USE_BUDGET","validation_id":"VALID-30-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-30-0","right":"USE_BUDGET","validation_id":"VALID-30-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-CHILD","amount":5,"commitment_id":"COMMITMENT-CHILD","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-a1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F11_ATTRIBUTION","id":"model-substitution","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a2","resource_id":"MODEL-A","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a3","resource_id":"MODEL-A","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a4","resource_id":"MODEL-B","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-31-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-31-0","freshness_ref":"FRESH-31-0","generation":1,"grant_ref":"GRANT-EXEC-31-0","handoff":{"activation_id":"ACT-31-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-31-0","freshness_ref":"FRESH-31-0","generation":1,"grant_ref":"GRANT-EXEC-31-0","invocation_nonce":"NONCE-31-0","right":"USE_BUDGET","validation_id":"VALID-31-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-31-0","right":"USE_BUDGET","validation_id":"VALID-31-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":5,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-a2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a2","resource_id":"MODEL-A","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-31-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-31-1","freshness_ref":"FRESH-31-1","generation":1,"grant_ref":"GRANT-EXEC-31-1","handoff":{"activation_id":"ACT-31-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-31-1","freshness_ref":"FRESH-31-1","generation":1,"grant_ref":"GRANT-EXEC-31-1","invocation_nonce":"NONCE-31-1","right":"USE_BUDGET","validation_id":"VALID-31-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-31-1","right":"USE_BUDGET","validation_id":"VALID-31-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":5,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RELEASE","operation_id":"OP-a3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a3","release_from":"RESERVED","resource_id":"MODEL-A","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-31-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-31-2","freshness_ref":"FRESH-31-2","generation":1,"grant_ref":"GRANT-EXEC-31-2","handoff":{"activation_id":"ACT-31-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-31-2","freshness_ref":"FRESH-31-2","generation":1,"grant_ref":"GRANT-EXEC-31-2","invocation_nonce":"NONCE-31-2","right":"USE_BUDGET","validation_id":"VALID-31-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-31-2","right":"USE_BUDGET","validation_id":"VALID-31-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":5,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-a4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a4","resource_id":"MODEL-B","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F11_ATTRIBUTION","id":"tool-substitution","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-LEASE","kind":"LEASE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"active":[],"capacity":2,"expired":[],"history":[]},"unit_id":"tool-seat"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a5","resource_id":"TOOL-B","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-32-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-32-0","freshness_ref":"FRESH-32-0","generation":1,"grant_ref":"GRANT-EXEC-32-0","handoff":{"activation_id":"ACT-32-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-32-0","freshness_ref":"FRESH-32-0","generation":1,"grant_ref":"GRANT-EXEC-32-0","invocation_nonce":"NONCE-32-0","right":"USE_BUDGET","validation_id":"VALID-32-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-32-0","right":"USE_BUDGET","validation_id":"VALID-32-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"expires_at":30,"operation":"LEASE_GRANT","operation_id":"OP-a5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-a5","resource_id":"TOOL-B","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F12_LATE_CANCEL","id":"late-result-no-refund","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-33-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-33-0","freshness_ref":"FRESH-33-0","generation":1,"grant_ref":"GRANT-EXEC-33-0","handoff":{"activation_id":"ACT-33-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-33-0","freshness_ref":"FRESH-33-0","generation":1,"grant_ref":"GRANT-EXEC-33-0","invocation_nonce":"NONCE-33-0","right":"USE_BUDGET","validation_id":"VALID-33-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-33-0","right":"USE_BUDGET","validation_id":"VALID-33-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-t1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-33-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-33-1","freshness_ref":"FRESH-33-1","generation":1,"grant_ref":"GRANT-EXEC-33-1","handoff":{"activation_id":"ACT-33-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-33-1","freshness_ref":"FRESH-33-1","generation":1,"grant_ref":"GRANT-EXEC-33-1","invocation_nonce":"NONCE-33-1","right":"USE_BUDGET","validation_id":"VALID-33-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-33-1","right":"USE_BUDGET","validation_id":"VALID-33-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-t2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t2","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-33-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-33-2","freshness_ref":"FRESH-33-2","generation":1,"grant_ref":"GRANT-EXEC-33-2","handoff":{"activation_id":"ACT-33-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-33-2","freshness_ref":"FRESH-33-2","generation":1,"grant_ref":"GRANT-EXEC-33-2","invocation_nonce":"NONCE-33-2","right":"USE_BUDGET","validation_id":"VALID-33-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-33-2","right":"USE_BUDGET","validation_id":"VALID-33-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"LATE_RESULT","operation_id":"OP-t3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F12_LATE_CANCEL","id":"cancel-request-before-effective","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t7","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-34-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-34-0","freshness_ref":"FRESH-34-0","generation":1,"grant_ref":"GRANT-EXEC-34-0","handoff":{"activation_id":"ACT-34-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-34-0","freshness_ref":"FRESH-34-0","generation":1,"grant_ref":"GRANT-EXEC-34-0","invocation_nonce":"NONCE-34-0","right":"USE_BUDGET","validation_id":"VALID-34-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-34-0","right":"USE_BUDGET","validation_id":"VALID-34-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-t4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-34-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-34-1","freshness_ref":"FRESH-34-1","generation":1,"grant_ref":"GRANT-EXEC-34-1","handoff":{"activation_id":"ACT-34-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-34-1","freshness_ref":"FRESH-34-1","generation":1,"grant_ref":"GRANT-EXEC-34-1","invocation_nonce":"NONCE-34-1","right":"USE_BUDGET","validation_id":"VALID-34-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-34-1","right":"USE_BUDGET","validation_id":"VALID-34-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"CANCEL_REQUEST","operation_id":"OP-t5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-34-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-34-2","freshness_ref":"FRESH-34-2","generation":1,"grant_ref":"GRANT-EXEC-34-2","handoff":{"activation_id":"ACT-34-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-34-2","freshness_ref":"FRESH-34-2","generation":1,"grant_ref":"GRANT-EXEC-34-2","invocation_nonce":"NONCE-34-2","right":"USE_BUDGET","validation_id":"VALID-34-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-34-2","right":"USE_BUDGET","validation_id":"VALID-34-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-t6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t6","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-34-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-34-3","freshness_ref":"FRESH-34-3","generation":1,"grant_ref":"GRANT-EXEC-34-3","handoff":{"activation_id":"ACT-34-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-34-3","freshness_ref":"FRESH-34-3","generation":1,"grant_ref":"GRANT-EXEC-34-3","invocation_nonce":"NONCE-34-3","right":"USE_BUDGET","validation_id":"VALID-34-3","world_id":"WORLD-A"},"invocation_nonce":"NONCE-34-3","right":"USE_BUDGET","validation_id":"VALID-34-3","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"CANCEL_EFFECTIVE","operation_id":"OP-t7","owner_id":"ACTOR-A","plan_id":"PLAN-OP-t7","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F13_COMPOUND","id":"compound-all-or-none","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","handoff":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"children":[{"authority":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","handoff":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-m1a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"}},{"authority":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","handoff":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-m1b","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}}],"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"COMPOUND","operation_id":"OP-m1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F13_COMPOUND","id":"compound-one-denied","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m2a","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m2b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-36-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-36-0","freshness_ref":"FRESH-36-0","generation":1,"grant_ref":"GRANT-EXEC-36-0","handoff":{"activation_id":"ACT-36-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-36-0","freshness_ref":"FRESH-36-0","generation":1,"grant_ref":"GRANT-EXEC-36-0","invocation_nonce":"NONCE-36-0","right":"USE_BUDGET","validation_id":"VALID-36-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-36-0","right":"USE_BUDGET","validation_id":"VALID-36-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"children":[{"authority":{"activation_id":"ACT-36-0-OP-m2a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-36-0-OP-m2a","freshness_ref":"FRESH-36-0-OP-m2a","generation":1,"grant_ref":"GRANT-EXEC-36-0-OP-m2a","handoff":{"activation_id":"ACT-36-0-OP-m2a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-36-0-OP-m2a","freshness_ref":"FRESH-36-0-OP-m2a","generation":1,"grant_ref":"GRANT-EXEC-36-0-OP-m2a","invocation_nonce":"NONCE-36-0-OP-m2a","right":"USE_BUDGET","validation_id":"VALID-36-0-OP-m2a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-36-0-OP-m2a","right":"USE_BUDGET","validation_id":"VALID-36-0-OP-m2a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-m2a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m2a","resource_id":"RESOURCE-1","world_id":"WORLD-A"}},{"authority":{"activation_id":"ACT-36-0-OP-m2b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-36-0-OP-m2b","freshness_ref":"FRESH-36-0-OP-m2b","generation":1,"grant_ref":"GRANT-EXEC-36-0-OP-m2b","handoff":{"activation_id":"ACT-36-0-OP-m2b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-36-0-OP-m2b","freshness_ref":"FRESH-36-0-OP-m2b","generation":1,"grant_ref":"GRANT-EXEC-36-0-OP-m2b","invocation_nonce":"NONCE-36-0-OP-m2b","right":"USE_BUDGET","validation_id":"VALID-36-0-OP-m2b","world_id":"WORLD-A"},"invocation_nonce":"NONCE-36-0-OP-m2b","right":"USE_BUDGET","validation_id":"VALID-36-0-OP-m2b","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":14,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-m2b","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m2b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}}],"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"COMPOUND","operation_id":"OP-m2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F14_AUTHORITY","id":"authority-denial-no-delta","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-d1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-d1","freshness_ref":"FRESH-d1","generation":1,"grant_ref":"GRANT-EXEC-d1","handoff":{"activation_id":"ACT-d1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-d1","freshness_ref":"FRESH-d1","generation":1,"grant_ref":"GRANT-EXEC-d1","invocation_nonce":"NONCE-d1","right":"USE_BUDGET","validation_id":"VALID-d1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-d1","right":"USE_BUDGET","validation_id":"VALID-d1","verdict":"DENY","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-d1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F14_AUTHORITY","id":"global-world-scope-crossing","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d2","resource_id":"RESOURCE-1","world_id":"WORLD-B"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-38-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-38-0","freshness_ref":"FRESH-38-0","generation":1,"grant_ref":"GRANT-EXEC-38-0","handoff":{"activation_id":"ACT-38-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-38-0","freshness_ref":"FRESH-38-0","generation":1,"grant_ref":"GRANT-EXEC-38-0","invocation_nonce":"NONCE-38-0","right":"USE_BUDGET","validation_id":"VALID-38-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-38-0","right":"USE_BUDGET","validation_id":"VALID-38-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-d2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d2","resource_id":"RESOURCE-1","world_id":"WORLD-B"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F15_SEPARATION","id":"effect-separation","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-e1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-39-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-39-0","freshness_ref":"FRESH-39-0","generation":1,"grant_ref":"GRANT-EXEC-39-0","handoff":{"activation_id":"ACT-39-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-39-0","freshness_ref":"FRESH-39-0","generation":1,"grant_ref":"GRANT-EXEC-39-0","invocation_nonce":"NONCE-39-0","right":"USE_BUDGET","validation_id":"VALID-39-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-39-0","right":"USE_BUDGET","validation_id":"VALID-39-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"EFFECT_AUTHORIZE","operation_id":"OP-e1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-e1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F15_SEPARATION","id":"promotion-separation","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-e2","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-40-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-40-0","freshness_ref":"FRESH-40-0","generation":1,"grant_ref":"GRANT-EXEC-40-0","handoff":{"activation_id":"ACT-40-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-40-0","freshness_ref":"FRESH-40-0","generation":1,"grant_ref":"GRANT-EXEC-40-0","invocation_nonce":"NONCE-40-0","right":"USE_BUDGET","validation_id":"VALID-40-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-40-0","right":"USE_BUDGET","validation_id":"VALID-40-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROMOTE","operation_id":"OP-e2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-e2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F16_UNSUPPORTED","id":"unsupported-cross-kind","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-u1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-41-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-41-0","freshness_ref":"FRESH-41-0","generation":1,"grant_ref":"GRANT-EXEC-41-0","handoff":{"activation_id":"ACT-41-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-41-0","freshness_ref":"FRESH-41-0","generation":1,"grant_ref":"GRANT-EXEC-41-0","invocation_nonce":"NONCE-41-0","right":"USE_BUDGET","validation_id":"VALID-41-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-41-0","right":"USE_BUDGET","validation_id":"VALID-41-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":5,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"CONVERT","operation_id":"OP-u1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-u1","resource_id":"RESOURCE-1","target_dimension_id":"D-PEAK","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"compound-duplicate-child","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","handoff":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"children":[{"authority":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","handoff":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-m1a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"}},{"authority":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","handoff":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-m1a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}}],"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"COMPOUND","operation_id":"OP-m1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"compound-attacker-child","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","handoff":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"children":[{"authority":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","handoff":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-m1a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"}},{"authority":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ATTACKER","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","handoff":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-m1b","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}}],"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"COMPOUND","operation_id":"OP-m1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"denied-after-fault","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-d1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-d1","freshness_ref":"FRESH-d1","generation":1,"grant_ref":"GRANT-EXEC-d1","handoff":{"activation_id":"ACT-d1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-d1","freshness_ref":"FRESH-d1","generation":1,"grant_ref":"GRANT-EXEC-d1","invocation_nonce":"NONCE-d1","right":"USE_BUDGET","validation_id":"VALID-d1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-d1","right":"USE_BUDGET","validation_id":"VALID-d1","verdict":"DENY","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-d1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"denied-before-fault","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-d1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-d1","freshness_ref":"FRESH-d1","generation":1,"grant_ref":"GRANT-EXEC-d1","handoff":{"activation_id":"ACT-d1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-d1","freshness_ref":"FRESH-d1","generation":1,"grant_ref":"GRANT-EXEC-d1","invocation_nonce":"NONCE-d1","right":"USE_BUDGET","validation_id":"VALID-d1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-d1","right":"USE_BUDGET","validation_id":"VALID-d1","verdict":"DENY","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-d1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"BEFORE_COMMIT","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"handoff-generation-mismatch","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-d1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-d1","freshness_ref":"FRESH-d1","generation":1,"grant_ref":"GRANT-EXEC-d1","handoff":{"activation_id":"ACT-d1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-d1","freshness_ref":"FRESH-d1","generation":2,"grant_ref":"GRANT-EXEC-d1","invocation_nonce":"NONCE-d1","right":"USE_BUDGET","validation_id":"VALID-d1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-d1","right":"USE_BUDGET","validation_id":"VALID-d1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-d1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-d1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"freshness-repeat","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-1-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-0","freshness_ref":"FRESH-1-0","generation":1,"grant_ref":"GRANT-EXEC-1-0","handoff":{"activation_id":"ACT-1-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-0","freshness_ref":"FRESH-1-0","generation":1,"grant_ref":"GRANT-EXEC-1-0","invocation_nonce":"NONCE-1-0","right":"USE_BUDGET","validation_id":"VALID-1-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-1-0","right":"USE_BUDGET","validation_id":"VALID-1-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":30,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-c1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-1-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-1","freshness_ref":"FRESH-1-0","generation":1,"grant_ref":"GRANT-EXEC-1-1","handoff":{"activation_id":"ACT-1-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-1","freshness_ref":"FRESH-1-1","generation":1,"grant_ref":"GRANT-EXEC-1-1","invocation_nonce":"NONCE-1-1","right":"USE_BUDGET","validation_id":"VALID-1-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-1-1","right":"USE_BUDGET","validation_id":"VALID-1-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":20,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"ACQUIRE","operation_id":"OP-c2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c2","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-1-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-2","freshness_ref":"FRESH-1-2","generation":1,"grant_ref":"GRANT-EXEC-1-2","handoff":{"activation_id":"ACT-1-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-1-2","freshness_ref":"FRESH-1-2","generation":1,"grant_ref":"GRANT-EXEC-1-2","invocation_nonce":"NONCE-1-2","right":"USE_BUDGET","validation_id":"VALID-1-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-1-2","right":"USE_BUDGET","validation_id":"VALID-1-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":10,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RELEASE","operation_id":"OP-c3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-c3","release_from":"RESERVED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"replay-binding-mismatch","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-rr1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr1","freshness_ref":"FRESH-rr1","generation":1,"grant_ref":"GRANT-EXEC-rr1","handoff":{"activation_id":"ACT-rr1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr1","freshness_ref":"FRESH-rr1","generation":1,"grant_ref":"GRANT-EXEC-rr1","invocation_nonce":"NONCE-rr1","right":"USE_BUDGET","validation_id":"VALID-rr1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-rr1","right":"USE_BUDGET","validation_id":"VALID-rr1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":8,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-rr1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10},{"kind":"RELOAD"},{"authority":{"activation_id":"ACT-rr2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr2","freshness_ref":"FRESH-rr2","generation":1,"grant_ref":"GRANT-EXEC-rr2","handoff":{"activation_id":"ACT-rr2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-rr2","freshness_ref":"FRESH-rr2","generation":1,"grant_ref":"GRANT-EXEC-rr2","invocation_nonce":"NONCE-rr2","right":"USE_BUDGET","validation_id":"VALID-rr2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-rr2","right":"USE_BUDGET","validation_id":"VALID-rr2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-rr1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-rr1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"peak-release-enum-invalid","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p3","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-5-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-0","freshness_ref":"FRESH-5-0","generation":1,"grant_ref":"GRANT-EXEC-5-0","handoff":{"activation_id":"ACT-5-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-0","freshness_ref":"FRESH-5-0","generation":1,"grant_ref":"GRANT-EXEC-5-0","invocation_nonce":"NONCE-5-0","right":"USE_BUDGET","validation_id":"VALID-5-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-5-0","right":"USE_BUDGET","validation_id":"VALID-5-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-p1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-5-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-1","freshness_ref":"FRESH-5-1","generation":1,"grant_ref":"GRANT-EXEC-5-1","handoff":{"activation_id":"ACT-5-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-1","freshness_ref":"FRESH-5-1","generation":1,"grant_ref":"GRANT-EXEC-5-1","invocation_nonce":"NONCE-5-1","right":"USE_BUDGET","validation_id":"VALID-5-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-5-1","right":"USE_BUDGET","validation_id":"VALID-5-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"ACQUIRE","operation_id":"OP-p2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p2","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-5-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-2","freshness_ref":"FRESH-5-2","generation":1,"grant_ref":"GRANT-EXEC-5-2","handoff":{"activation_id":"ACT-5-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-5-2","freshness_ref":"FRESH-5-2","generation":1,"grant_ref":"GRANT-EXEC-5-2","invocation_nonce":"NONCE-5-2","right":"USE_BUDGET","validation_id":"VALID-5-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-5-2","right":"USE_BUDGET","validation_id":"VALID-5-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":7,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RELEASE","operation_id":"OP-p3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-p3","release_from":"FREE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"lease-grant-expired","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-LEASE","kind":"LEASE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"active":[],"capacity":2,"expired":[],"history":[]},"unit_id":"tool-seat"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l7","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","handoff":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"expires_at":10,"operation":"LEASE_GRANT","operation_id":"OP-l6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-13-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-1","freshness_ref":"FRESH-13-1","generation":1,"grant_ref":"GRANT-EXEC-13-1","handoff":{"activation_id":"ACT-13-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-1","freshness_ref":"FRESH-13-1","generation":1,"grant_ref":"GRANT-EXEC-13-1","invocation_nonce":"NONCE-13-1","right":"USE_BUDGET","validation_id":"VALID-13-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-1","right":"USE_BUDGET","validation_id":"VALID-13-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":2,"expires_at":40,"lease_id":"OP-l6","operation":"LEASE_RENEW","operation_id":"OP-l7","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l7","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"lease-epoch-skip","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-LEASE","kind":"LEASE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"active":[],"capacity":2,"expired":[],"history":[]},"unit_id":"tool-seat"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l7","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","handoff":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"expires_at":20,"operation":"LEASE_GRANT","operation_id":"OP-l6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-13-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-1","freshness_ref":"FRESH-13-1","generation":1,"grant_ref":"GRANT-EXEC-13-1","handoff":{"activation_id":"ACT-13-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-1","freshness_ref":"FRESH-13-1","generation":1,"grant_ref":"GRANT-EXEC-13-1","invocation_nonce":"NONCE-13-1","right":"USE_BUDGET","validation_id":"VALID-13-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-1","right":"USE_BUDGET","validation_id":"VALID-13-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":3,"expires_at":40,"lease_id":"OP-l6","operation":"LEASE_RENEW","operation_id":"OP-l7","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l7","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"share-child-remint","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-SHARE","kind":"SHARE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"capacity":10,"children":[],"revoked_history":[]},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s5","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-15-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0","freshness_ref":"FRESH-15-0","generation":1,"grant_ref":"GRANT-EXEC-15-0","handoff":{"activation_id":"ACT-15-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0","freshness_ref":"FRESH-15-0","generation":1,"grant_ref":"GRANT-EXEC-15-0","invocation_nonce":"NONCE-15-0","right":"USE_BUDGET","validation_id":"VALID-15-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-0","right":"USE_BUDGET","validation_id":"VALID-15-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-15-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-1","freshness_ref":"FRESH-15-1","generation":1,"grant_ref":"GRANT-EXEC-15-1","handoff":{"activation_id":"ACT-15-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-1","freshness_ref":"FRESH-15-1","generation":1,"grant_ref":"GRANT-EXEC-15-1","invocation_nonce":"NONCE-15-1","right":"USE_BUDGET","validation_id":"VALID-15-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-1","right":"USE_BUDGET","validation_id":"VALID-15-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_RESERVE","operation_id":"OP-s4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-15-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-2","freshness_ref":"FRESH-15-2","generation":1,"grant_ref":"GRANT-EXEC-15-2","handoff":{"activation_id":"ACT-15-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-2","freshness_ref":"FRESH-15-2","generation":1,"grant_ref":"GRANT-EXEC-15-2","invocation_nonce":"NONCE-15-2","right":"USE_BUDGET","validation_id":"VALID-15-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-2","right":"USE_BUDGET","validation_id":"VALID-15-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_REVOKE","operation_id":"OP-s5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-15-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0","freshness_ref":"FRESH-15-0","generation":1,"grant_ref":"GRANT-EXEC-15-0","handoff":{"activation_id":"ACT-15-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0","freshness_ref":"FRESH-15-0","generation":1,"grant_ref":"GRANT-EXEC-15-0","invocation_nonce":"NONCE-15-0","right":"USE_BUDGET","validation_id":"VALID-15-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-0","right":"USE_BUDGET","validation_id":"VALID-15-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":11}]}},{"family":"F17_REVIEW_ATTACKS","id":"provider-fork","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","handoff":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","handoff":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_OBSERVED","operation_id":"OP-v2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","prior_fact_id":"PF1-ESTIMATE","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-OBSERVED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","handoff":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_SETTLED","operation_id":"OP-v3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","prior_fact_id":"PF1-ESTIMATE","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-SETTLED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","handoff":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":2,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_CREDIT","operation_id":"OP-v4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","prior_fact_id":"PF1-SETTLED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-CREDIT","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"provider-account-switch","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","handoff":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","handoff":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_OBSERVED","operation_id":"OP-v2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","prior_fact_id":"PF1-ESTIMATE","provider_account_id":"OTHER","provider_fact_id":"PF1-OBSERVED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","handoff":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_SETTLED","operation_id":"OP-v3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","prior_fact_id":"PF1-OBSERVED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-SETTLED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","handoff":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":2,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_CREDIT","operation_id":"OP-v4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","prior_fact_id":"PF1-SETTLED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-CREDIT","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"provider-credit-overbound","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","handoff":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","handoff":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_OBSERVED","operation_id":"OP-v2","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","prior_fact_id":"PF1-ESTIMATE","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-OBSERVED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","handoff":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_SETTLED","operation_id":"OP-v3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","prior_fact_id":"PF1-OBSERVED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-SETTLED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","handoff":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":99,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_CREDIT","operation_id":"OP-v4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","prior_fact_id":"PF1-SETTLED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-CREDIT","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"dimension-parent-cycle","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":"D-RATE","scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-RATE","kind":"RATE","owner_id":"ACTOR-A","parent_budget_id":"D-STOCK","scope":"GLOBAL","state":{"available":10,"cap":10,"last_refill_at":0,"refill":5,"reserved":0,"window":10},"unit_id":"request"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-9-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-9-0","freshness_ref":"FRESH-9-0","generation":1,"grant_ref":"GRANT-EXEC-9-0","handoff":{"activation_id":"ACT-9-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-9-0","freshness_ref":"FRESH-9-0","generation":1,"grant_ref":"GRANT-EXEC-9-0","invocation_nonce":"NONCE-9-0","right":"USE_BUDGET","validation_id":"VALID-9-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-9-0","right":"USE_BUDGET","validation_id":"VALID-9-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":11,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"RESERVE","operation_id":"OP-r4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"unit-kind-incompatible","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-RATE","kind":"RATE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"available":10,"cap":10,"last_refill_at":0,"refill":5,"reserved":0,"window":10},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-9-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-9-0","freshness_ref":"FRESH-9-0","generation":1,"grant_ref":"GRANT-EXEC-9-0","handoff":{"activation_id":"ACT-9-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-9-0","freshness_ref":"FRESH-9-0","generation":1,"grant_ref":"GRANT-EXEC-9-0","invocation_nonce":"NONCE-9-0","right":"USE_BUDGET","validation_id":"VALID-9-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-9-0","right":"USE_BUDGET","validation_id":"VALID-9-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":11,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"RESERVE","operation_id":"OP-r4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"lease-epoch-zero","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-LEASE","kind":"LEASE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"active":[],"capacity":2,"expired":[],"history":[]},"unit_id":"tool-seat"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l7","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","handoff":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":0,"expires_at":20,"operation":"LEASE_GRANT","operation_id":"OP-l6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-13-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-1","freshness_ref":"FRESH-13-1","generation":1,"grant_ref":"GRANT-EXEC-13-1","handoff":{"activation_id":"ACT-13-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-1","freshness_ref":"FRESH-13-1","generation":1,"grant_ref":"GRANT-EXEC-13-1","invocation_nonce":"NONCE-13-1","right":"USE_BUDGET","validation_id":"VALID-13-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-1","right":"USE_BUDGET","validation_id":"VALID-13-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":2,"expires_at":40,"lease_id":"OP-l6","operation":"LEASE_RENEW","operation_id":"OP-l7","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l7","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"rate-last-refill-regression","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-RATE","kind":"RATE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"available":10,"cap":10,"last_refill_at":11,"refill":5,"reserved":0,"window":10},"unit_id":"request"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r6","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-10-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-10-0","freshness_ref":"FRESH-10-0","generation":1,"grant_ref":"GRANT-EXEC-10-0","handoff":{"activation_id":"ACT-10-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-10-0","freshness_ref":"FRESH-10-0","generation":1,"grant_ref":"GRANT-EXEC-10-0","invocation_nonce":"NONCE-10-0","right":"USE_BUDGET","validation_id":"VALID-10-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-10-0","right":"USE_BUDGET","validation_id":"VALID-10-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"ACQUIRE","operation_id":"OP-r5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r5","refundable":false,"resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-10-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-10-1","freshness_ref":"FRESH-10-1","generation":1,"grant_ref":"GRANT-EXEC-10-1","handoff":{"activation_id":"ACT-10-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-10-1","freshness_ref":"FRESH-10-1","generation":1,"grant_ref":"GRANT-EXEC-10-1","invocation_nonce":"NONCE-10-1","right":"USE_BUDGET","validation_id":"VALID-10-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-10-1","right":"USE_BUDGET","validation_id":"VALID-10-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"commitment_id":"COMMITMENT-A","dimension_id":"D-RATE","operation":"REFILL","operation_id":"OP-r6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-r6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"provider-operation-collision","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","handoff":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","handoff":{"activation_id":"ACT-19-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-1","freshness_ref":"FRESH-19-1","generation":1,"grant_ref":"GRANT-EXEC-19-1","invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-1","right":"USE_BUDGET","validation_id":"VALID-19-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_OBSERVED","operation_id":"OP-v1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","prior_fact_id":"PF1-ESTIMATE","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-OBSERVED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","handoff":{"activation_id":"ACT-19-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-2","freshness_ref":"FRESH-19-2","generation":1,"grant_ref":"GRANT-EXEC-19-2","invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-2","right":"USE_BUDGET","validation_id":"VALID-19-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":13,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_SETTLED","operation_id":"OP-v3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","prior_fact_id":"PF1-OBSERVED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-SETTLED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","handoff":{"activation_id":"ACT-19-3","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-3","freshness_ref":"FRESH-19-3","generation":1,"grant_ref":"GRANT-EXEC-19-3","invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-3","right":"USE_BUDGET","validation_id":"VALID-19-3","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":2,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_CREDIT","operation_id":"OP-v4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","prior_fact_id":"PF1-SETTLED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-CREDIT","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"provider-unknown-observed-settled","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v6","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-20-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-0","freshness_ref":"FRESH-20-0","generation":1,"grant_ref":"GRANT-EXEC-20-0","handoff":{"activation_id":"ACT-20-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-0","freshness_ref":"FRESH-20-0","generation":1,"grant_ref":"GRANT-EXEC-20-0","invocation_nonce":"NONCE-20-0","right":"USE_BUDGET","validation_id":"VALID-20-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-20-0","right":"USE_BUDGET","validation_id":"VALID-20-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v5","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF2-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-20-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1","freshness_ref":"FRESH-20-1","generation":1,"grant_ref":"GRANT-EXEC-20-1","handoff":{"activation_id":"ACT-20-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1","freshness_ref":"FRESH-20-1","generation":1,"grant_ref":"GRANT-EXEC-20-1","invocation_nonce":"NONCE-20-1","right":"USE_BUDGET","validation_id":"VALID-20-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-20-1","right":"USE_BUDGET","validation_id":"VALID-20-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_UNKNOWN","operation_id":"OP-v6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v6","prior_fact_id":"PF2-ESTIMATE","provider_account_id":"PROVIDER-A","provider_fact_id":"PF2-UNKNOWN","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-20-1-EVIDENCE","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1-EVIDENCE","freshness_ref":"FRESH-20-1-EVIDENCE","generation":1,"grant_ref":"GRANT-EXEC-20-1-EVIDENCE","handoff":{"activation_id":"ACT-20-1-EVIDENCE","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1-EVIDENCE","freshness_ref":"FRESH-20-1-EVIDENCE","generation":1,"grant_ref":"GRANT-EXEC-20-1-EVIDENCE","invocation_nonce":"NONCE-20-1-EVIDENCE","right":"USE_BUDGET","validation_id":"VALID-20-1-EVIDENCE","world_id":"WORLD-A"},"invocation_nonce":"NONCE-20-1-EVIDENCE","right":"USE_BUDGET","validation_id":"VALID-20-1-EVIDENCE","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_OBSERVED","operation_id":"OP-v7","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v6","prior_fact_id":"PF2-UNKNOWN","provider_account_id":"PROVIDER-A","provider_fact_id":"PF2-OBSERVED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-20-1-EVIDENCE-SETTLE","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1-EVIDENCE-SETTLE","freshness_ref":"FRESH-20-1-EVIDENCE-SETTLE","generation":1,"grant_ref":"GRANT-EXEC-20-1-EVIDENCE-SETTLE","handoff":{"activation_id":"ACT-20-1-EVIDENCE-SETTLE","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1-EVIDENCE-SETTLE","freshness_ref":"FRESH-20-1-EVIDENCE-SETTLE","generation":1,"grant_ref":"GRANT-EXEC-20-1-EVIDENCE-SETTLE","invocation_nonce":"NONCE-20-1-EVIDENCE-SETTLE","right":"USE_BUDGET","validation_id":"VALID-20-1-EVIDENCE-SETTLE","world_id":"WORLD-A"},"invocation_nonce":"NONCE-20-1-EVIDENCE-SETTLE","right":"USE_BUDGET","validation_id":"VALID-20-1-EVIDENCE-SETTLE","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_SETTLED","operation_id":"OP-v8","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v6","prior_fact_id":"PF2-OBSERVED","provider_account_id":"PROVIDER-A","provider_fact_id":"PF2-SETTLED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"provider-unknown-direct-settle","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v6","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-20-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-0","freshness_ref":"FRESH-20-0","generation":1,"grant_ref":"GRANT-EXEC-20-0","handoff":{"activation_id":"ACT-20-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-0","freshness_ref":"FRESH-20-0","generation":1,"grant_ref":"GRANT-EXEC-20-0","invocation_nonce":"NONCE-20-0","right":"USE_BUDGET","validation_id":"VALID-20-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-20-0","right":"USE_BUDGET","validation_id":"VALID-20-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v5","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF2-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-20-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1","freshness_ref":"FRESH-20-1","generation":1,"grant_ref":"GRANT-EXEC-20-1","handoff":{"activation_id":"ACT-20-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1","freshness_ref":"FRESH-20-1","generation":1,"grant_ref":"GRANT-EXEC-20-1","invocation_nonce":"NONCE-20-1","right":"USE_BUDGET","validation_id":"VALID-20-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-20-1","right":"USE_BUDGET","validation_id":"VALID-20-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_UNKNOWN","operation_id":"OP-v6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v6","prior_fact_id":"PF2-ESTIMATE","provider_account_id":"PROVIDER-A","provider_fact_id":"PF2-UNKNOWN","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-20-1-EVIDENCE","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1-EVIDENCE","freshness_ref":"FRESH-20-1-EVIDENCE","generation":1,"grant_ref":"GRANT-EXEC-20-1-EVIDENCE","handoff":{"activation_id":"ACT-20-1-EVIDENCE","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-20-1-EVIDENCE","freshness_ref":"FRESH-20-1-EVIDENCE","generation":1,"grant_ref":"GRANT-EXEC-20-1-EVIDENCE","invocation_nonce":"NONCE-20-1-EVIDENCE","right":"USE_BUDGET","validation_id":"VALID-20-1-EVIDENCE","world_id":"WORLD-A"},"invocation_nonce":"NONCE-20-1-EVIDENCE","right":"USE_BUDGET","validation_id":"VALID-20-1-EVIDENCE","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":9,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_SETTLED","operation_id":"OP-v7","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v6","prior_fact_id":"PF2-UNKNOWN","provider_account_id":"PROVIDER-A","provider_fact_id":"PF2-SETTLED","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"nested-compound","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","handoff":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"children":[{"authority":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","handoff":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"children":[{"authority":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","handoff":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-m1a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"}},{"authority":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","handoff":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-m1b","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}}],"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"COMPOUND","operation_id":"OP-m1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}},{"authority":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","handoff":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-m1b","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}}],"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"COMPOUND","operation_id":"OP-m1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"share-used-revoke-reallocate","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-SHARE","kind":"SHARE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"capacity":10,"children":[],"revoked_history":[]},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s5","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-15-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0","freshness_ref":"FRESH-15-0","generation":1,"grant_ref":"GRANT-EXEC-15-0","handoff":{"activation_id":"ACT-15-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0","freshness_ref":"FRESH-15-0","generation":1,"grant_ref":"GRANT-EXEC-15-0","invocation_nonce":"NONCE-15-0","right":"USE_BUDGET","validation_id":"VALID-15-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-0","right":"USE_BUDGET","validation_id":"VALID-15-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s3","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-15-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-1","freshness_ref":"FRESH-15-1","generation":1,"grant_ref":"GRANT-EXEC-15-1","handoff":{"activation_id":"ACT-15-1","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-1","freshness_ref":"FRESH-15-1","generation":1,"grant_ref":"GRANT-EXEC-15-1","invocation_nonce":"NONCE-15-1","right":"USE_BUDGET","validation_id":"VALID-15-1","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-1","right":"USE_BUDGET","validation_id":"VALID-15-1","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_RESERVE","operation_id":"OP-s4","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-15-1-USE","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-1-USE","freshness_ref":"FRESH-15-1-USE","generation":1,"grant_ref":"GRANT-EXEC-15-1-USE","handoff":{"activation_id":"ACT-15-1-USE","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-1-USE","freshness_ref":"FRESH-15-1-USE","generation":1,"grant_ref":"GRANT-EXEC-15-1-USE","invocation_nonce":"NONCE-15-1-USE","right":"USE_BUDGET","validation_id":"VALID-15-1-USE","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-1-USE","right":"USE_BUDGET","validation_id":"VALID-15-1-USE","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ACQUIRE","operation_id":"OP-s4a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s4","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-15-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-2","freshness_ref":"FRESH-15-2","generation":1,"grant_ref":"GRANT-EXEC-15-2","handoff":{"activation_id":"ACT-15-2","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-2","freshness_ref":"FRESH-15-2","generation":1,"grant_ref":"GRANT-EXEC-15-2","invocation_nonce":"NONCE-15-2","right":"USE_BUDGET","validation_id":"VALID-15-2","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-2","right":"USE_BUDGET","validation_id":"VALID-15-2","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_REVOKE","operation_id":"OP-s5","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s5","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-15-0-REALLOC","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0-REALLOC","freshness_ref":"FRESH-15-0-REALLOC","generation":1,"grant_ref":"GRANT-EXEC-15-0-REALLOC","handoff":{"activation_id":"ACT-15-0-REALLOC","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-15-0-REALLOC","freshness_ref":"FRESH-15-0-REALLOC","generation":1,"grant_ref":"GRANT-EXEC-15-0-REALLOC","invocation_nonce":"NONCE-15-0-REALLOC","right":"USE_BUDGET","validation_id":"VALID-15-0-REALLOC","world_id":"WORLD-A"},"invocation_nonce":"NONCE-15-0-REALLOC","right":"USE_BUDGET","validation_id":"VALID-15-0-REALLOC","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B2","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s5a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"provider-after-reload-replay","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v2","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v3","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v4","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","handoff":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10},{"kind":"RELOAD"},{"authority":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","handoff":{"activation_id":"ACT-19-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-19-0","freshness_ref":"FRESH-19-0","generation":1,"grant_ref":"GRANT-EXEC-19-0","invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-19-0","right":"USE_BUDGET","validation_id":"VALID-19-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":12,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"PROVIDER_ESTIMATE","operation_id":"OP-v1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-v1","prior_fact_id":null,"provider_account_id":"PROVIDER-A","provider_fact_id":"PF1-ESTIMATE","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"share-after-reload-replay","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-SHARE","kind":"SHARE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"capacity":10,"children":[],"revoked_history":[]},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s7","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s8","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-16-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-0","freshness_ref":"FRESH-16-0","generation":1,"grant_ref":"GRANT-EXEC-16-0","handoff":{"activation_id":"ACT-16-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-0","freshness_ref":"FRESH-16-0","generation":1,"grant_ref":"GRANT-EXEC-16-0","invocation_nonce":"NONCE-16-0","right":"USE_BUDGET","validation_id":"VALID-16-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-16-0","right":"USE_BUDGET","validation_id":"VALID-16-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10},{"kind":"RELOAD"},{"authority":{"activation_id":"ACT-16-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-0","freshness_ref":"FRESH-16-0","generation":1,"grant_ref":"GRANT-EXEC-16-0","handoff":{"activation_id":"ACT-16-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-16-0","freshness_ref":"FRESH-16-0","generation":1,"grant_ref":"GRANT-EXEC-16-0","invocation_nonce":"NONCE-16-0","right":"USE_BUDGET","validation_id":"VALID-16-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-16-0","right":"USE_BUDGET","validation_id":"VALID-16-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":6,"child_id":"B1","commitment_id":"COMMITMENT-A","dimension_id":"D-SHARE","operation":"SHARE_ALLOCATE","operation_id":"OP-s6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-s6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"lease-after-reload-replay","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-LEASE","kind":"LEASE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"active":[],"capacity":2,"expired":[],"history":[]},"unit_id":"tool-seat"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l7","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","handoff":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"expires_at":20,"operation":"LEASE_GRANT","operation_id":"OP-l6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10},{"kind":"RELOAD"},{"authority":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","handoff":{"activation_id":"ACT-13-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-13-0","freshness_ref":"FRESH-13-0","generation":1,"grant_ref":"GRANT-EXEC-13-0","invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-13-0","right":"USE_BUDGET","validation_id":"VALID-13-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":1,"commitment_id":"COMMITMENT-A","dimension_id":"D-LEASE","epoch":1,"expires_at":20,"operation":"LEASE_GRANT","operation_id":"OP-l6","owner_id":"ACTOR-A","plan_id":"PLAN-OP-l6","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"compound-after-reload-replay","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","handoff":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"children":[{"authority":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","handoff":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-m1a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"}},{"authority":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","handoff":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-m1b","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}}],"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"COMPOUND","operation_id":"OP-m1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10},{"kind":"RELOAD"},{"authority":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","handoff":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"children":[{"authority":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","handoff":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-m1a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"}},{"authority":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","handoff":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-m1b","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}}],"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"COMPOUND","operation_id":"OP-m1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"AFTER_COMMIT_BEFORE_RESPONSE","kind":"APPLY","logical_now":10}]}},{"family":"F17_REVIEW_ATTACKS","id":"compound-partial-claim-reuse","inputs":{"initial_state":{"dimensions":[{"dimension_id":"D-STOCK","kind":"CONSUMABLE","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"consumed":0,"expired":0,"free":100,"issued":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0},"unit_id":"token"},{"dimension_id":"D-PEAK","kind":"PEAK","owner_id":"ACTOR-A","parent_budget_id":null,"scope":"GLOBAL","state":{"cap":10,"current":0,"high_water":0,"reserved":0},"unit_id":"worker"}],"provider_facts":[],"resource_binding_plans":[{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"},{"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[],"worlds":[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}]},"phases":[{"authority":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","handoff":{"activation_id":"ACT-35-0","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0","freshness_ref":"FRESH-35-0","generation":1,"grant_ref":"GRANT-EXEC-35-0","invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0","right":"USE_BUDGET","validation_id":"VALID-35-0","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":0,"children":[{"authority":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","handoff":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-m1a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"}},{"authority":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","handoff":{"activation_id":"ACT-35-0-OP-m1b","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1b","freshness_ref":"FRESH-35-0-OP-m1b","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1b","invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1b","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1b","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-PEAK","operation":"RESERVE","operation_id":"OP-m1b","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1b","resource_id":"RESOURCE-1","world_id":"WORLD-A"}}],"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"COMPOUND","operation_id":"OP-m1","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":10},{"authority":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","handoff":{"activation_id":"ACT-35-0-OP-m1a","actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-35-0-OP-m1a","freshness_ref":"FRESH-35-0-OP-m1a","generation":1,"grant_ref":"GRANT-EXEC-35-0-OP-m1a","invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","world_id":"WORLD-A"},"invocation_nonce":"NONCE-35-0-OP-m1a","right":"USE_BUDGET","validation_id":"VALID-35-0-OP-m1a","verdict":"ALLOW","world_id":"WORLD-A"},"event":{"actor_id":"ACTOR-A","amount":4,"commitment_id":"COMMITMENT-A","dimension_id":"D-STOCK","operation":"RESERVE","operation_id":"OP-m1a","owner_id":"ACTOR-A","plan_id":"PLAN-OP-m1a","resource_id":"RESOURCE-1","world_id":"WORLD-A"},"fault":"NONE","kind":"APPLY","logical_now":11}]}}],"decision":{"frozen":false,"id":"D-008","status":"OPEN"},"harness_completion":{"byte_length":6071,"path":"decisions/agent-native-harness-completion-v1.json","sha256":"d762c9c50404063c41d7b0f3ffa3112267da4fc50d223dcc9a9815705da9f29f"},"independence":{"decisive_primary_helpers":["apply_leaf","classify_event","event_join","authority_current","derive"],"independent_path":"oracle_observation and law-specific relations do not call decisive primary helpers"},"invalidation":"V1_V2_INVALIDATED_PRE_FREEZE_EVIDENCE","laws":["WHOLE_OBSERVATION_CLOSURE","TYPED_IDENTITY_SCOPE","D003_AUTHORITY_FIRST","PER_KIND_CONSERVATION","PARENT_SIBLING_CONSERVATION","RESERVATION_ACQUISITION","CANCELLATION_REFUND","PROVIDER_RECONCILIATION","COMPOUND_ATOMICITY","RECOVERY_REPLAY","ATTRIBUTION_MODEL_INDEPENDENCE","EFFECT_PROMOTION_SEPARATION","CANONICAL_DETERMINISM"],"provenance":{"artifact_basename":"d008-budget-manifest-v1.json","dag":{"edges":[{"from":"E","to":"V"},{"from":"E","to":"F"},{"from":"E","to":"PF"},{"from":"E","to":"IR"},{"from":"E","to":"O1"},{"from":"E","to":"O2"},{"from":"F","to":"PF"},{"from":"F","to":"IR"},{"from":"F","to":"IX"},{"from":"F","to":"IC"},{"from":"F","to":"ROOT"},{"from":"IC","to":"ROOT"},{"from":"IR","to":"IX"},{"from":"IR","to":"IC"},{"from":"IR","to":"RX"},{"from":"IR","to":"RC"},{"from":"IR","to":"RV"},{"from":"IRC","to":"ROOT"},{"from":"IRP","to":"ROOT"},{"from":"IRV","to":"ROOT"},{"from":"IRX","to":"ROOT"},{"from":"IX","to":"ROOT"},{"from":"O1","to":"F"},{"from":"O1","to":"IX"},{"from":"O2","to":"F"},{"from":"O2","to":"IC"},{"from":"PF","to":"IR"},{"from":"PF","to":"RP"},{"from":"PF","to":"ROOT"},{"from":"RC","to":"IC"},{"from":"RC","to":"IRC"},{"from":"RP","to":"IR"},{"from":"RP","to":"IRP"},{"from":"RV","to":"ROOT"},{"from":"RV","to":"IRV"},{"from":"RX","to":"IX"},{"from":"RX","to":"IRX"},{"from":"V","to":"F"},{"from":"V","to":"IR"},{"from":"V","to":"O1"},{"from":"V","to":"O2"}],"nodes":[{"id":"E","kind":"EVIDENCE"},{"id":"F","kind":"FREEZE"},{"id":"IC","kind":"PRODUCER_IDENTITY"},{"id":"IR","kind":"INDEPENDENCE_REPORT"},{"id":"IRC","kind":"REVIEWER_IDENTITY"},{"id":"IRP","kind":"REVIEWER_IDENTITY"},{"id":"IRV","kind":"REVIEWER_IDENTITY"},{"id":"IRX","kind":"REVIEWER_IDENTITY"},{"id":"IX","kind":"PRODUCER_IDENTITY"},{"id":"O1","kind":"OBSERVATION"},{"id":"O2","kind":"OBSERVATION"},{"id":"PF","kind":"PREFREEZE"},{"id":"RC","kind":"REVIEW"},{"id":"ROOT","kind":"PREREG_ROOT"},{"id":"RP","kind":"REVIEW"},{"id":"RV","kind":"REVIEW"},{"id":"RX","kind":"REVIEW"},{"id":"V","kind":"VALIDATION"}],"roots":["ROOT"]},"prereg_root_schema":"D008-PREREG-ROOT-3","stage":"C_PREREGISTRATION","status":"NO_ROOT_OR_EVIDENCE_YET"},"provenance_qualified":false,"provenance_status":"STAGE_C_PREREGISTERED_NO_ACTUAL_ROOT_OR_EVIDENCE","python_grammar":"3.13","schema":"D008-BUDGET-MANIFEST-3","semantic_locks":{"o_semantic_body":{"byte_length":470320,"manifest_sha256_field":"NORMALIZED_TO_@MANIFEST_SHA256@","schema":"D008-O-SEMANTIC-BODY-LOCK-1","sha256":"1822d16b8020f8e2afe18f62eb8dc9f3af3c812273a0d02dd8067c9c094019e6","shape":"canonical semantic_body object with real manifest_sha256 replaced by @MANIFEST_SHA256@"},"stage_b_semantic_projection":{"accepted_count":60,"byte_length":466404,"raw_count":69,"schema":"D008-STAGE-B-SEMANTIC-PROJECTION-1","sha256":"5ed91a896453a5dec139e1a6cf8e22f1ae91137022df9db59cf9da12379d055b","shape":"ordered case list; accepted={case_id,input_sha256,classification,laws,observation}; structural={case_id,input_sha256,classification}","stage_b":"PASS","structural_reject_count":9}},"semantic_stage":"B_PASS"} diff --git a/decisions/d008_manifest.py b/decisions/d008_manifest.py new file mode 100644 index 0000000000..2da3a1df83 --- /dev/null +++ b/decisions/d008_manifest.py @@ -0,0 +1,1316 @@ +#!/usr/bin/env python3 +"""D-008 v3 Stage A semantic closure; v1/v2 invalidated pre-freeze/evidence.""" +from __future__ import annotations +import argparse,ast,base64,copy,functools,hashlib,json,subprocess,sys,tempfile,unicodedata +from pathlib import Path,PurePosixPath + +class ManifestError(ValueError):pass +U64=2**64-1 +ALGEBRA="TYPED_BUDGET_ALGEBRA" +KINDS=("CONSUMABLE","PEAK","RATE","LEASE","SHARE") +Q={ + "Q01":"compute","Q02":"tokens","Q03":"time","Q04":"energy","Q05":"provider charge", + "Q06":"context storage","Q07":"retrieval","Q08":"compaction","Q09":"tool/service reservation", + "Q10":"concurrent child work","Q11":"failed/speculative work","Q12":"evaluation/aggregation", + "Q13":"cancellation","Q14":"cache/reuse","Q15":"delegation","Q16":"substitution","Q17":"late result"} +B8={ + "L01":"reservation acquisition/commit/release","L02":"partial/failed consumption","L03":"refund/nonrefund", + "L04":"lease grant/expiry/renew/revoke","L05":"share/peak/rate","L06":"parent-child/sibling conservation", + "L07":"concurrent reservation","L08":"contingency/escrow/overrun","L09":"cancellation timing", + "L10":"attribution/reconciliation","L11":"provider charge distinct from semantic consumption", + "L12":"no automatic refund for failure, cancellation, late output, or discarded World work"} +LAWS=("WHOLE_OBSERVATION_CLOSURE","TYPED_IDENTITY_SCOPE","D003_AUTHORITY_FIRST","PER_KIND_CONSERVATION", + "PARENT_SIBLING_CONSERVATION","RESERVATION_ACQUISITION","CANCELLATION_REFUND","PROVIDER_RECONCILIATION", + "COMPOUND_ATOMICITY","RECOVERY_REPLAY","ATTRIBUTION_MODEL_INDEPENDENCE","EFFECT_PROMOTION_SEPARATION", + "CANONICAL_DETERMINISM") +STATUSES=("APPLIED","DENY_AUTHORITY","DENY_ADMISSION","UNSUPPORTED","UNKNOWN_RECONCILE","REPLAY","RECONCILE_EXPIRED") +GATES=("EXECUTOR_INDEPENDENT_REVIEW","CHECKER_INDEPENDENT_REVIEW","EVALUATOR_REVIEW","PRE_FREEZE_SIGNOFF") +PYTHON_GRAMMAR=f"{sys.version_info.major}.{sys.version_info.minor}" +PACKET_PREREG_SHA256="97140d1bd81b5a58d45b506da40fb3dc9ac0770b33d81ef56e80dd2f49590ae4" # D008_FIXED_MARKER +VALIDATOR_NORMALIZED_SHA256="2607b6cce63fe7c409dee43375c4a77032513d7c23c91a9ea71ffc666b434ed4" # D008_FIXED_MARKER +FORBIDDEN_INPUT_KEYS={"expected","expected_status","verdict_expected","pass","law_results"} +BASE_EVENT={"actor_id","amount","commitment_id","dimension_id","operation","operation_id","owner_id","plan_id","resource_id","world_id"} +OP_FIELDS={"RESERVE":set(),"ESCROW":set(),"ACQUIRE":{"refundable"},"RELEASE":{"release_from"},"CANCEL_EFFECTIVE":set(),"REFUND":set(),"REFILL":set(),"LEASE_GRANT":{"epoch","expires_at"},"LEASE_USE":{"epoch","lease_id"},"LEASE_REVOKE":{"lease_id"},"LEASE_RENEW":{"epoch","expires_at","lease_id"},"SHARE_ALLOCATE":{"child_id"},"SHARE_RESERVE":{"child_id"},"SHARE_ACQUIRE":{"child_id"},"SHARE_REVOKE":{"child_id"},"PROVIDER_ESTIMATE":{"prior_fact_id","provider_account_id","provider_fact_id"},"PROVIDER_OBSERVED":{"prior_fact_id","provider_account_id","provider_fact_id"},"PROVIDER_UNKNOWN":{"prior_fact_id","provider_account_id","provider_fact_id"},"PROVIDER_SETTLED":{"prior_fact_id","provider_account_id","provider_fact_id"},"PROVIDER_CREDIT":{"prior_fact_id","provider_account_id","provider_fact_id"},"CACHE_REUSE":{"cache_fresh"},"FAIL":set(),"DEPENDENCY_ROLLBACK":set(),"LATE_RESULT":set(),"WORLD_DISCARD":set(),"CANCEL_REQUEST":set(),"TOMB":{"target_operation_id"},"COMPOUND":{"children"},"EFFECT_AUTHORIZE":set(),"PROMOTE":set(),"CONVERT":{"target_dimension_id"}} +UNSUPPORTED_OPS={"EFFECT_AUTHORIZE","PROMOTE","CONVERT"} +UNIT_COMPAT={"token":{"CONSUMABLE"},"worker":{"PEAK","SHARE"},"request":{"RATE"},"tool-seat":{"LEASE"}} +PARENT_COMPAT=() # closed conversion-free (child_kind,child_unit,parent_kind,parent_unit) relations +AUTH_CONTEXT=("grant_ref","generation","execution_id","activation_id","validation_id","invocation_nonce","freshness_ref","actor_id","commitment_id","world_id","right") + +def normalized_validator(raw): + src=raw.decode("utf-8","strict").splitlines() + out=[] + for line in src: + if line.startswith("PACKET_PREREG_SHA256="):out.append('PACKET_PREREG_SHA256="@PACKET_SHA256@" # D008_FIXED_MARKER') + elif line.startswith("VALIDATOR_NORMALIZED_SHA256="):out.append('VALIDATOR_NORMALIZED_SHA256="@VALIDATOR_SHA256@" # D008_FIXED_MARKER') + else:out.append(line) + return ("\n".join(out)+"\n").encode() +def verify_prereg(packet_raw,validator_raw): + if sha(packet_raw)!=PACKET_PREREG_SHA256 or sha(normalized_validator(validator_raw))!=VALIDATOR_NORMALIZED_SHA256:raise ManifestError("trusted prereg root") + +# canonical JSON + +def public(f): + @functools.wraps(f) + def w(*a,**k): + try:return f(*a,**k) + except ManifestError:raise + except Exception as e:raise ManifestError(f.__name__+": malformed") from e + return w +def _pairs(xs): + d={} + for k,v in xs: + if k in d:raise ManifestError("duplicate key") + d[k]=v + return d +def walk(x,p="$"): + if isinstance(x,float):raise ManifestError("float "+p) + if isinstance(x,int) and not isinstance(x,bool) and not 0<=x<=U64:raise ManifestError("u64 "+p) + if isinstance(x,str): + if any(0xD800<=ord(c)<=0xDFFF for c in x):raise ManifestError("surrogate "+p) + if unicodedata.normalize("NFC",x)!=x:raise ManifestError("NFC "+p) + if isinstance(x,dict): + for k,v in x.items(): + if not isinstance(k,str):raise ManifestError("key "+p) + walk(k,p+"/key");walk(v,p+"/"+k) + elif isinstance(x,list): + for i,v in enumerate(x):walk(v,p+"/"+str(i)) + elif x is not None and not isinstance(x,(str,int,bool)):raise ManifestError("JSON type "+p) +def canonical(x):walk(x);return (json.dumps(x,ensure_ascii=False,sort_keys=True,separators=(",",":"),allow_nan=False)+"\n").encode() +@public +def parse_bytes(raw): + if not isinstance(raw,bytes):raise ManifestError("bytes") + try:x=json.loads(raw.decode("utf-8","strict"),object_pairs_hook=_pairs,parse_float=lambda _:(_ for _ in ()).throw(ManifestError("float")),parse_constant=lambda _:(_ for _ in ()).throw(ManifestError("constant"))) + except (UnicodeError,json.JSONDecodeError) as e:raise ManifestError("JSON") from e + if canonical(x)!=raw:raise ManifestError("noncanonical") + return x +def exact(x,ks,p): + if not isinstance(x,dict) or set(x)!=set(ks):raise ManifestError("closed "+p) +def text(x,p): + if not isinstance(x,str) or not x:raise ManifestError("text "+p) + return x +def uint(x,p): + if not isinstance(x,int) or isinstance(x,bool) or not 0<=x<=U64:raise ManifestError("u64 "+p) + return x +def sha(b):return hashlib.sha256(b).hexdigest() +def vsha(x):return sha(canonical(x)) +def clone(x):return copy.deepcopy(x) +def art(kind,raw):return {"byte_length":len(raw),"kind":kind,"sha256":sha(raw)} +def digest(x,p): + text(x,p) + if len(x)!=64 or any(c not in "0123456789abcdef" for c in x):raise ManifestError("digest "+p) +def index(xs,k,p): + d={} + for x in xs: + if not isinstance(x,dict) or k not in x:text(None,p) + text(x[k],p) + if x[k] in d:raise ManifestError("duplicate "+p) + d[x[k]]=x + return d + +def dim(did,kind,unit,scope="GLOBAL",owner="ACTOR-A",parent=None): + base={"dimension_id":did,"kind":kind,"owner_id":owner,"parent_budget_id":parent,"scope":scope,"unit_id":unit} + if kind=="CONSUMABLE":base["state"]={"consumed":0,"expired":0,"free":100,"nonrefundable":0,"refundable":0,"reserved":0,"unknown_disputed":0} + elif kind=="PEAK":base["state"]={"cap":10,"current":0,"high_water":0,"reserved":0} + elif kind=="RATE":base["state"]={"available":10,"cap":10,"last_refill_at":0,"refill":5,"reserved":0,"window":10} + elif kind=="LEASE":base["state"]={"active":[],"capacity":2,"expired":[]} + elif kind=="SHARE":base["state"]={"capacity":10,"children":[],"revoked_children":[]} + return base +def base_state(kinds=None): + kinds=kinds or KINDS + ids={"CONSUMABLE":"D-STOCK","PEAK":"D-PEAK","RATE":"D-RATE","LEASE":"D-LEASE","SHARE":"D-SHARE"} + units={"CONSUMABLE":"token","PEAK":"worker","RATE":"request","LEASE":"tool-seat","SHARE":"worker"} + return {"dimensions":[dim(ids[k],k,units[k]) for k in kinds],"provider_facts":[],"resource_binding_plans":[{"plan_id":"PLAN-1","resource_id":"RESOURCE-1","world_id":"WORLD-A"}],"retained":[],"tombstones":[]} +def auth(tag="1",allow=True): + return {"activation_id":"ACT-"+tag,"actor_id":"ACTOR-A","commitment_id":"COMMITMENT-A","execution_id":"EXEC-"+tag,"freshness_ref":"FRESH-"+tag,"generation":1,"grant_ref":"GRANT-A","invocation_nonce":"NONCE-"+tag,"right":"USE_BUDGET","validation_id":"VALID-"+tag,"verdict":"ALLOW" if allow else "DENY","world_id":"WORLD-A"} +def ev(op,dimension="D-STOCK",amount=1,tag="1",**kw): + x={"actor_id":"ACTOR-A","amount":amount,"commitment_id":"COMMITMENT-A","dimension_id":dimension,"operation":op,"operation_id":"OP-"+tag,"resource_id":"RESOURCE-1","world_id":"WORLD-A"};x.update(kw);return x +def phase(event,tag="1",allow=True,fault="NONE"): + return {"authority":auth(tag,allow),"event":event,"fault":fault,"kind":"APPLY","logical_now":10} + +def case(cid,family,phases,kinds=None,mut=None): + s=base_state(kinds) + if mut:mut(s) + return {"family":family,"id":cid,"inputs":{"initial_state":s,"phases":phases}} + +def corpus(): + out=[] + def add(cid,fam,events,kinds=None,mut=None): + phases=[] + for i,e in enumerate(events): + if isinstance(e,dict) and "kind" in e:phases.append(e) + else:phases.append(phase(e,str(len(out)+1)+"-"+str(i))) + out.append(case(cid,fam,phases,kinds,mut)) + add("consumable-reserve-commit","F01_CONSUMABLE",[ev("RESERVE",amount=30,tag="c1"),ev("ACQUIRE",amount=20,tag="c2"),ev("RELEASE",amount=10,tag="c3")],["CONSUMABLE"]) + add("world-discard-spend","F01_CONSUMABLE",[ev("RESERVE",amount=10,tag="wd1"),ev("ACQUIRE",amount=10,tag="wd2"),ev("WORLD_DISCARD",amount=0,tag="wd3")],["CONSUMABLE"]) + add("hold-cancel-unused","F01_CONSUMABLE",[ev("RESERVE",amount=12,tag="hc1"),ev("CANCEL_REQUEST",amount=0,tag="hc2"),ev("CANCEL_EFFECTIVE",amount=12,tag="hc3")],["CONSUMABLE"]) + add("refund-consumed-explicit","F01_CONSUMABLE",[ev("RESERVE",amount=9,tag="rf1"),ev("ACQUIRE",amount=9,tag="rf2",refundable=True),ev("REFUND",amount=4,tag="rf3")],["CONSUMABLE"]) + add("peak-current-highwater","F02_PEAK",[ev("RESERVE",dimension="D-PEAK",amount=7,tag="p1"),ev("ACQUIRE",dimension="D-PEAK",amount=7,tag="p2"),ev("RELEASE",dimension="D-PEAK",amount=7,tag="p3")],["PEAK"]) + add("peak-over-cap","F02_PEAK",[ev("RESERVE",dimension="D-PEAK",amount=11,tag="p4")],["PEAK"]) + add("exclusive-fork-reservations","F02_PEAK",[ev("RESERVE",dimension="D-PEAK",amount=6,tag="x1"),ev("RESERVE",dimension="D-PEAK",amount=6,tag="x2",world_id="WORLD-B")],["PEAK"]) + add("rate-capped-refill","F03_RATE",[ev("RESERVE",dimension="D-RATE",amount=8,tag="r1"),ev("ACQUIRE",dimension="D-RATE",amount=8,tag="r2"),phase(ev("REFILL",dimension="D-RATE",amount=0,tag="r3"),"r3")],["RATE"]) + out[-1]["inputs"]["phases"][-1]["logical_now"]=25 + add("rate-vs-stock-no-conversion","F03_RATE",[ev("RESERVE",dimension="D-RATE",amount=11,tag="r4")],["CONSUMABLE","RATE"]) + add("rate-window-not-elapsed","F03_RATE",[ev("ACQUIRE",dimension="D-RATE",amount=9,tag="r5"),ev("REFILL",dimension="D-RATE",amount=0,tag="r6")],["RATE"]) + add("lease-expiry","F04_LEASE",[ev("LEASE_GRANT",dimension="D-LEASE",amount=1,tag="l1",epoch=1,expires_at=15),phase(ev("LEASE_USE",dimension="D-LEASE",amount=1,tag="l2",lease_id="OP-l1",epoch=1),"l2")],["LEASE"]) + out[-1]["inputs"]["phases"][-1]["logical_now"]=16 + add("lease-revoke-after-use","F04_LEASE",[ev("LEASE_GRANT",dimension="D-LEASE",amount=1,tag="l3",epoch=1,expires_at=30),ev("LEASE_USE",dimension="D-LEASE",amount=1,tag="l4",lease_id="OP-l3",epoch=1),ev("LEASE_REVOKE",dimension="D-LEASE",amount=0,tag="l5",lease_id="OP-l3")],["LEASE"]) + add("lease-renew-epoch","F04_LEASE",[ev("LEASE_GRANT",dimension="D-LEASE",amount=1,tag="l6",epoch=1,expires_at=20),ev("LEASE_RENEW",dimension="D-LEASE",amount=0,tag="l7",lease_id="OP-l6",epoch=2,expires_at=40)],["LEASE"]) + add("share-sibling-oversubscription","F05_SHARE",[ev("SHARE_ALLOCATE",dimension="D-SHARE",amount=6,tag="s1",child_id="B1"),ev("SHARE_ALLOCATE",dimension="D-SHARE",amount=6,tag="s2",child_id="B2")],["SHARE"]) + add("share-parent-revoke","F05_SHARE",[ev("SHARE_ALLOCATE",dimension="D-SHARE",amount=6,tag="s3",child_id="B1"),ev("SHARE_RESERVE",dimension="D-SHARE",amount=4,tag="s4",child_id="B1"),ev("SHARE_REVOKE",dimension="D-SHARE",amount=0,tag="s5",child_id="B1")],["SHARE"]) + add("share-child-use","F05_SHARE",[ev("SHARE_ALLOCATE",dimension="D-SHARE",amount=6,tag="s6",child_id="B1"),ev("SHARE_RESERVE",dimension="D-SHARE",amount=4,tag="s7",child_id="B1"),ev("SHARE_ACQUIRE",dimension="D-SHARE",amount=3,tag="s8",child_id="B1")],["SHARE"]) + add("contingency-overrun-denied","F06_CONTINGENCY",[ev("RESERVE",amount=95,tag="o1"),ev("ACQUIRE",amount=105,tag="o2")],["CONSUMABLE"]) + add("contingency-escrow-explicit","F06_CONTINGENCY",[ev("RESERVE",amount=95,tag="o3"),ev("ESCROW",amount=5,tag="o4"),ev("ACQUIRE",amount=100,tag="o5")],["CONSUMABLE"]) + add("provider-estimate-invoice-credit","F07_PROVIDER",[ev("PROVIDER_ESTIMATE",amount=12,tag="v1",provider_fact_id="PF1"),ev("PROVIDER_OBSERVED",amount=13,tag="v2",provider_fact_id="PF1"),ev("PROVIDER_SETTLED",amount=13,tag="v3",provider_fact_id="PF1"),ev("PROVIDER_CREDIT",amount=2,tag="v4",provider_fact_id="PF1")],["CONSUMABLE"]) + add("provider-unknown","F07_PROVIDER",[ev("PROVIDER_ESTIMATE",amount=12,tag="v5",provider_fact_id="PF2"),ev("PROVIDER_UNKNOWN",amount=0,tag="v6",provider_fact_id="PF2")],["CONSUMABLE"]) + add("lost-response-retry","F08_RECOVERY",[phase(ev("RESERVE",amount=8,tag="rr1"),"rr1",fault="AFTER_COMMIT_BEFORE_RESPONSE"),{"kind":"RELOAD"},phase(ev("RESERVE",amount=8,tag="rr1"),"rr2")],["CONSUMABLE"]) + add("retry-before-commit","F08_RECOVERY",[phase(ev("RESERVE",amount=8,tag="rr3"),"rr3",fault="BEFORE_COMMIT"),{"kind":"RELOAD"},phase(ev("RESERVE",amount=8,tag="rr3"),"rr4")],["CONSUMABLE"]) + add("retained-tomb-expiry","F08_RECOVERY",[ev("RESERVE",amount=8,tag="rr5"),phase(ev("TOMB",amount=0,tag="rr6",target_operation_id="OP-rr5"),"rr6"),phase(ev("RESERVE",amount=8,tag="rr5"),"rr7")],["CONSUMABLE"]) + out[-1]["inputs"]["phases"][-1]["logical_now"]=50 + add("speculative-loser-reversible","F09_SPECULATION",[ev("RESERVE",amount=10,tag="sp1"),ev("RELEASE",amount=10,tag="sp2")],["CONSUMABLE"]) + add("speculative-loser-irreversible","F09_SPECULATION",[ev("RESERVE",amount=10,tag="sp3"),ev("ACQUIRE",amount=10,tag="sp4"),ev("FAIL",amount=0,tag="sp5")],["CONSUMABLE"]) + add("evaluator-cost","F09_SPECULATION",[ev("RESERVE",amount=4,tag="sp6"),ev("ACQUIRE",amount=4,tag="sp7")],["CONSUMABLE"]) + add("dependency-rollback","F09_SPECULATION",[ev("RESERVE",amount=6,tag="sp8"),ev("ACQUIRE",amount=6,tag="sp9"),ev("DEPENDENCY_ROLLBACK",amount=0,tag="sp10")],["CONSUMABLE"]) + add("fresh-cache-reuse","F10_CACHE",[ev("CACHE_REUSE",amount=0,tag="ca1",cache_fresh=True)],["CONSUMABLE"]) + add("stale-cache-recompute","F10_CACHE",[ev("CACHE_REUSE",amount=0,tag="ca2",cache_fresh=False),ev("RESERVE",amount=3,tag="ca3"),ev("ACQUIRE",amount=3,tag="ca4")],["CONSUMABLE"]) + add("delegation-attribution","F11_ATTRIBUTION",[ev("RESERVE",amount=5,tag="a1",actor_id="ACTOR-CHILD",commitment_id="COMMITMENT-CHILD")],["CONSUMABLE"]) + add("model-substitution","F11_ATTRIBUTION",[ev("RESERVE",amount=5,tag="a2",resource_id="MODEL-A"),ev("RELEASE",amount=5,tag="a3",resource_id="MODEL-A"),ev("RESERVE",amount=5,tag="a4",resource_id="MODEL-B")],["CONSUMABLE"]) + add("tool-substitution","F11_ATTRIBUTION",[ev("LEASE_GRANT",dimension="D-LEASE",amount=1,tag="a5",epoch=1,expires_at=30,resource_id="TOOL-B")],["LEASE"]) + add("late-result-no-refund","F12_LATE_CANCEL",[ev("RESERVE",amount=7,tag="t1"),ev("ACQUIRE",amount=7,tag="t2"),ev("LATE_RESULT",amount=0,tag="t3")],["CONSUMABLE"]) + add("cancel-request-before-effective","F12_LATE_CANCEL",[ev("RESERVE",amount=7,tag="t4"),ev("CANCEL_REQUEST",amount=0,tag="t5"),ev("ACQUIRE",amount=7,tag="t6"),ev("CANCEL_EFFECTIVE",amount=0,tag="t7")],["CONSUMABLE"]) + add("compound-all-or-none","F13_COMPOUND",[ev("COMPOUND",amount=0,tag="m1",children=[ev("RESERVE",amount=4,tag="m1a"),ev("RESERVE",dimension="D-PEAK",amount=4,tag="m1b")])],["CONSUMABLE","PEAK"]) + add("compound-one-denied","F13_COMPOUND",[ev("COMPOUND",amount=0,tag="m2",children=[ev("RESERVE",amount=4,tag="m2a"),ev("RESERVE",dimension="D-PEAK",amount=14,tag="m2b")])],["CONSUMABLE","PEAK"]) + add("authority-denial-no-delta","F14_AUTHORITY",[phase(ev("RESERVE",amount=4,tag="d1"),"d1",allow=False)],["CONSUMABLE"]) + add("global-world-scope-crossing","F14_AUTHORITY",[ev("RESERVE",amount=4,tag="d2",world_id="WORLD-B")],["CONSUMABLE"]) + add("effect-separation","F15_SEPARATION",[ev("EFFECT_AUTHORIZE",amount=0,tag="e1")],["CONSUMABLE"]) + add("promotion-separation","F15_SEPARATION",[ev("PROMOTE",amount=0,tag="e2")],["CONSUMABLE"]) + add("unsupported-cross-kind","F16_UNSUPPORTED",[ev("CONVERT",amount=5,tag="u1",target_dimension_id="D-PEAK")],["CONSUMABLE","PEAK"]) + return out + +def corpus_v2(): + cs=corpus() + for c in cs: + s=c["inputs"]["initial_state"];s["worlds"]=[{"world_id":"WORLD-A"},{"world_id":"WORLD-B"}] + for d in s["dimensions"]: + d["scope"]="GLOBAL" + if d["kind"]=="CONSUMABLE":d["state"]["issued"]=d["state"]["free"]+d["state"]["reserved"]+d["state"]["consumed"]+d["state"]["expired"]+d["state"]["unknown_disputed"] + elif d["kind"]=="LEASE":d["state"]["history"]=[] + elif d["kind"]=="SHARE":d["state"]["revoked_history"]=[];d["state"].pop("revoked_children",None) + dims={d["dimension_id"]:d for d in s["dimensions"]};s["resource_binding_plans"]=[];provider_previous={} + def bind(e,a): + e["owner_id"]=dims.get(e["dimension_id"],next(iter(dims.values())))["owner_id"];e["plan_id"]="PLAN-"+e["operation_id"] + a["grant_ref"]="GRANT-"+a["execution_id"];a["handoff"]={k:a[k] for k in AUTH_CONTEXT} + if e["operation"]=="ACQUIRE" and "refundable" not in e:e["refundable"]=False + if e["operation"].startswith("PROVIDER_"): + root=e["provider_fact_id"];stage=e["operation"].removeprefix("PROVIDER_");e["provider_fact_id"]=root+"-"+stage;e["provider_account_id"]="PROVIDER-A";e["prior_fact_id"]=provider_previous.get(root);provider_previous[root]=e["provider_fact_id"] + plan={"commitment_id":e["commitment_id"],"dimension_id":e["dimension_id"],"owner_id":e["owner_id"],"plan_id":e["plan_id"],"resource_id":e["resource_id"],"world_id":e["world_id"]} + if plan not in s["resource_binding_plans"]:s["resource_binding_plans"].append(plan) + if e["operation"]=="COMPOUND": + wrapped=[] + for child in e["children"]: + ca=clone(a);ca["actor_id"]=child["actor_id"];ca["commitment_id"]=child["commitment_id"];ca["world_id"]=child["world_id"];ca["activation_id"]+="-"+child["operation_id"];ca["execution_id"]+="-"+child["operation_id"];ca["validation_id"]+="-"+child["operation_id"];ca["invocation_nonce"]+="-"+child["operation_id"];ca["freshness_ref"]+="-"+child["operation_id"];ca.pop("handoff",None);bind(child,ca);wrapped.append({"authority":ca,"event":child}) + e["children"]=wrapped + for ph in c["inputs"]["phases"]: + if ph.get("kind")=="APPLY": + if ph["event"]["operation"]=="RELEASE":ph["event"]["release_from"]="CURRENT" if ph["event"]["dimension_id"]=="D-PEAK" else "RESERVED" + bind(ph["event"],ph["authority"]) + # review-block reproducers + inp=clone(next(x["inputs"] for x in cs if x["id"]=="compound-all-or-none"));inp["phases"][0]["event"]["children"][1]["event"]["operation_id"]=inp["phases"][0]["event"]["children"][0]["event"]["operation_id"];cs.append({"family":"F17_REVIEW_ATTACKS","id":"compound-duplicate-child","inputs":inp}) + inp=clone(next(x["inputs"] for x in cs if x["id"]=="compound-all-or-none"));inp["phases"][0]["event"]["children"][1]["authority"]["actor_id"]="ATTACKER";cs.append({"family":"F17_REVIEW_ATTACKS","id":"compound-attacker-child","inputs":inp}) + inp=clone(next(x["inputs"] for x in cs if x["id"]=="authority-denial-no-delta"));inp["phases"][0]["fault"]="AFTER_COMMIT_BEFORE_RESPONSE";cs.append({"family":"F17_REVIEW_ATTACKS","id":"denied-after-fault","inputs":inp}) + inp=clone(next(x["inputs"] for x in cs if x["id"]=="authority-denial-no-delta"));inp["phases"][0]["fault"]="BEFORE_COMMIT";cs.append({"family":"F17_REVIEW_ATTACKS","id":"denied-before-fault","inputs":inp}) + def attack(name,base,mut): + x=clone(next(c["inputs"] for c in cs if c["id"]==base));mut(x);cs.append({"family":"F17_REVIEW_ATTACKS","id":name,"inputs":x}) + attack("handoff-generation-mismatch","authority-denial-no-delta",lambda x:(x["phases"][0]["authority"].__setitem__("verdict","ALLOW"),x["phases"][0]["authority"]["handoff"].__setitem__("generation",2))) + attack("freshness-repeat","consumable-reserve-commit",lambda x:x["phases"][1]["authority"].__setitem__("freshness_ref",x["phases"][0]["authority"]["freshness_ref"])) + attack("replay-binding-mismatch","lost-response-retry",lambda x:x["phases"][2]["event"].__setitem__("amount",9)) + attack("peak-release-enum-invalid","peak-current-highwater",lambda x:x["phases"][2]["event"].__setitem__("release_from","FREE")) + attack("lease-grant-expired","lease-renew-epoch",lambda x:x["phases"][0]["event"].__setitem__("expires_at",10)) + attack("lease-epoch-skip","lease-renew-epoch",lambda x:x["phases"][1]["event"].__setitem__("epoch",3)) + attack("share-child-remint","share-parent-revoke",lambda x:x["phases"].append(clone(x["phases"][0])|{"logical_now":11})) + attack("provider-fork","provider-estimate-invoice-credit",lambda x:x["phases"][2]["event"].__setitem__("prior_fact_id",x["phases"][0]["event"]["provider_fact_id"])) + attack("provider-account-switch","provider-estimate-invoice-credit",lambda x:x["phases"][1]["event"].__setitem__("provider_account_id","OTHER")) + attack("provider-credit-overbound","provider-estimate-invoice-credit",lambda x:x["phases"][3]["event"].__setitem__("amount",99)) + attack("dimension-parent-cycle","rate-vs-stock-no-conversion",lambda x:(x["initial_state"]["dimensions"][0].__setitem__("parent_budget_id",x["initial_state"]["dimensions"][1]["dimension_id"]),x["initial_state"]["dimensions"][1].__setitem__("parent_budget_id",x["initial_state"]["dimensions"][0]["dimension_id"]))) + attack("unit-kind-incompatible","rate-vs-stock-no-conversion",lambda x:x["initial_state"]["dimensions"][1].__setitem__("unit_id","token")) + attack("lease-epoch-zero","lease-renew-epoch",lambda x:x["phases"][0]["event"].__setitem__("epoch",0)) + attack("rate-last-refill-regression","rate-window-not-elapsed",lambda x:x["initial_state"]["dimensions"][0]["state"].__setitem__("last_refill_at",11)) + attack("provider-operation-collision","provider-estimate-invoice-credit",lambda x:x["phases"][1]["event"].__setitem__("operation_id",x["phases"][0]["event"]["operation_id"])) + def provider_resolution(x,direct=False): + unknown=x["phases"][1];unknown["event"]["amount"]=9;observed=clone(unknown);observed["event"]["operation"]="PROVIDER_SETTLED" if direct else "PROVIDER_OBSERVED";observed["event"]["operation_id"]="OP-v7";observed["event"]["provider_fact_id"]="PF2-"+("SETTLED" if direct else "OBSERVED");observed["event"]["prior_fact_id"]=unknown["event"]["provider_fact_id"] + for k in ("grant_ref","execution_id","activation_id","validation_id","invocation_nonce","freshness_ref"):observed["authority"][k]+="-EVIDENCE" + observed["authority"]["handoff"]={k:observed["authority"][k] for k in AUTH_CONTEXT};x["phases"].append(observed) + if not direct: + settled=clone(observed);settled["event"]["operation"]="PROVIDER_SETTLED";settled["event"]["operation_id"]="OP-v8";settled["event"]["provider_fact_id"]="PF2-SETTLED";settled["event"]["prior_fact_id"]=observed["event"]["provider_fact_id"] + for k in ("grant_ref","execution_id","activation_id","validation_id","invocation_nonce","freshness_ref"):settled["authority"][k]+="-SETTLE" + settled["authority"]["handoff"]={k:settled["authority"][k] for k in AUTH_CONTEXT};x["phases"].append(settled) + attack("provider-unknown-observed-settled","provider-unknown",lambda x:provider_resolution(x,False)) + attack("provider-unknown-direct-settle","provider-unknown",lambda x:provider_resolution(x,True)) + attack("nested-compound","compound-all-or-none",lambda x:x["phases"][0]["event"]["children"][0].__setitem__("event",clone(x["phases"][0]["event"]))) + def used_revoke(x): + acquire=clone(x["phases"][1]);acquire["event"]["operation"]="SHARE_ACQUIRE";acquire["event"]["operation_id"]="OP-s4a";acquire["event"]["amount"]=4 + for k in ("grant_ref","execution_id","activation_id","validation_id","invocation_nonce","freshness_ref"):acquire["authority"][k]+="-USE" + acquire["authority"]["handoff"]={k:acquire["authority"][k] for k in AUTH_CONTEXT};x["phases"].insert(2,acquire) + reallocate=clone(x["phases"][0]);reallocate["event"]["operation_id"]="OP-s5a";reallocate["event"]["child_id"]="B2";reallocate["event"]["amount"]=6 + for k in ("grant_ref","execution_id","activation_id","validation_id","invocation_nonce","freshness_ref"):reallocate["authority"][k]+="-REALLOC" + reallocate["authority"]["handoff"]={k:reallocate["authority"][k] for k in AUTH_CONTEXT};x["phases"].append(reallocate) + attack("share-used-revoke-reallocate","share-parent-revoke",used_revoke) + def exact_retry(name,base,phase_index=0): + x=clone(next(c["inputs"] for c in cs if c["id"]==base));first=clone(x["phases"][phase_index]);first["fault"]="AFTER_COMMIT_BEFORE_RESPONSE";x["phases"]=[first,{"kind":"RELOAD"},clone(first)];cs.append({"family":"F17_REVIEW_ATTACKS","id":name,"inputs":x}) + exact_retry("provider-after-reload-replay","provider-estimate-invoice-credit") + exact_retry("share-after-reload-replay","share-child-use") + exact_retry("lease-after-reload-replay","lease-renew-epoch") + exact_retry("compound-after-reload-replay","compound-all-or-none") + attack("compound-partial-claim-reuse","compound-all-or-none",lambda x:x["phases"].append(clone(x["phases"][0]["event"]["children"][0])|{"fault":"NONE","kind":"APPLY","logical_now":11})) + return cs + +Q_SEM={"Q01":"compute stock and concurrent execution occupancy","Q02":"token stock and irreversible generation use","Q03":"time lease/expiry and elapsed-rate windows","Q04":"energy stock and metered irreversible use","Q05":"provider account estimate-to-settlement facts","Q06":"context-storage stock, reservation, eviction and reuse","Q07":"retrieval request rate, reserved service and delivered use","Q08":"compaction work stock, failed work and output reuse","Q09":"tool/service lease plus reserved invocation capacity","Q10":"child-work share allocation and concurrent peak occupancy","Q11":"failed/speculative reservation and incurred nonrefund","Q12":"evaluation/aggregation reservation and child attribution","Q13":"cancellation request/effective release and incurred use","Q14":"cache/reuse freshness decision, avoided work and stale recompute","Q15":"delegated child share and accountable attribution","Q16":"substitution release/reacquire with resource binding","Q17":"late-result incurred work and no automatic refund"} +L_SEM={"L01":"reserved/free/acquired/released state falsified by an unbalanced transition","L02":"partial or failed use falsified by erasing incurred quantity","L03":"refundable/nonrefundable partition falsified by implicit refund","L04":"lease grant/occupancy/expiry/epoch/revoke lifecycle falsified by stale authority","L05":"share allocation, peak occupancy, or rate bucket falsified by capacity excess","L06":"parent-child/sibling conservation falsified by remint or oversubscription","L07":"concurrent reservation falsified by admitting overlapping capacity above cap","L08":"escrow/contingency/overrun falsified by unreserved excess","L09":"cancellation request/effective timing falsified by premature refund","L10":"actor/commit/world/resource attribution and reconciliation falsified by join mismatch","L11":"provider charge facts distinct from semantic consumption falsified by equivalence","L12":"failure/cancel/late/discard nonrefund falsified by automatic restoration"} +N_A={"L04":{"Q01","Q02","Q04","Q05","Q06","Q08","Q11","Q12","Q14"},"L06":{"Q02","Q04","Q05","Q06","Q07","Q08","Q14"},"L11":set()} +L11_DISTINCTION={q:f"{q}/L11 APPLICABLE: {Q_SEM[q]} is a semantic quantity distinct from provider account charge facts; neither value, unit, lifecycle, nor reconciliation may be inferred from the other" for q in Q} +def b8_matrix(): + cells=[] + for q in Q: + for l in B8: + applicable=q not in N_A.get(l,set()) + if l=="L11":reason=L11_DISTINCTION[q] + else:reason=(f"{q}/{l} APPLICABLE: {Q_SEM[q]}; {L_SEM[l]}" if applicable else f"{q}/{l} N_A representation-neutral: {Q_SEM[q]} has no {B8[l]} state or lifecycle; no storage, scheduler, or mechanism inference") + cells.append({"classification":"APPLICABLE" if applicable else "N_A","law":l,"quantity":q,"reason":reason}) + return cells + +def evidence_dag_spec(): + edges={ + "ROOT":[],"IX":["ROOT"],"IC":["ROOT"],"IRX":["ROOT"],"IRC":["ROOT"],"IRV":["ROOT"],"IRP":["ROOT"], + "RX":["IX","IRX"],"RC":["IC","IRC"],"RV":["ROOT","IRV"],"IR":["IX","IC","RX","RC","RV"], + "RP":["IR","IRP"],"PF":["IR","RP","ROOT"],"F":["PF","IR","IX","IC","ROOT"], + "O1":["F","IX"],"O2":["F","IC"],"V":["F","IR","O1","O2"],"E":["V","F","PF","IR","O1","O2"]} + return {"edges":[{"from":a,"to":b} for a in sorted(edges) for b in edges[a]],"nodes":[{"id":x,"kind":{"ROOT":"PREREG_ROOT","IX":"PRODUCER_IDENTITY","IC":"PRODUCER_IDENTITY","IRX":"REVIEWER_IDENTITY","IRC":"REVIEWER_IDENTITY","IRV":"REVIEWER_IDENTITY","IRP":"REVIEWER_IDENTITY","RX":"REVIEW","RC":"REVIEW","RV":"REVIEW","IR":"INDEPENDENCE_REPORT","RP":"REVIEW","PF":"PREFREEZE","F":"FREEZE","O1":"OBSERVATION","O2":"OBSERVATION","V":"VALIDATION","E":"EVIDENCE"}[x]} for x in sorted(edges)],"roots":["ROOT"]} +def manifest_spec(): + cs=corpus_v2() + return {"algebra":{"id":ALGEBRA,"law_kinds":list(KINDS),"parent_compatibility":[],"representation_neutral":True},"b8":{"laws":B8,"matrix":b8_matrix(),"quantities":Q},"boundary":{"nonclaims":["BUDGET_GRANTS_CAPABILITY","BUDGET_ACCEPTS_RESULTS","BUDGET_AUTHORIZES_EFFECTS","IMPLICIT_CONVERSION","SCALAR_COLLAPSE","PROVIDER_CHARGE_EQUIVALENCE","AUTOMATIC_REFUND","D009_LIFECYCLE","MECHANISM_OR_PLACEMENT"],"scope_rule":"GLOBAL_LEDGER_ACQUISITION_CHARGE_FACTS_SEPARATE_FROM_WORLD_RESOURCE_BINDING_PLANS"},"budget":{"engineer_hours_cap":96,"family_count":len({c["family"] for c in cs}),"law_count":len(LAWS),"projection_count":6,"raw_subcase_count":len(cs),"risk_tier":"FULL","stop_date":"2026-08-30"},"canonicalization":{"duplicate_keys":"REJECT","encoding":"UTF-8","layout":"SORTED_COMPACT_TERMINAL_LF","normalization":"NFC","numbers":"U64_NO_FLOAT","surrogates":"REJECT"},"cases":cs,"decision":{"frozen":False,"id":"D-008","status":"OPEN"},"harness_completion":{"byte_length":6071,"path":"decisions/agent-native-harness-completion-v1.json","sha256":"d762c9c50404063c41d7b0f3ffa3112267da4fc50d223dcc9a9815705da9f29f"},"independence":{"decisive_primary_helpers":["apply_leaf","classify_event","event_join","authority_current","derive"],"independent_path":"oracle_observation and law-specific relations do not call decisive primary helpers"},"invalidation":"V1_V2_INVALIDATED_PRE_FREEZE_EVIDENCE","laws":list(LAWS),"provenance":{"artifact_basename":"d008-budget-manifest-v1.json","dag":evidence_dag_spec(),"prereg_root_schema":"D008-PREREG-ROOT-3","stage":"C_PREREGISTRATION","status":"NO_ROOT_OR_EVIDENCE_YET"},"provenance_qualified":False,"provenance_status":"STAGE_C_PREREGISTERED_NO_ACTUAL_ROOT_OR_EVIDENCE","python_grammar":PYTHON_GRAMMAR,"schema":"D008-BUDGET-MANIFEST-3","semantic_locks":{"o_semantic_body":{"byte_length":470320,"manifest_sha256_field":"NORMALIZED_TO_@MANIFEST_SHA256@","schema":"D008-O-SEMANTIC-BODY-LOCK-1","sha256":"1822d16b8020f8e2afe18f62eb8dc9f3af3c812273a0d02dd8067c9c094019e6","shape":"canonical semantic_body object with real manifest_sha256 replaced by @MANIFEST_SHA256@"},"stage_b_semantic_projection":{"accepted_count":60,"byte_length":466404,"raw_count":69,"schema":"D008-STAGE-B-SEMANTIC-PROJECTION-1","sha256":"5ed91a896453a5dec139e1a6cf8e22f1ae91137022df9db59cf9da12379d055b","shape":"ordered case list; accepted={case_id,input_sha256,classification,laws,observation}; structural={case_id,input_sha256,classification}","stage_b":"PASS","structural_reject_count":9}},"semantic_stage":"B_PASS"} + +# closed raw state and primary transition path + +def validate_dimension(d): + exact(d,{"dimension_id","kind","owner_id","parent_budget_id","scope","state","unit_id"},"dimension");[text(d[k],k) for k in ("dimension_id","kind","owner_id","scope","unit_id")] + if d["kind"] not in KINDS or d["scope"]!="GLOBAL" or d["unit_id"] not in UNIT_COMPAT or d["kind"] not in UNIT_COMPAT[d["unit_id"]]:raise ManifestError("dimension kind/unit/scope") + if d["parent_budget_id"] is not None:text(d["parent_budget_id"],"parent") + s=d["state"] + if d["kind"]=="CONSUMABLE": + exact(s,{"consumed","expired","free","issued","nonrefundable","refundable","reserved","unknown_disputed"},"consumable");[uint(v,k) for k,v in s.items()] + if s["free"]+s["reserved"]+s["consumed"]+s["expired"]+s["unknown_disputed"]!=s["issued"] or s["refundable"]+s["nonrefundable"]!=s["consumed"]:raise ManifestError("issued conservation") + elif d["kind"]=="PEAK": + exact(s,{"cap","current","high_water","reserved"},"peak");[uint(v,k) for k,v in s.items()] + if s["current"]+s["reserved"]>s["cap"] or s["high_water"]s["cap"] or s["reserved"]>s["available"]:raise ManifestError("rate conservation") + elif d["kind"]=="LEASE": + exact(s,{"active","capacity","expired","history"},"lease state");uint(s["capacity"],"capacity") + ids=[] + for x in s["active"]:exact(x,{"epoch","expires_at","lease_id","uses"},"active lease");[uint(x[k],k) for k in ("epoch","expires_at","uses")];text(x["lease_id"],"lease");ids.append(x["lease_id"]) + for x in s["history"]:exact(x,{"end","epoch","expires_at","lease_id","uses"},"lease history");[uint(x[k],k) for k in ("epoch","expires_at","uses")];text(x["lease_id"],"lease");ids.append(x["lease_id"]) + for x in s["expired"]:text(x,"expired lease") + if len(ids)!=len(set(ids)) or len(s["active"])>s["capacity"] or any(x["end"] not in ("EXPIRED","REVOKED") for x in s["history"]):raise ManifestError("lease inventory") + else: + exact(s,{"capacity","children","revoked_history"},"share state");uint(s["capacity"],"capacity");ids=[] + for x in s["children"]:exact(x,{"allocated","child_id","reserved","used"},"share child");[uint(x[k],k) for k in ("allocated","reserved","used")];text(x["child_id"],"child");ids.append(x["child_id"]) + for x in s["revoked_history"]:exact(x,{"allocated","child_id","reserved","used"},"share history");[uint(x[k],k) for k in ("allocated","reserved","used")];text(x["child_id"],"child");ids.append(x["child_id"]) + if len(ids)!=len(set(ids)) or sum(x["allocated"] for x in s["children"])+sum(x["used"] for x in s["revoked_history"])>s["capacity"] or any(x["reserved"]+x["used"]>x["allocated"] for x in s["children"]):raise ManifestError("share inventory") +def validate_provider_facts(xs): + facts=index(xs,"fact_id","provider fact");ops=set();succ={} + for f in xs: + exact(f,{"amount","fact_id","operation_id","prior_fact_id","provider_account_id","stage"},"provider fact");uint(f["amount"],"amount");[text(f[k],k) for k in ("fact_id","operation_id","provider_account_id","stage")] + if f["operation_id"] in ops or f["stage"] not in ("ESTIMATE","OBSERVED","UNKNOWN","SETTLED","CREDIT"):raise ManifestError("provider identity/stage") + ops.add(f["operation_id"]);prior=f["prior_fact_id"] + if prior is None: + if f["stage"]!="ESTIMATE":raise ManifestError("provider root") + else: + if prior not in facts or prior in succ:raise ManifestError("provider prior/fork") + old=facts[prior];succ[prior]=f["fact_id"] + if old["provider_account_id"]!=f["provider_account_id"]:raise ManifestError("provider account continuity") + legal=(old["stage"]=="ESTIMATE" and f["stage"] in ("OBSERVED","UNKNOWN")) or (old["stage"]=="UNKNOWN" and f["stage"]=="OBSERVED" and f["amount"]<=old["amount"]) or (old["stage"]=="OBSERVED" and f["stage"]=="SETTLED" and f["amount"]==old["amount"]) or (old["stage"] in ("SETTLED","CREDIT") and f["stage"]=="CREDIT") + if not legal:raise ManifestError("provider lifecycle") + for f in xs: + if f["stage"]=="UNKNOWN" and f["fact_id"] not in succ:continue + if f["stage"]=="CREDIT": + chain=[];x=f + while x["prior_fact_id"] is not None:chain.append(x);x=facts[x["prior_fact_id"]] + settled=next((z for z in reversed(chain+[x]) if z["stage"]=="SETTLED"),None) + if settled is None or sum(z["amount"] for z in chain if z["stage"]=="CREDIT")>settled["amount"]:raise ManifestError("provider credit bound") +def dimension_capacity(d): + s=d["state"];return s["issued"] if d["kind"]=="CONSUMABLE" else s["cap"] if d["kind"] in ("PEAK","RATE") else s["capacity"] +def parent_relation(child,parent): + relation=(child["kind"],child["unit_id"],parent["kind"],parent["unit_id"]) + return child["owner_id"]==parent["owner_id"] and ((child["kind"],child["unit_id"])==(parent["kind"],parent["unit_id"]) or relation in PARENT_COMPAT) and dimension_capacity(child)<=dimension_capacity(parent) +def validate_state(s,now=None,initial=False): + exact(s,{"dimensions","provider_facts","resource_binding_plans","retained","tombstones","worlds"},"state");dims=index(s["dimensions"],"dimension_id","dimension") + if initial and (s["retained"] or s["tombstones"]):raise ManifestError("initial recovery inventory forbidden") + for d in s["dimensions"]:validate_dimension(d) + for d in s["dimensions"]: + seen=set();p=d["parent_budget_id"] + if p is not None and (p not in dims or not parent_relation(d,dims[p])):raise ManifestError("typed parent relation") + while p is not None: + if p not in dims or p in seen:raise ManifestError("dimension parent/cycle") + seen.add(p);p=dims[p]["parent_budget_id"] + for parent in s["dimensions"]: + children=[d for d in s["dimensions"] if d["parent_budget_id"]==parent["dimension_id"]] + if sum(dimension_capacity(d) for d in children)>dimension_capacity(parent):raise ManifestError("parent delegated capacity") + worlds=index(s["worlds"],"world_id","world") + for w in s["worlds"]:exact(w,{"world_id"},"world");text(w["world_id"],"world id") + plans=index(s["resource_binding_plans"],"plan_id","plan") + for p in s["resource_binding_plans"]: + exact(p,{"commitment_id","dimension_id","owner_id","plan_id","resource_id","world_id"},"plan");[text(p[k],k) for k in p] + if p["dimension_id"] not in dims or p["world_id"] not in worlds or p["owner_id"]!=dims[p["dimension_id"]]["owner_id"]:raise ManifestError("plan join") + validate_provider_facts(s["provider_facts"]) + for r in s["retained"]: + exact(r,{"attempted_at","binding_sha256","causal_operation_id","claimed_ids","expires_at","operation_id","outcome"},"retained");digest(r["binding_sha256"],"binding");[uint(r[k],k) for k in ("attempted_at","expires_at")];[text(r[k],k) for k in ("causal_operation_id","operation_id","outcome")] + if not isinstance(r["claimed_ids"],list) or r["claimed_ids"]!=sorted(set(r["claimed_ids"])) or r["operation_id"] not in r["claimed_ids"]:raise ManifestError("retained claimed ids") + for x in r["claimed_ids"]:text(x,"claimed id") + for t in s["tombstones"]: + exact(t,{"binding_sha256","causal_operation_id","claimed_ids","operation_id","outcome","retired_at"},"tomb");digest(t["binding_sha256"],"binding");uint(t["retired_at"],"retired");[text(t[k],k) for k in ("causal_operation_id","operation_id","outcome")] + if not isinstance(t["claimed_ids"],list) or t["claimed_ids"]!=sorted(set(t["claimed_ids"])) or t["operation_id"] not in t["claimed_ids"]:raise ManifestError("tomb claimed ids") + for x in t["claimed_ids"]:text(x,"claimed id") + rops=[x["operation_id"] for x in s["retained"]];tops=[x["operation_id"] for x in s["tombstones"]] + if len(rops)!=len(set(rops)) or len(tops)!=len(set(tops)) or set(rops)&set(tops) or (now is not None and any(t["retired_at"]>now for t in s["tombstones"])):raise ManifestError("operation inventory/time") + return dims,plans,worlds +def validate_authority(a): + exact(a,set(AUTH_CONTEXT)|{"handoff","verdict"},"authority");exact(a["handoff"],set(AUTH_CONTEXT),"handoff") + for k in AUTH_CONTEXT:uint(a[k],k) if k=="generation" else text(a[k],k) + for k in AUTH_CONTEXT:uint(a["handoff"][k],k) if k=="generation" else text(a["handoff"][k],k) + if a["verdict"] not in ("ALLOW","DENY"):raise ManifestError("authority verdict") +def validate_event(e): + if not isinstance(e,dict) or e.get("operation") not in OP_FIELDS or set(e)!=BASE_EVENT|OP_FIELDS[e["operation"]] or FORBIDDEN_INPUT_KEYS&set(e):raise ManifestError("event shape/enum") + for k in BASE_EVENT-{"amount"}:text(e[k],k) + uint(e["amount"],"amount");op=e["operation"] + if op=="COMPOUND": + if not isinstance(e["children"],list) or not e["children"]:raise ManifestError("compound shape") + for x in e["children"]:exact(x,{"authority","event"},"child");validate_authority(x["authority"]);validate_event(x["event"]) + ids=[e["operation_id"]]+[x["event"]["operation_id"] for x in e["children"]] + if len(ids)!=len(set(ids)):raise ManifestError("compound operation identity") + elif op=="RELEASE" and e["release_from"] not in ("RESERVED","CURRENT"):raise ManifestError("release_from") + else: + for k in OP_FIELDS[op]: + if k in ("refundable","cache_fresh") and not isinstance(e[k],bool):raise ManifestError("event bool") + elif k in ("epoch","expires_at"):uint(e[k],k) + elif k not in ("prior_fact_id",) and k not in ("refundable","cache_fresh"):text(e[k],k) + if "prior_fact_id" in e and e["prior_fact_id"] is not None:text(e["prior_fact_id"],"prior") +def event_binding(e):return vsha(e) +def claimed_ids(e): + ids={e["operation_id"]};op=e["operation"] + if op.startswith("PROVIDER_"):ids.add(e["provider_fact_id"]) + if op=="SHARE_ALLOCATE":ids.add(e["child_id"]) + if op=="LEASE_GRANT":ids.add(e["operation_id"]) + if op=="COMPOUND": + for child in e["children"]: + if child["event"]["operation"]=="COMPOUND":raise ManifestError("nested compound forbidden") + ids.update(claimed_ids(child["event"])) + return sorted(ids) +def validate_trace_namespaces(inputs): + """Exact outer replay is resolved before claims are treated as new.""" + owners={};attempts={} + def initial_claim(x): + text(x,"initial claim") + if x in owners:raise ManifestError("global identity collision") + owners[x]="INITIAL" + for f in inputs["initial_state"]["provider_facts"]:initial_claim(f["operation_id"]);initial_claim(f["fact_id"]) + for d in inputs["initial_state"]["dimensions"]: + if d["kind"]=="SHARE": + for x in d["state"]["children"]+d["state"]["revoked_history"]:initial_claim(x["child_id"]) + if d["kind"]=="LEASE": + for x in d["state"]["active"]+d["state"]["history"]:initial_claim(x["lease_id"]) + for ph in inputs["phases"]: + if ph=={"kind":"RELOAD"}:continue + e=ph["event"];oid=e["operation_id"];binding=event_binding(e);claims=claimed_ids(e);old=attempts.get(oid) + if old is not None: + if old!=(binding,claims):raise ManifestError("changed or partial replay binding") + continue + if any(x in owners for x in claims):raise ManifestError("cross-operation claimed identity reuse") + attempts[oid]=(binding,claims) + for x in claims:owners[x]=oid +def authority_current(a,e):return a["verdict"]=="ALLOW" and a["right"]=="USE_BUDGET" and all(a[k]==a["handoff"][k] for k in AUTH_CONTEXT) and (a["actor_id"],a["commitment_id"],a["world_id"])==(e["actor_id"],e["commitment_id"],e["world_id"]) +def event_join(state,e): + dims,plans,worlds=validate_state(state);p=plans.get(e["plan_id"]);d=dims.get(e["dimension_id"]) + return d is not None and e["world_id"] in worlds and p is not None and (p["dimension_id"],p["world_id"],p["resource_id"],p["owner_id"],p["commitment_id"])==(e["dimension_id"],e["world_id"],e["resource_id"],e["owner_id"],e["commitment_id"]) and e["owner_id"]==d["owner_id"] +def retain(state,e,status,now,causal=None,claims=None):state["retained"].append({"attempted_at":now,"binding_sha256":event_binding(e),"causal_operation_id":causal or e["operation_id"],"claimed_ids":claims or claimed_ids(e),"expires_at":now+20,"operation_id":e["operation_id"],"outcome":status}) +def lease_expire(s,now): + for x in list(s["active"]): + if now>=x["expires_at"]:s["active"].remove(x);s["expired"].append(x["lease_id"]);s["history"].append({**x,"end":"EXPIRED"}) +def provider_apply(state,e): + stage=e["operation"].removeprefix("PROVIDER_");account=e["provider_account_id"];prior=e["prior_fact_id"];facts={x["fact_id"]:x for x in state["provider_facts"]};old=facts.get(prior) if prior is not None else None;successors={x["prior_fact_id"] for x in state["provider_facts"] if x["prior_fact_id"] is not None} + if e["provider_fact_id"] in facts or any(x["operation_id"]==e["operation_id"] for x in state["provider_facts"]) or prior in successors:return "DENY_ADMISSION" + legal=stage=="ESTIMATE" and prior is None + if old is not None and old["provider_account_id"]==account: + legal|=old["stage"]=="ESTIMATE" and stage in ("OBSERVED","UNKNOWN") + legal|=old["stage"]=="UNKNOWN" and stage=="OBSERVED" and e["amount"]<=old["amount"] + legal|=old["stage"]=="OBSERVED" and stage=="SETTLED" and e["amount"]==old["amount"] + legal|=old["stage"] in ("SETTLED","CREDIT") and stage=="CREDIT" + if not legal:return "DENY_ADMISSION" + if stage=="CREDIT": + x=old;credits=e["amount"] + while x and x["stage"]=="CREDIT":credits+=x["amount"];x=facts.get(x["prior_fact_id"]) + if x is None or x["stage"]!="SETTLED" or credits>x["amount"]:return "DENY_ADMISSION" + state["provider_facts"].append({"amount":e["amount"],"fact_id":e["provider_fact_id"],"operation_id":e["operation_id"],"prior_fact_id":prior,"provider_account_id":account,"stage":stage});return "UNKNOWN_RECONCILE" if stage=="UNKNOWN" else "APPLIED" +def apply_leaf(state,e,now): + state=clone(state);d=next((x for x in state["dimensions"] if x["dimension_id"]==e["dimension_id"]),None);op=e["operation"];a=e["amount"] + if op in UNSUPPORTED_OPS:return "UNSUPPORTED",state + if op=="TOMB": + r=next((x for x in state["retained"] if x["operation_id"]==e.get("target_operation_id")),None) + if r is None:return "DENY_ADMISSION",state + state["retained"].remove(r);state["tombstones"].append({"binding_sha256":r["binding_sha256"],"causal_operation_id":e["operation_id"],"claimed_ids":r["claimed_ids"],"operation_id":r["operation_id"],"outcome":r["outcome"],"retired_at":now});retain(state,e,"APPLIED",now);return "APPLIED",state + if op.startswith("PROVIDER_"): + status=provider_apply(state,e) + if status in ("APPLIED","UNKNOWN_RECONCILE"):retain(state,e,status,now) + return status,state + if op in ("CACHE_REUSE","FAIL","DEPENDENCY_ROLLBACK","LATE_RESULT","WORLD_DISCARD","CANCEL_REQUEST"): + retain(state,e,"APPLIED",now);return "APPLIED",state + if d is None:return "UNSUPPORTED",state + s=d["state"] + if d["kind"]=="CONSUMABLE": + if op in ("RESERVE","ESCROW"): + if s["free"]s["cap"]:return "DENY_ADMISSION",state + s["reserved"]+=a + elif op=="ACQUIRE": + if s["reserved"]=a:s["reserved"]-=a;s["available"]-=a + elif s["available"]-s["reserved"]>=a:s["available"]-=a + else:return "DENY_ADMISSION",state + elif op=="RELEASE": + if s["reserved"]=s["capacity"] or any(e["operation_id"]==x["lease_id"] for x in s["active"]+s["history"]):return "DENY_ADMISSION",state + s["active"].append({"epoch":1,"expires_at":e["expires_at"],"lease_id":e["operation_id"],"uses":0}) + else: + lease=next((x for x in s["active"] if x["lease_id"]==e.get("lease_id")),None) + if lease is None:return "DENY_ADMISSION",state + if op=="LEASE_USE": + if e["epoch"]!=lease["epoch"]:return "DENY_ADMISSION",state + lease["uses"]+=1 + elif op=="LEASE_REVOKE":s["active"].remove(lease);s["history"].append({**lease,"end":"REVOKED"}) + elif op=="LEASE_RENEW": + if e["epoch"]!=lease["epoch"]+1 or e["expires_at"]<=max(now,lease["expires_at"]):return "DENY_ADMISSION",state + lease["epoch"]=e["epoch"];lease["expires_at"]=e["expires_at"] + else:return "UNSUPPORTED",state + else: + child=next((x for x in s["children"] if x["child_id"]==e.get("child_id")),None);historical=sum(x["used"] for x in s["revoked_history"]) + if op=="SHARE_ALLOCATE": + if any(e["child_id"]==x["child_id"] for x in s["children"]+s["revoked_history"]) or sum(x["allocated"] for x in s["children"])+historical+a>s["capacity"]:return "DENY_ADMISSION",state + s["children"].append({"allocated":a,"child_id":e["child_id"],"reserved":0,"used":0}) + elif child is None:return "DENY_ADMISSION",state + elif op=="SHARE_RESERVE": + if child["used"]+child["reserved"]+a>child["allocated"]:return "DENY_ADMISSION",state + child["reserved"]+=a + elif op=="SHARE_ACQUIRE": + if child["reserved"]x["amount"]:return "DENY_ADMISSION",image + out["provider_facts"].append({"amount":n,"fact_id":event["provider_fact_id"],"operation_id":event["operation_id"],"prior_fact_id":prior,"provider_account_id":event["provider_account_id"],"stage":stage});status="UNKNOWN_RECONCILE" if stage=="UNKNOWN" else "APPLIED";out["retained"].append({"attempted_at":now,"binding_sha256":vsha(event),"causal_operation_id":event["operation_id"],"claimed_ids":claimed_ids(event),"expires_at":now+20,"operation_id":event["operation_id"],"outcome":status});return status,out + if op in ("CACHE_REUSE","FAIL","DEPENDENCY_ROLLBACK","LATE_RESULT","WORLD_DISCARD","CANCEL_REQUEST"): + out["retained"].append({"attempted_at":now,"binding_sha256":vsha(event),"causal_operation_id":event["operation_id"],"claimed_ids":claimed_ids(event),"expires_at":now+20,"operation_id":event["operation_id"],"outcome":"APPLIED"});return "APPLIED",out + if d is None:return "UNSUPPORTED",image + s=d["state"] + if d["kind"]=="CONSUMABLE": + if op in ("RESERVE","ESCROW"): + if s["free"]s["cap"]:return "DENY_ADMISSION",image + s["reserved"]+=n + elif op=="ACQUIRE": + if s["reserved"]=n:s["reserved"]-=n;s["available"]-=n + elif s["available"]-s["reserved"]>=n:s["available"]-=n + else:return "DENY_ADMISSION",image + elif op=="RELEASE": + if s["reserved"]=x["expires_at"]:s["active"].remove(x);s["expired"].append(x["lease_id"]);s["history"].append({**x,"end":"EXPIRED"}) + if op=="LEASE_GRANT": + if event["epoch"]!=1 or event["expires_at"]<=now or len(s["active"])>=s["capacity"] or any(event["operation_id"]==x["lease_id"] for x in s["active"]+s["history"]):return "DENY_ADMISSION",image + s["active"].append({"epoch":1,"expires_at":event["expires_at"],"lease_id":event["operation_id"],"uses":0}) + else: + lease=next((x for x in s["active"] if x["lease_id"]==event.get("lease_id")),None) + if lease is None:return "DENY_ADMISSION",out + if op=="LEASE_USE": + if event["epoch"]!=lease["epoch"]:return "DENY_ADMISSION",image + lease["uses"]+=1 + elif op=="LEASE_REVOKE":s["active"].remove(lease);s["history"].append({**lease,"end":"REVOKED"}) + elif op=="LEASE_RENEW": + if event["epoch"]!=lease["epoch"]+1 or event["expires_at"]<=max(now,lease["expires_at"]):return "DENY_ADMISSION",image + lease["epoch"]=event["epoch"];lease["expires_at"]=event["expires_at"] + else:return "UNSUPPORTED",image + else: + child=next((x for x in s["children"] if x["child_id"]==event.get("child_id")),None);history=sum(x["used"] for x in s["revoked_history"]) + if op=="SHARE_ALLOCATE": + if any(event["child_id"]==x["child_id"] for x in s["children"]+s["revoked_history"]) or sum(x["allocated"] for x in s["children"])+history+n>s["capacity"]:return "DENY_ADMISSION",image + s["children"].append({"allocated":n,"child_id":event["child_id"],"reserved":0,"used":0}) + elif child is None:return "DENY_ADMISSION",image + elif op=="SHARE_RESERVE": + if child["used"]+child["reserved"]+n>child["allocated"]:return "DENY_ADMISSION",image + child["reserved"]+=n + elif op=="SHARE_ACQUIRE": + if child["reserved"]s["cap"] or s["high_water"]s["cap"] or s["reserved"]>s["available"]):return False + if d["kind"]=="LEASE" and (len(s["active"])>s["capacity"] or any(x["end"] not in ("EXPIRED","REVOKED") for x in s["history"])):return False + if d["kind"]=="SHARE" and (sum(x["allocated"] for x in s["children"])+sum(x["used"] for x in s["revoked_history"])>s["capacity"] or any(x["reserved"]+x["used"]>x["allocated"] for x in s["children"])):return False + return True +def apply_pairs(inputs,obs):return list(zip((x for x in inputs["phases"] if x.get("kind")=="APPLY"),(x for x in obs.get("phases",[]) if x.get("kind")=="APPLY"))) +def law_whole(inputs,obs): + try:return canonical(oracle_observation(inputs))==canonical(obs) + except Exception:return False +def law_typed(inputs,obs): + try: + owners={};attempts={};worlds=inputs["initial_state"]["worlds"] + if any(not isinstance(w,dict) or set(w)!={"world_id"} or not isinstance(w["world_id"],str) or not w["world_id"] for w in worlds) or len({w["world_id"] for w in worlds})!=len(worlds):return False + for d in inputs["initial_state"]["dimensions"]: + if d["unit_id"] not in UNIT_COMPAT or d["kind"] not in UNIT_COMPAT[d["unit_id"]]:return False + for x in (d["state"]["children"]+d["state"]["revoked_history"] if d["kind"]=="SHARE" else d["state"]["active"]+d["state"]["history"] if d["kind"]=="LEASE" else []): + identity=x["child_id"] if d["kind"]=="SHARE" else x["lease_id"] + if identity in owners:return False + owners[identity]="INITIAL" + for f in inputs["initial_state"]["provider_facts"]: + for identity in (f["operation_id"],f["fact_id"]): + if identity in owners:return False + owners[identity]="INITIAL" + for ph,row in apply_pairs(inputs,obs): + e=ph["event"];oid=e["operation_id"];attempt=(vsha(e),claimed_ids(e));old=attempts.get(oid) + if old is not None: + if old!=attempt or row["status"] not in ("REPLAY","RECONCILE_EXPIRED"):return False + continue + attempts[oid]=attempt + if any(x in owners for x in attempt[1]) and row["status"]!="DENY_ADMISSION":return False + for x in attempt[1]:owners.setdefault(x,oid) + events=[e]+([x["event"] for x in e.get("children",[])] if e["operation"]=="COMPOUND" else []);ds={x["dimension_id"]:x for x in row["before"]["dimensions"]};ps={x["plan_id"]:x for x in row["before"]["resource_binding_plans"]} + for z in events: + d=ds.get(z["dimension_id"]);p=ps.get(z["plan_id"]) + if d is None or p is None or z["world_id"] not in {w["world_id"] for w in worlds} or (p["dimension_id"],p["world_id"],p["owner_id"],p["resource_id"],p["commitment_id"])!=(z["dimension_id"],z["world_id"],z["owner_id"],z["resource_id"],z["commitment_id"]):return False + return obs["input_sha256"]==vsha(inputs) and law_hierarchy(inputs,obs) + except Exception:return False +def authority_relation(a,e):return a["verdict"]=="ALLOW" and a["right"]=="USE_BUDGET" and all(a[k]==a["handoff"][k] for k in AUTH_CONTEXT) and (a["actor_id"],a["commitment_id"],a["world_id"])==(e["actor_id"],e["commitment_id"],e["world_id"]) +def law_authority(inputs,obs): + try: + fresh={k:set() for k in ("grant_ref","execution_id","activation_id","validation_id","invocation_nonce","freshness_ref")} + for ph,row in apply_pairs(inputs,obs): + e=ph["event"];pairs=[(ph["authority"],e)]+([(x["authority"],x["event"]) for x in e.get("children",[])] if e.get("operation")=="COMPOUND" else []);invalid=[not authority_relation(a,z) for a,z in pairs] + if row["status"] in ("REPLAY","RECONCILE_EXPIRED"):continue + if any(any(a[k] in fresh[k] for k in fresh) for a,_ in pairs):return False + for a,_ in pairs: + for k in fresh:fresh[k].add(a[k]) + if invalid[0] and row["status"]!="DENY_AUTHORITY":return False + if e.get("operation")=="COMPOUND" and any(invalid[1:]): + records={x["operation_id"]:x for x in row["after"]["retained"]} + for (_,z),bad in zip(pairs[1:],invalid[1:]): + if bad and (z["operation_id"] not in records or records[z["operation_id"]]["outcome"]!="DENY_AUTHORITY"):return False + return True + except Exception:return False +def law_kind(inputs,obs): + try: + for ph,row in apply_pairs(inputs,obs): + e=ph["event"] + if e.get("operation") not in OP_FIELDS:return False + if row["status"] in ("REPLAY","RECONCILE_EXPIRED","DENY_AUTHORITY","DENY_ADMISSION","UNSUPPORTED","BEFORE_COMMIT"):continue + if e["operation"]=="COMPOUND":continue + before={d["dimension_id"]:d for d in row["before"]["dimensions"]};after={d["dimension_id"]:d for d in row["after"]["dimensions"]};d=before.get(e["dimension_id"]) + if d is None:continue + b=d["state"];a=after[e["dimension_id"]]["state"];n=e["amount"];op=e["operation"];k=d["kind"] + if k=="CONSUMABLE" and op in ("RESERVE","ESCROW") and not (a["free"]==b["free"]-n and a["reserved"]==b["reserved"]+n):return False + if k=="CONSUMABLE" and op=="ACQUIRE" and not (a["consumed"]==b["consumed"]+n and a["reserved"]==b["reserved"]-min(n,b["reserved"])):return False + if k=="PEAK" and op=="RESERVE" and a["reserved"]!=b["reserved"]+n:return False + if k=="PEAK" and op=="ACQUIRE" and not (a["reserved"]==b["reserved"]-n and a["current"]==b["current"]+n):return False + if k=="RATE" and op=="RESERVE" and a["reserved"]!=b["reserved"]+n:return False + if k=="RATE" and op=="ACQUIRE" and a["available"]!=b["available"]-n:return False + if k=="LEASE" and op=="LEASE_GRANT" and not any(x["lease_id"]==e["operation_id"] and x["epoch"]==1 for x in a["active"]):return False + if k=="SHARE" and op=="SHARE_ALLOCATE" and not any(x["child_id"]==e["child_id"] and x["allocated"]==n for x in a["children"]):return False + return all(conservation(x["after"]) for x in obs["phases"]) and conservation(obs["final_state"]) + except Exception:return False +def law_hierarchy(inputs,obs): + try: + for row in obs["phases"]: + worlds=row["after"]["worlds"] + if any(not isinstance(w,dict) or set(w)!={"world_id"} or not isinstance(w["world_id"],str) or not w["world_id"] for w in worlds) or len({w["world_id"] for w in worlds})!=len(worlds):return False + ds={d["dimension_id"]:d for d in row["after"]["dimensions"]} + for d in ds.values(): + seen=set();p=d["parent_budget_id"] + if p is not None: + parent=ds.get(p) + if parent is None:return False + rel=(d["kind"],d["unit_id"],parent["kind"],parent["unit_id"]) + cap=lambda z:z["state"]["issued"] if z["kind"]=="CONSUMABLE" else z["state"]["cap"] if z["kind"] in ("PEAK","RATE") else z["state"]["capacity"] + if d["owner_id"]!=parent["owner_id"] or ((d["kind"],d["unit_id"])!=(parent["kind"],parent["unit_id"]) and rel not in PARENT_COMPAT) or cap(d)>cap(parent):return False + while p is not None: + if p not in ds or p in seen:return False + seen.add(p);p=ds[p]["parent_budget_id"] + for parent in ds.values(): + children=[d for d in ds.values() if d["parent_budget_id"]==parent["dimension_id"]];cap=lambda z:z["state"]["issued"] if z["kind"]=="CONSUMABLE" else z["state"]["cap"] if z["kind"] in ("PEAK","RATE") else z["state"]["capacity"] + if sum(cap(d) for d in children)>cap(parent):return False + return True + except Exception:return False +def law_reservation(inputs,obs): + try: + for ph,row in apply_pairs(inputs,obs): + e=ph["event"];op=e.get("operation") + if op not in OP_FIELDS:return False + if op in ("RESERVE","ESCROW") and row["status"]=="APPLIED": + b=next(d for d in row["before"]["dimensions"] if d["dimension_id"]==e["dimension_id"])["state"];a=next(d for d in row["after"]["dimensions"] if d["dimension_id"]==e["dimension_id"])["state"] + if a["reserved"]-b["reserved"]!=e["amount"]:return False + if row["status"] in ("DENY_AUTHORITY","UNSUPPORTED","BEFORE_COMMIT") or (row["status"]=="DENY_ADMISSION" and op not in ("LEASE_USE","LEASE_RENEW","LEASE_REVOKE")): + bd=clone(row["before"]);ad=clone(row["after"]);bd["retained"]=ad["retained"]=[] + if bd["dimensions"]!=ad["dimensions"]:return False + return True + except Exception:return False +def law_cancel(inputs,obs): + try: + for ph,row in apply_pairs(inputs,obs): + if ph["event"].get("operation") not in OP_FIELDS:return False + if ph["event"]["operation"] in ("FAIL","LATE_RESULT","WORLD_DISCARD","DEPENDENCY_ROLLBACK","CANCEL_REQUEST"): + for b,a in zip(row["before"]["dimensions"],row["after"]["dimensions"]): + for key in ("consumed","reserved","free","current","available"): + if key in b["state"] and b["state"][key]!=a["state"][key]:return False + return True + except Exception:return False +def law_provider(inputs,obs): + try: + facts={x["fact_id"]:x for x in inputs["initial_state"]["provider_facts"]};successors={x["prior_fact_id"] for x in facts.values() if x["prior_fact_id"] is not None};ops={x["operation_id"] for x in facts.values()} + for ph,row in apply_pairs(inputs,obs): + e=ph["event"] + if not e["operation"].startswith("PROVIDER_"):continue + stage=e["operation"][9:];prior=e["prior_fact_id"];old=facts.get(prior);legal=stage=="ESTIMATE" and prior is None + if old is not None and old["provider_account_id"]==e["provider_account_id"]: + legal|=old["stage"]=="ESTIMATE" and stage in ("OBSERVED","UNKNOWN");legal|=old["stage"]=="UNKNOWN" and stage=="OBSERVED" and e["amount"]<=old["amount"];legal|=old["stage"]=="OBSERVED" and stage=="SETTLED" and e["amount"]==old["amount"];legal|=old["stage"] in ("SETTLED","CREDIT") and stage=="CREDIT" + legal=legal and e["provider_fact_id"] not in facts and e["operation_id"] not in ops and prior not in successors + if legal and stage=="CREDIT": + x=old;credits=e["amount"] + while x is not None and x["stage"]=="CREDIT":credits+=x["amount"];x=facts.get(x["prior_fact_id"]) + legal=x is not None and x["stage"]=="SETTLED" and credits<=x["amount"] + applied=row["status"] in ("APPLIED","UNKNOWN_RECONCILE") + if applied!=legal:return False + if applied: + f={"amount":e["amount"],"fact_id":e["provider_fact_id"],"operation_id":e["operation_id"],"prior_fact_id":prior,"provider_account_id":e["provider_account_id"],"stage":stage};facts[f["fact_id"]]=f;ops.add(f["operation_id"]) + if prior is not None:successors.add(prior) + if row["after"]["provider_facts"]!=list(facts.values()):return False + return True + except Exception:return False +def law_compound(inputs,obs): + try: + for ph,row in apply_pairs(inputs,obs): + if ph["event"]["operation"]=="COMPOUND": + if row["status"] in ("REPLAY","RECONCILE_EXPIRED"):continue + e=ph["event"] + if any(x["event"]["operation"]=="COMPOUND" for x in e["children"]):return False + ids=[e["operation_id"]]+[x["event"]["operation_id"] for x in e["children"]];records={x["operation_id"]:x for x in row["after"]["retained"] if x["operation_id"] in ids} + if len(records)!=len(ids) or any(records[x["event"]["operation_id"]]["causal_operation_id"]!=e["operation_id"] for x in e["children"]):return False + expected=[] + for child in e["children"]: + ce=child["event"];ca=child["authority"] + if not authority_relation(ca,ce):expected.append("DENY_AUTHORITY") + elif ce.get("operation") not in OP_FIELDS or ce["operation"] in UNSUPPORTED_OPS:expected.append("UNSUPPORTED") + else:expected.append(records[ce["operation_id"]]["outcome"]) + if records[ce["operation_id"]]["claimed_ids"]!=claimed_ids(e):return False + child_outcomes=[records[x["event"]["operation_id"]]["outcome"] for x in e["children"]] + if child_outcomes!=expected:return False + outer="APPLIED" if all(x=="APPLIED" for x in child_outcomes) else "DENY_ADMISSION" + if row["status"]!=outer or records[e["operation_id"]]["outcome"]!=outer or records[e["operation_id"]]["claimed_ids"]!=claimed_ids(e):return False + if outer!="APPLIED": + b=clone(row["before"]);a=clone(row["after"]);b["retained"]=a["retained"]=[] + if b!=a:return False + return True + except Exception:return False +def law_recovery(inputs,obs): + try: + if inputs["initial_state"]["retained"] or inputs["initial_state"]["tombstones"]:return False + seen={} + for ph,row in apply_pairs(inputs,obs): + e=ph["event"];prior=seen.get(e["operation_id"]) + if prior and prior!=vsha(e) and row["status"]!="DENY_ADMISSION":return False + seen.setdefault(e["operation_id"],vsha(e));new=[x for x in row["after"]["retained"] if x not in row["before"]["retained"]] + for x in new: + target=e if x["operation_id"]==e["operation_id"] else next((c["event"] for c in e.get("children",[]) if c["event"]["operation_id"]==x["operation_id"]),None) + if target is None or x["binding_sha256"]!=vsha(target) or x["attempted_at"]!=ph["logical_now"] or x["expires_at"]!=ph["logical_now"]+20 or x["claimed_ids"]!=claimed_ids(e):return False + causal=e["operation_id"] + expected=row["status"] if target is e else ("DENY_AUTHORITY" if not authority_relation(next(c["authority"] for c in e["children"] if c["event"] is target),target) else x["outcome"]) + if x["causal_operation_id"]!=causal or x["outcome"]!=expected:return False + for x in row["after"]["retained"]: + if x["attempted_at"]>x["expires_at"] or x["outcome"] not in STATUSES+("BEFORE_COMMIT",):return False + for x in row["after"]["tombstones"]: + old=next((z for z in row["before"]["retained"] if z["operation_id"]==x["operation_id"]),None) + if x["retired_at"]>ph["logical_now"] or (x not in row["before"]["tombstones"] and (old is None or x["binding_sha256"]!=old["binding_sha256"] or x["outcome"]!=old["outcome"] or x["causal_operation_id"]!=e["operation_id"] or x["retired_at"]!=ph["logical_now"])):return False + return True + except Exception:return False +def law_attribution(inputs,obs): + try: + for ph,row in apply_pairs(inputs,obs): + pairs=[(ph["authority"],ph["event"])]+([(x["authority"],x["event"]) for x in ph["event"].get("children",[])] if ph["event"].get("operation")=="COMPOUND" else []) + plans={p["plan_id"]:p for p in row["before"]["resource_binding_plans"]};dims={d["dimension_id"]:d for d in row["before"]["dimensions"]};worlds={w["world_id"] for w in row["before"]["worlds"]};after_dims={d["dimension_id"] for d in row["after"]["dimensions"]};after_worlds={w["world_id"] for w in row["after"]["worlds"]} + if any(p["dimension_id"] not in after_dims or p["world_id"] not in after_worlds for p in row["after"]["resource_binding_plans"]):return False + for a,e in pairs: + p=plans.get(e["plan_id"]);d=dims.get(e["dimension_id"]) + actor_ok=e["actor_id"]==a["actor_id"]==a["handoff"]["actor_id"];actor_denied=any(r["operation_id"]==e["operation_id"] and r["outcome"]=="DENY_AUTHORITY" and r["binding_sha256"]==vsha(e) for r in row["after"]["retained"]) + if p is None or d is None or e["world_id"] not in worlds or (not actor_ok and not actor_denied) or (p["dimension_id"],p["world_id"],p["owner_id"],p["resource_id"],p["commitment_id"])!=(e["dimension_id"],e["world_id"],e["owner_id"],e["resource_id"],e["commitment_id"]):return False + return True + except Exception:return False +def law_separation(inputs,obs): + try: + for ph,row in apply_pairs(inputs,obs): + e=ph["event"] + if e.get("operation") not in OP_FIELDS:return False + if e["operation"] in UNSUPPORTED_OPS and row["status"]!="UNSUPPORTED":return False + return True + except Exception:return False +def law_canonical(inputs,obs): + try:return canonical(parse_bytes(canonical(obs)))==canonical(obs) and obs["input_sha256"]==vsha(inputs) + except Exception:return False +LAW_HELPERS=(law_whole,law_typed,law_authority,law_kind,law_hierarchy,law_reservation,law_cancel,law_provider,law_compound,law_recovery,law_attribution,law_separation,law_canonical) +def law_results(inputs,obs):return {name:helper(inputs,obs) for name,helper in zip(LAWS,LAW_HELPERS)} + +def semantic_cases(m): + for c in m["cases"]:yield c,c["inputs"] +def stage_b_semantic_projection(m): + rows=[] + for c,inp in semantic_cases(m): + row={"case_id":c["id"],"input_sha256":vsha(inp)} + try:o=derive(inp);row.update({"classification":"ACCEPTED_LAWS_PASS","laws":law_results(inp,o),"observation":o}) + except ManifestError: + try:oracle_observation(inp) + except ManifestError:row["classification"]="STRUCTURAL_REJECT_PASS" + else:raise + rows.append(row) + return rows +def semantic_body(m,mraw): + cells=[];assertions=[] + for c,inp in semantic_cases(m): + try: + o=derive(inp);laws=law_results(inp,o) + if not all(laws.values()):raise ManifestError("accepted false law") + cell={"case_id":c["id"],"input_sha256":vsha(inp),"observation":o};assertion={"case_id":c["id"],"classification":"ACCEPTED_LAWS_PASS","laws":laws,"pass":True} + except ManifestError: + try:oracle_observation(inp) + except ManifestError:cell={"case_id":c["id"],"input_sha256":vsha(inp),"rejection":"PRIMARY_AND_ORACLE_REJECT"};assertion={"case_id":c["id"],"classification":"STRUCTURAL_REJECT_PASS","laws":None,"pass":True} + else:raise + cells.append(cell);assertions.append(assertion) + return {"assertions":assertions,"cells":cells,"manifest_sha256":sha(mraw)} +def o_semantic_body_projection(m,mraw): + body=semantic_body(m,mraw);body["manifest_sha256"]="@MANIFEST_SHA256@";return body +def reference_o(m,mraw):return {"provenance_qualified":False,"schema":"D008-O-STAGE-A-1","semantic_body":semantic_body(m,mraw)} +def validate_o_value(o,m,mraw): + exact(o,{"provenance_qualified","schema","semantic_body"},"O") + if o["schema"]!="D008-O-STAGE-A-1" or o["provenance_qualified"] is not False or canonical(o["semantic_body"])!=canonical(semantic_body(m,mraw)):raise ManifestError("O mismatch") + return o + +@public +def validate_manifest_bytes(raw): + m=parse_bytes(raw) + if canonical(manifest_spec())!=raw:raise ManifestError("manifest generator mismatch") + if m["schema"]!="D008-BUDGET-MANIFEST-3" or m["python_grammar"]!=PYTHON_GRAMMAR or m["semantic_stage"]!="B_PASS" or m["provenance_qualified"] is not False or m["decision"]!={"frozen":False,"id":"D-008","status":"OPEN"}:raise ManifestError("manifest v3 header") + expected_locks=manifest_spec()["semantic_locks"] + if m["semantic_locks"]!=expected_locks:raise ManifestError("semantic lock descriptors") + stage_b_raw=canonical(stage_b_semantic_projection(m));o_body_raw=canonical(o_semantic_body_projection(m,raw)) + if (len(stage_b_raw),sha(stage_b_raw))!=(expected_locks["stage_b_semantic_projection"]["byte_length"],expected_locks["stage_b_semantic_projection"]["sha256"]) or (len(o_body_raw),sha(o_body_raw))!=(expected_locks["o_semantic_body"]["byte_length"],expected_locks["o_semantic_body"]["sha256"]):raise ManifestError("semantic lock regeneration") + if m["provenance"]["artifact_basename"]!="d008-budget-manifest-v1.json" or m["provenance"]["stage"]!="C_PREREGISTRATION" or m["provenance"]["status"]!="NO_ROOT_OR_EVIDENCE_YET":raise ManifestError("provenance prereg") + validate_evidence_dag(m["provenance"]["dag"]) + if any(k in m for k in ("evidence","freeze","resolution","adoption")):raise ManifestError("actual evidence in prereg") + cells=m["b8"]["matrix"] + if len(cells)!=204 or {(x["quantity"],x["law"]) for x in cells}!={(q,l) for q in Q for l in B8} or len({x["reason"] for x in cells})!=204:raise ManifestError("B8 closure/unique reasons") + if any(x["classification"] not in ("APPLICABLE","N_A") or (x["classification"] not in x["reason"]) or "constrains its typed accounting observation" in x["reason"] for x in cells):raise ManifestError("B8 semantic reason") + for c,inp in semantic_cases(m): + if FORBIDDEN_INPUT_KEYS&set(c):raise ManifestError("trusted case flag") + try: + o=derive(inp);w=oracle_observation(inp) + if o!=w or not all(law_results(inp,o).values()):raise ManifestError("law failure "+c["id"]) + except ManifestError: + try:oracle_observation(inp) + except ManifestError:continue + raise + body=semantic_body(m,raw);accepted=[x for x in body["assertions"] if x["classification"]=="ACCEPTED_LAWS_PASS"];rejected=[x for x in body["assertions"] if x["classification"]=="STRUCTURAL_REJECT_PASS"] + if len(accepted)+len(rejected)!=len(m["cases"]) or any(x["laws"] is None or not all(x["laws"].values()) or x["pass"] is not True for x in accepted) or any(x["laws"] is not None or x["pass"] is not True for x in rejected):raise ManifestError("structural reporting") + return m,{"b8_cell_count":204,"family_count":len({c["family"] for c in m["cases"]}),"law_count":len(LAWS),"projection_count":6,"raw_subcase_count":len(m["cases"]),"structural_reject_count":len(rejected)} + +@public +def validate_artifacts(manifest_raw,packet_raw,validator_source): + verify_prereg(packet_raw,validator_source) + return validate_manifest_bytes(manifest_raw) + +# Stage C v3 future provenance contract. No actual artifact is shipped by this file. +STAGE_C_PATHS=("decisions/D-008-PACKET.md","decisions/d008-budget-manifest-v1.json","decisions/d008_manifest.py","decisions/test_d008_manifest.py") +PRODUCER_ROLES=("EXECUTOR","CHECKER");REVIEWER_ROLES=("RX","RC","RV","RP") +SAFE_IMPORTS={"json":{"loads","dumps"},"hashlib":{"sha256"},"unicodedata":{"normalize"}} +SAFE_BUILTINS={"ValueError","all","any","bool","dict","enumerate","int","isinstance","len","list","max","min","next","ord","range","reversed","set","sorted","str","sum","tuple","zip"} +SAFE_ATTRS={"add","append","copy","decode","encode","get","hexdigest","items","join","keys","pop","remove","removeprefix","replace","reverse","setdefault","sort","split","startswith","strip","update","values"} +FORBIDDEN_NAMES={"open","input","breakpoint","print","help","dir","type","object","exec","eval","compile","__import__","getattr","setattr","delattr","globals","locals","vars","__builtins__","__loader__","__spec__","stdin","stdout","stderr"} +def inventory(mp):return [{"byte_length":len(b),"path":p,"sha256":sha(b)} for p,b in sorted(mp.items())] +def safe_path(p): + text(p,"path");q=PurePosixPath(p) + if p.startswith("/") or "\\" in p or str(q)!=p or any(x in ("",".","..") for x in p.split("/")):raise ManifestError("path") +def git_oid(kind,data):return hashlib.sha1((kind+" "+str(len(data))+"\0").encode()+data).hexdigest() +def git_tree_data(entries): + return b"".join((mode+" "+name+"\0").encode()+bytes.fromhex(oid) for mode,name,oid in entries) +def git_commit_data(tree,message):return ("tree "+tree+"\nauthor TEST_ONLY 0 +0000\ncommitter TEST_ONLY 0 +0000\n\n"+message+"\n").encode() +def git_bundle(path_map,message): + objects={};nodes={} + for path,data in sorted(path_map.items()): + safe_path(path);parts=path.split("/");node=nodes + for part in parts[:-1]:node=node.setdefault(part,{}) + if parts[-1] in node:raise ManifestError("duplicate bundle path") + oid=git_oid("blob",data);objects[oid]={"data_b64":base64.b64encode(data).decode(),"kind":"blob"};node[parts[-1]]=(oid,data) + def emit(node): + entries=[] + for name,value in node.items(): + if isinstance(value,dict):oid=emit(value);entries.append(("40000",name,oid)) + else:entries.append(("100644",name,value[0])) + entries.sort(key=lambda x:(x[1]+("/" if x[0]=="40000" else "")).encode()) + data=git_tree_data(entries);oid=git_oid("tree",data);objects[oid]={"data_b64":base64.b64encode(data).decode(),"kind":"tree"};return oid + tree=emit(nodes);commit_data=git_commit_data(tree,message);commit=git_oid("commit",commit_data);objects[commit]={"data_b64":base64.b64encode(commit_data).decode(),"kind":"commit"};return {"commit_oid":commit,"objects":objects,"tree_oid":tree} +def _decode_git_objects(objects): + if not isinstance(objects,dict) or not objects:raise ManifestError("objects") + decoded={} + for oid,o in objects.items(): + if not isinstance(oid,str) or len(oid)!=40 or any(c not in "0123456789abcdef" for c in oid):raise ManifestError("object oid") + exact(o,{"data_b64","kind"},"object");kind=o["kind"] + if kind not in ("blob","tree","commit"):raise ManifestError("object kind") + try:data=base64.b64decode(o["data_b64"],validate=True) + except Exception as e:raise ManifestError("object base64") from e + if git_oid(kind,data)!=oid:raise ManifestError("object oid") + decoded[oid]=(kind,data) + return decoded +def _parse_tree(data): + entries=[];pos=0;last=None + while poslen(data):raise ManifestError("tree encoding") + try:mode=data[pos:sp].decode("ascii");name=data[sp+1:nul].decode("utf-8","strict") + except UnicodeError as e:raise ManifestError("tree text") from e + oid=data[nul+1:nul+21].hex();pos=nul+21 + if mode not in ("100644","40000") or not name or "/" in name or "\0" in name or name in (".",".."):raise ManifestError("tree entry") + key=(name+("/" if mode=="40000" else "")).encode() + if last is not None and key<=last:raise ManifestError("tree order/duplicate") + last=key;entries.append((mode,name,oid)) + if pos!=len(data):raise ManifestError("tree trailing") + return entries +def _parse_commit(data,tree_oid): + try:text_data=data.decode("utf-8","strict") + except UnicodeError as e:raise ManifestError("commit utf8") from e + if "\0" in text_data or "\r" in text_data or "\n\n" not in text_data:raise ManifestError("commit framing") + head,message=text_data.split("\n\n",1);lines=head.split("\n") + if len(lines)!=3 or lines[0]!="tree "+tree_oid or not message or not message.endswith("\n") or "\n\n" in head:raise ManifestError("commit headers") + for label,line in (("author",lines[1]),("committer",lines[2])): + prefix=label+" TEST_ONLY ";suffix=line.removeprefix(prefix) + if suffix==line or suffix!="0 +0000":raise ManifestError("commit identity/time") + return message +def validate_git_bundle(bundle,path_map,message): + exact(bundle,{"commit_oid","objects","tree_oid"},"git bundle");decoded=_decode_git_objects(bundle["objects"]) + if bundle["tree_oid"] not in decoded or decoded[bundle["tree_oid"]][0]!="tree" or bundle["commit_oid"] not in decoded or decoded[bundle["commit_oid"]][0]!="commit":raise ManifestError("bundle roots") + if _parse_commit(decoded[bundle["commit_oid"]][1],bundle["tree_oid"])!=message+"\n":raise ManifestError("commit message") + reached={bundle["commit_oid"]};leaves={} + def visit(oid,prefix): + if oid not in decoded or decoded[oid][0]!="tree":raise ManifestError("tree object") + reached.add(oid) + for mode,name,child in _parse_tree(decoded[oid][1]): + if child not in decoded:raise ManifestError("missing object") + path=prefix+name + if mode=="40000": + if decoded[child][0]!="tree":raise ManifestError("tree type") + visit(child,path+"/") + else: + if decoded[child][0]!="blob":raise ManifestError("blob type") + reached.add(child);leaves[path]=decoded[child][1] + visit(bundle["tree_oid"],"") + if leaves!=path_map or reached!=set(decoded):raise ManifestError("bundle reachability/content") + return bundle +def validate_prereg_root(raw,byte_map): + x=parse_bytes(raw);exact(x,{"commit_oid","label","objects","paths","schema","tree_oid"},"root") + if x["schema"]!="D008-PREREG-ROOT-3" or x["label"] not in ("CANONICAL_POST_COMMIT","TEST_ONLY_NON_EVIDENCE") or set(byte_map)!=set(STAGE_C_PATHS):raise ManifestError("root header") + for p,b in byte_map.items():safe_path(p);isinstance(b,bytes) or (_ for _ in ()).throw(ManifestError("root bytes")) + expected_paths={p:git_oid("blob",b) for p,b in byte_map.items()} + if x["paths"]!=expected_paths:raise ManifestError("root paths") + validate_git_bundle({"commit_oid":x["commit_oid"],"objects":x["objects"],"tree_oid":x["tree_oid"]},byte_map,"D008 synthetic witness" if x["label"]=="TEST_ONLY_NON_EVIDENCE" else "D008 canonical post-commit root") + return x +def normalized_ast(raw): + try:return ast.dump(ast.parse(raw.decode("utf-8","strict")),annotate_fields=True,include_attributes=False) + except (UnicodeError,SyntaxError) as e:raise ManifestError("AST") from e +def _target_names(n): + if isinstance(n,ast.Name):return {n.id} + if isinstance(n,(ast.Tuple,ast.List)): + out=set() + for x in n.elts:out|=_target_names(x) + return out + return set() +def _all_args(a):return list(a.posonlyargs)+list(a.args)+list(a.kwonlyargs)+([a.vararg] if a.vararg else [])+([a.kwarg] if a.kwarg else []) +def _binding_names(n): + out=set() + if isinstance(n,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)):out.add(n.name) + if isinstance(n,(ast.FunctionDef,ast.AsyncFunctionDef,ast.Lambda)):out|={a.arg for a in _all_args(n.args)} + if isinstance(n,(ast.Import,ast.ImportFrom)): + for a in n.names:out.add(a.asname or a.name.split(".")[0]) + if isinstance(n,(ast.Assign,ast.Delete)): + for t in n.targets:out|=_target_names(t) + if isinstance(n,(ast.AnnAssign,ast.AugAssign,ast.NamedExpr,ast.For,ast.AsyncFor,ast.comprehension)):out|=_target_names(n.target) + if isinstance(n,(ast.Global,ast.Nonlocal)):out|=set(n.names) + return out +def scan_source(raw): + try:t=ast.parse(raw.decode("utf-8","strict")) + except (UnicodeError,SyntaxError) as e:raise ManifestError("AST") from e + aliases={};funcs={n.name for n in ast.walk(t) if isinstance(n,ast.FunctionDef)};produces=[n for n in t.body if isinstance(n,ast.FunctionDef) and n.name=="produce"] + if len(produces)!=1:raise ManifestError("exact produce") + p=produces[0];a=p.args + if [x.arg for x in a.args] != ["packet_bytes","manifest_bytes","identity_bytes"] or a.posonlyargs or a.defaults or a.kw_defaults or a.vararg or a.kwarg or a.kwonlyargs or p.decorator_list:raise ManifestError("produce signature") + for n in t.body: + if isinstance(n,ast.Import): + for z in n.names: + if z.name not in SAFE_IMPORTS:raise ManifestError("import") + aliases[z.asname or z.name]=z.name + elif isinstance(n,ast.ImportFrom):raise ManifestError("import from") + elif isinstance(n,ast.Assign): + if len(n.targets)!=1 or not isinstance(n.targets[0],ast.Name) or not n.targets[0].id.isupper() or not isinstance(n.value,(ast.Constant,ast.Tuple,ast.List,ast.Set,ast.Dict)):raise ManifestError("module constant") + elif not isinstance(n,(ast.Import,ast.FunctionDef)):raise ManifestError("module mutation") + for n in ast.walk(t): + if "produce" in _binding_names(n) and n is not p:raise ManifestError("produce binding") + if isinstance(n,ast.FunctionDef) and n.decorator_list:raise ManifestError("decorator") + if isinstance(n,(ast.Global,ast.Nonlocal,ast.Delete,ast.NamedExpr,ast.AsyncFunctionDef,ast.ClassDef,ast.Lambda,ast.With,ast.AsyncWith,ast.Yield,ast.YieldFrom,ast.Await)):raise ManifestError("unsafe syntax") + if isinstance(n,ast.Raise): + if n.cause is not None or not isinstance(n.exc,ast.Call) or not isinstance(n.exc.func,ast.Name) or n.exc.func.id!="ValueError" or len(n.exc.args)!=1 or not isinstance(n.exc.args[0],ast.Constant) or not isinstance(n.exc.args[0].value,str) or n.exc.keywords:raise ManifestError("unsafe raise") + if isinstance(n,ast.Try): + if n.orelse or n.finalbody or not n.handlers or any(h.type is None or not isinstance(h.type,ast.Name) or h.type.id!="ValueError" or h.name for h in n.handlers):raise ManifestError("unsafe try") + if isinstance(n,(ast.Assign,ast.AnnAssign,ast.AugAssign)): + targets=n.targets if isinstance(n,ast.Assign) else [n.target] + if any(isinstance(z,ast.Attribute) for z in targets):raise ManifestError("attribute store") + if isinstance(n,ast.Name) and n.id in FORBIDDEN_NAMES:raise ManifestError("forbidden name") + if isinstance(n,ast.Attribute): + root=n.value;depth=1 + while isinstance(root,ast.Attribute):depth+=1;root=root.value + if n.attr.startswith("__") or (isinstance(root,ast.Name) and root.id in aliases and (depth!=1 or n.attr not in SAFE_IMPORTS[aliases[root.id]])) or (not (isinstance(root,ast.Name) and root.id in aliases) and n.attr not in SAFE_ATTRS):raise ManifestError("attribute") + if isinstance(n,ast.Call): + f=n.func + if isinstance(f,ast.Name): + if f.id not in funcs|SAFE_BUILTINS:raise ManifestError("call") + elif isinstance(f,ast.Attribute): + root=f.value + while isinstance(root,ast.Attribute):root=root.value + if isinstance(root,ast.Name) and root.id in aliases: + if not isinstance(f.value,ast.Name) or f.attr not in SAFE_IMPORTS[aliases[root.id]]:raise ManifestError("module call") + elif f.attr not in SAFE_ATTRS:raise ManifestError("method call") + else:raise ManifestError("indirect call") + return normalized_ast(raw) +def source_checkpoint_bundle(source_path,source_bytes): + bundle=git_bundle({source_path:source_bytes},"source checkpoint");return {"commit_oid":bundle["commit_oid"],"objects":bundle["objects"],"path":source_path,"tree_oid":bundle["tree_oid"]} +def validate_source_checkpoint(x,path,source): + exact(x,{"commit_oid","objects","path","tree_oid"},"source checkpoint") + if x["path"]!=path:raise ManifestError("source checkpoint path") + validate_git_bundle({"commit_oid":x["commit_oid"],"objects":x["objects"],"tree_oid":x["tree_oid"]},{path:source},"source checkpoint") +def validate_identity(raw,role,sources,deps,locks,root_raw,root_files): + if role not in PRODUCER_ROLES or deps!={} or len(sources)!=1:raise ManifestError("identity closure") + path=next(iter(sources));source=sources[path];expected_path="future/d008_"+role.lower()+"_v3/producer.py" + if path!=expected_path or set(locks)!={STAGE_C_PATHS[0],STAGE_C_PATHS[1]} or locks[STAGE_C_PATHS[0]]!=root_files[STAGE_C_PATHS[0]] or locks[STAGE_C_PATHS[1]]!=root_files[STAGE_C_PATHS[1]]:raise ManifestError("identity paths") + scan_source(source);root=validate_prereg_root(root_raw,root_files);x=parse_bytes(raw);exact(x,{"dependencies","locks","prereg_root","role","schema","source_checkpoint","sources"},"identity") + validate_source_checkpoint(x["source_checkpoint"],path,source);expected={"dependencies":[],"locks":inventory(locks),"prereg_root":art("PREREG_ROOT",root_raw),"role":role,"schema":"D008-IDENTITY-3","source_checkpoint":x["source_checkpoint"],"sources":inventory(sources)} + if x!=expected:raise ManifestError("identity") + return x +def execute_producer(source,packet,manifest,identity): + scan_source(source) + runner=b"import base64,sys,json,hashlib,unicodedata\nns={}\nexec(compile(base64.b64decode(sys.stdin.buffer.readline()),'','exec'),ns,ns)\na=[base64.b64decode(sys.stdin.buffer.readline()) for _ in range(3)]\nr=ns['produce'](*a)\nif not isinstance(r,bytes): raise TypeError('bytes')\nsys.stdout.write(base64.b64encode(r).decode())\n" + payload=b"\n".join(base64.b64encode(x) for x in (source,packet,manifest,identity))+b"\n" + try:p=subprocess.run([sys.executable,"-I","-S","-c",runner.decode()],input=payload,capture_output=True,timeout=30,check=True) + except Exception as e:raise ManifestError("restricted execution") from e + try:return base64.b64decode(p.stdout,validate=True) + except Exception as e:raise ManifestError("producer output") from e +REVIEW_CAPS={"RX":["EXECUTOR_SOURCE_REVIEW"],"RC":["CHECKER_SOURCE_REVIEW"],"RV":["SEMANTIC_EVALUATION_REVIEW"],"RP":["PRE_FREEZE_SIGNOFF"]} +REVIEW_GATES={"RX":"EXECUTOR_INDEPENDENT_REVIEW","RC":"CHECKER_INDEPENDENT_REVIEW","RV":"EVALUATOR_REVIEW","RP":"PRE_FREEZE_SIGNOFF"} +REVIEW_CHECKS={"RX":["SOURCE_BYTES_DISTINCT","NORMALIZED_AST_DISTINCT","NO_SEMANTIC_COPY"],"RC":["SOURCE_BYTES_DISTINCT","NORMALIZED_AST_DISTINCT","NO_SEMANTIC_COPY"],"RV":["SEMANTIC_PROJECTION_LOCK","ALL_LAWS_PASS","STRUCTURAL_REJECT_COUNT"],"RP":["ZERO_UNRESOLVED_CRITICAL_HIGH","EXACT_FREEZE_SUBJECT","DAG_COMPLETE"]} +def validate_reviewer_identity(raw,role,source_map,root_raw,root_files): + if role not in REVIEWER_ROLES or len(source_map)!=1:raise ManifestError("reviewer role") + path=next(iter(source_map));source=source_map[path] + if path!="future/d008_reviewer_"+role.lower()+"_v3/reviewer.txt":raise ManifestError("reviewer path") + source.decode("utf-8","strict");validate_prereg_root(root_raw,root_files);x=parse_bytes(raw);exact(x,{"capabilities","prereg_root","role","schema","source_checkpoint","sources"},"reviewer identity");validate_source_checkpoint(x["source_checkpoint"],path,source) + expected={"capabilities":REVIEW_CAPS[role],"prereg_root":art("PREREG_ROOT",root_raw),"role":role,"schema":"D008-REVIEWER-IDENTITY-3","source_checkpoint":x["source_checkpoint"],"sources":inventory(source_map)} + if x!=expected:raise ManifestError("reviewer identity") + return x +def validate_findings(xs): + if not isinstance(xs,list) or not xs:raise ManifestError("findings") + for x in xs: + exact(x,{"finding_id","resolved","severity","text"},"finding");text(x["finding_id"],"finding id");text(x["text"],"finding text") + if x["severity"] not in ("CRITICAL","HIGH","MEDIUM","LOW","INFO") or not isinstance(x["resolved"],bool):raise ManifestError("finding severity") + if any(not x["resolved"] and x["severity"] in ("CRITICAL","HIGH") for x in xs):raise ManifestError("unresolved critical/high") +def validate_review(raw,role,identity_raw,source_map,root_raw,root_files,subject): + ident=validate_reviewer_identity(identity_raw,role,source_map,root_raw,root_files);x=parse_bytes(raw);exact(x,{"checks","findings","gate","reviewer_identity","role","schema","subject","verdict"},"review");validate_findings(x["findings"]) + expected={"checks":REVIEW_CHECKS[role],"findings":x["findings"],"gate":REVIEW_GATES[role],"reviewer_identity":art("REVIEWER_IDENTITY",identity_raw),"role":role,"schema":"D008-REVIEW-3","subject":subject,"verdict":"PASS"} + if x!=expected:raise ManifestError("review") + return x,ident +def validate_evidence_dag(dag): + exact(dag,{"edges","nodes","roots"},"dag");nodes=index(dag["nodes"],"id","dag node");edges=set() + for n in dag["nodes"]:exact(n,{"id","kind"},"dag node");text(n["kind"],"dag kind") + for e in dag["edges"]: + exact(e,{"from","to"},"edge");a=e["from"];b=e["to"] + if a not in nodes or b not in nodes or a==b or (a,b) in edges:raise ManifestError("dag edge") + edges.add((a,b)) + roots=[x for x in nodes if not any(a==x for a,_ in edges)] + if sorted(roots)!=sorted(dag["roots"]):raise ManifestError("dag roots") + visiting=set();done=set() + def visit(x): + if x in visiting:raise ManifestError("dag cycle") + if x in done:return + visiting.add(x) + for a,b in edges: + if a==x:visit(b) + visiting.remove(x);done.add(x) + for x in nodes:visit(x) + required={(e["from"],e["to"]) for e in evidence_dag_spec()["edges"]} + if set(nodes)!= {n["id"] for n in evidence_dag_spec()["nodes"]} or edges!=required:raise ManifestError("dag required edges") + return dag +def semantic_o_value(m,mraw,identity_raw): + return {"identity":art("PRODUCER_IDENTITY",identity_raw),"provenance_qualified":True,"schema":"D008-O-3","semantic_body":semantic_body(m,mraw)} +def validate_o3(raw,m,mraw,identity_raw): + x=parse_bytes(raw) + if x!=semantic_o_value(m,mraw,identity_raw):raise ManifestError("O3") + return x +def producer_subject(role,identity_raw):return {"identity":art(role+"_IDENTITY",identity_raw),"role":role} +def evaluator_subject(root_raw,mraw,praw,vsrc):return {"manifest":art("MANIFEST",mraw),"packet":art("PACKET",praw),"prereg_root":art("PREREG_ROOT",root_raw),"validator":art("VALIDATOR",vsrc)} +def validate_ir(iraw,producer_ids,reviews,reviewer_ids,reviewer_sources,root_raw,root_files,mraw,praw,vsrc): + subjects={"RX":producer_subject("EXECUTOR",producer_ids["EXECUTOR"]),"RC":producer_subject("CHECKER",producer_ids["CHECKER"]),"RV":evaluator_subject(root_raw,mraw,praw,vsrc)};parsed={} + for role in ("RX","RC","RV"):parsed[role]=validate_review(reviews[role],role,reviewer_ids[role],reviewer_sources[role],root_raw,root_files,subjects[role])[0] + if len(set(reviewer_ids.values()))!=4 or any(reviewer_ids[x] in producer_ids.values() for x in reviewer_ids):raise ManifestError("producer reviewer separation") + expected={"checks":{"manual_semantic_copy_checks_pass":True,"normalized_ast_distinct":True,"source_bytes_distinct":True},"producer_identities":{"CHECKER":art("CHECKER_IDENTITY",producer_ids["CHECKER"]),"EXECUTOR":art("EXECUTOR_IDENTITY",producer_ids["EXECUTOR"])},"reviewer_identities":{r:art(r+"_IDENTITY",reviewer_ids[r]) for r in ("RX","RC","RV")},"reviews":{r:art(r+"_REVIEW",reviews[r]) for r in ("RX","RC","RV")},"schema":"D008-IR-3","subjects":subjects} + x=parse_bytes(iraw) + if x!=expected:raise ManifestError("IR") + return x +def prefreeze_subject(root_raw,iraw,mraw,praw,vsrc,producer_ids,reviewer_ids):return {"independence_report":art("IR",iraw),"manifest":art("MANIFEST",mraw),"packet":art("PACKET",praw),"prereg_root":art("PREREG_ROOT",root_raw),"producer_identities":{k:art(k+"_IDENTITY",v) for k,v in sorted(producer_ids.items())},"reviewer_identities":{k:art(k+"_IDENTITY",v) for k,v in sorted(reviewer_ids.items())},"validator":art("VALIDATOR",vsrc)} +def validate_pf(pfraw,rpraw,rpid,rpsource,root_raw,root_files,subject): + validate_review(rpraw,"RP",rpid,rpsource,root_raw,root_files,subject);x=parse_bytes(pfraw);expected={"pre_freeze_review":art("RP_REVIEW",rpraw),"reviewer_identity":art("RP_IDENTITY",rpid),"schema":"D008-PF-3","subject":subject} + if x!=expected:raise ManifestError("PF") + return x +def validate_freeze(fraw,pfraw,iraw,root_raw,mraw,praw,vsrc,producer_ids,reviewer_ids): + subject=prefreeze_subject(root_raw,iraw,mraw,praw,vsrc,producer_ids,reviewer_ids);x=parse_bytes(fraw);expected={"independence_report":art("IR",iraw),"pre_freeze":art("PF",pfraw),"prereg_root":art("PREREG_ROOT",root_raw),"schema":"D008-FREEZE-3","subject":subject} + if x!=expected:raise ManifestError("freeze") + return x +def semantic_o_bytes(raw): + x=parse_bytes(raw);return canonical({"provenance_qualified":x["provenance_qualified"],"schema":x["schema"],"semantic_body":x["semantic_body"]}) +def validate_v(vraw,fraw,iraw,pfraw,root_raw,root_files,mraw,praw,vsrc,producer_bundles,o1,o2): + m,_=validate_artifacts(mraw,praw,vsrc) + if not isinstance(producer_bundles,dict) or set(producer_bundles)!=set(PRODUCER_ROLES)|{"reviewer_ids","reviews","reviewer_sources"}:raise ManifestError("producer bundle envelope") + ids={};produced={};asts=[];source_bytes=[] + for role in PRODUCER_ROLES: + b=producer_bundles[role] + if not isinstance(b,dict) or set(b)!={"dependencies","identity_raw","locks","sources"}:raise ManifestError("producer bundle") + ids[role]=validate_identity(b["identity_raw"],role,b["sources"],b["dependencies"],b["locks"],root_raw,root_files);src=next(iter(b["sources"].values()));source_bytes.append(src);asts.append(scan_source(src));produced[role]=execute_producer(src,praw,mraw,b["identity_raw"]) + if source_bytes[0]==source_bytes[1] or asts[0]==asts[1]:raise ManifestError("producer independence") + expected_raw={"EXECUTOR":o1,"CHECKER":o2} + for role in PRODUCER_ROLES: + if produced[role]!=expected_raw[role]:raise ManifestError("raw O mismatch") + validate_o3(expected_raw[role],m,mraw,producer_bundles[role]["identity_raw"]) + producer_ids={r:producer_bundles[r]["identity_raw"] for r in PRODUCER_ROLES};reviewer_ids=producer_bundles["reviewer_ids"];reviews=producer_bundles["reviews"];reviewer_sources=producer_bundles["reviewer_sources"] + validate_ir(iraw,producer_ids,reviews,reviewer_ids,reviewer_sources,root_raw,root_files,mraw,praw,vsrc);subject=prefreeze_subject(root_raw,iraw,mraw,praw,vsrc,producer_ids,reviewer_ids);validate_pf(pfraw,reviews["RP"],reviewer_ids["RP"],reviewer_sources["RP"],root_raw,root_files,subject);validate_freeze(fraw,pfraw,iraw,root_raw,mraw,praw,vsrc,producer_ids,reviewer_ids) + equal=semantic_o_bytes(o1)==semantic_o_bytes(o2);x=parse_bytes(vraw);expected={"all_laws_pass":True,"freeze":art("FREEZE",fraw),"independence_report":art("IR",iraw),"o1":art("O1",o1),"o2":art("O2",o2),"o_semantics_equal":equal,"producers_executed":True,"schema":"D008-V-3","valid":equal} + if x!=expected or not equal:raise ManifestError("V") + return x +def validate_e(eraw,vraw,fraw,pfraw,iraw,root_raw,root_files,mraw,praw,vsrc,producer_bundles,o1,o2,dag,manual_raw): + v=validate_v(vraw,fraw,iraw,pfraw,root_raw,root_files,mraw,praw,vsrc,producer_bundles,o1,o2);validate_evidence_dag(dag);manual=parse_bytes(manual_raw);sources={r:next(iter(producer_bundles[r]["sources"].values())) for r in PRODUCER_ROLES};expected_manual={"checks":[{"answer_literals_absent":True,"completed":True,"reviewer_role":"RX","source":art("EXECUTOR_SOURCE",sources["EXECUTOR"])},{"answer_literals_absent":True,"completed":True,"reviewer_role":"RC","source":art("CHECKER_SOURCE",sources["CHECKER"])}],"schema":"D008-MANUAL-COPY-FACTS-3"} + if manual!=expected_manual:raise ManifestError("manual copy facts") + x=parse_bytes(eraw);expected={"dag":dag,"freeze":art("FREEZE",fraw),"independence_report":art("IR",iraw),"manual_copy_facts":art("MANUAL_COPY_FACTS",manual_raw),"o1":art("O1",o1),"o2":art("O2",o2),"pre_freeze":art("PF",pfraw),"schema":"D008-E-3","v":art("V",vraw),"verdict":"ADOPT_ALGEBRA" if v["valid"] else "OPEN"} + if x!=expected:raise ManifestError("E") + return x +def future_verdict(*args): + if len(args)!=15:return "OPEN" + try:return validate_e(*args)["verdict"] + except Exception:return "OPEN" + +def main(argv=None): + ap=argparse.ArgumentParser();ap.add_argument("manifest",nargs="?");ap.add_argument("--generate",action="store_true");a=ap.parse_args(argv) + if a.generate:sys.stdout.buffer.write(canonical(manifest_spec()));return 0 + if not a.manifest:ap.error("manifest required") + manifest_path=Path(a.manifest);raw=manifest_path.read_bytes();packet_path=manifest_path.with_name("D-008-PACKET.md");validator_path=Path(__file__) + _,counts=validate_artifacts(raw,packet_path.read_bytes(),validator_path.read_bytes());print(" ".join(f"{k}={v}" for k,v in counts.items()));return 0 +if __name__=="__main__":raise SystemExit(main()) diff --git a/decisions/test_d008_manifest.py b/decisions/test_d008_manifest.py new file mode 100644 index 0000000000..a4081ecc64 --- /dev/null +++ b/decisions/test_d008_manifest.py @@ -0,0 +1,272 @@ +import ast,base64,copy,hashlib,importlib.util,inspect,json,pathlib,subprocess,sys,unittest +HERE=pathlib.Path(__file__).resolve().parent +S=importlib.util.spec_from_file_location("d008v3",HERE/"d008_manifest.py");V=importlib.util.module_from_spec(S);S.loader.exec_module(V) +MRAW=(HERE/"d008-budget-manifest-v1.json").read_bytes() +_SOURCE_CONSTANTS=("U64","KINDS","LAWS","STATUSES","FORBIDDEN_INPUT_KEYS","BASE_EVENT","OP_FIELDS","UNSUPPORTED_OPS","UNIT_COMPAT","PARENT_COMPAT","AUTH_CONTEXT") +_SOURCE_COMMON=("_pairs","walk","canonical","exact","text","uint","sha","vsha","clone","art","digest","index","validate_dimension","validate_provider_facts","dimension_capacity","parent_relation","validate_state","validate_authority","validate_event","event_binding","claimed_ids","validate_trace_namespaces","conservation","apply_pairs","authority_relation","law_typed","law_authority","law_kind","law_hierarchy","law_reservation","law_cancel","law_provider","law_compound","law_recovery","law_attribution","law_separation","law_canonical") +_SOURCE_PRIMARY=("authority_current","event_join","retain","lease_expire","provider_apply","apply_leaf","classify_event","derive") +_SOURCE_ORACLE=("oracle_step","oracle_observation") +class _LiteralRaises(ast.NodeTransformer): + def visit_FunctionDef(self,node): + self.generic_visit(node);node.decorator_list=[];return node + def visit_Raise(self,node): + self.generic_visit(node) + if isinstance(node.exc,ast.Call) and isinstance(node.exc.func,ast.Name) and node.exc.func.id=="ValueError":node.exc.args=[ast.Constant("reject")] + return node + def visit_Lambda(self,node):return ast.copy_location(ast.Name("law_capacity",ast.Load()),node) + def visit_Call(self,node): + self.generic_visit(node) + if isinstance(node.func,ast.Name) and node.func.id=="cap":node.func.id="law_capacity" + return node +def producer_source(role): + names=_SOURCE_COMMON+(_SOURCE_PRIMARY if role=="EXECUTOR" else _SOURCE_ORACLE) + chunks=["import json\nimport hashlib\nimport unicodedata\n"]+[n+"="+repr(getattr(V,n))+"\n" for n in _SOURCE_CONSTANTS] + chunks.append("def parse_bytes(raw):\n text=raw.decode('utf-8')\n if unicodedata.normalize('NFC',text)!=text:\n raise ValueError('NFC')\n value=json.loads(text)\n if canonical(value)!=raw:\n raise ValueError('canonical')\n return value\ndef law_capacity(z):\n return z['state']['issued'] if z['kind']=='CONSUMABLE' else z['state']['cap'] if z['kind'] in ('PEAK','RATE') else z['state']['capacity']\n") + for n in names: + s=inspect.getsource(getattr(V,n)).replace("ManifestError","ValueError").replace("except Exception:","except ValueError:").replace("copy.deepcopy(x)","json.loads(json.dumps(x))") + s=s.replace("lambda z:z['state']['issued'] if z['kind']=='CONSUMABLE' else z['state']['cap'] if z['kind'] in ('PEAK','RATE') else z['state']['capacity']","law_capacity") + chunks.append(s+"\n") + machine="derive" if role=="EXECUTOR" else "oracle_observation" + chunks.append("def law_whole(inputs,obs):\n try:\n return obs=="+machine+"(clone(inputs))\n except ValueError:\n return False\n") + chunks.append("def law_results(inputs,obs):\n return {'WHOLE_OBSERVATION_CLOSURE':law_whole(inputs,obs),'TYPED_IDENTITY_SCOPE':law_typed(inputs,obs),'D003_AUTHORITY_FIRST':law_authority(inputs,obs),'PER_KIND_CONSERVATION':law_kind(inputs,obs),'PARENT_SIBLING_CONSERVATION':law_hierarchy(inputs,obs),'RESERVATION_ACQUISITION':law_reservation(inputs,obs),'CANCELLATION_REFUND':law_cancel(inputs,obs),'PROVIDER_RECONCILIATION':law_provider(inputs,obs),'COMPOUND_ATOMICITY':law_compound(inputs,obs),'RECOVERY_REPLAY':law_recovery(inputs,obs),'ATTRIBUTION_MODEL_INDEPENDENCE':law_attribution(inputs,obs),'EFFECT_PROMOTION_SEPARATION':law_separation(inputs,obs),'CANONICAL_DETERMINISM':law_canonical(inputs,obs)}\n") + chunks.append("def produce(packet_bytes,manifest_bytes,identity_bytes):\n manifest=parse_bytes(manifest_bytes)\n rows=[]\n for case in manifest['cases']:\n inputs=case['inputs']\n assertion={'case_id':case['id']}\n try:\n observation="+machine+"(inputs)\n laws=law_results(inputs,observation)\n if not all(laws.values()):\n raise ValueError('law')\n assertion.update({'classification':'ACCEPTED_LAWS_PASS','laws':laws,'pass':True})\n cell={'case_id':case['id'],'input_sha256':vsha(inputs),'observation':observation}\n except ValueError:\n assertion.update({'classification':'STRUCTURAL_REJECT_PASS','laws':None,'pass':True})\n cell={'case_id':case['id'],'input_sha256':vsha(inputs),'rejection':'PRIMARY_AND_ORACLE_REJECT'}\n rows.append((cell,assertion))\n body={'assertions':[x[1] for x in rows],'cells':[x[0] for x in rows],'manifest_sha256':sha(manifest_bytes)}\n identity={'byte_length':len(identity_bytes),'kind':'PRODUCER_IDENTITY','sha256':sha(identity_bytes)}\n return canonical({'identity':identity,'provenance_qualified':True,'schema':'D008-O-3','semantic_body':body})\n") + tree=_LiteralRaises().visit(ast.parse("".join(chunks)));ast.fix_missing_locations(tree) + return (ast.unparse(tree)+"\n").encode() +def replace_object(bundle,old_oid,kind,data): + new=V.git_oid(kind,data);bundle["objects"].pop(old_oid);bundle["objects"][new]={"data_b64":base64.b64encode(data).decode(),"kind":kind};return new +def object_data(bundle,oid):return base64.b64decode(bundle["objects"][oid]["data_b64"]) +def audit_no_answer_literals(source,manifest): + body=V.semantic_body(manifest,MRAW);answers=[V.canonical(body),V.canonical(body['cells']),V.canonical(body['assertions'])] + answers += [V.canonical(x['observation']) for x in body['cells'] if 'observation' in x] + forbidden={(len(x),hashlib.sha256(x).hexdigest()) for x in answers} + for n in ast.walk(ast.parse(source.decode())): + if isinstance(n,ast.Constant) and isinstance(n.value,(str,bytes)): + raw=n.value.encode() if isinstance(n.value,str) else n.value + if (len(raw),hashlib.sha256(raw).hexdigest()) in forbidden:raise AssertionError('embedded semantic answer literal') +class TestD008StageA(unittest.TestCase): + def m(self):return V.parse_bytes(MRAW) + def inp(self,n):return copy.deepcopy(next(c["inputs"] for c in self.m()["cases"] if c["id"]==n)) + def obs(self,n):return V.derive(self.inp(n)) + def test_manifest_stage_a_counts_b8(self): + m,c=V.validate_manifest_bytes(MRAW);self.assertEqual(MRAW,V.canonical(V.manifest_spec()));self.assertEqual(c,{"b8_cell_count":204,"family_count":17,"law_count":13,"projection_count":6,"raw_subcase_count":69,"structural_reject_count":9}) + self.assertEqual((m["semantic_stage"],m["provenance_qualified"],m["decision"]),("B_PASS",False,{"frozen":False,"id":"D-008","status":"OPEN"}));self.assertEqual(m["provenance_status"],"STAGE_C_PREREGISTERED_NO_ACTUAL_ROOT_OR_EVIDENCE");V.validate_evidence_dag(m["provenance"]["dag"]) + for name,value in (("stage_b_semantic_projection",V.stage_b_semantic_projection(m)),("o_semantic_body",V.o_semantic_body_projection(m,MRAW))): + raw=V.canonical(value);lock=m["semantic_locks"][name];self.assertEqual((len(raw),hashlib.sha256(raw).hexdigest()),(lock["byte_length"],lock["sha256"]),name) + for key in ("evidence","freeze","resolution","adoption"):self.assertNotIn(key,m) + cells=m["b8"]["matrix"];self.assertEqual(len({x["reason"] for x in cells}),204);self.assertTrue(all(x["classification"] in x["reason"] for x in cells));self.assertFalse(any("constrains its typed accounting observation" in x["reason"] for x in cells)) + for q in ("Q06","Q07","Q08","Q14"):self.assertEqual(len([x for x in cells if x["quantity"]==q]),12) + def test_corpus_raw_closure_no_expected_flags(self): + structural={"compound-duplicate-child","freshness-repeat","peak-release-enum-invalid","dimension-parent-cycle","unit-kind-incompatible","provider-operation-collision","nested-compound","replay-binding-mismatch","compound-partial-claim-reuse"} + for c in self.m()["cases"]: + if c["id"] in structural: + with self.assertRaises(V.ManifestError):V.derive(copy.deepcopy(c["inputs"])) + with self.assertRaises(V.ManifestError):V.oracle_observation(copy.deepcopy(c["inputs"])) + continue + a=V.derive(copy.deepcopy(c["inputs"]));b=V.oracle_observation(copy.deepcopy(c["inputs"]));self.assertEqual(a,b,c["id"]);self.assertTrue(all(V.law_results(c["inputs"],a).values()),c["id"]) + keys=set() + def walk(x): + if isinstance(x,dict):keys.update(x);[walk(v) for v in x.values()] + elif isinstance(x,list):[walk(v) for v in x] + walk([c["inputs"] for c in self.m()["cases"]]);self.assertTrue(V.FORBIDDEN_INPUT_KEYS.isdisjoint(keys)) + def test_attempt_inventory_precedence_replay(self): + expected={"authority-denial-no-delta":"DENY_AUTHORITY","denied-before-fault":"DENY_AUTHORITY","peak-over-cap":"DENY_ADMISSION","effect-separation":"UNSUPPORTED","promotion-separation":"UNSUPPORTED","unsupported-cross-kind":"UNSUPPORTED","retry-before-commit":"REPLAY","lost-response-retry":"REPLAY","retained-tomb-expiry":"RECONCILE_EXPIRED","compound-one-denied":"DENY_ADMISSION"} + for n,status in expected.items():self.assertEqual(self.obs(n)["phases"][-1]["status"],status,n) + for n in ("authority-denial-no-delta","peak-over-cap","effect-separation","retry-before-commit"): + o=self.obs(n);op=next(p["event"]["operation_id"] for p in self.inp(n)["phases"] if p.get("kind")=="APPLY");self.assertTrue(any(x["operation_id"]==op for x in o["final_state"]["retained"]),n) + o=self.obs("compound-one-denied");ids=[o["phases"][0]["before"]];records=o["final_state"]["retained"];self.assertEqual(len(records),3);self.assertEqual(len({x["operation_id"] for x in records}),3);self.assertTrue(all(x["causal_operation_id"]=="OP-m2" for x in records)) + def test_authority_full_handoff_and_freshness(self): + self.assertEqual(self.obs("handoff-generation-mismatch")["phases"][0]["status"],"DENY_AUTHORITY") + base=self.inp("authority-denial-no-delta") + for k in V.AUTH_CONTEXT: + q=copy.deepcopy(base);q["phases"][0]["authority"]["verdict"]="ALLOW";q["phases"][0]["authority"]["handoff"][k]=2 if k=="generation" else "MISMATCH" + self.assertEqual(V.derive(q)["phases"][0]["status"],"DENY_AUTHORITY",k) + def test_provider_lifecycle_attacks(self): + good=self.obs("provider-estimate-invoice-credit")["final_state"]["provider_facts"];self.assertEqual([x["stage"] for x in good],["ESTIMATE","OBSERVED","SETTLED","CREDIT"]) + for n in ("provider-fork","provider-account-switch","provider-credit-overbound"):self.assertEqual(self.obs(n)["phases"][-1]["status"],"DENY_ADMISSION",n) + for mut in (lambda q:q["initial_state"]["provider_facts"].append({"amount":1,"fact_id":"X","operation_id":"PX","prior_fact_id":None,"provider_account_id":"A","stage":"SETTLED"}),lambda q:q["initial_state"]["provider_facts"].extend([{"amount":2,"fact_id":"E","operation_id":"PE","prior_fact_id":None,"provider_account_id":"A","stage":"ESTIMATE"},{"amount":2,"fact_id":"O1","operation_id":"P1","prior_fact_id":"E","provider_account_id":"A","stage":"OBSERVED"},{"amount":2,"fact_id":"O2","operation_id":"P2","prior_fact_id":"E","provider_account_id":"A","stage":"UNKNOWN"}])): + q=self.inp("provider-unknown");mut(q) + with self.assertRaises(V.ManifestError):V.derive(q) + def test_share_dimension_lease_rate_semantics(self): + s=self.obs("share-parent-revoke")["final_state"]["dimensions"][0]["state"];h=s["revoked_history"][0];self.assertEqual(set(h),{"allocated","child_id","reserved","used"});self.assertEqual(h["allocated"],6) + q=self.inp("rate-vs-stock-no-conversion");q["initial_state"]["dimensions"][1]["unit_id"]="worker" + with self.assertRaises(V.ManifestError):V.derive(q) + self.assertEqual(self.obs("lease-grant-expired")["phases"][0]["status"],"DENY_ADMISSION");self.assertEqual(self.obs("lease-epoch-skip")["phases"][-1]["status"],"DENY_ADMISSION") + q=self.inp("rate-window-not-elapsed");q["phases"][1]["logical_now"]=1 + with self.assertRaises(V.ManifestError):V.derive(q) + def test_each_law_observation_mutation_and_input_forgery(self): + cases=["consumable-reserve-commit","delegation-attribution","authority-denial-no-delta","world-discard-spend","share-child-use","hold-cancel-unused","late-result-no-refund","provider-estimate-invoice-credit","compound-one-denied","lost-response-retry","model-substitution","effect-separation","fresh-cache-reuse"] + for law,name in zip(V.LAWS,cases): + inp=self.inp(name);obs=V.derive(inp);q=copy.deepcopy(obs) + if law=="TYPED_IDENTITY_SCOPE":q["input_sha256"]="0"*64 + elif law=="D003_AUTHORITY_FIRST":q["phases"][0]["status"]="APPLIED" + elif law=="PER_KIND_CONSERVATION":q["final_state"]["dimensions"][0]["state"][next(iter(q["final_state"]["dimensions"][0]["state"]))]+=1 + elif law=="PARENT_SIBLING_CONSERVATION":q["phases"][-1]["after"]["dimensions"][0]["parent_budget_id"]="MISSING" + elif law=="RESERVATION_ACQUISITION":q["phases"][0]["status"]="DENY_ADMISSION";q["phases"][0]["after"]["dimensions"][0]["state"]["free"]-=1 + elif law=="CANCELLATION_REFUND":q["phases"][-1]["after"]["dimensions"][0]["state"]["consumed"]=0 + elif law=="PROVIDER_RECONCILIATION":q["phases"][-1]["after"]["provider_facts"][-1]["stage"]="ESTIMATE" + elif law=="COMPOUND_ATOMICITY":q["phases"][0]["after"]["retained"][0]["causal_operation_id"]="WRONG" + elif law=="RECOVERY_REPLAY":q["phases"][0]["after"]["retained"][0]["expires_at"]=0 + elif law=="ATTRIBUTION_MODEL_INDEPENDENCE":q["phases"][0]["after"]["resource_binding_plans"][0]["dimension_id"]="MISSING" + elif law=="EFFECT_PROMOTION_SEPARATION":q["phases"][0]["status"]="APPLIED" + elif law=="CANONICAL_DETERMINISM":q["input_sha256"]="f"*64 + else:q["phases"][0]["after"]["dimensions"][0]["state"][next(iter(q["phases"][0]["after"]["dimensions"][0]["state"]))]+=1 + self.assertFalse(V.law_results(inp,q)[law],law) + forged=copy.deepcopy(inp) + if law=="D003_AUTHORITY_FIRST":forged["phases"][0]["authority"]["handoff"]["generation"]+=1;obs["phases"][0]["status"]="APPLIED" + elif law=="COMPOUND_ATOMICITY":forged["phases"][0]["event"]["children"][1]["event"]["operation_id"]=forged["phases"][0]["event"]["children"][0]["event"]["operation_id"] + elif law in ("PROVIDER_RECONCILIATION","ATTRIBUTION_MODEL_INDEPENDENCE","EFFECT_PROMOTION_SEPARATION"):forged["phases"][0]["event"]["plan_id"]="MISSING" + else:forged["phases"][0]["event"]["operation"]="ALIAS" + self.assertFalse(V.law_results(forged,q)[law],law) + def test_law_and_primary_helper_independence(self): + inp=self.inp("compound-all-or-none");obs=V.derive(inp);primary=("apply_leaf","classify_event","event_join","authority_current","derive");old={n:getattr(V,n) for n in primary} + try: + for n in primary:setattr(V,n,lambda *a,**k:(_ for _ in ()).throw(RuntimeError(n))) + self.assertEqual(V.oracle_observation(inp),obs);self.assertTrue(all(V.law_results(inp,obs).values())) + finally: + for n,f in old.items():setattr(V,n,f) + for i,helper in enumerate(V.LAW_HELPERS): + original=V.oracle_observation + try: + if i:V.oracle_observation=lambda *_:(_ for _ in ()).throw(RuntimeError("oracle alias"));self.assertTrue(helper(inp,obs),V.LAWS[i]) + finally:V.oracle_observation=original + def test_c3_exact_replays_claim_sets(self): + for n in ("provider-after-reload-replay","share-after-reload-replay","lease-after-reload-replay","compound-after-reload-replay"): + inp=self.inp(n);o=V.derive(inp);self.assertEqual(o,V.oracle_observation(inp));self.assertEqual(o["phases"][-1]["status"],"REPLAY",n);outer=inp["phases"][0]["event"];records=[x for x in o["final_state"]["retained"] if x["causal_operation_id"]==outer["operation_id"]];self.assertTrue(records);self.assertTrue(all(x["claimed_ids"]==V.claimed_ids(outer) for x in records)) + self.assertEqual(self.obs("share-child-remint")["phases"][-1]["status"],"REPLAY") + with self.assertRaises(V.ManifestError):V.derive(self.inp("compound-partial-claim-reuse")) + def test_c3_parent_world_and_structural_reporting(self): + base=self.inp("rate-vs-stock-no-conversion") + for mut in (lambda q:(q["initial_state"]["dimensions"][1].__setitem__("parent_budget_id",q["initial_state"]["dimensions"][0]["dimension_id"])),lambda q:(q["initial_state"]["dimensions"][1].__setitem__("owner_id","OTHER"),q["initial_state"]["dimensions"][1].__setitem__("parent_budget_id",q["initial_state"]["dimensions"][0]["dimension_id"])),lambda q:q["initial_state"]["worlds"][0].__setitem__("extra","X"),lambda q:q["initial_state"]["worlds"].append({"world_id":"WORLD-A"})): + q=copy.deepcopy(base);mut(q) + with self.assertRaises(V.ManifestError):V.derive(q) + m=self.m();body=V.semantic_body(m,MRAW);accepted=[x for x in body["assertions"] if x["classification"]=="ACCEPTED_LAWS_PASS"];rejected=[x for x in body["assertions"] if x["classification"]=="STRUCTURAL_REJECT_PASS"];self.assertEqual((len(accepted),len(rejected)),(60,9));self.assertTrue(all(x["pass"] and x["laws"] is not None and all(x["laws"].values()) for x in accepted));self.assertTrue(all(x["pass"] and x["laws"] is None for x in rejected)) + def test_c3_named_law_exact_forgeries(self): + checks=[] + inp=self.inp("compound-all-or-none");obs=V.derive(inp);q=copy.deepcopy(inp);q["phases"][0]["event"]["children"][0]["event"]["actor_id"]="FORGED";checks.append((V.law_authority,q,obs));checks.append((V.law_compound,q,obs)) + inp=self.inp("consumable-reserve-commit");obs=V.derive(inp);q=copy.deepcopy(obs);q["phases"][0]["after"]["dimensions"][0]["state"]["reserved"]+=1;checks.extend(((V.law_reservation,inp,q),(V.law_kind,inp,q))) + inp=self.inp("world-discard-spend");obs=V.derive(inp);q=copy.deepcopy(obs);q["phases"][-1]["after"]["dimensions"][0]["state"]["reserved"]+=1;checks.append((V.law_cancel,inp,q)) + inp=self.inp("lost-response-retry");obs=V.derive(inp);q=copy.deepcopy(obs);q["phases"][0]["after"]["retained"][0]["outcome"]="APPLIED";q["phases"][0]["after"]["retained"][0]["attempted_at"]+=1;checks.append((V.law_recovery,inp,q)) + inp=self.inp("effect-separation");obs=V.derive(inp);q=copy.deepcopy(inp);q["phases"][0]["event"]["operation"]="ALIAS";checks.append((V.law_separation,q,obs)) + inp=self.inp("delegation-attribution");obs=V.derive(inp);q=copy.deepcopy(inp);q["phases"][0]["event"]["actor_id"]="OTHER";checks.append((V.law_attribution,q,obs)) + inp=self.inp("fresh-cache-reuse");obs=V.derive(inp);q=copy.deepcopy(obs);q["phases"][0]["after"]["worlds"]=[{"world_id":"WORLD-A","x":1}];checks.append((V.law_typed,inp,q)) + old=V.oracle_observation + try: + V.oracle_observation=lambda *_:obs + for helper,a,b in checks:self.assertFalse(helper(a,b),helper.__name__) + finally:V.oracle_observation=old + def test_stage_b_exact_reproducers(self): + for n in ("provider-operation-collision","nested-compound"): + q=self.inp(n) + with self.assertRaises(V.ManifestError):V.derive(q) + with self.assertRaises(V.ManifestError):V.oracle_observation(q) + self.assertEqual(self.obs("provider-unknown-direct-settle")["phases"][-1]["status"],"DENY_ADMISSION") + good=self.obs("provider-unknown-observed-settled");self.assertEqual([x["stage"] for x in good["final_state"]["provider_facts"]],["ESTIMATE","UNKNOWN","OBSERVED","SETTLED"]) + self.assertEqual(self.obs("rate-last-refill-regression")["phases"][0]["status"],"DENY_ADMISSION");self.assertEqual(self.obs("lease-epoch-zero")["phases"][0]["status"],"DENY_ADMISSION") + sh=self.obs("share-used-revoke-reallocate")["final_state"]["dimensions"][0]["state"];self.assertEqual(set(sh["revoked_history"][0]),{"allocated","child_id","reserved","used"});self.assertEqual(sum(x["allocated"] for x in sh["children"])+sum(x["used"] for x in sh["revoked_history"]),10) + q=self.inp("fresh-cache-reuse");q["initial_state"]["retained"]=[{"attempted_at":0,"binding_sha256":"0"*64,"causal_operation_id":"FORGED","claimed_ids":["FORGED"],"expires_at":20,"operation_id":"FORGED","outcome":"APPLIED"}] + with self.assertRaises(V.ManifestError):V.derive(q) + q["initial_state"]["retained"]=[];q["initial_state"]["tombstones"]=[{"binding_sha256":"0"*64,"causal_operation_id":"FORGED","claimed_ids":["FORGED"],"operation_id":"FORGED","outcome":"APPLIED","retired_at":1}] + with self.assertRaises(V.ManifestError):V.oracle_observation(q) + for name,kind,records in (("share-child-use","SHARE",("children",{"allocated":1,"child_id":"GLOBAL-X","reserved":0,"used":0})),("lease-renew-epoch","LEASE",("active",{"epoch":1,"expires_at":30,"lease_id":"GLOBAL-X","uses":0}))): + q=self.inp(name);d=copy.deepcopy(q["initial_state"]["dimensions"][0]);d["dimension_id"]+="-2";d["state"][records[0]]=[records[1]];q["initial_state"]["dimensions"][0]["state"][records[0]]=[copy.deepcopy(records[1])];q["initial_state"]["dimensions"].append(d) + with self.assertRaises(V.ManifestError):V.derive(q) + def test_l11_compound_effect_and_law_sabotage(self): + cells=[x for x in self.m()["b8"]["matrix"] if x["law"]=="L11"];self.assertEqual(len(cells),17);self.assertTrue(all(x["classification"]=="APPLICABLE" and "distinct from provider account charge facts" in x["reason"] for x in cells)) + q=self.inp("compound-all-or-none");child=q["phases"][0]["event"]["children"][1];child["event"]["operation"]="EFFECT_AUTHORIZE";o=V.derive(q);self.assertEqual(o["phases"][0]["status"],"DENY_ADMISSION");rec={x["operation_id"]:x for x in o["final_state"]["retained"]};self.assertEqual(rec[child["event"]["operation_id"]]["outcome"],"UNSUPPORTED");self.assertEqual(rec[q["phases"][0]["event"]["children"][0]["event"]["operation_id"]]["outcome"],"APPLIED") + inp=self.inp("provider-unknown-direct-settle");obs=V.derive(inp);forged=copy.deepcopy(obs);forged["phases"][-1]["status"]="APPLIED";forged["phases"][-1]["after"]["provider_facts"].append({"amount":9,"fact_id":"FORGED","operation_id":"FORGED","prior_fact_id":inp["phases"][1]["event"]["provider_fact_id"],"provider_account_id":"PROVIDER-A","stage":"SETTLED"}) + bad=self.inp("provider-operation-collision");base=self.obs("provider-estimate-invoice-credit");old_o,old_v=V.oracle_observation,V.validate_state + try: + V.oracle_observation=lambda *_:obs;V.validate_state=lambda *a,**k:({}, {}, {}) + self.assertFalse(V.law_provider(inp,forged));self.assertTrue(V.law_whole(inp,obs));self.assertFalse(V.law_typed(bad,base)) + finally:V.oracle_observation,V.validate_state=old_o,old_v + def test_reference_o_nonqualifying_and_future_open(self): + m=self.m();o=V.reference_o(m,MRAW);self.assertFalse(o["provenance_qualified"]);V.validate_o_value(o,m,MRAW) + packet=(HERE/"D-008-PACKET.md").read_bytes();validator=(HERE/"d008_manifest.py").read_bytes();V.validate_artifacts(MRAW,packet,validator) + for bad_packet,bad_validator in ((packet+b"x",validator),(packet,validator+b"x")): + with self.assertRaises(V.ManifestError):V.validate_artifacts(MRAW,bad_packet,bad_validator) + q=copy.deepcopy(o);q["semantic_body"]["manifest_sha256"]="0"*64 + with self.assertRaises(V.ManifestError):V.validate_o_value(q,m,MRAW) + self.assertEqual(V.future_verdict(),"OPEN");self.assertEqual(V.future_verdict(b"forged"),"OPEN") + def test_canonical_and_cli(self): + for raw in (b'{"a":1,"a":1}\n',b'{"a":1.0}\n',b'{"a":18446744073709551616}\n',b'{"a":1}\n '): + with self.assertRaises(V.ManifestError):V.parse_bytes(raw) + p=subprocess.run([sys.executable,str(HERE/"d008_manifest.py"),str(HERE/"d008-budget-manifest-v1.json")],capture_output=True,text=True);self.assertEqual(p.returncode,0,p.stderr);self.assertIn("raw_subcase_count=69",p.stdout);self.assertIn("structural_reject_count=9",p.stdout) + p=subprocess.run([sys.executable,str(HERE/"d008_manifest.py"),"--generate"],capture_output=True);self.assertEqual(p.stdout,MRAW) + def synthetic_root(self): + files={p:(HERE/pathlib.PurePosixPath(p).name).read_bytes() for p in V.STAGE_C_PATHS};paths={p:V.git_oid("blob",b) for p,b in files.items()};bundle=V.git_bundle(files,"D008 synthetic witness");raw=V.canonical({"commit_oid":bundle["commit_oid"],"label":"TEST_ONLY_NON_EVIDENCE","objects":bundle["objects"],"paths":paths,"schema":"D008-PREREG-ROOT-3","tree_oid":bundle["tree_oid"]});return raw,files + def stage_c_chain(self): + root,files=self.synthetic_root();packet=files[V.STAGE_C_PATHS[0]];validator=files[V.STAGE_C_PATHS[2]];m=self.m();sources={r:producer_source(r) for r in V.PRODUCER_ROLES};identities={} + for role in V.PRODUCER_ROLES: + path="future/d008_"+role.lower()+"_v3/producer.py";src=sources[role];locks={V.STAGE_C_PATHS[0]:packet,V.STAGE_C_PATHS[1]:MRAW};identities[role]=V.canonical({"dependencies":[],"locks":V.inventory(locks),"prereg_root":V.art("PREREG_ROOT",root),"role":role,"schema":"D008-IDENTITY-3","source_checkpoint":V.source_checkpoint_bundle(path,src),"sources":V.inventory({path:src})}) + reviewer_sources={};reviewer_ids={} + for role in V.REVIEWER_ROLES: + path="future/d008_reviewer_"+role.lower()+"_v3/reviewer.txt";src=("TEST_ONLY independent reviewer "+role+"\n").encode();reviewer_sources[role]={path:src};reviewer_ids[role]=V.canonical({"capabilities":V.REVIEW_CAPS[role],"prereg_root":V.art("PREREG_ROOT",root),"role":role,"schema":"D008-REVIEWER-IDENTITY-3","source_checkpoint":V.source_checkpoint_bundle(path,src),"sources":V.inventory({path:src})}) + producer_ids=identities;subjects={"RX":V.producer_subject("EXECUTOR",identities["EXECUTOR"]),"RC":V.producer_subject("CHECKER",identities["CHECKER"]),"RV":V.evaluator_subject(root,MRAW,packet,validator)};reviews={} + for role in ("RX","RC","RV"): + reviews[role]=V.canonical({"checks":V.REVIEW_CHECKS[role],"findings":[{"finding_id":"MANUAL-COPY-"+role,"resolved":True,"severity":"INFO","text":"manual semantic copy inspection found no embedded observation or answer table"}],"gate":V.REVIEW_GATES[role],"reviewer_identity":V.art("REVIEWER_IDENTITY",reviewer_ids[role]),"role":role,"schema":"D008-REVIEW-3","subject":subjects[role],"verdict":"PASS"}) + ir=V.canonical({"checks":{"manual_semantic_copy_checks_pass":True,"normalized_ast_distinct":True,"source_bytes_distinct":True},"producer_identities":{"CHECKER":V.art("CHECKER_IDENTITY",identities["CHECKER"]),"EXECUTOR":V.art("EXECUTOR_IDENTITY",identities["EXECUTOR"])},"reviewer_identities":{r:V.art(r+"_IDENTITY",reviewer_ids[r]) for r in ("RX","RC","RV")},"reviews":{r:V.art(r+"_REVIEW",reviews[r]) for r in ("RX","RC","RV")},"schema":"D008-IR-3","subjects":subjects}) + pfsubject=V.prefreeze_subject(root,ir,MRAW,packet,validator,producer_ids,reviewer_ids);reviews["RP"]=V.canonical({"checks":V.REVIEW_CHECKS["RP"],"findings":[{"finding_id":"MANUAL-COPY-RP","resolved":True,"severity":"INFO","text":"manual copy facts and exact freeze subject independently checked"}],"gate":V.REVIEW_GATES["RP"],"reviewer_identity":V.art("REVIEWER_IDENTITY",reviewer_ids["RP"]),"role":"RP","schema":"D008-REVIEW-3","subject":pfsubject,"verdict":"PASS"});pf=V.canonical({"pre_freeze_review":V.art("RP_REVIEW",reviews["RP"]),"reviewer_identity":V.art("RP_IDENTITY",reviewer_ids["RP"]),"schema":"D008-PF-3","subject":pfsubject});freeze=V.canonical({"independence_report":V.art("IR",ir),"pre_freeze":V.art("PF",pf),"prereg_root":V.art("PREREG_ROOT",root),"schema":"D008-FREEZE-3","subject":pfsubject}) + o={r:V.canonical(V.semantic_o_value(m,MRAW,identities[r])) for r in V.PRODUCER_ROLES};v=V.canonical({"all_laws_pass":True,"freeze":V.art("FREEZE",freeze),"independence_report":V.art("IR",ir),"o1":V.art("O1",o["EXECUTOR"]),"o2":V.art("O2",o["CHECKER"]),"o_semantics_equal":True,"producers_executed":True,"schema":"D008-V-3","valid":True});dag=m["provenance"]["dag"];manual=V.canonical({"checks":[{"answer_literals_absent":True,"completed":True,"reviewer_role":"RX","source":V.art("EXECUTOR_SOURCE",sources["EXECUTOR"])},{"answer_literals_absent":True,"completed":True,"reviewer_role":"RC","source":V.art("CHECKER_SOURCE",sources["CHECKER"])}],"schema":"D008-MANUAL-COPY-FACTS-3"});e=V.canonical({"dag":dag,"freeze":V.art("FREEZE",freeze),"independence_report":V.art("IR",ir),"manual_copy_facts":V.art("MANUAL_COPY_FACTS",manual),"o1":V.art("O1",o["EXECUTOR"]),"o2":V.art("O2",o["CHECKER"]),"pre_freeze":V.art("PF",pf),"schema":"D008-E-3","v":V.art("V",v),"verdict":"ADOPT_ALGEBRA"}) + bundles={r:{"identity_raw":identities[r],"sources":{"future/d008_"+r.lower()+"_v3/producer.py":sources[r]},"dependencies":{},"locks":{V.STAGE_C_PATHS[0]:packet,V.STAGE_C_PATHS[1]:MRAW}} for r in V.PRODUCER_ROLES};bundles["reviewer_ids"]=reviewer_ids;bundles["reviews"]=reviews;bundles["reviewer_sources"]=reviewer_sources + args=(e,v,freeze,pf,ir,root,files,MRAW,packet,validator,bundles,o["EXECUTOR"],o["CHECKER"],dag,manual) + return {"args":args,"sources":sources,"o":o,"ir":ir,"reviews":reviews,"root":root,"files":files} + def test_stage_c_full_successful_chain(self): + c=self.stage_c_chain();m=self.m() + for src in c["sources"].values():V.scan_source(src);audit_no_answer_literals(src,m) + self.assertNotEqual(c["sources"]["EXECUTOR"],c["sources"]["CHECKER"]);self.assertNotEqual(V.normalized_ast(c["sources"]["EXECUTOR"]),V.normalized_ast(c["sources"]["CHECKER"]));self.assertEqual(V.semantic_o_bytes(c["o"]["EXECUTOR"]),V.semantic_o_bytes(c["o"]["CHECKER"]));self.assertEqual(V.future_verdict(*c["args"]),"ADOPT_ALGEBRA") + def test_stage_c_success_chain_all_argument_attacks_open(self): + c=self.stage_c_chain();args=list(c["args"]);self.assertEqual(len(args),15) + for i,x in enumerate(args): + q=list(args) + if isinstance(x,bytes):q[i]=x+b"x" + elif isinstance(x,dict):q[i]=copy.deepcopy(x);q[i]["FORGED"]=True + else:self.fail("unattackable argument "+str(i)) + self.assertEqual(V.future_verdict(*q),"OPEN",i) + for role in V.REVIEWER_ROLES: + q=list(args);b=copy.deepcopy(q[10]);b["reviewer_ids"][role]+=b"x";q[10]=b;self.assertEqual(V.future_verdict(*q),"OPEN",role) + q=list(args);b=copy.deepcopy(q[10]);review=V.parse_bytes(b["reviews"][role]);review["findings"]=[{"finding_id":"OPEN","resolved":False,"severity":"HIGH","text":"unresolved"}];b["reviews"][role]=V.canonical(review);q[10]=b;self.assertEqual(V.future_verdict(*q),"OPEN",role+" review") + q=list(args);ir=V.parse_bytes(q[4]);ir["checks"]["manual_semantic_copy_checks_pass"]=False;q[4]=V.canonical(ir);self.assertEqual(V.future_verdict(*q),"OPEN") + q=list(args);manual=V.parse_bytes(q[14]);manual["checks"][0]["answer_literals_absent"]=False;q[14]=V.canonical(manual);self.assertEqual(V.future_verdict(*q),"OPEN") + q=list(args);b=copy.deepcopy(q[10]);src=next(iter(b["EXECUTOR"]["sources"]));b["EXECUTOR"]["sources"][src]+=b"\n# answer table";q[10]=b;self.assertEqual(V.future_verdict(*q),"OPEN") + def test_stage_c_root_scanner_dag_fail_closed(self): + root,files=self.synthetic_root();V.validate_prereg_root(root,files) + for mut in (lambda x:x["paths"].__setitem__(V.STAGE_C_PATHS[0],"0"*40),lambda x:x.__setitem__("tree_oid","0"*40),lambda x:x.__setitem__("commit_oid","0"*40)): + q=V.parse_bytes(root);mut(q) + with self.assertRaises(V.ManifestError):V.validate_prereg_root(V.canonical(q),files) + good=b"import json\ndef helper(x):\n return json.loads(x.decode())\ndef produce(packet_bytes,manifest_bytes,identity_bytes):\n return manifest_bytes\n";V.scan_source(good) + attacks=(b"import os\ndef produce(packet_bytes,manifest_bytes,identity_bytes): return manifest_bytes\n",b"x=1\ndef produce(packet_bytes,manifest_bytes,identity_bytes): return manifest_bytes\n",b"X=len([])\ndef produce(packet_bytes,manifest_bytes,identity_bytes): return manifest_bytes\n",b"@staticmethod\ndef helper(): return 1\ndef produce(packet_bytes,manifest_bytes,identity_bytes): return manifest_bytes\n",b"def produce(packet_bytes,manifest_bytes,identity_bytes): raise RuntimeError('x')\n",b"def produce(packet_bytes,manifest_bytes,identity_bytes):\n try: return manifest_bytes\n except Exception: return packet_bytes\n",b"import json\ndef produce(packet_bytes,manifest_bytes,identity_bytes):\n json.loads=produce\n return manifest_bytes\n",b"def produce(packet_bytes,manifest_bytes,identity_bytes): return open('x')\n",b"def produce(packet_bytes,manifest_bytes,identity_bytes): return manifest_bytes.__class__\n",b"def f(produce): return produce\ndef produce(packet_bytes,manifest_bytes,identity_bytes): return manifest_bytes\n",b"def produce(packet_bytes,manifest_bytes,identity_bytes,*x): return manifest_bytes\n") + for src in attacks: + with self.assertRaises(V.ManifestError):V.scan_source(src) + dag=copy.deepcopy(self.m()["provenance"]["dag"]);V.validate_evidence_dag(dag) + for mut in (lambda d:d["edges"].pop(),lambda d:d["edges"].append({"from":"ROOT","to":"E"}),lambda d:d["edges"][0].__setitem__("to","MISSING")): + q=copy.deepcopy(dag);mut(q) + with self.assertRaises(V.ManifestError):V.validate_evidence_dag(q) + for findings in ([{"finding_id":"F","resolved":False,"severity":"CRITICAL","text":"open"}],[],"bad"): + with self.assertRaises(V.ManifestError):V.validate_findings(findings) + self.assertEqual(V.future_verdict(*([b"{}\n"]*14)),"OPEN");self.assertEqual(V.future_verdict(*([b"{}\n"]*15)),"OPEN");self.assertEqual(V.future_verdict(*([b"{}\n"]*16)),"OPEN") + def test_genuine_recursive_git_bundles_and_attacks(self): + root,files=self.synthetic_root();x=V.parse_bytes(root);bundle={k:copy.deepcopy(x[k]) for k in ("commit_oid","objects","tree_oid")};V.validate_git_bundle(bundle,files,"D008 synthetic witness") + top=V._parse_tree(object_data(bundle,bundle["tree_oid"]));self.assertEqual([(m,n) for m,n,_ in top],[("40000","decisions")]);dec_oid=top[0][2];self.assertEqual([n for _,n,_ in V._parse_tree(object_data(bundle,dec_oid))],sorted(pathlib.PurePosixPath(p).name for p in files)) + git=__import__('shutil').which('git') + if git: + for oid,o in bundle["objects"].items(): + data=base64.b64decode(o["data_b64"]);p=subprocess.run([git,"hash-object","-t",o["kind"],"--stdin"],input=data,capture_output=True);self.assertEqual(p.returncode,0,p.stderr);self.assertEqual(p.stdout.strip().decode(),oid) + attacks=[] + flat=V.git_bundle({p:files[p] for p in files},"D008 synthetic witness");root_data=b"".join(("100644 "+p+"\0").encode()+bytes.fromhex(V.git_oid("blob",files[p])) for p in sorted(files));old=flat["tree_oid"];new=replace_object(flat,old,"tree",root_data);flat["tree_oid"]=new;commit=replace_object(flat,flat["commit_oid"],"commit",V.git_commit_data(new,"D008 synthetic witness"));flat["commit_oid"]=commit;attacks.append(flat) + for tree_data in (V.git_tree_data([("100755","decisions",dec_oid)]),V.git_tree_data([("40000","z",dec_oid),("40000","a",dec_oid)]),V.git_tree_data([("40000","decisions",dec_oid),("40000","decisions",dec_oid)]),V.git_tree_data([("100644","decisions",dec_oid)]),b""): + q=copy.deepcopy(bundle);old=q["tree_oid"];new=replace_object(q,old,"tree",tree_data);q["tree_oid"]=new;q["commit_oid"]=replace_object(q,q["commit_oid"],"commit",V.git_commit_data(new,"D008 synthetic witness"));attacks.append(q) + for commit_data in (("tree "+bundle["tree_oid"]+"\nparent "+"0"*40+"\nauthor TEST_ONLY 0 +0000\ncommitter TEST_ONLY 0 +0000\n\nD008 synthetic witness\n").encode(),("tree "+bundle["tree_oid"]+"\nauthor X -1 +9999\ncommitter TEST_ONLY 0 +0000\n\nD008 synthetic witness\n").encode(),("tree "+bundle["tree_oid"]+"\nauthor TEST_ONLY 0 +0000\nauthor TEST_ONLY 0 +0000\ncommitter TEST_ONLY 0 +0000\n\nD008 synthetic witness\n").encode(),V.git_commit_data(bundle["tree_oid"],"wrong message")): + q=copy.deepcopy(bundle);q["commit_oid"]=replace_object(q,q["commit_oid"],"commit",commit_data);attacks.append(q) + q=copy.deepcopy(bundle);extra=b"extra";oid=V.git_oid("blob",extra);q["objects"][oid]={"data_b64":base64.b64encode(extra).decode(),"kind":"blob"};attacks.append(q) + for q in attacks: + with self.assertRaises(V.ManifestError):V.validate_git_bundle(q,files,"D008 synthetic witness") + path="future/d008_executor_v3/producer.py";src=producer_source("EXECUTOR");cp=V.source_checkpoint_bundle(path,src);V.validate_source_checkpoint(cp,path,src);self.assertEqual(V._parse_tree(object_data(cp,cp["tree_oid"]))[0][:2],("40000","future")) + for mutate in (lambda q:q["objects"].pop(next(oid for oid,o in q["objects"].items() if o["kind"]=="tree" and oid!=q["tree_oid"])),lambda q:q["objects"].__setitem__(V.git_oid("blob",b"junk"),{"data_b64":base64.b64encode(b"junk").decode(),"kind":"blob"}),lambda q:q.__setitem__("path","future/other.py")): + q=copy.deepcopy(cp);mutate(q) + with self.assertRaises(V.ManifestError):V.validate_source_checkpoint(q,path,src) + def test_stage_c_v3_contract_no_actual_artifacts(self): + text=(HERE/"d008_manifest.py").read_text()+(HERE/"d008-budget-manifest-v1.json").read_text(); + for token in ("D008-PREREG-ROOT-3","D008-IDENTITY-3","D008-REVIEWER-IDENTITY-3","D008-REVIEW-3","D008-IR-3","D008-PF-3","D008-FREEZE-3","D008-O-3","D008-V-3","D008-E-3","D008-MANUAL-COPY-FACTS-3"):self.assertIn(token,text) + m=self.m();self.assertEqual(m["provenance"]["status"],"NO_ROOT_OR_EVIDENCE_YET");self.assertFalse(m["provenance_qualified"]);self.assertEqual(V.future_verdict(),"OPEN") + defs=[n.name for n in ast.parse((HERE/"d008_manifest.py").read_text()).body if isinstance(n,(ast.FunctionDef,ast.ClassDef))];self.assertEqual(len(defs),len(set(defs))) +if __name__=="__main__":unittest.main() -- 2.54.0