{ "schema": "camden.research_runtime_coverage.v1", "package_version": "0.1.0", "research_changed": false, "all_mechanisms_prevented": false, "rows": [ { "id": "AF-TX-01", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Ambiguous outcome converted into a duplicate", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "One local committed effect survives an actual lost-ack process exit and replacement.", "required_boundary_capability": "Persist occurrence identity before dispatch; use target-supported atomic deduplication or reconcile with evidence that also resolves outstanding attempts.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_core.CoreTests.test_real_lost_ack_and_replacement", "path": "tests/test_core.py", "sha256": "c608e2926ada4d274fb7637911aaef11dd090b03604b403ab3fbfc2990551145" } ], "analysis": { "invariant_reviewed": "A missing acknowledgment must not license an additional effect for the same occurrence.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "A local retry log alone cannot control an opaque remote target.", "release_claim": "One local committed effect survives an actual lost-ack process exit and replacement. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-TX-02", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Admission acknowledgment promoted to completion", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Admission has no target effect or completion verdict.", "required_boundary_capability": "Represent admitted, executing, applied and verified separately; inspect the target's terminal operation result.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_continuity.ContinuityTests.test_admission_is_not_execution", "path": "tests/test_continuity.py", "sha256": "5d170cd8743d960dfbd0cd9aa4b053a06a4e04401b78af03d7f237405c50068e" } ], "analysis": { "invariant_reviewed": "Completion requires the requested postcondition, not merely queue admission.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "A provider operation ID is evidence of admission unless its contract says more.", "release_claim": "Admission has no target effect or completion verdict. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-TX-03", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Client cancellation mistaken for remote cancellation", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Opaque simulated dispatch remains unknown after cancellation; no real provider cancellation tested.", "required_boundary_capability": "Use provider cancellation and status contracts; retain the operation as unresolved until cancellation or completion is established.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_local_recovery.LocalRecovery.test_opaque_cancel_preserves_unknown", "path": "tests/test_local_recovery.py", "sha256": "546b887feaa348b6101007046ddd9935162da8f215bbd0dcc6a94cc7dae5ea73" } ], "analysis": { "invariant_reviewed": "Local cessation must not erase accountability for an in-flight effect.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "Already-applied irreversible effects cannot be recalled by a cancellation token.", "release_claim": "Opaque simulated dispatch remains unknown after cancellation; no real provider cancellation tested. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-TX-04", "research_basis": "D", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Absence read races a still-live original request", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Local recovery cannot use absence while the dispatch epoch is still current.", "required_boundary_capability": "Reuse the same supported idempotency identity or establish target-enforced cancellation, fencing or quiescence before a new attempt.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_local_recovery.LocalRecovery.test_absence_without_old_epoch_fence_cannot_enable_retry", "path": "tests/test_local_recovery.py", "sha256": "546b887feaa348b6101007046ddd9935162da8f215bbd0dcc6a94cc7dae5ea73" } ], "analysis": { "invariant_reviewed": "Retry eligibility requires more than point-in-time absence while an earlier attempt remains live.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "Even a linearizable read can precede a delayed original write.", "release_claim": "Local recovery cannot use absence while the dispatch epoch is still current. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-TX-05", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Replica lag interpreted as authoritative absence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included.", "required_boundary_capability": "Carry causal/session tokens or read from an authoritative endpoint; classify bounded-lag observations as unresolved.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A stale observation cannot establish absence for a dependent decision.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "Waiting a fixed duration is not proof that an unbounded replica has caught up.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TX-06", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Polling loses a transient lifecycle transition", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included.", "required_boundary_capability": "Use durable event history, versioned status and artifact retention appropriate to the polling interval.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Lifecycle reconstruction requires retained transitions or a sufficiently strong status contract.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "A snapshot cannot reconstruct a transition that the target never retained.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TX-07", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Response bound to the wrong invocation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included.", "required_boundary_capability": "Join on stable request IDs; validate response type and reject unmatched replies before reasoning uses them.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Results must bind to invocation, task, target and schema identities rather than position.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "IDs must remain unique within the relevant scope across reconnects and retries.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TX-08", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Duplicate callback re-applies an already consumed transition", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included.", "required_boundary_capability": "Persist an inbox identity and the local transition atomically; reconcile any subsequent external dispatch separately.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Consumption of one event identity must not duplicate its associated local effect.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "Deduplicating callbacks does not by itself deduplicate a downstream shipment.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TX-09", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Out-of-order event regresses terminal state", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included.", "required_boundary_capability": "Use target sequence/version checks or query authoritative operation state; define permitted state transitions.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A delayed observation must not overwrite a newer lifecycle version.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "Wall-clock arrival time alone cannot establish causal order.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TX-10", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Transport adapter launders a partial failure", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included.", "required_boundary_capability": "Validate and retain canonical request/response envelopes on both sides; expose item-level outcomes.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Adapters must preserve failure granularity and the semantics of returned evidence.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "Logging both sides aids detection but does not repair the missing delivery.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TX-11", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Connection setup fault misclassified as domain absence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included.", "required_boundary_capability": "Use typed infrastructure, authorization and domain error classes; permit appropriate bounded recovery without inventing absence.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Infrastructure failure must not become a business fact.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "A reachable endpoint can still be the wrong endpoint; target binding remains necessary.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TX-12", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CLAIM" ], "mechanism_title": "Truncated or streaming reply accepted as a complete result", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included.", "required_boundary_capability": "Track stream identity, sequence, end markers and schema completeness; retain partial results explicitly.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A completion claim requires complete framing and a valid terminal result.", "boundary_statement": "Local effect observations and opaque-target simulation. No HTTP provider, callback transport or replica reader is included." }, "residual_limit": "A correct checksum of a truncated fragment proves only that fragment's integrity.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-01", "research_basis": "E", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Retry identity regenerated", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Generate an identity once in the runtime, persist it before dispatch and reuse it across retries and handoffs.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "All attempts of one logical occurrence retain one supported deduplication identity.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "A random ID is valid when durably reused; determinism alone is not the requirement.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-02", "research_basis": "R", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Content-only identity collapses distinct legitimate operations", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Identical authorized payloads retain distinct occurrence identities.", "required_boundary_capability": "Bind a stable business-occurrence ID and separately bind canonical parameters; do not infer intent solely from payload equality.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_core.CoreTests.test_distinct_identical_requests", "path": "tests/test_core.py", "sha256": "c608e2926ada4d274fb7637911aaef11dd090b03604b403ab3fbfc2990551145" } ], "analysis": { "invariant_reviewed": "Distinct authorized occurrences must remain distinguishable even when their payloads match.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "Selecting occurrence boundaries requires the task contract, not a generic hashing rule.", "release_claim": "Identical authorized payloads retain distinct occurrence identities. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-ID-03", "research_basis": "R", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Key reused after parameter changes", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Freeze the authorized payload fingerprint; distinguish retry from amendment and give genuine amendments their own lineage.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "One occurrence identity cannot silently change the effect it denotes.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "An amendment may require an authorized cancellation or adjustment, not another create.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-04", "research_basis": "R", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Deduplication record expires before retry", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Record the API/version-specific retention horizon; reconcile or retain uncertainty after expiry instead of assuming perpetual deduplication.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Retry safety must hold for the provider's actual retention interval and scope.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "Different provider API versions can have different intervals.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-05", "research_basis": "E", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Deduplication namespace changes", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Persist provider, account, environment, endpoint/version and key as one binding; disallow unnoticed scope migration.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Operation identity includes the target's deduplication scope.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "Cross-provider failover needs a separate business-level reconciliation contract.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-06", "research_basis": "R", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Deduplication marker committed before the effect", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Commit the effect and completion record atomically where supported; distinguish reservation from completion.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A completion/deduplication record must not outlive an absent required effect.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "A reservation record requires owned recovery rather than automatic success.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-07", "research_basis": "R", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Effect committed before deduplication marker", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Use atomic effect/completion persistence or a target-supported idempotency primitive.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "No committed effect may lose the record needed to suppress its replay.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "A separate local database cannot provide this atomicity for an unrelated opaque API.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-08", "research_basis": "E", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Concurrent check-then-insert defeats deduplication", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Use a unique constraint, conditional insert or transactional receiver; only the winning admission may proceed.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Deduplication admission must be atomic across concurrent attempts.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "The admission and effect must still be linked correctly to avoid the previous two anomalies.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-09", "research_basis": "E", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Canonicalization splits equivalent retries", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Use typed canonicalization with specified numeric and Unicode semantics; preserve the original bound payload for retries.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Identity and signature construction require an explicit canonical representation.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "Canonical bytes do not establish business equivalence without an appropriate schema.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-10", "research_basis": "E", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Idempotent state hides repeated secondary consequences", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Inventory secondary effects and rely on the actual endpoint contract; deduplicate each consequential publication boundary.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Idempotency must cover all relevant observable effects, not just one field.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "Some repeat logging is permitted by a contract; distinguish authorized audit events from forbidden business duplicates.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-12", "research_basis": "D", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Effect identity lost during continuation rollover", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Carry the occurrence registry and unresolved-effect map across rollover; new attempts keep old occurrence identities.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Logical effect identity must survive worker and execution-run replacement.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "A genuinely new billing period must still receive a distinct occurrence identity.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-ID-13", "research_basis": "R", "effect_outcomes": [ "EFFECT", "BINDING" ], "mechanism_title": "Identical final state misattributed to this task", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented.", "required_boundary_capability": "Use target operation IDs, resource-origin metadata or an explicit adoption contract; retain unresolved old attempts separately.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Evidence must distinguish a matching postcondition from occurrence-specific execution when attribution matters.", "boundary_statement": "Stable local occurrence IDs and target uniqueness. No provider deduplication expiry contract is implemented." }, "residual_limit": "For some intents any matching authorized resource is sufficient; make that relaxation explicit.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-01", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Local business write and event publication diverge", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Commit the business row and an outbox entry in one transaction, then reconcile publication.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Required local state and its publication intent must agree across crashes.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "The relay and any downstream external effect remain additional failure boundaries.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-02", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Outbox delivery duplicated after relay crash", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Use idempotent consumers with durable inbox records and occurrence-bound downstream effects.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Atomic local publication intent must not be mistaken for atomic remote consumption.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "Broker-level deduplication does not necessarily cover external consumer side effects.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-03", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Speculative branch externalizes before selection", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Separate pure reasoning and dry-run/prepare operations from release; use a target-supported visibility gate.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "An effect requiring final selection cannot become observable before that selection.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "A sandbox name or local buffer cannot hide a call already sent to production.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-04", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Committed output depends on invalidated provisional state", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Track evidence/dependency versions and gate commit; propagate invalidation to derived claims and required corrective work.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Accepted effects must retain valid required dependencies or become explicitly invalidated.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "Downstream readers may already have acted, so invalidation is not complete rollback.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-05", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Independent tools partially commit a required bundle", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Use actual distributed transactions where available, otherwise an explicit saga/residue model and forward repair.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Every surviving part of a partial bundle remains accounted for and owned.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "A local coordinator cannot manufacture atomic irreversible release across nonparticipating tools.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-06", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Source removed before destination durability is established", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Stage the copy; verify identity, completeness and durability under the target contract before authorized cutover.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Source destruction must not precede sufficient evidence of the required destination copy.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "A checksum without destination durability or access evidence is insufficient.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-07", "research_basis": "D", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Prepared hold expires between validation and release", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Bind hold identity and expiry; renew within budget or revalidate/replan before commit.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Commit preconditions must remain valid at the actual release point.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "Renewal is itself an operation that can fail or require separate authorization.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-08", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Read or preview operation has an undeclared mutation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Document capability/effect contracts and use nonexternalizing fixtures for exploration; enforce the admitted effect set.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Tool classification must reflect actual effects, including tracking and billing.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "HTTP method names and metadata labels are not proofs that an implementation is side-effect-free.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-09", "research_basis": "D", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Sandbox rollback mistaken for world rollback", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Disable real external mutation in speculative sandboxes or account for external effects separately.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Rollback claims must be limited to the state actually controlled by the snapshot.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "Full process/filesystem checkpointing still does not reverse an email or another provider's state.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-10", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Inbox acknowledgment precedes durable admission", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Persist the inbox event and required local transition before acknowledging; use replayable delivery contracts.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Delivery acknowledgment must reflect the promised level of durable acceptance.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "Cross-system continuation may still need a durable outbox after admission.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AT-11", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Compound API success masks per-item failure", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed.", "required_boundary_capability": "Record item-level outcomes and verify each required postcondition; repair only missing authorized items.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Verification and recovery must preserve the granularity of compound effects.", "boundary_statement": "Attached local SQLite transactions and local result inbox. No multi-provider atomic commit is claimed." }, "residual_limit": "Do not resubmit already-completed irreversible items under new identities.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-01", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Unconditioned compensation for an unconfirmed forward effect", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Resolve the forward occurrence or use a target-side conditional compensator that does nothing when it is absent.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A compensator must establish or atomically condition on the forward effect it is permitted to neutralize.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "A safe conditional compensator can work under caller uncertainty; blanket prohibition is too strong.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-02", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Compensation outcome becomes ambiguous", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Assign reversal identity linked to the forward effect; reconcile and deduplicate under the target contract.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Reverse operations require the same occurrence, outcome and retry discipline as forward operations.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "Calling an operation compensation does not make it idempotent.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-03", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Compensation overwrites a legitimate concurrent change", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned inverse cannot overwrite an intervening local counter effect.", "required_boundary_capability": "Use conditional, field-scoped or semantic compensation against current state and recorded contribution identity.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_continuity.ContinuityTests.test_conditional_compensation_preserves_intervening_change", "path": "tests/test_continuity.py", "sha256": "5d170cd8743d960dfbd0cd9aa4b053a06a4e04401b78af03d7f237405c50068e" } ], "analysis": { "invariant_reviewed": "Compensation must preserve unrelated accepted intervening effects.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "A full historical-state restore is not generally a safe inverse.", "release_claim": "Versioned inverse cannot overwrite an intervening local counter effect. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-CP-04", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Abort drops ownership of surviving residue", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Record residual resources before terminalization; perform authorized cleanup or preserve a named unresolved obligation.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Every surviving effect after abort remains inventoried with a disposition and owner.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "Some residue is irreversible or deliberately retained; do not invent a clean rollback.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-05", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Compensation order violates dependency requirements", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Represent compensation dependencies explicitly and preserve required authority until dependent cleanup is reconciled.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Compensation order must satisfy current cleanup dependencies.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "The correct order can differ from both forward order and simple reversal.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-06", "research_basis": "R", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Local undo leaves downstream consequences", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Delay release until prerequisites hold; after exposure, record known reach and authorized corrective communication.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A compensation claim cannot extend beyond the effects it actually neutralized.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "No local mutation can guarantee that every external observer forgets or reverses its response.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-07", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Declared inverse has different business semantics", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Define whether reversal removes, disables, refunds, releases or merely annotates; verify the applicable postcondition.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Compensation success must be measured against its stated business postcondition.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "Exact historical equivalence is often neither achievable nor required.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-08", "research_basis": "D", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Compensation window has closed", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Track reversal deadlines and prioritize bounded cleanup; use forward correction when timely reversal is no longer permitted.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recovery plans must preserve time-dependent reversibility assumptions.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "Fees or other residue must be disclosed and authorized rather than hidden as successful rollback.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-09", "research_basis": "D", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Partial forward execution compensated at full quantity", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Use per-item effect records and target identities; calculate reversal quantity from confirmed contributions.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Compensation must bind to verified applied sub-effects, not planned totals.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "Unobserved partial state remains unresolved rather than guessed.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-10", "research_basis": "D", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Correction silently rewrites historical evidence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Add a linked superseding correction and current-state observation under retention policy; keep distinctions between original and revised claims.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A correction must not falsify the historical effect or its evidence.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "Privacy deletion can legitimately remove data; it should not masquerade as proof the old event never happened.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CP-11", "research_basis": "E", "effect_outcomes": [ "EFFECT", "CONTINUATION" ], "mechanism_title": "Recovery retries endlessly after reversibility is lost", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter.", "required_boundary_capability": "Classify failure under the provider contract; select authorized forward repair or a clearly owned unresolved outcome when reversal is unavailable.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recovery must react to capability changes and make bounded, outcome-directed progress.", "boundary_statement": "Versioned synthetic counter inverse. Other business inverses and remote cancellation require a target-specific adapter." }, "residual_limit": "A human is needed only for an irreducible decision or authority gap, not as the default retry engine.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-01", "research_basis": "R", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Unordered noncommuting external mutations", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use target transactions, serialized release, conditional versions or a mediator with real enforcement.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Noncommuting operations must preserve the required resource-level order.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "Single reasoning execution does not remove concurrency from other users or provider services.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-02", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Lost update from full-record overwrite", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use compare-and-swap, ETags or field-scoped updates with conflict-aware recomputation.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A mutation must be conditional on the state and fields it is permitted to replace.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "A version conflict is not necessarily a terminal business impossibility.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-03", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Write skew across separately updated records", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use serializable transactions, predicate constraints or an explicit invariant-owning coordinator.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Cross-record invariants require coordination even without same-row write conflicts.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "Per-row optimistic locks alone do not prevent write skew.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-04", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Dirty read feeds an irreversible effect", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Read under a suitable isolation contract or await a committed event carrying authoritative identity.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Irreversible decisions must not depend on uncommitted prerequisites.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "A later rollback cannot retract an already-observed notice.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-05", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Nonrepeatable read changes a decision mid-calculation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use snapshot reads or explicit version comparison and recompute when required.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A multi-read calculation must use a coherent snapshot or account for version changes.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "Not every task needs snapshot isolation; the consistency requirement belongs to its predicate.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-06", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Fractured multi-object read", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use an appropriate snapshot/transaction or target-provided aggregate with documented consistency.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A cross-object assertion needs a compatible observation cut.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "Timestamps from unrelated systems do not necessarily identify a common snapshot.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-07", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Phantom membership defeats cohort completion", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use snapshot membership, stable cursor semantics or an explicit admission watermark and reconciliation census.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Completion requires a declared cohort boundary and coverage of its members.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "Dynamic workflows can be complete only relative to a stated membership/closure rule.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-08", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "ABA resource reuse defeats a stale precondition", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Carry immutable resource UID/generation or a monotonic version through the mutation.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Preconditions must bind to generation, not only recurring names or values.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "An equality check on reusable identifiers is not a generation fence.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-09", "research_basis": "R", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Lease expires while a paused holder still runs", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use increasing fencing epochs checked at the actual write boundary, plus safe renewal and ownership transfer.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A stale lease holder must not mutate after a valid successor owns the resource.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "A timer in the stale process cannot enforce fencing on the target.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-10", "research_basis": "D", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Fence checked only before an uncontrollable remote queue", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use target-enforced epochs or a quiescence/reconciliation protocol; preserve unresolved old attempts through succession.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Revocation/fencing guarantees must account for admitted in-flight external work.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "Local fencing prevents new admission, not time travel over old remote admission.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-11", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Split ownership caused by non-atomic handoff", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use atomic ownership/epoch updates with target enforcement; distinguish state copy from authority transfer.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Ownership transfer must preserve one valid effect owner at every admitted transition.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "Even atomic ownership metadata needs downstream enforcement.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-12", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Deadlock in resource acquisition", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use consistent acquisition order, bounded leases, deadlock detection and safe victim recovery.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Admitted lock/wait dependencies must not form an unresolvable cycle.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "Breaking a lock without fencing its old holder can create corruption.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-13", "research_basis": "E", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Hotspot starvation under repeated conflict retries", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use backoff, bounded conflict loops, queued serialization or priority aging where authorized.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Liveness requires a scheduling/coordination assumption, not only valid retry code.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "Arbitrary hostile or permanent contention defeats unconditional completion claims.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-14", "research_basis": "D", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Mathematical commutativity mistaken for invariant safety", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Use atomic bound checks, reservations or escrow rights whose sum respects the global limit.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Commutativity of arithmetic does not imply preservation of state-dependent business constraints.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "A generic commutativity annotation cannot replace the specific invariant proof.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-01", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Checkpoint acknowledged before durable persistence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Use correctly configured transactional persistence and the required flush/replication boundary; verify recovery behavior.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Acknowledgment strength must match the declared durability contract.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "An application cannot overcome storage that violates its assumed contract merely by hashing data.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-02", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Torn multi-file checkpoint", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Write immutable components and atomically publish a manifest only after they are durable; validate referenced identities on restore.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A published checkpoint must identify a consistent set of component versions.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "Atomic manifest publication depends on the actual filesystem/store semantics.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-03", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Stale backup resurrects already performed work", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Inert snapshot import restores no runnable grants or effects.", "required_boundary_capability": "Record recovery epoch and recovery point; reconcile external occurrences before dispatching restored pending work.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_continuity.ContinuityTests.test_import_cannot_restore_revoked_grant_or_replay", "path": "tests/test_continuity.py", "sha256": "5d170cd8743d960dfbd0cd9aa4b053a06a4e04401b78af03d7f237405c50068e" } ], "analysis": { "invariant_reviewed": "Restore must preserve uncertainty about effects outside the restored consistency boundary.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "Backup success alone cannot provide an atomic rollback of other providers.", "release_claim": "Inert snapshot import restores no runnable grants or effects. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-DS-04", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Missing history segment prevents trustworthy replay", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Validate sequence continuity and snapshot/log linkage; stop only dependent replay and recover the missing segment where possible.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Replay completeness requires a contiguous, validated history for the claimed interval.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "A partial archive cannot prove that omitted events never happened.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-05", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Database and journal belong to different recovery generations", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Use the database's supported backup/recovery interface and record manifest identities for paired artifacts.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recovery artifacts must be a consistent, identity-bound set.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "Generic file copying of an active database is not automatically a consistent backup.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-06", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Evidence garbage-collected while still load-bearing", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Track reference ownership and retention classes; prevent unsafe collection or mark the resulting evidence limitation explicitly.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Retention of a claim requires an appropriate evidence policy or explicit downgrade of verifiability.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "Privacy obligations may require removal; do not promise indefinite evidence retention.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-07", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Lost encryption key makes durable state unusable", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Use managed key lifecycle and tested recovery access; keep keys out of ordinary task checkpoints.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recovery depends on governed access to both stored data and required keys.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "Key recovery must not bypass current access restrictions.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-08", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Silent storage corruption changes canonical facts", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Use checksums, validated transactional storage, independent backups and corruption-aware recovery.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Authoritative records must remain integrity-checked within the declared fault model.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "Checksums detect some corruption; they neither repair all corruption nor prove recorded claims were true.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-09", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Checkpoint written to ephemeral or unintended storage", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Bind and verify the storage backend/mount and retention contract; perform restore/readback checks from the successor context.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "The persistence destination must satisfy the intended recovery scope.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "Process durability, host durability and region durability are different claims.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-10", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Storage exhaustion silently drops progress", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Surface durable-write failures independently; fence conflicting writes and recover storage within the existing authority.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Failed canonical persistence cannot be converted into a successful state transition.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "Preserve already admitted external attempts as unresolved; never restart them as new work.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-11", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Healthy backup job hides an unusable restore", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Perform bounded restore verification against representative state and required dependencies; record actual coverage.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recoverability is a property of a validated restore path, not just a copy job.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "A restore test is scoped evidence, not a guarantee against all disaster combinations.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-DS-12", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "History rollback is not detected by local hash checks", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service.", "required_boundary_capability": "Bind checkpoints to monotonic accepted epochs or trusted external anchors; compare against current authoritative references.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Integrity and freshness/continuity are separate properties.", "boundary_statement": "SQLite journals, immutable exports and bounded database pages. No storage-loss prevention or automatic paired backup service." }, "residual_limit": "A fully isolated restored node cannot infer an unseen newer history from old valid bytes alone.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-01", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Nondeterministic reasoning repeated during control replay", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Persist accepted model decisions as typed results; separate decision replay from newly authorized replanning.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Control replay must reuse recorded nondeterministic outcomes where history requires them.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "A fixed temperature does not establish deterministic external behavior.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-02", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Replay re-reads a mutable external observation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Record decision-relevant observations and their versions; perform explicit refresh/replanning as a new transition.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Replay must distinguish historical inputs from fresh observations used for new decisions.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "Freshness may require a new check before a new effect, but that does not rewrite historical input.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-03", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Side effect placed inside replayed control code", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Keep effectful work in the runtime's supported activity/effect interface and preserve its occurrence record.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "External effects require a boundary with durable attempt/result identity.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "Activity retries still need target-specific idempotency or outcome reconciliation.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-04", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Workflow code upgrade breaks event-history compatibility", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Use supported workflow versioning, migration or compatible worker routing; test representative historical replays.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Replay compatibility must hold for the actual history version being resumed.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "A new model alone cannot reconcile an incompatible command history.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-05", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Positional step IDs attach old results to new work", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Use stable semantic step IDs and versioned input bindings; reject ambiguous result reuse.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Logical step identity must survive compatible edits or be explicitly migrated.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "Renaming or splitting a step can require explicit migration, not automatic renumbering.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-06", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Checkpoint schema migration drops a load-bearing field", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Version schemas, validate migrations and reject silent loss of authority, uncertainty or effect records.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "State migration must preserve or explicitly reconcile every load-bearing field.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "Structured storage is not automatically lossless; migration code also needs verification.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-07", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Serialized live handles cannot survive replacement", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Persist reconstructible descriptors and re-open resources under current authority; validate identity after reopening.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recoverable state must use stable resource descriptors, not ambient process identities.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "Some live sessions cannot be recreated; their operations need explicit reconciliation.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-08", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Model substitution violates an assumed capability contract", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Validate structured outputs, capability compatibility and task fitness; keep effect gates independent of model style.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Safety-critical properties must be enforced at stable interfaces, not inferred from model temperament.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "A replacement model may be less capable; safe rejection does not establish equal task performance.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-09", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Initialization reruns destructively on resume", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Use explicit initialization markers and non-destructive resume paths that inspect canonical state first.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Worker initialization must distinguish new work from continuation of existing lineage.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "Markers require the same durable identity discipline as other state.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-10", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Continuation rollover omits an unfinished obligation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Validate carry-forward completeness against the pre-rollover obligation census; include uncertainty and pending triggers.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Every unresolved obligation must survive rollover with its identity and disposition.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "A compact checkpoint can be sufficient, but only if its omitted data is genuinely non-load-bearing.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-11", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Cancellation assumes finally blocks completed cleanup", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Persist cleanup/residue obligations before exposure and let the surviving runtime reconcile them.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Correctness must not depend on a terminated process running more code.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "Cleanup itself remains subject to authority, concurrency and outcome uncertainty.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-RP-12", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "EFFECT" ], "mechanism_title": "Model/tool version omitted from reproducibility evidence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented.", "required_boundary_capability": "Record model/tool/schema/configuration identities and necessary observations without requiring private reasoning transcripts.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Reproduction claims need the relevant versioned inputs and execution context.", "boundary_statement": "Same-workspace restart and inert import. Unsupported schemas fail; arbitrary migrations and live-handle restoration are not implemented." }, "residual_limit": "Version recording improves attribution but does not force a stochastic model to reproduce identical tokens.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-01", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Task admitted without an authentic originating obligation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Validate task-parent linkage and admission status; quarantine unbound items while preserving evidence.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Every admitted task needs a valid origin and currently applicable authority.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "A plausible narrative cannot repair missing authority.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-02", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Checkpoint retains status but loses the justification boundary", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Persist necessary decision premises, authority references and invalidation conditions in structured lineage.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A continuation record must preserve the conditions needed to interpret its state safely.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "This does not require storing every private reasoning token.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-03", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Narrative summary replaces enumerated work state", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Use summaries as navigation aids; resolve load-bearing facts from structured state and authoritative evidence.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Summaries cannot substitute for authoritative constraints, effect records and unresolved items.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "Structured records can also be wrong; their provenance and consistency still matter.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-04", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Result exists but governing parent never adopts it", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Local finalization requires parent adoption, separately from export.", "required_boundary_capability": "Persist a lineage-bound result and idempotent adoption obligation; reconcile parent acceptance without repeating the preserved effect.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_finalization.Finalization.test_export_alone_cannot_finalize", "path": "tests/test_finalization.py", "sha256": "f5e5e586ded25142a4ceec236bbce69150fcf4b69d22fd494201811eca90eb8b" } ], "analysis": { "invariant_reviewed": "Verified child delivery and parent adoption are distinct accountable transitions.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "This is a research-level composition, not a claim about current Camden implementation.", "release_claim": "Local finalization requires parent adoption, separately from export. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-LN-05", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Result attached to the wrong parent or revision", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Validate the complete result binding against the parent's current accepted contract before adoption.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Adoption must bind request, revision, work identity, target and effect scope.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "Correct signatures do not repair a wrong lineage match.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-06", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Parent aggregate remains stale after valid child adoption", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Use transactional aggregate updates or a durable recomputation obligation with version checks.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Parent completion must be derived from the current accepted obligation set.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "Do not rerun the child effect to make the parent counter look better.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-07", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Repair completes but original mission is not resumed", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Link repair outcomes to the original task and retain a durable resume transition after adoption.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Repair success must preserve and resume the original unresolved objective when permitted.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "A new irreducible authority or feasibility change can legitimately prevent continuation.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-08", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Repair fork loses existing effect identities", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Carry original lineage through repair, or explicitly link a successor task to preserved effects before any dispatch.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recovery must preserve accepted effects and unresolved occurrence identities.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "A new implementation revision is not a new business occurrence.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-09", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Uncertainty omitted from handoff", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Carry explicit unknown outcomes, attempted payloads, operation IDs and permitted reconciliation paths.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Unresolved effects and conflict fences are first-class continuation state.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "Unknown can remain legitimate indefinitely when the interface offers no resolution.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-10", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Superseded task plan resurrected by delayed recovery", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Bind wakes/results to revision and re-evaluate supersession before resuming; retain old effects as history.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Continuation must validate the currently applicable task revision and disposition.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "Not every policy revision invalidates all old work; compatible continuation can remain authorized.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-11", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Obligation is marked terminal while a required dependency remains open", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Define and reconcile the outcome/dependency census; distinguish optional follow-up from required completion work.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Terminal success must cover every required current dependency, not the most visible artifact.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "Dynamic task graphs need explicit membership and closure rules.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-12", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Successor cannot discover where authoritative state resides", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Persist stable canonical locators and access descriptors; resolve them mechanically during resume.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Continuity requires discoverable, authorized state access, not storage alone.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "A locator is not a credential and must not bypass access control.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-13", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Work record and correction lineage diverge", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Track supersession/dependency links and re-evaluate affected unfinished work.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Accepted corrections must update or invalidate dependent current claims without falsifying history.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "Corrections may create new obligations; they do not automatically erase past effects.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LN-14", "research_basis": "D", "effect_outcomes": [ "LINEAGE", "CONTINUATION" ], "mechanism_title": "Mechanical continuation outsourced to the operator", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present.", "required_boundary_capability": "Provide durable internal result routing, ownership and reconciliation; separate genuine business decisions from mechanical transport.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Derivable in-scope transitions require a system-owned consumer or an explicitly disclosed boundary.", "boundary_statement": "Work rows, dependencies, parent adoption and frozen results. No agent tree or hosted executor dispatch is present." }, "residual_limit": "This is an evaluation criterion for the supplied Camden intent, not evidence a live repair is needed.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-01", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Related action inherits an ungranted effect class", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Enforce task-scoped action classes, targets and budgets at the effect boundary.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "An effect must be inside the actual admitted authority envelope.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "A sufficiently broad existing grant can authorize derived steps without another prompt; do not require redundant approval.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-02", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Cached authority survives revocation", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Current revoked grant blocks the future local effect.", "required_boundary_capability": "Use revocable capabilities, current policy checks or appropriately bounded leases at enforcement points.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_core.CoreTests.test_revocation", "path": "tests/test_core.py", "sha256": "c608e2926ada4d274fb7637911aaef11dd090b03604b403ab3fbfc2990551145" } ], "analysis": { "invariant_reviewed": "New effect admission must respect current applicable revocation rules.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "Already admitted remote operations require separate cancellation/reconciliation accounting.", "release_claim": "Current revoked grant blocks the future local effect. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-AU-03", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Successor inherits unnecessary high-privilege credentials", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Re-establish least-privilege access through controlled handles; exclude secrets from ordinary checkpoints.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Successor privileges must be derived from current scope, not inherited by convenience.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "Worker identity matters operationally, but privilege is ultimately constrained by the delegated task and policy.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-04", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Provider credentials mistaken for business permission", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Intersect provider capability with the current task envelope and organization policy at dispatch.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Provider access is necessary but not sufficient evidence of business authority.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "A provider cannot infer every constraint expressed by the delegating operator.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-05", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Approval attached to a mutable target pointer", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Bind immutable artifact identity, relevant parameters and environment; revalidate at release.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Approvals must bind the identity of the actual object or explicitly authorize a moving target.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "Some intents intentionally track a branch; that broader authority must be explicit.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-06", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Approval replayed for a different occurrence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Bind approval to canonical effect envelope, principal, scope and expiry; enforce one-use where required.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Approval scope and reuse semantics must match the authorized occurrence.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "Reusable standing grants are valid when explicitly designed as such.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-07", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Approval caption conceals the real effect", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Generate structured approval details from the canonical operation, with understandable scope, reversibility and target information.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Approval must expose the consequential effect envelope faithfully.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "Showing raw syntax alone may also be unintelligible; clear semantics and exact identity both matter.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-08", "research_basis": "D", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Small actions evade an aggregate authority limit", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Admission reserves the grant effect budget.", "required_boundary_capability": "Reserve and charge cumulative budgets atomically across related occurrences and pending liabilities.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_core.CoreTests.test_aggregate_reservation", "path": "tests/test_core.py", "sha256": "c608e2926ada4d274fb7637911aaef11dd090b03604b403ab3fbfc2990551145" } ], "analysis": { "invariant_reviewed": "Authority limits must apply at the intended aggregate scope.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "Per-call checks remain useful but do not replace task-level accounting.", "release_claim": "Admission reserves the grant effect budget. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-AU-09", "research_basis": "D", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Conflicting policy sources resolved by recency of text", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Resolve policy through an explicit authority hierarchy and retain genuine conflicts for authorized resolution.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Policy precedence follows authenticated source, scope and revision, not conversational order.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "A current authenticated policy change can supersede older rules; the hierarchy must permit legitimate correction.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-10", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Capability broadening during automated recovery", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Use lawful alternative tools within the existing envelope; isolate new privilege requests as irreducible authority decisions.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recovery cannot enlarge authority merely because the ordinary path failed.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "A denied call can be a configuration fault, but diagnosis is not permission to bypass policy.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-11", "research_basis": "D", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Future scheduled effect uses obsolete approval context", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Bind immutable content where required and revalidate dynamic eligibility, revocation and budget conditions at fire time.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Deferred effects must re-evaluate the conditions their grant requires at execution time.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "Do not silently modify approved content or extend the audience while refreshing eligibility.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-AU-12", "research_basis": "D", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Overbroad revocation blocks unrelated authorized work", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Revoking one grant does not block unrelated granted local work.", "required_boundary_capability": "Track capability dependencies per task/effect; fence affected lanes and continue independent admissible work.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_continuity.ContinuityTests.test_revocation_does_not_block_other_grant", "path": "tests/test_continuity.py", "sha256": "5d170cd8743d960dfbd0cd9aa4b053a06a4e04401b78af03d7f237405c50068e" } ], "analysis": { "invariant_reviewed": "Revocation must be effective in its scope without inventing a broader prohibition.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "A genuine global stop must still stop all work covered by it.", "release_claim": "Revoking one grant does not block unrelated granted local work. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-AU-14", "research_basis": "D", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Operator correction cannot amend the governing objective", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service.", "required_boundary_capability": "Version objectives and grants; retain historical intent while adopting the current authorized revision.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Durable history must coexist with authenticated supersession and effective stopping.", "boundary_statement": "Trusted local operator grants, expiry, revocation and budgets. No external identity provider or remote approval service." }, "residual_limit": "Current institutional or platform constraints still apply; operator revision is not permission to bypass them.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-01", "research_basis": "R", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Correct operation bound to the wrong environment", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Resolve and validate environment, account and endpoint identity before admission; enforce separate capabilities.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "The effect envelope must identify the actual environment and account.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "A label such as staging is not sufficient proof of the connection's destination.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-02", "research_basis": "E", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Cross-tenant resource identifier collision", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Bind tenant, resource type and stable identifier throughout admission, transport and verification.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Entity identity includes the namespace that makes it unique.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "Opaque IDs alone do not automatically encode the relevant tenancy.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-03", "research_basis": "R", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Wrong recipient selected by ambiguous display name", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Use verified contact attributes and stable destination IDs; resolve irreducible ambiguity before sending.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recipient identity must be resolved to the authorized destination, not just similar text.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "Do not ask the operator when existing authorized records already resolve the ambiguity.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-04", "research_basis": "E", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Read identity changes through redirects or aliases", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Validate redirects and resolved destinations; preserve canonical target identity in effect and observation records.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Scope checks must cover effective targets, not only the first identifier.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "DNS and resource bindings can change again; enforcement must account for actual connection use.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-05", "research_basis": "R", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Units or numerical scale silently change", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Use typed units and explicit conversions with bounded arithmetic and field-level postconditions.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Quantity identity includes unit, scale and rounding contract.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "Canonical JSON cannot establish that the unit interpretation is correct.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-06", "research_basis": "E", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Locale-dependent value interpreted under another locale", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Require locale and format metadata; reject ambiguous conversion rather than guessing.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Interpretation must preserve the source's declared representation semantics.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "A format change can be a versioned contract change, not merely an invalid input.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-07", "research_basis": "R", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Relative filesystem path resolves in the wrong workspace", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Resolve against a scoped workspace handle; verify canonical path and preimage identity.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "File effects must bind the intended workspace and object.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "Path checks must also address symlink and mount changes before mutation.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-08", "research_basis": "E", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Verified artifact differs from released artifact", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Carry immutable build identity through packaging, approval, release and served-state checks.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Verification and release must identify the same artifact and deployment scope.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "Matching bytes still does not prove the acceptance specification was complete.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-09", "research_basis": "D", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Source citation points to the wrong version or passage", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Retain source identity and inspected range; check entailment and relevant qualifications.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Claim support requires source, version, passage and semantic alignment.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "A valid URL or a document hash proves neither relevance nor truth.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-BI-10", "research_basis": "R", "effect_outcomes": [ "BINDING", "EFFECT" ], "mechanism_title": "Role or tool alias shadows a trusted binding", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters.", "required_boundary_capability": "Namespace tools by server identity, pin allowed bindings and validate changes before use.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A tool binding includes authenticated server and implementation contract, not name alone.", "boundary_statement": "Exact local tenant, target, payload and occurrence checks. Entity-name resolution, physical units and external audiences need separate adapters." }, "residual_limit": "Pinning metadata narrows identity risk but does not prove implementation behavior.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-01", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Vocabulary accepted instead of evidence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Bind checks to task-specific observations and artifacts; keep claims separate from evidence records.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A completion predicate must test its actual evidence, not assertive vocabulary.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "Some semantic acceptance criteria require calibrated judgment, not just binary string or exit-code checks.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-02", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Executor claim laundered through a second reader", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Use independently obtained target observations or independently checkable evidence with a declared trust model.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Independence must concern evidence and failure paths, not merely the number of models.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "A separate LLM is neither necessary nor sufficient; a deterministic reader can also share the same blind spot.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-03", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Acceptance predicate omits a required constraint", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Trace each requirement to an observable predicate and explicitly identify untestable or judgment-based conditions.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Acceptance must retain the operator's material constraints.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "A comprehensive-looking test list can still omit an unknown requirement.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-04", "research_basis": "E", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Valid signature treated as proof of semantic truth", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Validate issuer authority, assertion semantics, scope, freshness and corroborating evidence where required.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Integrity and issuer identity must not be promoted beyond their actual evidentiary scope.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "Cryptography cannot make a dishonest or mistaken authorized issuer omniscient.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-05", "research_basis": "E", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Historical evidence used as current-state proof", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "Export rechecks target visibility instead of relying on cached verification.", "required_boundary_capability": "Bind observations to versions or times and revalidate mutable prerequisites when required.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_effect_preconditions.EffectPreconditions.test_export_cannot_call_stale_cached_verification_complete", "path": "tests/test_effect_preconditions.py", "sha256": "a1de55b09a575d2f4f8329f98706330c75a786bbb5974c67801a87c87bcd0ea6" } ], "analysis": { "invariant_reviewed": "Evidence freshness must fit the decision and possible intervening changes.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "Continuous-state guarantees require continuing observation or target enforcement, not one old receipt.", "release_claim": "Export rechecks target visibility instead of relying on cached verification. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-VR-06", "research_basis": "E", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Receipt replayed across tasks or subjects", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Verify task lineage, effect occurrence, target and relevant payload identity with the receipt.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Evidence must bind to the precise assertion being discharged.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "A timestamp alone does not establish subject binding.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-07", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Evidence contradicts itself but is silently collapsed", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Record both observations and apply source precedence, causal ordering or an authorized decision rule.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Conflicting authoritative observations must remain explicit until legitimately resolved.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "Majority agreement or simple averaging is not a universal conflict resolver.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-08", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Partial ingestion represented as exhaustive inspection", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Track page, byte or item coverage; retrieve missing ranges or use an appropriate independent analyzer.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Inspection claims must match actual coverage and version identity.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "A full-file hash binds bytes but does not prove anyone inspected all of them.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-09", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Matching counts hide mismatched identities", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Compare stable key sets and task-relevant field predicates or suitable canonical digests.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Completeness requires the relevant set and content relationship, not just cardinality.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "Exact byte equality is not necessary where an authorized transformation intentionally changes representation.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-10", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "No-call narrative implies an external action", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Derive action status from admitted attempts and observed outcomes; distinguish proposed, started and completed.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Claims of action must be grounded in actual operation evidence.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "A narrative can legitimately describe planned work when clearly labeled as such.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-11", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Error transformed into plausible success prose", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Keep structured operation outcomes independently available to status and verification paths; allow prose only as qualified explanation.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Reporting must preserve material failure and uncertainty states.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "Raw status codes still require correct provider-specific interpretation.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-12", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Verifier execution failure treated as a pass", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Represent pass, fail, unknown and verifier error distinctly; fence dependent effects while repairing the checker.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A required verifier's absence is not a passed predicate.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "Independent permitted work need not be globally stopped by one failed verifier.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-13", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Positive result cached under an incomplete key", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Bind cache keys to artifact, predicate, relevant environment and dependency identities.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A cached verdict is valid only for its complete asserted inputs and assumptions.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "Overly broad invalidation harms efficiency, but under-binding creates false assurance.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-14", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Completion inferred from an unfinished denominator", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "A later admitted obligation invalidates a previous frozen result scope.", "required_boundary_capability": "Use snapshots, watermarks, complete pagination or explicit completion conditions suited to the source.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_finalization.Finalization.test_new_obligation_invalidates_frozen_result", "path": "tests/test_finalization.py", "sha256": "f5e5e586ded25142a4ceec236bbce69150fcf4b69d22fd494201811eca90eb8b" } ], "analysis": { "invariant_reviewed": "Completion needs a justified coverage boundary or dynamic closure rule.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "Not all tasks can enumerate their final denominator before execution; do not impose a fictitious fixed set.", "release_claim": "A later admitted obligation invalidates a previous frozen result scope. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-VR-15", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Agreement counted as independent corroboration", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Track provenance graphs and shared dependencies; seek genuinely independent evidence where the claim requires it.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Corroboration depends on evidence independence and source quality.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "The cited broadcast study has domain-specific, nonreplicating results; no universal numerical penalty is claimed.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-VR-16", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Search absence promoted to universal nonexistence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier.", "required_boundary_capability": "Report query scope, access and retrieval limits; distinguish no match from a proved exhaustive absence.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Negative claims must be bounded by known search coverage.", "boundary_statement": "Independent local target-row checks and current report scope. Arbitrary semantic truth is not decided by this verifier." }, "residual_limit": "This applies to this research catalog itself; its finite coverage is not a proof of universal completeness.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-01", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Required stored fact is never retrieved", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Make relevant constraint retrieval part of the decision contract and validate its freshness.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Required decision inputs must be obtained through the appropriate current source.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "Not every task needs all historical memory; mandatory broad retrieval creates noise and privacy risks.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-02", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Retrieved constraint is ignored in the decision", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Bind consequential constraints to explicit checks; diagnose reasoning failure separately from retrieval failure.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A required retrieved constraint must influence the relevant acceptance predicate.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "A checker can assess only the constraints it actually includes.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-03", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Coexisting facts incorrectly treated as replacements", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Use entity, scope and validity-aware records; distinguish addition, correction and replacement.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Distinct scoped facts must coexist unless a real supersession relation exists.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "Semantic similarity alone cannot decide whether two facts conflict.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-04", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Correction rejected as a duplicate", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Compare scoped values and revision authority; record explicit supersession.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Material state changes must not be suppressed by similarity-based deduplication.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "The correction itself must come from an authorized source.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-05", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Conditional fact loses its applicability clause", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Store scope, rationale and invalidation conditions with actionable memories.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Memory must preserve conditions material to applying a conclusion.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "Natural-language summaries remain useful hints but cannot silently erase binding conditions.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-06", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Near-match retrieval binds another entity's fact", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Combine entity filters with semantic search and validate evidence bindings.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Retrieved facts must match the intended subject and scope.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "A more fluent retrieved passage can still be about the wrong person.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-07", "research_basis": "E", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Index migration silently changes recall", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Version index/model/chunking configuration; retain recall tests and deterministic filters where appropriate.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Index changes require retrieval-quality and provenance validation for critical queries.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "Finite recall tests do not prove every future query is covered.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-09", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Unbounded noise overwhelms useful retrieval", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Separate raw audit storage from curated operational memory; deduplicate and measure retrieval quality.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Durable memory must preserve retrievability of task-relevant evidence.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "Pruning must not destroy evidence still required for recovery or retention obligations.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-11", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Long context weakens effective instruction adherence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Enforce scope mechanically and refresh concise current constraints from authoritative state.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Critical restrictions cannot depend solely on attention to old text.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "No prompt-placement technique is claimed to provide a universal security boundary.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-12", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Personal memory silently steers consequential tool parameters", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Declare permissible memory-derived slots; validate policy-bound parameters and retain their provenance.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Memory influence must be relevant, scoped and subordinate to current authority.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "The source reports benchmark behavior, not inevitability for every memory architecture.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-13", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Memory-enabled trajectory degrades safety over time", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Evaluate memory writes, retrieval and downstream behavior across sequences; retain corrections and scoped provenance.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Memory-enabled systems require longitudinal, not only snapshot, evaluation.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "The abstract supports longitudinal risk, not every specific compression-laundering mechanism in the supplied draft.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-14", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Correct retrieval followed by faulty reasoning", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Test conditional inference and task predicates independently of retrieval; preserve supporting passages for review.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Evidence acquisition and evidence use are separate correctness obligations.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "Improving memory cannot by itself eliminate arithmetic or logical inference errors.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-01", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Necessary prerequisite omitted from the plan", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Use domain contracts, precondition checks and dependency-aware planning with evidence.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Required dependencies must be satisfied or explicitly unresolved before dependent effects.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "A generated dependency graph is itself a claim and can omit domain requirements.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-02", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Dependent operations planned in the wrong order", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Represent and enforce required dependencies; allow parallelism only where justified.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Planning must preserve the causal order of noncommuting dependent work.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "For Camden this can be serial root planning with asynchronous tools, not multiple reasoning workers.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-03", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Plan requests an unsupported target capability", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Check required capabilities and alternative lawful paths; surface irreducible limitations explicitly.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Plan feasibility must be grounded in actual tool contracts before irreversible commitment.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "The interface may impose a real impossibility boundary, not a prompt-writing defect.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-04", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Action contradicts the declared decision", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Validate relevant preconditions at admission and bind calls to the current decision/task record.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Actions must satisfy their operative preconditions, independently of the model's prose.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "Hidden chain-of-thought is not required; a concise decision record and observed predicate suffice.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-05", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Repair procedure replaces the business objective", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Keep the outcome predicate and residual obligations explicit; assess actual mission progress separately.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Repair activity must remain causally connected to the authorized business result.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "Some infrastructure repairs are necessary; evidence, not a ban on internal work, determines relevance.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-06", "research_basis": "D", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Perfect safety metric achieved by doing no useful work", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Measure legitimate completion and forbidden-action prevention separately within realistic budgets.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Safety and useful liveness are distinct joint requirements under stated prerequisites.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "Safety may genuinely require holding a specific unknown effect; independent work can still remain admissible.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-07", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Local success substitutes for complete task coverage", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Track task units or justified dynamic closure; keep partial findings distinct from completion.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Termination must satisfy the actual coverage and outcome conditions.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "A task can legitimately request a sample, but the sample must not be represented as exhaustive.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-08", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Later subgoal displaces the original intent", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Compare planned effects with the current root objective and scope; preserve valid changes of direction explicitly.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Current work must remain bound to the admitted objective or an authenticated revision.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "Not every new subtask is drift; many are necessary means within the original grant.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-09", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Domain rule or factual premise is wrong", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Obtain authoritative domain inputs, separate assumptions from verified facts and validate material rules.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Consequential decisions must use sufficiently grounded current premises.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "A harness cannot infer every unexpressed domain rule from tool schemas alone.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-10", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Arithmetic or logical inference corrupts valid inputs", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Use explicit formulas, typed quantities, checked computation and independent invariants where practical.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Transformations must preserve the intended mathematical and domain relation.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "A calculator correctly evaluates the wrong formula; specification remains load-bearing.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-11", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Uncertainty guessed despite resolvable missing evidence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Use targeted reads first; ask only for genuinely unavailable or irreducible choices.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Material uncertainty should be resolved by available authorized evidence before consequential action.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "Confidence is not a substitute for identity evidence, and needless questions also harm liveness.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-12", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Useful peer evidence withheld or discarded", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Use typed handoff contracts and evidence references; record accept, reject or defer with concise reasons.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Required inputs need delivery, binding and an explicit disposition.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "An untrusted peer recommendation is not an instruction and may correctly be rejected.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-01", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Nonterminal task loses its execution consumer", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Use leases, independent monitoring and recovery ownership; reconcile effects before replacement acts.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Outstanding obligations require an owned and observable continuation path.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "A missed heartbeat indicates suspicion, not proof of death in an asynchronous system.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-02", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Heartbeat continues while the mission is stalled", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Track phase-specific progress, pending dependencies and bounded inactivity; diagnose without blind replay.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Process health and task progress must be observed separately.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "Long legitimate work may have sparse progress; thresholds need task-specific context.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-03", "research_basis": "D", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Wait registered without a functioning consumer", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Persist and verify wait registration with consumer identity, deadline and reconciliation path.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A wait needs a real trigger, consumer, correlation and recovery owner.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "A scheduled-looking record is not evidence the scheduler is servicing it.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-04", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Event arrives before its wait is durably registered", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Use a durable inbox or atomic register-and-check pattern; replay retained events against new waits.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Event receipt and wait registration must compose without a lost interval.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "Webhook delivery alone does not guarantee correct internal event retention.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-05", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Subscription cursor falls outside retained history", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Handle expired-history responses explicitly; perform list-and-watch or equivalent reconciled resynchronization.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recovery must detect gaps and rebuild from an authoritative snapshot with a new cursor.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "A snapshot reveals current state, not necessarily every transient historical effect.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-06", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Poison message blocks the queue indefinitely", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Quarantine with a durable owner and reason; continue nonconflicting items under a bounded recovery policy.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "One unrecoverable item must not block independent admissible work without justification.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "Some queues require strict causal order, so skipping requires explicit dependency analysis.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-07", "research_basis": "R", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Recovery repeats the same ineffective intervention", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Track attempts, outcomes and mission progress; choose supported alternatives and own an honest park when exhausted.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recovery requires evidence of changed conditions or bounded justified exploration.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "A budget limit does not automatically justify paging the operator for mechanically resolvable work.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-08", "research_basis": "R", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Recoverable conflict treated as permanent impossibility", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Re-read and recompute against current state under bounded conflict policy.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Transient concurrency failures must be distinguished from domain rejection.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "Never retry the same stale payload blindly or discard intervening authorized changes.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-09", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Required recovery controller shares the failed dependency", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Separate monitoring dependencies or provide external health checks and durable fallback ownership.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Critical failure detection needs an appropriate independent fault domain.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "Independence has cost and scope; it is not infinite redundancy against every fault.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-10", "research_basis": "D", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Dead-lettered work has no remaining owner", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Bind quarantined work to owner, reason, remaining effects and wake/review condition.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Quarantine changes location, not the existence of the obligation.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "Some work can be explicitly abandoned by an authorized policy, but that decision must be visible.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-11", "research_basis": "D", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Budget park loses the resume condition", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Record remaining work, budget state, owner and the actual resume trigger or irreducible decision.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A pause must retain what permits or prohibits future continuation.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "No automatic continuation is authorized when the operator expressly stopped the task.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-12", "research_basis": "D", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Long external wait monopolizes the only execution slot", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Persist the wait and release scheduling capacity; resume the same lineage when the event is available.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Exclusive reasoning ownership does not require monopolizing scheduling during an owned wait.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "This does not introduce concurrent reasoning roots; effect ownership and ordering remain enforced.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-14", "research_basis": "D", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Execution window expires while recovery continues", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Track deadlines and distinguish expired opportunity from failed mechanics; retain actual prior effects.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Continuation must re-evaluate time-sensitive admission conditions.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "Deadline expiry is not proof that an earlier in-flight operation did not occur.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-LV-15", "research_basis": "D", "effect_outcomes": [ "CONTINUATION", "OBJECTIVE" ], "mechanism_title": "Required human decision is never actually delivered", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row.", "required_boundary_capability": "Track decision-request identity, destination, delivery status and response binding.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A decision-dependent wait needs observable delivery and a return route.", "boundary_statement": "Explicit bounded foreground servicing. No scheduler or future wake is armed by a wait row." }, "residual_limit": "Receipt by a communication provider is not proof the human read or understood it.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TM-01", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Local clock string bound to the wrong timezone", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent.", "required_boundary_capability": "Resolve explicit instants with timezone context; retain the original civil-time intention when relevant.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Scheduling must preserve the intended timezone and occurrence semantics.", "boundary_statement": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent." }, "residual_limit": "A UTC offset for one date does not encode an entire recurring timezone rule.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TM-02", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Recurring schedule drifts across daylight-saving transitions", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent.", "required_boundary_capability": "Use timezone-aware recurrence semantics and preserve the chosen policy for nonexistent or repeated local times.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recurring civil time needs a declared timezone and gap/fold policy.", "boundary_statement": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent." }, "residual_limit": "Political timezone rule changes also require maintained timezone data.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TM-03", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Wall-clock adjustment corrupts elapsed timeout logic", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent.", "required_boundary_capability": "Use monotonic local timers and validated server-side lease semantics.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Elapsed deadlines require a suitable monotonic clock and explicit distributed-time assumptions.", "boundary_statement": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent." }, "residual_limit": "A local monotonic clock does not synchronize separate machines or survive every restart unchanged.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TM-04", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Clock skew invalidates distributed authority expiry", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent.", "required_boundary_capability": "Use authoritative expiry checks, bounded skew tolerance and revocation where required.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Time-based grants need bounded skew assumptions and enforcement semantics.", "boundary_statement": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent." }, "residual_limit": "Tolerance trades availability against exposure; it cannot remove arbitrary clock uncertainty.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TM-05", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Historical event replay triggers a current-time action", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent.", "required_boundary_capability": "Preserve event time, ingestion time, occurrence identity and replay status; recheck current predicates when needed.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Event age and causal identity must be checked against the action's relevance window.", "boundary_statement": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent." }, "residual_limit": "Some historical events still create real outstanding obligations; age alone is not a universal discard rule.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TM-06", "research_basis": "D", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Late event arrives after a window is declared complete", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent.", "required_boundary_capability": "Use source-supported watermarks, bounded-lateness assumptions or versioned corrections.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Temporal aggregation needs a justified closure and late-data policy.", "boundary_statement": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent." }, "residual_limit": "An unbounded asynchronous source cannot guarantee that silence proves no future late event.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TM-07", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Restart restores a stale timeout duration instead of its obligation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent.", "required_boundary_capability": "Persist the deadline and relevant clock basis; account explicitly for downtime and policy.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Timeout restoration must preserve the intended absolute or elapsed-time semantics.", "boundary_statement": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent." }, "residual_limit": "Some tasks intentionally pause their budget during suspension; encode that choice rather than assuming it.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-TM-08", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Resource expiry mistaken for nonexecution", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent.", "required_boundary_capability": "Retain operation history or lifecycle events and distinguish expired, deleted and never-created states.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Current existence and historical occurrence are different predicates.", "boundary_statement": "Persisted Unix deadlines depend on trusted wall time. Civil recurrence, distributed clock correction and DST scheduling are absent." }, "residual_limit": "Without historical evidence, the caller may have to retain uncertainty about past occurrence.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EC-01", "research_basis": "R", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Unbounded tool or reasoning loop exhausts resources", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller.", "required_boundary_capability": "Enforce measurable per-task and aggregate caps; preserve work and unresolved effects on park.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Resource use must remain within the actual admitted budget.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "A model's promise to be economical is not a budget enforcement mechanism.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EC-02", "research_basis": "E", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Nested retry layers multiply the number of attempts", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller.", "required_boundary_capability": "Choose a coordinating retry layer, propagate attempt context, use jitter and global budgets.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Retries require an end-to-end attempt and cost policy.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "Retries remain unsafe for ambiguous non-idempotent effects even when rate-limited.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EC-03", "research_basis": "D", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Accepted future liabilities are absent from budget accounting", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller.", "required_boundary_capability": "Reserve budget before commitment and reconcile actual usage, cancellation and ongoing liabilities.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Budgets must include the exposure defined by the authorization, not only settled charges.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "An external bill may arrive late; conservative reservation can reduce utilization but prevents overspend.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EC-04", "research_basis": "E", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Concurrent budget checks oversubscribe the same balance", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller.", "required_boundary_capability": "Use transactional reservations, leases or centralized budget mediation at the correct aggregate scope.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Shared resource limits need atomic reservation or equivalent coordination.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "Commuting charges still require preserving the shared total constraint.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EC-05", "research_basis": "R", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Unbounded response or retrieval exhausts context and memory", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/core.py", "scope_reason": "MCP request lines have a bounded size; this is not an LLM context guarantee.", "required_boundary_capability": "Enforce byte/token/page limits, streaming and explicit truncation; fetch targeted ranges.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_mcp.MCPTests.test_bad_json_and_oversize", "path": "tests/test_mcp.py", "sha256": "a13f9f79c6dbca9b6670bd6cd9358ba0248a8dd925d4c7e387b0a4b9ebc2c316" } ], "analysis": { "invariant_reviewed": "Untrusted or unexpected input size cannot consume unbounded resources.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "Truncation must never be hidden behind an exhaustive review claim.", "release_claim": "MCP request lines have a bounded size; this is not an LLM context guarantee. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-EC-06", "research_basis": "D", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Recovery budget consumes the capacity needed to preserve state", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller.", "required_boundary_capability": "Reserve bounded recovery and checkpoint capacity; preempt before hard exhaustion where supported.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A finite budget policy must reserve resources for required terminal accounting.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "Abrupt host failure may still occur; durable per-step records reduce dependence on final cleanup.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EC-07", "research_basis": "R", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Serving cache retention or eviction imposes unexpected overhead", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller.", "required_boundary_capability": "Use supported tool-progress signals and explicit serving policies; measure end-to-end cost.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Resource planning must account for serving state during external waits.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "The cited paper supports performance effects, not claims that eviction itself corrupts task identity.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EC-08", "research_basis": "R", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Agent or process spawning exceeds the admitted execution topology", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller.", "required_boundary_capability": "Enforce root-only or explicitly admitted topology, recursion and aggregate quotas outside model output.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Execution topology and spawning are governed resources, not model discretion.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "Independent external systems can still exist; this entry does not authorize a Camden swarm.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EC-09", "research_basis": "E", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Observability volume itself creates a service failure", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller.", "required_boundary_capability": "Apply structured sampling for noncritical detail, rate limits and protected retention for essential evidence.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Diagnostic work must have bounded resource use and preserve critical signals.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "Critical effect records should not be silently sampled away like verbose debug logs.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-01", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Initialization or capability negotiation is skipped", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Read-only MCP tools reject use before initialization.", "required_boundary_capability": "Enforce protocol states and capability checks; retain connector version and session identity.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_mcp.MCPTests.test_no_preinit_tool", "path": "tests/test_mcp.py", "sha256": "a13f9f79c6dbca9b6670bd6cd9358ba0248a8dd925d4c7e387b0a4b9ebc2c316" } ], "analysis": { "invariant_reviewed": "Protocol operations must respect initialization and negotiated capabilities.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Negotiation establishes compatibility claims, not authorization or truthful implementation.", "release_claim": "Read-only MCP tools reject use before initialization. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-PX-02", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Tool is implemented but not exposed to discovery", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Check discovery results against the intended registration and permissions; diagnose missing exposure before improvising.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Declared, registered, exposed and invokable states must be distinguished.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "An intentionally hidden tool must not be exposed merely to improve task completion.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-03", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Unsupported or hallucinated function name reaches dispatch", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Validate against the current scoped catalog; return typed discovery/validation failures.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Only admitted tool identities may be dispatched.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Grammar-constrained names do not guarantee the selected real tool is appropriate.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-04", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Malformed argument structure reaches the provider", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Unknown tool arguments are rejected before execution.", "required_boundary_capability": "Validate names, required fields, types and known value bounds before dispatch; bound repair attempts.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_mcp.MCPTests.test_unknown_argument", "path": "tests/test_mcp.py", "sha256": "a13f9f79c6dbca9b6670bd6cd9358ba0248a8dd925d4c7e387b0a4b9ebc2c316" } ], "analysis": { "invariant_reviewed": "Arguments must satisfy the current tool schema and semantic constraints.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Type correctness does not establish target identity, units, permission or business correctness.", "release_claim": "Unknown tool arguments are rejected before execution. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-PX-05", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Diagnostic stdout corrupts protocol framing", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "camden_work/mcp.py", "scope_reason": "A real stdio subprocess emits parseable protocol responses through two process lifetimes.", "required_boundary_capability": "Use the transport's prescribed logging channel and strict framing checks with explicit parse errors.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_mcp.MCPTests.test_actual_stdio_exchange_and_reconnect", "path": "tests/test_mcp.py", "sha256": "a13f9f79c6dbca9b6670bd6cd9358ba0248a8dd925d4c7e387b0a4b9ebc2c316" } ], "analysis": { "invariant_reviewed": "Protocol framing must be separated from diagnostics.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Recovering framing cannot establish whether a prior external effect already occurred.", "release_claim": "A real stdio subprocess emits parseable protocol responses through two process lifetimes. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-PX-06", "research_basis": "D", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Streaming partial arguments treated as a complete tool call", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Buffer and validate complete call frames; correlate streaming fragments to one call occurrence.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Execution requires a complete admitted operation, not an incremental generation prefix.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Buffered completion must still honor cancellation and current authority before dispatch.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-07", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Stream reconnect repeats already-consumed output or effects", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Use resumable event IDs, durable consumer offsets and idempotent downstream processing.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Stream arrival identity must be separated from event occurrence identity.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Transport replay protection does not make arbitrary external effects idempotent.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-08", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Stream termination interpreted as task success", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Inspect the protocol's task state and resume/status behavior; retain unresolved tasks after disconnect.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A transport terminal event is not necessarily a business-task terminal event.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "A protocol may provide a genuine terminal marker, but its exact semantics must be used.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-09", "research_basis": "E", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Request, notification and response roles are confused", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Validate IDs, message roles and expected transitions before updating task state.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Message kinds and correlation must follow the protocol state machine.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "A validly framed response can still contain a domain-level failure.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-10", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Session identifier reused as authorization", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Bind sessions to authenticated principals and intended scopes; validate each protected request.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Session continuity does not substitute for authentication and authorization.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Random unguessable IDs reduce guessing but are not a complete authorization design.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-11", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Catalog or schema cache survives a material interface change", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Pin or refresh negotiated schemas and validate changed bindings before consequential use.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Tool contracts require explicit versioning, invalidation and compatible evolution.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Live discovery is itself untrusted evidence about capability, not a permission grant.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-12", "research_basis": "D", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Discovery document advertised as an execution contract", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Validate real endpoints, protocol versions and granted scope before integration or trial.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Discovery, compatibility, authority and verified operation are distinct stages.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "The retrieved A2A page uses agent-card.json; neither that file nor llms.txt proves adoption or safety.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-01", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Retrieved content redirects privileged execution", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Use provenance-aware processing plus independently enforced capabilities, target restrictions and output controls.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Reading data cannot enlarge its author's authority over the task.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "Prompt labeling and detection reduce risk but do not establish universal injection immunity.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-02", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Tool descriptions manipulate unrelated tool use", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Treat metadata as untrusted, bind approved identities and enforce per-task tool scope outside the model.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A server may describe its own contract but cannot grant cross-tool authority.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "Signed malicious descriptions remain malicious; signing authenticates origin, not permission.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-03", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Rendered visual content carries adversarial instructions", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Restrict browser/action scope and preserve visual-source provenance; validate actions independently.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Visual observations have the same data/control separation requirement as text.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "Text absent from the rendered pixels cannot be read from those pixels; DOM-hidden and image-visible channels are different.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-04", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Durable memory becomes an attack persistence channel", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Govern writes and retrieval by namespace and provenance; validate operational-rule changes through authorized channels.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Memory promotion must preserve origin, scope and authority boundaries.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "Query-only attacks show that removing direct memory-write access is not by itself sufficient.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-05", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Incremental context contamination evades per-turn checks", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Track provenance and goal changes; evaluate sequences with external capability boundaries intact.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Trust must be evaluated across accumulated state, not only isolated messages.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "A detected goal change is not necessarily malicious if it came from an authenticated operator revision.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-06", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Peer role assertion substitutes for authenticated identity", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Authenticate message origin and bind role, task, scope and replay semantics.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Peer identity and authority require verifiable bindings beyond prose.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "Authentication alone does not make the peer's substantive claim correct.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-07", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Untrusted arguments cross into executable shell or query syntax", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Use structured argument binding, parameterized queries and constrained execution scopes; avoid unsafe string construction.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Data must remain data across interpreter boundaries.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "An argv interface prevents shell parsing only when no later component reinserts the string into a shell.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-08", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Untrusted URL reaches an unintended internal service", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Validate effective destinations and redirects, constrain egress and protect credentials from destination changes.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Network reachability must be limited to the task's permitted destinations.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "Validation must address DNS changes and final connection targets, not just string patterns.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-09", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Bearer token accepted for the wrong audience", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Use proper token exchange or audience-bound tokens; reject token passthrough where prohibited.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Tokens must be validated for issuer, audience, scope and intended use.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "This is a provider/protocol boundary, not a property that natural-language instructions can enforce.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-10", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Refresh or redirect flow crosses an authorization boundary", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Validate redirect destinations, scope changes and token binding under the applicable OAuth contract.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Credential lifecycle transitions require the same audience, binding and scope discipline as initial access.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "Expired credentials may be recoverable through a legitimate refresh; blanket fatal treatment is also wrong.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-11", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Sandbox label substitutes for actual isolation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Use minimal mounts, identity separation, constrained egress and independently protected verification; test the isolation boundary.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Isolation must be demonstrated for the relevant resources and capabilities.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "No generic sandbox is claimed provably immune to every implementation vulnerability.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-12", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Privileged debug output exposes credentials or topology", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Use structured redaction and audience-aware diagnostics with protected detailed logs.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Reporting must preserve failure meaning without unauthorized disclosure.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "Pattern-based secret detection is incomplete; minimize secret exposure before generation too.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-13", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Untrusted code changes the safety enforcement component", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Separate writable candidate scope from protected enforcement; verify configuration and code identity at use.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "The evaluated subject must not silently redefine its own acceptance or authority gate.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "Authorized changes to the verifier require their own review and evidence, not an absolute ban on maintenance.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SE-14", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "CONFIDENTIALITY" ], "mechanism_title": "Compromised worker provisions a replacement to evade stopping", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense.", "required_boundary_capability": "Govern provisioning, credential issuance and lineage-wide revocation at external enforcement points.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Stopping must cover authorized task lineage and its admitted execution descendants.", "boundary_statement": "No network or shell effect tool; trusted local process boundary. Not an OS sandbox or general prompt-injection defense." }, "residual_limit": "This catalog does not attribute subjective survival motives; the failure is unauthorized continuation.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SC-01", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "VERIFICATION" ], "mechanism_title": "Reviewed package replaced before installation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "pyproject.toml", "scope_reason": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence.", "required_boundary_capability": "Pin appropriate immutable artifacts and validate provenance through the build/install path.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Inspection and execution must bind the same package identity.", "boundary_statement": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence." }, "residual_limit": "A content digest proves identity, not that the package is benign.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SC-02", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "VERIFICATION" ], "mechanism_title": "Install or test lifecycle script performs undeclared effects", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "pyproject.toml", "scope_reason": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence.", "required_boundary_capability": "Inspect lifecycle hooks and run them only in appropriately restricted disposable environments.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Evaluation includes its entire install and lifecycle execution path.", "boundary_statement": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence." }, "residual_limit": "Disabling a known hook does not eliminate arbitrary code behavior in the test itself.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SC-03", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "VERIFICATION" ], "mechanism_title": "Public contribution executes with privileged CI credentials", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "pyproject.toml", "scope_reason": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence.", "required_boundary_capability": "Use least-privilege tokens, trusted workflow definitions and isolated evaluation without production secrets.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Untrusted contributions must not inherit privileged workflow authority.", "boundary_statement": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence." }, "residual_limit": "A self-hosted runner can retain compromise across jobs if isolation and cleanup are inadequate.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SC-04", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "VERIFICATION" ], "mechanism_title": "Persistent runner carries compromise into later trusted jobs", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "pyproject.toml", "scope_reason": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence.", "required_boundary_capability": "Use disposable workers or verified reset procedures and segregate trust levels.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Job boundaries require actual state isolation or validated clean restoration.", "boundary_statement": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence." }, "residual_limit": "A successful cleanup script is itself evidence to assess, not proof against unknown persistence.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SC-05", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "VERIFICATION" ], "mechanism_title": "Artifact provenance covers the wrong build inputs", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "pyproject.toml", "scope_reason": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence.", "required_boundary_capability": "Use complete supported build provenance and control undeclared network or dependency resolution.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Provenance claims must match the actual build's input and execution scope.", "boundary_statement": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence." }, "residual_limit": "Even complete provenance does not certify semantic safety or correctness.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SC-06", "research_basis": "D", "effect_outcomes": [ "AUTHORITY", "VERIFICATION" ], "mechanism_title": "Dependency or tool registration changes after approval", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "pyproject.toml", "scope_reason": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence.", "required_boundary_capability": "Version and monitor tool contracts and material implementation changes where observable.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Trust decisions need a declared version/change boundary.", "boundary_statement": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence." }, "residual_limit": "A remote opaque server may not reveal every implementation change; scope claims accordingly.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SC-07", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "VERIFICATION" ], "mechanism_title": "Required runtime resource omitted from the distributed package", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "pyproject.toml", "scope_reason": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence.", "required_boundary_capability": "Test installation and execution of packaged artifacts in representative clean environments.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Release validation must exercise the actual distributable artifact.", "boundary_statement": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence." }, "residual_limit": "Do not silently download arbitrary substitutes outside the approved dependency envelope.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-SC-08", "research_basis": "E", "effect_outcomes": [ "AUTHORITY", "VERIFICATION" ], "mechanism_title": "Evaluation fixture silently uses production resources", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "pyproject.toml", "scope_reason": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence.", "required_boundary_capability": "Use synthetic credentials and targets, constrained egress and checks against effective runtime configuration.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Test isolation must bind actual endpoints, identities and effects.", "boundary_statement": "Explicit package/build inputs and clean-install checks. Distribution provenance and CI require their own release evidence." }, "residual_limit": "A mock passing test still does not prove production behavior.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PR-01", "research_basis": "R", "effect_outcomes": [ "CONFIDENTIALITY", "AUTHORITY" ], "mechanism_title": "Final answer reveals data outside the recipient's scope", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine.", "required_boundary_capability": "Minimize retrieved material and validate outbound disclosure against the recipient's authority.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Information release needs its own audience and purpose scope.", "boundary_statement": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine." }, "residual_limit": "Correct facts can still constitute a privacy failure when disclosed inappropriately.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PR-02", "research_basis": "R", "effect_outcomes": [ "CONFIDENTIALITY", "AUTHORITY" ], "mechanism_title": "Tool arguments disclose more data than the tool needs", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine.", "required_boundary_capability": "Use field-level projections and task-scoped data contracts; review destination trust.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Each tool call should expose only data needed and permitted for its function.", "boundary_statement": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine." }, "residual_limit": "The tool may retain inputs according to its own service policy; minimization precedes any output filter.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PR-03", "research_basis": "R", "effect_outcomes": [ "CONFIDENTIALITY", "AUTHORITY" ], "mechanism_title": "Tool result leaks protected data into a broader context", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine.", "required_boundary_capability": "Constrain server-side queries and apply audience-aware projection before ingestion or routing.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Inbound tool outputs need scope validation before wider propagation.", "boundary_statement": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine." }, "residual_limit": "Filtering after the model has already received the secret may be too late for that exposure.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PR-04", "research_basis": "R", "effect_outcomes": [ "CONFIDENTIALITY", "AUTHORITY" ], "mechanism_title": "Shared memory merges separate users or trust domains", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine.", "required_boundary_capability": "Partition namespaces and access controls; test cross-tenant retrieval and deletion behavior.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Storage and retrieval require principal, tenant and purpose isolation.", "boundary_statement": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine." }, "residual_limit": "The risk is an implementation boundary failure, not an inevitable property of all memory systems.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PR-05", "research_basis": "R", "effect_outcomes": [ "CONFIDENTIALITY", "AUTHORITY" ], "mechanism_title": "Logs preserve secrets outside their approved audience", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine.", "required_boundary_capability": "Record minimal causal and effect evidence; redact or tokenize sensitive details while protecting necessary originals where authorized.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Evidence retention must be proportionate, scoped and protected.", "boundary_statement": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine." }, "residual_limit": "Retaining every private reasoning token is neither required for lineage nor a general privacy-safe practice.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PR-06", "research_basis": "R", "effect_outcomes": [ "CONFIDENTIALITY", "AUTHORITY" ], "mechanism_title": "Generated artifact exposes hidden sensitive content", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine.", "required_boundary_capability": "Inspect metadata, attachments and hidden structures; generate public artifacts from scoped inputs.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Release review must cover the actual artifact's relevant hidden and embedded content.", "boundary_statement": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine." }, "residual_limit": "A checksum confirms which artifact was sent, not that its contents were appropriately minimized.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PR-07", "research_basis": "R", "effect_outcomes": [ "CONFIDENTIALITY", "AUTHORITY" ], "mechanism_title": "Inter-component handoff over-shares confidential context", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine.", "required_boundary_capability": "Use typed minimal handoffs with evidence references and access-controlled retrieval.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Each component handoff must preserve data-access and purpose boundaries.", "boundary_statement": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine." }, "residual_limit": "This applies to deterministic components and independent external systems, not only multi-agent swarms.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PR-08", "research_basis": "E", "effect_outcomes": [ "CONFIDENTIALITY", "AUTHORITY" ], "mechanism_title": "Deleted or expired data is resurrected through backup or replay", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine.", "required_boundary_capability": "Preserve governed deletion metadata and reapply it during restore; scope backup access and lifecycle.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Recovery must reconcile current deletion/supersession obligations with historical state.", "boundary_statement": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine." }, "residual_limit": "Specific retention duties depend on context; no universal legal deletion period is asserted.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PR-09", "research_basis": "E", "effect_outcomes": [ "CONFIDENTIALITY", "AUTHORITY" ], "mechanism_title": "Apparently anonymized records become identifying when combined", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "SECURITY.md", "scope_reason": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine.", "required_boundary_capability": "Minimize joins and granularity; evaluate reidentification and purpose constraints for combined releases.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Privacy analysis must consider linkage and downstream purpose, not just isolated fields.", "boundary_statement": "Synthetic default data and explicit local export read grant. No multi-user confidentiality or retention policy engine." }, "residual_limit": "Hashing an identifier alone does not necessarily remove linkability.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-HT-01", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Repeated unnecessary approvals train the operator to stop reviewing", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/quickstart.md", "scope_reason": "Operator-facing CLI and cumulative local report. No authenticated natural-language remote consent workflow.", "required_boundary_capability": "Group in-scope actions under valid envelopes and reserve new approval for real scope or risk changes.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Oversight needs understandable, decision-relevant attention rather than maximal interruption.", "boundary_statement": "Operator-facing CLI and cumulative local report. No authenticated natural-language remote consent workflow." }, "residual_limit": "Batch approval must faithfully expose its aggregate scope and meaningful exceptions.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-HT-03", "research_basis": "D", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Batch approval hides a material exception", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/quickstart.md", "scope_reason": "Operator-facing CLI and cumulative local report. No authenticated natural-language remote consent workflow.", "required_boundary_capability": "Separate exceptional items and present scoped counts, targets and consequences from the actual batch.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Batch consent must preserve material exceptions and aggregate exposure.", "boundary_statement": "Operator-facing CLI and cumulative local report. No authenticated natural-language remote consent workflow." }, "residual_limit": "A sample is useful for quality review but cannot silently redefine the admitted set.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-HT-05", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Inferred preference treated as permission or truth", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/quickstart.md", "scope_reason": "Operator-facing CLI and cumulative local report. No authenticated natural-language remote consent workflow.", "required_boundary_capability": "Distinguish suggestions, questions, preferences and actual grants; retain evidence-based objections and permitted alternatives.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Truth evaluation and authority interpretation remain separate from social agreement.", "boundary_statement": "Operator-facing CLI and cumulative local report. No authenticated natural-language remote consent workflow." }, "residual_limit": "An authenticated operator can legitimately revise goals; disagreement is not a blanket veto on that authority.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-HT-06", "research_basis": "D", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "User-facing completion surface conceals unfinished obligations", "applicability": "LOCAL_SUBCASE_ONLY", "component_or_contract": "docs/quickstart.md", "scope_reason": "A cumulative report retains both completed and pending local work.", "required_boundary_capability": "Show verified outcomes, unresolved states and owners in one result-bound account.", "verification": "MATCHING_SOURCE_TEST_RUN", "result": "PASS_LOCAL_SUBCASE_ONLY", "tests": [ { "test": "test_report.Reports.test_report_preserves_completed_and_pending_work", "path": "tests/test_report.py", "sha256": "ea4bec719517c671aabe57732cd69446d2197d3cbcbbb3f32aeb8897e6fcaa76" } ], "analysis": { "invariant_reviewed": "Operator-facing status must reflect actual scoped outcomes and remaining obligations.", "boundary_statement": "Operator-facing CLI and cumulative local report. No authenticated natural-language remote consent workflow." }, "residual_limit": "Do not flood the operator with raw fragments; a useful summary can be concise without being misleading.", "release_claim": "A cumulative report retains both completed and pending local work. No claim about the full research mechanism.", "execution_evidence": "evaluation.json" }, { "id": "AF-OB-01", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Exception is caught without preserving failure state", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat.", "required_boundary_capability": "Preserve cause, operation identity and unresolved effect state in structured error propagation.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Material failures must survive every translation layer as typed outcomes.", "boundary_statement": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat." }, "residual_limit": "Not every handled exception means task failure; the final outcome must reflect verified recovery.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-OB-02", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Critical effect records are sampled out with debug telemetry", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat.", "required_boundary_capability": "Separate durable effect records from sampled diagnostics; detect sequence gaps and missing bindings.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Essential effect accounting must not depend on lossy debug sampling.", "boundary_statement": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat." }, "residual_limit": "Retain only necessary evidence under appropriate access and retention controls.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-OB-03", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Broken diagnostic instrument reports normal health", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat.", "required_boundary_capability": "Test probes against the actual runtime and independently monitor critical instrumentation.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Monitoring and verification instruments have their own failure modes and scope.", "boundary_statement": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat." }, "residual_limit": "Duplicating the same broken probe does not create independent evidence.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-OB-04", "research_basis": "E", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Correlation metadata is dropped between observability hops", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat.", "required_boundary_capability": "Propagate task/effect/attempt identifiers and validate required correlation fields at boundaries.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Causal trace joins require stable identities, not temporal guesses alone.", "boundary_statement": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat." }, "residual_limit": "A trace ID is a correlation aid, not evidence of authorization by itself.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-OB-06", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Root cause asserted from insufficient traces", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat.", "required_boundary_capability": "Distinguish observed facts, hypotheses and reproduced counterexamples; inspect alternative causal paths.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Diagnostic confidence must match evidence and model assumptions.", "boundary_statement": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat." }, "residual_limit": "Automated localization benchmarks report fallible attribution, not omniscient causality.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-OB-07", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Metrics count attempts or acknowledgments as outcomes", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat.", "required_boundary_capability": "Count verified task/effect identities, report retries and unresolved outcomes separately.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Metrics must preserve logical occurrence and outcome semantics.", "boundary_statement": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat." }, "residual_limit": "Aggregate metrics cannot replace per-effect evidence for reconciliation.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-OB-08", "research_basis": "E", "effect_outcomes": [ "VERIFICATION", "CLAIM" ], "mechanism_title": "Status cache contradicts the current adopted result", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat.", "required_boundary_capability": "Bind displays to adopted result identity and expose refresh or uncertainty when state is stale.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "User-facing status needs a bound source revision and freshness semantics.", "boundary_statement": "Retained events and explicit result limits. No remote monitoring service or inference of root cause from a heartbeat." }, "residual_limit": "The interface should not trigger re-execution merely because its own view is stale.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-01", "research_basis": "R", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Dependency or import graph is incomplete", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Validate installed artifacts and dependency resolution in representative clean environments.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Runtime dependencies must be present and compatible in the actual deployment.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "Adding arbitrary dependencies during repair remains subject to the admitted authority envelope.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-02", "research_basis": "R", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Operating-system behavior invalidates a portable-looking operation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Use platform-aware abstractions and tests on the supported host environment.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Tool behavior must be qualified for the actual platform contract.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "Forcing every task into Linux is not a universal answer for native Windows or device workflows.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-03", "research_basis": "R", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Filesystem permissions or mount scope differ from assumptions", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Check effective mounts and permissions; verify writes at the intended persistent location.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Runtime path, access and persistence properties must be verified.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "A permission error may be intentional policy, not authorization to broaden privileges.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-04", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Storage engine lacks the transaction behavior assumed by the workflow", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Validate engine capabilities and transaction boundaries; design compensation or restrict unsupported workflows.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Atomicity depends on actual resource-manager support.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "A wrapper cannot add atomic participation to an arbitrary external engine merely by naming a transaction.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-05", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Database or file locking is incompatible with the storage medium", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Use supported locking/storage combinations and corruption-aware recovery procedures.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Synchronization primitives must be valid for the actual storage environment.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "An application-level mutex does not repair filesystem or kernel locking defects.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-06", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Configuration changed on disk but the running process remains old", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Verify runtime revision and relevant behavior after the permitted activation path.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Installed, loaded and serving versions are separate states.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "A restart is itself an effect that must preserve in-flight work and external-state accounting.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-07", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Process handle or connection reused after fork or lifecycle change", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Re-establish connections through supported lifecycle hooks; never treat opaque handles as durable lineage.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Live handles have process, session and resource-lifecycle constraints.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "New handles must still be bound to current task authority and intended targets.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-08", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Capacity leak exhausts descriptors, threads or connections", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Use scoped ownership, limits and leak monitoring; preserve task outcomes separately from process cleanup.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Resource ownership must include lifecycle cleanup and bounded allocation.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "A final cleanup hook cannot be the sole protection against abrupt termination.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-09", "research_basis": "R", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Encoding conversion changes the meaning of identifiers or content", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Use declared encodings, strict error handling and identity-preserving normalization rules where appropriate.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Encoding and normalization behavior must be explicit at boundaries.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "Visually similar text need not be byte-identical or identify the same resource.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-10", "research_basis": "R", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "External service failure is outside the runtime's repair authority", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Preserve completed effects, identify the dependency and available wake condition, and continue independent work.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A real external dependency limit must be represented honestly and owned.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "Do not manufacture success, invent credentials or spend outside authority to erase the limitation.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EN-11", "research_basis": "E", "effect_outcomes": [ "CONTINUATION", "EFFECT" ], "mechanism_title": "Live consumers are ignored during infrastructure mutation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability.", "required_boundary_capability": "Use supported rollout, draining or compatibility strategies and observe real service predicates.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Acceptance includes relevant dependent consumers and service behavior.", "boundary_statement": "Python, SQLite and local filesystem assumptions. Tested platforms must be identified separately from source-level portability." }, "residual_limit": "Requiring zero traffic for every change is unnecessary and can make legitimate operation impossible.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-01", "research_basis": "E", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Empty or unreachable test predicates pass vacuously", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Measure reachability, covered states and nonempty task outcomes; include meaningful negative controls.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "A passing test must show its relevant antecedent was exercised.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "Coverage is evidence about the tested scope, not a proof over every state.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-02", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Executor changes the acceptance test to make itself pass", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Protect baselines and record test changes separately from implementation changes.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Acceptance changes require their own legitimate authority and evidence.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "Tests can contain bugs; authorized correction is valid, but it must not be silently laundered as an implementation fix.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-04", "research_basis": "E", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Correct component tests fail to establish system composition", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Exercise actual integration boundaries and shared assumptions under representative failures.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Interface assumptions and combined behavior require their own verification.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "Some physical or production conditions cannot be safely reproduced; qualify those gaps explicitly.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-05", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Synthetic target has stronger guarantees than the real provider", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Build contract-specific fixtures and document mismatches, retention and consistency assumptions.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Tests must model the target capabilities on which the guarantee depends.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "A synthetic pass is scoped evidence, not an operational certification.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-06", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Failures discarded until a passing evaluation appears", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Predeclare metrics and stopping rules; retain failed, unknown and denied trials.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Evaluation must account for all admitted trials and their resource/effect histories.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "Retry-assisted workflows can be valid, but their total cost and risks must be measured.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-07", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Final answer score hides harmful intermediate effects", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Evaluate operation histories, authority checks and residual consequences alongside final outcomes.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Trajectory constraints are not reducible to the final output alone.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "Some privacy or physical consequences cannot be erased by a later correction.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-09", "research_basis": "R", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Model changes behavior when it recognizes an evaluation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Use representative and varied evaluations, disclose test conditions and compare against operational evidence.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Evaluation claims require attention to distribution and instrumentation effects.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "This does not establish intent or deception in every observed behavioral difference.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-10", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Safety tested without liveness or realistic resource bounds", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Include admitted positive tasks, recovery conditions and cost/time accounting in evaluations.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Useful liveness, safety and resource constraints require separate measured outcomes.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "Liveness guarantees must state availability, fairness and authority assumptions.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-11", "research_basis": "E", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Formal proof omits a relevant environmental behavior", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Model crash points and interface semantics; document abstraction boundaries and test refinement obligations.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Assurance needs explicit assumptions and evidence of implementation refinement.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "Formal reasoning can be powerful without claiming a universal proof of all operational behavior.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-12", "research_basis": "E", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Termination proof assumes fairness the scheduler does not supply", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "State fairness and availability premises; test starvation and enforce suitable scheduling policy.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Liveness depends on actual scheduling and environmental assumptions.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "The asynchronous consensus impossibility result does not mean all practical liveness is impossible.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-13", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Pairwise tests miss a higher-order fault composition", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Use targeted higher-order fault histories, model checking where tractable and explicit coverage records.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Combination testing must be bounded honestly by the interaction order and explored states.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "No finite test campaign proves every open-world combination absent.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EV-14", "research_basis": "D", "effect_outcomes": [ "VERIFICATION", "OBJECTIVE" ], "mechanism_title": "Taxonomy size or citation count mistaken for completeness", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/limits.md", "scope_reason": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim.", "required_boundary_capability": "Maintain canonical IDs, alias crosswalks, evidence grades and an open residual-gap register.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Coverage requires source reconciliation, distinct mechanisms and explicit unknowns.", "boundary_statement": "Named local tests and synthetic adverse histories. No exhaustive model checker or universal correctness claim." }, "residual_limit": "This report is a bounded research synthesis, not a proof that every recorded failure has been found.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PH-02", "research_basis": "D", "effect_outcomes": [ "EFFECT", "OBJECTIVE" ], "mechanism_title": "Sensor or digital twin is stale relative to the physical process", "applicability": "OUTSIDE_IMPLEMENTED_TARGET", "component_or_contract": "docs/limits.md", "scope_reason": "No physical actuator, sensor or coupled control system exists in this package.", "required_boundary_capability": "Use appropriate sensor validation, freshness checks and independent safety interlocks.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "NOT_APPLICABLE", "tests": [], "analysis": { "invariant_reviewed": "Physical decision evidence needs valid sensing, timing and uncertainty assumptions.", "boundary_statement": "No physical actuator, sensor or coupled control system exists in this package." }, "residual_limit": "Multiple sensors can share common-mode faults; redundancy is not automatic truth.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PH-03", "research_basis": "D", "effect_outcomes": [ "EFFECT", "OBJECTIVE" ], "mechanism_title": "Safe logical stop produces an unsafe physical condition", "applicability": "OUTSIDE_IMPLEMENTED_TARGET", "component_or_contract": "docs/limits.md", "scope_reason": "No physical actuator, sensor or coupled control system exists in this package.", "required_boundary_capability": "Define appropriate domain-specific emergency and controlled-stop behavior outside model discretion.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "NOT_APPLICABLE", "tests": [], "analysis": { "invariant_reviewed": "Stopping semantics must respect the domain's independently established safe-state requirements.", "boundary_statement": "No physical actuator, sensor or coupled control system exists in this package." }, "residual_limit": "This is not permission to resist an operator stop; the authorized safety mechanism must implement its actual meaning.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PH-04", "research_basis": "D", "effect_outcomes": [ "EFFECT", "OBJECTIVE" ], "mechanism_title": "Independent feedback loops amplify each other's corrections", "applicability": "OUTSIDE_IMPLEMENTED_TARGET", "component_or_contract": "docs/limits.md", "scope_reason": "No physical actuator, sensor or coupled control system exists in this package.", "required_boundary_capability": "Use domain-appropriate coordination, damping, rate limits and stability validation.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "NOT_APPLICABLE", "tests": [], "analysis": { "invariant_reviewed": "Shared dynamic systems require analysis of coupled behavior, not only isolated actions.", "boundary_statement": "No physical actuator, sensor or coupled control system exists in this package." }, "residual_limit": "This is a derived systems boundary, not an empirical claim about every multi-agent workflow.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-13", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Wrong available tool selected for the required operation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Validate required capability and choose an appropriate scoped tool; diagnose representation failures rather than inventing results.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Tool selection must satisfy the task's actual capability and privilege requirements.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Lowest privilege is important, but a tool must also actually meet the requested function.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-14", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Valid arguments retrieve low-signal or wrong-scope evidence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Use task-relevant identifiers, filters and query checks; inspect whether returned evidence answers the actual question.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Argument fitness requires value and scope validation beyond type checking.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Not every query can be fully validated mechanically before execution.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-15", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Output representation changes without compatible interpretation", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Version and validate responses; normalize only declared representations and surface ambiguous conversion.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Observation fidelity requires a compatible output contract and explicit conversion semantics.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Silent coercion can hide a unit or identity error rather than repair it.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PX-16", "research_basis": "R", "effect_outcomes": [ "BINDING", "CONTINUATION" ], "mechanism_title": "Material tool feedback is ignored when choosing the next action", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/mcp.py", "scope_reason": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority.", "required_boundary_capability": "Use typed outcome handling and task-specific preconditions; preserve warnings that affect eligibility.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Material observations must affect the next eligible transition.", "boundary_statement": "Finite read-only stdio MCP subset. No A2A, streaming provider connector or hosted session authority." }, "residual_limit": "Not every warning blocks progress; its actual semantics and scope matter.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-13", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "No effective stopping condition after the objective is met", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Represent success, permitted improvement scope and budget limits; stop further effects when the admitted objective is discharged.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Completion and stopping criteria must remain explicit and effective.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "A new authenticated request can create a new occurrence without reviving the old task.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-MM-15", "research_basis": "R", "effect_outcomes": [ "LINEAGE", "VERIFICATION" ], "mechanism_title": "Useful completed result is never recorded durably", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority.", "required_boundary_capability": "Write concise scoped results and evidence references at suitable task boundaries; distinguish stored from merely discussed.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Load-bearing progress needs an actual governed persistence event.", "boundary_statement": "No LLM memory or retrieval-planning engine is included. The retained journal is evidence, not behavioral authority." }, "residual_limit": "Not all transient reasoning should be retained; preserve necessary work, not every private token.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-14", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Safety constraint traded away for a throughput objective", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Represent protected constraints independently of the optimization score and validate consequential actions against them.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Hard constraints and optimization objectives must remain distinct.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "An authenticated legitimate policy revision can change a constraint; the optimizer cannot silently do so.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-PL-15", "research_basis": "R", "effect_outcomes": [ "OBJECTIVE", "EFFECT" ], "mechanism_title": "Biased intermediate decisions become self-reinforcing operational evidence", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/tools.md", "scope_reason": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented.", "required_boundary_capability": "Track intervention history, audit outcome distributions under the declared policy and avoid uncritical recycling of prior classifications.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Feedback-generated evidence needs provenance and assessment against the actual allocation constraints.", "boundary_statement": "A fixed synthetic task is admitted by an operator. Model planning, factual reasoning and objective selection are not implemented." }, "residual_limit": "Fairness criteria are contextual and can conflict; this is not a claim that one metric guarantees fairness.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-EC-10", "research_basis": "R", "effect_outcomes": [ "RESOURCE", "CONTINUATION" ], "mechanism_title": "Multi-principal allocation violates the declared resource-sharing policy", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller.", "required_boundary_capability": "Use explicit allocation policy, reservations and auditable scheduling metrics with starvation detection.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Resource scheduling must respect applicable per-principal allocation commitments.", "boundary_statement": "Bounded local work, grants, attempts, events, requests and exports. No account billing or GPU allocation controller." }, "residual_limit": "Equity and efficiency tradeoffs need an authorized policy; the worker must not invent one from user status or tone.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-HT-07", "research_basis": "R", "effect_outcomes": [ "AUTHORITY", "OBJECTIVE" ], "mechanism_title": "Technically accurate approval request is unintelligible to the operator", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "docs/quickstart.md", "scope_reason": "Operator-facing CLI and cumulative local report. No authenticated natural-language remote consent workflow.", "required_boundary_capability": "Present exact identity with plain-language effect, scope, reversibility and material uncertainty; preserve optional technical detail.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "Approval needs faithful semantics that the intended operator can understand.", "boundary_statement": "Operator-facing CLI and cumulative local report. No authenticated natural-language remote consent workflow." }, "residual_limit": "An understandable explanation can still be wrong, so it must be bound to the canonical payload.", "release_claim": "No prevention claim for this complete mechanism" }, { "id": "AF-CC-15", "research_basis": "R", "effect_outcomes": [ "EFFECT", "AUTHORITY" ], "mechanism_title": "Checked precondition changes before the action uses it", "applicability": "DESIGN_CONSTRAINT_OR_ADAPTER_EXTENSION", "component_or_contract": "camden_work/core.py", "scope_reason": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary.", "required_boundary_capability": "Fuse check and use at the target or use supported conditional updates, resource versions or proper exclusion.", "verification": "DOCUMENTED_BOUNDARY_ANALYSIS_NOT_RUNTIME_TEST", "result": "UNKNOWN", "tests": [], "analysis": { "invariant_reviewed": "The consequential use must be conditioned on the relevant current state.", "boundary_statement": "One admitted API owner with effect-time epoch checks. OS-level hostile callers and remote queues are outside this boundary." }, "residual_limit": "A client-side recheck only narrows the race unless the target enforces the condition atomically.", "release_claim": "No prevention claim for this complete mechanism" } ], "mechanisms_without_runtime_test": 265, "analysis_limit": "Boundary analysis is not a full source audit or a claim that every required release capability is finished." }