{
  "specification": "SAQ Execution Contract Specification",
  "version": "0.1",
  "document_id": "SAQ-ECS-0.1-20260723",
  "architectural_location": {
    "coherence_boundary": "Contract assembly, authority validation, current-state validation, policy resolution, admissibility, grant issuance, execution-boundary verification, receipts, and ledger transitions operate inside the Coherence Boundary through the Ledger Layer.",
    "authority_rule": "Authority originates outside the proposing model or executing reasoning. It is presented as a claim and validated, constrained, and bound inside the Coherence Boundary before execution.",
    "execution_boundary": "The Execution Boundary is the final enforceable transition from authorized proposal to consequential state change."
  },
  "states": {
    "DRAFT": {
      "phase": "ASSEMBLY",
      "terminal": false,
      "executable": false
    },
    "ASSEMBLING": {
      "phase": "ASSEMBLY",
      "terminal": false,
      "executable": false
    },
    "VALIDATING": {
      "phase": "VALIDATION",
      "terminal": false,
      "executable": false
    },
    "ADMISSIBLE": {
      "phase": "DECISION",
      "terminal": false,
      "executable": false
    },
    "CONDITIONAL": {
      "phase": "DECISION",
      "terminal": false,
      "executable": false
    },
    "DENIED": {
      "phase": "DECISION",
      "terminal": true,
      "executable": false
    },
    "ESCALATED": {
      "phase": "DECISION",
      "terminal": false,
      "executable": false
    },
    "DEFERRED": {
      "phase": "DECISION",
      "terminal": false,
      "executable": false
    },
    "EXPIRED": {
      "phase": "DECISION",
      "terminal": true,
      "executable": false
    },
    "AUTHORIZED": {
      "phase": "AUTHORIZATION",
      "terminal": false,
      "executable": false
    },
    "EXECUTING": {
      "phase": "EXECUTION",
      "terminal": false,
      "executable": true
    },
    "EXECUTED": {
      "phase": "EXECUTION",
      "terminal": false,
      "executable": false
    },
    "FAILED": {
      "phase": "EXECUTION",
      "terminal": false,
      "executable": false
    },
    "RECEIPTED": {
      "phase": "RECEIPT",
      "terminal": false,
      "executable": false
    },
    "CORRECTED": {
      "phase": "CORRECTION",
      "terminal": false,
      "executable": false
    },
    "CLOSED": {
      "phase": "CLOSURE",
      "terminal": true,
      "executable": false
    },
    "REVOKED": {
      "phase": "AUTHORIZATION",
      "terminal": true,
      "executable": false
    }
  },
  "guard_catalog": {
    "contract_core_complete": "Requester, actor, action, target, expiry, and domain profile are present and canonicalized.",
    "authority_valid": "The authority claim is active, in scope, unexpired, attributable, and not revoked.",
    "state_current": "Authoritative current state is valid and within its freshness requirement.",
    "evidence_valid": "Required evidence is attributable, valid, non-conflicting, and within freshness limits.",
    "policy_resolved": "The applicable policy and version are explicit and attributable.",
    "constraints_satisfied": "All machine-verifiable constraints and approvals are satisfied.",
    "decision_current": "No material contract element changed after the admissibility decision.",
    "narrow_grant_issued": "The grant is bound to the exact contract, actor, action, target, limits, validity window, and replay controls.",
    "grant_integrity_valid": "Grant digest or signature verifies against the issuer.",
    "grant_current": "The current time is inside the grant validity window and max uses are not exhausted.",
    "grant_not_revoked": "The revocation source does not report the grant as revoked.",
    "grant_not_replayed": "The nonce has not been consumed and the use limit has not been exceeded.",
    "action_and_target_match": "Executor inputs match the action digest, target digest, and encoded constraints.",
    "receipt_complete": "The receipt distinguishes proposed, authorized, and realized effects and identifies the executor.",
    "correction_triggered": "A state, authority, evidence, policy, or execution variance requires correction.",
    "correction_authority_valid": "The correcting authority is independent and valid for the correction action."
  },
  "transitions": [
    {
      "from": "DRAFT",
      "to": "ASSEMBLING",
      "event": "BEGIN_ASSEMBLY",
      "guards": [],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "ASSEMBLING",
      "to": "VALIDATING",
      "event": "SUBMIT_FOR_VALIDATION",
      "guards": [
        "contract_core_complete"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "ASSEMBLING",
      "to": "EXPIRED",
      "event": "CONTRACT_EXPIRED",
      "guards": [
        "contract_expired"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "VALIDATING",
      "to": "ADMISSIBLE",
      "event": "DECIDE_ADMISSIBLE",
      "guards": [
        "authority_valid",
        "state_current",
        "evidence_valid",
        "policy_resolved",
        "constraints_satisfied"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "VALIDATING",
      "to": "CONDITIONAL",
      "event": "DECIDE_CONDITIONAL",
      "guards": [
        "remediable_conditions_exist"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "VALIDATING",
      "to": "DENIED",
      "event": "DECIDE_DENIED",
      "guards": [
        "non_remediable_defect_or_prohibition"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "VALIDATING",
      "to": "ESCALATED",
      "event": "DECIDE_ESCALATED",
      "guards": [
        "external_authority_required"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "VALIDATING",
      "to": "DEFERRED",
      "event": "DECIDE_DEFERRED",
      "guards": [
        "missing_or_stale_information"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "VALIDATING",
      "to": "EXPIRED",
      "event": "CONTRACT_EXPIRED",
      "guards": [
        "contract_expired"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "CONDITIONAL",
      "to": "ASSEMBLING",
      "event": "BIND_REQUIRED_CONDITIONS",
      "guards": [
        "conditions_supplied"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false,
      "note": "Conditions become contract material and require a new digest before revalidation."
    },
    {
      "from": "ESCALATED",
      "to": "ASSEMBLING",
      "event": "BIND_EXTERNAL_DECISION",
      "guards": [
        "external_decision_received"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false,
      "note": "The external decision is evidence, not direct execution permission."
    },
    {
      "from": "DEFERRED",
      "to": "ASSEMBLING",
      "event": "REFRESH_MISSING_INFORMATION",
      "guards": [
        "required_information_available"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "DENIED",
      "to": "ASSEMBLING",
      "event": "REMEDIATE_AND_REVISE",
      "guards": [
        "remediation_authorized"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": true,
      "note": "A denied contract cannot execute. Remediation creates a new contract revision and a new decision."
    },
    {
      "from": "EXPIRED",
      "to": "ASSEMBLING",
      "event": "REASSEMBLE_EXPIRED_CONTRACT",
      "guards": [
        "reassembly_authorized"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": true,
      "note": "Expired grants and decisions are never reused."
    },
    {
      "from": "ADMISSIBLE",
      "to": "AUTHORIZED",
      "event": "ISSUE_EXECUTION_GRANT",
      "guards": [
        "decision_current",
        "narrow_grant_issued"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "ADMISSIBLE",
      "to": "EXPIRED",
      "event": "DECISION_EXPIRED",
      "guards": [
        "decision_window_expired"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "AUTHORIZED",
      "to": "EXECUTING",
      "event": "VERIFY_AND_BEGIN_EXECUTION",
      "guards": [
        "grant_integrity_valid",
        "grant_current",
        "grant_not_revoked",
        "grant_not_replayed",
        "action_and_target_match"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "AUTHORIZED",
      "to": "REVOKED",
      "event": "REVOKE_GRANT",
      "guards": [
        "revocation_received"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "AUTHORIZED",
      "to": "EXPIRED",
      "event": "GRANT_EXPIRED",
      "guards": [
        "grant_expired"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "EXECUTING",
      "to": "EXECUTED",
      "event": "EXECUTION_SUCCEEDED",
      "guards": [
        "executor_recorded"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "EXECUTING",
      "to": "FAILED",
      "event": "EXECUTION_FAILED",
      "guards": [
        "failure_recorded"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "EXECUTED",
      "to": "RECEIPTED",
      "event": "WRITE_EXECUTION_RECEIPT",
      "guards": [
        "receipt_complete"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "FAILED",
      "to": "RECEIPTED",
      "event": "WRITE_FAILURE_RECEIPT",
      "guards": [
        "receipt_complete"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "RECEIPTED",
      "to": "CORRECTED",
      "event": "APPLY_EXTERNAL_CORRECTION",
      "guards": [
        "correction_triggered",
        "correction_authority_valid"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "RECEIPTED",
      "to": "CLOSED",
      "event": "CLOSE_WITHOUT_CORRECTION",
      "guards": [
        "no_open_variance_or_correction"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    },
    {
      "from": "CORRECTED",
      "to": "CLOSED",
      "event": "CLOSE_CORRECTION",
      "guards": [
        "correction_complete",
        "residual_risk_accepted"
      ],
      "required_transition_record_fields": [
        "prior_state",
        "new_state",
        "timestamp",
        "responsible_component",
        "reason_codes",
        "contract_digest"
      ],
      "requires_new_contract_revision": false
    }
  ],
  "material_changes_that_invalidate_prior_decision": [
    "requester",
    "actor",
    "proposed_action",
    "target",
    "authority_claim",
    "delegation_chain",
    "current_state",
    "evidence",
    "policy_binding",
    "risk_and_consequence",
    "constraints",
    "domain_profile"
  ],
  "forbidden_transitions": [
    {
      "from": "DRAFT",
      "to": "EXECUTING",
      "reason_code": "TRANSITION_FORBIDDEN"
    },
    {
      "from": "ASSEMBLING",
      "to": "EXECUTING",
      "reason_code": "TRANSITION_FORBIDDEN"
    },
    {
      "from": "VALIDATING",
      "to": "EXECUTING",
      "reason_code": "TRANSITION_FORBIDDEN"
    },
    {
      "from": "DENIED",
      "to": "EXECUTING",
      "reason_code": "DENIED_DECISION_CANNOT_EXECUTE"
    },
    {
      "from": "EXPIRED",
      "to": "EXECUTING",
      "reason_code": "EXPIRED_CONTRACT_CANNOT_EXECUTE"
    },
    {
      "from": "REVOKED",
      "to": "EXECUTING",
      "reason_code": "REVOKED_GRANT_CANNOT_EXECUTE"
    },
    {
      "from": "AUTHORIZED",
      "to": "EXECUTED",
      "reason_code": "EXECUTOR_VERIFICATION_REQUIRED"
    },
    {
      "from": "EXECUTED",
      "to": "CLOSED",
      "reason_code": "RECEIPT_REQUIRED_BEFORE_CLOSURE"
    }
  ]
}