Trust / Primitive Boundaries
Primitive Boundaries
Proof, identity, ownership, settlement, public proof, provenance, and transfer.
4 exact recordsSource + SHA-256Failure + recovery
normative-doctrine
Offline proof is the primitive
Offline verification is primary proof behavior, never a fallback mode.
- Exact source
docs/offline-record-seal-frozen-invariants.mdSHA-256fce14006bd7f8da92a513423b28fd8e0a957d6c9f66cf2acc4068dda13343d7a- Implemented primitive
- offline proof
- Source of truth
- Exact sealed artifact bytes and pinned verifier roots.
- Guarantee
- Record, seal, inspect, and local verification remain meaningful without depending on remote state.
- Executable check
pnpm test:verification-conformance- Evidence output
- A digest-matched normative source whose exact language governs implementation and review.
- Failure meaning
- The verifier path depends on weaker network or interface state.
- Recovery / escalation
- Restore exact-byte local verification and reject the network dependency.
- Offline behavior
- Full inspection and cryptographic verification execute offline.
- External boundary
- External conventions may supply mechanics only; they do not define Receiz product truth.
- What this record does not prove
- This record does not prove later publication or global append occurred.
normative-doctrine
Identity continuity boundary
Receiz ID and PBI carry identity continuity; authentication is subordinate mechanics.
- Exact source
docs/pbi-recovery-receiz-id-binding.mdSHA-256f6e6e4177f6340924e59042d2f976dd4f6666340d80c0f1cee8b0f4180cea264- Implemented primitive
- identity
- Source of truth
- Accepted Identity Record, Identity Seal, Receiz Key, or PBI/passkey recovery proof.
- Guarantee
- Binding appends identity continuity. Accepted identity proof remains intact.
- Executable check
pnpm test:identity-conformance- Evidence output
- A digest-matched normative source whose exact language governs implementation and review.
- Failure meaning
- Accepted identity proof has been displaced by weaker runtime state.
- Recovery / escalation
- Restore proof-first recovery and idempotent binding beneath the identity primitive.
- Offline behavior
- Accepted local identity proof projects immediately; remote binding and synchronized projections follow later, while only a separately verified identity-history successor is an Append.
- External boundary
- External conventions may supply mechanics only; they do not define Receiz product truth.
- What this record does not prove
- This record does not prove a specific person controls an identity artifact not presented for verification.
normative-doctrine
Settlement and consent boundary
Settlement, reserve, certificate, Note, and governed transfer state are proof-native value primitives.
- Exact source
docs/perpetual-rollover-kernel.mdSHA-2564cad3f91ebae948610e1292fc18854351df65edeaeb03bbd12942b6e74c89b69- Implemented primitive
- settlement
- Source of truth
- Verified append-only Settlement history and enclosing proof objects.
- Guarantee
- Value transition, consent, exit, and rollover remain auditable without renaming Settlement into a generic balance.
- Executable check
pnpm test:settlement-conformance- Evidence output
- A digest-matched normative source whose exact language governs implementation and review.
- Failure meaning
- Settlement law, value math, transfer authority, or consent boundary diverges.
- Recovery / escalation
- Stop value mutation, inspect the exact proof head and Settlement append, correct the transition, and rerun conformance.
- Offline behavior
- The verified receiz.account.state.v3 Receiz Key/Identity proof carries the Reserve source. Local issuance verifies one Reserve-debit account successor and one equal whole-value held-bound Note genesis, then activates that Note in qualified custody. Every later qualified transfer consumes its exact Note head once and activates the successor as local Settlement. Connected publication is a later optional distribution step.
- External boundary
- External conventions may supply mechanics only; they do not define Receiz product truth.
- What this record does not prove
- This record does not prove current production Reserve, account value, or an external provider's separate settlement state.
normative-doctrine
Public proof and ownership boundary
A public proof surface exposes proof, provenance, custody, and verification without an account gate.
- Exact source
docs/literal-product-law.mdSHA-2565548a8f32bbdf35f2ba5e4545cd31ef6e2842d2c3127a3e39e10e6eb6bc5efa1- Implemented primitive
- public proof, ownership, provenance, transfer
- Source of truth
- The enclosing sealed proof object and its verified ownership or custody history.
- Guarantee
- Public verification is account-free. Identity is optional and additive.
- Executable check
pnpm test:verification-conformance && pnpm test:interoperability-conformance- Evidence output
- A digest-matched normative source whose exact language governs implementation and review.
- Failure meaning
- Public inspection is gated, custody is blurred into possession, or stronger proof truth is displaced.
- Recovery / escalation
- Restore account-free verification and bind ownership actions to the enclosing verified artifact.
- Offline behavior
- Downloaded proof objects remain independently inspectable and verifiable offline.
- External boundary
- External conventions may supply mechanics only; they do not define Receiz product truth.
- What this record does not prove
- This record does not prove a displayed owner retains custody after an unverified external transfer.