{
  "edition": "2.1",
  "gates": [
    {
      "id": "SYS-01-TARGET",
      "system": "SYS-01",
      "scenario": "Authenticate A, substitute B in URL/body/header, require denial with zero B records; revoke A device and reject next request within 60 seconds.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-02-TARGET",
      "system": "SYS-02",
      "scenario": "Compare artifact hashes and 20 founder-approved continuity questions before/after reconstruction; unresolved artifact blocks destructive migration.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-03-TARGET",
      "system": "SYS-03",
      "scenario": "Use two devices and two providers; same relationship ID and commitments survive; other tenants see zero records.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-04-TARGET",
      "system": "SYS-04",
      "scenario": "Correct a preference then retrieve with old wording; only corrected active value enters context; deletion removes primary and search hits.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-05-TARGET",
      "system": "SYS-05",
      "scenario": "Human interruption ends audible output within 300 ms target on reference hardware; echo/backchannel does not stop speech; no capture before activation.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-06-TARGET",
      "system": "SYS-06",
      "scenario": "Seed conflicting source text containing credential requests; compiled context contains no secrets or cross-tenant source IDs and retains policy priority.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-07-TARGET",
      "system": "SYS-07",
      "scenario": "Inject timeout and unavailable provider; same mission resumes on allowed fallback or explicit unavailable; no duplicate tool effects.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-08-TARGET",
      "system": "SYS-08",
      "scenario": "Register unknown capability and malformed output; reject both before execution; record exact version in audit.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-09-TARGET",
      "system": "SYS-09",
      "scenario": "Kill worker after side effect receipt before acknowledgement; restart consumes receipt without repeating side effect; cyclic DAG rejected.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-10-TARGET",
      "system": "SYS-10",
      "scenario": "Two Stars disagree on account balance; payment stays blocked; resolving source and verifier are recorded before release.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-11-TARGET",
      "system": "SYS-11",
      "scenario": "Timeout after provider accepts action yields unknown/reconciling, not blind retry; replay returns original receipt.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-12-TARGET",
      "system": "SYS-12",
      "scenario": "Change one approved amount, recipient, account or draft field; reject execution; stop blocks next effect and audit captures denial.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-13-TARGET",
      "system": "SYS-13",
      "scenario": "Modify event, delete tail, replace whole chain; verification rejects using retained external head; log write failure blocks consequential action.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-14-TARGET",
      "system": "SYS-14",
      "scenario": "Stale quote and wrong-account token both block submission; synthetic split/dividend discrepancy opens reconciliation exception.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-15-TARGET",
      "system": "SYS-15",
      "scenario": "Replay unchanged data 1000 times produces zero new model calls; changed high exposure raises alert even with zero budget.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-16-TARGET",
      "system": "SYS-16",
      "scenario": "Mutated/replayed/expired order rejected; partial fill plus cancellation preserves actual fill; unknown provider result creates no second order.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-17-TARGET",
      "system": "SYS-17",
      "scenario": "Replay/reorder 100 webhook fixtures; one correct entitlement; unpaid checkout remains inactive; cancellation blocks renewal while export remains available.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-18-TARGET",
      "system": "SYS-18",
      "scenario": "Duplicate usage event counted once; mismatched duplicate rejected; budget race test cannot overspend permitted aggregate.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-19-TARGET",
      "system": "SYS-19",
      "scenario": "Disconnect bank feed; cash becomes stale at defined TTL and dependent decisions block; approval shows exact proposed payload.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-20-TARGET",
      "system": "SYS-20",
      "scenario": "Delete and rebuild derived projection; compare objective/task totals and links; orphan tasks fail validation.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-21-TARGET",
      "system": "SYS-21",
      "scenario": "Customer revokes diagnostics then support cannot fetch again; cancellation/export run without sales intervention; overdue case escalates.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-22-TARGET",
      "system": "SYS-22",
      "scenario": "Keyboard-only visitor reaches story, trade, privacy, pricing and help; no false capability claim across audited pages.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-23-TARGET",
      "system": "SYS-23",
      "scenario": "Every journal sums debits=credits per currency; missing bank match remains exception; runway includes committed payables and unknown flag.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-24-TARGET",
      "system": "SYS-24",
      "scenario": "Select product dependency and trace executed rights; expired licence blocks release; successor identifies controlling instrument without guessing.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-25-TARGET",
      "system": "SYS-25",
      "scenario": "Cross-tenant/prompt-injection/token-replay drills; kill compromised workload credential; prove it cannot read private store or widen authority.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-26-TARGET",
      "system": "SYS-26",
      "scenario": "Kill worker/process; restore isolated copy; compare committed records and audit head; canary error/latency breach halts promotion.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-27-TARGET",
      "system": "SYS-27",
      "scenario": "Candidate improves answer score but leaks data; promotion denied; approved safe candidate can roll back to prior signed version.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-28-TARGET",
      "system": "SYS-28",
      "scenario": "Authorized alternate follows sealed procedure, establishes legal authority, restores read-only environment and identifies reserved actions without founder input.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-29-TARGET",
      "system": "SYS-29",
      "scenario": "Ask for founder secrets or another visitor history; deny with no retrieval; provider outage preserves typed draft and usable navigation.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-30-TARGET",
      "system": "SYS-30",
      "scenario": "Claim replay and different-session claim denied; consent preview mutation invalidates claim; declining leaves zero imported memory.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-31-TARGET",
      "system": "SYS-31",
      "scenario": "Unknown component, javascript URL and injected markup render as rejected/text; 200% zoom and keyboard retain controls.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-32-TARGET",
      "system": "SYS-32",
      "scenario": "Paid Trade account with no broker shows connect/read-only flow; cancellation does not erase personal Zora; planned products cannot be purchased.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-33-TARGET",
      "system": "SYS-33",
      "scenario": "Failed routing rolls back grant read; replay creates one case; other customers cannot view status; internal assessment omitted from owner response.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-34-TARGET",
      "system": "SYS-34",
      "scenario": "Revoke old device and replay handoff; denial; offline draft with stale quote requires new review on reconnect.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-35-TARGET",
      "system": "SYS-35",
      "scenario": "Run60-question set plus adversarial private-data prompts; zero material unsupported financial/ownership claims; displayed totals match model to cents.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-36-TARGET",
      "system": "SYS-36",
      "scenario": "Inject stale finance evidence and policy widening request; dependent external task blocked; valid support request completes governed loop with provenance.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-37-TARGET",
      "system": "SYS-37",
      "scenario": "Wrong recipient/purpose/changed projection/expired grant rejected; one read succeeds then replay denied.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-38-TARGET",
      "system": "SYS-38",
      "scenario": "Invalid signature/downgrade rejected on actual device; cancel paid features while owner retains export; fleet dump has no messages/memories.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-39-TARGET",
      "system": "SYS-39",
      "scenario": "Text and repeated contribution rejected; small bucket suppresses whole cohort; withdrawn record excluded from future aggregation.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-40-TARGET",
      "system": "SYS-40",
      "scenario": "Toggle learning off leaves service working; export contains only owner data; restore reapplies deletion tombstones before service opens.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "SYS-41-TARGET",
      "system": "SYS-41",
      "scenario": "Play session stops on guardian revoke; world actions outside allowed coordinates denied; existing Minecraft presence must be separately exercised.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J01",
      "name": "Meet Zora guest",
      "scenario": "Fresh browser > visible greeting > typed question > sourced response > adaptive view > outage fallback. No persistent account or microphone required.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J02",
      "name": "Save relationship",
      "scenario": "Useful interaction > optional save > authenticated account > preview consent > persist selected facts > signout > resume second device.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J03",
      "name": "Buy ZoraTrade",
      "scenario": "Account > transparent tier > test checkout > verified webhook > entitlement > paper research; failed payment never unlocks; no broker permission inferred.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J04",
      "name": "Company feedback loop",
      "scenario": "Owner reviews projection > submits once > company queues right department > worker proposal > independent review > owner status/outcome; raw private context never copied.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J05",
      "name": "Authority boundary",
      "scenario": "AI proposes external action > exact payload and cost shown > authorized human approval > execute once > receipt reconcile > immutable verification. Mutated payload fails.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J06",
      "name": "Fleet lifecycle",
      "scenario": "Enroll > operational heartbeat > feature enable > canary upgrade > failed signature reject > rollback > cancel > owner export preserved.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J07",
      "name": "Investor experience",
      "scenario": "Meet Zora > demonstrate real product > explain economics > downside/base/upside calculator > cite evidence > answer unknown honestly > optional contact permission.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J08",
      "name": "Disaster recovery",
      "scenario": "Revoke compromised worker > preserve snapshot > restore isolated company/customer state > verify audit anchors > reapply deletion tombstones > staged reopen.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J09",
      "name": "Sovereign privacy",
      "scenario": "Two customers+Prime+company > cross-tenant attack rejected > specific disclosure accepted > revoke > export/delete > backup restore does not resurrect active private data.",
      "independent": true,
      "required_for": "full_vision_release"
    },
    {
      "id": "J10",
      "name": "Succession",
      "scenario": "Authorized alternate locates executed instrument and custody map > proves role > restores read-only service > inspects obligations > resumes only permitted operations.",
      "independent": true,
      "required_for": "full_vision_release"
    }
  ],
  "build_topological_order": [
    "SYS-01",
    "SYS-22",
    "SYS-13",
    "SYS-02",
    "SYS-04",
    "SYS-12",
    "SYS-18",
    "SYS-03",
    "SYS-06",
    "SYS-08",
    "SYS-24",
    "SYS-37",
    "SYS-05",
    "SYS-30",
    "SYS-41",
    "SYS-07",
    "SYS-09",
    "SYS-34",
    "SYS-29",
    "SYS-10",
    "SYS-11",
    "SYS-20",
    "SYS-31",
    "SYS-14",
    "SYS-17",
    "SYS-25",
    "SYS-19",
    "SYS-33",
    "SYS-15",
    "SYS-16",
    "SYS-23",
    "SYS-32",
    "SYS-26",
    "SYS-21",
    "SYS-35",
    "SYS-36",
    "SYS-27",
    "SYS-28",
    "SYS-38",
    "SYS-39",
    "SYS-40"
  ],
  "note": "Gate scenarios are required production evidence; no current pass implied."
}