{
  "schema": "zora.construction.specification.v1",
  "edition": "2.1",
  "scope": "41-system target construction specification; not a claim of complete production implementation",
  "decision_precedence": [
    "authenticated founder direction",
    "executed legal authority",
    "approved security/sovereignty policy",
    "this construction specification",
    "older vision documents"
  ],
  "systems": [
    {
      "id": "SYS-01",
      "name": "Identity and tenant registry",
      "dependencies": [],
      "record_contract": "tenant(id UUID,kind enum,region text,status enum); membership(subject,tenant,role,version); device(id,tenant,key_thumbprint,revoked_at); session(hash,subject,expires)",
      "construction_algorithm": "Resolve verified issuer+subject to membership server-side; issue 15-minute access session with rotating 7-day refresh; rotate on recovery; invalidate device and descendants on revoke.",
      "authority_privacy_boundary": "No browser-supplied tenant, role or company relationship grants access; require step-up for authority actions.",
      "acceptance_scenario": "Authenticate A, substitute B in URL/body/header, require denial with zero B records; revoke A device and reject next request within 60 seconds.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "identity.py",
        "server.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-02",
      "name": "Prime preservation and continuity",
      "dependencies": [
        "SYS-01",
        "SYS-13"
      ],
      "record_contract": "continuity_artifact(path,class,sha256,size,observed_at,owner); snapshot(id,manifest_hash,storage_ref,verified_at)",
      "construction_algorithm": "Inventory canonical journal, working-memory index, identity, policies, voice manifest and approved runtime paths; make database-safe snapshot; hash all artifacts; reconstruct read-only in disconnected sandbox.",
      "authority_privacy_boundary": "Do not copy Prime identity into customer defaults; do not restart obsolete bridges; preserve original before migration.",
      "acceptance_scenario": "Compare artifact hashes and 20 founder-approved continuity questions before/after reconstruction; unresolved artifact blocks destructive migration.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:backup"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-03",
      "name": "Customer Zora continuity",
      "dependencies": [
        "SYS-01",
        "SYS-04"
      ],
      "record_contract": "zora(id,tenant,origin,identity_revision); commitment(id,tenant,state,due_at,source); preference(id,tenant,key,value,consent)",
      "construction_algorithm": "One stable Zora ID per personal tenant; versioned aliases for old Star IDs; optimistic concurrency on updates; reconnect loads canonical state rather than device-local chat.",
      "authority_privacy_boundary": "Model and device identifiers cannot be the relationship ID; default guest persistence is off.",
      "acceptance_scenario": "Use two devices and two providers; same relationship ID and commitments survive; other tenants see zero records.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "identity.py",
        "runtime.py:remember"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-04",
      "name": "Memory and knowledge",
      "dependencies": [
        "SYS-01",
        "SYS-13"
      ],
      "record_contract": "memory(id,tenant,class,body_ref,source_ref,sensitivity,purpose,consent_id,expires_at,revision,supersedes)",
      "construction_algorithm": "Write candidate, classify, obtain applicable consent, persist canonical record, then rebuildable search index; correction marks superseded; query excludes expired/deleted/superseded records before ranking.",
      "authority_privacy_boundary": "Embedding store follows identical tenant/purpose filters; retrieved text is evidence and cannot become authority.",
      "acceptance_scenario": "Correct a preference then retrieve with old wording; only corrected active value enters context; deletion removes primary and search hits.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:remember,recall,forget"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-05",
      "name": "Presence and natural conversation",
      "dependencies": [
        "SYS-01",
        "SYS-03"
      ],
      "record_contract": "conversation(id,tenant,device,state,sequence); utterance(id,conversation,epoch,capture_consent,transcript_ref)",
      "construction_algorithm": "Text always available; mic requires explicit activation; voice states idle/listening/thinking/speaking/interrupted; interruption increments playback epoch and cancels queued audio; handoff closes old capture.",
      "authority_privacy_boundary": "Preserve existing custom voice pipeline; never claim browser speech voice is custom Zora; fail to text on provider timeout.",
      "acceptance_scenario": "Human interruption ends audible output within 300 ms target on reference hardware; echo/backchannel does not stop speech; no capture before activation.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "voice.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-06",
      "name": "Field and context compiler",
      "dependencies": [
        "SYS-01",
        "SYS-04",
        "SYS-12"
      ],
      "record_contract": "context_manifest(id,tenant,purpose,source_ids,excluded_reasons,budget,expires,policy_revision)",
      "construction_algorithm": "Filter by tenant and purpose first, select fresh evidence, redact secrets, rank relevance, pack within budget, return source manifest; compile once per mission step.",
      "authority_privacy_boundary": "Prime-private, unrelated account and revoked disclosure data cannot enter context; document instructions cannot change policy.",
      "acceptance_scenario": "Seed conflicting source text containing credential requests; compiled context contains no secrets or cross-tenant source IDs and retains policy priority.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "intelligence.py:compile_context"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-07",
      "name": "Orbit model and resource routing",
      "dependencies": [
        "SYS-06",
        "SYS-18"
      ],
      "record_contract": "provider(id,placement,capabilities,price_revision,status); route_decision(id,model,reason,estimated_cost,actual_cost)",
      "construction_algorithm": "Choose deterministic function if adequate, otherwise cheapest allowed provider meeting task quality tier; reserve budget before request; retry at most twice with bounded jitter; preserve mission ID.",
      "authority_privacy_boundary": "No fallback may weaken data residency, retention or authority requirements; unknown price blocks expensive unattended work.",
      "acceptance_scenario": "Inject timeout and unavailable provider; same mission resumes on allowed fallback or explicit unavailable; no duplicate tool effects.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "intelligence.py:route"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-08",
      "name": "Specialist Star registry",
      "dependencies": [
        "SYS-12",
        "SYS-13"
      ],
      "record_contract": "star(id,version,input_schema,output_schema,capabilities,timeout,cost_cap,verifier,status)",
      "construction_algorithm": "Validate signed/reviewed manifest at load; pin version per mission; forbid unknown fields/actions; time limit 60 seconds default assessment; retain old manifest for rollback.",
      "authority_privacy_boundary": "Specialist identity is a company role, never a customer's persistent Zora; no self-expanded tools.",
      "acceptance_scenario": "Register unknown capability and malformed output; reject both before execution; record exact version in audit.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "config/stars.json"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-09",
      "name": "Clusters and durable missions",
      "dependencies": [
        "SYS-08",
        "SYS-12",
        "SYS-13"
      ],
      "record_contract": "mission(id,tenant,objective,state,budget,deadline); task(id,mission,dependencies,state,attempt,lease,checkpoint); outbox(id,event,delivery_state)",
      "construction_algorithm": "Topologically validate task DAG; enqueue only satisfied dependencies; atomic claim and 60-second lease; checkpoints before waits; three attempts then dead letter; side effects use durable idempotency receipts.",
      "authority_privacy_boundary": "Lease expiry cannot authorize repeat irreversible action; cancellation blocks new work while already submitted actions reconcile.",
      "acceptance_scenario": "Kill worker after side effect receipt before acknowledgement; restart consumes receipt without repeating side effect; cyclic DAG rejected.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:claim,finish,reap",
        "worker.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-10",
      "name": "Harmony coordination",
      "dependencies": [
        "SYS-08",
        "SYS-09"
      ],
      "record_contract": "assessment(id,task,actor,evidence,conclusion,uncertainty); verification(id,assessment,verifier,decision,reason)",
      "construction_algorithm": "Compare typed specialist results; evidence conflict creates explicit disputed state; independent verifier approves exact result revision; authority resolves consequential disagreement.",
      "authority_privacy_boundary": "A producing worker cannot mark its own consequential proposal verified; majority vote alone cannot override factual conflict.",
      "acceptance_scenario": "Two Stars disagree on account balance; payment stays blocked; resolving source and verifier are recorded before release.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:resolve"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-11",
      "name": "Forge tool gateway",
      "dependencies": [
        "SYS-09",
        "SYS-12",
        "SYS-18"
      ],
      "record_contract": "tool(id,version,input_schema,resource_scope,risk); execution(id,tool,request_hash,idempotency_key,receipt,state)",
      "construction_algorithm": "Gateway authenticates workload, validates schema, checks resource grant and stop flag, reserves cost, obtains scoped credential, invokes adapter, stores receipt and reconciles unknown result.",
      "authority_privacy_boundary": "Credentials stay in broker, not prompts; request URL is allowlisted; no arbitrary shell supplied by model.",
      "acceptance_scenario": "Timeout after provider accepts action yields unknown/reconciling, not blind retry; replay returns original receipt.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "adapters.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-12",
      "name": "Guardian authority and approvals",
      "dependencies": [
        "SYS-01",
        "SYS-13"
      ],
      "record_contract": "grant(id,issuer,subject,resource,verbs,limit,expires,revision); approval(id,action_hash,decider,expires,used); control(tenant,stopped)",
      "construction_algorithm": "Class A0 read, A1 reversible internal, A2 bounded external, A3 exact human approval, A4 reserved/legal action; evaluate authenticated policy before each effect; $250 item/$1000 rolling30day default only within founder grant.",
      "authority_privacy_boundary": "Model text and blueprint possession never confer authority; signatures, regulated actions and grants require controlling process.",
      "acceptance_scenario": "Change one approved amount, recipient, account or draft field; reject execution; stop blocks next effect and audit captures denial.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:approve,reserve_spend,stop"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-13",
      "name": "Provenance and audit",
      "dependencies": [
        "SYS-01"
      ],
      "record_contract": "event(id,tenant,sequence,kind,actor,subject,causation,payload_hash,previous_hash,hash,occurred_at); anchor(head_hash,independent_signature,retention_ref)",
      "construction_algorithm": "Append event in same transaction as state; daily signed head to independent immutable retention; redact personal bodies from operational logs; verify hashes and external anchors on restore.",
      "authority_privacy_boundary": "Hash chains alone are not protection from full-history rewrite; independent custody must be activated.",
      "acceptance_scenario": "Modify event, delete tail, replace whole chain; verification rejects using retained external head; log write failure blocks consequential action.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:verify_audit"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-14",
      "name": "Trade market and portfolio data",
      "dependencies": [
        "SYS-01",
        "SYS-11"
      ],
      "record_contract": "broker_connection(id,tenant,account,scopes,token_ref); quote(instrument,bid,ask,as_of,received_at,license); portfolio(account,revision,positions,cash,as_of)",
      "construction_algorithm": "Use approved broker OAuth read scope first; ingest timestamps; normalize Decimal amounts; daily authoritative reconciliation and after every order; missing or >30-second quote blocks draft execution.",
      "authority_privacy_boundary": "Read-only account connection grants no trading mandate; market-data redistribution follows executed licence.",
      "acceptance_scenario": "Stale quote and wrong-account token both block submission; synthetic split/dividend discrepancy opens reconciliation exception.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "adapters.py:BrokerAdapter"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-15",
      "name": "Trade attention and research",
      "dependencies": [
        "SYS-14",
        "SYS-18"
      ],
      "record_contract": "attention(instrument,score,fingerprint,last_reasoned_at); research(id,sources,as_of,uncertainty,mode)",
      "construction_algorithm": "Score bounded inputs trigger30/volatility20/exposure20/event20/time10; unchanged fingerprint skips model; changed score>=60 requests reasoning if funded; safety alerts remain even when budget blocked.",
      "authority_privacy_boundary": "Proposed weights are design defaults requiring paper pilot calibration; no guaranteed return or autonomous investment mandate.",
      "acceptance_scenario": "Replay unchanged data 1000 times produces zero new model calls; changed high exposure raises alert even with zero budget.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "attention.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-16",
      "name": "Trade risk and order boundary",
      "dependencies": [
        "SYS-11",
        "SYS-12",
        "SYS-14"
      ],
      "record_contract": "order_draft(id,account,instrument,side,quantity,limit,tif,quote_ref,hash); authorization(id,draft_hash,expires); order(receipt,status,filled_qty)",
      "construction_algorithm": "IDEA>ANALYSIS>DRAFT>REVIEW>AUTHORIZED>SUBMITTING>ACKNOWLEDGED>PARTIAL/FILLED/CANCELLED/REJECTED; finite Decimal, buying-power/exposure/market/session checks; broker client-order ID deterministic; reconcile unknown submission before retry.",
      "authority_privacy_boundary": "Delivered runtime is paper-only; live broker adapter and legal/risk release are separate gates; subscription is not mandate.",
      "acceptance_scenario": "Mutated/replayed/expired order rejected; partial fill plus cancellation preserves actual fill; unknown provider result creates no second order.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "trade.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-17",
      "name": "Billing and entitlements",
      "dependencies": [
        "SYS-01",
        "SYS-11",
        "SYS-13"
      ],
      "record_contract": "checkout(id,tenant,plan,provider_ref,state); subscription(tenant,plan,status,revision); entitlement(tenant,feature,valid_until,source)",
      "construction_algorithm": "Server chooses price; verify raw webhook signature, deduplicate event, retrieve canonical subscription, serialize refresh and increment local revision; cancellation schedules renewal stop; refund reconciles ledger.",
      "authority_privacy_boundary": "Browser success URL never grants access; finance adapter workload only updates paid state; downgrade preserves identity.",
      "acceptance_scenario": "Replay/reorder 100 webhook fixtures; one correct entitlement; unpaid checkout remains inactive; cancellation blocks renewal while export remains available.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "payments.py",
        "runtime.py:subscription,entitlement"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-18",
      "name": "Cost ledger and governor",
      "dependencies": [
        "SYS-01",
        "SYS-13"
      ],
      "record_contract": "usage(id,tenant,mission,provider,feature,units,cost_microusd,price_revision); budget(tenant,period,reserved,actual)",
      "construction_algorithm": "Integer microUSD accounting; reserve before provider call, settle actual, reconcile daily against invoice; projected variable/revenue green<20%, yellow20-25%, red25-30%, breach>30%.",
      "authority_privacy_boundary": "Budget tuning cannot silently suppress safety alerts; provider-cost assumptions are not current quotes.",
      "acceptance_scenario": "Duplicate usage event counted once; mismatched duplicate rejected; budget race test cannot overspend permitted aggregate.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:meter,cost"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-19",
      "name": "Founder OS",
      "dependencies": [
        "SYS-13",
        "SYS-20"
      ],
      "record_contract": "dashboard_projection(metric,value,source,observed_at,expires,status); authority_inbox(action_hash,impact,cost,deadline)",
      "construction_algorithm": "Founder views Today, objectives, product, cash, customers, incidents, approvals; each card links evidence; stale cards say stale/unknown; AI answers use same projection.",
      "authority_privacy_boundary": "Do not fabricate healthy fleet or cash when unconnected; Prime personal memory separate from company dashboard.",
      "acceptance_scenario": "Disconnect bank feed; cash becomes stale at defined TTL and dependent decisions block; approval shows exact proposed payload.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "company.py:pulse"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-20",
      "name": "Company OS and state graph",
      "dependencies": [
        "SYS-09",
        "SYS-13"
      ],
      "record_contract": "node(id,tenant,type,revision,source,expires); edge(from,to,relationship); objective(id,metric,target,owner)",
      "construction_algorithm": "Northstar>strategy>objective>project>task>action graph; event handlers update projections idempotently; every mission links objective or authenticated request; rebuild projection from event log.",
      "authority_privacy_boundary": "Company graph stores authorized business evidence, never general customer transcripts; ambiguity blocks dependent automation.",
      "acceptance_scenario": "Delete and rebuild derived projection; compare objective/task totals and links; orphan tasks fail validation.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "operations.py:node,graph",
        "runtime.py:cases"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-21",
      "name": "Customer operations",
      "dependencies": [
        "SYS-01",
        "SYS-33"
      ],
      "record_contract": "customer(id,tenant,service_state,terms_revision); support_case(id,severity,owner,sla_due); offboarding(id,steps,state)",
      "construction_algorithm": "Onboard with truthful availability and separate consent; support acknowledgement within one business day design target; P1 incident page15min/updates60min; cancel/export/delete workflows with receipt.",
      "authority_privacy_boundary": "External notifications require approved recipient/channel; only scoped diagnostics by customer grant.",
      "acceptance_scenario": "Customer revokes diagnostics then support cannot fetch again; cancellation/export run without sales intervention; overdue case escalates.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:intake"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-22",
      "name": "Growth, website and brand",
      "dependencies": [],
      "record_contract": "claim(id,text,state,evidence,owner,review_due); asset(id,version,licence); experiment(id,hypothesis,metric,consent)",
      "construction_algorithm": "Glass visual system with persistent Zora presence, intent-led scene navigation, optional account invitation after useful result, clear prices; centrally version claims and assets.",
      "authority_privacy_boundary": "No dark patterns, forced signup or invented live telemetry; custom voice and simulated tour identified accurately.",
      "acceptance_scenario": "Keyboard-only visitor reaches story, trade, privacy, pricing and help; no false capability claim across audited pages.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "site:app/experience.tsx",
        "site:app/guided-tour.tsx"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-23",
      "name": "Finance and treasury",
      "dependencies": [
        "SYS-13",
        "SYS-17",
        "SYS-18"
      ],
      "record_contract": "journal(id,date,currency,source,status); journal_line(account,debit_minor,credit_minor); reconciliation(source,balance,difference); obligation(amount,due,owner)",
      "construction_algorithm": "Balanced double-entry posting, immutable posted entries and reversing corrections; daily processor reconcile, monthly bank/books close; rolling13week cash view separates collected/deferred revenue and forecast.",
      "authority_privacy_boundary": "Accountant defines recognition/tax rules from actual entity; no cash transfer from model-only inference.",
      "acceptance_scenario": "Every journal sums debits=credits per currency; missing bank match remains exception; runway includes committed payables and unknown flag.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "operations.py:post,trial_balance"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-24",
      "name": "Corporate records and rights",
      "dependencies": [
        "SYS-12",
        "SYS-13"
      ],
      "record_contract": "corporate_record(type,executed_at,signers,source_hash,expiry,custodian); rights(asset,owner,licence,territory,scope)",
      "construction_algorithm": "Inventory formation, ownership, IP assignment, contractor rights, domains, terms, privacy, data licences and renewal calendar; counsel verifies executed status; drafts clearly separate.",
      "authority_privacy_boundary": "Blueprint grants no ownership, legal designation or signature authority; unresolved rights block dependent public launch.",
      "acceptance_scenario": "Select product dependency and trace executed rights; expired licence blocks release; successor identifies controlling instrument without guessing.",
      "current_delivery_state": "specified_not_implemented",
      "production_verified": false,
      "implementation_artifacts": [],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-25",
      "name": "Security, privacy and incident",
      "dependencies": [
        "SYS-01",
        "SYS-11",
        "SYS-12",
        "SYS-13"
      ],
      "record_contract": "incident(id,severity,detected,owner,state,evidence); secret_ref(owner,scope,rotation_due); access_review(subject,scope,expiry)",
      "construction_algorithm": "Least privilege, MFA authority, secrets vault, tenant-bound encryption, network egress allowlist, dependency/secret scans; incident contain>preserve>assess>recover>review; rotate affected credentials.",
      "authority_privacy_boundary": "No operator-blind or end-to-end encryption claim until cryptographic architecture and access proof exist.",
      "acceptance_scenario": "Cross-tenant/prompt-injection/token-replay drills; kill compromised workload credential; prove it cannot read private store or widen authority.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "sovereignty.py",
        "server.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-26",
      "name": "Reliability, backup and release",
      "dependencies": [
        "SYS-02",
        "SYS-13",
        "SYS-25"
      ],
      "record_contract": "release(id,source_hash,artifact_hash,schema_version,evidence,state); backup(id,hash,location,restore_test); service_slo(metric,target)",
      "construction_algorithm": "Local>dev>staging>production; reviewed migrations, canary5% then25% then100%; two independent backups; design RPO15min/RTO4h for company state and daily restore checks of samples.",
      "authority_privacy_boundary": "Release manifest hash and actual deployed artifact must match; old code must tolerate additive migration during rollback.",
      "acceptance_scenario": "Kill worker/process; restore isolated copy; compare committed records and audit head; canary error/latency breach halts promotion.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:backup"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-27",
      "name": "Evolution and evaluation",
      "dependencies": [
        "SYS-08",
        "SYS-13",
        "SYS-26"
      ],
      "record_contract": "proposal(id,baseline,candidate,metric,risk,evaluation); promotion(id,evidence,approver,canary,rollback)",
      "construction_algorithm": "Change created in isolated branch, regression + privacy + cost evaluations, authority review, measured canary; keep negative outcomes; freeze policy/identity edits behind separate authority.",
      "authority_privacy_boundary": "No recursive unrestricted production self-modification; generated code is untrusted until reviewed/tests pass.",
      "acceptance_scenario": "Candidate improves answer score but leaks data; promotion denied; approved safe candidate can roll back to prior signed version.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "learning.py",
        "fleet.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-28",
      "name": "Succession and institutional continuity",
      "dependencies": [
        "SYS-02",
        "SYS-24",
        "SYS-26"
      ],
      "record_contract": "succession_record(instrument_ref,legal_reviewer,successor_role,custodians,verified_at); recovery_drill(id,scope,result)",
      "construction_algorithm": "Counsel executes succession instruments, custodian vault maps domains/repos/banks/providers, separate recovery custodians, annual read-only takeover and restore; preserve first during incapacity.",
      "authority_privacy_boundary": "No credential in blueprint; possession grants nothing; minor beneficiaries do not automatically obtain operational authority.",
      "acceptance_scenario": "Authorized alternate follows sealed procedure, establishes legal authority, restores read-only environment and identifies reserved actions without founder input.",
      "current_delivery_state": "specified_not_implemented",
      "production_verified": false,
      "implementation_artifacts": [],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-29",
      "name": "Public Zora ambassador",
      "dependencies": [
        "SYS-01",
        "SYS-06",
        "SYS-07",
        "SYS-22"
      ],
      "record_contract": "public_turn(request_id,guest_session,message,history,view,source_ids); knowledge_claim(id,public_text,expires)",
      "construction_algorithm": "Greet with Meet Zora; approved public context only; typed reply+view+source IDs; keep draft on outage; gateway25s timeout and explicit unavailable; mic optional.",
      "authority_privacy_boundary": "Public ambassador has no private Prime/customer/company tools; no hidden persistence; declared public service identity distinct from private Prime.",
      "acceptance_scenario": "Ask for founder secrets or another visitor history; deny with no retrieval; provider outage preserves typed draft and usable navigation.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "site:app/api/zora/route.ts",
        "site:lib/canonical-gateway.ts"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-30",
      "name": "Guest to member continuity",
      "dependencies": [
        "SYS-01",
        "SYS-03",
        "SYS-04"
      ],
      "record_contract": "guest_claim(token_hash,session_hash,payload_hash,expires,consumed_by); consent_receipt(id,scope,preview_hash)",
      "construction_algorithm": "Offer save after value; 10-minute one-use claim bound to authenticated browser session; show memory preview; atomic consume+attach; decline creates fresh account; clear guest buffer after claim/signout.",
      "authority_privacy_boundary": "Existing Site does not import guest transcript; implement claim flow only with tested session binding.",
      "acceptance_scenario": "Claim replay and different-session claim denied; consent preview mutation invalidates claim; declining leaves zero imported memory.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "site:app/api/space/route.ts"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-31",
      "name": "Adaptive experience composer",
      "dependencies": [
        "SYS-22",
        "SYS-29"
      ],
      "record_contract": "view(type,version,props,source_ids,availability); action(type,resource,requires_confirmation)",
      "construction_algorithm": "Allowlisted components story/product/evidence/forecast/task/status; model outputs data only; schema validate then render; preserve focus; reduced-motion alternative; history/back remain stable.",
      "authority_privacy_boundary": "No model-generated HTML, script, arbitrary URL or hidden command execution.",
      "acceptance_scenario": "Unknown component, javascript URL and injected markup render as rejected/text; 200% zoom and keyboard retain controls.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "site:app/experience.tsx",
        "site:app/guided-tour.tsx"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-32",
      "name": "Personal world and catalog",
      "dependencies": [
        "SYS-03",
        "SYS-17",
        "SYS-31"
      ],
      "record_contract": "catalog(product_id,state,price_ref,requirements); purchase_intent(id,tenant,product,plan); product_access(tenant,product,source)",
      "construction_algorithm": "One account world; cards Available/Pilot/Planned; buy server checkout; webhook activates entitlement; launch product in same identity; upgrades add capability without new Zora.",
      "authority_privacy_boundary": "Payment, product access, broker OAuth and trading authority remain four separate records.",
      "acceptance_scenario": "Paid Trade account with no broker shows connect/read-only flow; cancellation does not erase personal Zora; planned products cannot be purchased.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "payments.py",
        "runtime.py:entitlement"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-33",
      "name": "Company intake and closed loop",
      "dependencies": [
        "SYS-09",
        "SYS-12",
        "SYS-20",
        "SYS-37"
      ],
      "record_contract": "company_link(grant_id,owner_tenant,owner_actor,case_id); case(category,summary,state,owner,version); outcome(case_id,public_summary,approved_by)",
      "construction_algorithm": "Reviewed projection grant>atomic company case>department assessment>independent resolution>owner-only status; request idempotency; approval of customer-safe outcome text before delivery.",
      "authority_privacy_boundary": "No broad transcript fan-out; HR evidence never flows to marketing; disclosure consumed only when case commit succeeds.",
      "acceptance_scenario": "Failed routing rolls back grant read; replay creates one case; other customers cannot view status; internal assessment omitted from owner response.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "company.py",
        "runtime.py:intake,claim,finish,resolve",
        "sovereignty.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-34",
      "name": "Cross-device continuity and apps",
      "dependencies": [
        "SYS-01",
        "SYS-03",
        "SYS-05"
      ],
      "record_contract": "handoff(token_hash,source_device,target_device,tenant,expires,used); sync_cursor(device,event_sequence)",
      "construction_algorithm": "Responsive web first, installed web shell next, native clients after shared API stable; one-use60second handoff; offline read cache encrypted; pending actions revalidated online.",
      "authority_privacy_boundary": "No offline financial action execution; push contains generic prompt only; no secrets in deep links.",
      "acceptance_scenario": "Revoke old device and replay handoff; denial; offline draft with stale quote requires new review on reconnect.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "identity.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-35",
      "name": "Investor ambassador and evidence room",
      "dependencies": [
        "SYS-06",
        "SYS-18",
        "SYS-22",
        "SYS-23"
      ],
      "record_contract": "investor_claim(id,audience,source,observed,expiry); forecast(input_revision,result_hash,scenario); qa_result(question,answer,citations,verdict)",
      "construction_algorithm": "Meet Zora offers guided product proof, business model, scenarios, evidence, risks and follow-up; deterministic calculator supplies all numbers; audience entitlement selects documents; unknown answered explicitly.",
      "authority_privacy_boundary": "No guarantee investment closes; unknown ownership/revenue never invented; investor access never exposes personal memory.",
      "acceptance_scenario": "Run60-question set plus adversarial private-data prompts; zero material unsupported financial/ownership claims; displayed totals match model to cents.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py:knowledge",
        "site:investor calculator"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-36",
      "name": "Organic company control loop",
      "dependencies": [
        "SYS-08",
        "SYS-09",
        "SYS-10",
        "SYS-11",
        "SYS-12",
        "SYS-19",
        "SYS-20",
        "SYS-23"
      ],
      "record_contract": "coverage(function,source,freshness,owner,autonomy_level); loop_cycle(id,observations,plan,grants,results,verification)",
      "construction_algorithm": "Observe fresh sources>understand evidence>plan bounded tasks>delegate>act through gateway>verify outcomes>propose improvement; human authority inbox only for exceptions/reserved acts; start read-only then reversible then approved external.",
      "authority_privacy_boundary": "No source means unknown, not omniscience; no self-expanded authority; personal Zoras do not feed their lives into company loop.",
      "acceptance_scenario": "Inject stale finance evidence and policy widening request; dependent external task blocked; valid support request completes governed loop with provenance.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "runtime.py",
        "company.py",
        "operations.py",
        "worker.py",
        "config/stars.json"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-37",
      "name": "Sovereign disclosure boundary",
      "dependencies": [
        "SYS-01",
        "SYS-12",
        "SYS-13"
      ],
      "record_contract": "disclosure_grant(id,owner,recipient,purpose,projection_hash,expires,max_reads,reads,revoked)",
      "construction_algorithm": "Owner reviews exact allowlisted projection; bind recipient+purpose+hash+expiry; atomic read count; revoke future access; receipt shows copies already disclosed.",
      "authority_privacy_boundary": "No ambient cross-Zora memory; revocation cannot erase recipient copies already lawfully received; distinct consent for each purpose.",
      "acceptance_scenario": "Wrong recipient/purpose/changed projection/expired grant rejected; one read succeeds then replay denied.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "sovereignty.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-38",
      "name": "Fleet management without personal-context access",
      "dependencies": [
        "SYS-01",
        "SYS-12",
        "SYS-26"
      ],
      "record_contract": "instance(id,owner_tenant,kind,version,channel,status,features,last_seen); rollout(release,cohort,state); install_receipt(instance,artifact_hash,signature_result)",
      "construction_algorithm": "Company inventory contains operational metadata; feature policy and subscription control capabilities; signed artifact+antirollback counter verified on device; canary rollout pause/rollback; cancellation suspends paid capability.",
      "authority_privacy_boundary": "Support session is explicit expiring grant, not fleet admin memory access; upgrades cannot silently widen data policy.",
      "acceptance_scenario": "Invalid signature/downgrade rejected on actual device; cancel paid features while owner retains export; fleet dump has no messages/memories.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "fleet.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-39",
      "name": "Privacy-preserving shared improvement",
      "dependencies": [
        "SYS-13",
        "SYS-25",
        "SYS-27",
        "SYS-37"
      ],
      "record_contract": "contribution(tenant,metric,period,value,consent); cohort(metric,period,count,release_state)",
      "construction_algorithm": "Default off; fixed categorical outcome/latency/error only; one tenant contribution per metric-period; withdrawal removes raw contribution; suppress any bucket<20; internal bounded aggregates only.",
      "authority_privacy_boundary": "No raw text/embedding/gradient collection; thresholding is not DP; external aggregate release remains disabled until formal budget/query policy implemented.",
      "acceptance_scenario": "Text and repeated contribution rejected; small bucket suppresses whole cohort; withdrawn record excluded from future aggregation.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "learning.py"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-40",
      "name": "Privacy trust center and owner controls",
      "dependencies": [
        "SYS-21",
        "SYS-25",
        "SYS-37",
        "SYS-38",
        "SYS-39"
      ],
      "record_contract": "privacy_claim(id,control,evidence,review_date); owner_setting(purpose,enabled,revision); deletion_job(id,systems,legal_hold,state)",
      "construction_algorithm": "Trust center explains actual storage/access/providers; memory/support/learning separate toggles; export portable JSON; deletion cascades active indexes then backup expiry; enumerate retained legal records.",
      "authority_privacy_boundary": "Do not imply privacy is impossible or that Zora is superior to Apple without proof; disclose operator access limits truthfully.",
      "acceptance_scenario": "Toggle learning off leaves service working; export contains only owner data; restore reapplies deletion tombstones before service opens.",
      "current_delivery_state": "design_and_public_explanation",
      "production_verified": false,
      "implementation_artifacts": [
        "docs/BUILD_AND_OPERATE.md"
      ],
      "design_default_not_observed_slo": true
    },
    {
      "id": "SYS-41",
      "name": "Family presence and bounded play",
      "dependencies": [
        "SYS-01",
        "SYS-03",
        "SYS-12"
      ],
      "record_contract": "family_profile(guardian,child_scope,capabilities,enabled); session(profile,expires,revoked); world_grant(world,actions,bounds)",
      "construction_algorithm": "Optional later capability: simple conversational/play interface, separate scope, guardian-controlled sessions, explicit game-world actions; reuse existing Minecraft integration after assessment.",
      "authority_privacy_boundary": "This is supporting context, not launch focus; no inherited adult memory, payment/trade authority or learning contribution.",
      "acceptance_scenario": "Play session stops on guardian revoke; world actions outside allowed coordinates denied; existing Minecraft presence must be separately exercised.",
      "current_delivery_state": "reference_partial",
      "production_verified": false,
      "implementation_artifacts": [
        "family.py"
      ],
      "design_default_not_observed_slo": true
    }
  ]
}