Appendix H. Normative invariants, state-transition matrices, and failure registry

This appendix collects cross-cutting rules that implementations must encode as constraints, transaction preconditions, property tests or deployment architecture—not merely reviewer knowledge.

#H1. Forty-four security and economic invariants

H-01 Asset, persona, principal, agent, device and provider identifiers are never interchangeable.

H-02 A vehicle is not a legal principal or account holder; an accountable principal and beneficiary bind every consequence.

H-03 VIN, plate, serial, MAC, transponder and image match never authenticate a principal.

H-04 Ontology, recipe match, graph inference and social relationship never create authority.

H-05 Explicit deny overrides permit; missing required policy attributes deny.

H-06 Revoked, expired, disputed or stale-epoch grants cannot dispatch.

H-07 Delegation only attenuates; R3/R4 selectors cannot be unbounded wildcards.

H-08 Every R3/R4 confirmation binds exact proposal, displayed terms, principal, credential, expiry and one-time nonce.

H-09 Proposal mutation invalidates confirmation, decision, reservation and rendered provider request.

H-10 The social agent has no schema, route, key or lease for physical actuation.

H-11 The model receives no provider, payment or signing credentials and no generic effect tool.

H-12 Untrusted content is inert; only typed post-model enforcement can create a proposal.

H-13 Every public factual claim has support or an exact qualifier; creative expression never becomes evidence.

H-14 Voice, likeness, media, mark, language, territory, channel and monetization rights are current at generation and publication.

H-15 Precise spotting location is private by default; repeated views cannot reconstruct a prohibited route.

H-16 Suppression does not leak through counts, timing, ranking, errors or different reporter responses.

H-17 Consent withdrawal stops new dependent processing and traces derivative remediation.

H-18 Legal holds are scoped, authorized, reviewed and do not themselves permit use.

H-19 Every external disclosure has a receipt naming projection, fields, purpose, recipient and duties.

H-20 Sponsored speech is disclosed; sensitive human traits are not inferred from vehicles for targeting.

H-21 Recruitment evidence is separately granted and social popularity is excluded from selection.

H-22 Bids are immutable and each admitted bid has trusted receive time and stream sequence.

H-23 Auction close is serialized; feed, notification or payment order never chooses the winner.

H-24 Seller/profile administrators cannot edit admitted bids or choose a reserve after opening.

H-25 Payment, custody, title, persona, profile, media and data rights transfer independently.

H-26 Regulated escrow/title status is only an attributed assertion from an authorized external source.

H-27 Escrow liabilities and provider funds remain distinct from platform revenue.

H-28 Every posted journal balances per currency in exact minor units and is immutable.

H-29 Budget reservations are atomic across concurrent actions and remain held during unknown effect.

H-30 Timeout and ambiguous not-found do not prove external failure or authorize blind retry.

H-31 Webhook/poll races create at most one provider effect, entitlement, settlement and active journal batch.

H-32 Transfer advances relevant epochs and invalidates prior sessions, grants, caches, credentials and scheduled effects.

H-33 Signatures prove provenance/integrity of bytes under a trust decision, not physical or legal truth.

H-34 Key compromise appends status and re-evaluation; it never rewrites signed history.

H-35 Corrections, revocations, refunds, reversals and invalidations append.

H-36 Canonical RecordCore excludes tenant placement, stream order, transaction time and transport retry state.

H-37 Canonical and projected resources expose distinct digests/ETags and authorization semantics.

H-38 Telemetry values are inseparable from channel, unit, frame, clock, calibration, configuration and quality.

H-39 Capability outcomes distinguish available, unavailable, unknown and compiler error.

H-40 A physical-control command requires a current function lease, authority epoch, frame, envelope and safety decision.

H-41 Last-write-wins is forbidden for evidence, authority, configuration, auction, budget and accounting conflicts.

H-42 Every projection can be destroyed and rebuilt from ledger, artifacts, registry locks and deterministic code.

H-43 Every release proves canonical vectors, migration safety, replay and tenant non-interference before promotion.

H-44 Availability degradation never spends correctness, privacy, accounting or physical-safety invariants.

#H2. Cross-plane action transition matrix

#H3. Failure disposition registry