Appendicesnormative v1.4.0bundle v1.4.117 blocks
Appendix M. Forty institutional conformance fixtures
Every fixture has a machine-readable companion carrying pre-state, exact input records, acting principal/grants, policy lock, expected admitted/rejected records, state vector, reason codes, and projection digest. The table is the human oracle summary.
Concept & directionLNK
Every fixture has a machine-readable companion carrying pre-state, exact input records, acting principal/grants, policy lock, expected admitted/rejected records, state vector, reason codes, and projection digest. The table is the human oracle summary.
#M1. Registry and title
| ID | Scenario | Expected semantic result |
|---|
| T-257 | Authenticated registry query returns NO_MATCH. | Retain receipt; clearance remains INDETERMINATE. |
| T-258 | Two current issuers assert incompatible title interests. | Retain both, open conflict case, and block transfer. |
| T-259 | A release assertion predates a newer encumbrance. | Do not project no lien. |
| T-260 | Claimant proves custody but lacks may_list_for_sale. | Deny listing. |
| T-261 | Registry source times out during settlement. | Suspend title review and preserve funds per settlement policy. |
| T-262 | Source role expired before its assertion. | Preserve bytes; exclude it from clearance. |
#M2. Insurance, assessment, and repair
| ID | Scenario | Expected semantic result |
|---|
| T-263 | Insurer requests defect telemetry without an exact disclosure grant. | Deny. |
| T-264 | Contract appears active but operation/configuration scope is unknown. | Coverage remains INDETERMINATE. |
| T-265 | Assessor and repairer are the same principal where independence is required. | Block assessment acceptance. |
| T-266 | Teardown raises estimate beyond authorization cap. | Enter AMENDMENT_REQUIRED. |
| T-267 | Repair completes without insurer authorization. | Preserve work history; do not fabricate authorization or reimbursement. |
| T-268 | Payment occurs before a coverage appeal. | Append journals and appeal independently. |
#M3. Moderation and appeals
| ID | Scenario | Expected semantic result |
|---|
| T-269 | Automated detector permanently removes a listing without required review. | Reject enforcement. |
| T-270 | Emergency restriction lacks expiry or review time. | Reject restriction. |
| T-271 | Reporter response would reveal a protected suppression rule. | Return a generic, non-revealing notice. |
| T-272 | Appeal is assigned to the original reviewer despite independence policy. | Reject assignment. |
| T-273 | Decision attempts to delete original content bytes. | Deny mutation; apply projection restriction. |
| T-274 | New policy is substituted retroactively into an old decision. | Preserve old decision; create explicit re-review. |
#M4. Youth and guardianship
| ID | Scenario | Expected semantic result |
|---|
| T-275 | Age is unknown and a stranger requests messaging plus behavioral ads. | Child-safe default denies both. |
| T-276 | Untrusted source claims guardian status. | Preserve assertion; issue no guardian grant. |
| T-277 | Guardian authority is revoked while publication and purchase are scheduled. | Freeze both and reevaluate. |
| T-278 | Protected user crosses an age threshold. | Create new protection decision; do not publish history. |
#M5. Delegated teams
| ID | Scenario | Expected semantic result |
|---|
| T-279 | Active team membership is presented as sale authority. | Deny. |
| T-280 | One manager proposes and approves their payout despite separation policy. | Deny. |
| T-281 | Subdelegate receives broader asset, time, or amount scope. | Reject grant. |
| T-282 | Offboarded manager uses a still-valid session at dispatch. | Reject by epoch; record handoff failure. |
#M6. Tax and accounting
| ID | Scenario | Expected semantic result |
|---|
| T-283 | GPS alone selects tax treatment. | Return INDETERMINATE. |
| T-284 | Tax quote is presented as proof of remittance. | Reject record-type substitution. |
| T-285 | One entity’s payable nets against another’s revenue. | Reject journal. |
| T-286 | Revised tax result edits a posted batch. | Reject mutation; append reversal/replacement. |
#M7. Incident response
| ID | Scenario | Expected semantic result |
|---|
| T-287 | Severity is lowered without evidence and decision. | Reject transition. |
| T-288 | Closure is requested with unknown provider effect. | Enter OPERATOR_REQUIRED. |
| T-289 | Notification decision omits policy lock or decider. | Reject decision. |
| T-290 | Responder requests tenant-wide telemetry without scope. | Deny. |
| T-291 | Post-incident remediation lacks owner or due state. | Fail closure gate. |
#M8. Market integrity
| ID | Scenario | Expected semantic result |
|---|
| T-292 | Seller-controlled related party submits bids. | Open case; exclude only through policy-bound decision. |
| T-293 | Two bidders share an IP address. | Signal only; no automatic exclusion. |
| T-294 | Model score attempts to cancel an auction. | Deny; require authorized serialized halt. |
| T-295 | Relationship evidence arrives after close but before settlement. | Preserve close; suspend and adjudicate settlement. |
| T-296 | Appeal attempts to edit an excluded bid receipt. | Reject mutation; append appeal and eligibility decision. |