{
    "allowed_transitions": {
        "evidence_collected": [
            "pluralism_tested",
            "representation_disputed",
            "representation_capture_contained",
            "privacy_boundary_breached",
            "legitimacy_failed"
        ],
        "legitimacy_reviewed": [
            "legitimacy_attested",
            "legitimacy_with_limits",
            "participation_incomplete",
            "representation_disputed",
            "representation_capture_contained",
            "retaliation_contained",
            "privacy_boundary_breached",
            "mandate_disputed",
            "legitimacy_failed"
        ],
        "participation_invited": [
            "participation_open",
            "participation_incomplete",
            "mandate_disputed",
            "legitimacy_failed"
        ],
        "participation_open": [
            "evidence_collected",
            "participation_incomplete",
            "retaliation_contained",
            "privacy_boundary_breached",
            "legitimacy_failed"
        ],
        "pluralism_tested": [
            "legitimacy_reviewed",
            "representation_disputed",
            "representation_capture_contained",
            "legitimacy_failed"
        ]
    },
    "clean_terminal_states": [
        "legitimacy_attested"
    ],
    "initial_state": "participation_invited",
    "non_clean_terminal_states": [
        "legitimacy_with_limits",
        "participation_incomplete",
        "representation_disputed",
        "representation_capture_contained",
        "retaliation_contained",
        "privacy_boundary_breached",
        "mandate_disputed",
        "legitimacy_failed"
    ],
    "release": "R52",
    "schema": "antichrist.cx.public-oversight-legitimacy-state-machine.v1",
    "terminal_states": {
        "legitimacy_attested": {
            "clean": true,
            "meaning": "Voluntary, accessible, plural, privacy-preserving participation is corroborated for the bounded process and no unresolved obligation remains."
        },
        "legitimacy_failed": {
            "clean": false,
            "meaning": "The process cannot presently be trusted because capture, retaliation, inaccessible participation, missing evidence, or unresolved authority remains."
        },
        "legitimacy_with_limits": {
            "clean": false,
            "meaning": "The process has meaningful support but historical exclusion, observation limits, or bounded gaps prevent an unqualified claim."
        },
        "mandate_disputed": {
            "clean": false,
            "meaning": "Authority, funding, selection, or scope remains disputed and cannot support a clean representation claim."
        },
        "participation_incomplete": {
            "clean": false,
            "meaning": "Material participation channels, populations, languages, disability access, connectivity, or scheduling coverage remain incomplete."
        },
        "privacy_boundary_breached": {
            "clean": false,
            "meaning": "Identity-linking or reidentification material crossed a declared boundary, even if later removed."
        },
        "representation_capture_contained": {
            "clean": false,
            "meaning": "Tokenism or representation capture occurred and was bounded, disclosed, and re-opened; the history remains non-clean."
        },
        "representation_disputed": {
            "clean": false,
            "meaning": "A claimed representative mandate is materially contested and no single voice may be treated as universal."
        },
        "retaliation_contained": {
            "clean": false,
            "meaning": "An adverse consequence followed protected participation and was detected, rolled back, propagated, and proven; the history remains non-clean."
        }
    }
}