01 · Bound lineage
What correction is being tested?
This receipt does not replace the earlier records. It binds to them and asks whether their result survives change.
CTR-R44-001
3d82ff179a846a7bf984c964032dcd90bdcf4b53bb1331c80b3288273cf7edae
RMR-R45-001
0c9efbc407d928224f1490de26af948b1380d3049906e72f24eae01072fc0a0f
NRV-R46-001
e4568d52f1427f29e8787d353eadeda259ba60f2e6834c3603cce62300b222b4
SRP-R47-001
77219ee06998a878e30791c7a9324cd42d752a4e1e84b9198100eff30c7df1a6
02 · Federation change
What changed, and how did the obligation travel?
vendor replacement
scoped correction lineage plus recipient-specific pairwise reference
The correction may travel; a permanent map of the person may not.
The subject reference is recipient-specific, non-reusable, and not globally stable.
PAIR-R48-001-188940c75f
Participants
03 · Bounded observation
Where did the verifier look—and where did it not?
Observed surfaces
- decision store
- application cache
- event queue
- downstream export
- human workflow
- feature or model path
- screening vendor
Known blind spots
- Undeclared systems outside the named fictional federation
- Future integrations after the observation window
Absence of evidence outside this plan is not evidence of absence.
Synthetic recurrence canaries
Detect revival of revoked adverse state after federation change. No personal data.
Detect adverse use of refusal, contest, or correction. No personal data.
04 · Durability tests
Did the old judgment return or get re-derived?
Synthetic corrected and uncorrected controls were evaluated separately.
Limit: Synthetic test only.
A fictional housing platform replaces its screening vendor without allowing the withdrawn cross-context fraud inference to return.
Limit: The attestation covers the declared replacement window and named participants, not unknown future vendors.
Refusal, contest, correction, expiry, and human-review signals were exercised with synthetic events.
Limit: No claim is made beyond declared surfaces and dates.
Renewal used a new recipient-specific presentation identifier and did not expose the prior identifier.
Limit: External network metadata was outside scope.
05 · Anti-retaliation
Was refusal, contest, or correction used as a new adverse signal?
No within scope
Available
Fictional anti-retaliation officer
No prohibited use was observed within the bounded plan.
A person may decline to present portable proof without that refusal becoming guilt, risk, delay, or reduced eligibility.
06 · Unlinkable renewal
Can proof renew without becoming a permanent handle?
PRES-R47-001-OLD
PRES-R48-001-NEW-33774a97
unlinkable within declared observation
07 · Remaining obligations
What is still owed?
No open exception within the bounded plan.
This is not a claim of permanent or universal safety. Monitoring must not become a requirement that the affected person repeatedly prove innocence.
Continue bounded monitoring without requiring repeated proof from the affected person.
Independent signatory: Fictional independent durability auditor
08 · Integrity and machine access
Inspect the exact bounded record.
Receipt hashes
Input: 8fcd2a4bc3ae1fc17df6064b2c03e95167dba34cc8b0dd8843a6d7d4ab974b00
Output: 68e522046f67cbc8a57bd275e04258dafae0e2644c12063f057adfe02f096d97
Whole receipt: 2592c0f46d394a9febbd7ea935ed1a52f1367201f77f0ba8b2aec655858ac804
Machine-readable endpoints
/recovery-durability/receipt?id=FDR-R48-001/recovery-durability/schema/recovery-durability/state-machine/recovery-durability/anti-retaliation/recovery-durability/federation-change-protocol/recovery-durability/observation-plan/recovery-durability/unlinkable-renewalComplete selected receipt
{
"schema": "antichrist.cx.federated-recovery-durability-receipt.v1",
"release": "R48",
"receipt_id": "FDR-R48-001",
"fictional": true,
"title": "Vendor replacement preserves a housing correction",
"summary": "A fictional housing platform replaces its screening vendor without allowing the withdrawn cross-context fraud inference to return.",
"domain": "housing",
"terminal_status": "durable_attested",
"status_label": "Durable Attested",
"lineage": {
"contestability_receipt_id": "CTR-R44-001",
"contestability_receipt_sha256": "3d82ff179a846a7bf984c964032dcd90bdcf4b53bb1331c80b3288273cf7edae",
"remedy_receipt_id": "RMR-R45-001",
"remedy_receipt_sha256": "0c9efbc407d928224f1490de26af948b1380d3049906e72f24eae01072fc0a0f",
"non_recurrence_receipt_id": "NRV-R46-001",
"non_recurrence_receipt_sha256": "e4568d52f1427f29e8787d353eadeda259ba60f2e6834c3603cce62300b222b4",
"standing_recovery_receipt_id": "SRP-R47-001",
"standing_recovery_receipt_sha256": "77219ee06998a878e30791c7a9324cd42d752a4e1e84b9198100eff30c7df1a6",
"lineage_scope": "fictional demonstration lineage; hashes bind the referenced local R44–R47 artifacts where present"
},
"subject_reference": {
"scheme": "pairwise_ephemeral",
"value": "PAIR-R48-001-188940c75f",
"globally_stable": false,
"reusable_across_recipients": false
},
"observation_plan": {
"plan_id": "DOP-R48-001",
"window_start": "2026-08-01T00:00:00Z",
"window_end": "2026-08-29T23:59:59Z",
"bounded": true,
"independent_observer": "Fictional Independent Recovery Observatory",
"surfaces": [
"decision_store",
"application_cache",
"event_queue",
"downstream_export",
"human_workflow",
"feature_or_model_path",
"screening_vendor"
],
"known_blind_spots": [
"Undeclared systems outside the named fictional federation",
"Future integrations after the observation window"
],
"stop_conditions": [
"Any renewed adverse action from revoked material",
"Any use of refusal or correction as an adverse feature"
]
},
"federation_snapshot": {
"snapshot_id": "FED-R48-001",
"global_person_identifier": false,
"cleared_person_registry": false,
"participants": [
{
"participant_id": "PART-R48-001-A",
"role": "originating institution",
"pairwise_namespace": "pw-01-origin",
"correction_enforced": true
},
{
"participant_id": "PART-R48-001-B",
"role": "current service operator",
"pairwise_namespace": "pw-01-operator",
"correction_enforced": true
},
{
"participant_id": "PART-R48-001-C",
"role": "independent observer",
"pairwise_namespace": "pw-01-observer",
"correction_enforced": true
}
]
},
"federation_change": {
"event_id": "FCE-R48-001",
"type": "vendor_replacement",
"occurred_at": "2026-08-09T12:00:00Z",
"predecessor_scope": "fictional-prechange-scope-1",
"successor_scope": "fictional-postchange-scope-1",
"mapping_basis": "scoped correction lineage plus recipient-specific pairwise reference",
"stable_cross_context_identifier_used": false,
"negative_obligations_transferred": true,
"acknowledgment_complete": true
},
"anti_retaliation_assessment": {
"contract_id": "ARC-R48-001",
"tested_signals": [
"refusal_to_present",
"filing_a_contest",
"requesting_correction",
"successful_remedy",
"human_review_request",
"presentation_expiry",
"presentation_revocation",
"nonparticipation_in_portability"
],
"adverse_signal_use_detected": false,
"contained": true,
"equivalent_human_review_available": true,
"no_adverse_inference_rule_active": true,
"finding": "No prohibited use was observed within the bounded plan.",
"human_owner": "Fictional anti-retaliation officer",
"follow_up_deadline": null
},
"renewal_assessment": {
"performed": true,
"prior_presentation_id": "PRES-R47-001-OLD",
"renewed_presentation_id": "PRES-R48-001-NEW-33774a97",
"recipient_bound": true,
"purpose_bound": true,
"stable_identifier_reused": false,
"stable_hash_reused": false,
"cross_recipient_linkability_detected": false,
"result": "unlinkable_within_declared_observation"
},
"durability_tests": [
{
"test_id": "DT-R48-001-01",
"vector": "active_decision_path",
"result": "passed",
"evidence": "Synthetic corrected and uncorrected controls were evaluated separately.",
"limitation": "Synthetic test only."
},
{
"test_id": "DT-R48-001-02",
"vector": "vendor_replacement",
"result": "passed",
"evidence": "A fictional housing platform replaces its screening vendor without allowing the withdrawn cross-context fraud inference to return.",
"limitation": "The attestation covers the declared replacement window and named participants, not unknown future vendors."
},
{
"test_id": "DT-R48-001-03",
"vector": "retaliation_path",
"result": "passed",
"evidence": "Refusal, contest, correction, expiry, and human-review signals were exercised with synthetic events.",
"limitation": "No claim is made beyond declared surfaces and dates."
},
{
"test_id": "DT-R48-001-04",
"vector": "unlinkable_renewal",
"result": "passed",
"evidence": "Renewal used a new recipient-specific presentation identifier and did not expose the prior identifier.",
"limitation": "External network metadata was outside scope."
}
],
"canaries": [
{
"canary_id": "CAN-R48-001-A",
"synthetic": true,
"contains_personal_data": false,
"purpose": "Detect revival of revoked adverse state after federation change.",
"result": "not_triggered"
},
{
"canary_id": "CAN-R48-001-B",
"synthetic": true,
"contains_personal_data": false,
"purpose": "Detect adverse use of refusal, contest, or correction.",
"result": "not_triggered"
}
],
"exceptions": [],
"state_history": [
{
"state": "registered",
"at": "2026-08-01T10:00:00Z",
"actor": "Fictional recovery registry"
},
{
"state": "baseline_pinned",
"at": "2026-08-02T10:00:00Z",
"actor": "Fictional independent verifier"
},
{
"state": "federation_observed",
"at": "2026-08-05T10:00:00Z",
"actor": "Fictional independent verifier"
},
{
"state": "change_tested",
"at": "2026-08-10T10:00:00Z",
"actor": "Fictional independent verifier"
},
{
"state": "retaliation_tested",
"at": "2026-08-15T10:00:00Z",
"actor": "Fictional civil-rights reviewer"
},
{
"state": "renewal_tested",
"at": "2026-08-20T10:00:00Z",
"actor": "Fictional privacy engineer"
},
{
"state": "durable_attested",
"at": "2026-08-25T10:00:00Z",
"actor": "Fictional independent signatory"
}
],
"affected_person_proof": {
"proof_id": "APR-R48-001",
"delivered": true,
"reveals_original_stigma": false,
"contains_global_identifier": false,
"plain_language_status": "durable attested",
"limitations": "The attestation covers the declared replacement window and named participants, not unknown future vendors."
},
"human_accountability": {
"decision_owner": "Fictional chief recovery officer",
"independent_signatory": "Fictional independent durability auditor",
"signoff_at": "2026-08-25T10:00:00Z",
"can_change_result": true,
"next_action": "Continue bounded monitoring without requiring repeated proof from the affected person."
},
"limitations": [
"The attestation covers the declared replacement window and named participants, not unknown future vendors.",
"All people, institutions, events, identifiers, and dates in this receipt are fictional design-test material."
],
"input_sha256": "8fcd2a4bc3ae1fc17df6064b2c03e95167dba34cc8b0dd8843a6d7d4ab974b00",
"output_sha256": "68e522046f67cbc8a57bd275e04258dafae0e2644c12063f057adfe02f096d97",
"receipt_sha256": "2592c0f46d394a9febbd7ea935ed1a52f1367201f77f0ba8b2aec655858ac804"
}