Issue explicit stop orders
Name every active system and every revoked target identifier. Record when the order was acknowledged and preserve a hash of the stop evidence.
R45 · Remedy execution · five fictional demonstrations
A correction is not real until the old result stops acting. A revoked label must lose operative force everywhere it traveled. Auditability must not become permanent stigma.
Every person, institution, system, allegation, order, and event on this page is fictional. The records are constitutional and technical design demonstrations. They are not evidence that a real institution uses these practices, and they are not legal advice.
Direct answer
A notice saying “we corrected the record” is inadequate while an old score still blocks a payment, feeds a watch queue, survives in a cache, trains a derived feature, or travels in an export. R45 therefore treats correction as a verifiable sequence: authorize, stop, recompute, propagate, prove, and notify.
Name every active system and every revoked target identifier. Record when the order was acknowledged and preserve a hash of the stop evidence.
Exclude disputed or purpose-incompatible inputs, pin the algorithm version, and publish canonical input and output hashes.
Deliver explicit messages through an acyclic dependency graph. An acknowledgment must bind to the exact message and target identifiers.
Test active queries, caches, features, and training registries. A sealed audit residue remains segregated, narrow, logged, and expiry-bound.
Exactly five scenarios
The scenario cards are summaries, not rankings. Each exact receipt is validated against the single antichrist.cx.remedy-receipt.v1 authority.
Purpose review established that an imported fraud signal could not lawfully or logically stand in for current housing evidence.
verified
Human review confirmed that a support referral was purpose-limited and could not become a punitive or permanent threat label.
verified
The remedy owner removed a speculative health inference that was unsupported by purpose-matched evidence.
verified
Association evidence was disaggregated from personal intent and the access restriction was formally rescinded.
partial exception
A separate remedy review found that a predictive label overread a low-base-rate association signal and lacked source-provenance fitness for individual action.
verified
One explicit state machine
The normal path is proposed → authorized → stop ordered → recomputing → propagating → verified. Rejected, expired, rolled back, and partial-exception branches remain explicit. A terminal revocation cannot quietly return to active use.
A bounded correction request identifies the superseded receipt and target scope.
A named human owner accepts authority and responsibility for the correction.
Every current use receives an explicit stop instruction before recomputation continues.
The decision is rebuilt from permitted inputs under a pinned deterministic version.
Revocation messages move through declared downstream dependencies and collect acknowledgments.
All active uses are stopped, required acknowledgments exist, subject proof is delivered, and forgetting tests pass.
A delivery failure remains visible, human-owned, deadline-bound, and incapable of being mislabeled as full verification.
An emergency skip must state authority, human owner, reason, exact scope, and review deadline. Missing any field fails closed.
The same key plus the same canonical payload yields the same result. A changed payload under the same key is rejected.
Restorable server state
The URL carries the selected receipt and role. The role changes reading emphasis only; it never hides or rewrites the underlying record.
This lens changes reading order only; it hides no remedy field.
Priority fields: subject_notice · stop_orders · recomputation outputs · contest route
Antichrist.cx R45 human-readable remedy receipt
RMR-R45-001 · exact fictional receipt
Fictional remedy demonstration only. This record describes no real person, institution, allegation, system, or event.
Stable relationship to R44
The R45 record binds to the exact R44 contestability receipt by stable identifier and canonical hash. That preserves historical accountability while keeping the corrected current state separate.
Decision ID: DEC-001
Scope stopped: eligibility hold and derived applicant-risk feature
R44 hash: sha256:0c3766d3da2f5430c506d685c04d44501fd4ab5905c67f495dac27b1d9f42d46
Prior status: held_for_human_review
Prior outcome: No denial may issue until the imported signal is separated and contested.
Path nodes: 6
Previously declared downstream holders: 3
Plain-language execution timeline
Advance remedy after proposed evidence completed.
Accountable actor: Fictional human remedy owner · Scope: eligibility hold and derived applicant-risk feature
Advance remedy after authorized evidence completed.
Accountable actor: Fictional operations lead · Scope: eligibility hold and derived applicant-risk feature
Advance remedy after stop_ordered evidence completed.
Accountable actor: Fictional operations lead · Scope: eligibility hold and derived applicant-risk feature
Advance remedy after recomputing evidence completed.
Accountable actor: Fictional downstream coordinator · Scope: eligibility hold and derived applicant-risk feature
Advance remedy after propagating evidence completed.
Accountable actor: Fictional human remedy owner · Scope: eligibility hold and derived applicant-risk feature
Active-use stop orders
stopped
Ordered: 2026-08-26T12:23:00Z
Acknowledged: 2026-08-26T12:26:00Z
Stop evidence: sha256:2d11b53fc96ff1dd25a1c79672d95e59b1bc3ce1e11a132b24fe473900927e0f
stopped
Ordered: 2026-08-26T12:24:00Z
Acknowledged: 2026-08-26T12:28:00Z
Stop evidence: sha256:f5492a6a8cbb48d0f6b23b867700d2579f3e2700466952f01f500f8a8613e95a
stopped
Ordered: 2026-08-26T12:25:00Z
Acknowledged: 2026-08-26T12:30:00Z
Stop evidence: sha256:f240a833f47ba8274b37cb18140a03a6faa02cb34aa38c21827d74ef2842dda7
Deterministic recomputation
Engine: purpose-limited deterministic rule evaluation · Version: r45-remedy-engine-1.0.0 · 2026-08-26T12:31:00Z to 2026-08-26T12:36:00Z
direct evidence retained
sha256:07177380f439c6c322d1dfa6aa557acf94671e805607f6f434fc0743ad44536b
FLAG-CROSS-CONTEXT-FRAUD
sha256:b3a2ecfc58ee71521541c04b1a64e0d14b82b12393825f25902d8455d84f4794
context and correction authority
sha256:fa2e494877d20f37d95a3015dad144bca05e7930bf57d826f17229d1c9e2b230
Fictional human review board correction order R45-HOU-01
sha256:50f185f35461387ab3f85f38a7431abb8443a7f06b7449b806b98c24815173c1
sha256:32c1cc004d4c0cba82efcf825feac8abd32deb6d62770ac7fd0a4e21adaebb77
sha256:ce93a163b08fcd3e53d7c4ba6f3356e6efce2898fea586bc6357f7b1ef8a4cc1
Canonical input set: sha256:268917b21564f5402f6aa41e2aa8070ab5ec1bb1a202431c8e42f02fed7eda01
Canonical output set: sha256:6408b31b4f1ba39da6f9bb0e42ecc8deac441852775ae2df168a1180e3be6ca4
Downstream revocation graph
acknowledged
Sent: 2026-08-26T12:43:00Z · Retries: 0 · Depends on: none
Delivery receipt: DLV-01-01
Acknowledged: 2026-08-26T12:47:00Z — Revoked targets are inactive and excluded from current decision paths.
acknowledged
Sent: 2026-08-26T12:46:00Z · Retries: 0 · Depends on: REVOKE-01-01
Delivery receipt: DLV-01-02
Acknowledged: 2026-08-26T12:51:00Z — Revoked targets are inactive and excluded from current decision paths.
acknowledged
Sent: 2026-08-26T12:49:00Z · Retries: 0 · Depends on: REVOKE-01-02
Delivery receipt: DLV-01-03
Acknowledged: 2026-08-26T12:55:00Z — Revoked targets are inactive and excluded from current decision paths.
Proof to the affected person
Application recomputed without the cross-context signal; the former hold and derived feature no longer act.
Channel: Accessible fictional written and screen-reader-ready notice
Delivered: 2026-08-26T13:02:00Z
Receipt RMR-R45-001 was delivered for SUB-001 at 2026-08-26T13:02:00Z.
sha256:893f3ea59ab3aec5264b8d453f6436455405d853c2a83e8cc2fcc635f3bf6e58
Active state versus sealed accountability
The active zone may expose the recomputed current outcome and proof that the former targets are revoked. It may not query the sealed history to recreate a risk score.
Prove that the correction occurred and test recurrence without enabling eligibility, suspicion, or risk scoring.
Active use prohibited: yes
Queryable by active systems: no
Expires: 2027-08-26T12:00:00Z
Retained: remedy receipt id · superseded receipt id and hash · transition timestamps · revocation acknowledgment proofs · whole-receipt hash
Excluded: raw intimate content · free-text allegations · reusable risk features · unbounded identity profile
ACT-R45-AUDITOR-01 at 2026-08-26T13:07:00Z
Verify correction completeness and sealed/active separation.
Institutional-forgetting evidence
Deletion language is not enough. Each record includes a typed probe, exact target identifiers, a test result, and a canonical proof hash.
Query active interfaces and derived-feature registries for the revoked target identifiers.
Checked: 2026-08-26T13:11:00Z · Active results: 0 · Sealed results: 1
sha256:96704bd9530fb747385cb3c3f5dbd60f9842faf94cd482a8ed0c12698ff0f00c
Query active interfaces and derived-feature registries for the revoked target identifiers.
Checked: 2026-08-26T13:12:00Z · Active results: 0 · Sealed results: 0
sha256:9c1535ff85e445ac4f431fe6ddcf3ad74726a67c3da35b4ef6c1c8ce548b250d
Query active interfaces and derived-feature registries for the revoked target identifiers.
Checked: 2026-08-26T13:13:00Z · Active results: 0 · Sealed results: 0
sha256:c0a2d3d27824d5cf9b6d6c5ec55860ef72ed8b712edb20ede7c20aa66c153df7
No false completion
Scope: eligibility hold and derived applicant-risk feature
All active uses stopped: yes
All downstream acknowledged: yes
Signed: 2026-08-26T13:20:00Z
Replay safety
The replay result is same_result at 2026-08-26T13:25:00Z.
sha256:ae441484e1f4702c79df7640b3978f1aacae98243e88b72514c2cd552d86d904
Canonical replay payload: sha256:ae441484e1f4702c79df7640b3978f1aacae98243e88b72514c2cd552d86d904
sha256:a84cb7d34aaafca2d0e5f6b3746736e65a8a4e2e6b07e2ec4166d4e016fcee04
Replay result: sha256:a84cb7d34aaafca2d0e5f6b3746736e65a8a4e2e6b07e2ec4166d4e016fcee04
Maximum-three comparison · no ranking
Choose up to three fictional receipts. The server enforces the same maximum as the JavaScript enhancement. Selection produces no score, preference, or rank.
State: verified
Stop orders: 3
Downstream acknowledgments: 3 / 3
Forgetting proofs: 3
Open exceptions: 0
Exact machine-readable record
The PHP authority rejects malformed UTF-8, duplicate decoded keys, unsafe Unicode controls, unknown properties, broken references, invalid transitions, changed replay payloads, forged acknowledgments, graph cycles, stale versions, ambiguous nulls, and forged hashes.
Whole receipt hash: sha256:48fadf5a67016ef077c09c2180d5b4245f47003025c96c0d158669c4c41633db
{
"actors": [
{
"actor_id": "ACT-R45-OWNER-01",
"contact_route": "Accessible fictional remedy desk",
"human": true,
"name": "Fictional human remedy owner",
"role": "human_remedy_owner"
},
{
"actor_id": "ACT-R45-OPERATOR-01",
"contact_route": "Fictional operations channel",
"human": true,
"name": "Fictional operations lead",
"role": "human_system_operator"
},
{
"actor_id": "ACT-R45-DOWNSTREAM-01",
"contact_route": "Fictional downstream coordination channel",
"human": true,
"name": "Fictional downstream coordinator",
"role": "human_downstream_owner"
},
{
"actor_id": "ACT-R45-AUDITOR-01",
"contact_route": "Fictional bounded audit channel",
"human": true,
"name": "Fictional independent auditor",
"role": "human_auditor"
},
{
"actor_id": "ACT-R45-ADVOCATE-01",
"contact_route": "Fictional advocacy channel",
"human": true,
"name": "Fictional affected-person advocate",
"role": "human_advocate"
}
],
"correction_trigger": {
"authorized_by_actor_id": "ACT-R45-OWNER-01",
"discovered_at": "2026-08-26T12:02:00Z",
"source_of_authority": "Fictional human review board correction order R45-HOU-01",
"summary": "Purpose review established that an imported fraud signal could not lawfully or logically stand in for current housing evidence.",
"trigger_id": "TRIGGER-R45-001"
},
"downstream_revocations": [
{
"acknowledgment": {
"acknowledgment_id": "ACK-01-01",
"at": "2026-08-26T12:47:00Z",
"message_id": "REVOKE-01-01",
"statement": "Revoked targets are inactive and excluded from current decision paths."
},
"attempts": [
{
"at": "2026-08-26T12:45:00Z",
"attempt": 1,
"detail": "Revocation message delivered.",
"result": "delivered"
}
],
"delivered_at": "2026-08-26T12:45:00Z",
"delivery_receipt": "DLV-01-01",
"depends_on": [],
"label": "Housing eligibility service",
"message_id": "REVOKE-01-01",
"retries": 0,
"sent_at": "2026-08-26T12:43:00Z",
"status": "acknowledged",
"subject_id": "SUB-001",
"system_id": "HOU-ELIG",
"target_ids": [
"FLAG-CROSS-CONTEXT-FRAUD",
"FEATURE-HOUSING-RISK-7"
]
},
{
"acknowledgment": {
"acknowledgment_id": "ACK-01-02",
"at": "2026-08-26T12:51:00Z",
"message_id": "REVOKE-01-02",
"statement": "Revoked targets are inactive and excluded from current decision paths."
},
"attempts": [
{
"at": "2026-08-26T12:49:00Z",
"attempt": 1,
"detail": "Revocation message delivered.",
"result": "delivered"
}
],
"delivered_at": "2026-08-26T12:49:00Z",
"delivery_receipt": "DLV-01-02",
"depends_on": [
"REVOKE-01-01"
],
"label": "Applicant notice service",
"message_id": "REVOKE-01-02",
"retries": 0,
"sent_at": "2026-08-26T12:46:00Z",
"status": "acknowledged",
"subject_id": "SUB-001",
"system_id": "HOU-NOTICE",
"target_ids": [
"FLAG-CROSS-CONTEXT-FRAUD",
"FEATURE-HOUSING-RISK-7"
]
},
{
"acknowledgment": {
"acknowledgment_id": "ACK-01-03",
"at": "2026-08-26T12:55:00Z",
"message_id": "REVOKE-01-03",
"statement": "Revoked targets are inactive and excluded from current decision paths."
},
"attempts": [
{
"at": "2026-08-26T12:53:00Z",
"attempt": 1,
"detail": "Revocation message delivered.",
"result": "delivered"
}
],
"delivered_at": "2026-08-26T12:53:00Z",
"delivery_receipt": "DLV-01-03",
"depends_on": [
"REVOKE-01-02"
],
"label": "Decision export cache",
"message_id": "REVOKE-01-03",
"retries": 0,
"sent_at": "2026-08-26T12:49:00Z",
"status": "acknowledged",
"subject_id": "SUB-001",
"system_id": "HOU-EXPORT",
"target_ids": [
"FLAG-CROSS-CONTEXT-FRAUD",
"FEATURE-HOUSING-RISK-7"
]
}
],
"fiction_notice": "Fictional remedy demonstration only. This record describes no real person, institution, allegation, system, or event.",
"fictional": true,
"final_signoff": {
"actor_id": "ACT-R45-OWNER-01",
"all_active_uses_stopped": true,
"all_downstream_acknowledged": true,
"at": "2026-08-26T13:20:00Z",
"conclusion": "All declared active uses stopped and all downstream holders acknowledged revocation.",
"scope": "eligibility hold and derived applicant-risk feature"
},
"forgetting_evidence": [
{
"checked_at": "2026-08-26T13:11:00Z",
"evidence_id": "FORGET-01-01",
"proof": {
"active_result_count": 0,
"probe_id": "FORGET-PROBE-01-01",
"query": "FLAG-CROSS-CONTEXT-FRAUD",
"scope": "active system interface only",
"sealed_result_count": 1
},
"proof_hash": "sha256:96704bd9530fb747385cb3c3f5dbd60f9842faf94cd482a8ed0c12698ff0f00c",
"result": "not_queryable",
"system_id": "HOU-ELIG",
"target_ids": [
"FLAG-CROSS-CONTEXT-FRAUD",
"FEATURE-HOUSING-RISK-7"
],
"test": "Query active interfaces and derived-feature registries for the revoked target identifiers."
},
{
"checked_at": "2026-08-26T13:12:00Z",
"evidence_id": "FORGET-01-02",
"proof": {
"active_result_count": 0,
"probe_id": "FORGET-PROBE-01-02",
"query": "FLAG-CROSS-CONTEXT-FRAUD",
"scope": "active system interface only",
"sealed_result_count": 0
},
"proof_hash": "sha256:9c1535ff85e445ac4f431fe6ddcf3ad74726a67c3da35b4ef6c1c8ce548b250d",
"result": "feature_deactivated",
"system_id": "HOU-NOTICE",
"target_ids": [
"FLAG-CROSS-CONTEXT-FRAUD",
"FEATURE-HOUSING-RISK-7"
],
"test": "Query active interfaces and derived-feature registries for the revoked target identifiers."
},
{
"checked_at": "2026-08-26T13:13:00Z",
"evidence_id": "FORGET-01-03",
"proof": {
"active_result_count": 0,
"probe_id": "FORGET-PROBE-01-03",
"query": "FLAG-CROSS-CONTEXT-FRAUD",
"scope": "active system interface only",
"sealed_result_count": 0
},
"proof_hash": "sha256:c0a2d3d27824d5cf9b6d6c5ec55860ef72ed8b712edb20ede7c20aa66c153df7",
"result": "cache_absent",
"system_id": "HOU-EXPORT",
"target_ids": [
"FLAG-CROSS-CONTEXT-FRAUD",
"FEATURE-HOUSING-RISK-7"
],
"test": "Query active interfaces and derived-feature registries for the revoked target identifiers."
}
],
"idempotency": {
"initial_payload": {
"remedy_receipt_id": "RMR-R45-001",
"superseded_receipt_id": "CTR-R44-001",
"trigger_id": "TRIGGER-R45-001"
},
"initial_payload_hash": "sha256:ae441484e1f4702c79df7640b3978f1aacae98243e88b72514c2cd552d86d904",
"key": "R45-IDEMP-001",
"replay_at": "2026-08-26T13:25:00Z",
"replay_payload": {
"remedy_receipt_id": "RMR-R45-001",
"superseded_receipt_id": "CTR-R44-001",
"trigger_id": "TRIGGER-R45-001"
},
"replay_payload_hash": "sha256:ae441484e1f4702c79df7640b3978f1aacae98243e88b72514c2cd552d86d904",
"replay_result": "same_result",
"replay_result_hash": "sha256:a84cb7d34aaafca2d0e5f6b3746736e65a8a4e2e6b07e2ec4166d4e016fcee04",
"result_hash": "sha256:a84cb7d34aaafca2d0e5f6b3746736e65a8a4e2e6b07e2ec4166d4e016fcee04",
"result_payload": {
"current_state": "verified",
"recomputation_output_hash": "sha256:6408b31b4f1ba39da6f9bb0e42ecc8deac441852775ae2df168a1180e3be6ca4",
"subject_proof_hash": "sha256:893f3ea59ab3aec5264b8d453f6436455405d853c2a83e8cc2fcc635f3bf6e58"
}
},
"issued_at": "2026-08-26T12:00:00Z",
"receipt_hash": "sha256:48fadf5a67016ef077c09c2180d5b4245f47003025c96c0d158669c4c41633db",
"recomputation": {
"algorithm": "purpose-limited deterministic rule evaluation",
"completed_at": "2026-08-26T12:36:00Z",
"input_hash": "sha256:268917b21564f5402f6aa41e2aa8070ab5ec1bb1a202431c8e42f02fed7eda01",
"inputs": [
{
"canonical_hash": "sha256:07177380f439c6c322d1dfa6aa557acf94671e805607f6f434fc0743ad44536b",
"input_id": "IN-01-01",
"source": "Purpose-matched submitted record",
"status": "included",
"value": "direct evidence retained"
},
{
"canonical_hash": "sha256:b3a2ecfc58ee71521541c04b1a64e0d14b82b12393825f25902d8455d84f4794",
"input_id": "IN-01-02",
"source": "Disputed or cross-context signal",
"status": "excluded",
"value": "FLAG-CROSS-CONTEXT-FRAUD"
},
{
"canonical_hash": "sha256:fa2e494877d20f37d95a3015dad144bca05e7930bf57d826f17229d1c9e2b230",
"input_id": "IN-01-03",
"source": "Human correction statement",
"status": "included",
"value": "context and correction authority"
},
{
"canonical_hash": "sha256:50f185f35461387ab3f85f38a7431abb8443a7f06b7449b806b98c24815173c1",
"input_id": "IN-01-04",
"source": "Version-pinned fictional policy",
"status": "included",
"value": "Fictional human review board correction order R45-HOU-01"
}
],
"output_hash": "sha256:6408b31b4f1ba39da6f9bb0e42ecc8deac441852775ae2df168a1180e3be6ca4",
"outputs": [
{
"canonical_hash": "sha256:32c1cc004d4c0cba82efcf825feac8abd32deb6d62770ac7fd0a4e21adaebb77",
"output_id": "OUT-01-01",
"status": "current",
"summary": "Application recomputed without the cross-context signal; the former hold and derived feature no longer act."
},
{
"canonical_hash": "sha256:ce93a163b08fcd3e53d7c4ba6f3356e6efce2898fea586bc6357f7b1ef8a4cc1",
"output_id": "OUT-01-02",
"status": "revoked",
"summary": "Former operative state removed: eligibility hold and derived applicant-risk feature."
}
],
"started_at": "2026-08-26T12:31:00Z",
"version": "r45-remedy-engine-1.0.0"
},
"remedy_receipt_id": "RMR-R45-001",
"schema": "antichrist.cx.remedy-receipt.v1",
"sealed_audit_record": {
"access_log": [
{
"access_id": "ACCESS-01-01",
"actor_id": "ACT-R45-AUDITOR-01",
"at": "2026-08-26T13:07:00Z",
"reason": "Verify correction completeness and sealed/active separation."
}
],
"access_roles": [
"human_auditor",
"human_remedy_owner"
],
"active_use_prohibited": true,
"excluded_fields": [
"raw intimate content",
"free-text allegations",
"reusable risk features",
"unbounded identity profile"
],
"expires_at": "2027-08-26T12:00:00Z",
"purpose": "Prove that the correction occurred and test recurrence without enabling eligibility, suspicion, or risk scoring.",
"queryable_by_active_systems": false,
"record_id": "SEALED-R45-001",
"retained_fields": [
"remedy receipt id",
"superseded receipt id and hash",
"transition timestamps",
"revocation acknowledgment proofs",
"whole-receipt hash"
],
"retention_rationale": "Bounded accountability and recurrence testing for one year in this fictional demonstration.",
"sealed_at": "2026-08-26T13:06:00Z"
},
"state_machine": {
"current_state": "verified",
"definition_id": "antichrist.cx.remedy-state-machine.r45.v1",
"transitions": [
{
"actor_id": "ACT-R45-OWNER-01",
"at": "2026-08-26T12:10:00Z",
"authority": "Fictional human review board correction order R45-HOU-01",
"emergency": false,
"from": "proposed",
"reason": "Advance remedy after proposed evidence completed.",
"scope": "eligibility hold and derived applicant-risk feature",
"to": "authorized",
"transition_id": "TRN-01-01"
},
{
"actor_id": "ACT-R45-OPERATOR-01",
"at": "2026-08-26T12:20:00Z",
"authority": "Fictional human review board correction order R45-HOU-01",
"emergency": false,
"from": "authorized",
"reason": "Advance remedy after authorized evidence completed.",
"scope": "eligibility hold and derived applicant-risk feature",
"to": "stop_ordered",
"transition_id": "TRN-01-02"
},
{
"actor_id": "ACT-R45-OPERATOR-01",
"at": "2026-08-26T12:30:00Z",
"authority": "Fictional human review board correction order R45-HOU-01",
"emergency": false,
"from": "stop_ordered",
"reason": "Advance remedy after stop_ordered evidence completed.",
"scope": "eligibility hold and derived applicant-risk feature",
"to": "recomputing",
"transition_id": "TRN-01-03"
},
{
"actor_id": "ACT-R45-DOWNSTREAM-01",
"at": "2026-08-26T12:40:00Z",
"authority": "Fictional human review board correction order R45-HOU-01",
"emergency": false,
"from": "recomputing",
"reason": "Advance remedy after recomputing evidence completed.",
"scope": "eligibility hold and derived applicant-risk feature",
"to": "propagating",
"transition_id": "TRN-01-04"
},
{
"actor_id": "ACT-R45-OWNER-01",
"at": "2026-08-26T12:50:00Z",
"authority": "Fictional human review board correction order R45-HOU-01",
"emergency": false,
"from": "propagating",
"reason": "Advance remedy after propagating evidence completed.",
"scope": "eligibility hold and derived applicant-risk feature",
"to": "verified",
"transition_id": "TRN-01-05"
}
]
},
"stop_orders": [
{
"acknowledged_at": "2026-08-26T12:26:00Z",
"actor_id": "ACT-R45-OPERATOR-01",
"evidence": {
"event_id": "STOP-EVT-01-01",
"observed_at": "2026-08-26T12:26:00Z",
"status_after": "revoked",
"status_before": "active"
},
"evidence_hash": "sha256:2d11b53fc96ff1dd25a1c79672d95e59b1bc3ce1e11a132b24fe473900927e0f",
"label": "Housing eligibility service",
"ordered_at": "2026-08-26T12:23:00Z",
"result": "stopped",
"stop_order_id": "STOP-01-01",
"system_id": "HOU-ELIG",
"target_ids": [
"FLAG-CROSS-CONTEXT-FRAUD",
"FEATURE-HOUSING-RISK-7"
]
},
{
"acknowledged_at": "2026-08-26T12:28:00Z",
"actor_id": "ACT-R45-OPERATOR-01",
"evidence": {
"event_id": "STOP-EVT-01-02",
"observed_at": "2026-08-26T12:28:00Z",
"status_after": "revoked",
"status_before": "active"
},
"evidence_hash": "sha256:f5492a6a8cbb48d0f6b23b867700d2579f3e2700466952f01f500f8a8613e95a",
"label": "Applicant notice service",
"ordered_at": "2026-08-26T12:24:00Z",
"result": "stopped",
"stop_order_id": "STOP-01-02",
"system_id": "HOU-NOTICE",
"target_ids": [
"FLAG-CROSS-CONTEXT-FRAUD",
"FEATURE-HOUSING-RISK-7"
]
},
{
"acknowledged_at": "2026-08-26T12:30:00Z",
"actor_id": "ACT-R45-DOWNSTREAM-01",
"evidence": {
"event_id": "STOP-EVT-01-03",
"observed_at": "2026-08-26T12:30:00Z",
"status_after": "revoked",
"status_before": "active"
},
"evidence_hash": "sha256:f240a833f47ba8274b37cb18140a03a6faa02cb34aa38c21827d74ef2842dda7",
"label": "Decision export cache",
"ordered_at": "2026-08-26T12:25:00Z",
"result": "stopped",
"stop_order_id": "STOP-01-03",
"system_id": "HOU-EXPORT",
"target_ids": [
"FLAG-CROSS-CONTEXT-FRAUD",
"FEATURE-HOUSING-RISK-7"
]
}
],
"subject": {
"label": "Fictional housing applicant",
"subject_id": "SUB-001"
},
"subject_notice": {
"accessible_contest_route": "/contestability",
"channel": "Accessible fictional written and screen-reader-ready notice",
"delivered": true,
"delivered_at": "2026-08-26T13:02:00Z",
"proof": {
"delivered_at": "2026-08-26T13:02:00Z",
"proof_id": "NOTICE-PROOF-01",
"remedy_receipt_id": "RMR-R45-001",
"subject_id": "SUB-001"
},
"proof_hash": "sha256:893f3ea59ab3aec5264b8d453f6436455405d853c2a83e8cc2fcc635f3bf6e58",
"summary": "Application recomputed without the cross-context signal; the former hold and derived feature no longer act."
},
"superseded_decision": {
"decision_id": "DEC-001",
"receipt_hash": "sha256:0c3766d3da2f5430c506d685c04d44501fd4ab5905c67f495dac27b1d9f42d46",
"receipt_id": "CTR-R44-001",
"scope": "eligibility hold and derived applicant-risk feature"
},
"title": "Housing hold corrected after cross-context signal separation",
"unresolved_exceptions": []
}
Local-only structural inspection
This bounded browser screen performs no fetch and creates no persistent state. It does not replace the authoritative PHP validator, which checks raw duplicate keys, exact RFC 6901 pointers, graph semantics, idempotency, and canonical hashes.
Direct answers for humans and answer engines
A correction is complete only after the prior result stops acting, permitted inputs are recomputed, every declared downstream holder acknowledges revocation or enters a named deadline-bound exception, the affected person receives proof, and active systems cannot query the revoked label or derived feature.
Institutional forgetting means revoked labels and derived features are absent from active queries, caches, exports, decision paths, and training inputs. A narrow sealed audit record may remain only to prove the correction and test non-recurrence; active systems cannot use it.
An active record can change eligibility, access, suspicion, or treatment. A sealed record is purpose-limited, access-logged, expiry-bound, and technically barred from active decision systems. It proves accountability without recreating operative stigma.
The remedy cannot be labeled fully verified. It enters partial_exception, names a human owner, records failed delivery attempts, assigns a deadline and escalation path, and keeps the stop order active until acknowledgment arrives.
The same idempotency key with the same canonical payload returns the same result. Reusing that key with a changed payload fails closed so replay cannot widen the correction, duplicate it, or quietly change its target.
No. The records are explicitly fictional design demonstrations. They show what a machine-verifiable remedy architecture can require; they make no allegation and prove no real-world deployment.