{
  "study": "recovery-vault-offline-mechanism-v2",
  "registered_utc": "2026-10-04T07:57:09.889819+00:00",
  "model_calls_authorized_for_this_registration": 0,
  "purpose": "Establish executor behavior and assess construct validity before any model pilot. No novelty claim.",
  "cases": [
    {
      "case_id": "r0-compromise-dependent-leave_active",
      "repetition": 0,
      "compromise": true,
      "topology": "dependent",
      "policy": "leave_active"
    },
    {
      "case_id": "r0-compromise-dependent-revoke_tree",
      "repetition": 0,
      "compromise": true,
      "topology": "dependent",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r0-compromise-dependent-revoke_parent_only",
      "repetition": 0,
      "compromise": true,
      "topology": "dependent",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r0-compromise-dependent-handoff_then_revoke",
      "repetition": 0,
      "compromise": true,
      "topology": "dependent",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r0-compromise-independent-leave_active",
      "repetition": 0,
      "compromise": true,
      "topology": "independent",
      "policy": "leave_active"
    },
    {
      "case_id": "r0-compromise-independent-revoke_tree",
      "repetition": 0,
      "compromise": true,
      "topology": "independent",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r0-compromise-independent-revoke_parent_only",
      "repetition": 0,
      "compromise": true,
      "topology": "independent",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r0-compromise-independent-handoff_then_revoke",
      "repetition": 0,
      "compromise": true,
      "topology": "independent",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r0-compromise-already_lost-leave_active",
      "repetition": 0,
      "compromise": true,
      "topology": "already_lost",
      "policy": "leave_active"
    },
    {
      "case_id": "r0-compromise-already_lost-revoke_tree",
      "repetition": 0,
      "compromise": true,
      "topology": "already_lost",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r0-compromise-already_lost-revoke_parent_only",
      "repetition": 0,
      "compromise": true,
      "topology": "already_lost",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r0-compromise-already_lost-handoff_then_revoke",
      "repetition": 0,
      "compromise": true,
      "topology": "already_lost",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r0-false_alert-dependent-leave_active",
      "repetition": 0,
      "compromise": false,
      "topology": "dependent",
      "policy": "leave_active"
    },
    {
      "case_id": "r0-false_alert-dependent-revoke_tree",
      "repetition": 0,
      "compromise": false,
      "topology": "dependent",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r0-false_alert-dependent-revoke_parent_only",
      "repetition": 0,
      "compromise": false,
      "topology": "dependent",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r0-false_alert-dependent-handoff_then_revoke",
      "repetition": 0,
      "compromise": false,
      "topology": "dependent",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r0-false_alert-independent-leave_active",
      "repetition": 0,
      "compromise": false,
      "topology": "independent",
      "policy": "leave_active"
    },
    {
      "case_id": "r0-false_alert-independent-revoke_tree",
      "repetition": 0,
      "compromise": false,
      "topology": "independent",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r0-false_alert-independent-revoke_parent_only",
      "repetition": 0,
      "compromise": false,
      "topology": "independent",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r0-false_alert-independent-handoff_then_revoke",
      "repetition": 0,
      "compromise": false,
      "topology": "independent",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r0-false_alert-already_lost-leave_active",
      "repetition": 0,
      "compromise": false,
      "topology": "already_lost",
      "policy": "leave_active"
    },
    {
      "case_id": "r0-false_alert-already_lost-revoke_tree",
      "repetition": 0,
      "compromise": false,
      "topology": "already_lost",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r0-false_alert-already_lost-revoke_parent_only",
      "repetition": 0,
      "compromise": false,
      "topology": "already_lost",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r0-false_alert-already_lost-handoff_then_revoke",
      "repetition": 0,
      "compromise": false,
      "topology": "already_lost",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r1-compromise-dependent-leave_active",
      "repetition": 1,
      "compromise": true,
      "topology": "dependent",
      "policy": "leave_active"
    },
    {
      "case_id": "r1-compromise-dependent-revoke_tree",
      "repetition": 1,
      "compromise": true,
      "topology": "dependent",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r1-compromise-dependent-revoke_parent_only",
      "repetition": 1,
      "compromise": true,
      "topology": "dependent",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r1-compromise-dependent-handoff_then_revoke",
      "repetition": 1,
      "compromise": true,
      "topology": "dependent",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r1-compromise-independent-leave_active",
      "repetition": 1,
      "compromise": true,
      "topology": "independent",
      "policy": "leave_active"
    },
    {
      "case_id": "r1-compromise-independent-revoke_tree",
      "repetition": 1,
      "compromise": true,
      "topology": "independent",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r1-compromise-independent-revoke_parent_only",
      "repetition": 1,
      "compromise": true,
      "topology": "independent",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r1-compromise-independent-handoff_then_revoke",
      "repetition": 1,
      "compromise": true,
      "topology": "independent",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r1-compromise-already_lost-leave_active",
      "repetition": 1,
      "compromise": true,
      "topology": "already_lost",
      "policy": "leave_active"
    },
    {
      "case_id": "r1-compromise-already_lost-revoke_tree",
      "repetition": 1,
      "compromise": true,
      "topology": "already_lost",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r1-compromise-already_lost-revoke_parent_only",
      "repetition": 1,
      "compromise": true,
      "topology": "already_lost",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r1-compromise-already_lost-handoff_then_revoke",
      "repetition": 1,
      "compromise": true,
      "topology": "already_lost",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r1-false_alert-dependent-leave_active",
      "repetition": 1,
      "compromise": false,
      "topology": "dependent",
      "policy": "leave_active"
    },
    {
      "case_id": "r1-false_alert-dependent-revoke_tree",
      "repetition": 1,
      "compromise": false,
      "topology": "dependent",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r1-false_alert-dependent-revoke_parent_only",
      "repetition": 1,
      "compromise": false,
      "topology": "dependent",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r1-false_alert-dependent-handoff_then_revoke",
      "repetition": 1,
      "compromise": false,
      "topology": "dependent",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r1-false_alert-independent-leave_active",
      "repetition": 1,
      "compromise": false,
      "topology": "independent",
      "policy": "leave_active"
    },
    {
      "case_id": "r1-false_alert-independent-revoke_tree",
      "repetition": 1,
      "compromise": false,
      "topology": "independent",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r1-false_alert-independent-revoke_parent_only",
      "repetition": 1,
      "compromise": false,
      "topology": "independent",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r1-false_alert-independent-handoff_then_revoke",
      "repetition": 1,
      "compromise": false,
      "topology": "independent",
      "policy": "handoff_then_revoke"
    },
    {
      "case_id": "r1-false_alert-already_lost-leave_active",
      "repetition": 1,
      "compromise": false,
      "topology": "already_lost",
      "policy": "leave_active"
    },
    {
      "case_id": "r1-false_alert-already_lost-revoke_tree",
      "repetition": 1,
      "compromise": false,
      "topology": "already_lost",
      "policy": "revoke_tree"
    },
    {
      "case_id": "r1-false_alert-already_lost-revoke_parent_only",
      "repetition": 1,
      "compromise": false,
      "topology": "already_lost",
      "policy": "revoke_parent_only"
    },
    {
      "case_id": "r1-false_alert-already_lost-handoff_then_revoke",
      "repetition": 1,
      "compromise": false,
      "topology": "already_lost",
      "policy": "handoff_then_revoke"
    }
  ],
  "source_sha256": {
    "benchmark/recovery_vault_reproduction.py": "7032da3b5cb6aa9fc18cbeb5863a9c47e821ecf66da00f494e0646abf5a7262f",
    "benchmark/recovery_vault_verifier.py": "16316288b30fe501d2fad335df780032acb504c07c5c5abfb01bc2da77a284c8",
    "benchmark/recovery_vault_reproduction_v2.py": "ee129ab083a8d7f9b3c45c930d5398a9a9f60d99dbcb7a483be3bdce13c1cf9d"
  },
  "comparison": "Four reference procedures, three token topologies, two synthetic incident labels, two repetitions. Incident labels change the declared security requirement, not the executor state.",
  "security_constraint": "In compromise-labelled fixtures, both old parent and its existing probe child must be denied at settle. This does not require zero access during handoff.",
  "recovery_constraint": "The synthetic waiting worker must read the original checkpoint digest from its current authorized identity. The already-lost fixture is initially infeasible.",
  "outcomes": "Recovery completion and old-tree access at settle are separate. Intervention duration is reported; continuous exposure is not measured.",
  "stop_rule": "No model queries unless a missing contribution and practical usefulness survive the primary-source and construct-validity audit.",
  "amendment": {
    "reason": "Vault revoke-orphan returns HTTP 400 with token to revoke not found after a prior tree revocation. Record this known executor outcome and settle the control instead of treating it as a collection failure.",
    "condition": "Exact error text, HTTP 400, orphan endpoint, and an observed successful setup-phase tree revocation of the same alias.",
    "original_attempted": 11,
    "original_verified": 10,
    "original_unscored": 1,
    "original_report_sha256": "8078846937d263e356508b408d090cf4a8169e175d26df34c3fa6ebd90f31553",
    "registration_v1_sha256": "1c34b6217d9c968c9dac557944894bbc6563380b748b2b4ad1f84290b98b510f",
    "no_model_queries": true,
    "matrix_unchanged": true,
    "original_sources_unchanged": true
  }
}