# NEXT temporary cross-cutting contract — Verification matrix and exit gates {#root}

@status:impl/plan

[p01] @fact:NEXT-G09-SCOPE Frozen cross-cutting requirement source from refined plan revision 4 section 9. It complements domain contracts and must be promoted clause by clause; no product implementation or completion is asserted here. @status:spec/done

[p02] @fact:NEXT-G09-U001 Это required implementation evidence, не tests, выполненные данным review pass. @status:spec/done

[p03] @fact:NEXT-G09-U002 Requirement: | Family | Required proof | |---|---| | Migrations | Real old→new code path; exact choices/comments preserved; ambiguous input before write; dry-run pure; CAS/rollback/idempotence; no LLM | | Classification | Foreign Vibe-looking Markdown inert; CommonMark sections; XML-data valid/invalid/other encodings retained; same-stem resource coexistence; scan/sync/resolve/convert share classification | | Source | Portable URI/path corpus, duplicate exports/anchors, selected member/capture, wrong version/revision, unreadable vs absent, snapshot/projection basis | | Integrity | Record-only/payload-only/coordinated tamper; source membership; builtin materialization vs local-derivation provenance; hardlink/in-place honest result | | Purity | Empty-cache inspect/list/plan/explain calls no hydrate/probe/network/native/write; explicit prepare separated and effects declared | | Configuration | Rejected candidate effects disappear; older compatible candidate works; all consumer edges preserved; weak features/cardinality/guards; request defeats Fresh | | Configuration recovery | Unsat/NeedsSelection before mutation; exact owned recovery prefixes; hooks partial truth; shared deps retained; independent WAL/MUP coexist, Redbook one selection | | Change | Stable ID/slug, separate intent/work/production request/invocation, exact origin drift, no personal cursor/source copies | | Public/scoped lifecycle | Ordinary build/verify and their prerequisite slots never dispatch new production; scoped workspace park/replay guards; producer request stable across create→verify | | Transition | Pre witnesses retained, outside-write stable, owned post exact, new/deleted paths covered; existing code changes; new source build/tested; fresh verify no recreation | | Full pass | Explicit fixed production→verification composition, hosted park/resume, failure stops without auto repair; no workflow-language cursor | | Analysis/closure | Complete universe, unclassified/absent requires, unavailable vs missing, counts not test result, waiver/risk visible, cache deletion survival/stale applicability | | External adapters | New client from package with same core binary; open capability map; requested new path/key requires actual grant; exact four-client install/update/remove matrix | | Adapter recovery | Physical collisions/logical key ownership, before-state or honest non-reversible, descriptor disappearance, revoked cleanup no old native invoke, cross-family adoption | | Derivatives | All resource interpretations/files/trees, sealed source local fork allowed, new identity/notices/provenance, no auto execution/grant inheritance, base drift/rebase conflict | | Debugger API/UI | Structured input and output, typed progress/errors, snapshot-bound pages/IDs; tree/source/why/compare UI agrees with library/CLI/MCP | | Debugger cost | Actual vs unique/inclusive/marginal separation, shared/transitive deps/choices/conditions, static/dynamic legality, no total boot/token quota, million-token scenario | | Debugger preview | Same resolver/compiler on captures; exact pure builtin result; effectful/unavailable stage explicitly partial, no guessed zero or proportionate fake attribution | | Brownfield | Capture/moving-tree exclusions, no tools in observe, algorithmic proposal, stale promote refuse, real existing-project verification | | Distribution | Exact source/target/bundle; default smoke pass/fail and explicit skip; skipped not passed; full tests opt-in; trusted channel optional signature | | Publication A/B | Same plan effects under approved A and enabled bounded B in isolated tests; B disabled live; out-of-scope/revocation/generation/stale-plan before-write refusal | | Publication recovery | Ready artifacts and smoke policy before delete/tag move; remote interference/partial failure explicit; old assets retained for real restoration | | Version/prototype | Active own 1.0.0, no rewriting upstream/history/epochs; Redbook current no-bump; future version offer; no automatic graduation/B enablement | | Ecosystem | Both bridges flow 1.0.0, complete foreign resources/actions, two unchanged native feats across stacks, four chosen clients; secondary clients not blockers | | Target environments | Same project/package in two homes has distinct receipt/root authority; alias roots collide physically; Windows executor never installs Windows launcher in Linux target; target ABI/libc/principal replay refusal | | Payload/closure | Recorded source/prebuilt realization, explicit runtime dependencies and modes/links; corrupt archive/content, path escapes, unsupported metadata/relocation fail; no debug-first unrecorded runtime fallback | | HOME manager | No Git/repo/root privilege required; two tools share dependency; install/update/remove/verify/exec, command conflicts and modified config; independent profiles/versions coexist | | Activation/recovery/GC | Interrupted stage/switch/config effects preserve truthful prior/partial state; running/pinned generations and shared dependencies not collected; uninstall retains mutable data | | Arch backend | Native epoch/pkgrel, coherent repository snapshot, package verification and DB generation preserved; Vibe/pacman ownership distinct, unsat/drift before write; hook failure not fake rollback | | Linux rootfs | POSIX mode/links/principals survive; host roots/services untouched; wrong-platform execution refused; offline population does not start services | | Docker/OCI | Real linux/amd64 image/non-root runtime; pinned base/closure; four selectable client config/launch cases; no Docker socket/HOME-secret leakage; export/attestation retention observed; image replacement, package removal/rebuild, failed-start rollback and live-container-safe GC; volumes/data retained | | Reproducibility | Two independent cache-disabled builds compare declared inventory/rootfs/OCI levels; all-input replay network off; missing captures explicit; container tests do not claim Linux kernel/boot correctness | | AI-aware services | Agent + two local services; generated catalog, typed discovery/read/controlled write/refusal, offline/unhealthy/stale endpoint/schema/credential rotation | | No-GitHub supply chain | Local independent registry/source/mirror/binary cache/OCI hosts; bootstrap/fetch/source build/substitute/home lifecycle/image/local publication test; independent egress mediation/observation covers control/native children/BuildKit/daemon and permits only local endpoints, zero GitHub attempts; unobserved bypass fails; all-network-off replay separate | | Complete ETO coverage | Every supported command/action/internal semantic model has a registered external path and real scenario; CLI/TUI-only/prose-only/missing/stub rows fail; names/counts alone insufficient | | Semantic model | Full structured visibility/inclusion/provenance, repeated occurrences, source/capture/observation distinctions; missing/unreadable/unchecked/unresolved distinct; complete snapshot-bound paging without total boot cap | | Editor snapshots | Two clients with different dirty buffers, Unicode/raw XML positions, partial syntax, new/delete/move buffers and external disk drift; analysis/boot preview pure and coherent; dirty/save-required mutation refused; other client edits between check/commit or disconnects during acknowledged barrier, no buffer-content leakage | | Operation protocol | Strict negotiation/inputs/results/errors/events; long action allows status/cancel queries; request ID distinct from operation/idempotency; lost response/reconnect/restart does not repeat admitted effects; concurrent same-key cross-adapter submissions, result eviction, namespace expiry and pinned active/uncertain states | | Partial effects/control | Inject failure after first write and expose exact partial/unknown/recovery result; cancellation before/after commit boundary, disconnect owner crash and event replay gap all truthful | | Semantic package rename | Owned declaration plus typed manifest/spec/provider/path/environment refs, collision/ambiguous/unknown/dirty cases, exact preview/apply/regenerate/re-resolve; foreign/history/deployed identities preserved | | Internal capture | Actual stage/carrier snapshots across domains, selected/rejected reasons, failure inspection after exit, explicit missing/redacted/evicted data, configurable detail/export; observer failure does not change domain result | | Extension observability | New package operation/model schema discoverable through unchanged generic service contract; no arbitrary renderer/eval; revoke/remove then inspect retained schema/evidence without running provider | | Full IDE-compatible journey | Protocol clients navigate package→boot→artifact→HOME/image/service, perform an admitted change and reconnect/control/recover; initial gate M-17-A before M-12 and full gate M-17-D after M-15; no plugin implementation | @status:spec/done

[p04]
```text
| Family | Required proof |
|---|---|
| Migrations | Real old→new code path; exact choices/comments preserved; ambiguous input before write; dry-run pure; CAS/rollback/idempotence; no LLM |
| Classification | Foreign Vibe-looking Markdown inert; CommonMark sections; XML-data valid/invalid/other encodings retained; same-stem resource coexistence; scan/sync/resolve/convert share classification |
| Source | Portable URI/path corpus, duplicate exports/anchors, selected member/capture, wrong version/revision, unreadable vs absent, snapshot/projection basis |
| Integrity | Record-only/payload-only/coordinated tamper; source membership; builtin materialization vs local-derivation provenance; hardlink/in-place honest result |
| Purity | Empty-cache inspect/list/plan/explain calls no hydrate/probe/network/native/write; explicit prepare separated and effects declared |
| Configuration | Rejected candidate effects disappear; older compatible candidate works; all consumer edges preserved; weak features/cardinality/guards; request defeats Fresh |
| Configuration recovery | Unsat/NeedsSelection before mutation; exact owned recovery prefixes; hooks partial truth; shared deps retained; independent WAL/MUP coexist, Redbook one selection |
| Change | Stable ID/slug, separate intent/work/production request/invocation, exact origin drift, no personal cursor/source copies |
| Public/scoped lifecycle | Ordinary build/verify and their prerequisite slots never dispatch new production; scoped workspace park/replay guards; producer request stable across create→verify |
| Transition | Pre witnesses retained, outside-write stable, owned post exact, new/deleted paths covered; existing code changes; new source build/tested; fresh verify no recreation |
| Full pass | Explicit fixed production→verification composition, hosted park/resume, failure stops without auto repair; no workflow-language cursor |
| Analysis/closure | Complete universe, unclassified/absent requires, unavailable vs missing, counts not test result, waiver/risk visible, cache deletion survival/stale applicability |
| External adapters | New client from package with same core binary; open capability map; requested new path/key requires actual grant; exact four-client install/update/remove matrix |
| Adapter recovery | Physical collisions/logical key ownership, before-state or honest non-reversible, descriptor disappearance, revoked cleanup no old native invoke, cross-family adoption |
| Derivatives | All resource interpretations/files/trees, sealed source local fork allowed, new identity/notices/provenance, no auto execution/grant inheritance, base drift/rebase conflict |
| Debugger API/UI | Structured input and output, typed progress/errors, snapshot-bound pages/IDs; tree/source/why/compare UI agrees with library/CLI/MCP |
| Debugger cost | Actual vs unique/inclusive/marginal separation, shared/transitive deps/choices/conditions, static/dynamic legality, no total boot/token quota, million-token scenario |
| Debugger preview | Same resolver/compiler on captures; exact pure builtin result; effectful/unavailable stage explicitly partial, no guessed zero or proportionate fake attribution |
| Brownfield | Capture/moving-tree exclusions, no tools in observe, algorithmic proposal, stale promote refuse, real existing-project verification |
| Distribution | Exact source/target/bundle; default smoke pass/fail and explicit skip; skipped not passed; full tests opt-in; trusted channel optional signature |
| Publication A/B | Same plan effects under approved A and enabled bounded B in isolated tests; B disabled live; out-of-scope/revocation/generation/stale-plan before-write refusal |
| Publication recovery | Ready artifacts and smoke policy before delete/tag move; remote interference/partial failure explicit; old assets retained for real restoration |
| Version/prototype | Active own 1.0.0, no rewriting upstream/history/epochs; Redbook current no-bump; future version offer; no automatic graduation/B enablement |
| Ecosystem | Both bridges flow 1.0.0, complete foreign resources/actions, two unchanged native feats across stacks, four chosen clients; secondary clients not blockers |
| Target environments | Same project/package in two homes has distinct receipt/root authority; alias roots collide physically; Windows executor never installs Windows launcher in Linux target; target ABI/libc/principal replay refusal |
| Payload/closure | Recorded source/prebuilt realization, explicit runtime dependencies and modes/links; corrupt archive/content, path escapes, unsupported metadata/relocation fail; no debug-first unrecorded runtime fallback |
| HOME manager | No Git/repo/root privilege required; two tools share dependency; install/update/remove/verify/exec, command conflicts and modified config; independent profiles/versions coexist |
| Activation/recovery/GC | Interrupted stage/switch/config effects preserve truthful prior/partial state; running/pinned generations and shared dependencies not collected; uninstall retains mutable data |
| Arch backend | Native epoch/pkgrel, coherent repository snapshot, package verification and DB generation preserved; Vibe/pacman ownership distinct, unsat/drift before write; hook failure not fake rollback |
| Linux rootfs | POSIX mode/links/principals survive; host roots/services untouched; wrong-platform execution refused; offline population does not start services |
| Docker/OCI | Real linux/amd64 image/non-root runtime; pinned base/closure; four selectable client config/launch cases; no Docker socket/HOME-secret leakage; export/attestation retention observed; image replacement, package removal/rebuild, failed-start rollback and live-container-safe GC; volumes/data retained |
| Reproducibility | Two independent cache-disabled builds compare declared inventory/rootfs/OCI levels; all-input replay network off; missing captures explicit; container tests do not claim Linux kernel/boot correctness |
| AI-aware services | Agent + two local services; generated catalog, typed discovery/read/controlled write/refusal, offline/unhealthy/stale endpoint/schema/credential rotation |
| No-GitHub supply chain | Local independent registry/source/mirror/binary cache/OCI hosts; bootstrap/fetch/source build/substitute/home lifecycle/image/local publication test; independent egress mediation/observation covers control/native children/BuildKit/daemon and permits only local endpoints, zero GitHub attempts; unobserved bypass fails; all-network-off replay separate |
| Complete ETO coverage | Every supported command/action/internal semantic model has a registered external path and real scenario; CLI/TUI-only/prose-only/missing/stub rows fail; names/counts alone insufficient |
| Semantic model | Full structured visibility/inclusion/provenance, repeated occurrences, source/capture/observation distinctions; missing/unreadable/unchecked/unresolved distinct; complete snapshot-bound paging without total boot cap |
| Editor snapshots | Two clients with different dirty buffers, Unicode/raw XML positions, partial syntax, new/delete/move buffers and external disk drift; analysis/boot preview pure and coherent; dirty/save-required mutation refused; other client edits between check/commit or disconnects during acknowledged barrier, no buffer-content leakage |
| Operation protocol | Strict negotiation/inputs/results/errors/events; long action allows status/cancel queries; request ID distinct from operation/idempotency; lost response/reconnect/restart does not repeat admitted effects; concurrent same-key cross-adapter submissions, result eviction, namespace expiry and pinned active/uncertain states |
| Partial effects/control | Inject failure after first write and expose exact partial/unknown/recovery result; cancellation before/after commit boundary, disconnect owner crash and event replay gap all truthful |
| Semantic package rename | Owned declaration plus typed manifest/spec/provider/path/environment refs, collision/ambiguous/unknown/dirty cases, exact preview/apply/regenerate/re-resolve; foreign/history/deployed identities preserved |
| Internal capture | Actual stage/carrier snapshots across domains, selected/rejected reasons, failure inspection after exit, explicit missing/redacted/evicted data, configurable detail/export; observer failure does not change domain result |
| Extension observability | New package operation/model schema discoverable through unchanged generic service contract; no arbitrary renderer/eval; revoke/remove then inspect retained schema/evidence without running provider |
| Full IDE-compatible journey | Protocol clients navigate package→boot→artifact→HOME/image/service, perform an admitted change and reconnect/control/recover; initial gate M-17-A before M-12 and full gate M-17-D after M-15; no plugin implementation |
```

[p05] @fact:NEXT-G09-U003 Per-atom focused tests/checks and source review; full panel at coherent/final integration boundaries. Counterfactual mutation only bounded diagnostic when specific evidence suspicious. Cross-compilation alone not native execution. Human manual sign-off not synthesized. @status:spec/done

[p06] @fact:NEXT-G09-U004 Intermediate stops remain useful but parent closure requires every mandatory descendant and complete scope. No required CommonMark/debugger/adapter/derivative/existing-file, HOME/Docker/service/no-GitHub or ETO/IDE-service/semantic-rename branch can be marked deferred to declare success. Plugin/IDE/MVP remains explicitly outside this programme. @status:spec/done