# Environment Invariants

These invariants must hold for staging and production.

## Required Invariants

1. Chain ID in backend config matches allowed chain ID in API and frontend expectations.
2. Membership contract address in backend matches deployment registry.
3. Quote currency policy matches configured token addresses.
4. Origin allowlist includes only approved domains.
5. Fail-closed default behavior enabled for unknown membership/entitlement states.

## Verification Checklist

1. Intent endpoint returns expected chain and contract metadata.
2. Confirm endpoint rejects tx on wrong chain.
3. Checkout gate blocks non-members.
4. Runtime activation gate blocks non-active entitlements.