27 lines
1.2 KiB
Markdown
27 lines
1.2 KiB
Markdown
# Conformance Vectors: Governance Install and Activation v1
|
|
|
|
These vectors verify deterministic governance runtime installation and activation gates.
|
|
|
|
## Vector Set
|
|
|
|
1. `GV-001` install token requires active membership.
|
|
2. `GV-002` install token requires active governance entitlement.
|
|
3. `GV-003` expired install token blocks confirm.
|
|
4. `GV-004` package hash mismatch blocks activation.
|
|
5. `GV-005` runtime version mismatch blocks activation.
|
|
6. `GV-006` valid install confirm yields `governance_active`.
|
|
7. `GV-007` replayed install confirm is idempotent and no duplicate activation side effects.
|
|
8. `GV-008` entitlement revoked after activation forces status `blocked` until entitlement restored.
|
|
9. `GV-009` membership suspended forces status `blocked` regardless of local runtime presence.
|
|
10. `GV-010` unknown entitlement state fails closed and blocks activation.
|
|
|
|
## Pass Criteria
|
|
|
|
1. All vectors pass in CI and staging.
|
|
2. Any vector failure blocks release per release gate.
|
|
3. Evidence artifact includes vector id, payload fingerprint, and correlation id.
|
|
|
|
## Fail-Closed Rule
|
|
|
|
Any uncertainty in membership state, entitlement state, install token validity, package hash, signature, or policy hash must block activation by default.
|