{"ok":true,"checkedAt":"2026-07-17T20:52:56.280Z","contractVersion":"moral-trade-baseline-integrity-v0.1-2026-06","purpose":"Fail-closed baseline-integrity and baseline-manufacturing governance before donation offsets, pledge swaps, broad match candidates, public-goods rounds, or post-lock amendments can become clearable, reliance-bearing, payable, or publicly counted.","validation":{"status":"pass","validatorName":"moral-trade-baseline-integrity-contract","validatorVersion":"moral-trade-baseline-integrity-validator-v0.1","contractVersion":"moral-trade-baseline-integrity-v0.1-2026-06","checks":[{"id":"record-table-coverage","label":"Baseline integrity has first-class policy and assessment records","status":"pass","evidence":"moral_trade_baseline_integrity_policies, moral_trade_baseline_integrity_assessments"},{"id":"enforcement-record-table-coverage","label":"Baseline integrity has append-only enforcement records","status":"pass","evidence":"moral_trade_baseline_integrity_enforcement_records"},{"id":"enforcement-route-coverage","label":"Baseline integrity exposes authenticated append-only enforcement","status":"pass","evidence":"POST /api/moral-trade/baseline-integrity/enforce authenticated"},{"id":"policy-subject-coverage","label":"Baseline integrity and baseline manufacturing are frozen policy-snapshot subjects","status":"pass","evidence":"baseline_integrity, baseline_manufacturing"},{"id":"transition-coverage","label":"Donation offsets, pledge swaps, broad candidates, public-goods rounds, and amendments are covered","status":"pass","evidence":"donation_offset_lock, pledge_swap_lock, broad_match_candidate, public_goods_round, post_lock_amendment"},{"id":"subject-type-coverage","label":"Offset offers, pledge-swap offers, matched lock proposals, and cleared agreements are covered","status":"pass","evidence":"offset_offer, pledge_swap_offer, matched_trade_lock_proposal, cleared_trade_agreement"},{"id":"assessment-state-coverage","label":"Assessment states include not-required, under-review, non-blocking, blocked, stale, and superseded","status":"pass","evidence":"not_required, under_review, non_blocking, blocked, superseded, stale"},{"id":"baseline-source-coverage","label":"Baseline source kinds distinguish pre-existing, independent, historical, marketplace-created, marketplace-escalated, counterparty-triggered, and unknown baselines","status":"pass","evidence":"pre_existing_behavior, independent_obligation, historical_pattern, marketplace_created, marketplace_escalated, counterparty_triggered, unknown"},{"id":"fail-closed-coverage","label":"Fail-closed statuses cover missing assessments, manufactured baselines, review gaps, privacy exposure, and hash integrity","status":"pass","evidence":"assessment_missing, assessment_under_review, assessment_blocked, assessment_stale, assessment_superseded, launch_classification_not_clearable, policy_missing, policy_mutable, policy_stale, policy_superseded, baseline_snapshot_missing, baseline_predates_offer_unverified, independent_reason_missing, history_evidence_missing, marketplace_created_baseline, marketplace_escalated_baseline, counterparty_triggered_escalation, harmful_baseline_escalated, good_faith_confidence_conflated, additionality_review_missing, externality_review_missing, reviewer_quality_missing, participant_confirmation_missing, private_evidence_public, invalid_assessment_hash, invalid_policy_hash"},{"id":"transition-definition-coverage","label":"Every baseline-integrity transition lists required records and blocked transitions","status":"pass","evidence":"donation_offset_lock:2, pledge_swap_lock:2, broad_match_candidate:1, public_goods_round:2, post_lock_amendment:2"},{"id":"sample-evaluation-coverage","label":"Sample evaluations prove donation-offset baseline integrity can pass and manufactured pledge-swap baselines block","status":"pass","evidence":"donation_offset_lock:pass, pledge_swap_lock:blocked"},{"id":"contract-test-coverage","label":"Contract lists route, schema, health, and fail-closed tests","status":"pass","evidence":"baseline_integrity_contract_validator, baseline_integrity_evaluator_fail_closed, baseline_integrity_route_contract, baseline_integrity_enforce_route_contract, baseline_integrity_schema_contract, baseline_integrity_enforcement_record_schema_contract, baseline_integrity_health_contract"}],"blockers":[]},"publicContract":{"privacyRule":"Public baseline-integrity contract responses expose only static table names, status codes, transition names, launch classifications, validation blockers, and sample pass/block states; they never expose raw baseline narratives, private evidence, exact private constraints, counterparty-specific timing, reviewer notes, or participant-specific assessments.","failClosedRule":"Manufactured baselines are not moral trade: missing, stale, under-review, blocked, or superseded baseline-integrity assessments; marketplace-created or marketplace-escalated baselines; counterparty-triggered escalation; conflated good-faith/confidence; missing additionality, externality, reviewer-quality, or participant-confirmation review; and public private-evidence exposure keep donation offsets and pledge swaps preview-only or rejected-threat/externality until non-blocking.","enforcementRule":"Authenticated baseline-integrity enforcement writes only owner-scoped append-only enforcement records. Enforcement records can prove pass or blocked gate status, but they cannot create clearable transitions, authorize payment, authorize reliance, or publish public metrics.","firstClassRecordTables":["moral_trade_baseline_integrity_policies","moral_trade_baseline_integrity_assessments"],"enforcementRecordTables":["moral_trade_baseline_integrity_enforcement_records"],"enforcementRoute":{"method":"POST","path":"/api/moral-trade/baseline-integrity/enforce","auth":"authenticated","stateMutation":"append_only_enforcement_record"},"policySnapshotSubjects":["baseline_integrity","baseline_manufacturing"],"transitions":["donation_offset_lock","pledge_swap_lock","broad_match_candidate","public_goods_round","post_lock_amendment"],"subjectTypes":["offset_offer","pledge_swap_offer","matched_trade_lock_proposal","cleared_trade_agreement"],"assessmentStates":["not_required","under_review","non_blocking","blocked","superseded","stale"],"baselineSourceKinds":["pre_existing_behavior","independent_obligation","historical_pattern","marketplace_created","marketplace_escalated","counterparty_triggered","unknown"],"launchClassifications":["clearable_moral_trade","preview_only","rejected_threat_externality","manual_review_required"],"failClosedStatuses":["assessment_missing","assessment_under_review","assessment_blocked","assessment_stale","assessment_superseded","launch_classification_not_clearable","policy_missing","policy_mutable","policy_stale","policy_superseded","baseline_snapshot_missing","baseline_predates_offer_unverified","independent_reason_missing","history_evidence_missing","marketplace_created_baseline","marketplace_escalated_baseline","counterparty_triggered_escalation","harmful_baseline_escalated","good_faith_confidence_conflated","additionality_review_missing","externality_review_missing","reviewer_quality_missing","participant_confirmation_missing","private_evidence_public","invalid_assessment_hash","invalid_policy_hash"],"transitionDefinitions":[{"key":"donation_offset_lock","protectedBoundary":"donation offsets cannot lock, capture, or count unless the offset baseline predates the offer and passes a non-blocking manufacturing review","requiredRecords":["moral_trade_baseline_integrity_policies","moral_trade_baseline_integrity_assessments"],"blocksTransitions":["payment_capture","cleared_trade_lock","public_completed_claim"]},{"key":"pledge_swap_lock","protectedBoundary":"pledge swaps cannot become reliance-bearing when either side escalated or manufactured a harmful baseline after marketplace exposure","requiredRecords":["moral_trade_baseline_integrity_policies","moral_trade_baseline_integrity_assessments"],"blocksTransitions":["reliance_bearing_preview","matched_trade_lock","performance_start"]},{"key":"broad_match_candidate","protectedBoundary":"broad candidates remain preview-only when baseline source, history, independent reason, or externality review is unresolved","requiredRecords":["moral_trade_baseline_integrity_assessments"],"blocksTransitions":["candidate_publication","counterparty_preview","match_candidate_counting"]},{"key":"public_goods_round","protectedBoundary":"public-goods clearing previews cannot count donation offsets whose baselines were marketplace-created or escalated","requiredRecords":["moral_trade_baseline_integrity_policies","moral_trade_baseline_integrity_assessments"],"blocksTransitions":["round_close_publication","bonus_allocation","public_money_metric"]},{"key":"post_lock_amendment","protectedBoundary":"material amendments require a fresh baseline-integrity assessment and renewed confirmation before changing obligations","requiredRecords":["moral_trade_baseline_integrity_policies","moral_trade_baseline_integrity_assessments"],"blocksTransitions":["material_terms_update","renewed_performance_start","payout_release"]}],"baselineIntegritySampleEvaluationStatuses":{"donation_offset_lock":"pass","pledge_swap_lock":"blocked"},"contractTests":["baseline_integrity_contract_validator","baseline_integrity_evaluator_fail_closed","baseline_integrity_route_contract","baseline_integrity_enforce_route_contract","baseline_integrity_schema_contract","baseline_integrity_enforcement_record_schema_contract","baseline_integrity_health_contract"]},"blockers":[]}