Snapshot date: 2026-09-10 Europe/Kyiv Architect: Alexander Romaskevich Public signature: RomaskevicH Source: current IMPERIAL Core architecture review thread

• SPEC: IC-EVIDENCE-ARCHITECTURE-IMPLEMENTATION-SPEC-003 FINAL
• STATUS: ARCHITECTURALLY_APPROVED / IMPLEMENTATION_AUTHORIZED
• IMPLEMENTATION_STATUS: NOT YET VERIFIED
• Principle: Architecture -> Implementation -> Independent Verification -> Evidence
• Evidence Before Claims
• Data classification: PUBLIC / PRIVATE / SECRET / RESTRICTED
• Identity != Authority
• Capability != Approval
• Intelligence != Privilege
• Federated Multi-Orchestrator Architecture
• AI Passport is an enforceable authority boundary
• Guardian Core evaluates policy/security/human-protection rules
• Approval Gateway authorizes the exact action now
• Audit Ledger is append-only; history may not be rewritten

1. Multi-ledger database model with composite (ledger_id, sequence_number).
2. Atomic append protocol with expected sequence/hash/version and bounded retry.
3. RFC 8785 JCS + UTF-8 + SHA-256 lowercase hex for canonical hashing.
4. Historical anomaly preservation + CHAIN_REPAIR_CHECKPOINT; no history rewrite.
5. Composite idempotency scope + key.
6. External side-effect reconciliation before unsafe retry.
7. Strict PaymentReceipt truth; CRM state alone is not payment evidence.
8. Approval decision separated from authorization lifecycle.
9. AI Passport is an enforceable authority boundary.
10. Append-only DB permission model; no direct ordinary application mutation of ledger head/history.

• E1: VERIFIED (approved specification)
• E2: NOT VERIFIED
• E3: NOT VERIFIED
• E4: NOT VERIFIED
• E5: NOT VERIFIED
• E6: NOT VERIFIED

ADRIAN V4: PARTIAL IMPLEMENTATION LUCAS V4: STATIC_VERIFICATION PARTIAL TSC_TYPECHECK_STATUS: NOT_EXECUTED ACTUAL_TEST_STATUS: NOT_EXECUTED IMPLEMENTED_LIVE: FALSE COMPILE_READY: UNVERIFIED TRANSFERABLE_PACKAGE_COMPLETE: UNVERIFIED PACKAGE_HASH: NOT COMPUTED

• JCS must be used end-to-end; JSON.stringify is not canonical hash input.
• Trusted append must bind hashed canonical event to every stored column.
• pgcrypto dependency and fail-closed behavior must be explicit.
• SECURITY DEFINER ownership/search_path/schema privileges must be hardened.
• Idempotency conflict path must not rely on a transaction-aborting 23505 followed by SELECT.
• startActionExecution must handle all idempotency outcomes and never duplicate execution.
• Previous successful idempotent call must return prior result reference.
• External fact evidence must be persisted and validated atomically with transitions.
• Passport crypto must use a real runnable verifier; issuer trust root must not be self-registerable by normal agents.
• Issuer signature metadata and agent key metadata must be separated.
• Budget, financial amount/currency and external action_type must fail closed when required data is absent.
• Approval ID presence is not authority; trusted validation/consumption is mandatory before side effect.
• Payment verification state must transition only via restricted trusted verifier path.
• Financial representation must be unambiguous minor-unit or exact-decimal semantics.
• Placeholder tests do not count as tests.
• Full package claims require inspectable complete artifact or repository commit.
• Reproducible build requires lockfile/dependency resolution.

ADRIAN IMPLEMENTATION PACKAGE V5 -> LUCAS STATIC VERIFICATION V5. No additional architecture work without a real architectural blocker.

Do not repeat already verified checks without state change. Re-test only affected components and required regressions after code/runtime/database/deployment/provider/credentials/policy/security/error/integration state changes.

This server snapshot is a persistence record only. It does not claim E2/E3/E4/E5/E6, deployment, payment or production evidence.