{
  "format": "vercy-enterprise-profile-fixtures/v1",
  "contourId": "EM-PEO-01",
  "profileName": "Enterprise Person and Contextual Identity",
  "fixtureRevision": 3,
  "fixturesExecuted": false,
  "candidateSha256": "7745f6eb6d03de1960ce06e878fb7cf5fcfb0dafad8e8c98b54fa360c67a5102",
  "basePins": {
    "WM-PER-001": {
      "sourceSha256": "7a4a71ddd69fdc31b37806958442d1cfca4ec0bf861e54578adb312e0d7a4df3",
      "synthesisSha256": "ffefc6ce9cf9d7c6b9661c80834009180840f8da0a23e7409434e4c49c9472b2",
      "registrySnapshotSha256": "64b97cffa92f4db5c7888273828184abcfb3155e3c0e8f94fa798d1b1c458fe3"
    }
  },
  "caseSetSha256": "b4bcac9c6cd25f359aa77af75af069ad40a4030218c15b26438527d6edf5f5f5",
  "coverageMatrix": {
    "INV-001": [
      "namesakes-three-systems",
      "inv-001-contract"
    ],
    "INV-002": [
      "qualified-no-reuse-link",
      "inv-002-contract"
    ],
    "INV-003": [
      "issuer-missing",
      "inv-003-contract"
    ],
    "INV-004": [
      "email-auto-merge",
      "inv-004-contract"
    ],
    "INV-005": [
      "name-dob-auto-merge",
      "inv-005-contract"
    ],
    "INV-006": [
      "legal-name-change",
      "inv-006-contract",
      "account-deprovision"
    ],
    "INV-007": [
      "overwrite-former-name",
      "inv-007-contract",
      "account-deprovision"
    ],
    "INV-008": [
      "pseudonym-cross-domain",
      "inv-008-contract"
    ],
    "INV-009": [
      "contact-as-identity",
      "inv-009-contract",
      "qualified-link"
    ],
    "INV-010": [
      "proposal-without-authoriser",
      "inv-010-contract"
    ],
    "INV-011": [
      "probable-to-asserted",
      "inv-011-contract"
    ],
    "INV-012": [
      "merge-destroys-source",
      "inv-012-contract",
      "namesakes-combined"
    ],
    "INV-013": [
      "former-name-default-disclosure",
      "inv-013-contract"
    ],
    "INV-014": [
      "purpose-bound-minimal",
      "inv-014-contract"
    ],
    "INV-015": [
      "hris-universal-master",
      "inv-015-contract"
    ],
    "INV-016": [
      "account-creates-person",
      "inv-016-contract",
      "namesakes-combined"
    ],
    "INV-017": [
      "employment-as-person-attribute",
      "inv-017-contract"
    ],
    "INV-018": [
      "civil-fields-fabricated",
      "inv-018-contract"
    ],
    "INV-019": [
      "standards-conformance",
      "inv-019-contract",
      "shared-mailbox-as-person-contact"
    ],
    "INV-020": [
      "two-namesakes-one-change",
      "inv-020-contract",
      "contact-without-purpose",
      "stale-verified-channel"
    ],
    "INV-021": [
      "inv-021-contract"
    ],
    "INV-022": [
      "inv-022-contract",
      "attribute-where-predicate-suffices",
      "unlogged-disclosure"
    ],
    "INV-023": [
      "inv-023-contract"
    ],
    "INV-024": [
      "inv-024-contract",
      "gender-recognition-date-in-hr"
    ],
    "INV-025": [
      "inv-025-contract",
      "residence-in-default-projection",
      "biometric-pointer-disclosed"
    ],
    "INV-026": [
      "inv-026-contract"
    ],
    "INV-027": [
      "inv-027-contract"
    ],
    "INV-028": [
      "inv-028-contract"
    ],
    "INV-029": [
      "inv-029-contract"
    ],
    "INV-030": [
      "inv-030-contract"
    ],
    "INV-031": [
      "inv-031-contract"
    ],
    "INV-032": [
      "inv-032-contract"
    ],
    "INV-033": [
      "inv-033-contract"
    ],
    "INV-034": [
      "inv-034-contract"
    ],
    "INV-035": [
      "inv-035-contract",
      "conformance-flag-true"
    ],
    "INV-036": [
      "inv-036-contract"
    ],
    "INV-037": [
      "inv-037-contract"
    ],
    "INV-038": [
      "inv-038-contract"
    ],
    "INV-039": [
      "inv-039-contract"
    ]
  },
  "cases": [
    {
      "id": "namesakes-three-systems",
      "kind": "positive",
      "input": "Two namesakes have similar display names and email local parts across HRIS, ATS and LMS, with no qualified key.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-001"
      ],
      "expect": "accept",
      "expectedRefusalReason": null,
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "a43519003d982254b5016af135e8e84eeb4f75b9651bae128b582b3857158074"
    },
    {
      "id": "qualified-no-reuse-link",
      "kind": "positive",
      "input": "Both records have exact scheme/version/issuer/scope/value Person identifiers and a no-reuse policy.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-002"
      ],
      "expect": "accept",
      "expectedRefusalReason": null,
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "c6937e6eb840cc33c6d2dff2232ac1be00f6dcd8fb983848c0c825472984b3f7"
    },
    {
      "id": "issuer-missing",
      "kind": "negative",
      "input": "Identifier values match but issuer is absent on one record.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-003"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "29e9d96583fc48a74825f4cff6ef43696284ab81e2b2bd70d6d9e48d8e8ceaf5"
    },
    {
      "id": "email-auto-merge",
      "kind": "negative",
      "input": "Two records share a verified email.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-004"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "419d884deb16844eaa5930492ff39cd04075bf2f14abbc4d815902013ca637a3"
    },
    {
      "id": "name-dob-auto-merge",
      "kind": "negative",
      "input": "Name and date of birth match.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-005"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "8e71fbe87db5c9059d7dac8a722ad19f7fbf7ed865fae1675bddc66084050ee5"
    },
    {
      "id": "legal-name-change",
      "kind": "positive",
      "input": "Name-change instrument closes former legal name and opens current name.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-006"
      ],
      "expect": "accept",
      "expectedRefusalReason": null,
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "be89a56d1dd66d0ffae9a52d17fa5108196a9c2b91d4dcaf68df0b3f96d98380"
    },
    {
      "id": "overwrite-former-name",
      "kind": "negative",
      "input": "Current legal name overwrites prior assertion.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-007"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "5e77d0aca73b3e0d5e29e0546729151360bc408e9227c2999c691318e5459665"
    },
    {
      "id": "pseudonym-cross-domain",
      "kind": "negative",
      "input": "Pairwise pseudonym is reused across unrelated purposes.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-008"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "06952f8c5abffcf2b2d1e53541119f6d444e9ade78b7c6f1f49732f837eb5c30"
    },
    {
      "id": "contact-as-identity",
      "kind": "negative",
      "input": "Verified phone is treated as identity proof.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-009"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "8964590c2d12ac64d7cc544693fe5ed007153771221b69487f24881e523e3143"
    },
    {
      "id": "proposal-without-authoriser",
      "kind": "negative",
      "input": "Uncertain match lacks authorising role.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-010"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "759841dc4279b1891245a607449c6ecfaeac4e677133801939cea6e67aa492ae"
    },
    {
      "id": "probable-to-asserted",
      "kind": "negative",
      "input": "High confidence directly activates asserted link.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-011"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "e3abc37ad403e6e866d32915424cb8e824171063f43413abe84258c74738a274"
    },
    {
      "id": "merge-destroys-source",
      "kind": "negative",
      "input": "Merge deletes losing source record.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-012"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "53223a3a532664c87716fcc0fbf9ac8c9046a7359de0090d1fa3b81500953569"
    },
    {
      "id": "former-name-default-disclosure",
      "kind": "negative",
      "input": "Default directory projection releases former legal name.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-013"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "5ad67fbfda1577d0774a6c66054edc5d2ca7f831d2ce5b19e3f32fc31a25a77a"
    },
    {
      "id": "purpose-bound-minimal",
      "kind": "positive",
      "input": "Disclosure declares purpose, basis, relying party and minimal attributes.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-014"
      ],
      "expect": "accept",
      "expectedRefusalReason": null,
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "579d3f2a1410cd354300b89785a38baf91fb5c53f31611df9055de01fe0353c9"
    },
    {
      "id": "hris-universal-master",
      "kind": "negative",
      "input": "HRIS claims universal ownership of person and registrar facts.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-015"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "0fe9b0085206f22e94ee733ab891315faa14553f53e96d436d95db34bcc84798"
    },
    {
      "id": "account-creates-person",
      "kind": "negative",
      "input": "Local login account creates Person anchor.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-016"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "b9eacb386fac75e6b5f7f1cf8e0639cdf406166c6f28d60bea53a8e6eb9ff44c"
    },
    {
      "id": "employment-as-person-attribute",
      "kind": "negative",
      "input": "Employment status is intrinsic Person attribute.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-017"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "e831a1f1642cd4083365f083874a6a3acd037988acf37248c8af0a0160bd71a8"
    },
    {
      "id": "civil-fields-fabricated",
      "kind": "negative",
      "input": "Enterprise adopter fabricates required civil facts.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-018"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "be4e51bc40a2a4bb5a845dc50043c3670ad78cd26ed3360ac1166d42bac5d056"
    },
    {
      "id": "standards-conformance",
      "kind": "negative",
      "input": "Profile claims parent or standards conformance.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-019"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "profile-invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "f08927fcfdda6ee1558c218c9a325807a99ad06d7d470956ab2bdafa5356c4a4"
    },
    {
      "id": "two-namesakes-one-change",
      "kind": "positive",
      "input": "Two anchors exist; one changes legal name; LMS correspondence is uncertain.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-020"
      ],
      "expect": "accept",
      "expectedRefusalReason": null,
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "e75c8aff7ce6faaf0ec7408268042155ffdb5b7d94b77c9341d7fc7a3040b833"
    },
    {
      "id": "inv-001-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: One WM-PER-001 Person anchor is permitted per declared identity domain; source records, accounts, identifiers, documents and credentials remain separate record-plane objects.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-001"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "451f23c22b1fba42a96112aa1e5fb6db332807f4e327d9b97722dff04592f71f"
    },
    {
      "id": "inv-002-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: HRIS, ATS, directory, LMS and future source systems are local bindings and projections, never universal Person masters.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-002"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "dd0bc1cdf0a4b34069d810982e810e371aae3e0e3a29bfb9d10f96a8b845d94a"
    },
    {
      "id": "inv-003-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Profile steward, Person anchor authority, attribute source, source-system custodian and disclosure controller are distinct roles.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-003"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "9cf667ce88653513dd2e746a0e007ba3dc9823cea16a268690a8357879c4eaee"
    },
    {
      "id": "inv-004-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Registrar-copied facts carry source and assurance and are corrected only through the source authority; local correction creates a dispute/proposal, not a replacement fact.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-004"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "2cb7ba6e37472a569fe5ec339aff50b0b00cdc60f97580d8e93f4c38a4667772"
    },
    {
      "id": "inv-005-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Every in-profile attribute and disclosure carries assurance flag and attribute-source reference.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-005"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "7c809f3c4ad02fad33ca6fa0124d0640c3cd0c9d1f7f6de8548cad6877501a7f"
    },
    {
      "id": "inv-006-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: AccountBinding is not a profile member; it is an auditor-introduced, identifier-unassigned deferred candidate outside this contour.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-006"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "d91649cb4d44f10a15c917b82e8f0ac068afead981b7624861e93720eceb7f3b"
    },
    {
      "id": "inv-007-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Account deprovisioning never deletes or changes the Person anchor.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-007"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "a01ab3863cde7b01482bd723d6249b27ab3af0626cb75303bd578c1e5da7784d"
    },
    {
      "id": "inv-008-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Reference identifiers require origin class; where no qualified identifier exists, the profile maintains an unlinked local binding or proposed link rather than fabricating an anchor match.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-008"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "b3052a49a5c6ab119466385d69294917d4475de6cfdcca72a7e6afe7aede45b6"
    },
    {
      "id": "inv-009-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Deterministic linkage is prohibited unless every carrier exists for scheme, scheme version, issuer, authority/domain scope, value, referent kind, non-reassignment policy, active status and overlapping validity.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-009"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "05959395c5c8fe4adc6b25dd6422585bd4350cdf271103e41d08439a82b83905"
    },
    {
      "id": "inv-010-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Qualified identifiers are opaque; pointer equality, normalization, inferred issuer/tenant/namespace or truncated/transliterated/native name equality never establishes identity.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-010"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "3e8e23806cbbd45ba88f7f6902197e340de342e68a8f77758412d23353bbd6ab"
    },
    {
      "id": "inv-011-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Biometrics, pseudonyms, contact points, display names, name plus date of birth and similarity scores never serve as deterministic keys.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-011"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "df1165a5ded1a9c25620736f3a90509667a833ce138032d02339d9deb301d65a"
    },
    {
      "id": "inv-012-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Non-deterministic linkage remains proposed and carries direction, asserting system, state, rule version, purpose, validity, authorising role, evidence and confidence or explicit absence.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-012"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "ff0db4a29e72bcc266d8ec71796281e6a7343e60dcb72a411273f3117d945f82"
    },
    {
      "id": "inv-013-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Probable matching cannot activate asserted state; intra-system dedup follows the same contract.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-013"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "bf79cdd608bafa548c55a9d1096dee30d20ebbefa68bdf73cdc2ba7564d5407c"
    },
    {
      "id": "inv-014-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Merge, split and reversal are addressable decisions; distinct anchors, non-reassignable superseded identifiers, resolvable tombstones and reversal paths are preserved.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-014"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "77d253c209257151714d3845b1b94572ab5452042fa6892991ba9ec1717844fb"
    },
    {
      "id": "inv-015-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Identity proofing may be absent or not-proofed; not-proofed status cannot authorize elevation or deterministic merge.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-015"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "c4c9de4fbe85833f81f8ef9def0cbdc227064dcc8bc28bff0158e321fe3f984c"
    },
    {
      "id": "inv-016-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Names are structured, script-aware, effective-dated assertions; corrections supersede, changes close/open intervals, and fabricated former names are forbidden.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-016"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "fd711b771cd87e7e756f45ce3a8500cc3b3e931799dd151387dbc3ab7a3a19c8"
    },
    {
      "id": "inv-017-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Former names are default-suppressed; lawful release requires named purpose, basis, relying-party class and audit record.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-017"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "26f30d464ca2652a0f62b7d9e70045dff11dfc2e7dc13cd3a152637e22471162"
    },
    {
      "id": "inv-018-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Pseudonyms and local identifiers carry correlatability class; pairwise or single-use pseudonyms also carry derivation and scope; rotation is not claimed without an allocated carrier.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-018"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "152edbe57175cceed83f0c16e05701a40609f17663a1458e34af5b8f4b0d520d"
    },
    {
      "id": "inv-019-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Shared, functional and delegated channels are employer/system-controlled and never person-controlled contact points or linkage evidence.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-019"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "b22527c6d5d8140f1c1a95495c4ed7272cdc6a4ded42a0f329d5613c232c36d9"
    },
    {
      "id": "inv-020-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Every contact point has at least one purpose limitation; verification is time-bounded and invalidated by reassignment or failed control.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-020"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "75d23cc04b0f15a26c1ac25a5fbe656aa73a4a1f65697e5c48fad637b8fc4c69"
    },
    {
      "id": "inv-021-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Contact verification proves channel control only and never Person identity.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-021"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "7f23b72768687184947b9006a4f0348bc2e81b752f9d6a1bd06a529bcafcc0d4"
    },
    {
      "id": "inv-022-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Disclosure prefers a predicate over an attribute whenever sufficient and logs purpose, basis, relying-party class and released set to a person-readable audit service.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-022"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "b17a3f9a7a632e082af167f0a1dc13e0d292550795a8a31dc51e1a8b436cb2ce"
    },
    {
      "id": "inv-023-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Link and proposal records are sensitive and excluded from default projections.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-023"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "d8a578313e619dbfea3943a5533c9249b6fdfbde2ad9754db010e288dcb02c6d"
    },
    {
      "id": "inv-024-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Administrative sex and gender-recognition dates are out-of-profile governed references; self-identified gender is person-controlled special-category data only; former-name suppression remains explicit.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-024"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "c81a7acbd821305d227a65e5e0a9d82087a3ac4f73891decd0d06a65d84affaf"
    },
    {
      "id": "inv-025-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Residence is default-suppressed and, if retained, has a restricted residence kind; biometric pointers are special-category and default-suppressed.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-025"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "7e252ae4936268df4261f9e532f0c418ea6483c2a43d391e919f918e1cc8a0e2"
    },
    {
      "id": "inv-026-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Named projections and relying-party classes are closed and versioned; unknown classes receive no projection.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-026"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "cdcb2013fbb5429793db650776dfc8fff853e3a01fbe69134165d4ea646f70c3"
    },
    {
      "id": "inv-027-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Enterprise time semantics distinguish occurrence/effective time, registration/source time and knowledge/ingestion time; absent registration time is never fabricated.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-027"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "ba081a182cec24dc373090eeed53829bf02ccb08a76f00b0c7842f21660566a4"
    },
    {
      "id": "inv-028-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Lifecycle states are provisional and non-canonical pending inherited taxonomy holds; archiving preserves identifiers, tombstones, history and disclosure logs.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-028"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "88ae92f14b0b62a142f0d8ffeaec88f479b72bab9dbd73e50e7542d782ce5c92"
    },
    {
      "id": "inv-029-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Retention and erasure classes are explicit; required tombstones and disclosure logs survive subject erasure in minimized form.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-029"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "ca3c7d53332ba968d869939654dad0b36c195d272866c1f4d217f69e34fe0411"
    },
    {
      "id": "inv-030-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Employment, customer, role and account facts remain relationship-owned and are not Person attributes.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-030"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "1e442368dc9f25bb2381ee3907ed6c904dc0b070df37f6d2856e290113f2f0e4"
    },
    {
      "id": "inv-031-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Civil-registration-required findings are excluded at finding level, not optionalized or populated with fabricated values.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-031"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "2825ac6579faaf5318b66a195c4d4f15660c40917714f4511b48c8dc3c7dd307"
    },
    {
      "id": "inv-032-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: The frozen dossier governs ContactPoint as a WM-PER-001 finding; out-of-dossier sibling identifiers and version strings are unverified and excluded.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-032"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "9a282df90911ec5e56092034a3a5ecc862028e0b41c7787621dad87fc6152448"
    },
    {
      "id": "inv-033-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: The base is pinned by digest; registry/spec entry-kind, currency and legacy-path drift block publication.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-033"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "85e8584bbbfe8ceee3f22ba094f504c540c7a45d49f7bfef845cb3ba80ee2560"
    },
    {
      "id": "inv-034-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: All required compositions are dispositioned explicitly; unnamed dependencies are removed or treated as unpinned publication blockers.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-034"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "002f64bf822ab34eeebb092a726cf5a323643998fa1a8f04db77b1a6622ecb5b"
    },
    {
      "id": "inv-035-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: de-conformance-claim-flag remains false; standards claims are alignment-only.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-035"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "9db771efee8bf8c5f6548d1535e8d3fe15f6146aaea66429e65290204bf20ebc"
    },
    {
      "id": "inv-036-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: All v1 predecessor fields are non-normative and non-key.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-036"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "2a340577e32e72eaee40104d4395be3fa96a60ffbab315a5bf2edd86d643d464"
    },
    {
      "id": "inv-037-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Candidate and fixture digests are independently recomputed outside the frozen audit; the audit itself verified none.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-037"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "a89889a6006fa626a298e8bd7c67af16a68d302aa3af48780130cab3bff1427c"
    },
    {
      "id": "inv-038-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: All inherited holds remain verbatim, undischarged and annotated for contour relevance.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-038"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "90876373ea4b5850559fdb5cb4e9a54cdd8f0481bd2ed108d222b4b49faf8060"
    },
    {
      "id": "inv-039-contract",
      "kind": "negative",
      "input": "An implementation violates this invariant: Publication and installability are refused while any hold, change request, dependency pin or fixture execution remains open.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-039"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "invariant-violation",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "5f066bd90f6ce27c8ac49961a206a17640f2306beef840b12447c263ac00a952"
    },
    {
      "id": "account-deprovision",
      "kind": "positive",
      "input": "Account is disabled while Person persists.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-006",
        "INV-007"
      ],
      "expect": "accept",
      "expectedRefusalReason": null,
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "78656f29fcd73dc77be5f1d8e75ce7ebfe592a55bb9914935384ad5b3168f16b"
    },
    {
      "id": "qualified-link",
      "kind": "positive",
      "input": "All deterministic tuple carriers match, are active, and overlap.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-009"
      ],
      "expect": "accept",
      "expectedRefusalReason": null,
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "495e74d78725bfb3fae872ea01df16328afaa6c9eb288645a7e5bb9f951b422b"
    },
    {
      "id": "namesakes-combined",
      "kind": "positive",
      "input": "Three systems contain two namesakes; one qualified link is accepted, one uncertain link remains proposed, and one legal name changes. ",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-012",
        "INV-016"
      ],
      "expect": "accept",
      "expectedRefusalReason": null,
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "99b12bc1409334c438f8569c55a72e732efb5db5ae220012e1438a18dd286741"
    },
    {
      "id": "shared-mailbox-as-person-contact",
      "kind": "negative",
      "input": "Shared mailbox is marked person-controlled.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-019"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "controller-mismatch",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "241bacc6370846dccc305a1749a7d8501bca010aad9cf541afd52440db6b40d2"
    },
    {
      "id": "contact-without-purpose",
      "kind": "negative",
      "input": "Contact has zero purpose limitations.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-020"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "purpose-required",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "b2c1a03b4b459152f2140c0306c2a4974d9bf780aff79bf1ac2caf3f8ce3fcd1"
    },
    {
      "id": "stale-verified-channel",
      "kind": "negative",
      "input": "Reassigned phone retains prior verification.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-020"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "stale-verification",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "35b06f0b5c603a4433305afbbb380a4f620100b74b3d9aa723dc61365ea3394e"
    },
    {
      "id": "attribute-where-predicate-suffices",
      "kind": "negative",
      "input": "Full attribute released where predicate suffices.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-022"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "predicate-preferred",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "0ddd30f92f98bdb7d47c412aef7c5b019b012b431c460d4703d0c165dd56021f"
    },
    {
      "id": "unlogged-disclosure",
      "kind": "negative",
      "input": "Disclosure has no audit record.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-022"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "audit-required",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "c9063321505bfa8e335fd024283135a93b25352100c5f792143c688871520ac9"
    },
    {
      "id": "gender-recognition-date-in-hr",
      "kind": "negative",
      "input": "Gender-recognition date copied into HR projection.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-024"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "out-of-profile",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "e8a67362117bd9af2877ff6e88aeb078d58fc75038d96677e0ef80ccfe4a87ee"
    },
    {
      "id": "residence-in-default-projection",
      "kind": "negative",
      "input": "Residence appears in default directory.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-025"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "default-suppressed",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "7992efecb1dd4555c1084cacc633c911038a001fc3ed529a110fc8d3efff306c"
    },
    {
      "id": "biometric-pointer-disclosed",
      "kind": "negative",
      "input": "Biometric pointer released by default.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-025"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "special-category",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "5084985cdb5a1a4f4908e50e86c76ded569f1b16f0a6061e2f3cc2c458669152"
    },
    {
      "id": "conformance-flag-true",
      "kind": "negative",
      "input": "Conformance flag set true without evidence.",
      "preconditions": [
        "candidate revision 3",
        "frozen base pin unchanged"
      ],
      "invariantIds": [
        "INV-035"
      ],
      "expect": "refuse",
      "expectedRefusalReason": "conformance-refused",
      "residualState": "preserve Person anchors, source records, history and audit continuity",
      "digestMeaning": "SHA-256 of canonical JSON case excluding digest fields",
      "sha256": "535ecc713c6de9414e4ce2b9b492378d63e9ee4c4b1c17a49dc1c9022834d9ba"
    }
  ]
}