{
  "format": "vercy-model-allocation-candidate/v1",
  "contourId": "EM-TEC-07",
  "proposedName": "Exploit Artifact",
  "modelId": null,
  "registryId": null,
  "allocationState": "unassigned",
  "decision": "NEW MODEL — CANDIDATE, IDENTIFIER-UNASSIGNED",
  "canonicalPublishable": false,
  "identityTest": {
    "stableIdentity": "An independently managed proof-of-concept or weaponized-code artifact remains identifiable across vulnerability links, analyses, restrictions and observed uses while its bytes and provenance remain fixed.",
    "versionIdentity": "A byte-level change to captured content within the same acquisition creates a new ArtifactRendition with supersedesRendition. A distinct acquisition, or a change in functional capability class, creates a distinct ExploitArtifact with successorRef. No other change alters identity.",
    "independentLifecycle": [
      "reported",
      "quarantined",
      "analyzed",
      "superseded",
      "withdrawn",
      "disposed"
    ],
    "mastership": "pending: no mastering authority base is named in this contour"
  },
  "boundary": {
    "owns": [
      "persistent exploit-artifact identity",
      "content digest and immutable rendition reference",
      "acquisition provenance and chain of custody",
      "claimed vulnerability and product/component-version mappings",
      "capability classification and analysis status",
      "handling, disclosure and access restrictions",
      "supersession, withdrawal and disposal history",
      "controlled-environment analysis observations of the artifact itself"
    ],
    "references": [
      {
        "target": "WM-SFT-006",
        "approvalStatus": "unapproved",
        "purpose": "Vulnerability and public exploitation-signal master"
      },
      {
        "target": "WM-SFT-007",
        "approvalStatus": "unapproved",
        "purpose": "Product/component-version target scope"
      },
      {
        "target": "WM-SFT-008",
        "approvalStatus": "unapproved",
        "purpose": "Build/release target scope"
      }
    ],
    "excludes": [
      "vulnerability, weakness or advisory identity",
      "product affectedness or VEX assertion",
      "deployed-instance exposure or local risk conclusion",
      "public exploitation signal, probability or severity score",
      "estate exploitation observation or incident identity",
      "remediation task, fix, build, deployment or verification fact",
      "generation of exploitation instructions or authorization to execute code"
    ],
    "inboundOnlyReferences": [
      "WM-SFT-009",
      "WM-SFT-012",
      "WM-ACT-020",
      "WM-ACT-034"
    ]
  },
  "objects": {
    "ExploitArtifact": {
      "identity": [
        "exploitArtifactId"
      ],
      "required": [
        "contentDigest",
        "provenance",
        "chainOfCustody",
        "handlingClass",
        "status",
        "targetScope"
      ],
      "optional": [
        "vulnerabilityRefs",
        "targetRefs",
        "capabilityClass",
        "analysisRefs",
        "successorRef",
        "disposedAt"
      ],
      "targetScope": "product_or_component_version",
      "lifecycle": [
        "reported",
        "quarantined",
        "analyzed",
        "superseded",
        "withdrawn",
        "disposed"
      ],
      "conditionalRules": [
        "disposedAt is required when status is disposed",
        "handlingClass defaults to restricted and is never a lifecycle value"
      ]
    },
    "ArtifactRendition": {
      "identity": [
        "exploitArtifactId",
        "renditionId"
      ],
      "required": [
        "digest",
        "mediaType",
        "createdAt"
      ],
      "optional": [
        "storageRef",
        "encryptionRef",
        "redactionBasis",
        "supersedesRendition"
      ],
      "disposalRule": "storageRef is absent for renditions of a disposed artifact; digest, mediaType, createdAt and provenance are retained"
    }
  },
  "invariants": [
    "Exploit artifact identity is distinct from vulnerability, public signal, exploitation observation and incident identity.",
    "Every stored rendition is immutable and addressed by a verified content digest.",
    "Acquisition provenance and chain of custody are retained for every artifact.",
    "An artifact link to a vulnerability is sourced and never proves product affectedness or instance exposure.",
    "Public exploitation signals never prove that a specific artifact exists.",
    "Artifact possession or controlled analysis never proves estate exploitation or incident occurrence.",
    "Restricted handling is the default and access requires explicit purpose, scope and audit.",
    "Artifact records never authorize generating exploitation instructions or executing captured content.",
    "Same-acquisition byte changes create renditions; distinct acquisitions or capability changes create distinct artifacts.",
    "Withdrawal or disposal preserves non-content provenance, decisions, digests and historical references.",
    "The artifact root never records observation of the artifact acting on or within an estate component, build, deployment or instance.",
    "WM-SFT-009, WM-SFT-012, WM-ACT-020 and WM-ACT-034 may cite the artifact inbound; the artifact never cites them outbound."
  ],
  "holds": [
    "Registry namespace and identifier allocation are pending and no identifier may be guessed.",
    "Independent Grok review was received in this contour; the frozen semantic audit was completed exactly once.",
    "WM-SFT-008, WM-SFT-012 and WM-SFT-007 boundary texts require amendment before canonicalisation.",
    "Relation-ledger rows backing every declared reference are absent; no reference is approved.",
    "No mastering authority base for Exploit Artifact is named in this contour.",
    "Security handling, malware-storage and disclosure controls require specialist approval.",
    "Package conversion and live verification remain pending."
  ],
  "candidateRevision": 3,
  "status": "provider-reconciled-audited-remediated-allocation-held",
  "basesAreNonCanonicalDrafts": true,
  "installabilityClaim": "none",
  "publicationReadinessClaim": "none",
  "invariantRules": [
    {
      "id": "TEC07-ARTIFACT-001",
      "rule": "Exploit artifact identity is distinct from vulnerability, public signal, exploitation observation and incident identity."
    },
    {
      "id": "TEC07-ARTIFACT-002",
      "rule": "Every stored rendition is immutable and addressed by a verified content digest."
    },
    {
      "id": "TEC07-ARTIFACT-003",
      "rule": "Acquisition provenance and chain of custody are retained for every artifact."
    },
    {
      "id": "TEC07-ARTIFACT-004",
      "rule": "An artifact link to a vulnerability is sourced and never proves product affectedness or instance exposure."
    },
    {
      "id": "TEC07-ARTIFACT-005",
      "rule": "Public exploitation signals never prove that a specific artifact exists."
    },
    {
      "id": "TEC07-ARTIFACT-006",
      "rule": "Artifact possession or controlled analysis never proves estate exploitation or incident occurrence."
    },
    {
      "id": "TEC07-ARTIFACT-007",
      "rule": "Restricted handling is the default and access requires explicit purpose, scope and audit."
    },
    {
      "id": "TEC07-ARTIFACT-008",
      "rule": "Artifact records never authorize generating exploitation instructions or executing captured content."
    },
    {
      "id": "TEC07-ARTIFACT-009",
      "rule": "Same-acquisition byte changes create renditions; distinct acquisitions or capability changes create distinct artifacts."
    },
    {
      "id": "TEC07-ARTIFACT-010",
      "rule": "Withdrawal or disposal preserves non-content provenance, decisions, digests and historical references."
    },
    {
      "id": "TEC07-ARTIFACT-011",
      "rule": "The artifact root never records observation of the artifact acting on or within an estate component, build, deployment or instance."
    },
    {
      "id": "TEC07-ARTIFACT-012",
      "rule": "WM-SFT-009, WM-SFT-012, WM-ACT-020 and WM-ACT-034 may cite the artifact inbound; the artifact never cites them outbound."
    }
  ]
}