| store-single-writer | ENFORCED | enforced | project | CORE |
| no-silent-defaults | ENFORCED | enforced | project | |
| yaml-discipline | ENFORCED | enforced | project | |
| boundary-discipline | ENFORCED | enforced | project | CORE |
| no-environment-defaults | ENFORCED | enforced | project | |
| surface-no-per-kind-branch | ENFORCED | enforced | project | |
| substrate-append-only | ENFORCED | enforced | project | |
| producer-holds-no-resource | ENFORCED | enforced | project | |
| identity-keys-on-shape | ENFORCED | enforced | project | |
| signature-column-not-surfaced | ENFORCED | enforced | project | |
| store-not-auto-created | PARTIAL | partial | project | |
| authority-separation | INTENTION | intention | project | CORE |
| fatal-retry-deadline-not-config | INTENTION | intention | project | |
| standards-sections-verified | INTENTION | intention | project | |
| producer-does-not-choose-zone | ENFORCED | enforced | project | CORE |
| review-surface-holds-no-reader | ENFORCED | enforced | project | CORE |
| completion-claim-carries-identifier | MECHANISM | mechanism_present | project | CORE |
| authorization-requires-verifiable-record | INTENTION | intention | project | CORE |
| no-degraded-mode-without-halt | PARTIAL | partial | project | CORE |
| unreadable-marker-structurally-distinct | ENFORCED | enforced | project | |
| citation-resolution-one-level | ENFORCED | enforced | project | |
| detection-set-closed | ENFORCED | enforced | project | |
| detection-attribution-runtime | INTENTION | intention | project | |
| observer-reentrancy-guarded | ENFORCED | enforced | project | |
| observer-failure-is-loud | ENFORCED | enforced | project | |
| proposer-reached-from-every-outermost-exit | ENFORCED | enforced | project | |
| once-only-condition-cannot-reach-a-threshold-of-two | INTENTION | intention | project | |
| disposition-refuses-at-resource | ENFORCED | enforced | project | |
| self-disposition-outside-observation | INTENTION | intention | project | |
| surface-class-contract-declared | ENFORCED | enforced | project | |
| single-live-cardinality | ENFORCED | enforced | project | |
| kaizen-recurrence-proposal | ENFORCED | enforced | project | |
| testwatch-second-producer-emits-test-failure | ENFORCED | enforced | project | |
| session-end-failures-recorded-in-their-own-session | ENFORCED | enforced | project | |
| uncovered-enforcer-verdict-yields-no-record | INTENTION | intention | project | |
| emit-outside-boundary-unobserved | INTENTION | intention | project | |
| disposition-claim-substantiated-by-query | ENFORCED | enforced | project | |
| refusal-reasons-render-distinctly-from-structure | ENFORCED | enforced | project | |
| observed-recurrence-frozen-and-live-unreconciled | ENFORCED | enforced | project | |
| grove-dev-token-absent-from-package | ENFORCED | enforced | project | |
| relaxation-records-never-skips | ENFORCED | enforced | project | |
| recognizer-holds-the-perimeter | ENFORCED | enforced | project | |
| applier-holds-the-perimeter | ENFORCED | enforced | project | |
| applier-invoked-at-the-resource-and-failure-halts | ENFORCED | enforced | project | |
| granted-workspace-writer-owns-the-refusals | ENFORCED | enforced | project | |
| zones-schema-validates-published-key-values | ENFORCED | enforced | project | |
| zones-schema-closes-its-key-sets-both-directions | ENFORCED | enforced | project | |
| granted-workspace-disjoint-from-read-paths-at-load | ENFORCED | enforced | project | |
| granted-workspace-containment-predicate | ENFORCED | enforced | project | |
| read-closure-coverage-shipped-schema-matches-registry | ENFORCED | enforced | project | |
| closure-source-is-the-named-scope-defining-surface | ENFORCED | enforced | project | |
| read-closure-is-transitive | ENFORCED | enforced | project | |
| unresolvable-read-set-forces-scope-defining | ENFORCED | enforced | project | |
| declared-path-members-well-formed-at-load | ENFORCED | enforced | project | |
| scope-defining-members-consumed | ENFORCED | enforced | project | |
| scope-defining-write-classified | ENFORCED | enforced | project | |
| zones-absent-skill-promotion-is-none-not-empty | ENFORCED | enforced | project | |
| no-public-function-returns-a-mutable-global | ENFORCED | enforced | project | |
| no-operator-text-in-signatures | ENFORCED | enforced | project | |
| permanent-condition-surfaced-once | ENFORCED | enforced | project | |
| gate-ledger-structurally-valid | ENFORCED | enforced | project | |
| runtime-check-coverage-deferred | INTENTION | intention | project | |
| authorized-regressions-validated-and-consumed | ENFORCED | enforced | project | |
| vendored-standard-carries-its-notice | ENFORCED | enforced | project | |
| no-grove-module-reads-the-vendored-standard | ENFORCED | enforced | project | |
| permitted-key-sets-cover-what-the-standard-publishes | ENFORCED | enforced | project | |
| grant-document-refused-with-every-defect | ENFORCED | enforced | project | |
| permitted-grant-key-sets-cover-what-the-standard-publishes | ENFORCED | enforced | project | |
| approval-time-zone-derived-from-surface-grant-and-deputy | ENFORCED | enforced | project | |
| scope-defining-write-coverage-is-a-fact | ENFORCED | enforced | project | |
| write-target-declared-before-approval | ENFORCED | enforced | project | |
| confused-deputy-verdict-precedes-the-durable-row | ENFORCED | enforced | project | |
| untrusted-path-components-are-not-symlinks | ENFORCED | enforced | project | |
| issuer-key-registry-refuses-at-load | ENFORCED | enforced | project | |
| grant-signed-set-refused-at-load | ENFORCED | enforced | project | |
| grant-signature-canonical-form-and-verification | ENFORCED | enforced | project | |
| verification-verdict-reaches-the-refusal-and-nothing-elevates | ENFORCED | enforced | project | |
| grant-signed-set-is-a-declared-constant-with-a-prose-pin | ENFORCED | enforced | project | |
| revocation-signed-fields-are-ours-and-canonicalized | ENFORCED | enforced | project | |
| canonical-form-parameterised-grant-bytes-byte-identical | ENFORCED | enforced | project | |
| revocation-intake-refused-at-load | ENFORCED | enforced | project | |
| grants-loader-refuses-duplicate-grant-id | ENFORCED | enforced | project | |
| revocation-memory-is-append-only-and-refuses-when-absent | ENFORCED | enforced | project | |
| revocation-union-predicate-absorbs-what-verifies | ENFORCED | enforced | project | |
| a-revocation-refuses-the-grant-whose-signature-it-names | ENFORCED | enforced | project | |
| the-additive-reconcile-is-closed-against-the-recency-substrate | ENFORCED | enforced | project | |
| unrecorded-revocation-halts-with-its-cause | ENFORCED | enforced | project | |
| revoked-at-is-not-an-authorization-operand | ENFORCED | enforced | project | |
| revocation-file-loader-not-called-outside-the-predicate | ENFORCED | enforced | project | |
| revoked-grant-refused-at-the-authorization-read | ENFORCED | enforced | project | |
| revocation-fact-renders-distinctly-at-the-surface | ENFORCED | enforced | project | |
| scope-defining-arm-returns-red-under-every-revocation-verdict | ENFORCED | enforced | project | |
| scope-defining-members-accessor-is-symmetric | ENFORCED | enforced | project | |
| scope-defining-member-applier-names-a-member | ENFORCED | enforced | project | |
| scope-defining-member-writer-overwrites-in-the-authority-frame | ENFORCED | enforced | project | |
| grants-document-permanently-excluded-as-a-write-target | ENFORCED | enforced | project | CORE |
| authorisation-substrate-is-never-a-write-target | ENFORCED | enforced | project | |
| scope-defining-containment-is-selected-by-surface-class | ENFORCED | enforced | project | |
| applier-registration-is-a-declared-set-and-single-sited | ENFORCED | enforced | project | |
| load-time-disjointness-unchanged-by-the-member-write-seam | ENFORCED | enforced | project | |
| no-scope-defining-write-is-performed-this-phase | ENFORCED | enforced | project | |
| classifier-docstring-states-no-bridge-was-built | ENFORCED | enforced | project | |
| zone-vocabulary-is-an-ordered-friction-topology | ENFORCED | enforced | project | |
| grants-authorization-folds-every-qualifying-grant-to-maximum-friction | ENFORCED | enforced | project | |
| grants-authorization-excludes-and-distinguishes-why-none-qualified | ENFORCED | enforced | project | |
| the-first-yes-authorises-a-scope-defining-write | ENFORCED | enforced | project | |
| a-grant-is-bounded-by-its-expiry-not-refused-for-carrying-one | ENFORCED | enforced | project | |
| containment-precedes-authorisation | ENFORCED | enforced | project | |
| the-authorisation-relation-is-the-sole-path | ENFORCED | enforced | project | |
| a-member-write-surfaces-authority-drift-in-the-same-process | ENFORCED | enforced | project | |
| the-approval-names-what-authorised-it | ENFORCED | enforced | project | |
| the-newly-reachable-halt-paths-are-covered | ENFORCED | enforced | project | |
| seam-membership | ENFORCED | enforced | project | |
| loop-boundary | ENFORCED | enforced | project | |
| an-unsigned-draft-authorises-nothing | ENFORCED | enforced | project | |
| a-draft-lands-only-inside-a-declared-workspace | ENFORCED | enforced | project | |
| a-signed-installed-grant-authorises-a-scope-defining-write | ENFORCED | enforced | project | |
| the-prospective-fold-is-display-only | ENFORCED | enforced | project | |
| operator-surfaces-refuse-instead-of-raising | ENFORCED | enforced | project | |
| grant-provenance-not-read-by-the-runtime | ENFORCED | enforced | project | CORE |
| origin-required-for-green-arm | INTENTION | intention | project | CORE |
| recurrence-namespaced-by-producer | INTENTION | intention | project | CORE |
| proposal-recurrence-namespaced-by-lineage | ENFORCED | enforced | project | |
| external-payload-schema-closed | INTENTION | intention | project | CORE |
| citations-restricted-to-observable-lineage | INTENTION | intention | project | CORE |
| identity-never-reaches-authorization-fold | INTENTION | intention | project | CORE |
| emission-carries-a-signing-digest | ENFORCED | enforced | project | |
| row-path-citations-resolve | ENFORCED | enforced | project | |
| cardinality-declarations-resolve-to-the-tree | ENFORCED | enforced | project | |
| enforcer-relations-and-invocation-are-pinned | ENFORCED | enforced | project | |
| registered-kinds-declared-and-agreed | ENFORCED | enforced | project | |
| authority-check-refuses-an-incomplete-contract | ENFORCED | enforced | project | |
| refusal-attributed-only-from-carried-facts | ENFORCED | enforced | project | |
| refusal-origin-stamped-at-the-resource | ENFORCED | enforced | project | |
| refusal-text-dispatches-on-the-stamped-origin | ENFORCED | enforced | project | |
| read-path-does-not-alter-the-store | ENFORCED | enforced | project | |
| schema-reconcile-is-an-operator-act | ENFORCED | enforced | project | |
| pure-reads-refuse-on-a-store-behind-this-code | ENFORCED | enforced | project | |
| hook-catch-width-is-ordinary-only | ENFORCED | enforced | project | |
| hook-refusal-reports-into-a-surviving-report | ENFORCED | enforced | project | |
| hand-over-entry-count-is-unbounded-and-unobserved | INTENTION | intention | project | |
| the-migration-seam-exists-and-excludes-the-recency-substrate | ENFORCED | enforced | project | |