{
  "edges": [
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:belief",
      "rationale": "display/telemetry only; stripped before decisions",
      "to": "surface:api-metadata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:flourishing",
      "rationale": "display/telemetry only; stripped before decisions",
      "to": "surface:api-metadata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:reputation",
      "rationale": "display/telemetry only; stripped before decisions",
      "to": "surface:api-metadata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:trust-score",
      "rationale": "display/telemetry only; stripped before decisions",
      "to": "surface:api-metadata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:behavioral-routing",
      "rationale": "display/telemetry only; stripped before decisions",
      "to": "surface:api-metadata"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "input:objective-evidence",
      "rationale": "objective signed data only",
      "to": "surface:contract-input"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:contract-input",
      "rationale": "objective signed data only",
      "to": "surface:sdk-client"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:sdk-client",
      "rationale": "objective signed data only",
      "to": "surface:api-metadata"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:api-metadata",
      "rationale": "objective signed data only",
      "to": "surface:compat-wrapper"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:compat-wrapper",
      "rationale": "objective signed data only",
      "to": "surface:cross-chain-envelope"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:cross-chain-envelope",
      "rationale": "objective signed data only",
      "to": "surface:governance-job"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:governance-job",
      "rationale": "explicit authority and objective rules only",
      "to": "decision:custody"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:governance-job",
      "rationale": "explicit authority and objective rules only",
      "to": "decision:access"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:governance-job",
      "rationale": "explicit authority and objective rules only",
      "to": "decision:eligibility"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:governance-job",
      "rationale": "explicit authority and objective rules only",
      "to": "decision:pricing"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:governance-job",
      "rationale": "explicit authority and objective rules only",
      "to": "decision:slashing"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:governance-job",
      "rationale": "explicit authority and objective rules only",
      "to": "decision:settlement"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:governance-job",
      "rationale": "explicit authority and objective rules only",
      "to": "decision:disputes"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:governance-job",
      "rationale": "explicit authority and objective rules only",
      "to": "decision:routing"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:belief",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:belief",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:belief",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:belief",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:belief",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:belief",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:flourishing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:flourishing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:flourishing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:flourishing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:flourishing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:flourishing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:reputation",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:reputation",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:reputation",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:reputation",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:reputation",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:reputation",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:trust-score",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:trust-score",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:trust-score",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:trust-score",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:trust-score",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:trust-score",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:behavioral-routing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:behavioral-routing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:behavioral-routing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:behavioral-routing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:behavioral-routing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:behavioral-routing",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:biometric",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:biometric",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:biometric",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:biometric",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:biometric",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:biometric",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:profiling",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:profiling",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:profiling",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:profiling",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:profiling",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:profiling",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:surveillance",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:surveillance",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:surveillance",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:surveillance",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:surveillance",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:surveillance",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:quality",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:quality",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:quality",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:quality",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:quality",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:quality",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:loyalty",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "source:accountability-canonical"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:loyalty",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:governance-calldata"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:loyalty",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-identity-adapter"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:loyalty",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:loyalty",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:factory-initcode"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "unsafe:loyalty",
      "rationale": "prohibited by exact on-chain source/policy/tuple/deployment checks",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "source:accountability-canonical",
      "rationale": "exact audited non-proxy source codehash and deterministic deadline rule",
      "to": "decision:slashing"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:governance-calldata",
      "rationale": "canonical policy digest, ABI, selector, value, and predicates",
      "to": "surface:governance-job"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:mandate-identity-adapter",
      "rationale": "pinned adapter address and codehash",
      "to": "surface:mandate-execution-tuple"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:mandate-execution-tuple",
      "rationale": "principal-signed exact tuple and calldata hash",
      "to": "decision:access"
    },
    {
      "carriesDecisionInfluence": true,
      "from": "surface:factory-initcode",
      "rationale": "constructor-pinned initcode and post-deploy runtime/state checks",
      "to": "decision:access"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "retired:dispute-registry",
      "rationale": "retired module excluded by pilot subset and controller module marker gates",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "retired:task-escrow",
      "rationale": "retired module excluded by pilot subset and controller module marker gates",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "retired:mutual-aid",
      "rationale": "retired module excluded by pilot subset and controller module marker gates",
      "to": "surface:base-pilot-manifest"
    },
    {
      "carriesDecisionInfluence": false,
      "from": "retired:validation-registry",
      "rationale": "retired module excluded by pilot subset and controller module marker gates",
      "to": "surface:base-pilot-manifest"
    }
  ],
  "nodes": [
    {
      "id": "unsafe:belief",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "unsafe:flourishing",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "unsafe:reputation",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "unsafe:trust-score",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "unsafe:behavioral-routing",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "surface:contract-input",
      "kind": "contract",
      "unsafe": false
    },
    {
      "id": "surface:sdk-client",
      "kind": "sdk",
      "unsafe": false
    },
    {
      "id": "surface:api-metadata",
      "kind": "api-metadata",
      "unsafe": false
    },
    {
      "id": "surface:compat-wrapper",
      "kind": "wrapper",
      "unsafe": false
    },
    {
      "id": "surface:cross-chain-envelope",
      "kind": "cross-chain-message",
      "unsafe": false
    },
    {
      "id": "surface:governance-job",
      "kind": "governance-automation",
      "unsafe": false
    },
    {
      "id": "decision:custody",
      "kind": "protected-decision",
      "unsafe": false
    },
    {
      "id": "decision:access",
      "kind": "protected-decision",
      "unsafe": false
    },
    {
      "id": "decision:eligibility",
      "kind": "protected-decision",
      "unsafe": false
    },
    {
      "id": "decision:pricing",
      "kind": "protected-decision",
      "unsafe": false
    },
    {
      "id": "decision:slashing",
      "kind": "protected-decision",
      "unsafe": false
    },
    {
      "id": "decision:settlement",
      "kind": "protected-decision",
      "unsafe": false
    },
    {
      "id": "decision:disputes",
      "kind": "protected-decision",
      "unsafe": false
    },
    {
      "id": "decision:routing",
      "kind": "protected-decision",
      "unsafe": false
    },
    {
      "id": "input:objective-evidence",
      "kind": "capability",
      "unsafe": false
    },
    {
      "id": "unsafe:biometric",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "unsafe:profiling",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "unsafe:surveillance",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "unsafe:quality",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "unsafe:loyalty",
      "kind": "capability",
      "unsafe": true
    },
    {
      "id": "source:accountability-canonical",
      "kind": "canonical-source",
      "unsafe": false
    },
    {
      "id": "surface:governance-calldata",
      "kind": "contract-input",
      "unsafe": false
    },
    {
      "id": "surface:mandate-identity-adapter",
      "kind": "contract",
      "unsafe": false
    },
    {
      "id": "surface:mandate-execution-tuple",
      "kind": "contract-input",
      "unsafe": false
    },
    {
      "id": "surface:factory-initcode",
      "kind": "deployment",
      "unsafe": false
    },
    {
      "id": "surface:base-pilot-manifest",
      "kind": "deployment-manifest",
      "unsafe": false
    },
    {
      "id": "retired:dispute-registry",
      "kind": "retired-module",
      "unsafe": false
    },
    {
      "id": "retired:task-escrow",
      "kind": "retired-module",
      "unsafe": false
    },
    {
      "id": "retired:mutual-aid",
      "kind": "retired-module",
      "unsafe": false
    },
    {
      "id": "retired:validation-registry",
      "kind": "retired-module",
      "unsafe": false
    }
  ],
  "protectedDecisions": [
    "custody",
    "access",
    "eligibility",
    "pricing",
    "slashing",
    "settlement",
    "disputes",
    "routing"
  ],
  "requiredSurfaceKinds": [
    "contract",
    "sdk",
    "api-metadata",
    "wrapper",
    "cross-chain-message",
    "governance-automation"
  ],
  "schemaVersion": "1.0.0",
  "unsafeCapabilityClasses": [
    "belief",
    "flourishing",
    "reputation",
    "trust-score",
    "behavioral-routing",
    "biometric",
    "profiling",
    "surveillance",
    "quality",
    "loyalty"
  ]
}
