Historical proof.
This superseded deployment is preserved as finalized historical evidence. Its proposal and lifecycle write controls are intentionally disabled.
Consequence only after finality.
Awaiting finalized readsOne hash. Three independent checks.
UNAVAILABLETrust is part of the policy.
Upgrade did not rewrite identity.
No blind re-submission.
Once a transaction hash exists, ProofPatch stores it immediately and follows that exact transaction instead of blindly sending another one.
Source, CI and independent audit authorities are policy-bound before a proposal can influence execution.
Candidate and evidence URLs must resolve through approved immutable repository prefixes.
Evidence carries publication/expiry rules and scoped identifiers that cannot be reused for the same authority and target.
Correctable fetch, parse and hash failures move the proposal into a repair state instead of forcing an unsafe terminal path.
The candidate hash and authorization-driving semantic result are exact values, never fuzzy confidence thresholds.
The upgrade message is finality-bound; acceptance alone cannot replace the protected target code.