Reconciliation rules

Rules are deterministic. No cookie or fingerprint grants merge, write, or spend authority.

• Exact version match

  rule-exact-version

  A claim may reach VERIFIED only when project-domain evidence in the claim's scope reports the exact expected version.

  applies to: anyexact match → VERIFIEDmismatch → BLOCKEDmissing evidence → UNKNOWN

• Runtime / deployment strictness

  rule-runtime-strict

  Runtime and deployment claims without project-domain evidence are BLOCKED, never UNKNOWN, because absence of runtime proof is itself a blocker.

  applies to: runtimeexact match → VERIFIEDmismatch → BLOCKEDmissing evidence → BLOCKED

• Deployment strictness

  rule-deployment-strict

  Deployment claims require project-domain deployment evidence or they are BLOCKED.

  applies to: deploymentexact match → VERIFIEDmismatch → BLOCKEDmissing evidence → BLOCKED