Canon

The DLX canon defines the stable terminology, invariants, and reference model used by DeciRepo verification surfaces.

Core invariants

Agreement does not establish validity.

Execution validity requires admissibility proof.

Replay non-equivalence invalidates execution claims.

Unverifiable execution fails closed.

Terminology

Admissibility

Current-state and policy-constrained permissibility of a proposed execution at commit-time.

Execution validity

Validity of a binding state transition at the execution boundary.

Replay-equivalence

Deterministic equivalence between the original boundary result and replay recomputation under the same input, policy, and contract identity.

Independent recomputation

Re-evaluation of a boundary result by a verifier external to the originating runtime context.

Verification artifact

Structured evidence bound to an execution claim and replay inputs, used for reproducible verification.

Reference model

Input
→ Contract Identity
→ Admissibility Evaluation
→ ALLOW | DENY
→ Verification Artifact
→ Replay Verification
→ Execution Validity Result

Scope

Canon documents define public semantics. They do not expose production runtime internals, operator infrastructure, enterprise deployment mechanics, or commercial enforcement topology.

Status

Canon layer: v0.1 frozen

Runtime verification surface: v0.1

External witnessed replay verification: pending