{
  "schema_version": 1,
  "kind": "formal-package-inputs",
  "package_id": "identity",
  "revision": "1",
  "tool_sha256": "5bd7b64db99ae4c6c35f290de5e809c0ee41af43f8699cf696099ffb6452b1e2",
  "license_id": "CC0-1.0",
  "description": "Original bounded occurrence-renewal and explicit-reference teaching model; no full-source correspondence claim.",
  "assumptions": [
    "Two physical items; only item-a moves.",
    "Hidden means an explicitly selected movement policy, not a knowledge or noninterference proof.",
    "No hosts, conversion, score-area transfer or controller changes."
  ],
  "models": [
    {
      "id": "ordinary",
      "module": "IdentityMC",
      "config": "IdentityMC.cfg",
      "expected_exit": 0,
      "outcome": "success",
      "properties": [
        "TypeOK",
        "LivePastSeparated",
        "FreshAllocation",
        "UniquePhysicalItems",
        "StationaryObjectFrame",
        "NoImplicitRetarget",
        "RenewalClearsMarks",
        "RetiredReferenceIsNotLive",
        "StableHistory"
      ],
      "bounds": {
        "MaxOccurrence": 4,
        "physical_items": 2,
        "positions": 2
      },
      "fairness": [],
      "constraints": [],
      "description": "Actual finite transition exploration plus action-safety preservation of retired history.",
      "max_seconds": 60
    },
    {
      "id": "implicit-follow",
      "module": "IdentityMC",
      "config": "IdentityImplicitFollow.cfg",
      "expected_exit": 12,
      "outcome": "safety-counterexample",
      "properties": [
        "TypeOK",
        "LivePastSeparated",
        "FreshAllocation",
        "UniquePhysicalItems",
        "StationaryObjectFrame",
        "NoImplicitRetarget",
        "RenewalClearsMarks",
        "RetiredReferenceIsNotLive"
      ],
      "expected_property": "NoImplicitRetarget",
      "negative_of": "ordinary",
      "bounds": {
        "MaxOccurrence": 4,
        "physical_items": 2,
        "positions": 2
      },
      "fairness": [],
      "constraints": [],
      "description": "Deliberately following a renewed occurrence without an explicit rebind violates reference provenance.",
      "max_seconds": 60
    }
  ],
  "transformation": {
    "kind": "new-instructional-abstraction",
    "correspondence": "unassessed",
    "full_contract_denominator_closed": false
  },
  "files": [
    {
      "path": "IdentityImplicitFollow.cfg",
      "sha256": "a864f1367fea99943cd65915311be98aaa1d92921c23afa1f39dcdc9a818fe81",
      "bytes": 256
    },
    {
      "path": "IdentityMC.cfg",
      "sha256": "ed9887efb224f7cb63efa9eb219ee3acd839a980f881fe1e5d933d1a684dbd0f",
      "bytes": 280
    },
    {
      "path": "IdentityMC.tla",
      "sha256": "ad4c682a5828d863f9047c8db973650d5d24d22298097c2974312a4fd6c872ef",
      "bytes": 1837
    },
    {
      "path": "ObjectIdentity.tla",
      "sha256": "1fe7a896733a43f76d8422d2cfc0b22d689fdcda3385287e5c375a2d513beedb",
      "bytes": 3420
    }
  ]
}