Fusion POC contract

Supported claim

For one bounded five-class Java 25 fixture, the prototype can:

1. extract declared and direct static call facts;
2. observe a fixed runtime event catalog;
3. reconcile observations only when all immutable identity axes agree;
4. retain unmatched observations as explicit orphans instead of guessing;
5. fuse declared, static, observed, security-modeled, and derived facts while preserving their production provenance;
6. persist and reopen the fused snapshot;
7. execute the same read-only query before and after fusion without changing the graph; and
8. represent both an assessment and an aggregate finding fact on the same immutable base without collapsing contributor layers.

The exact finite-model expectations are encoded independently in oracles/static-oracle-v1.json, oracles/runtime-oracle-v1.json, and oracles/fusion-oracle-v1.json.

Required observable outcome

A successful poc run must complete all four fixed scan-pass units, pass the semantic verifier for every unit, execute exactly two non-mutating invocations of one query definition per unit, and reject all four deliberately plausible wrong results:

• run-identity substitution;
• production-provenance omission;
• split fusion base; and
• query-state mutation.

No planned process may time out, trigger a resource cap, or remain alive after its stage. The public output must report authority.effect = "none".

Nonclaims

The experiment does not select a canonical finding representation or make an architectural acceptance decision, establish universal soundness or completeness, characterize a production collector, establish an SLO or capacity, or demonstrate production readiness, exploitability, or superiority. Timing and resource observations are descriptive because host architecture, kernel, container runtime, scheduling, JVM startup, JIT, and GC remain variable.

Lineage

This standalone contract is derived from the upstream experiment identified in PROVENANCE.md. The semantic implementation was accepted at commit 7eedcbf7d7d85ff47895d0f810274c12618351e1; the compact acceptance evidence was recorded at commit a48bd9bf7620e7322d7bfc37e6775bb7ba1c7271.