04 — C1 Executable Contracts Created & Read Back — 2026-06-22

LABELS: LOCAL_DISPOSABLE_SANDBOX_DOT_EMULATOR · NOT_GOVERNED_RUNTIME · NOT_PRODUCTION · NOT_DIRECTUS_GOVERNED_WRITE · NOT_A_SUBSTITUTE_FOR_DOT_C1_REGISTRATION

All contracts below exist in the sandbox emulator only. They prove contract logic/shape; they are NOT registered on governed runtime.

DOT_C1_* contracts created (readback from c1.dot_agent_api_contract)

DOT_C1_BAD_INPUT_HARNESS | verifier | DRY_RUN | no_mutation=t | fail_closed
DOT_C1_EVIDENCE_READBACK | verifier | DRY_RUN | no_mutation=t | fail_closed
DOT_C1_PREFLIGHT         | verifier | DRY_RUN | no_mutation=t | fail_closed
DOT_C1_ROLLBACK_CHECK    | verifier | DRY_RUN | no_mutation=t | fail_closed
DOT_C1_SCHEMA_ENSURE     | producer | DRY_RUN | no_mutation=t | fail_closed
DOT_C1_VOCAB_BUILD       | producer | DRY_RUN | no_mutation=t | fail_closed
DOT_C1_VOCAB_VERIFY      | verifier | DRY_RUN | no_mutation=t | fail_closed

Executable surface (readback: functions in schema c1)

authority_fixture_hash, build_manifest, cser, dot_c1_preflight, dot_c1_schema_ensure, dot_c1_vocab_build, guard_write_once, manifest_hash, resolve, run_case, verify_authorization

Per-contract specification (as implemented)

Contract	Payload	Validator / reject codes	Dry-run behavior	Real-run block	Evidence out	Readback
DOT_C1_SCHEMA_ENSURE	p_mode	REJECT_BAD_MODE	reports would_register[], persistent_state=NONE	n/a (idempotent)	registry count	c1.c1_table_registry
DOT_C1_VOCAB_BUILD	{carrier,plan_ref,protocol_version,…}, p_auth_code	REJECT_BAD_MODE / WRONG_CARRIER / C2_CROSS_MUTATION / PRODUCTION_TARGET / MISSING_PLAN / BAD_PROTOCOL_VERSION / NON_GOVERNED_VALUE_INJECTION / MANIFEST_HASH_MISMATCH + verifier codes	manifest+hash, seal=WITHHELD_DRY_RUN, persistent_state=NONE	PROD_REAL_RUN → RAISE C1_PROD_REAL_RUN_BLOCKED	manifest_hash, op count	dispatcher result jsonb
DOT_C1_VOCAB_VERIFY (verify_authorization)	auth_code,carrier,plan_ref,manifest_hash,action_set	13 reject codes (file 07)	returns (ok,reject_code)	n/a	verdict row	function output
DOT_C1_PREFLIGHT	none	n/a	7 checks → READY/NOT_READY	n/a	checks[]	file 08
DOT_C1_BAD_INPUT_HARNESS (run_case)	label,mode,payload,auth	catches RAISE	per-case (outcome,reject,has_seal,fail_closed)	n/a	matrix	file 09
DOT_C1_EVIDENCE_READBACK	none	n/a	counts before/after	n/a	counts	file 11
DOT_C1_ROLLBACK_CHECK	none	n/a	dismantle + clean-state	n/a	counts	file 10

Creation log

psql -f c1_build.sql → CREATE SCHEMA; CREATE TABLE ×6; CREATE FUNCTION ×9 (+2 in exercise); CREATE TRIGGER ×1; INSERT 14 (authority fixture); INSERT 7 (contracts); dot_c1_schema_ensure('SANDBOX_APPLY') → {"outcome":"SANDBOX_APPLIED","registered":4}; C1_BUILD_COMPLETE. Artifact provenance: c1_build.sql sha256 c4fd4cf5efe3429eea066ffd320648f68688591fa45d17737a810330b8354110.