FPA-FRESHNESS-PORTABILITY-003 · Released · Public release v1

Freshness Portability Agent

A specification document package, distributed free of charge. It defines a strict freshness-governed boundary agent for import acceptance, receipt anchoring, watermark advancement, restoration eligibility, quarantine, and readmission across sources and devices.

When state moves between devices, the only thing worse than losing it is accepting an old version as current.

Scope

What this package is, and is not

This package is a self-contained, normative, execution-neutral single agent specification, delivered as-is, sufficient for an engineering team to build the agent without further design decisions about agent logic, evidence shape, validator behavior, or failure semantics.

This package is not software, SaaS, a managed service, consulting, support, managed operations, or implementation delivery. It does not approve source semantic content, activate tool-state without a separate gate, relax policy, or perform persistent writes during startup verification. It is not a live runtime — nothing in the package executes; everything in the package describes how a conforming executable agent must behave.

Structural properties

What the specification guarantees

4 public-facing structural properties, grounded in spec §§1.1, 2.1, 13, 15, and Appendix A and elaborated through the failure semantics, workflow, gate logic, and evidence contract sections:

01

Freshness strictly increases per source. The implementation must compare incoming freshness against the stored acceptance watermark and accept only newer values within the scoped source_id / ledger_uuid context.

02

Replay is deterministically rejected. A packet whose freshness is stale relative to the watermark is rejected without receipt emission or watermark update.

03

Temporal ordering is preserved across device boundaries. Ordering is based on freshness monotonicity and receipt-linked watermark advancement, not wall-clock timestamp.

04

Cross-device portability remains safe under ordering guarantees. The agent supports portability without device-bound counters while preserving receipt anchoring, restore eligibility boundaries, and fail-closed behavior.

These are properties of the specification. They are not warranties about a delivered running system.

Package contents

What the package contains

The specification

the normative product you implement from
Freshness_Portability_Agent_Specification.mdNormative specification. The authoritative document.
Freshness_Portability_Agent_Semantic_Index.mdSemantic Index — Human Edition (D1). Canonical glossary of all 121 normative terms.
Freshness_Portability_Agent_Semantic_Index.yaml / Freshness_Portability_Agent_Semantic_Index.jsonSemantic Index — Structured Edition (D2). The same glossary as data, 1:1 with D1. For tooling.
Freshness_Portability_Agent_Coverage_Matrix.mdSemantic Coverage Matrix (D3). Links term categories to the specification's sections.
Freshness_Portability_Agent_Ambiguity_Register.mdAmbiguity Register (D4). 12 lexical-overload resolutions. Read before normalization questions arise.
Freshness_Portability_Agent_Conformance_Tests.mdConformance tests you run against your implementation, with fixtures, oracles, and minimal run note.

Non-normative material

accompanies the specification, but is not part of it
Freshness_Portability_Agent_Whitepaper.htmlPublic-facing positioning. Non-normative.
NNT_Companion/Non-Normative Tests — demonstration-only evidence that the specification is derivable. Not a reference implementation, and not part of the specification. Do not read it before implementing: read it only after your implementation passes the Conformance Tests.
Freshness_Portability_Agent_README.mdOrientation and reading order.

Integrity

how you verify that what you hold is authentic
Freshness_Portability_Agent_License.mdThe license.
Freshness_Portability_Agent_Manifest.sha256SHA-256 integrity manifest.
verify.mdSelf-audit runbook you run against the package you hold.

Integrity references

Package ZIP · SHA-256
8cd227ea226c7f74a4f5056d22a7169693f1e89527863c53fbffedc359e45918
Freshness_Portability_Agent.zip · 7,646,456 bytes · 142 files
manifest_ref
e8c2e05e564eaa83a1a0853350661b056f7716175586684d100c5b9b2fcfe0b0
The Manifest's own hash, bound in the License. The Manifest lists one SHA-256 entry per shipped file, except itself and the License.
agent_manifest_ref
3522e4bcff266537517cf4a22106ce89ac03351d6216d0f3caeb289f0d891b33
The SHA-256 of Freshness_Portability_Agent_Frozen_Core_Manifest.sha256. It identifies the frozen normative core only (7 files) — the source the companion evidence was derived from.
Archived record · Zenodo DOI
Version v1. The archived ZIP is byte-identical to the download on this site.
Repository · GitHub
Release v1 carries the same ZIP file.
Article · Zenodo DOI
Preprint, 15 October 2026: “Ready to Build IV: Closing the Transition Function — Fail-Closed Defaults as Conformance Criteria in the Freshness Portability Agent”.
Family · SSCAR
Composing this agent with others from the same library, including as a component within a family integrator, is specified in the relevant family pack — a separate package with its own documents and terms.
Deployment artifacts

What your team must produce

Per spec §17 Implementation Assumptions and Execution Obligations, §18 Execution Acceptance Criteria, and §22 Reuse and Limitations, 8 deployment artifacts or implementation closures are built by your engineering team from this specification:

01

Source identity binding

A concrete mechanism for stable, verifiable source_id and ledger_uuid binding.

02

Policy and trust configuration

A concrete policy_id / policy_version profile, algorithm identifiers, and trust-anchor material for SSM, TVC, and Evidence.bin where applicable.

03

Watermark store

A monotonic persistence layer with anti-rollback properties and no decrement/rewrite path.

04

Append-only receipt journal

A durable IRR journal implementing receipt anchoring, accepted-head linkage, and previous-receipt linkage.

05

Validator implementation map

Execution-layer mappings for VAL-001 through VAL-011 and their specified failure effects.

06

Restore-boundary integration

A restore-admission path that checks valid IRR linkage and GenesisConfirmed, emits only the admission token, and does not execute restore inside this agent.

07

Evidence and observability pipeline

Logging, event, or audit instrumentation for every field in the Evidence Contract.

08

Runtime conformance plan

Tests and release-gate checks for fail-closed behavior, stale replay, recovery/idempotence, optionality envelopes, and declarative authority obligations.

The specification is complete enough that none of these requires interpretation of ambiguous prose.

Verification

Verify it yourself

The package

verify.md, the self-audit runbook shipped in the package

This pack declares its own numbers — how many artefacts it ships, how many canonical terms it indexes, how many conformance records it carries, what those records return. This runbook has you reproduce those declared values on your own machine, before you build anything against the specification.

Each check has the same shape: find the value the pack declares, observe the value your machine produces, record whether they match. A mismatch is a fact you report, not a judgment you make: either the bytes you received are not the bytes that were published, or your environment differs. Both are worth knowing before you build. Neither requires you to decide what it means.

Integrity check, run inside the unzipped package folder.

Linux
sha256sum -c Freshness_Portability_Agent_Manifest.sha256
macOS
shasum -a 256 -c Freshness_Portability_Agent_Manifest.sha256
Windows (PowerShell)
Get-Content Freshness_Portability_Agent_Manifest.sha256 | ? { $_ -notmatch '^\s*#' -and $_.Trim() } | % { $h,$f = $_ -split '\s+',2; if ((Get-FileHash $f.Trim() -Algorithm SHA256).Hash -ieq $h) { "OK   $f" } else { "FAIL $f" } }

Recompute the Manifest's own hash and compare it to the manifest_ref bound in the License.

Your implementation

the Conformance Tests

The Conformance Tests document contains 41 test records anchored to the specification: 30 directly runnable on the agent's projection surface, 5 parameterized against operator-declared inputs, and 6 declarative checks verified at integration level. Each record cites the specification authority that grounds it, the input fixture that drives it, and the oracle that defines pass and fail. The Minimal Run Note declares the projection surface, input types, assertion result types, and the conformance condition for the suite as a whole.

Run the suite against your implementation. A fully conformant implementation passes the 30 runnable tests, satisfies the 5 parameterized tests under your declared parameter envelopes, and attests the 6 declarative checks at your release-acceptance gate.

Your implementation's conformance is established by the Conformance Tests, not by verify.md.

Evidence · observational, non-normative

Cross-paradigm derivability

Five paradigm-isolated reconstruction contexts of the same model independently built the Freshness Portability Agent from the specification pack alone — in Python, Rust, Prolog, C, and Bash — and ran the agent's 41 Conformance Tests records against each reconstruction, under live toolchains with hash-attested binary provenance.

PythonRustPrologCBash

All 41 of 41 conformance records converged across all five paradigms, with zero divergent records. The convergence comprises 35 convergent PASS and 6 convergent SKIP (records FPA-D-01 through FPA-D-06). The Minimal Run Note lists FPA-D-01 through FPA-D-06 as the bounded external obligations not locally runnable: declarative obligations enforced at the gate-logic, authority-control, observability and journal layers. Per paradigm, each of the five reconstructions' own run reported the identical profile: 35 pass, 0 fail, 6 skip, 0 error.

The five contexts were isolated from one another; the reconstruction prompt-author, model and training data are shared across all five paradigm reconstructions, as the companion declares.

This is evidence of derivability and self-sufficiency of the specification, not a certification, not a quality score, and not a set of implementations to follow.

The baselines/ are study artifacts produced under restricted conditions; they are not reference implementations and must not be used as implementation patterns.

Every figure here is bounded to this single NNT run on agent pack FPA-FRESHNESS-PORTABILITY-003. The NNT companion is not part of the specification. Do not read it before implementing: read it only after your implementation passes the Conformance Tests.

Interpretation note

the DT-01…DT-08 range in FPA-D-01

Conformance Tests record FPA-D-01 cites its source as §6 DT-01…DT-08, while the Specification's §6 Decision Table has seven rows (DT-01…DT-07). This is not a missing row. §6 declares two enumerations that count different things: the seven decision rows, and the eight operational action tokens (Specification §6, the "Operational action tokens" line). FPA-D-01 obliges a reason_code drawn from those eight tokens, and the cited range spans them.

The pack states this in three places. The Specification defines reason_code as "produced by gate-logic mapping and the Decision Table" (§11). The structured Semantic Index, in its YAML and JSON editions, gives every action-token entry DEC-201…DEC-208 the source §6 Decision Table alongside §13 Gate Logic; the human-readable edition shows only §13. Conformance Tests §C names the layer: action-token granularity "is the gate-logic / Decision-Table layer". The pack's verify.md maps the same point in its row "Decision-Table range cited by declarative records".

Why the entry is there. The NNT companion records this range as an inconsistency in four of its five reconstructions (NNT_Companion/baselines/{python,rust,prolog,bash}/inconsistencies.md). Those reconstructions worked only from eleven files of the pack, without verify.md, and so without the key that explains the range. The entries stand in the delivered records exactly as the reconstructions wrote them. Had the reconstructions been steered toward the pack's explanation, the entry would not exist. Anyone can check this in the delivered files. The entry did not affect any result: FPA-D-01 is a declarative record, and all five reconstructions returned 35 PASS / 6 SKIP.

What the agreement shows, and what it does not. Four reconstructions reached the same reading, each through its own search of the pack. That is consistent with the isolated contexts the companion declares, but it does not establish that isolation: the four reconstructions used the same model, and a shared misreading can come from the model rather than from isolation.

A fifth reconstruction notes that the License says companion binary hashes appear in the Manifest, while the Manifest it received lists only the seven normative files. The reconstructions received the seven-file manifest of the frozen normative core; the delivered package's Manifest declares in its header that it covers the companion, including its binaries, and identifies the seven-file manifest as the frozen normative core from which the companion evidence was derived.

Supplement · separate from the package

Supplementary derivations

This supplement records five additional target paradigms for the Freshness Portability Agent (FPA-FRESHNESS-PORTABILITY-003): Common Lisp, Brainfuck, spreadsheet formulas, an Analytical Engine-style program, and AWK. It is separate from the canonical FPA package and its Non-Normative Tests (NNT) companion. The supplement Manifest names and hashes the canonical FPA package Manifest as its parent artifact. The FPA Specification, Conformance Tests, Semantic Index, Coverage Matrix, and Ambiguity Register define the rules and acceptance criteria.

Common LispBrainfuckSpreadsheet formulasAnalytical Engine-styleAWK

Demonstrated surfaces

Finite workflow projection

The nine workflow states and fourteen triggers enumerated in Conformance Tests §B/§C and Specification §8, with the Boolean input validator_passed: 252 input tuples. Each tuple produces one output token: a canonical workflow state or E. E means the integrated canonical corpus does not determine the result for that tuple; it is not an FPA state, verdict, action token, or gate class. This is a bounded state projection, not a full-agent or deployment evaluation.

All 41 public conformance records

The actual GNU Awk run produced 35 PASS, 0 FAIL, 6 SKIP, and 0 ERROR. The workbook, after a full recalculation in native Excel, reports 35 PASS, 0 FAIL, and 6 SKIP; the AWK and Excel runs agree on all 41 records. FPA-D-01 through FPA-D-06 are SKIP because §F.D defines them as declarative obligations outside the locally runnable published surface.

252-result vector · SHA-256
d005b77692ff0dfb5b1378dd52f57c408f88eaef85c8da0b313e10fc4dd0e99e
The reference output, Common Lisp, Brainfuck, Analytical Engine-style program, AWK, and Rust comparator are byte-identical. Each output contains 252 LF-terminated tokens. The Rust file is a separate comparator, byte-identical to the reference.

The historical framing spans the Analytical Engine design described in 1843 and Rust's public announcement in 2010: 167 years between designs represented by contemporary renderings. Lisp (1958), rendered here in its Common Lisp dialect (standardized by ANSI in 1994), and Brainfuck (1993) supply additional points in that comparison. It does not imply that the Analytical Engine itself was built or executed in the nineteenth century.

Projection choices and their source traces are declared in SOURCE_RULES.md; the canonical FPA corpus remains authoritative.

Rights and use

All rights reserved. You may download, inspect and run these files to reproduce the reported results. They are provided as is, without warranty, and are run at your own risk. No other right is granted.

Supplement Manifest · SHA-256
86b7db7de10889366fc1b6b6dd9fe45cf47c0c9b0eff2de6de97144df01664c6
The SHA-256 of FPA_Supplement_Manifest.json, printed by verify_anchor.py. The supplement Manifest records the SHA-256 of the canonical FPA package Manifest and the SHA-256 and byte length of every other supplement file.
Supplement ZIP · SHA-256
0d72c75d10ab3f3afb54730e23272e0e2e59f9a50daa7af939ffe07d6a704828
Freshness_Portability_Agent_Supplement.zip · 63,371 bytes · 22 files
Archived record · Zenodo DOI
Version v1. The archived ZIP is byte-identical to the download above.
License

What the license permits, and what it reserves

This package is distributed free of charge. No payment is required, now or ever, for anything this license permits.

Grant of rights

Subject to the Restriction section, you are granted, free of charge and perpetually:

  • the right to implement the agent from this specification, in any language or paradigm;
  • the right to deploy and operate those implementations for any lawful purpose, including in the course of a commercial business, and to use them as internal machinery within your own products and services, including products and services you offer to your own customers;
  • the right to study, analyze, and reference the specification for any purpose — including describing, quoting reasonably, reviewing, critiquing, teaching, benchmarking, and publishing analysis of it, including publication of test results and criticism;
  • the right to redistribute the package, free of charge, complete and unmodified, provided this license travels with it.
Restriction

You shall not:

  • offer the agent to third parties as a product, a library, a package, an API, a service, a service tier, or any other identifiable offering of its capability — whether for payment or free of charge;
  • distribute an implementation derived from this specification as a standalone software product, library, or package;
  • redistribute the specification package other than complete and unmodified, or charge any fee for redistributing it;
  • modify, adapt, translate, abridge, restate, or create derivative works of the specification text, the companion material, the Manifest, or this license — other than translations and annotations for your own internal use that you do not distribute.

The line. Using an implementation as internal machinery inside your own product or service is permitted, including commercially and at any scale: the third party consumes your product, and neither selects nor obtains the agent as such. Offering the capability itself is not permitted. Permitted: your application uses the agent internally to validate state, and your customers buy your application. Not permitted: you expose the agent as an API, ship it as a library, or offer it as a service, so that a third party can obtain or invoke its capability as a thing in itself.

The implementations you build are yours. SEMANTICHOR claims no ownership over the source code, builds, or deployments you produce from this specification.

The license sets out what is free; the reserved uses are not licensed for this package.

Inquiries about reserved uses: contact@semantichor.com

Where you obtained the package otherwise than at the point of distribution, you accept this license by accepting it at semantichor.com, in the same two confirmations, before any use of the package.

This is a summary. Where this summary and the license appear to differ, the license controls. Read the full license →