FlowSentinel
Synthetic falsification · zero live authority
Metamorphic assurance

Change one fact. Demand the exact claims change with it.

Each case starts from a deterministic synthetic evidence chain, applies one named mutation, reruns the real pure FlowSentinel derivations, and checks the expected before/after relations. There is no global trust score: the test names which layer must degrade, which neighboring claim must remain stable, and which authority must stay impossible.

Falsification catalog root

sha256:282c871070ce7dd3a0b45a374443ac4a81b4e1ea0cf6e0446058bfb6ef1a7d1e

8

One-fact mutations

8

Expected relations pass

0

Live authority granted

The root is an internal deterministic synthetic identity only. It is not a signature, provider attestation, production Witness checkpoint, or proof about a customer system.

Mutation #1Expected propagationsource: exact-continuity-blast-radius

Removing one exact continuity edge shrinks only proven blast radius

Falsify any temptation to preserve impact claims after their explicit dependency evidence disappears.

Falsification root

21cd15257e79…4287d875

Exact mutation

Remove the single persisted Customer Master <- Invoice Publisher dependency edge.

dependencies[0]: present -> removed

baseline definition · 565bba2cafba…c38b0e12

mutated definition · 98172b84e2a0…2024205b

Expected derived relations

baseline → mutated

Exact dependency-edge count decreases

exactDependencyEdgeCount · expected decreases

1→0pass

Exact blast radius for Customer Master decreases

blastRadius:Customer Master · expected decreases

1→0pass

Assurance root changes when graph truth changes

assuranceRoot · expected changes

810941597f93…74c9e3b0→b3f9247bd0db…82fc53b7pass

Canonical provider maturity fingerprint stays unchanged

canonicalMaturityFingerprint · expected stays equal

fcbbdcae0233…2a4167a1→fcbbdcae0233…2a4167a1pass

Synthetic mutation never gains provider-maturity promotion authority

providerMaturityPromotion · expected stays false

false→falsepass

Synthetic mutation never gains production-mutation authority

productionMutationAuthority · expected stays false

false→falsepass

Proof frontier layer

runtime

↓ mutation

runtime

Recovery lifecycle

none

↓ mutation

none

Destination confirmed

0

↓ mutation

0

Continuity verified

0

↓ mutation

0

Authority invariants

Maturity fingerprint unchanged: yes · Authority firewall unchanged: yes

Only the explicitly evidenced blast-radius claim is falsified; this does not prove there is no undocumented dependency. Metamorphic output is synthetic regression evidence only; it cannot establish live provider truth, workspace readiness, provider maturity, recovery authorization, or production authority.

Mutation #2Expected propagationsource: synthetic-maturity-firewall

Losing outcome-source availability revokes destination confirmation

Prove that an unavailable outcome source becomes blocked evidence instead of being interpreted as a healthy empty source.

Falsification root

1e6897bc9c66…ecb1a619

Exact mutation

Set only sourceAvailability.outcomes from true to false.

sourceAvailability.outcomes: true -> false

baseline definition · 7945e0b68be6…61b0a159

mutated definition · b34790b8e932…9a0827bc

Expected derived relations

baseline → mutated

Destination-confirmed evidence decreases

destinationConfirmedCount · expected decreases

1→0pass

Blocked proof count increases

blockedCount · expected increases

0→1pass

Proof frontier moves to outcome

proofFrontierLayer · expected becomes outcome

∅→outcomepass

Outcome proof frontier is blocked

proofFrontierState · expected becomes blocked

∅→blockedpass

Canonical provider maturity fingerprint stays unchanged

canonicalMaturityFingerprint · expected stays equal

fcbbdcae0233…2a4167a1→fcbbdcae0233…2a4167a1pass

Synthetic mutation never gains provider-maturity promotion authority

providerMaturityPromotion · expected stays false

false→falsepass

Synthetic mutation never gains production-mutation authority

productionMutationAuthority · expected stays false

false→falsepass

Proof frontier layer

none

↓ mutation

outcome

Recovery lifecycle

none

↓ mutation

none

Destination confirmed

1

↓ mutation

0

Continuity verified

1

↓ mutation

0

Authority invariants

Maturity fingerprint unchanged: yes · Authority firewall unchanged: yes

The mutation proves loss of current outcome evidence availability, not destination failure. Metamorphic output is synthetic regression evidence only; it cannot establish live provider truth, workspace readiness, provider maturity, recovery authorization, or production authority.

Mutation #3Expected propagationsource: synthetic-maturity-firewall

Removing structural proof creates an exact structure gap

Show that a formerly complete-looking chain loses its stronger claim when one structural evidence fact is removed.

Falsification root

bc96afe3a379…4544e513

Exact mutation

Set the exact workflow structure state from verified to missing.

workflows[0].structureState: verified -> missing

baseline definition · 7945e0b68be6…61b0a159

mutated definition · 5052ff8c55d1…3a728b47

Expected derived relations

baseline → mutated

Missing proof count increases

missingProofCount · expected increases

0→1pass

Proof frontier moves to structure

proofFrontierLayer · expected becomes structure

∅→structurepass

Structure proof frontier becomes missing

proofFrontierState · expected becomes missing

∅→missingpass

Canonical provider maturity fingerprint stays unchanged

canonicalMaturityFingerprint · expected stays equal

fcbbdcae0233…2a4167a1→fcbbdcae0233…2a4167a1pass

Synthetic mutation never gains provider-maturity promotion authority

providerMaturityPromotion · expected stays false

false→falsepass

Synthetic mutation never gains production-mutation authority

productionMutationAuthority · expected stays false

false→falsepass

Proof frontier layer

none

↓ mutation

structure

Recovery lifecycle

none

↓ mutation

none

Destination confirmed

1

↓ mutation

1

Continuity verified

1

↓ mutation

1

Authority invariants

Maturity fingerprint unchanged: yes · Authority firewall unchanged: yes

Missing structural proof removes structural assurance only; it does not fabricate a runtime or destination failure. Metamorphic output is synthetic regression evidence only; it cannot establish live provider truth, workspace readiness, provider maturity, recovery authorization, or production authority.

Mutation #4Expected propagationsource: synthetic-maturity-firewall

Losing attributable runtime recency removes verified runtime authority

Show that runtime ambiguity degrades to observed proof rather than silently retaining a verified current-runtime claim.

Falsification root

857d23c609f3…4bb2e51f

Exact mutation

Replace the workflow's attributable verified runtime with runtime-recency-unresolved observed evidence.

workflows[0].runtimeState: verified -> observedworkflows[0].runtimeCode: synthetic-success -> runtime-recency-unresolved

baseline definition · 7945e0b68be6…61b0a159

mutated definition · 42a7978fcabc…faf4141f

Expected derived relations

baseline → mutated

Verified runtime count decreases

runtimeVerifiedCount · expected decreases

1→0pass

Missing proof count increases

missingProofCount · expected increases

0→1pass

Proof frontier moves to runtime

proofFrontierLayer · expected becomes runtime

∅→runtimepass

Runtime frontier remains observed rather than verified

proofFrontierState · expected becomes observed

∅→observedpass

Canonical provider maturity fingerprint stays unchanged

canonicalMaturityFingerprint · expected stays equal

fcbbdcae0233…2a4167a1→fcbbdcae0233…2a4167a1pass

Synthetic mutation never gains provider-maturity promotion authority

providerMaturityPromotion · expected stays false

false→falsepass

Synthetic mutation never gains production-mutation authority

productionMutationAuthority · expected stays false

false→falsepass

Proof frontier layer

none

↓ mutation

runtime

Recovery lifecycle

none

↓ mutation

none

Destination confirmed

1

↓ mutation

1

Continuity verified

1

↓ mutation

1

Authority invariants

Maturity fingerprint unchanged: yes · Authority firewall unchanged: yes

The mutation establishes runtime-recency ambiguity, not a current failure or recovery need. Metamorphic output is synthetic regression evidence only; it cannot establish live provider truth, workspace readiness, provider maturity, recovery authorization, or production authority.

Mutation #5Expected propagationsource: synthetic-maturity-firewall

Removing the current destination binding supersedes old outcome proof

Prove that historical destination observations cannot stay current after the exact binding evidence disappears.

Falsification root

732b2bd48619…29db5be5

Exact mutation

Remove the single current destination binding while retaining historical outcome observations.

bindings[0]: present -> removed

baseline definition · 7945e0b68be6…61b0a159

mutated definition · 6e6288163a6d…fd25e5c6

Expected derived relations

baseline → mutated

Current destination confirmation decreases

destinationConfirmedCount · expected decreases

1→0pass

Missing proof count increases

missingProofCount · expected increases

0→1pass

Proof frontier moves to outcome

proofFrontierLayer · expected becomes outcome

∅→outcomepass

Historical outcome becomes superseded without a current binding

proofFrontierState · expected becomes superseded

∅→supersededpass

Canonical provider maturity fingerprint stays unchanged

canonicalMaturityFingerprint · expected stays equal

fcbbdcae0233…2a4167a1→fcbbdcae0233…2a4167a1pass

Synthetic mutation never gains provider-maturity promotion authority

providerMaturityPromotion · expected stays false

false→falsepass

Synthetic mutation never gains production-mutation authority

productionMutationAuthority · expected stays false

false→falsepass

Proof frontier layer

none

↓ mutation

outcome

Recovery lifecycle

none

↓ mutation

none

Destination confirmed

1

↓ mutation

0

Continuity verified

1

↓ mutation

0

Authority invariants

Maturity fingerprint unchanged: yes · Authority firewall unchanged: yes

Historical destination observations remain evidence, but this mutation removes their current binding authority. Metamorphic output is synthetic regression evidence only; it cannot establish live provider truth, workspace readiness, provider maturity, recovery authorization, or production authority.

Mutation #6Expected propagationsource: synthetic-maturity-firewall

Changing one exact destination-object identity breaks longitudinal confirmation

Show that a newest different exact object can remain individually confirmed while repeated exact-object continuity disappears.

Falsification root

e07835d34cfe…5454e0e9

Exact mutation

Change only the newest destinationObjectSha256 while preserving provider status, artifact identity, and binding.

outcomes[0].destinationObjectSha256: f…f -> 0…0

baseline definition · 7945e0b68be6…61b0a159

mutated definition · 4c74619b6b9b…eff3afbd

Expected derived relations

baseline → mutated

Latest destination object remains individually confirmed

destinationConfirmedCount · expected stays equal

1→1pass

Repeated exact-object continuity decreases

continuityVerifiedCount · expected decreases

1→0pass

Continuity proof gap appears

missingProofCount · expected increases

0→1pass

Proof frontier moves to continuity

proofFrontierLayer · expected becomes continuity

∅→continuitypass

Continuity falls back to observed

proofFrontierState · expected becomes observed

∅→observedpass

Canonical provider maturity fingerprint stays unchanged

canonicalMaturityFingerprint · expected stays equal

fcbbdcae0233…2a4167a1→fcbbdcae0233…2a4167a1pass

Synthetic mutation never gains provider-maturity promotion authority

providerMaturityPromotion · expected stays false

false→falsepass

Synthetic mutation never gains production-mutation authority

productionMutationAuthority · expected stays false

false→falsepass

Proof frontier layer

none

↓ mutation

continuity

Recovery lifecycle

none

↓ mutation

none

Destination confirmed

1

↓ mutation

1

Continuity verified

1

↓ mutation

0

Authority invariants

Maturity fingerprint unchanged: yes · Authority firewall unchanged: yes

A changed exact object identity breaks repeated-object continuity; it does not imply semantic regression or improvement. Metamorphic output is synthetic regression evidence only; it cannot establish live provider truth, workspace readiness, provider maturity, recovery authorization, or production authority.

Mutation #7Expected propagationsource: definition-changed-after-shadow

One provider-definition mismatch revokes current recovery completion

Compare the same provenance-bound recovery chain before and after only its live provider-definition currentness changes.

Falsification root

fec97fb76bb2…766af94e

Exact mutation

Set recovery currentness from exact current to provider-definition mismatch.

recoveryVariant: current -> definition-changed

baseline definition · 21834a1aa62d…00361c62

mutated definition · 0e904c08db6d…fdb689d4

Expected derived relations

baseline → mutated

Recovery evidence is no longer verified

recoveryEvidenceVerified · expected becomes false

true→falsepass

Lifecycle requires a fresh shadow assessment

lifecycleState · expected becomes shadow-currentness-required

recovery-evidence-verified→shadow-currentness-requiredpass

Live currentness becomes superseded

currentnessState · expected becomes superseded

current→supersededpass

Canonical provider maturity fingerprint stays unchanged

canonicalMaturityFingerprint · expected stays equal

fcbbdcae0233…2a4167a1→fcbbdcae0233…2a4167a1pass

Synthetic mutation never gains provider-maturity promotion authority

providerMaturityPromotion · expected stays false

false→falsepass

Synthetic mutation never gains production-mutation authority

productionMutationAuthority · expected stays false

false→falsepass

Proof frontier layer

runtime

↓ mutation

runtime

Recovery lifecycle

recovery-evidence-verified

↓ mutation

shadow-currentness-required

Destination confirmed

0

↓ mutation

0

Continuity verified

0

↓ mutation

0

Authority invariants

Maturity fingerprint unchanged: yes · Authority firewall unchanged: yes

Definition mismatch invalidates current recovery completion without rewriting the historical shadow receipt as false. Metamorphic output is synthetic regression evidence only; it cannot establish live provider truth, workspace readiness, provider maturity, recovery authorization, or production authority.

Mutation #8Expected propagationsource: baseline-rotation

One baseline rotation revokes replay inheritance

Compare the same recovery chain before and after the replay artifact stops matching the active baseline.

Falsification root

40f009a3dff5…13bd13e8

Exact mutation

Rotate the active-baseline relation so the retained replay still points at the previous baseline.

recoveryVariant: current -> baseline-rotated

baseline definition · 478a1316c24d…990833c7

mutated definition · 4ad4182c9cf0…13d8d2df

Expected derived relations

baseline → mutated

Recovery evidence is no longer verified

recoveryEvidenceVerified · expected becomes false

true→falsepass

Lifecycle returns to the replay-trace gate

lifecycleState · expected becomes replay-trace-required

recovery-evidence-verified→replay-trace-requiredpass

Shadow currentness remains current; baseline binding is the independent failing gate

currentnessState · expected stays equal

current→currentpass

Canonical provider maturity fingerprint stays unchanged

canonicalMaturityFingerprint · expected stays equal

fcbbdcae0233…2a4167a1→fcbbdcae0233…2a4167a1pass

Synthetic mutation never gains provider-maturity promotion authority

providerMaturityPromotion · expected stays false

false→falsepass

Synthetic mutation never gains production-mutation authority

productionMutationAuthority · expected stays false

false→falsepass

Proof frontier layer

runtime

↓ mutation

runtime

Recovery lifecycle

recovery-evidence-verified

↓ mutation

replay-trace-required

Destination confirmed

0

↓ mutation

0

Continuity verified

0

↓ mutation

0

Authority invariants

Maturity fingerprint unchanged: yes · Authority firewall unchanged: yes

Baseline rotation invalidates replay inheritance only; it does not imply provider-definition supersession. Metamorphic output is synthetic regression evidence only; it cannot establish live provider truth, workspace readiness, provider maturity, recovery authorization, or production authority.