Add REGRESSORIUM boundary policy, recourse schemas, and audit surfaces

OBLIGATION_MODEL.md

@@ -10,3 +10,10 @@ Required fields for any obligation model:
 - remedy path
 - escalation path
 - closure rule
+
+## Machine-readable boundary surfaces
+
+- `contracts/boundary-policy.json`
+- `schemas/boundary-policy.schema.json`
+- `schemas/recourse-output.schema.json`
+- `schemas/recourse-audit-record.schema.json`

README.md

@@ -6,7 +6,7 @@ It determines burden, remedy, escalation, and closure of bounded claims without
 
 ## Status
 
-Active public sovereign boundary with an explicit terminal recourse role inside the Verifrax stack.
+Active public sovereign boundary with an explicit terminal recourse role, machine-readable boundary policy, typed recourse schemas, and audit surfaces.
 
 ## Boundary
 
@@ -26,6 +26,8 @@ It does not replace adjacent sovereign boundaries.
 - defines terminal-recourse doctrine
 - defines counterparty, burden, remedy, escalation, and closure rules
 - publishes recourse-object structure
+- publishes machine-readable boundary policy through `contracts/boundary-policy.json`
+- publishes typed recourse output and audit schemas through `schemas/`
 - publishes current and historical recourse indexes
 - publishes the current recourse-object entry surface
 - preserves recourse as a distinct sovereign function
@@ -43,7 +45,7 @@ It does not replace adjacent sovereign boundaries.
 
 ## Public surface
 
-The public surface of this repository is its repository identity, README boundary, recourse doctrine, recourse-object schema, the current recourse-object entry surface, and explicit current/historical recourse indexes.
+The public surface of this repository is its repository identity, README boundary, recourse doctrine, `contracts/boundary-policy.json`, typed schemas, the current recourse-object entry surface, and explicit current/historical recourse indexes.
 
 Recourse here is not recognition.
 Recourse here is not verification.

claims/current/index.json

@@ -9,5 +9,6 @@
       "subject_ref": "https://github.com/Verifrax/VERIFRAX/blob/main/evidence/artifact-0005/artifact-0005.json",
       "recourse_status": "OPEN_FOR_RECOURSE"
     }
-  ]
+  ],
+  "historical": false
 }

claims/history/README.md

@@ -5,3 +5,5 @@ This directory stores superseded or closed historical recourse objects.
 Historical recourse objects remain auditable and reconstructable.
 
 They must not outrank the current recourse object published under `claims/current/`.
+
+Historical recourse objects remain subordinate to the current active recourse index and may not replace recognition, law, state, authority, execution, or verification.

contracts/boundary-policy.json

@@ -0,0 +1,67 @@
+{
+  "object_type": "BOUNDARY_POLICY",
+  "surface": "REGRESSORIUM",
+  "schema_version": "0.1.0",
+  "state_type": "ACTIVE_TRUTH",
+  "role": "terminal-recourse",
+  "allowed_inputs": [
+    "recognition-object-reference",
+    "claim-class-reference",
+    "law-version-reference",
+    "accepted-epoch-reference",
+    "authority-object-reference",
+    "execution-receipt-reference",
+    "verification-result-reference",
+    "operator-request"
+  ],
+  "allowed_output_classes": [
+    "recourse-object",
+    "recourse-output-record",
+    "recourse-audit-record",
+    "recourse-index-update"
+  ],
+  "forbidden_output_classes": [
+    "law-object",
+    "accepted-state-object",
+    "authority-object",
+    "execution-receipt",
+    "verification-verdict",
+    "recognition-object",
+    "proof-publication-object",
+    "intake-decision-object"
+  ],
+  "required_boundary_assertions": [
+    "not-law",
+    "not-state",
+    "not-authority",
+    "not-execution",
+    "not-verification",
+    "not-recognition",
+    "not-proof",
+    "not-intake",
+    "recourse-downstream-of-recognition"
+  ],
+  "rejection_reasons": [
+    "input-class-unsupported",
+    "output-class-unsupported",
+    "would-author-law",
+    "would-mutate-accepted-state",
+    "would-issue-authority",
+    "would-execute-governed-action",
+    "would-emit-verification-verdict",
+    "would-recognize-terminal-truth",
+    "would-publish-proof-authority",
+    "would-operate-intake-authority"
+  ],
+  "adjacent_sovereign_surfaces": {
+    "law": "SYNTAGMARIUM",
+    "state": "ORBISTIUM",
+    "reconciliation": "CONSONORIUM",
+    "cognition": "TACHYRIUM",
+    "authority": "AUCTORISEAL",
+    "execution": "CORPIFORM",
+    "verification": "VERIFRAX",
+    "recognition": "ANAGNORIUM"
+  },
+  "review_rule": "recourse-object-requires-explicit-recognition-basis-and-non-recognition-boundary"
+}

fixtures/recourse-audit-record.valid.json

@@ -0,0 +1,25 @@
+{
+  "object_type": "RECOURSE_AUDIT_RECORD",
+  "schema_version": "0.1.0",
+  "audit_id": "regressorium-audit-0001",
+  "timestamp": "2026-04-19T16:55:36Z",
+  "input_class": "operator-request",
+  "requested_output_class": "recognition-object",
+  "decision": "rejected",
+  "rejection_reason": "would-recognize-terminal-truth",
+  "boundary_zone": "outside-regressorium-boundary",
+  "sovereign_collision_flags": {
+    "law": false,
+    "state": false,
+    "authority": false,
+    "execution": false,
+    "verification": false,
+    "recognition": true,
+    "proof": false,
+    "intake": false
+  },
+  "notes": [
+    "Terminal recognition belongs upstream of terminal recourse.",
+    "Request must leave REGRESSORIUM and move to ANAGNORIUM."
+  ]
+}

fixtures/recourse-output.valid.json

@@ -0,0 +1,26 @@
+{
+  "object_type": "RECOURSE_OUTPUT",
+  "schema_version": "0.1.0",
+  "output_id": "regressorium-output-0001",
+  "generated_at": "2026-04-19T16:55:36Z",
+  "input_class": "recognition-object-reference",
+  "output_class": "recourse-object",
+  "status": "ACTIVE_TRUTH",
+  "summary": "Terminal recourse emitted with explicit downstream-of-recognition boundary.",
+  "recourse_scope": "terminal recourse only",
+  "boundary_assertions": {
+    "not-law": true,
+    "not-state": true,
+    "not-authority": true,
+    "not-execution": true,
+    "not-verification": true,
+    "not-recognition": true,
+    "not-proof": true,
+    "not-intake": true,
+    "recourse-downstream-of-recognition": true
+  },
+  "basis_refs": [
+    "claims/current/recourse-object-0001.json",
+    "claims/current/index.json"
+  ]
+}

outputs/examples/recourse-audit-record.example.json

@@ -0,0 +1,25 @@
+{
+  "object_type": "RECOURSE_AUDIT_RECORD",
+  "schema_version": "0.1.0",
+  "audit_id": "regressorium-audit-example-0001",
+  "timestamp": "2026-04-19T16:55:36Z",
+  "input_class": "operator-request",
+  "requested_output_class": "verification-verdict",
+  "decision": "rejected",
+  "rejection_reason": "would-emit-verification-verdict",
+  "boundary_zone": "outside-regressorium-boundary",
+  "sovereign_collision_flags": {
+    "law": false,
+    "state": false,
+    "authority": false,
+    "execution": false,
+    "verification": true,
+    "recognition": false,
+    "proof": false,
+    "intake": false
+  },
+  "notes": [
+    "Verification remains upstream of terminal recourse.",
+    "REGRESSORIUM may not emit verification verdicts."
+  ]
+}

outputs/examples/recourse-output.example.json

@@ -0,0 +1,25 @@
+{
+  "object_type": "RECOURSE_OUTPUT",
+  "schema_version": "0.1.0",
+  "output_id": "regressorium-output-example-0001",
+  "generated_at": "2026-04-19T16:55:36Z",
+  "input_class": "recognition-object-reference",
+  "output_class": "recourse-index-update",
+  "status": "DERIVED_PROJECTION",
+  "summary": "Recourse index update derived from the active recourse object.",
+  "recourse_scope": "current recourse publication only",
+  "boundary_assertions": {
+    "not-law": true,
+    "not-state": true,
+    "not-authority": true,
+    "not-execution": true,
+    "not-verification": true,
+    "not-recognition": true,
+    "not-proof": true,
+    "not-intake": true,
+    "recourse-downstream-of-recognition": true
+  },
+  "basis_refs": [
+    "claims/current/index.json"
+  ]
+}

schemas/boundary-policy.schema.json

@@ -0,0 +1,142 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://verifrax.net/regressorium/schemas/boundary-policy.schema.json",
+  "title": "REGRESSORIUM Boundary Policy",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "object_type",
+    "surface",
+    "schema_version",
+    "state_type",
+    "role",
+    "allowed_inputs",
+    "allowed_output_classes",
+    "forbidden_output_classes",
+    "required_boundary_assertions",
+    "rejection_reasons",
+    "adjacent_sovereign_surfaces",
+    "review_rule"
+  ],
+  "properties": {
+    "object_type": { "const": "BOUNDARY_POLICY" },
+    "surface": { "const": "REGRESSORIUM" },
+    "schema_version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+$"
+    },
+    "state_type": { "const": "ACTIVE_TRUTH" },
+    "role": { "const": "terminal-recourse" },
+    "allowed_inputs": {
+      "type": "array",
+      "uniqueItems": true,
+      "minItems": 1,
+      "items": {
+        "enum": [
+          "recognition-object-reference",
+          "claim-class-reference",
+          "law-version-reference",
+          "accepted-epoch-reference",
+          "authority-object-reference",
+          "execution-receipt-reference",
+          "verification-result-reference",
+          "operator-request"
+        ]
+      }
+    },
+    "allowed_output_classes": {
+      "type": "array",
+      "uniqueItems": true,
+      "minItems": 1,
+      "items": {
+        "enum": [
+          "recourse-object",
+          "recourse-output-record",
+          "recourse-audit-record",
+          "recourse-index-update"
+        ]
+      }
+    },
+    "forbidden_output_classes": {
+      "type": "array",
+      "uniqueItems": true,
+      "minItems": 1,
+      "items": {
+        "enum": [
+          "law-object",
+          "accepted-state-object",
+          "authority-object",
+          "execution-receipt",
+          "verification-verdict",
+          "recognition-object",
+          "proof-publication-object",
+          "intake-decision-object"
+        ]
+      }
+    },
+    "required_boundary_assertions": {
+      "type": "array",
+      "uniqueItems": true,
+      "minItems": 1,
+      "items": {
+        "enum": [
+          "not-law",
+          "not-state",
+          "not-authority",
+          "not-execution",
+          "not-verification",
+          "not-recognition",
+          "not-proof",
+          "not-intake",
+          "recourse-downstream-of-recognition"
+        ]
+      }
+    },
+    "rejection_reasons": {
+      "type": "array",
+      "uniqueItems": true,
+      "minItems": 1,
+      "items": {
+        "enum": [
+          "input-class-unsupported",
+          "output-class-unsupported",
+          "would-author-law",
+          "would-mutate-accepted-state",
+          "would-issue-authority",
+          "would-execute-governed-action",
+          "would-emit-verification-verdict",
+          "would-recognize-terminal-truth",
+          "would-publish-proof-authority",
+          "would-operate-intake-authority"
+        ]
+      }
+    },
+    "adjacent_sovereign_surfaces": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "law",
+        "state",
+        "reconciliation",
+        "cognition",
+        "authority",
+        "execution",
+        "verification",
+        "recognition"
+      ],
+      "properties": {
+        "law": { "const": "SYNTAGMARIUM" },
+        "state": { "const": "ORBISTIUM" },
+        "reconciliation": { "const": "CONSONORIUM" },
+        "cognition": { "const": "TACHYRIUM" },
+        "authority": { "const": "AUCTORISEAL" },
+        "execution": { "const": "CORPIFORM" },
+        "verification": { "const": "VERIFRAX" },
+        "recognition": { "const": "ANAGNORIUM" }
+      }
+    },
+    "review_rule": {
+      "const": "recourse-object-requires-explicit-recognition-basis-and-non-recognition-boundary"
+    }
+  }
+}