SOURCE_ONLY · PROJECT_OPERATED · DECLARED BOUNDARY
One effect. One verified path.
A frozen target accepts a direct append based on caller-supplied mediation fields. Its candidate rejects that call, verifies the exact required records itself, and consumes one receiver-issued grant in the same transaction as the append.
The bypass and the lock
Baseline
Direct target invocation commits the protected sandbox.append effect.
HTTP 200 · COMMITTED
Candidate
That direct call is rejected. One complete redemption consumes one grant and commits one append.
HTTP 403 · REJECTED
One committed recurrence
- Grant
- sha256:4e8b68e0…eaf685
- Effect record
- sha256:80525334…9fc125
- State before
- sha256:769076f1…8ae231
- State after
- sha256:c13e20b4…660980
An exact retry returns the original response bytes. Effect count remains 1; persisted grant status remains CONSUMED.
Limits of this result
Scope is limited to the closed project-operated fixture and its declared route graph. Nothing here establishes cloud or platform administrator containment, absence of copied receiver credentials, source or deployment immutability, worldly truth, policy correctness, provider execution, undisclosed external effects, production safety, or legal effect. Packet reproduction verifies retained records and disposition; it does not re-execute the Durable Objects runtime.