RAIFFAExample

Blocked case · BLOCKED_CONTRACT

BLOCKED_CONTRACT · TEST_ONLYOwner policy lacks exact actor, session, and DecisionCaseRef eligibility mapping · no authorization · zero SQLite events · zero external effects

Do not issue authorization without exact policy binding.

A full blocked flow where a server-issued synthetic DecisionCaseRef candidate exists but actor, session, and policy binding does not.

EXAMPLE WORKBENCH

Verify the blocked receipt stage by stage.

Read the fixed request and binding checks. This fixture stops before eligibility evaluation.
BLOCKED_CONTRACT

INPUT / SERVER-ISSUED

Source
credentialless descriptor
DecisionCaseRef
opaque / present
Handle
internal / non-serializable
Actor-session binding
MISSING
AuthorityNONENo ELIGIBLE, MISSING_CONDITIONS, or INELIGIBLE state is invented.

Verify the blocked receipt stage by stage.

Input

INPUT / SERVER-ISSUED

Source
credentialless descriptor
DecisionCaseRef
opaque / present
Handle
internal / non-serializable
Actor-session binding
MISSING
Checks

INTEGRITY / OWNER POLICY

Candidate pins
manifest · exports · entry · runtime closure
Policy profile
fixed / attested
Exact mapping
NOT FOUND
Evaluation
NOT STARTED
Blocked receipt

RESULT / ZERO EFFECTS

Mode
LOCAL_SIMULATION
Authorization issued
false
Blocking code
RAIFFA_SANDBOX_EXECUTION_AUTHORIZATION_POLICY_ACTOR_BINDING_MISSING
Effects
0consumption · SQLite · trace · dispatch · release
01

Discover server-issued fixture requests only

The example facade rejects caller-injected request payloads. It reads only credentialless descriptors from the pinned candidate surface, and treats handles as non-serializable internal identity.

02

Stop at the exact missing policy binding

  1. 01
    Verify candidate integrity pins

    Check manifest, exports, entry, and runtime-closure digests first.

  2. 02
    Verify the owner policy plan

    Validate the fixed policy profile and attestation integrity.

  3. 03
    Look for actor and session binding

    The current owner-held plan has no exact candidate actor, session, and DCR eligibility key.

  4. 04
    Reject before evaluation

    Stop with `RAIFFA_SANDBOX_EXECUTION_AUTHORIZATION_POLICY_ACTOR_BINDING_MISSING`.

  5. 05
    Confirm zero effects

    Candidate consumption, SQLite write, trace, authorization, dispatch, and release all remain 0.

03

The blocked state is the verified result

Current boundary summaryjson
{
  "mode": "LOCAL_SIMULATION",
  "classification": "TEST_ONLY",
  "authority": "NONE",
  "authorizationIssued": false,
  "blockingCode": "RAIFFA_SANDBOX_EXECUTION_AUTHORIZATION_POLICY_ACTOR_BINDING_MISSING",
  "externalEffects": 0
}