{"schemaVersion":"corex.visual-capability-map.v1","generatedAt":"2026-10-16T09:49:22.087Z","summary":{"capabilityCount":187,"productCount":9,"adapterCount":11,"channelCount":11,"integrationCount":11,"states":{"READY":31,"ACTIVE":154,"PLANNED":1,"GATED":1}},"buyerJourneys":[{"id":"prove","name":"Prove & verify","question":"What is true now, what changed, and what evidence supports it?","products":["verify","registry"],"families":["VERIFY","TRUST_ANCHOR","EVIDENCE"]},{"id":"issue","name":"Issue & carry","question":"How do we issue, manage and present trusted credentials or holder proofs?","products":["credentials","pass"],"families":["CREDENTIAL","IDENTITY","HOLDER","INTEROP"]},{"id":"transact","name":"Transact & reconcile","question":"How do we connect commerce and finance events without moving source authority into CoreX?","products":["finance","pay","connect"],"families":["FINANCE","COMMERCE","INTEGRATION","METERING"]},{"id":"operate","name":"Build & operate","question":"How do we deploy, govern, monitor and scale the trust infrastructure?","products":["platform"],"families":["CONTROL_PLANE","OPERATIONS","SECURITY","TENANCY","VERTICAL"]}],"families":[{"family":"SECURITY","items":[{"id":"corex.security.access-privacy-kernel","family":"SECURITY","state":"READY","productionSafe":true,"note":"W2 converges default-deny RBAC/ABAC/ReBAC requirements, purpose, consent, delegation, assurance, commercial entitlement, risk and disclosure into one deterministic policy contract without replacing the bound Kernel policy provider."},{"id":"corex.security.discovery-read-separation","family":"SECURITY","state":"READY","productionSafe":true,"note":"Discovery/search authorization is explicitly independent from known-reference read/verification authorization."},{"id":"corex.security.break-glass-governance","family":"SECURITY","state":"READY","productionSafe":true,"note":"Break-glass semantics require high assurance, explicit reason, bounded expiry, audit evidence and post-access review; they never create cross-tenant or legal authority."},{"id":"corex.security.disclosure-receipts","family":"SECURITY","state":"READY","productionSafe":true,"note":"Deterministic disclosure receipts record policy/version, disclosed and withheld claims, and decision lineage without copying sensitive evidence payloads."},{"id":"corex.signer.provider-fabric","family":"SECURITY","state":"READY","productionSafe":true,"externalDependency":"purpose-specific production asset signer binding","note":"Signer-purpose contract is frozen; current value-network adapters do not reuse credential or holder keys and signed transaction submission is disabled by default."},{"id":"corex.security.recovery-assurance","family":"SECURITY","state":"ACTIVE","productionSafe":true,"note":"Canonical negative-authorization, tenant-isolation, disclosure, provider-failure, webhook-replay and non-destructive recovery rehearsal matrix is release-gated; production fault injection remains separately governed and unauthorized by this capability."},{"id":"corex.trust.presence-multisignal","family":"SECURITY","state":"ACTIVE","productionSafe":true,"externalDependency":"device/site/location signal availability and tenant presence policy","note":"Multi-signal presence assurance combines GNSS/fused location, geofence, device integrity, QR/NFC/BLE/Wi-Fi, challenges and authority witness without making one signal universal truth."},{"id":"corex.privacy.presence-minimisation","family":"SECURITY","state":"ACTIVE","productionSafe":true,"note":"Presence/location policy enforces purpose, minimisation, authority/consent and retention controls, with continuous tracking disabled by default."},{"id":"corex.privacy.cross-ecosystem-learning","family":"SECURITY","state":"ACTIVE","productionSafe":true,"note":"Cross-ecosystem learning inputs are gated against direct identifiers, raw unredacted free text and unaggregated cross-tenant data."},{"id":"corex.security.kernel-route-authorization","family":"SECURITY","state":"ACTIVE","productionSafe":true,"note":"Reusable route middleware delegates protected action decisions to the CoreX Kernel policy provider using actor, tenant, workspace, territory, assurance and contextual selectors."},{"id":"corex.security.delegated-access-grants","family":"SECURITY","state":"ACTIVE","productionSafe":true,"note":"Revocable time-bounded delegated grants support governed acting-on-behalf-of use cases without transferring canonical subject or tenant authority."},{"id":"corex.security.adaptive-authentication-profile","family":"SECURITY","state":"READY","productionSafe":true,"externalDependency":"WebAuthn/passkey-capable identity provider and device/browser support for phishing-resistant login","note":"Risk-aware authentication profiles prefer phishing-resistant WebAuthn/passkeys, preserve provider-neutral OIDC compatibility and require step-up for consequential actions."},{"id":"corex.security.privacy-access-baseline","family":"SECURITY","state":"ACTIVE","productionSafe":true,"note":"Default-deny privacy access assessment enforces tenant/workspace match, purpose limitation, least privilege, step-up for consequential actions, minimum disclosure and separately authorized export."},{"id":"corex.security.key-lifecycle-baseline","family":"SECURITY","state":"ACTIVE","productionSafe":true,"note":"Managed key lifecycle assessment requires purpose/tenant scope, rotation and revocation, rejects static cloud credentials and prefers workload identity for managed signing/encryption keys."},{"id":"corex.security.defender","family":"SECURITY","state":"ACTIVE","productionSafe":true,"externalDependency":"tenant DEFENDER.ENABLED commercial entitlement","note":"CoreX Defender deterministic delivery-risk assessment is implemented over Watch delivery evidence; it does not autonomously block or use AI authority."}]},{"family":"COMMERCE","items":[{"id":"corex.commerce.vector","family":"COMMERCE","state":"READY","productionSafe":true,"externalDependency":"tenant commerce adapter and commercial authority binding","note":"Provider-neutral commerce/entitlement orchestration is available through VECTOR; source payment/order authority remains with the bound commerce provider."},{"id":"corex.commercial.subscription-control","family":"COMMERCE","state":"ACTIVE","productionSafe":true,"note":"Canonical provider-neutral subscription lifecycle now owns draft, payment-pending, active, past-due, suspended, non-renewing and terminated commercial state over existing CoreX plan/offer/price/subscription/entitlement models."},{"id":"corex.commercial.billing-provider-adapter","family":"COMMERCE","state":"READY","productionSafe":true,"externalDependency":"approved production billing provider account, tax/invoice configuration, webhook credentials and live acceptance","note":"Billing providers may supply checkout, payment, customer, subscription and invoice facts but never become CoreX tenant, role, commercial-plan or entitlement authority."},{"id":"corex.commercial.settlement-policy","family":"COMMERCE","state":"ACTIVE","productionSafe":true,"externalDependency":"tenant/product settlement acceptance profile and approved live asset bindings","note":"Declarative settlement acceptance profiles project through Product Fabric so products and verticals can accept approved value rails without embedding network-specific code or automatic commercial satisfaction."},{"id":"corex.commercial.token-entitlement","family":"COMMERCE","state":"READY","productionSafe":true,"externalDependency":"explicit approved token-gated commercial policy and holder/account observation","note":"Token-holding conditions may be projected into commercial policy but cannot directly create tenant membership, role, publication or entitlement authority."}]},{"family":"FINANCE","items":[{"id":"corex.finance.transaction-trust","family":"FINANCE","state":"ACTIVE","productionSafe":true,"note":"Provider-neutral financial fact, transaction, payment, invoice, refund and reversal trust profiles are implemented without CoreX becoming payment or banking authority."},{"id":"corex.finance.reconciliation","family":"FINANCE","state":"ACTIVE","productionSafe":true,"note":"Deterministic financial reconciliation detects conflicting provenance, missing payment links, refund/payment mismatches and authority gaps without moving money or making regulated financial decisions."},{"id":"corex.finance.watch","family":"FINANCE","state":"ACTIVE","productionSafe":true,"externalDependency":"tenant WATCH.ENABLED entitlement and destination policy","note":"Finance Watch templates reuse governed durable event subscriptions for payment, refund, invoice, reconciliation and provider-health changes."},{"id":"corex.finance.defender","family":"FINANCE","state":"ACTIVE","productionSafe":true,"externalDependency":"tenant DEFENDER.ENABLED entitlement","note":"Finance Defender adds deterministic financial-risk signals; it is advisory, does not autonomously block funds and has no AI authority."},{"id":"corex.pay.provider-orchestration","family":"FINANCE","state":"READY","productionSafe":true,"externalDependency":"bound regulated payment processor/provider activation and live acceptance","note":"CoreX Pay provider-orchestration contracts are implemented; external processors remain payment authority and CoreX never holds customer funds."},{"id":"corex.settlement.intent","family":"FINANCE","state":"ACTIVE","productionSafe":true,"note":"Tenant-scoped payment intents persist through the canonical event spine and validate accepted asset, network, account and regulatory references before creation."},{"id":"corex.settlement.quote","family":"FINANCE","state":"ACTIVE","productionSafe":true,"externalDependency":"approved quote/oracle source for dynamic production prices","note":"Settlement quote recording is implemented with expiry, intent binding and explicit quote-source authority; CoreX does not fabricate exchange rates."},{"id":"corex.settlement.observation","family":"FINANCE","state":"ACTIVE","productionSafe":true,"note":"Network evidence observation is implemented independently from commercial settlement semantics, including native/token transfer extraction for EVM and Solana RPC adapters."},{"id":"corex.settlement.finality","family":"FINANCE","state":"ACTIVE","productionSafe":true,"note":"Network-specific finality is normalized before Finance reconciliation; non-final transactions remain pending and never release entitlement."},{"id":"corex.settlement.reconciliation","family":"FINANCE","state":"ACTIVE","productionSafe":true,"note":"Settlement reconciliation checks exact asset representation, destination, atomic amount, duplicate transaction use, compliance state and existing CoreX Finance rules."},{"id":"corex.settlement.receipt","family":"FINANCE","state":"ACTIVE","productionSafe":true,"note":"Auditable settlement receipts persist through the event spine while preserving Finance -> commercial satisfaction -> entitlement authority sequencing."},{"id":"corex.finance.acceptance-harness","family":"FINANCE","state":"ACTIVE","productionSafe":true,"note":"Synthetic payment/refund/reconciliation acceptance scenarios validate CoreX Finance/Pay behavior before live PSP activation."}]},{"family":"NETWORK","items":[{"id":"corex.network.registry","family":"NETWORK","state":"ACTIVE","productionSafe":true,"note":"Runtime network registry and capability discovery are active with immutable CoreX network IDs and replaceable adapter bindings."},{"id":"corex.network.caip-identifiers","family":"NETWORK","state":"ACTIVE","productionSafe":true,"note":"CAIP-2, CAIP-10 and CAIP-19 compatible identifiers provide chain-agnostic external addressing while immutable internal CoreX IDs remain canonical lifecycle identifiers."},{"id":"corex.network.adapter-fabric","family":"NETWORK","state":"ACTIVE","productionSafe":true,"note":"Provider-neutral adapter routing is active. Named ledgers, payment rails and any future CoreX-native network remain replaceable implementations and never become product or entitlement authority."},{"id":"corex.network.capability-negotiation","family":"NETWORK","state":"ACTIVE","productionSafe":true,"note":"Each registered network declares the account, balance, transfer, simulation, execution, finality and settlement-proof capabilities actually bound in the current runtime."},{"id":"corex.network.evm-adapter","family":"NETWORK","state":"ACTIVE","productionSafe":true,"note":"Generic EVM balance, transfer-evidence, finality, native-transfer simulation and signed-payload broadcast contracts are implemented; current production Polygon remains a configured EVM network rather than a platform dependency."},{"id":"corex.network.solana-adapter","family":"NETWORK","state":"READY","productionSafe":true,"externalDependency":"approved Solana RPC/network binding and dedicated transaction signer for outbound transfers","note":"Solana RPC balance, token-account, parsed transfer evidence and finalized-state observation are implemented without coupling CoreX business logic to Solana; transaction construction/signing remains externally gated."},{"id":"corex.cross-network.transport","family":"NETWORK","state":"PLANNED","productionSafe":false,"externalDependency":"approved bridge/messaging/supply-integrity mechanism and network-specific acceptance","note":"Cross-network asset transport is deliberately separate from semantic and execution interoperability; bridges and representation movement are never implicit wallet behavior."}]},{"family":"CONTROL_PLANE","items":[{"id":"corex.infrastructure.portability-baseline","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Canonical provider-neutral infrastructure baseline freezes compute, persistence, storage, scheduler, queue, workload-identity, signer, telemetry, RPC and integrity-anchor authority boundaries across managed, sovereign, hybrid and future CoreX-native deployment profiles."},{"id":"corex.infrastructure.provider-fabric","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Infrastructure providers are replaceable implementations and never become identity, product, custody, legal, settlement or entitlement authority."},{"id":"corex.operations.durable-work-leasing","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Production schema prerequisite is satisfied and the runtime implements atomic SKIP LOCKED claim, lease renewal, stale-lease rejection, bounded retry, completion and dead-letter lifecycle. Queue/lease state is execution transport and never business authority."},{"id":"corex.product-fabric.declarative","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Declarative product definitions compose capability, integration, channel and authority metadata into governed product projections."},{"id":"corex.solution-pack.registry","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Governed reusable solution-pack registry exposes deployment compositions without creating tenant, provider, commercial or legal authority."},{"id":"corex.solution-pack.compiler","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Side-effect-free compiler turns a governed solution pack into product manifests, templates, capabilities, external gates and tenant desired state for the existing release path."},{"id":"corex.infrastructure.provider-acceptance-framework","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"externalDependency":"provider-specific live acceptance and governed approval where required","note":"Generic provider acceptance lifecycle standardizes discovery, configuration, binding verification, preflight, live acceptance, evidence digest, approval, activation and observation while refusing to infer approval or live acceptance."},{"id":"corex.ai.shared-contracts","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Stable Platform↔AI Trust Context, Action Receipt, Evaluation and Tool Manifest contracts are machine-discoverable and preserve Platform truth authority."},{"id":"corex.ai.governed-runtime","family":"CONTROL_PLANE","state":"READY","productionSafe":true,"externalDependency":"approved AI model provider/runtime credentials, capacity and evaluation evidence","note":"Provider-neutral AI governance, advisory runtime contract and synthetic evaluation suite are implemented; AI remains advisory and non-authoritative."},{"id":"corex.programme.participation-outcome","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Canonical Programme, Cohort, Participation and Programme Session persistence composes capture, presence, attendance, evidence, competency, credential and outcome primitives into a reusable cross-vertical participation/outcome fabric."},{"id":"corex.programme.source-finality","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Programme data-loop closure is derived from a declared collection cutoff, completed processing, sealed required sources, evidence-backed provenance and reconciliation state. Human ceremony or partner sign-off does not govern whether the data loop is closed."},{"id":"corex.programme.kpi-automation","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Deterministic KPI snapshots compute from evidence-backed observations through versioned definitions and cutoff timestamps, eliminating spreadsheet/manual calculation as the authoritative KPI path while preserving source measurement authority."},{"id":"corex.decision.evidence-matrix","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Deterministic evidence matrix supports required, weighted and informational criteria plus exceptional-case review without creating award or eligibility authority."},{"id":"corex.ai.cross-ecosystem-learning","family":"CONTROL_PLANE","state":"READY","productionSafe":true,"externalDependency":"approved AI provider plus redaction/aggregation and evaluation evidence","note":"Governed AI learning can compare evidence quality, operational responsiveness and capability performance across deployments without cross-tenant PII leakage or canonical mutation."},{"id":"corex.control-plane.guided-operator-experience","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Guided operator blueprints hide trust-engine mechanics behind use-case, source, evidence, authority and presentation configuration while preserving an expert mode for advanced administrators."},{"id":"corex.studio.capture-builder","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"No-code Studio builder creates immutable versioned direct-capture definitions with field privacy, source-authority and evidence semantics; private value storage remains Evidence Vault and tenant-policy gated."},{"id":"corex.studio.visual-composition","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"CoreX-owned page/component/navigation/theme contracts, revisioned persistence, responsive preview and a visual recovery editor are active; embedded Puck/Tiptap editor primitives remain implementation details over the same governed contract."},{"id":"corex.studio.navigation-theme","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Navigation and theme documents are versioned through CoreX Content Control with tenant/workspace scoping, protected trust semantics and role-gated publication."},{"id":"corex.studio.visual-navigation-manager","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Visual navigation administration manages hierarchical items, navigation modes, revisions and role-gated publication while server validation preserves URL and visibility boundaries."},{"id":"corex.studio.visual-theme-manager","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Visual theme administration exposes governed tokens, brand presets, live preview and revisions while protected trust semantic mappings remain read-only and server-enforced."},{"id":"corex.studio.visual-shell-manager","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Visual shell administration composes governed navigation and media references into reusable headers, announcements and footers without transferring authority from their source registries."},{"id":"corex.media.library","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"externalDependency":"deployment-time COREX_MEDIA_STORAGE_PROVIDER_TYPE and approved upload-broker configuration for binary delivery","note":"Media metadata, revisions, privacy classification and stable asset references are active. A provider-neutral HTTPS upload-broker adapter is implemented and fails closed until explicitly configured."},{"id":"corex.studio.presentation-governance","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"SEO metadata, safe redirects, locale fallback policy, controlled revision rollback and portable export/import operate through CoreX Content Control; imports create drafts only and never bypass publication authority."},{"id":"corex.studio.presentation-reuse","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Reusable sections, page templates and shell/header/footer profiles are revisioned through CoreX Content Control and can materialize new page drafts without creating customer-specific kernel logic."},{"id":"corex.studio.reuse-aware-builder","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"The native Site Builder consumes reusable sections, templates and shell profiles from CoreX Content Control; published shell selection drives header/footer navigation without changing authorization semantics."},{"id":"corex.studio.schema-driven-builder","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"The native visual builder renders component property controls from the canonical registry schema, exposes SEO, responsive/style overrides, governed media/data binding and publication-quality preflight, while retaining an expert raw escape hatch over the same document contract."},{"id":"corex.studio.nested-composition","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"The native builder composes registered components into declared child slots, supports nested selection/reordering/removal and preserves the same canonical component tree consumed by validation and rendering."},{"id":"corex.studio.native-rich-text","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Native visual rich-text editing serializes only allow-listed structured nodes and marks into the existing Tiptap-compatible JSON contract; unsupported HTML is discarded and arbitrary scripts are never persisted."},{"id":"corex.studio.page-revision-manager","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"The visual builder can open governed page revisions, create and duplicate pages, preview drafts, save immutable revisions and publish role-authorized drafts while enforcing route-collision protection inside the same Content Control authority."},{"id":"corex.studio.live-draft-preview","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Unsaved page documents can be server-rendered through the same validated production presentation renderer inside an authenticated sandboxed preview without creating a revision or published state."},{"id":"corex.studio.visual-reuse-authoring","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Selected visual component subtrees can become reusable section drafts and current page compositions can become page-template drafts through the existing CoreX Content Control reuse contracts."},{"id":"corex.studio.editor-contract","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Editor manifest, structured rich-text validation, safe data-binding checks and presentation preflight are active. Native builder is self-hosted; Puck/Tiptap remain replaceable package bindings over CoreX-owned documents."},{"id":"corex.studio.ecosystem-presentation","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Published presentation documents can drive existing solution surfaces such as AdaptSprint and CoreX Verify through explicit bindings with deterministic native fallback; presentation does not acquire trust, commercial or source authority."},{"id":"corex.studio.presentation-profile-scaffold","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"COREX, ADAPTSPRINT and DARE_NEXUS presentation profiles can scaffold governed page/navigation/theme/shell drafts for review; no automatic publication or authority transfer occurs."},{"id":"corex.studio.visual-presets","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Brand-token-derived dark/light visual presets can create governed theme drafts and drive the shared customer shell while protected trust semantics and publication authority remain unchanged."},{"id":"corex.studio.guided-control-center","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Task-oriented Site, Brand, Content, Data, Publishing, Solutions, Quality and Advanced controls converge existing presentation capabilities without creating a second content authority."},{"id":"corex.studio.corexos-reference-migration","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"CoreXOS migration registry classifies public and protected surfaces as governed, governed-with-fallback, candidate, native high-assurance or deferred so presentation can migrate without moving trust, registry, identity or policy authority."},{"id":"corex.studio.progressive-disclosure-modes","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Guided, Standard and Expert Studio modes progressively disclose configuration depth while preserving identical role and policy authority."},{"id":"corex.studio.solution-setup","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Guided solution setup creates draft-only CoreX, AdaptSprint, DARE Nexus or custom white-label page/navigation/theme/shell compositions for deliberate review and publication."},{"id":"corex.studio.data-binding-planner","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Registered presentation components can be paired with registered data sources through data-class compatibility checks; bindings do not create source, trust or authorization authority."},{"id":"corex.studio.publication-quality-gate","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Pre-publication inspection reports composition blockers and SEO, accessibility, responsiveness and data-binding warnings without changing published state."},{"id":"corex.studio.resource-descriptor-registry","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"CoreX-owned presentation/discovery metadata drives role-aware Studio navigation, resource search, quick-create handoffs, help and developer references without granting authorization or source authority."},{"id":"corex.studio.unified-shell","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Authenticated Studio surfaces share one resource-descriptor-driven shell with tenant/workspace/solution/environment context, breadcrumbs and command navigation; context selection never creates authority."},{"id":"corex.studio.resource-index","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Disposable PostgreSQL full-text/trigram discovery projection is production-active after governed application and verification of migration 20260925154500_add_corex_resource_index. Canonical state, entitlement and access authority remain with owning resources."},{"id":"corex.studio.action-projection","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Normalized Action Projection presents setup, review, sync, provider, publication, evidence, access and quota attention states while every mutation remains with its owning governed capability."},{"id":"corex.studio.resource-explorer","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Reusable Resource Explorer is production-active with Resource Index storage ready, providing search/filter/sort/status/scope/owner views, safe details drawer and bounded pagination without generic bulk mutation authority."},{"id":"corex.studio.resource-index-prewarm","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Authenticated Studio shell load performs bounded tenant-scoped Resource Index freshness checks so first-use discovery is populated without a new scheduler or authority path."},{"id":"corex.studio.universal-resource-detail","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Universal resource detail and activity projections expose safe discovery metadata and payload-free canonical event metadata, while opening the owning route re-enforces authorization and mutation authority."},{"id":"corex.studio.resource-handoff","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Stable role-checked Studio resource handoffs expose owning routes, support references and authorised audit deep links for operational continuity without transferring access or creating parallel assignment, approval, comment, entitlement or source authority."},{"id":"corex.studio.adaptive-interaction-kernel","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Local-first tenant/actor-scoped Studio preferences synchronize favorites, recents, saved Resource Explorer views, Guided/Standard/Expert depth and navigation state with optimistic conflict handling; preference state never becomes canonical, entitlement, authorization, publication or source authority."},{"id":"corex.studio.guided-continuity","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Role-filtered, resumable onboarding and contextual help reuse the Resource Descriptor Registry and existing revision/rollback workflows. Progress is personal presentation state only and recovery links never duplicate mutation or publication authority."},{"id":"corex.studio.human-status-language","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Canonical human status language translates internal lifecycle/readiness states into consistent labels, explanations and next-action classes while exact technical state remains available on deliberate request."},{"id":"corex.studio.interaction-feedback-state","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Shared interaction feedback grammar covers loading, saving, conflict, stale, degraded, gated, step-up, long-running, partial and failure states with accessible human guidance; it is presentation-only and creates no canonical, authorization, entitlement or source authority."},{"id":"corex.platform.feature-rollout-control","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Provider-neutral feature rollout decisions support deterministic defaults, staged percentages and replaceable providers. Rollout decisions never grant entitlement, authorization, commercial rights or source authority."},{"id":"corex.control-plane.capability-state-reconciliation","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Advisory capability-state consistency checks detect duplicate IDs, unsafe ACTIVE states and poorly explained gates without auto-activating capabilities or fabricating external readiness."},{"id":"corex.studio.configuration-schema-2020-12","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"JSON Schema Draft 2020-12 is the portable configuration-validation baseline. CoreX UI metadata for Guided/Standard/Expert modes, help, sensitivity and secret references is separate and never carries authorization or trust authority."},{"id":"corex.experience.wcag-2-2-aa-engineering-baseline","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Shared human surfaces carry the CoreX WCAG 2.2 AA engineering baseline, required acceptance viewports, keyboard/focus/reflow/reduced-motion contracts and explicit separation between engineering acceptance and any formal conformance claim."},{"id":"corex.developer.human-api-reference","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Self-hosted human API reference renders the existing public OpenAPI contract into searchable, linkable operation documentation while the canonical machine JSON remains unchanged and developer-only."},{"id":"corex.studio.case-evidence-workspace","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Tenant-scoped Studio workspace projects event-sourced cases/CAPA and canonical evidence chronology without creating automatic sanctions, legal classifications or a parallel case authority."},{"id":"corex.analytics.governance-responsiveness","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Measured acknowledgement, decision, ownership, escalation and backlog signals support diagnosis without creating an automatic governance verdict."},{"id":"corex.analytics.outcome-attribution","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Outcome attribution distinguishes observed change, association and contributory evidence from causal claims that require an approved evaluation design."},{"id":"corex.decision.versioned-policy","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Decision criteria and exceptional-review rules are versioned and hash-addressed so material criteria cannot be silently changed retrospectively."},{"id":"corex.channel.low-bandwidth","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Constrained-network profiles prioritize compact HTML/JSON, progressive disclosure, deferred heavy media and queue-first capture so core workflows remain usable on 2G/3G and intermittent links."},{"id":"corex.outcomes.loop-kernel","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Generic Loop profiles, progressive disclosure and automation planning provide programme-neutral evidence-to-outcome composition without hard-coded customer or programme names."},{"id":"corex.channel.pwa-resilient-client","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Installable PWA foundation provides an offline fallback, explicit encrypted same-origin request queue, queue expiry, idempotent replay, conflict/auth holds and image downscaling without caching protected trust APIs."},{"id":"corex.acceptance.low-bandwidth-field","family":"CONTROL_PLANE","state":"GATED","productionSafe":false,"externalDependency":"real 2G/3G/intermittent-network field acceptance across representative devices and deployment geographies","note":"Engineering support is active; real field-network acceptance remains external evidence and must not be inferred from laboratory/client implementation."},{"id":"corex.outcomes.results-framework","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Generic input/activity/output/outcome/impact framework compiler preserves indicator evidence sources, methodology, attribution class, disaggregation and evidence cutoffs."},{"id":"corex.outcomes.competency-graph","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Provider-neutral competency definitions support framework, level, evidence threshold, occupation and cross-framework equivalence references without hard-coding a named curriculum."},{"id":"corex.outcomes.opportunity-graph","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Generic opportunity requirements can be matched against established competency evidence without creating placement, employment or funding authority."},{"id":"corex.outcomes.partner-delivery-trust","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Partner delivery profiles evaluate configured scope, evidence coverage, unresolved cases and validity without replacing contracting or statutory approval authority."},{"id":"corex.outcomes.portfolio-rollup","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Organisation/portfolio/programme/project/cohort/region/partner hierarchies can roll up governed measurements while preserving source-level authority."},{"id":"corex.infrastructure.rebase-registry","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Discoverable cross-repository rebase registry classifies reusable primitives, vertical/profile ownership, compatibility wrappers, deprecation lineage and promotion priorities."},{"id":"corex.workflow.governed-lifecycle","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Generic evidence- and authority-gated lifecycle state machine supports domain profiles without rebuilding transition semantics per vertical."},{"id":"corex.control-plane.capability-auditor","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Automated capability reconciliation detects unregistered references and low-discoverability active capabilities without activating external authority."},{"id":"corex.control-plane.runtime","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Tenant-scoped control-plane snapshot and governed capability/install/commercial composition are deployed without becoming payment or source authority."},{"id":"corex.control-plane.tenant-release-reconciliation","family":"CONTROL_PLANE","state":"ACTIVE","productionSafe":true,"note":"Bounded scheduled tenant-release reconciliation is mounted; it reconciles declared desired state and does not create authority roles or mutate capability grants."}]},{"family":"VALUE","items":[{"id":"corex.value.control-plane-p0","family":"VALUE","state":"READY","productionSafe":true,"note":"Production schema prerequisite is satisfied. Value Control Plane P0 can be enabled internally for governed registry, policy, intent, simulation and approval staging; signing/submission and live value movement remain separately gated."},{"id":"corex.asset.registry","family":"VALUE","state":"ACTIVE","productionSafe":true,"externalDependency":"approved production asset/account/regulatory bindings for live settlement","note":"Economic asset, network representation, settlement account and regulatory-profile registries are implemented and fail closed when production bindings are absent."},{"id":"corex.asset.representation","family":"VALUE","state":"ACTIVE","productionSafe":true,"note":"Economic asset identity is separated from network representation; representations require explicit network and equivalence policy."},{"id":"corex.account.registry","family":"VALUE","state":"ACTIVE","productionSafe":true,"externalDependency":"approved production treasury/self-custody/provider account bindings","note":"Network account bindings and custody models are implemented without creating custody, tenant or identity authority."},{"id":"corex.regulatory.asset-profile","family":"VALUE","state":"READY","productionSafe":true,"externalDependency":"approved jurisdiction-specific legal/compliance classification and service-perimeter policy","note":"Regulatory asset/service profiles are explicit external-authority bindings. CoreX software never self-classifies a token as legally permitted, exempt or regulated."}]},{"family":"HOLDER","items":[{"id":"corex.wallet.custody-policy","family":"HOLDER","state":"READY","productionSafe":true,"externalDependency":"chosen custody model, approved provider/key controls and any required regulatory activation","note":"Self-custody, external-provider, merchant-treasury and CoreX-managed models are distinct policy bindings; technical wallet capability does not silently activate custody or transfer-on-behalf-of-client."},{"id":"corex.pass.holder","family":"HOLDER","state":"READY","productionSafe":true,"externalDependency":"native holder distribution/signing and external wallet interoperability evidence","note":"CoreX Pass holder product is composed over identity, credentials, QR verification and wallet protocol readiness; certified-wallet claims remain gated."}]},{"family":"INTEGRATION","items":[{"id":"corex.connect.adapter-fabric","family":"INTEGRATION","state":"ACTIVE","productionSafe":true,"note":"CoreX Connect exposes a provider-neutral adapter catalogue covering commerce, payments, finance/ERP, identity, logistics and registry-source integration classes."},{"id":"corex.connect.adapter-factory","family":"INTEGRATION","state":"ACTIVE","productionSafe":true,"note":"Universal adapter manifest factory standardizes identity, authority, token, webhook, retry, drift, reconciliation, deletion and tenant-isolation contracts."},{"id":"corex.integration.structured-data-ingress","family":"INTEGRATION","state":"ACTIVE","productionSafe":true,"externalDependency":"provider/source authentication and tenant mapping for each live source","note":"Provider-neutral structured-data ingress supports forms, spreadsheets, CSV, databases, object stores and direct uploads through verified Integration Edge semantics."},{"id":"corex.media.http-upload-broker","family":"INTEGRATION","state":"READY","productionSafe":true,"externalDependency":"approved HTTPS upload-intent broker endpoint and optional credential/public-base configuration","note":"CoreX can bind binary media upload intents to any approved storage broker over a strict HTTPS contract without coupling presentation documents to a storage vendor."},{"id":"corex.data.native-capture","family":"INTEGRATION","state":"READY","productionSafe":true,"externalDependency":"tenant capture-definition, retention and consent policy before live data collection","note":"Native governed data-capture definitions validate direct CoreX/white-label submissions and emit canonical capture events without making external forms mandatory."},{"id":"corex.connectivity.resilient-sync","family":"INTEGRATION","state":"ACTIVE","productionSafe":true,"note":"Idempotent metadata-first synchronization supports offline, 2G and 3G operation through small batches, compression guidance, deferred binaries, retry with jitter and non-destructive reconciliation."},{"id":"corex.connectivity.offline-capture-receipt","family":"INTEGRATION","state":"ACTIVE","productionSafe":true,"note":"Offline capture receipts preserve payload integrity, sequence and reconciliation intent while explicitly preventing offline submissions from becoming canonical state or expanded authority."}]},{"family":"OPERATIONS","items":[{"id":"corex.operations.autonomous-activation-executor","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Autonomous activation executor completes internal declarative/configuration work, skips external hard stops and never fabricates source authority, credentials, spend or Shopify cutover."},{"id":"corex.operations.activation-control-center","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Protected Activation Control Center reconciles capability, provider-binding and external-gate state into evidence-driven next actions without creating provider, tenant, commercial, legal or regulatory authority."},{"id":"corex.operations.product-experience-analytics","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Privacy-minimised product-experience events use CoreX structured telemetry by default and can feed optional sinks without raw queries, identity/tenant/workspace identifiers, evidence, form values or session replay."},{"id":"corex.operations.request-observability","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Infrastructure-wide W3C trace context, correlation/support IDs and privacy-minimised structured telemetry provide request observability without logging bodies, query strings, cookies, authorization material or identities."},{"id":"corex.operations.production-database-migration-control","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"externalDependency":"GitHub secret COREX_PRODUCTION_DATABASE_URL and production environment approval policy","note":"Manual-dispatch migration control compares repository Prisma history with production, refuses unexpected pending or divergent migrations, serializes applies, requires an exact confirmation phrase, runs Prisma migrate deploy under Node 22 and verifies post-apply storage readiness without printing database credentials."},{"id":"corex.operations.production-migration-ledger-reconciliation","family":"OPERATIONS","state":"READY","productionSafe":true,"externalDependency":"GitHub secret COREX_PRODUCTION_DATABASE_URL and production environment approval policy","note":"Exceptional manual-dispatch control for auditing and reconciling legacy Prisma migration history. It can repair only a fixed three-index legacy drift allowlist after duplicate-data preflight and exact confirmation; otherwise it cannot deploy schema migrations, excludes the Resource Index migration from reconciliation, and verifies that only the Resource Index migration remains pending afterward."},{"id":"corex.operations.investigation-lifecycle","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Investigation state changes use canonical events, preserve evidence/history and require authority for consequential resolution, dismissal or escalation."},{"id":"corex.operations.delivery-receipts","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"externalDependency":"bound delivery provider for provider-confirmed receipt states","note":"Credential/evidence delivery status is recorded independently from credential lifecycle state."},{"id":"corex.operations.case-resolution","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Generic case/CAPA contract supports triage, containment, root cause, corrective action and effectiveness review without automatic legal or sanction authority."},{"id":"corex.presence.target-resolver","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Generic presence-target resolution supports assets, facilities, events, worksites, deliveries and inspections; location evidence remains minimised and does not itself establish attendance or legal presence."},{"id":"corex.operations.nervous-system","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Unified operational projection converges activation, provider gates, Watch/Defender-style signals and recommended actions without autonomous blocking."},{"id":"corex.performance.scale-automation","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Evidence-driven scale recommendations identify binding constraints without automatic paid capacity changes."},{"id":"corex.operations.event-delivery","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Durable event subscriptions, leased delivery workers, retry, dead-letter, replay and scheduled backlog draining are production-active."},{"id":"corex.operations.trust-epoch-reconciliation","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Bounded scheduled Trust Epoch sealing, checkpoint submission and reconciliation are active."},{"id":"corex.operations.data-retention","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"note":"Bounded scheduled retention reconciliation is mounted and provider-neutral; current Shopify Level-1 retention processing remains a safety control and does not broaden Shopify data scope."},{"id":"corex.watch.event-driven","family":"OPERATIONS","state":"ACTIVE","productionSafe":true,"externalDependency":"tenant WATCH.ENABLED commercial entitlement and destination policy","note":"CoreX Watch is implemented as governed durable event subscriptions. Use remains entitlement- and tenant-policy controlled."}]},{"family":"TENANCY","items":[{"id":"corex.tenancy.deployment-factory","family":"TENANCY","state":"ACTIVE","productionSafe":true,"note":"Tenant/pilot deployment factory generates governed desired-state, acceptance and external-gate plans without creating tenant/source authority."},{"id":"corex.tenancy.white-label-deployment-factory-v2","family":"TENANCY","state":"ACTIVE","productionSafe":true,"externalDependency":"customer tenant/commercial/domain/provider/source authority and customer operational acceptance","note":"White-label deployment factory composes tenant deployment planning with Guided/Standard/Expert operator experience, presentation configuration, provider/domain gates and acceptance/recovery checklists without executing external authority transitions."},{"id":"corex.tenancy.white-label","family":"TENANCY","state":"ACTIVE","productionSafe":true,"note":"Tenant trust profiles, brand presentation and disclosure-policy separation are production-active; customer-specific domains and provider bindings remain deployment configuration."}]},{"family":"VERTICAL","items":[{"id":"corex.profile.education-programme","family":"VERTICAL","state":"ACTIVE","productionSafe":true,"externalDependency":"customer programme/source/issuer authority for live deployments","note":"Education/Campus is an active profile over the shared Programme & Participation fabric; it owns no parallel identity, event or persistence authority."},{"id":"corex.vertical.deployment-factory","family":"VERTICAL","state":"ACTIVE","productionSafe":true,"note":"Education, property, supply-chain, finance and workforce blueprints compose existing Product Fabric and preserve external authority."},{"id":"corex.vertical.property","family":"VERTICAL","state":"READY","productionSafe":true,"note":"Property Source Trust production template is compiled from shared registry, verification, presence, reconciliation and trust-event primitives. Live property/title/source claims remain externally authority-bound."},{"id":"corex.vertical.education","family":"VERTICAL","state":"READY","productionSafe":true,"note":"Education Portable Trust production template is compiled from shared credential, evidence, outcomes, lifecycle and identity-assurance primitives. Live institution, qualification and accreditation claims remain externally authority-bound."},{"id":"corex.vertical.programme-activation","family":"VERTICAL","state":"ACTIVE","productionSafe":true,"externalDependency":"customer tenant/workspace, source-authority bindings, programme decision authority and deployment acceptance","note":"Incubating Programme Activation & Delivery factory composes programme, identity, evidence, credential, Watch, Defender and AI foundations. Internal contracts are active; live DARE claims remain gated by customer/source authority and real-pilot acceptance."},{"id":"corex.vertical.medical-supply","family":"VERTICAL","state":"READY","productionSafe":true,"externalDependency":"source/regulatory/product data integrations for each deployment","note":"Medical-supply provenance and controlled-chain profiles are encoded over the same trust primitives, with no implied regulatory approval."},{"id":"corex.vertical.logistics","family":"VERTICAL","state":"READY","productionSafe":true,"externalDependency":"carrier, telematics, recipient and shipment-source integrations","note":"Last-mile and high-value delivery proof profiles are encoded as reusable custody/evidence policies rather than a separate platform."},{"id":"corex.vertical.supply-chain","family":"VERTICAL","state":"READY","productionSafe":true,"externalDependency":"customer product/asset identifiers and source-event integrations","note":"General provenance passports can compose source, transformation, custody, certification, sensor and delivery events."}]},{"family":"IDENTITY","items":[{"id":"corex.identity.provider-passwordless","family":"IDENTITY","state":"READY","productionSafe":true,"externalDependency":"approved upstream IdP passwordless/email connection and live authentication acceptance","note":"Passwordless email or magic-link authentication is supported only through the registered human identity provider adapter. CoreX consumes the upstream assertion and resolves it to CorexIdentityBinding/CorexActor; legacy LoginCode/Session authority is not revived."},{"id":"corex.identity.provider-adapters","family":"IDENTITY","state":"ACTIVE","productionSafe":true,"note":"Provider-neutral human OIDC adapter is configured through AUTH0_COREX_PROD; canonical CoreX authority still requires IdentityBinding."},{"id":"corex.identity.oidc-service","family":"IDENTITY","state":"ACTIVE","productionSafe":true,"note":"OIDC-based service identity boundary is implemented for trusted service-to-service contexts."}]},{"family":"EVIDENCE","items":[{"id":"corex.trust.attendance-proof","family":"EVIDENCE","state":"ACTIVE","productionSafe":true,"note":"Reusable attendance evidence composes presence, check-in, site-signal, source-register, witness and interaction proofs; attendance does not automatically imply completion."},{"id":"corex.evidence.explainable-trail","family":"EVIDENCE","state":"ACTIVE","productionSafe":true,"note":"Compact evidence reports can expose a collapsible derivation trail linking source observations, reconciliation, deterministic rules, authority decisions and the current canonical state, with optional deep-analysis links for contested or complex cases."},{"id":"corex.evidence.strength-taxonomy","family":"EVIDENCE","state":"ACTIVE","productionSafe":true,"note":"Common evidence-strength levels separate source declaration, verification, corroboration, authority verification and independently verifiable proof without conflating evidence assurance with outcome desirability."},{"id":"corex.trust.event-projection","family":"EVIDENCE","state":"ACTIVE","productionSafe":true,"note":"Generic audience-tiered event/object trust projection replaces brand-specific projection logic while preserving customer wrappers as profiles."},{"id":"corex.evidence.bundle","family":"EVIDENCE","state":"ACTIVE","productionSafe":true,"note":"Generic closed-loop evidence bundle supports source records, discrepancy resolution, review and sign-off across audits, programmes, grants, inspections and delivery."},{"id":"corex.reconciliation.entity-source","family":"EVIDENCE","state":"ACTIVE","productionSafe":true,"note":"Generic tokenized entity/source reconciliation detects repeated identifiers and authoritative binding conflicts while prohibiting automatic merge or wrongdoing inference."},{"id":"corex.reconciliation.rule-engine","family":"EVIDENCE","state":"ACTIVE","productionSafe":true,"note":"Generic deterministic fact reconciliation executes provider-neutral validation plus domain rule packs while preserving source authority and prohibiting automatic fraud/legal conclusions."},{"id":"corex.evidence.funding-expenditure","family":"EVIDENCE","state":"ACTIVE","productionSafe":true,"note":"Generic funding/expenditure evidence records planned, incurred, approved and paid observations with budget variance and eligibility references without creating payment or grant authority."},{"id":"corex.evidence.private-vault","family":"EVIDENCE","state":"ACTIVE","productionSafe":true,"note":"Private evidence vault bound in eu-central-1."}]},{"family":"CREDENTIAL","items":[{"id":"corex.credential.distribution","family":"CREDENTIAL","state":"READY","productionSafe":true,"externalDependency":"bound email/SMS/CMS/wallet/webhook providers for external delivery channels","note":"Provider-neutral credential distribution plans email, SMS, CMS, holder portal, wallet, QR, webhook and download delivery while preserving credential lifecycle authority."},{"id":"corex.credential.adaptive-presentation","family":"CREDENTIAL","state":"ACTIVE","productionSafe":true,"note":"Credential presentation can adapt between mobile, tablet, desktop, print and embed surfaces while preserving explicit user override and alternate projections."},{"id":"corex.credential.persistence","family":"CREDENTIAL","state":"ACTIVE","productionSafe":true,"note":"Credential/event persistence is declared ready for this environment."},{"id":"corex.credential.signed","family":"CREDENTIAL","state":"ACTIVE","productionSafe":true,"note":"Canonical credential issuance, cryptographic proof and lifecycle semantics require both signer and persistence readiness."},{"id":"corex.credential.certificate-qr","family":"CREDENTIAL","state":"ACTIVE","productionSafe":true,"note":"Human-readable certificate, JSON projection and QR verification surfaces are implemented and depend on the credential persistence spine."},{"id":"corex.credential.lifecycle-status","family":"CREDENTIAL","state":"ACTIVE","productionSafe":true,"note":"Suspend, reinstate, revoke, supersede and expiry-aware verification are implemented but require persistent credential state."},{"id":"corex.credential.public-independent-proof","family":"CREDENTIAL","state":"ACTIVE","productionSafe":true,"note":"Confirmed production ledger receipts expose transaction/block/registry/explorer evidence without exposing PII or canonical hashes."}]},{"family":"INTEROP","items":[{"id":"corex.wallet.interop-harness","family":"INTEROP","state":"READY","productionSafe":true,"externalDependency":"production issuer/verifier configuration, external wallet interoperability and qualification evidence","note":"OID4VCI/OID4VP interoperability harness and synthetic matrix are implemented without claiming external wallet qualification."},{"id":"corex.interop.w3c-vc","family":"INTEROP","state":"ACTIVE","productionSafe":true,"externalDependency":"formal interoperability/conformance validation only for stronger conformance claims","note":"Privacy-minimal W3C VC 2.0 projection is deployed over canonical CoreX credentials. Projection availability is active; formal conformance/qualification is not claimed."},{"id":"corex.interop.openid4vci-vp","family":"INTEROP","state":"READY","productionSafe":false,"externalDependency":"production trust-profile/base-URL/secret activation configuration and external wallet interoperability validation","note":"OpenID4VCI pre-authorized issuance transport and OpenID4VP request/ES256 response validation are implemented. Runtime activation remains fail-closed until the production trust-profile and endpoint configuration is explicitly enabled; no qualification claim is made."},{"id":"corex.interop.gs1-epcis","family":"INTEROP","state":"READY","productionSafe":true,"externalDependency":"GS1 identifier and EPCIS event adapters plus customer source integration","note":"Supply-chain trust events can map to GS1/EPCIS-style identifiers and event semantics without changing CoreX canonical authority."},{"id":"corex.interop.udi-medical-device","family":"INTEROP","state":"READY","productionSafe":true,"externalDependency":"jurisdiction-specific UDI/regulatory data source adapters","note":"Medical-device profiles reserve UDI/product, lot/serial and authority evidence fields; regulatory truth remains with competent sources."}]},{"family":"METERING","items":[{"id":"corex.commercial.entitlement-blueprints","family":"METERING","state":"ACTIVE","productionSafe":true,"note":"Product/offer definitions derive entitlement, quota, integration and metering desired state without creating price, billing or payment authority."},{"id":"corex.metering.usage","family":"METERING","state":"ACTIVE","productionSafe":true,"note":"Idempotent tenant/workspace usage observations and bounded summaries are deployed; observations are not billing authority."},{"id":"corex.metering.quota-enforcement","family":"METERING","state":"ACTIVE","productionSafe":true,"externalDependency":"authoritative tenant/workspace entitlement and quota policy binding","note":"Entitlement-first quota evaluation is deployed and fails closed when authoritative quota policy is unavailable."}]},{"family":"VERIFY","items":[{"id":"corex.verify.public-reference","family":"VERIFY","state":"ACTIVE","productionSafe":true,"note":"Provider-neutral public reference verification with minimum disclosure."},{"id":"corex.verify.vector-proof-sync","family":"VERIFY","state":"ACTIVE","productionSafe":true,"note":"Signed CoreX VECTOR proof-ingest receiver is deployed; sender is integrated into VECTOR production."}]},{"family":"TRUST_ANCHOR","items":[{"id":"corex.trust-anchor.ledger","family":"TRUST_ANCHOR","state":"ACTIVE","productionSafe":true,"note":"Ledger adapter bound: COREX_POLYGON_POS_REGISTRY_V2 on polygon-pos."},{"id":"corex.trust-anchor.transparency-merkle","family":"TRUST_ANCHOR","state":"ACTIVE","productionSafe":true,"note":"Persistent historical-integrity records are batched into Merkle Trust Epochs and checkpointed through COREX_POLYGON_POS_TRUST_EPOCH_V1 on polygon-pos."}]}],"products":[{"id":"verify","name":"CoreX Verify","family":"TRUST","state":"ACTIVE","description":"Current-state and historical verification over governed evidence.","modules":["VERIFY","INTEGRITY","AUDIT"],"capabilityIds":["corex.verify.public-reference","corex.verify.vector-proof-sync","corex.trust-anchor.transparency-merkle"],"integrationIds":[],"channels":["WEB","REST_API","QR_SCAN"],"authority":{"corexRole":"VERIFY_AND_EXPLAIN_TRUST_STATE","externalAuthorities":["BOUND_SOURCE_SYSTEMS"]},"capabilityStates":[{"id":"corex.verify.public-reference","state":"ACTIVE"},{"id":"corex.verify.vector-proof-sync","state":"ACTIVE"},{"id":"corex.trust-anchor.transparency-merkle","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"credentials","name":"CoreX Credentials","family":"TRUST","state":"MANAGED","description":"Lifecycle-managed signed credentials and portable projections.","modules":["CREDENTIALS","IDENTITY","VERIFY"],"capabilityIds":["corex.credential.signed","corex.credential.lifecycle-status","corex.interop.w3c-vc"],"integrationIds":[],"channels":["WEB","REST_API","QR_SCAN","WALLET"],"authority":{"corexRole":"CANONICAL_CREDENTIAL_LIFECYCLE","externalAuthorities":["ISSUER_AUTHORITY_WHERE_APPLICABLE"]},"capabilityStates":[{"id":"corex.credential.signed","state":"ACTIVE"},{"id":"corex.credential.lifecycle-status","state":"ACTIVE"},{"id":"corex.interop.w3c-vc","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"registry","name":"CoreX Registry","family":"TRUST","state":"MANAGED","description":"Living assets, rights, lineage and governed history.","modules":["REGISTRY","VERIFY","INTEGRITY"],"capabilityIds":["corex.vertical.property","corex.trust-anchor.transparency-merkle"],"integrationIds":[],"channels":["WEB","REST_API"],"authority":{"corexRole":"TRUST_STATE_AND_EVIDENCE","externalAuthorities":["STATUTORY_OR_SOURCE_REGISTRIES"],"legalAuthority":false},"capabilityStates":[{"id":"corex.vertical.property","state":"READY"},{"id":"corex.trust-anchor.transparency-merkle","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"ai","name":"CoreX AI","family":"INTELLIGENCE","state":"FOUNDATION","description":"Provider-neutral governed intelligence, AI assurance and bounded tool orchestration over trusted CoreX context.","modules":["AI","CONTROL_PLANE","STUDIO","WATCH","DEFENDER"],"capabilityIds":["corex.ai.governed-runtime","corex.control-plane.runtime","corex.operations.nervous-system"],"integrationIds":["ai-model-provider"],"channels":["WEB","REST_API","SDK","STUDIO"],"authority":{"corexRole":"ADVISORY_INTELLIGENCE_AND_GOVERNED_ORCHESTRATION","externalAuthorities":["APPROVED_MODEL_PROVIDERS"],"legalAuthority":false},"capabilityStates":[{"id":"corex.ai.governed-runtime","state":"READY"},{"id":"corex.control-plane.runtime","state":"ACTIVE"},{"id":"corex.operations.nervous-system","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"finance","name":"CoreX Finance","family":"FINANCE","state":"FOUNDATION","description":"Financial trust, transaction assurance, reconciliation, Watch and Defender over external financial facts.","modules":["FINANCE","VERIFY","WATCH","DEFENDER","INTEGRITY","AUDIT","CONNECT"],"capabilityIds":["corex.finance.transaction-trust","corex.finance.reconciliation","corex.finance.watch","corex.finance.defender","corex.trust-anchor.transparency-merkle"],"integrationIds":["payment-provider","shopify-commerce"],"channels":["WEB","REST_API","WEBHOOK"],"authority":{"corexRole":"TRUST_RECONCILIATION_EVIDENCE","externalAuthorities":["PAYMENT_PROCESSOR","BANK_OR_ACCOUNT_PROVIDER","COMMERCE_SOURCE"],"moneyCustody":false,"legalAuthority":false},"capabilityStates":[{"id":"corex.finance.transaction-trust","state":"ACTIVE"},{"id":"corex.finance.reconciliation","state":"ACTIVE"},{"id":"corex.finance.watch","state":"ACTIVE"},{"id":"corex.finance.defender","state":"ACTIVE"},{"id":"corex.trust-anchor.transparency-merkle","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"pay","name":"CoreX Pay","family":"FINANCE","state":"EXTERNAL_GATE","description":"Provider-integrated payment trust and lifecycle orchestration without CoreX becoming payment processor or custodian.","modules":["FINANCE","VECTOR","CONNECT","WATCH","DEFENDER"],"capabilityIds":["corex.pay.provider-orchestration","corex.finance.transaction-trust","corex.finance.reconciliation"],"integrationIds":["payment-provider","shopify-commerce"],"channels":["WEB","REST_API","WEBHOOK"],"authority":{"corexRole":"PAYMENT_TRUST_ORCHESTRATION","externalAuthorities":["PAYMENT_PROCESSOR","COMMERCE_SOURCE"],"moneyCustody":false,"legalAuthority":false},"capabilityStates":[{"id":"corex.pay.provider-orchestration","state":"READY"},{"id":"corex.finance.transaction-trust","state":"ACTIVE"},{"id":"corex.finance.reconciliation","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"platform","name":"CoreX Platform","family":"PLATFORM","state":"ACTIVE","description":"APIs, SDKs, Studio, Control Plane, metering, governance and provider-neutral trust infrastructure.","modules":["PLATFORM","CONTROL_PLANE","STUDIO","METERING","OPERATIONS","TENANCY"],"capabilityIds":["corex.product-fabric.declarative","corex.control-plane.runtime","corex.operations.event-delivery","corex.metering.usage","corex.metering.quota-enforcement","corex.tenancy.white-label"],"integrationIds":["corex-vector-signed-bridge","identity-provider"],"channels":["WEB","REST_API","SDK","WEBHOOK","STUDIO"],"authority":{"corexRole":"TRUST_PLATFORM_AND_GOVERNED_RUNTIME","externalAuthorities":["BOUND_SOURCE_SYSTEMS","BOUND_IDENTITY_PROVIDERS"]},"capabilityStates":[{"id":"corex.product-fabric.declarative","state":"ACTIVE"},{"id":"corex.control-plane.runtime","state":"ACTIVE"},{"id":"corex.operations.event-delivery","state":"ACTIVE"},{"id":"corex.metering.usage","state":"ACTIVE"},{"id":"corex.metering.quota-enforcement","state":"ACTIVE"},{"id":"corex.tenancy.white-label","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"connect","name":"CoreX Connect","family":"INTEGRATION","state":"FOUNDATION","description":"Provider-neutral connectivity catalogue and governed adapter framework.","modules":["CONNECT","PLATFORM"],"capabilityIds":["corex.connect.adapter-fabric"],"integrationIds":["corex-vector-signed-bridge","shopify-commerce","payment-provider","logistics-provider","identity-provider"],"channels":["REST_API","WEBHOOK","SDK","GATEWAY"],"authority":{"corexRole":"GOVERNED_CONNECTIVITY","externalAuthorities":["CONNECTED_SOURCE_SYSTEMS"]},"capabilityStates":[{"id":"corex.connect.adapter-fabric","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}},{"id":"pass","name":"CoreX Pass","family":"HOLDER","state":"FOUNDATION","description":"Holder-facing identity, credential and verification channel with wallet protocol readiness.","modules":["WALLET_PASS","IDENTITY","CREDENTIALS","VERIFY"],"capabilityIds":["corex.pass.holder","corex.interop.openid4vci-vp","corex.interop.w3c-vc"],"integrationIds":["identity-provider"],"channels":["WEB_MOBILE","WALLET","QR_SCAN"],"authority":{"corexRole":"HOLDER_PRESENTATION_AND_CONSENT","externalAuthorities":["IDENTITY_AND_CREDENTIAL_ISSUERS"]},"capabilityStates":[{"id":"corex.pass.holder","state":"READY"},{"id":"corex.interop.openid4vci-vp","state":"READY"},{"id":"corex.interop.w3c-vc","state":"ACTIVE"}],"settlement":{"platformSupported":true,"configured":false,"profileRef":null,"state":"UNCONFIGURED","settlementReady":false,"externalGate":true,"methods":[],"authority":{"automaticCommercialSatisfaction":false,"automaticEntitlementGrant":false}},"deployability":{"generatedFromDeclarativeDefinition":true,"websiteMetadata":true,"controlPlaneProjection":true,"studioProjection":true,"entitlementMappingReady":true,"tenantManifestComposable":true}}],"adapters":[{"id":"shopify-commerce","family":"COMMERCE","state":"ACTIVE","sourceAuthority":"SHOPIFY","directions":["INGRESS","EGRESS"],"capabilities":["orders","payment-lifecycle","fulfilment-lifecycle","refunds","proof-projection"],"notes":"Reference commerce adapter. Shopify remains authoritative for current order/payment/fulfilment source state."},{"id":"payment-provider","family":"PAYMENT","state":"EXTERNAL_GATE","sourceAuthority":"BOUND_PAYMENT_PROCESSOR","directions":["INGRESS"],"capabilities":["payment-provenance","transaction-status","refund-evidence","provider-readiness"],"notes":"Provider-neutral payment adapter contract. Paytrail onboarding is external-gated; CoreX does not process or custody money."},{"id":"accounting-erp","family":"FINANCE","state":"FOUNDATION","sourceAuthority":"BOUND_ACCOUNTING_OR_ERP_SYSTEM","directions":["INGRESS","EGRESS"],"capabilities":["invoice-evidence","purchase-order-linkage","transaction-reconciliation","export-receipts"],"notes":"Declarative adapter target for ERP/accounting systems; customer/provider-specific API binding remains deployment work."},{"id":"open-finance","family":"FINANCE","state":"EXTERNAL_GATE","sourceAuthority":"REGULATED_BANK_OR_OPEN_FINANCE_PROVIDER","directions":["INGRESS"],"capabilities":["account-transaction-evidence","consent-bound-observation","reconciliation"],"notes":"Engineering profile only. Production activation requires regulated provider/API access and applicable consent/interoperability evidence."},{"id":"identity-provider","family":"IDENTITY","state":"ACTIVE","sourceAuthority":"BOUND_IDENTITY_PROVIDER","directions":["INGRESS"],"capabilities":["authentication-context","subject-binding"],"notes":"Authentication evidence feeds CoreX IdentityBinding; external authentication never creates CoreX authority."},{"id":"logistics-provider","family":"LOGISTICS","state":"EXTERNAL_GATE","sourceAuthority":"BOUND_CARRIER_OR_3PL","directions":["INGRESS","EGRESS"],"capabilities":["tracking","custody","delivery","returns"],"notes":"Provider-neutral logistics adapter; real carrier/locker/3PL activation remains external."},{"id":"registry-source","family":"REGISTRY","state":"FOUNDATION","sourceAuthority":"BOUND_REGISTRY","directions":["INGRESS"],"capabilities":["living-asset-source","rights-evidence","status-evidence"],"notes":"Registry adapters preserve statutory/source authority and project only governed evidence into CoreX."},{"id":"structured-data-source","family":"DATA","state":"FOUNDATION","sourceAuthority":"BOUND_DATA_CONTROLLER_OR_SOURCE","directions":["INGRESS"],"capabilities":["forms","spreadsheets","csv","database","object-storage","batch-import","schema-mapping","reconciliation"],"notes":"Generic structured-data ingestion for Google/Microsoft forms and sheets, CSV files, databases, object stores or direct CoreX uploads. Provider-specific authentication remains deployment configuration."},{"id":"api-webhook-source","family":"DATA","state":"FOUNDATION","sourceAuthority":"BOUND_API_OR_WEBHOOK_SOURCE","directions":["INGRESS","EGRESS"],"capabilities":["rest-api","webhook","event-stream","idempotent-ingress","source-verification","reconciliation"],"notes":"Provider-neutral API/event ingestion path over the CoreX Integration Edge."},{"id":"communications-provider","family":"COMMUNICATIONS","state":"EXTERNAL_GATE","sourceAuthority":"BOUND_COMMUNICATIONS_PROVIDER","directions":["EGRESS"],"capabilities":["email","sms","cms","webhook-notification","delivery-receipts"],"notes":"Credential and trust-event distribution adapter. External provider remains delivery authority and delivery does not alter credential lifecycle state."},{"id":"location-presence-provider","family":"PRESENCE","state":"FOUNDATION","sourceAuthority":"BOUND_LOCATION_OR_SITE_SIGNAL_SOURCE","directions":["INGRESS"],"capabilities":["gnss","fused-location","wifi-cell","ble","nfc","qr","authority-witness","historical-location-corroboration"],"notes":"Optional provider/source adapter for presence evidence. CoreX presence policy combines signals without treating any one provider as universal location truth."}],"channels":[{"schemaVersion":"corex.channel-readiness.v1","channel":"WEB_DESKTOP","state":"ACTIVE","productionSafe":true,"notes":["Public Verify, Trust Receipt and authenticated workspaces are deployed."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"WEB_MOBILE","state":"ACTIVE","productionSafe":true,"notes":["Public Verify and Trust Receipt are responsive; Studio/workspace responsive shell is activation-ready."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"TABLET","state":"READY","productionSafe":true,"notes":["Responsive web layouts are compatible; dedicated tablet acceptance remains a release test rather than a new architecture."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"QR_SCAN","state":"ACTIVE","productionSafe":true,"notes":["QR-linked verification surfaces are implemented; credential QR issuance remains coupled to credential persistence readiness."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"PWA","state":"READY","productionSafe":true,"notes":["Mobile-first shell and offline semantics exist; installability/service-worker caching remains a separate activation step with strict trust-data cache boundaries."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"WALLET","state":"READY","productionSafe":false,"notes":["W3C VC projection exists; live OpenID wallet transports/interoperability remain gated."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"REST_API","state":"ACTIVE","productionSafe":true,"notes":["CoreX verification, trust infrastructure, credential and living-object APIs are deployed."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"WEBHOOK","state":"READY","productionSafe":true,"notes":["Signed lifecycle/webhook receiver paths exist; some source ingress remains externally gated."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"IOT_EVENT","state":"READY","productionSafe":true,"notes":["Provider-neutral event/object architecture supports machine/device sources; device-specific adapters remain deployment-specific."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"OFFLINE_VERIFY","state":"READY","productionSafe":true,"notes":["Offline verification policy semantics are activation-ready; offline results must never claim live lifecycle freshness."]},{"schemaVersion":"corex.channel-readiness.v1","channel":"LOW_BANDWIDTH_SYNC","state":"READY","productionSafe":true,"notes":["Resilient sync contracts support offline/2G/3G queueing, idempotency, small-batch metadata-first transfer, compression guidance and deferred large binaries; installable client queue/service-worker transport remains to be activated per client surface."]}],"integrations":[{"id":"corex-vector-signed-bridge","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"CoreX ↔ VECTOR signed bridge","domain":"COREX","state":"GATED","authority":"COREX_PLATFORM_AND_COREX_VECTOR","note":"Signed bridge requires production URL and shared secret configuration.","secretValuesExposed":false},{"id":"credential-signer","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Credential signer / KMS","domain":"COREX","state":"ACTIVE","authority":"COREX_PLATFORM","note":"Signer readiness is derived from the credential capability registry.","secretValuesExposed":false},{"id":"polygon-ledger","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Polygon evidence rail","domain":"LEDGER","state":"ACTIVE","authority":"EVIDENCE_ONLY","note":"Ledger integrity evidence never overrides current source authority.","secretValuesExposed":false},{"id":"evidence-vault","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Private Evidence Vault","domain":"EVIDENCE","state":"ACTIVE","authority":"COREX_EVIDENCE_POLICY","note":"Availability is derived from the provider-neutral Evidence Vault readiness gate.","secretValuesExposed":false},{"id":"identity-provider","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Browser identity provider","domain":"IDENTITY","state":"ACTIVE","authority":"EXTERNAL_IDENTITY_SOURCE_PLUS_COREX_POLICY","note":"Provider adapters remain separate from canonical Actor identity.","secretValuesExposed":false},{"id":"shopify-commerce","engineeringState":"ACTIVE","activationState":"ACTIVE","name":"Shopify commerce","domain":"COMMERCE","state":"ACTIVE","authority":"SHOPIFY","note":"Shopify commerce lifecycle integration is production active and remains authoritative for current order/payment/fulfilment truth. Provider-specific payment and logistics activation are reported separately.","secretValuesExposed":false},{"id":"logistics-provider","engineeringState":"IMPLEMENTED","activationState":"EXTERNAL_CONFIRMATION_REQUIRED","name":"Carrier / locker / 3PL","domain":"LOGISTICS","state":"EXTERNAL_CONFIRMATION_REQUIRED","authority":"SHOPIFY_PLUS_SELECTED_LOGISTICS_PROVIDER","note":"Provider-neutral fulfilment, tracking, return and lifecycle rails are implemented; the selected carrier/locker/3PL remains an external activation gate.","secretValuesExposed":false},{"id":"accounting-erp","engineeringState":"READY","activationState":"READY","name":"Accounting / ERP adapter","domain":"PAYMENT","state":"READY","authority":"BOUND_ACCOUNTING_OR_ERP_SYSTEM","note":"Provider-neutral invoice, purchase-order and reconciliation contract is available; customer-specific API binding remains deployment-specific.","secretValuesExposed":false},{"id":"open-finance","engineeringState":"IMPLEMENTED","activationState":"EXTERNAL_CONFIRMATION_REQUIRED","name":"Open-finance / banking provider","domain":"PAYMENT","state":"EXTERNAL_CONFIRMATION_REQUIRED","authority":"REGULATED_BANK_OR_OPEN_FINANCE_PROVIDER","note":"Finance trust and reconciliation can consume consent-bound banking evidence, but regulated provider access and interoperability remain external gates.","secretValuesExposed":false},{"id":"registry-source","engineeringState":"READY","activationState":"READY","name":"External registry source adapter","domain":"COREX","state":"READY","authority":"BOUND_STATUTORY_OR_SOURCE_REGISTRY","note":"Registry-source adapter class preserves external legal/source authority while projecting governed trust evidence into CoreX.","secretValuesExposed":false},{"id":"payment-provider","engineeringState":"IMPLEMENTED","activationState":"EXTERNAL_CONFIRMATION_REQUIRED","name":"Payment processor (for example Paytrail)","domain":"PAYMENT","state":"EXTERNAL_CONFIRMATION_REQUIRED","authority":"PAYMENT_PROCESSOR_FOR_PROCESSING_SHOPIFY_FOR_ORDER_STATE","note":"Payment provenance and lifecycle ingestion are implemented provider-neutrally; Paytrail or another processor remains an external activation gate. Processor provenance is evidence only and Shopify remains commerce lifecycle authority.","secretValuesExposed":false}],"authority":{"publicProjection":"COREX_PLATFORM","sourceAuthorityPreserved":true,"secretsExposed":false,"activationSideEffects":false,"billingAuthority":false,"paymentAuthority":false}}