Replay scope

sealed-record-carries-replay-identity

Applies for every adoption

Each sealed Row.id record has its own instance identity and carries, as named at Row.recording declared in, the replay identity fields and Bind record shape, together with every claim's captured reference or sealed recomputation source. A reference never comes from live play. The test names the address and restates nothing from it.

Given

a sealed record made from replay family Row.id and its manifest at Row.recording declared in

When

• the record is inspected before playback

Then

• the record carries its own stable instance identity, recording version, platform, content-set identity, settings and mod identity, Bind record shape, and every reproduction claim's comparison reference or sealed source data for deterministic recomputation
• each comparison reference is captured during recording or deterministically recomputed from the sealed record, never obtained from live play

Diagnostics

• Instance-record-manifest
• Instance-reference-source

migrated-record-keeps-source-identity

Applies when After an update is Migrate then replay.

A successful migration under Row.migration declared in creates one derived record with its own identity, the two versions, the migration rule, and a link to the unchanged source. The test names the address and restates nothing from it.

Given

a sealed source record from replay family Row.id and a different running version

When

• the deterministic migration at Row.migration declared in succeeds

Then

• one derived record is created with its own stable instance identity and a link to the unchanged source record
• the derived record names the source version, target version, and migration rule

Diagnostics

• Instance-record-manifest
• Instance-migration-record

playback-result-uses-closed-vocabulary

Applies for every adoption

Instance playback is in progress until it ends. Its terminal playback result is exactly one of diverged, rejected, or complete.

Given

each Instance playback from start until it ends

When

• the playback result is read before and after termination

Then

• before termination the playback is in progress
• at termination the playback result is exactly one of diverged, rejected, or complete, and never two of them

Diagnostics

• Instance-playback-result

record-establishes-declared-start

Applies for every adoption

The recording version, platform, content-set identity, settings, and mod identity are fixed from Row.recording declared in before the first captured seed, start, or input and do not change for the life of the recording. Row.id then Bind start capture. The test names the address and restates nothing from it.

Given

a new Row.id recording about to begin, with its manifest at Row.recording declared in

When

• recording establishes its start

Then

• the recorder Bind start capture
• the recording version, platform, content-set identity, settings, and mod identity are fixed from Row.recording declared in before the first captured seed, start, or input and do not change for the life of the recording

Diagnostics

• Instance-record-manifest
• Instance-recording-trace

input-log-captures-complete-action-order

Applies when Replay record is Seed and input log or Input log from fixed start.

From the start at Row.recording declared in, Row.id captures every mapped game action in complete order at the clock, step, or turn cited at Row.input clock declared in. The test names both addresses and restates nothing from them.

Given

one Row.id recording with mapped game actions before and after the cited start

When

• input capture runs from the start named at Row.recording declared in using the clock, step, or turn at Row.input clock declared in

Then

• every mapped game action after capture begins enters one ordered input log in complete order at the cited clock, step, or turn
• no action before capture begins enters the log

Diagnostics

• Instance-input-log-trace
• Instance-recording-trace

seed-only-record-captures-no-input

Applies when Replay record is Seed only.

A sealed seed-only Row.id record carries its seed and no input log.

Given

a complete Row.id recording with player actions during its lifetime

When

• the sealed record is inspected

Then

• the record carries its seed and no recorded input log

Diagnostics

• Instance-record-manifest
• Instance-input-log-trace

claim-records-reference-or-recomputation-source

Applies for every adoption

At every point cited at Row.comparison points, recording captures the reference Row.id needs or all sealed data the family row's cited method needs to recompute it. The record distinguishes those two sources. The test names the address and restates nothing from it.

Given

recording reaches each Row.id comparison point cited at Row.comparison points

When

• the recorder handles the claim at that point

Then

• the record captures the comparison reference required by Row.id's matching standard or all sealed source data required by the family row's cited recomputation method
• the record distinguishes a captured reference from sealed recomputation source data

Diagnostics

• Instance-reference-source
• Instance-recording-trace

record-seals-at-boundary

Applies for every adoption

At the boundary cited at Row.recording declared in, Row.id seals its instance identity and contents. Any later edit creates a different instance in the same replay family. The test names the address and restates nothing from it.

Given

one Row.id recording approaching the end boundary at Row.recording declared in

When

• capture reaches that boundary and a later edit is requested

Then

• capture ends at the cited boundary and seals the record's instance identity and contents
• the later edit creates a different record instance in the same replay family and leaves the sealed record unchanged

Diagnostics

• Instance-record-manifest
• Instance-recording-trace

record-wide-identity-precedes-consumption

Applies for every adoption

Before consuming a seed, start, or input, Row.id reads the record identity at Row.recording declared in and the cited compatibility conditions. Each record-wide identity it carries rejects through Row.difference report declared in when it fails; neither an unchanged version id nor the update policy excuses a failed identity. The test names both addresses and restates nothing from them.

Given

sealed Row.id records in which each record-wide identity this adoption carries fails in turn — content-set identity, settings, mods, and the fixed start where present — including a content patch whose version id is unchanged

When

• playback selection begins

Then

• the version, platform, content-set identity, settings, and mod identity at Row.recording declared in and every cited compatibility condition are read before any seed, start, or input is consumed
• each failed record-wide identity the adoption carries rejects the record and presents the incompatibility report through Row.difference report declared in before any seed, start, or input is consumed
• the unchanged version id does not turn the failed content identity into a pass
• the update policy is not used to excuse a failed identity

Diagnostics

• Instance-identity-check-trace
• Instance-rejection-report
• Instance-input-log-trace

compatible-record-is-played

Applies for every adoption

A sealed Row.id record whose complete replay identity matches the running game and whose cited compatibility conditions hold is played rather than rejected. Playback consumes the seed, start, or inputs it carries and reaches complete or diverged, never rejected.

Given

a sealed Row.id record whose version, platform, content-set identity, settings, mods, and start all match the running game and whose cited compatibility conditions hold

When

• playback selection checks the compatible record

Then

• playback is not rejected
• playback consumes the seed, start, or inputs the record carries
• playback reaches a terminal result that is complete or diverged, never rejected

Diagnostics

• Instance-identity-check-trace
• Instance-playback-result

recorded-platform-only-excludes-other-platforms

Applies when row platform reach is Recorded platform only.

On another platform, recorded-platform-only claim Row.id is excluded, is not compared, and cannot diverge. Other eligible claims continue where they exist. The comparison log distinguishes exclusion from a match.

Given

a playback on a platform different from the recording platform with Row.id and at least one other eligible claim where the adoption can construct one

When

• claim platform reach is selected

Then

• Row.id is not compared and cannot cause divergence
• every other eligible claim continues; where no other eligible claim exists, this clause asserts nothing
• the comparison log records platform exclusion rather than a match

Diagnostics

• Instance-comparison-log
• Instance-playback-result

every-supported-platform-excludes-only-unsupported-platforms

Applies when row platform reach is Every supported platform.

Claim Row.id remains eligible on every supported platform. It is excluded without divergence on an unsupported platform, and other eligible claims continue. The comparison log distinguishes exclusion from a match.

Given

Row.id playback on each supported platform and on each unsupported running platform the adoption can construct

When

• claim platform reach is selected

Then

• Row.id remains eligible on every supported platform
• on each constructible unsupported running platform it is not compared and cannot cause divergence, while every other eligible claim continues; where none is constructible, this clause asserts nothing
• the comparison log distinguishes unsupported-platform exclusion from a match

Diagnostics

• Instance-platform-matrix
• Instance-comparison-log

same-version-only-rejects-version-mismatch

Applies when After an update is Same version only.

When version ids differ, same-version-only rejects Row.id through Row.difference report declared in before consuming a seed, start, or input. The test names the address and restates nothing from it.

Given

a sealed Row.id record whose recorded version id differs from the running version id

When

• the update policy is applied

Then

• the playback result becomes rejected and the incompatibility report is presented through Row.difference report declared in
• no seed, start, or input is consumed

Diagnostics

• Instance-rejection-report
• Instance-input-log-trace
• Instance-playback-result

migration-runs-once-before-playback

Applies when After an update is Migrate then replay.

For differing versions, Row.id runs Row.migration declared in once. Success creates the derived record, playback consumes only that record, and Bind input clock requirement. Migration or clock-mapping failure rejects through Row.difference report declared in before consumption. For equal version ids, no migration runs, no derived record is created, and playback consumes the source record. The test names both addresses and restates nothing from them.

Given

sealed Row.id records whose version ids are equal to and differ from the running version, including successful and failed migration and each input-log record this adoption can construct with and without a running-version clock mapping

When

• playback selection applies the update policy at Row.migration declared in

Then

• when the recorded and running version ids differ, the migration rule runs once; success creates the derived record and playback consumes only that derived record
• when the recorded and running version ids are equal, no migration runs, no derived record is created, and playback consumes the source record
• Bind input clock requirement
• failed migration, or failed clock mapping where an input clock exists, rejects through Row.difference report declared in before any seed, start, or input is consumed

Diagnostics

• Instance-migration-record
• Instance-rejection-report
• Instance-input-log-trace

best-effort-presents-known-differences

Applies when After an update is Best effort with declared divergence.

For differing versions, best-effort presents the differences at Row.cross version divergence declared in before consuming the unchanged source record; Bind input clock requirement. A missing running-version clock rejects through Row.difference report declared in before input consumption. For equal version ids, the cross-version notice is not presented and playback proceeds on the source record. Every non-rejected mismatch follows the divergence response. The test names both addresses and restates nothing from them.

Given

sealed Row.id source records whose version ids are equal to and differ from the running version and, for each record with a cited input clock, running versions where that clock exists and no longer exists

When

• best-effort selection applies the update policy at Row.cross version divergence declared in

Then

• when the version ids differ, the cited known differences are presented before playback consumes the source record, and the source record remains unchanged
• when the version ids are equal, the cross-version notice is not presented and playback proceeds on the source record
• for a differing version, Bind input clock requirement
• where the record carries a cited input clock and that clock no longer exists, playback rejects through Row.difference report declared in before consuming an input
• where no rejection occurs, later actual mismatches follow the selected divergence response

Diagnostics

• Instance-cross-version-notice
• Instance-record-manifest
• Instance-rejection-report

seeded-playback-recreates-start

Applies when Replay record is Seed only or Seed and input log.

Seeded Row.id playback supplies the recorded seed before generating a claimed seeded result. If the seed cannot be established, playback rejects before input consumption.

Given

a playable Row.id record, once with its recorded seed available and once with the required seed unavailable

When

• playback recreates the start

Then

• the available run supplies the recorded seed before generating a claimed seeded result
• the unavailable run becomes rejected before consuming any input

Diagnostics

• Instance-start-trace
• Instance-playback-result

fixed-start-playback-verifies-or-restores

Applies when Replay record is Input log from fixed start.

Fixed-start Row.id playback verifies or restores the fixed starting state of the record playback consumes, which is the derived record wherever a migration ran, through Row.fixed start declared in before the first input. If it cannot establish the state, playback rejects. The test names the address and restates nothing from it.

Given

a playable Row.id record, once with its fixed start available and once with it unavailable

When

• playback applies the state rule at Row.fixed start declared in

Then

• the available run verifies or restores the fixed starting state of the record playback consumes, which is the derived record wherever a migration ran, before the first input
• the unavailable run becomes rejected before consuming an input

Diagnostics

• Instance-start-trace
• Instance-playback-result

input-log-playback-consumes-cited-order

Applies when Replay record is Seed and input log or Input log from fixed start.

Row.id playback consumes the recorded input log once, in its recorded order, at the clock, step, or turn cited at Row.input clock declared inBind clock after migration. The test names the address and restates nothing from it.

Given

a playable Row.id record with distinct mapped actions in its input log

When

• playback runs at the clock, step, or turn cited at Row.input clock declared in

Then

• every recorded input is consumed once in recorded order at the clock, step, or turn cited at Row.input clock declared inBind clock after migration
• no live input replaces or reorders a recorded action

Diagnostics

• Instance-input-log-trace
• Instance-playback-result

seed-only-playback-accepts-live-input

Applies when Replay record is Seed only.

Seed-only Row.id playback accepts live input and consumes no recorded input log. Each claim follows its own live-input answer.

Given

playable Row.id records with the same seed and different live input histories

When

• playback runs

Then

• each run accepts its live inputs and consumes no recorded input log
• each reproduction claim follows its own live-input answer

Diagnostics

• Instance-live-input-trace
• Instance-comparison-log

seed-fixed-claim-ignores-live-input-variation

Applies when row shifts with live input is Seed fixes this claim.

With the same sealed seed-only record, varying live inputs cannot change Row.id at the points cited at Row.comparison points. The test names the address and restates nothing from it.

Given

playbacks from the same sealed seed-only record with different live input histories

When

• Row.id is read at each comparison point at Row.comparison points

Then

• the result named for Row.id does not change between runs

Diagnostics

• Instance-live-input-trace
• Instance-comparison-log

live-input-shifted-claim-reads-only-cited-facts

Applies when row shifts with live input is Live input may shift this claim.

Claim Row.id reads no live-input fact outside Row.live input dependence declared in. A difference permitted there is not compared and does not diverge; if that rule recomputes the actual-input reference, deterministic recomputation happens first. Comparison points are at Row.comparison points. The test names both addresses and restates nothing from them.

Given

playbacks from the same sealed seed-only record whose live input histories vary inside and outside the facts at Row.live input dependence declared in

When

• Row.id reaches each comparison point at Row.comparison points

Then

• the claimed result reads no live-input fact outside Row.live input dependence declared in
• a result differing only as that citation permits is recorded as not compared and does not diverge
• where that citation recomputes a comparison reference for the actual inputs, the reference is deterministically recomputed from the sealed record before comparison

Diagnostics

• Instance-live-input-trace
• Instance-reference-source
• Instance-comparison-log

claim-reference-comes-from-sealed-record

Applies for every adoption

At Row.comparison points, Row.id reads a captured comparison reference or deterministically recomputes it from the sealed record through the family row's cited method. The reference-source record distinguishes the two and proves live play supplied neither. An unavailable form asserts nothing. The test names the address and restates nothing from it.

Given

Row.id playbacks using a captured reference and, where the adoption can construct one, a deterministically recomputed reference

When

• playback reaches the points at Row.comparison points

Then

• the reference is read from the sealed record or deterministically recomputed from it using the family row's cited method and Row.comparison points
• the reference-source record distinguishes capture from recomputation and proves no reference was read from live play
• where the adoption cannot construct one of the two reference forms, that form asserts nothing

Diagnostics

• Instance-reference-source
• Instance-comparison-log

unmet-claim-condition-skips-comparison

Applies for every adoption

At each constructible point where Row.conditions is not met, Row.id is not compared, does not diverge, and does not reject or make playback terminal because of that condition alone. Every other eligible claim, where the adoption declares one, is still compared at its own points, and the logs distinguish the skip from a match. If no such point exists, the test asserts nothing. The test names the address and restates nothing from it.

Given

each Row.id comparison point this adoption can construct where the conditions at Row.conditions are not met

When

• playback reaches that point

Then

• the conditions are read before a comparison is attempted
• the claim is recorded as not compared and does not mark a divergence
• the playback is not rejected and does not become terminal because of that claim's unmet condition alone
• every other eligible claim is still compared at its own comparison points; where no other eligible claim exists, this clause asserts nothing
• where no unmet-condition point can be constructed, this test asserts nothing

Diagnostics

• Instance-condition-trace
• Instance-comparison-log
• Instance-playback-result

bit-exact-claim-compares-declared-bytes

Applies when row matching standard is Bit exact state.

Bit-exact claim Row.id compares every byte named at Row.reproduces after subtracting Row.excludes. Excluded state is never compared. The test names both addresses and restates nothing from them.

Given

eligible Row.id comparisons with each included byte changed in turn and, where Row.excludes names excluded state, that state changed separately

When

• playback compares the result to its comparison reference

Then

• every state byte named at Row.reproduces after subtracting Row.excludes is compared bit for bit
• each changed included byte fails the matching standard; changed excluded state is never compared, and where the cited section says nothing is excluded that clause asserts nothing

Diagnostics

• Instance-comparison-log
• Instance-reference-source

outcome-equivalent-claim-compares-declared-fields

Applies when row matching standard is Outcome equivalent.

Outcome-equivalent claim Row.id compares every outcome field named at Row.reproduces after subtracting Row.excludes. Excluded state is never compared. The test names both addresses and restates nothing from them.

Given

eligible Row.id comparisons with each included outcome field changed in turn and, where Row.excludes names excluded state, that state changed separately

When

• playback compares the result to its comparison reference

Then

• every outcome field named at Row.reproduces after subtracting Row.excludes is compared
• each changed included field fails the matching standard; changed excluded state is never compared, and where the cited section says nothing is excluded that clause asserts nothing

Diagnostics

• Instance-comparison-log
• Instance-reference-source

position-claim-uses-adoption-gap

Applies when row matching standard is Allowed position gap.

Position claim Row.id measures distance in the space at Row.reproduces, subtracts Row.excludes, and passes exactly when the distance is no greater than the declared allowed gap at Value cite allowed position gap. Every position claim in this adoption uses that one value. The test names the addresses and restates neither the gap nor the cited rules.

Given

eligible Row.id comparisons whose distance in the space cited at Row.reproduces is below, equal to, and above the value at Value cite allowed position gap

When

• playback applies the allowed-position-gap matching standard

Then

• the measured distance uses the cited space and excludes the state at Row.excludes
• the comparison passes exactly when the distance is no greater than the declared allowed gap and fails when it is greater
• every position claim in this adoption reads the same adoption-wide value at Value cite allowed position gap

Diagnostics

• Instance-comparison-log
• Instance-allowed-gap-source

seed-fixed-claim-repeats-from-declared-record

Applies when Replay record is Seed only and row shifts with live input is Seed fixes this claim.

Across Inputs scope, the Row.artifact result from the same sealed seed-only record satisfies Row.id's matching standard at Row.comparison points whenever the conditions at Row.conditions hold. The test names both addresses and restates nothing from it.

Holds

for every case in scope where the conditions at Row.conditions hold, playback using the same sealed seed-only record satisfies Row.id's selected matching standard at the points cited at Row.comparison points

Seeds

Inputs seeds

Scope

Inputs scope

Diagnostics

• Instance-record-manifest
• Instance-comparison-log

live-input-shifted-claim-repeats-within-cited-rule

Applies when Replay record is Seed only and row shifts with live input is Live input may shift this claim.

Across Inputs scope, a Row.artifact case is eligible where the conditions at Row.conditions hold and no difference permitted by Row.live input dependence declared in applies. In every eligible case, playback from the same sealed seed-only record satisfies the claim's matching standard at Row.comparison points. A result that differs only as the live-input citation permits is recorded as not compared. The test names the addresses and restates nothing from them.

Holds

for every case in scope where the conditions at Row.conditions hold and no difference permitted by Row.live input dependence declared in applies, playback from the same sealed seed-only record satisfies the claim's matching standard at the points cited at Row.comparison points; a result that differs only as that citation permits is recorded as not compared

Seeds

Inputs seeds

Scope

Inputs scope

Diagnostics

• Instance-record-manifest
• Instance-condition-trace
• Instance-live-input-trace
• Instance-comparison-log

seed-and-input-claim-repeats-from-declared-record

Applies when Replay record is Seed and input log.

Across Inputs scope, the Row.artifact result from the same sealed seed and ordered input log satisfies Row.id's matching standard at Row.comparison points whenever the claim is eligible. The test names the address and restates nothing from it.

Holds

for every eligible case for the Row.artifact result in scope, playback using the same sealed seed and ordered input log satisfies Row.id's selected matching standard at the points cited at Row.comparison points

Seeds

Inputs seeds

Scope

Inputs scope

Diagnostics

• Instance-record-manifest
• Instance-input-log-trace
• Instance-comparison-log

fixed-start-input-claim-repeats-from-declared-record

Applies when Replay record is Input log from fixed start.

Across Inputs scope, the Row.artifact result from the same sealed fixed-start identity and ordered input log satisfies Row.id's matching standard at Row.comparison points whenever the claim is eligible. The test names the address and restates nothing from it.

Holds

for every eligible case for the Row.artifact result in scope, playback using the same sealed fixed-start identity and ordered input log satisfies Row.id's selected matching standard at the points cited at Row.comparison points

Seeds

Inputs seeds

Scope

Inputs scope

Diagnostics

• Instance-record-manifest
• Instance-input-log-trace
• Instance-comparison-log

outside-conditions-make-no-promise

Applies for every adoption

A change outside the cited conditions is never itself a reason to reject a record or to mark a divergence. A divergence arises only when a claimed result fails its comparison at an eligible comparison point. If the adoption can construct no such change, the test asserts nothing.

Given

each change outside the cited conditions that the Instance adoption can construct

When

• the change is observed during playback

Then

• no change outside the cited conditions is itself a ground for rejection or for a divergence mark; a divergence arises only from a failed comparison of a claimed result at an eligible comparison point
• where no such change can be constructed, this test asserts nothing

Diagnostics

• Instance-condition-trace
• Instance-comparison-log
• Instance-playback-result

first-difference-retains-complete-record

Applies for every adoption

At the first failed eligible comparison, Row.id becomes diverged and retains the claim, point, expected and observed results, versions, platforms, and last consumed input when present. The records distinguish failure from a skipped comparison.

Given

one Row.id playback with a first failed eligible comparison, with a last consumed input where this record has one

When

• the comparison fails its claim's matching standard

Then

• the playback result becomes diverged at that first difference
• the retained divergence record holds the claim id, comparison point, expected result, observed result, recorded and running versions, recorded and running platforms, and last consumed input when present
• the retained record distinguishes this failed comparison from a skipped comparison

Diagnostics

• Instance-divergence-record
• Instance-playback-result
• Instance-comparison-log

stop-and-report-ends-at-first-difference

Applies when Divergence response is Stop and report.

At the first difference, Row.id presents the retained difference through Row.difference report declared in, consumes no later input, and ends diverged. The test names the address and restates nothing from it.

Given

one Row.id playback whose next eligible comparison is its first difference, with a later recorded or live input where playback can have one

When

• the difference is retained

Then

• the difference is presented through Row.difference report declared in before any later input is consumed
• no later input is consumed and playback ends with result diverged

Diagnostics

• Instance-divergence-record
• Instance-difference-report
• Instance-input-log-trace

continue-and-flag-keeps-visible-divergence

Applies when Divergence response is Continue and flag.

At the first difference, Row.id presents it through Row.difference report declared in before the next input, keeps a visible diverged mark, and continues from playback's own state. The test names the address and restates nothing from it.

Given

one Row.id playback at its first difference with later playback remaining

When

• the difference is retained

Then

• the difference is presented through Row.difference report declared in before the next input is consumed
• a visible diverged mark remains and playback continues from its own state

Diagnostics

• Instance-divergence-record
• Instance-difference-report
• Instance-playback-result

continue-silently-keeps-internal-divergence

Applies when Divergence response is Continue silently.

At the first difference, Row.id marks divergence inside the replay controller, emits no player-facing, ordinary-log, or telemetry report, and continues from playback's own state. It remains diverged.

Given

one Row.id playback at its first difference with later playback remaining

When

• the difference is retained

Then

• the replay controller marks the mismatch internally, emits no player-facing, ordinary-log, or telemetry report, and continues from playback's own state
• the playback result remains diverged rather than appearing complete

Diagnostics

• Instance-divergence-record
• Instance-outward-report-audit
• Instance-playback-result

later-comparisons-never-resynchronise

Applies when Divergence response is Continue and flag or Continue silently.

For each constructible continuing run, later comparisons are informational: they do not replace the first difference or resynchronise playback to a reference. Playback advances from its own state. A continuing run with no later comparison point asserts nothing.

Given

each continuing Instance playback that can construct a first difference, with and without later comparison points

When

• playback continues after the first difference

Then

• later comparisons are retained as informational and never replace the first difference
• playback is never resynchronised to a comparison reference and advances only from its own state
• where a continuing run has no later comparison point, this test asserts nothing

Diagnostics

• Instance-divergence-record
• Instance-comparison-log
• Instance-playback-state-trace

complete-means-all-made-comparisons-matched

Applies for every adoption

When Row.id reaches its end at Row.recording declared in without an eligible failure, complete means every comparison actually made matched. It promises nothing about excluded claims, unmet conditions, or excluded state, which the log distinguishes from matches. The test names the address and restates nothing from it.

Given

one Row.id record reaching the end boundary at Row.recording declared in with no failed eligible comparison

When

• the terminal playback result is assigned

Then

• the playback result becomes complete exactly when every comparison actually made matched
• the comparison log separately records excluded claims, unmet conditions, and excluded state, and complete makes no promise about them

Diagnostics

• Instance-playback-result
• Instance-comparison-log

same-moment-events-preserve-event-resolution-order

Applies for every adoption

Events at the same replay moment enter in the total order Event resolution supplies. The replay lifecycle introduces no reordering of its own between the supplied order and processing.

Given

two or more events offered at the same Instance replay moment in a known total order from Event resolution

When

• the events enter the replay lifecycle

Then

• the lifecycle processes them in exactly the supplied total order
• the replay lifecycle introduces no reordering of its own between the supplied order and processing

Diagnostics

• Instance-event-order-trace

adoption-declares-exactly-one-replay-record

Applies for every adoption

This declaration check reads the adoption, not the running game. A legal adoption has exactly one replay-record row. Any other count is a defect this test fails by construction; the validator does not enforce the maximum.

Given

the Instance adoption document, not the running game

When

• a reviewer counts replay-record rows

Then

• the adoption has exactly one replay-record row; zero rows or more than one row is a defect this test fails by construction

Diagnostics

• Instance-declaration-record

adoption-declares-at-least-one-reproduction-claim

Applies for every adoption

This declaration check reads the adoption, not the running game. A legal adoption has at least one reproduction claim. An empty claim list is a defect this test fails by construction; the validator does not enforce the minimum.

Given

the Instance adoption document, not the running game

When

• a reviewer counts reproduction-claims rows

Then

• the adoption has at least one reproduction-claims row; an empty list is a defect this test fails by construction

Diagnostics

• Instance-declaration-record

claim-standard-agrees-with-cited-prose

Applies for every adoption

This declaration check reads the adoption and Row.reproduces with Row.excludes, not the running game. The cited prose must describe the kind of result selected by Row.id's matching standard; any other pairing is a defect this test fails by construction. The test names both addresses and restates nothing from them.

Given

the Instance adoption and the prose at Row.reproduces and Row.excludes, not the running game

When

• a reviewer compares the selected matching-standard with the included and excluded result description

Then

• the prose names bytes for bit-exact-state, outcome fields for outcome-equivalent, or positions and their space for allowed-position-gap, matching the row's selected standard
• any disagreement is a defect this test fails by construction

Diagnostics

• Instance-declaration-record

every-platform-claim-has-multiple-platform-evidence

Applies when row platform reach is Every supported platform.

This declaration check reads the adoption and existing verification evidence, not the running game. Every-supported-platform claim Row.id is legal only with evidence from more than one supported platform; any narrower evidence is a defect this test fails by construction.

Given

the Instance adoption and its verification evidence, not a new running-game execution

When

• a reviewer checks the evidence for every-supported-platform claim Row.id

Then

• the evidence records this claim tested on more than one supported platform; one platform or none is a defect this test fails by construction

Diagnostics

• Instance-platform-matrix
• Instance-declaration-record

claim-excludes-cites-separate-section

Applies for every adoption

This declaration check reads the adoption and cited prose, not the running game. Row.excludes must be a section separate from Row.reproduces and must name exclusions or explicitly say there are none. Any other shape is a defect this test fails by construction. The test names both addresses and restates nothing from them.

Given

the Instance adoption and the prose at Row.reproduces and Row.excludes, not the running game

When

• a reviewer checks the two cited sections

Then

• Row.excludes names a section separate from Row.reproduces and that section names every exclusion or states explicitly that nothing is excluded
• a shared section, an omitted exclusion, or silence when nothing is excluded is a defect this test fails by construction

Diagnostics

• Instance-declaration-record

claim-citations-state-their-own-duties

Applies for every adoption

This declaration check reads the adoption and cited prose, not the running game. Row.reproduces, Row.excludes, Row.conditions, and Row.comparison points must respectively state the included result, separate exclusions, conditions, and reference and comparison points. Any wrong meaning is a defect this test fails by construction. The test names every address and restates nothing from them.

Given

the Instance adoption and the prose at Row.reproduces, Row.excludes, Row.conditions, and Row.comparison points, not the running game

When

• a reviewer checks the meaning of each required citation

Then

• the four addresses respectively name the included result, the separate exclusions, the promise conditions, and the capture-or-recomputation and comparison points
• a citation with another meaning is a defect this test fails by construction

Diagnostics

• Instance-declaration-record

live-input-shifted-claim-cites-dependence-rule

Applies when row shifts with live input is Live input may shift this claim.

This declaration check reads the adoption and Row.live input dependence declared in, not the running game. A live-input-sensitive Row.id claim is legal only when that citation names every permitted input-history fact and excludes all others. Any other shape is a defect this test fails by construction. The test names the address and restates nothing from it.

Given

the Instance adoption and the prose at Row.live input dependence declared in, not the running game

When

• a reviewer checks live-input-may-shift-this-claim row Row.id

Then

• the citation names every live-input history fact allowed to change this claimed result, and unlisted live input is excluded
• a missing citation or a citation with another meaning is a defect this test fails by construction

Diagnostics

• Instance-declaration-record

shared-conditions-section-covers-every-citing-claim

Applies for every adoption

This declaration check reads the adoption and the cited prose at Row.conditions, not the running game. A section cited by more than one claim states the conditions for every citing claim by name; a shared section covering only some citing claims is a defect this test fails by construction. Where no other claim cites the section, this check asserts nothing.

Given

the Instance adoption and the cited prose at Row.conditions, not the running game

When

• a reviewer checks every reproduction claim that cites the same conditions section

Then

• where the section at Row.conditions is also cited by another claim in this adoption, it states the conditions for each citing claim by name
• where no other claim cites it, this check asserts nothing
• any shared section that covers only some citing claims is a defect this test fails by construction

Diagnostics

• Instance-declaration-record

position-gap-unit-matches-cited-space

Applies when row matching standard is Allowed position gap.

This declaration check reads the adoption and the cited prose at Row.reproduces and Value cite allowed position gap, not the running game. The cited space names a position unit, and the adoption's gap value, whether a number or a cited rule, is one distance in that unit. Any other pairing is a defect this test fails by construction.

Given

the Instance adoption and the cited prose at Row.reproduces and Value cite allowed position gap, not the running game

When

• a reviewer compares the cited position space with the adoption's allowed gap value

Then

• the space cited at Row.reproduces names a position unit, and the adoption's gap value at Value cite allowed position gap, whether a number or a cited rule, is one distance in that unit
• any other pairing is a defect this test fails by construction

Diagnostics

• Instance-declaration-record

replay-holds

Applies for every adoption

Across Inputs scope, every playback enters the mechanism's stages in order, leaves them only at a terminal result, and never revisits an earlier stage. References never come from live play; rejected or diverged playback consumes no forbidden input; each terminal result is exactly diverged, rejected, or complete. The pack's default audit seeds apply unless the adoption supplies its own.

Holds

every playback entered the mechanism's numbered stages in order, left them only at a terminal result, and never revisited an earlier stage; no comparison read a comparison reference from live play; no rejected or diverged playback consumed an input that its selected response or rejection forbade it to consume; every terminal playback result was exactly one of diverged, rejected, or complete

Seeds

Inputs seeds

Scope

Inputs scope

Diagnostics

• Instance-recording-trace
• Instance-identity-check-trace
• Instance-reference-source
• Instance-comparison-log
• Instance-input-log-trace
• Instance-playback-result
• Instance-first-ordering-violation