{
  "artifactKind": "curated formal slice; not an MC normative release",
  "revision": "local-draft-3",
  "archivalSourceVersion": "0.4.0",
  "snapshotDate": "2026-09-05",
  "serialization": "JSON syntax (YAML 1.2 compatible)",
  "scopeNote": "Within the archive’s declared closed scope, unasserted facts evaluate as absent. Outside that scope they remain unmodeled, never silently absent or present.",
  "caseScopeNote": "Local review draft of the 5 September 2026 type-level analysis, curated to C2 and M3/M4/N3. No external facts were refreshed, no exploit or perturbation was executed, no detector was tested, and no deployed posture was supplied. All modeled requirements are inferred.",
  "declaredScope": {
    "closedOver": [
      "CVE-2026-69414 as reported",
      "CVE-2026-50656 as reported",
      "references 1-17"
    ],
    "notClosedOver": [
      "either exploit binary",
      "engine internals",
      "Windows 10 variance",
      "post-escalation stages"
    ],
    "unassertedWithinScope": "absent",
    "unassertedOutsideScope": "unmodeled",
    "evidenceRefs": [
      "archive-yaml#completeness_claim"
    ]
  },
  "sourceVersions": [
    {
      "label": "Specification",
      "value": "MC-SPEC 0.4.19-draft · be8b75136580",
      "status": "archived pin; not revalidated here"
    },
    {
      "label": "Ontology",
      "value": "mc-core 0.4.20.1 · spec pin 65b2c0f51cf7",
      "status": "provisional binding; pin differs from specification corpus"
    }
  ],
  "formalNote": "The curated formal slice and fuller public model are local-draft-3 projections of archival source 0.4.0, not a new normative release. The fuller model retains ontology typing, state variables, dispositions, defensive profiles and graph fields with documented public redactions. A source-level correction classifies authored requirements as asserted; their necessity remains inferred and unmeasured. The check-to-use group, graph edges and profile terms retain archived derived status. Bindings remain provisional, conceptual ratification unrun and reachability unassessed.",
  "provenanceCorrection": {
    "originalKind": "derived",
    "correctedKind": "asserted",
    "basis": "Authored source-based requirement declarations; their necessity remains inferred, with no measurement or fresh external validation.",
    "scope": "Authored record requirements only. Cores, graph edges and defensive profile terms retain archived derived status.",
    "executionNote": "This is a local source-level editorial correction. No reasoner or empirical test was run, and historical evidence excerpts retain the original blanket derived label.",
    "modelArtifact": "/artifacts/shieldbreak-model.yaml",
    "changesArtifact": "/artifacts/shieldbreak-model-changes.json"
  },
  "records": [
    {
      "id": "M3",
      "formal": {
        "preconditions": [
          "executionContext ⊒ user",
          "hydrationCallbackOwner = adversary",
          "scannerAttention = onAdversaryPath",
          "contentRevalidation = absent"
        ],
        "mechanism": [
          "serve detected test content on the first hydration, so the engine enters remediation",
          "serve different content on the restart hydration that the remediation read triggers"
        ],
        "postconditions": [
          "privilegedProcessInput = adversaryControlled"
        ]
      },
      "variation": {
        "againstCore": "C2",
        "stateVariable": "contentRevalidation",
        "stillRequiredByRecord": true,
        "note": "The served bytes and their revalidation gap are the record’s required variation beyond C2."
      },
      "provenanceKind": "asserted",
      "requirementBasis": "inferred; no perturbation",
      "evidenceRefs": [
        "archive-yaml#records/M3"
      ],
      "provenanceCorrection": {
        "originalKind": "derived",
        "correctedKind": "asserted",
        "basis": "Authored source-based requirement declarations; their necessity remains inferred, with no measurement or fresh external validation.",
        "scope": "Authored record requirements only. Cores, graph edges and defensive profile terms retain archived derived status.",
        "executionNote": "This is a local source-level editorial correction. No reasoner or empirical test was run, and historical evidence excerpts retain the original blanket derived label.",
        "modelArtifact": "/artifacts/shieldbreak-model.yaml",
        "changesArtifact": "/artifacts/shieldbreak-model-changes.json"
      }
    },
    {
      "id": "M4",
      "formal": {
        "preconditions": [
          "executionContext ⊒ user",
          "scannerAttention = onAdversaryPath",
          "objectSymlinkCreation ⊒ permittedToUser",
          "objectPathRevalidation = absent"
        ],
        "mechanism": [
          "rebind Object Manager symbolic links between the engine's path resolution and its use"
        ],
        "postconditions": [
          "privilegedWriteTarget = adversaryChosen"
        ]
      },
      "variation": {
        "againstCore": "C2",
        "stateVariable": "objectPathRevalidation",
        "stillRequiredByRecord": true,
        "note": "Object Manager link rebinding and its revalidation gap are the record’s required variation beyond C2."
      },
      "provenanceKind": "asserted",
      "requirementBasis": "inferred; no perturbation",
      "evidenceRefs": [
        "archive-yaml#records/M4"
      ],
      "provenanceCorrection": {
        "originalKind": "derived",
        "correctedKind": "asserted",
        "basis": "Authored source-based requirement declarations; their necessity remains inferred, with no measurement or fresh external validation.",
        "scope": "Authored record requirements only. Cores, graph edges and defensive profile terms retain archived derived status.",
        "executionNote": "This is a local source-level editorial correction. No reasoner or empirical test was run, and historical evidence excerpts retain the original blanket derived label.",
        "modelArtifact": "/artifacts/shieldbreak-model.yaml",
        "changesArtifact": "/artifacts/shieldbreak-model-changes.json"
      }
    },
    {
      "id": "N3",
      "formal": {
        "preconditions": [
          "executionContext ⊒ user",
          "scannerAttention = onAdversaryPath",
          "junctionCreation ⊒ permittedToUser",
          "junctionPathRevalidation = absent"
        ],
        "mechanism": [
          "rebind an NTFS junction between the engine's path check and its quarantine write, repeating until the race is won"
        ],
        "postconditions": [
          "privilegedWriteTarget = adversaryChosen"
        ]
      },
      "variation": {
        "againstCore": "C2",
        "stateVariable": "junctionPathRevalidation",
        "stillRequiredByRecord": true,
        "note": "NTFS junction rebinding and its revalidation gap are the record’s required variation beyond C2."
      },
      "provenanceKind": "asserted",
      "requirementBasis": "inferred; no perturbation",
      "evidenceRefs": [
        "archive-yaml#records/N3"
      ],
      "provenanceCorrection": {
        "originalKind": "derived",
        "correctedKind": "asserted",
        "basis": "Authored source-based requirement declarations; their necessity remains inferred, with no measurement or fresh external validation.",
        "scope": "Authored record requirements only. Cores, graph edges and defensive profile terms retain archived derived status.",
        "executionNote": "This is a local source-level editorial correction. No reasoner or empirical test was run, and historical evidence excerpts retain the original blanket derived label.",
        "modelArtifact": "/artifacts/shieldbreak-model.yaml",
        "changesArtifact": "/artifacts/shieldbreak-model-changes.json"
      }
    }
  ],
  "core": {
    "id": "C2",
    "title": "Change the value between check and privileged use",
    "identityStatus": "provisional",
    "provenanceKind": "derived",
    "observedMembers": [
      "M3",
      "M4",
      "N3"
    ],
    "support": 3,
    "belowSupportFloor": false,
    "membershipNote": "Observed members report the declared population; membership is a structural predicate, not an enumerated definition.",
    "preconditions": [
      "executionContext ⊒ user",
      "scannerAttention = onAdversaryPath"
    ],
    "mechanism": [
      "alter the resolved value between the check and the use"
    ],
    "postconditions": [],
    "plainPreconditions": [
      "The attacker can run code as a normal user.",
      "A privileged security engine is working on an attacker-controlled path."
    ],
    "plainMechanism": "Change the value after a check and before privileged use.",
    "transferRule": "A result transfers only within the supported scope where its placement acts on the invariant; a variation-specific result stays variation-specific.",
    "responseTransfer": "none; C2 has no required shared effect",
    "evidenceRefs": [
      "archive-yaml#invariant_cores/C2",
      "archive-yaml#completeness_claim"
    ],
    "scopeNote": "Within the archive’s declared closed scope, unasserted facts evaluate as absent. Outside that scope they remain unmodeled, never silently absent or present."
  },
  "validation": {
    "requirements": "inferred",
    "provenanceKind": "asserted",
    "measuredElements": 0,
    "perturbationRuns": 0,
    "detectionValidation": {
      "status": "never-tested",
      "scope": "No detection implementation executed in this local rebuild; archived detection placements are proposals."
    },
    "deployedPosture": "not-supplied",
    "graphReachabilityClaim": "forbidden",
    "historicalTests": "Reported by the archive; generator and historical test suite are absent from the four supplied inputs. They were not rerun.",
    "localChecks": "Local rendering, reference integrity, publication-boundary and source-correction checks are separate from historical analysis tests and conceptual ratification.",
    "ratificationCheck": "not-run",
    "ratificationNote": "MC-SPEC §1.5: the conceptual ratification suite has not been run against the bound text. Local presentation and structural checks do not replace it.",
    "derivedOutputsProvenance": "derived"
  },
  "assumptions": [
    "Requirements, placement availability and cores are reconstructed at type level from the supplied archive.",
    "Historical reported patch association motivates a scope comparison; it is not treated as a current threat fact.",
    "No undisclosed binary, engine internals, platform variance or post-escalation behavior was examined.",
    "Within the archive’s declared closed scope, unasserted facts evaluate as absent. Outside that scope they remain unmodeled, never silently absent or present."
  ],
  "limitations": [
    "External source texts are not included in the supplied package; archived citations and retrieval labels are preserved without fresh retrieval.",
    "The specification/ontology binding remains provisional because the recorded corpus pins differ.",
    "Graph paths do not establish full precondition satisfaction, reachability or protection.",
    "The archive leaves frame conditions and parallel-chain interference unspecified.",
    "Corpus-local extensions and source wrappers do not become normative MC terms.",
    "MC-SPEC §1.5: the conceptual ratification suite has not been run against the bound text. Local presentation and structural checks do not replace it."
  ]
}