No network
Zero sockets or cloud metadata requests.
The harness reads only explicit temporary fixtures, writes one atomic content-free report below the same explicit root, and can cancel or roll it back.
Capability-manifest and authorization digests bind a deterministic plan. Exact allowlisted paths are checked for containment, symlinks, hardlinks, duplicates and resource ceilings. Every boundary has an injected failure case.
Zero sockets or cloud metadata requests.
Zero subprocesses or shell commands.
Zero drivers, connections or SQL.
No environment, home, sibling or implicit credential search.
Temporary content-free output is replaced only inside the explicit root.
Digest-bound local output is deleted; external claims remain false.
In-memory/temporary fixture rehearsal with deterministic receipts.
MySQL, MATM, cPanel, deployment, dogfood or any external mutation.
REHEARSAL_ONLY_NO_EXTERNAL_MUTATION
Refusal, timeout, conflict, cancellation, rollback, expiry, revocation, correction, and unavailable evidence have participant-evaluation and standing effects NONE.
NO JUDGMENT WHATSOEVER. A technical condition is not a moral condition.