ALPHAC Foundry / design status
A research engine that is not allowed to trade.
Foundry is the bounded research system behind future ALPHAC trials. Its contracts pass local verification. Its DigitalOcean deployment does not exist yet, and none of the eleven operational receipts is attached.
This receipt verifies committed local contracts. It is not a Terraform plan, cloud inventory, deployment, network probe, database integration test or restore receipt.
The air-gap ledger
Research can publish evidence. It cannot reach execution.
The contract separates research, holdout and broker execution. The only outward path shown here is sanitized public evidence.
- 01researchd
- 02worker
- 03validator
- 04data_gateway
- 05sanitizer
- 06sentinel
- 07status_adapter
Bounded lifecycle
The identity is spent before the outcome is visible.
- Declared states
- 17 From feasibility to terminal verdict
- Allowed transitions
- 31 Every transition names its authority
- Holdout consumption
- 1 Maximum per identity
- Human gate override
- Forbidden A failed gate stays failed
A model can propose code. A human must approve outcome-bearing work. No state in the lifecycle grants broker write access.
First migration / frozen target
Start with a failure, then prove the system keeps it failed.
The first selected migration is an existing killed petroleum-inventory trial. It cannot spend another identity, use the network, reopen the result or take a second replay attempt.
Open the historical trial packet- Public trial
ft_a9ae69f6bc4a5269- Preserved state
- Killed
- Foundry replay
- Not run
- Network policy
- NONE
- Maximum attempts
- 1
- New identity spend
- Forbidden
Operational burden
Eleven receipts stand between source code and an operational claim.
Every item must bind to the same infrastructure, source commit, image digest and contract set. A partial deployment stays not operational.
- Cloud Firewall Export Missing
- Database Role Tests Missing
- Honest Public Status Missing
- Host Firewall Export Missing
- Migration Replay Sanitizer Packet Missing
- Negative Network Probe Missing
- Object Permission Tests Missing
- Redacted Secret Scope Inventory Missing
- Restore And Post Restore Replay Missing
- Reviewed Terraform Plan Missing
- State Machine Tests Missing
Machine-verifiable source
Local verification is evidence of the contracts. Nothing more.
The receipt hashes the deployment manifest, runtime contract, lifecycle, acceptance contract and migration packet. Its PASS does not convert any missing cloud receipt into evidence.
curl -sO https://canlicapital.com/glassbox/foundry_local_contract_verification.json
python3 - <<'PY'
import hashlib, json
p=json.load(open('foundry_local_contract_verification.json'))
h=p.pop('content_hash')
s=json.dumps(p,sort_keys=True,separators=(',',':')).encode('ascii')
print(h == 'sha256:' + hashlib.sha256(s).hexdigest())
PY
The next proof
The page changes only when the receipts do.
Provisioning requires a reviewed plan, a dedicated DigitalOcean principal and a separate billable apply decision. Until then, Foundry remains a verified design and an unproven deployment.