{
  "decision": "Approved: terminal-state and current authority checks correctly cover ordinary rifle transfers after synchronous native submission.",
  "source_sha256": "99fa26beb0c0869d0cd694500f3bfc0705c2c1cf674dea90d98fb93a59570ef7",
  "test_sha256": "0d2ebe4d5c18a4187745784013d07df621b8495967d0c01f39bd5a68ae574d26",
  "patch_sha256": "6b35a464a3411feff535995fd4c7ac4694f7b1b212b364b1395062ee6b0dc667",
  "tests": {
    "baseline": {
      "exit": 1,
      "compiled_runtime_assertion": true
    },
    "proposal": {
      "exit": 0,
      "compiled_runtime_assertion": false
    },
    "capture-mutation": {
      "exit": 1,
      "compiled_runtime_assertion": true
    }
  },
  "reviewed_invariants": [
    "Stop remains irreversible when the exact physical item arrives inline; success cannot overwrite FAILED.",
    "Captured donor, inactive mission and changed recipient ownership cannot qualify delivery after native call.",
    "Actual coordinator counts zero deliveries for cancelled transfer while retaining one spent identity and one native submission.",
    "Accepted unresolved move remains observable after Stop; delayed exact physical arrival settles uncertainty without resurrecting success.",
    "Launcher behavior, native rejection policy, stock/refund/retry policy unchanged."
  ],
  "limits": [
    "Native inventory boundary is modeled; no physical transfer or multiplayer qualification claimed."
  ],
  "target_or_native_changes": false
}