Invariants / CN-STORE-02

CN-STORE-02

CN true partial

WAL entries, checkpoints, and recovered artifacts must be bound to exactly one anchor or bootstrap lineage

Source: classification_table.md §I

Enforcement trace

Code

crates/ade_node/src/node_lifecycle.rs

Tests 3

warm_start_fails_closed_on_multiple_anchor_lineages
warm_start_fails_closed_on_anchor_mismatch
warm_start_fails_closed_on_duplicate_provenance

CI 0

no CI script — gap

Cross-references

Strengthened in

Attack rationale

Prevents replay across incompatible histories.

Evidence notes

Universal: replay equivalence requires all persisted state traceable to a single authority chain. PHASE4-N-F-C (2026-05-31, L3) provides the first real enforcement of the RECOVERED-ARTIFACT clause: the --mode node warm-start discovers the seed-epoch anchor lineage and FAILS CLOSED when more than one anchor lineage is present (warm_start_fails_closed_on_multiple_anchor_lineages), when the provenance anchor mismatches (warm_start_fails_closed_on_anchor_mismatch), or on duplicate provenance. Status is PARTIAL not enforced: the rule's WAL-entry + checkpoint binding clauses are not yet comprehensively gated by a dedicated CI check — only the recovered-artifact anchor-lineage side is mechanically proven here.