pandoraEvidence with a lifetime.
Inputs include baseline projections, authenticated observations, approved policy and inference identity. The effectful worker invokes Z3 with a bounded timeout and creates short-lived proof evidence before querying.
Separate decisions from effects.
Solver status, cache reason, proposed budgets, allowed actions and expiry remain distinct. Unknown or stale solver evidence never authorizes work. Reservations happen separately from evaluation and commit against the current revisions.
Recheck at admission.
Artifact digest and model generation bind into a receipt and are checked by mesh admission. Observation lifetimes are capped by approved policy, so a collector cannot extend its own authority.
REPOSITORY MAP
pandora-policy/README.md · pandora-policy/LOGGING.md