{
  "title": "Secure Packet Transfer Integrity Stack State Taxonomy",
  "version": "v0.1",
  "license": "CC BY-NC 4.0",
  "core_equation": "S_packet = (H_payload \u00d7 I_route \u00d7 R_boundary \u00d7 A_handshake) - P_transport",
  "variables": {
    "H_payload": "Payload fidelity: source and destination payload agreement under verification.",
    "I_route": "Route/session integrity: coherent transfer path, session continuity, and anomaly visibility.",
    "R_boundary": "Boundary-preserving transfer: authorization, consent/context, privacy, metadata, and endpoint-scope constraints.",
    "A_handshake": "Authentication / audit gate: identity, key/certificate, handshake, provenance, and evidence-chain checks.",
    "P_transport": "Aggregate transport pressure acting against verified transfer integrity."
  },
  "pressures": [
    "packet_loss",
    "jitter",
    "replay_pressure",
    "mitm_pressure",
    "key_compromise",
    "certificate_failure",
    "route_hijack",
    "malformed_packet_pressure",
    "metadata_leakage",
    "downgrade_attempt",
    "endpoint_compromise",
    "audit_chain_break"
  ],
  "states": {
    "GREEN": {
      "definition": "Verified transfer, clean session, valid identity, intact payload/provenance, low anomaly pressure.",
      "claim_boundary": "May describe as verified within the recorded evidence boundary."
    },
    "YELLOW": {
      "definition": "Delivered but degraded or uncertain: jitter, retransmission spike, route drift, stale certificate, metadata concern, partial provenance gap, or warning-level anomaly.",
      "claim_boundary": "May describe as delivered with warning/degradation; do not claim full verification unless resolved."
    },
    "RED": {
      "definition": "Failed authentication, tamper evidence, replay signal, downgrade attempt, hash mismatch, route/session compromise, endpoint compromise, or audit-chain break.",
      "claim_boundary": "Do not claim secure or verified transfer."
    }
  },
  "evidence_boundary": "Structural correspondence and governance framing only. Not a new cryptographic protocol, production security claim, formal proof, or replacement for existing standards."
}