{
  "schema_id": "uquad/public-chain-surface-boundaries/v1",
  "updated": "2026-05-18",
  "public_rule": "The public roof can link the stack, but each chain remains its own economy. Links describe dependency or evidence flow, not command authority.",
  "evidence_classes": [
    "static_page",
    "public_subdomain",
    "local_runtime",
    "live_chain",
    "live_cross_chain_ack"
  ],
  "shared_boundaries": [
    "no_chain_commands_another_chain",
    "no_transit_as_admission",
    "no_receipt_as_truth",
    "no_liquidity_as_worth",
    "no_testnet_as_mainnet_value",
    "no_public_page_as_operator_authority"
  ],
  "surfaces": [
    {
      "surface_id": "core",
      "public_name": "QUAD Core",
      "public_url": "https://core.uquad.org/",
      "local_page": "ops/public-testnet/index.html",
      "role": "economic chain and admitted-value accounting surface",
      "current_posture": "public testnet observatory",
      "stats_source": "core indexer and Core RPC proxy",
      "public_safe_next_state": "freeze-candidate evidence only after rebuild, clean-home boot, indexer, and post-reset checks pass",
      "dependency_language": "Core may read Bridge, Infra, and Liquid evidence, but their evidence cannot force Core admission or Core action.",
      "may_command_other_chains": false,
      "may_inherit_other_chain_authority": false,
      "may_claim_mainnet_value": false,
      "must_not_claim": [
        "Infra receipt as Core truth",
        "Bridge transit as Core admission",
        "Liquid motion as Core custody",
        "testnet balances as mainnet value"
      ]
    },
    {
      "surface_id": "infra",
      "public_name": "Infra",
      "public_url": "https://infra.uquad.org/",
      "roof_page": "../website/website/infra.html",
      "role": "verifiable storage, receipt memory, query, retrieval, and paid work evidence surface",
      "current_posture": "testnet/product evidence surface; not Core truth",
      "stats_source": "Infra subdomain and Infra-owned query surfaces",
      "public_safe_next_state": "live receipt, storage, payment, and cross-chain acknowledgement evidence by Infra lane",
      "dependency_language": "Infra stores and proves evidence for other chains without becoming their execution, reserve, mint, route, or admission authority.",
      "may_command_other_chains": false,
      "may_inherit_other_chain_authority": false,
      "may_claim_mainnet_value": false,
      "must_not_claim": [
        "Core block telemetry as Infra telemetry",
        "Core truth as local Infra truth",
        "receipt memory as universal admission",
        "storage proof as money movement"
      ]
    },
    {
      "surface_id": "bridge",
      "public_name": "Bridge",
      "public_url": "https://bridge.uquad.org/",
      "roof_page": "../website/website/bridge.html",
      "role": "bounded cross-boundary movement, native acquisition, host-vault evidence, and route-output classification surface",
      "current_posture": "pre-testnet product runtime active; public value movement closed",
      "stats_source": "Bridge subdomain and Bridge-owned receipt surfaces",
      "public_safe_next_state": "lane-specific live packet, host proof, receipt, and destination handoff evidence",
      "dependency_language": "Bridge can prove passage and acquisition posture, but it cannot force Core admission, Liquid settlement, Infra truth, or destination accounting.",
      "may_command_other_chains": false,
      "may_inherit_other_chain_authority": false,
      "may_claim_mainnet_value": false,
      "must_not_claim": [
        "destination admission",
        "autonomous sell or wrapper mint",
        "production native-vault activation",
        "host-chain finality without lane proof"
      ]
    },
    {
      "surface_id": "liquid",
      "public_name": "Liquid",
      "public_url": "https://liquid.uquad.org/",
      "roof_page": "../website/website/liquid.html",
      "role": "fast movement, quote, position, exposure, settlement, unwind, and receipt surface",
      "current_posture": "pre-SDK app-shell and runtime desk logic; public market activity closed",
      "stats_source": "Liquid subdomain and Liquid-owned settlement/exposure surfaces",
      "public_safe_next_state": "live route, settlement, failed-route, and exposure evidence by Liquid lane",
      "dependency_language": "Liquid can consume Bridge and Infra evidence only after local classification, settlement, refusal, and exposure law accept it.",
      "may_command_other_chains": false,
      "may_inherit_other_chain_authority": false,
      "may_claim_mainnet_value": false,
      "must_not_claim": [
        "Core custody",
        "production trading desk operation",
        "market liquidity",
        "final balances from Engine output alone"
      ]
    }
  ]
}