{
  "module": "CAINMCPGateAuthorization",
  "spec_sha256": "6a53f85d2ce4d0ac749d556cf0932dee99dbf429b27797285c0e69feb7415fbb",
  "checked_at": "2026-09-27T03:03:58.677604+00:00",
  "tool": "TLC (tla2tools.jar)",
  "classification": "MACHINE-CHECKED bounded model (exhaustive within bounds); NOT a proof about the Python gate",
  "bounds": "N=4, f<=1, Q=3, 2 proposals, 2 ids, 2 actions, 2 actors, 2 contexts, time 0..2",
  "verdict": "VALID",
  "runs": [
    {
      "run": "gate_byzantine_member_n4",
      "Byz": "{\"n4\"}",
      "Thresh": 3,
      "check_removed": null,
      "expected": "no error",
      "as_expected": true,
      "completed": true,
      "no_error": true,
      "violated": [],
      "states_generated": 4048953,
      "distinct_states": 553996,
      "depth": 17,
      "tlc_error": null
    },
    {
      "run": "gate_no_byzantine",
      "Byz": "{}",
      "Thresh": 3,
      "check_removed": null,
      "expected": "no error",
      "as_expected": true,
      "completed": true,
      "no_error": true,
      "violated": [],
      "states_generated": 12916185,
      "distinct_states": 1591308,
      "depth": 19,
      "tlc_error": null
    },
    {
      "run": "mutant_weak_quorum_threshold_2",
      "Byz": "{\"n4\"}",
      "Thresh": 2,
      "check_removed": null,
      "expected": "NoExecWithoutQuorum VIOLATED",
      "as_expected": true,
      "completed": false,
      "no_error": false,
      "violated": [
        "NoExecWithoutQuorum"
      ],
      "states_generated": 1117,
      "distinct_states": 638,
      "depth": 4,
      "tlc_error": null
    },
    {
      "run": "mutant_no_expiry_check",
      "Byz": "{\"n4\"}",
      "Thresh": 3,
      "check_removed": "SkipExpiry",
      "expected": "NotExpired VIOLATED",
      "as_expected": true,
      "completed": false,
      "no_error": false,
      "violated": [
        "NotExpired"
      ],
      "states_generated": 50099,
      "distinct_states": 15180,
      "depth": 6,
      "tlc_error": null
    },
    {
      "run": "mutant_no_action_binding",
      "Byz": "{\"n4\"}",
      "Thresh": 3,
      "check_removed": "SkipAction",
      "expected": "ActionBinding VIOLATED",
      "as_expected": true,
      "completed": false,
      "no_error": false,
      "violated": [
        "ActionBinding"
      ],
      "states_generated": 9905,
      "distinct_states": 3905,
      "depth": 5,
      "tlc_error": null
    },
    {
      "run": "mutant_no_identity_binding",
      "Byz": "{\"n4\"}",
      "Thresh": 3,
      "check_removed": "SkipIdentity",
      "expected": "IdentityBinding VIOLATED",
      "as_expected": true,
      "completed": false,
      "no_error": false,
      "violated": [
        "IdentityBinding"
      ],
      "states_generated": 9905,
      "distinct_states": 3905,
      "depth": 5,
      "tlc_error": null
    },
    {
      "run": "mutant_no_context_continuity",
      "Byz": "{\"n4\"}",
      "Thresh": 3,
      "check_removed": "SkipContext",
      "expected": "ContextBinding VIOLATED",
      "as_expected": true,
      "completed": false,
      "no_error": false,
      "violated": [
        "ContextBinding"
      ],
      "states_generated": 13627,
      "distinct_states": 5144,
      "depth": 5,
      "tlc_error": null
    },
    {
      "run": "mutant_no_single_use",
      "Byz": "{\"n4\"}",
      "Thresh": 3,
      "check_removed": "SkipReplay",
      "expected": "SingleUse VIOLATED",
      "as_expected": true,
      "completed": false,
      "no_error": false,
      "violated": [
        "SingleUse"
      ],
      "states_generated": 187269,
      "distinct_states": 44990,
      "depth": 7,
      "tlc_error": null
    }
  ],
  "reproduce": "python3 scripts/formal/run_tlc_authz.py"
}