{
  "when": "Before selected supported content enters the intended workflow",
  "input": "Canonical HTTPS URL plus actual purpose/context and bounded budget",
  "unknown": "Hold; do not treat as permission",
  "purchase": "Quote -> private claim -> signed offer -> buyer-authorized x402 exact -> verified report",
  "verification": "Pinned Ed25519 offer/report/receipt/delivery binding via reviewed buyer client",
  "retry": "Resume same durable checkpoint",
  "duplicatePrevention": "One logical ID, local lock, checkpoint before submission, same authorization on retry"
}