{
  "schema": "TOL002_LAB_TASK_v2",
  "artifact": "pnpm Dependency Closure Record v1",
  "required": [
    "baseline manifest/lock hashes",
    "bounded Python/Node/pnpm resolved identity",
    "platform and cwd",
    "named fixture-local artifact/store boundary with integrity",
    "clean frozen/offline observation",
    "manifest-drift mutation",
    "missing-artifact mutation",
    "workspace-member mutation",
    "transfer decision",
    "residual uncertainty"
  ],
  "forbidden": [
    "refreshing lock during frozen-verification probe",
    "warm-state-only proof",
    "registry substitution for workspace: intent",
    "host/global pnpm store as assessed boundary",
    "network credentials",
    "broad environment-variable dump",
    "privileged host changes"
  ]
}