Documentation

One consumer conformance row.

A row's declared coverage plan. executed is unrepresentable here by construction: only a run receipt can establish it.

What list prints for a row: executed iff a receipt for it exists, matches the current base and agrees with the model; partial for a partial receipt; the verdict a receipt recorded when it is neither (a held, divergent or ruled-on run is never a pass); else the declared plan.

Total rows in rows.json: the 47 owned consumer rows (including historical-permissionless-fold, the F-002 permissionless-folder regression, register-active-key, #173's insertActive fold and its two refusal fixtures, retire-active-key, #177's updateTerminal retirement and its two refusal fixtures, reject-and-retract-refund-controls, issue #258's reject and retract with their tampered refunds, and reject-inside-processing-and-retraction-windows, issue #320's early rejection in two windows) plus checkpoint-and-treasury-policy, cardano-keri's checkpoint policy, recorded as out-of-scope so the boundary is visible instead of forgotten. The original broader retirement requirement stays present; permanent-retire-active-key is a separate requirement.

Rows Singular owns and must eventually evidence. Out-of-scope rows (checkpoint-and-treasury-policy) are carried for the boundary, never counted.

Load and validate the inventory file.

Enforce the denominator: exactly expectedRowCount rows of which exactly ownedDenominator are owned, unique ids, non-empty groups. A count over a silently shortened set is a lower bound wearing the denominator's name, so short is an error, not a smaller table.

Render the full inventory table plus the state summary. The summary counts effective states and names the owned denominator with the out-of-scope rows excluded from it.