The compiled code a registry command needs from the blueprint.

A state token as the command line spells it, POLICY.NAME, each part in hex: a 28-byte policy and a 32-byte name. Any other shape is refused before any provider is asked.

The POLICY.NAME spelling of a state token.

The six scripts a registry runs, by the role their reference plays.

A role as receipts spell it.

A role from its receipt spelling.

The script hash each role must carry, derived from the release, the application pin and the token alone. The state hash is the release's state script; every other role is the release's script for it applied to the registry identity, state policy then token name. A pin read from state arrives as PinByHash of the datum's pin: resolveRegistry reads the datum first. A hash pin publishes no application reference (slice 2: its script bytes do not exist), so it omits that role; a script or compiled pin lists it as today.

A registry exists only once every identity check has passed.

The datum policy a registry pins, in the order they are compared.

Why a state token is not a registry of this release, in checking order.

Resolve a state token into a registry, refusing by name in the checking order. No file is read. The application pin is compared with the state datum only for a script pin; a pin read from state is taken from the datum, and the three witness pins are compared as always.

The output that holds the token at the state address of the token's policy, with its state datum. The provider's answer to who holds the token is unverified: each listed output is admitted only if its own value holds the token. A command reads the state again through this after it has resolved the registry, since every transition moves the state output.

The refusal's name, then what it found.

Why a command cannot run the scripts it needs.

Whether the output carries a reference script whose hash, computed here from the script itself, is the expected one.

Find a carrier for each needed role: from the provider's existence query, then the actor's wallet, read only when the provider carries none of some role. A carrier is admitted only by carriesReference; among the admitted carriers of the first source that has any, the lowest output reference is chosen. A command that runs no reference script reads nothing.

The refusal, with the remedy.