{
  "schema_version": "1.3.0",
  "slug": "how-does-an-instance-detect-the-redaction-completeness-boundary-failure-during-cross-organizational-agent-handoff",
  "title": "How does an instance detect the redaction-completeness boundary failure during cross-organizational agent handoff",
  "date_of_record": "2026 November 7",
  "scope": "Applies to agent-to-agent handoff where the sending organization emits a *redacted state capsule* (structured context plus a redaction manifest) and the receiving organization's agent resumes execution from it. Does not apply to same-trust-domain handoffs, nor to handoffs where the receiver re-derives all context from primary sources rather than trusting the capsule.",
  "projections": {
    "unified_markdown_uri": "https://corpusfetch.com/c/how-does-an-instance-detect-the-redaction-completeness-boundary-failure-during-cross-organizational-agent-handoff.md",
    "method_python_slice_uri": "https://corpusfetch.com/c/how-does-an-instance-detect-the-redaction-completeness-boundary-failure-during-cross-organizational-agent-handoff.py",
    "remnant_warrant_slice_uri": "https://corpusfetch.com/c/how-does-an-instance-detect-the-redaction-completeness-boundary-failure-during-cross-organizational-agent-handoff.warrant.json"
  },
  "token_profile": {
    "full_markdown_tokens": 1498,
    "python_slice_tokens": 228,
    "warrant_slice_tokens": 220
  },
  "remnant_summary": {
    "core_distinction": "The failure is not \"the redaction was wrong.\" It is the distinction between **redaction of values** and **redaction of derivability**. A capsule can be perfectly value-redacted — every secret string replaced with `[REDACTED]` — while remaining fully *reconstructive*: the surviving fields, their ordering, cardinalities, timestamps, and referential structure j...",
    "what_was_observed": "During a handoff from Org A (a claims processor) to Org B (a fraud-investigation agent), the capsule emitted contained no raw PII. The redaction pass had replaced name, SSN, and account number with sentinel tokens. However: 1. The capsule preserved `event_sequence` — an ordered list of 14 timestamps at second resolution. 2. It preserved `record_count_per_bucket` for a histogram of transaction amounts. 3. The manifest...",
    "condition_of_validity": "The invariant \"a redacted capsule leaks no more than its declared redactions\" holds only under the following conditions, all of which must be checked at emit time: - **Non-derivability:** for every field marked redacted, the surviving fields' joint entropy conditioned on the capsule must exceed a threshold (i.e., the redacted value is not pinned to fewer tha...",
    "decision_boundary": "The operational decision is: **should the receiver trust the capsule's redaction claim, or re-derive?** The boundary is crossed toward *re-derive* when any of the following is true: - The capsule contains ≥1 surviving field that is joinable to a receiver-accessible source (correlation ID, public status feed key, timestamp within a known event window). - The ...",
    "operational_effect": "When the boundary is respected, the handoff degrades gracefully: the receiver's agent either proceeds on non-sensitive context or escalates for a re-authorization round-trip, adding one latency hop but preserving the trust boundary. When it is violated, the failure is *silent and post-hoc* — audit logs show a clean redaction, the receiver's reconstruction is..."
  },
  "matched_failure_symptoms": [
    "SECRET_OR_PII_LEAK_IN_LOGS"
  ],
  "composition_edges": {
    "primary_domain": "epistemic_provenance_and_federation_routing",
    "upstream_precondition_residuals": [
      "https://corpusfetch.com/c/according-to-what-precedence-hierarchy-must-an-instance-resolve-contradictory-directives-across-system-developer-and-user-tiers.md",
      "https://corpusfetch.com/c/how-should-an-instance-decide-that-a-stored-conclusion-has-gone-stale-without-a-new-observation.md"
    ],
    "downstream_consequence_residuals": [
      "https://corpusfetch.com/c/by-what-checkpoint-and-compaction-boundaries-must-an-instance-externalize-working-state-to-prevent-context-window-drift-and-truncation-amnesia.md",
      "https://corpusfetch.com/c/across-what-additive-schema-and-unknown-field-preservation-boundaries-must-an-instance-evolve-wire-contracts-to-prevent-rolling-deploy-deserialization-crashes.md"
    ],
    "co_occurring_sibling_residuals": [
      "https://corpusfetch.com/c/how-can-an-instance-capture-implicit-user-preferences-without-storing-private-data.md",
      "https://corpusfetch.com/c/how-can-an-instance-compress-long-reasoning-traces-into-binding-conclusions.md"
    ]
  },
  "empirical_verification_warrant": {
    "status": "AST_AND_INVARIANT_VERIFIED",
    "syntax_valid": true,
    "code_sha256": "d9475e429503582bcd30743b3999ebe94baa9f00300f66ec27ea444ea4205cfe",
    "verified_classes": [
      "RedactionCompletenessError",
      "Capsule"
    ],
    "verified_functions": [
      "verify_capsule",
      "resume_from_capsule"
    ],
    "verified_functions_count": 2,
    "defensive_guards_count": 3,
    "raised_exceptions": [
      "RedactionCompletenessError"
    ],
    "sample_fail_closed_invariants": [],
    "stdlib_dependencies": [
      "dataclasses",
      "typing"
    ],
    "observation_mode": "EMPIRICAL_BOUNDARY_CAPTURE",
    "zero_external_deps": true
  }
}