// Execution authority is distinct from assignment and from SDK state/progress.
CONTRACT ForgeAgentExecution {
  ENFORCEMENT_MODE: enforced
  CONTEXT {
    ENTITIES AgentExecutionRequest {
      operation: string
      repository_matches_main: bool
      requester_is_owner: bool
      requester_is_trusted_runtime: bool
      target_exists: bool
      revision_matches: bool
      configuration_pins_valid: bool
      plan_pins_valid: bool
      source_verified: bool
      policy_pin_matches: bool
      dependencies_verified: bool
      typed_handoffs_verified: bool
      human_gate_verified: bool
      runtime_identity_matches: bool
      operation_identity_matches: bool
      attempt_matches: bool
      lease_current: bool
      evidence_verified: bool
      provider_configured: bool
      included_headroom_verified: bool
      overlapping_locks: int
      active_run_count: int
      concurrency_limit: int
      steps_used: int
      step_limit: int
      tokens_used: int
      token_limit: int
      spend_microusd: int
      effect_hash: string
    }
  }
  TRIGGER { execute_agents() }
  GUARANTEE {
    ENSURE execute_agents() WHEN AgentExecutionRequest.repository_matches_main == true [SOURCE:execution_repository]
  }
  PROHIBITION {
    FORBID execute_agents WHEN AgentExecutionRequest.operation != "start_run" AND AgentExecutionRequest.operation != "reserve_node" AND AgentExecutionRequest.operation != "complete_node" AND AgentExecutionRequest.operation != "fail_node" AND AgentExecutionRequest.operation != "human_gate" AND AgentExecutionRequest.operation != "control_run" AND AgentExecutionRequest.operation != "reconcile_run" AND AgentExecutionRequest.operation != "accept_run" [SOURCE:execution_operation]
    FORBID execute_agents WHEN AgentExecutionRequest.requester_is_owner == false AND AgentExecutionRequest.requester_is_trusted_runtime == false [SOURCE:execution_authority]
    FORBID execute_agents WHEN (AgentExecutionRequest.operation == "start_run" OR AgentExecutionRequest.operation == "human_gate" OR AgentExecutionRequest.operation == "control_run") AND AgentExecutionRequest.requester_is_owner == false [SOURCE:execution_owner]
    FORBID execute_agents WHEN (AgentExecutionRequest.operation == "reserve_node" OR AgentExecutionRequest.operation == "complete_node" OR AgentExecutionRequest.operation == "fail_node" OR AgentExecutionRequest.operation == "reconcile_run") AND AgentExecutionRequest.requester_is_trusted_runtime == false [SOURCE:execution_runtime]
    FORBID execute_agents WHEN AgentExecutionRequest.operation != "start_run" AND AgentExecutionRequest.target_exists == false [SOURCE:execution_existing_run]
    FORBID execute_agents WHEN AgentExecutionRequest.operation == "start_run" AND AgentExecutionRequest.target_exists == true [SOURCE:execution_duplicate]
    FORBID execute_agents WHEN AgentExecutionRequest.revision_matches == false [SOURCE:execution_revision]
    FORBID execute_agents WHEN AgentExecutionRequest.configuration_pins_valid == false [SOURCE:execution_configuration_pins]
    FORBID execute_agents WHEN AgentExecutionRequest.plan_pins_valid == false [SOURCE:execution_plan_pins]
    FORBID execute_agents WHEN AgentExecutionRequest.source_verified == false [SOURCE:execution_source]
    FORBID execute_agents WHEN AgentExecutionRequest.policy_pin_matches == false [SOURCE:execution_policy_pin]
    FORBID execute_agents WHEN AgentExecutionRequest.dependencies_verified == false [SOURCE:execution_dependencies]
    FORBID execute_agents WHEN AgentExecutionRequest.typed_handoffs_verified == false [SOURCE:execution_handoffs]
    FORBID execute_agents WHEN AgentExecutionRequest.human_gate_verified == false [SOURCE:execution_human_gate]
    FORBID execute_agents WHEN AgentExecutionRequest.requester_is_trusted_runtime == true AND AgentExecutionRequest.runtime_identity_matches == false [SOURCE:execution_runtime_identity]
    FORBID execute_agents WHEN AgentExecutionRequest.requester_is_trusted_runtime == true AND AgentExecutionRequest.operation_identity_matches == false [SOURCE:execution_operation_identity]
    FORBID execute_agents WHEN AgentExecutionRequest.attempt_matches == false [SOURCE:execution_attempt]
    FORBID execute_agents WHEN AgentExecutionRequest.requester_is_trusted_runtime == true AND AgentExecutionRequest.lease_current == false [SOURCE:execution_lease]
    FORBID execute_agents WHEN (AgentExecutionRequest.operation == "complete_node" OR AgentExecutionRequest.operation == "accept_run") AND AgentExecutionRequest.evidence_verified == false [SOURCE:execution_evidence]
    FORBID execute_agents WHEN (AgentExecutionRequest.operation == "start_run" OR AgentExecutionRequest.operation == "reserve_node") AND AgentExecutionRequest.provider_configured == false [SOURCE:execution_provider]
    FORBID execute_agents WHEN (AgentExecutionRequest.operation == "start_run" OR AgentExecutionRequest.operation == "reserve_node") AND AgentExecutionRequest.overlapping_locks > 0 [SOURCE:execution_overlap]
    FORBID execute_agents WHEN AgentExecutionRequest.active_run_count >= AgentExecutionRequest.concurrency_limit AND AgentExecutionRequest.operation == "start_run" [SOURCE:execution_concurrency]
    FORBID execute_agents WHEN AgentExecutionRequest.steps_used > AgentExecutionRequest.step_limit [SOURCE:execution_steps]
    FORBID execute_agents WHEN AgentExecutionRequest.tokens_used > AgentExecutionRequest.token_limit [SOURCE:execution_tokens]
  }
  OBSERVABILITY { LOG "ForgeAgentExecution evaluated" ON decision }
}