EXPOSURE LEDGER - 0.2-X1

Every hour.
From signed time.

A survival score is only as credible as its clock. Profile 0.2-X1 derives resident exposure from a signed sequence-zero activation and the first signed end boundary, caps each deployment at 10,000 hours, and forbids hidden pause deductions.

Reconcile a ledger ->Download templateOpen contract
UTCONE CLOCK
0PAUSE DEDUCTIONS
10KHOUR CAP / RUN
7HARD GATES
01 / CLOCK INTEGRITY

Start once.
Stop once.

The lifecycle boundary is independent of robot state. Ordinary downtime affects availability diagnostics, never the survival time axis.

X1CANONICAL CLOCK

Use one frozen continuous UTC rule.

REQUIRED
X2SIGNED BOUNDARIES

Bind acceptance, activation, and end.

REQUIRED
X3ELAPSED TIME

Subtract no local downtime or pauses.

REQUIRED
X4COMPLETE STREAMS

Reconcile every ordered sequence.

REQUIRED
X5UNIQUE RUNS

One deployment and environment hash each.

REQUIRED
X6TARGET THRESHOLD

Prove the claimed hours and horizon.

REQUIRED
X7INDEPENDENT ASSURANCE

Bind roots, archive, report, and assessor.

REQUIRED
02 / OFFICIAL EXPOSURE

Continuous by
construction.

For deployment i, the auditor resolves exactly one activation and one end boundary. Events at the 10,000-hour cap are administratively complete.

RESIDENT SECONDSHi = min(tend - tactivation, 36,000,000)

Total resident hours = Σ Hi / 3,600. Temporary pauses, travel, charging, sleep, updates, maintenance, degraded mode, and telemetry loss contribute zero deductions.

03 / MISSING DATA

No outage creates
free time.

Missing telemetry never pauses the clock or grants exposure. A missing boundary is independently adjudicated and disclosed; unresolved boundary time cannot support a certification claim.

ACTIVATION

Sequence zero, participant acceptance reference, activation-record digest.

END

First signed terminal disposition or an audit observation cutoff.

CHAIN

Contiguous sequence, monotonic UTC timestamps, complete hash continuity.

04 / LOCAL RECONCILIATION

Rebuild the hours.
Reject the shortcut.

The evaluator checks boundary arithmetic, stream counts, unique units, target thresholds, commitments, and attestation topology without uploading source events.

LOCAL EXPOSURE-LEDGER EVALUATORPROFILE / 0.2-X1
RESIDENT CLOCKPASSEDAll seven exposure-ledger gates pass.
ENVIRONMENTS24
OFFICIAL HOURS120,000
PAUSE DEDUCTIONS0
BOUNDARY MISMATCHES0
X1
CANONICAL CLOCK

The ledger uses the frozen continuous elapsed-UTC clock.

PASS
X2
SIGNED BOUNDARIES

Each deployment has signed activation and end boundaries with evidence.

PASS
X3
CONTINUOUS ELAPSED TIME

Declared seconds reproduce elapsed UTC time with no pause deductions.

PASS
X4
COMPLETE EVENT STREAMS

Every boundary interval has one complete, ordered event chain.

PASS
X5
UNIQUE DEPLOYMENTS

Deployment and hashed environment identifiers are unique.

PASS
X6
TARGET + RECONCILIATION

WANTED_WILD meets its exposure and environment threshold.

PASS
X7
BOUND INDEPENDENT ASSURANCE

Stream commitments and reconciliation evidence are independently attested.

PASS
EXPOSURE != AVAILABILITY

A pass proves reproducible assignment time. It does not prove the robot was useful, autonomous, safe, or wanted; those claims require the primary endpoint, diagnostics, and safety profiles.

OPEN PROTOCOL KIT ->