{
  "version": "acorn.public-master-drawing.v1",
  "drawingId": "MD-EWX-001",
  "canonicalUrl": "https://eyewaxcomix.com/acorn/process/",
  "title": "Eye Wax Governed Web Surface Publication",
  "objective": "Show the public-safe process by which governed Eye Wax source is qualified, compared to the canonical host, routed only when separately authorized, and exposed as an ACORN public Surface.",
  "status": "ACTIVE_PROVING_CANDIDATE",
  "sourceDrawingRef": "MD-EWX-001",
  "authority": "PUBLIC_OBSERVATION_ONLY",
  "disclosure": "PUBLIC",
  "createsAuthority": false,
  "createsAdmission": false,
  "currentState": {
    "sourceIntegrity": "PASS",
    "surfaceCandidate": "UAT_PASS",
    "firebaseRelease": "GOVERNED_RELEASE_PROVEN",
    "canonicalHost": "HOLD_CORRESPONDENCE"
  },
  "lanes": [
    {"laneId":"EW-SRC","label":"Governed source","actorClass":"SYSTEM","authority":"SOURCE_CUSTODY"},
    {"laneId":"EW-QA","label":"Integrity / Surface qualification","actorClass":"FUNCTION","authority":"QUALIFICATION_ONLY"},
    {"laneId":"EW-FB","label":"Firebase governed deployment","actorClass":"PROVIDER","authority":"AUTHORIZED_DEPLOY_ONLY"},
    {"laneId":"EW-HOST","label":"Canonical host / routing","actorClass":"SYSTEM","authority":"SEPARATELY_GATED"},
    {"laneId":"EW-WEB","label":"Public Eye Wax Surface","actorClass":"SURFACE","authority":"PUBLIC_OBSERVATION_ONLY"},
    {"laneId":"EW-EXT","label":"Exterior crawler / visitor / agent","actorClass":"CRAWLER","authority":"NO_INSTITUTIONAL_AUTHORITY"}
  ],
  "activities": [
    {"activityId":"EW-001","laneId":"EW-SRC","label":"Preserve the current governed source baseline","type":"STATE"},
    {"activityId":"EW-002","laneId":"EW-SRC","label":"Construct the ACORN Surface candidate","type":"ACTIVITY"},
    {"activityId":"EW-003","laneId":"EW-QA","label":"Run source integrity and Surface UAT","type":"GATE","state":"PASS"},
    {"activityId":"EW-004","laneId":"EW-FB","label":"Prove governed Firebase-addressed Surface bytes","type":"ACTIVITY"},
    {"activityId":"EW-005","laneId":"EW-HOST","label":"Perform fresh canonical-host readback","type":"GATE","state":"HOLD"},
    {"activityId":"EW-006","laneId":"EW-HOST","label":"Hold routing mutation when mismatch persists","type":"HOLD"},
    {"activityId":"EW-007","laneId":"EW-HOST","label":"Authorize only the minimum routing correction when required","type":"GATE"},
    {"activityId":"EW-008","laneId":"EW-WEB","label":"Confirm canonical host corresponds to governed Surface","type":"GATE"},
    {"activityId":"EW-009","laneId":"EW-WEB","label":"Expose the Eye Wax ACORN relationship and process field","type":"ACTIVITY"},
    {"activityId":"EW-010","laneId":"EW-EXT","label":"Observe exterior reconstruction and Open Pollination ingress","type":"ACTIVITY"},
    {"activityId":"EW-011","laneId":"EW-QA","label":"Qualify live relay activation separately","type":"GATE"}
  ],
  "edges": [
    {"from":"EW-001","to":"EW-002","relation":"baseline-for"},
    {"from":"EW-002","to":"EW-003","relation":"validate-candidate"},
    {"from":"EW-003","to":"EW-004","relation":"after-green-candidate"},
    {"from":"EW-004","to":"EW-005","relation":"compare-canonical-host"},
    {"from":"EW-005","to":"EW-006","relation":"when-mismatch"},
    {"from":"EW-006","to":"EW-007","relation":"separate-routing-authorization"},
    {"from":"EW-007","to":"EW-008","relation":"post-routing-readback"},
    {"from":"EW-008","to":"EW-009","relation":"canonical-surface-established"},
    {"from":"EW-009","to":"EW-010","relation":"discoverable-by"},
    {"from":"EW-009","to":"EW-011","relation":"relay-next-layer"}
  ],
  "controls": [
    "Source integrity, Firebase deployment, and canonical-host correspondence are separate states.",
    "DNS or provider routing mutation requires separate Principal authority.",
    "Relay construction does not delay canonical site publication when source is otherwise publishable.",
    "Public interaction cannot create title rights, editorial/publication authority, Canon, financial authority, or private-context access.",
    "PR or UAT success does not establish canonical-host correspondence."
  ],
  "claimCeiling": "This is a public-safe process projection. Canonical-host correspondence and any routing action remain separately evidenced and authorized."
}