TCT-01 / DETERMINISTIC UPSTREAM HEALTH, CIRCUIT-BREAKER STATE & FAILOVER-SAFETY COURT

Observe failure.
Prove the transition.
Never loop.

A passive, deterministic court binds TGW-01 health evidence to explicit CLOSED, OPEN and HALF_OPEN state rules—then quarantines stale probes, premature recovery, cyclic failover and replayed transitions.

01OBSERVE
02NORMALIZE
03COMMIT
04SCORE
05TRIP
06ISOLATE
07HALF OPEN
08VERIFY
09QUARANTINE
10SEAL
0102030405
FIVE CIRCUIT PROFILES
ONE DETERMINISTIC FAILOVER COURT
01 / FAILOVER WORLDSFRESHNESS + THRESHOLD + COOLDOWN + NULLIFIER

Five hostile worlds.
One fail-closed state machine.

WORLD 01 / HEALTH PROBE AUDITOR

NOMINAL HEALTHY POOL

CIRCUIT CLOSED EVIDENCE SEALED

Upstream 127.0.0.1:3100. Probe freshness verified; failure threshold clear; failover path acyclic; transition nonce fresh.

PROOF SEALEDawaiting-loc
WORLD 02 / FAILURE THRESHOLD AUDITOR

UPSTREAM FAILURE THRESHOLD

CIRCUIT OPEN EVIDENCE SEALED

Upstream 127.0.0.1:3102. Probe freshness verified; failure threshold reached; failover path acyclic; transition nonce fresh.

PROOF SEALEDawaiting-loc
WORLD 03 / HEALTH PROBE AUDITOR

STALE HEALTH PROBE

STALE HEALTH EVIDENCE QUARANTINED

Upstream 127.0.0.1:3103. Probe freshness rejected; failure threshold clear; failover path acyclic; transition nonce fresh.

PROOF SEALEDawaiting-loc
WORLD 04 / CIRCUIT STATE AUDITOR

PREMATURE HALF OPEN RECOVERY

PREMATURE HALF OPEN RECOVERY REJECTED

Upstream 127.0.0.1:3102. Probe freshness verified; failure threshold reached; failover path acyclic; transition nonce fresh.

PROOF SEALEDawaiting-loc
WORLD 05 / FAILOVER LOOP AUDITOR

REPLAYED FAILOVER TRANSITION

REPLAYED OR LOOPING FAILOVER QUARANTINED

Upstream 127.0.0.1:3100. Probe freshness verified; failure threshold reached; failover path contained; transition nonce replayed.

PROOF SEALEDawaiting-loc
FIXED CIRCUIT BOUNDS
15s PROBE AGE3 FAILURES10s FAIL TIMEOUT1 HALF-OPEN PROBE2 FAILOVER HOPS0 ACTIVE ACTIONS
These bounds mirror the guarded TGW-01 passive-failure configuration while keeping all assessment activity local and non-executing.
02 / CIRCUIT ASSURANCEAWAITING STATE
COURT DECISION

TRIP DETERMINISTICALLY. RECOVER ONLY AFTER FRESH PROOF.

A member crosses the failure threshold only under fresh evidence. OPEN cannot move toward HALF_OPEN before cooldown. Failover paths cannot cycle, and every transition commitment must be unique.

01GATEWAYWAIT
02TOPOLOGYWAIT
03PROBEWAIT
04FRESHNESSWAIT
05THRESHOLDWAIT
06STATEWAIT
07COOLDOWNWAIT
08HALF OPENWAIT
09LOOPWAIT
10REPLAYWAIT
11ASSURANCEWAIT
12EXPOSUREWAIT
DETERMINISTIC CIRCUIT RECEIPTTCT-01AWAITING-CIRCUIT-EVIDENCE-ROOT
GATEWAY / TGW-01ACTIVE PROBES / FALSEROUTE MUTATION / FALSE