Intake
Finalize bytes/profile/custody; receipt differs from evidence readiness.
Archive ServiceFollow intake, evidence, verification, alternative renewal paths, transfer and disposition.
Finalize bytes/profile/custody; receipt differs from evidence readiness.
Archive ServiceCheck digest/token/syntax, persist revision, then emit EvidenceGenerated.
Evidence ServiceSelect revision/context; read steps/outcome rather than Job alone.
Verification ServiceAssess risk/select mode and retain predecessor/successor history.
Renewal & Crypto-AgilityRecipient checks package/scope; acknowledgement does not delete source.
Export & TransferCheck retention, all holds, authority and each target before effects.
Controlled DispositionPrior evidence and suitable hash conditions; extend timestamp protection under the profile.
Needs originals, prior evidence and read/decrypt access; new digest/tree and timestamp.
The modes are conditional alternatives, not a mandatory sequence. Missing prerequisites stop/reconcile work; do not switch modes to hide failure.
| Type | Example | Do not infer |
|---|---|---|
| ArchiveObject | RECEIVED → ACCEPTED → EVIDENCE_PENDING → EVIDENCE_READY | Do not merge all renewal/transfer states into the archive enum. |
| Job | QUEUED → RUNNING → SUCCEEDED / FAILED | SUCCEEDED does not force VALID. |
| VerificationReport | VALID / INVALID / INDETERMINATE | Report missing material under policy; never hide mismatch. |
| Export / Transfer | EXPORTED / AWAITING_ACKNOWLEDGEMENT / ACKNOWLEDGED | Export/receipt differ from responsibility acknowledgement. |
| Disposition | Scoped decision; recheck all holds before effects. | COMPLETED alone does not prove erasure of all backups. |