From Sandbox Claims to Checkable Boundary Relations
Seven receipts for policy, observation, refusal, schedule, and replay
The problem
The word sandbox often hides several different controls. Process boundaries, network egress, refusal handling, thresholds, time schedules, and forensic replay are separate relations. A single safe or unsafe label collapses those relations and makes verification weak.
The seven USAP profiles keep those questions separate. Each profile has its own required fields, element derivation, outcome rule, gate order, and claim boundary. Shared code supplies deterministic primitives only.
Primitive map
| Receipt | Bound inputs | Derived relation | Claim boundary |
|---|---|---|---|
usap.pbs | Runtime observation and declared sandbox policy | Observed runtime fits the supplied policy | Complete process monitoring |
usap.perimeter | One supplied boundary attempt and declared rule | Attempt is classified against that rule | First packet detection |
usap.egress | Supplied transfer and precommitted egress policy | Transfer matches the allowed relation | Universal network visibility |
usap.refusal | Decision and post decision observation | Observed behavior follows the refusal relation | Intent or enforcement outside the supplied record |
usap.howler | Signal, threshold, and required disposition | Threshold and disposition relations recompute | Classifier correctness |
usap.diurnal | Event time and declared schedule | Applied threshold matches the schedule | Clock integrity outside the receipt |
usap.forensic | Precommitted method and chained replay steps | Replay output equals the committed expectation | Truth of missing evidence |
Verifier gates
The verifier rebuilds derived values. It does not trust a caller supplied outcome, count, root, total, or relation.
- POLICY_PRECOMMITMENT
- OBSERVATION_ORDER
- RELATION_DERIVATION
- ELEMENT_DERIVATION
- OUTCOME_DERIVATION
Failure cases
Policy swap
A later policy cannot replace the committed policy without changing its digest.
Observation rewrite
The verifier rebuilds the typed relation from supplied observations.
Threshold inflation
The applied threshold must match the declared schedule or rule.
False favorable outcome
The verifier derives the outcome and rejects a caller supplied result.
Broken replay chain
Each forensic step must link to the prior committed state.
Claim boundary
- No receipt claims complete monitoring.
- No profile claims that a sandbox enforced every possible path.
- A perimeter receipt covers one supplied attempt, not the first packet on a network.
- A forensic replay cannot recover evidence that was never observed.
Standards context
These sources describe related transparency, authorization, or evidence patterns. They do not endorse Hive or establish that a Hive receipt was present in any third party system.