{
  "artifact": "HRI-HSIMC-CAPABILITY-CONTRACT-REFERENCE-C0-001-20261019",
  "status": "ILLUSTRATIVE_ONLY_NOT_EXECUTABLE",
  "not_mcp_native_schema": true,
  "important": "A design model, not a signed authorization or verified device integration.",
  "roles": {
    "human_owner": "PENDING",
    "local_supervisor": "PENDING",
    "requester": "PENDING",
    "local_authority_gate": "NOT_INSTALLED",
    "cloud_model": "PROPOSE_ONLY"
  },
  "identity": {
    "capability_id": "demo.read_state",
    "version": "0.1.0",
    "work_id": "UNASSIGNED",
    "device_id": "UNASSIGNED",
    "reality_id": "UNASSIGNED"
  },
  "interface": {
    "name": "read_lamp_state",
    "type": "OBSERVATION_ONLY",
    "input_schema": {
      "type": "object",
      "properties": {
        "measurement": {
          "type": "string",
          "enum": [
            "on_off_state"
          ]
        }
      },
      "required": [
        "measurement"
      ],
      "additionalProperties": false
    },
    "output_schema": {
      "type": "object",
      "properties": {
        "state": {
          "type": "string",
          "enum": [
            "ON",
            "OFF",
            "UNKNOWN"
          ]
        },
        "status": {
          "type": "string",
          "enum": [
            "OBSERVED",
            "UNAVAILABLE",
            "REJECTED"
          ]
        },
        "evidence_id": {
          "type": "string"
        }
      },
      "required": [
        "status"
      ]
    }
  },
  "grant": {
    "status": "NOT_GRANTED",
    "purpose": "Read one low-risk indicator for human review only",
    "allowed": [
      "read_lamp_state"
    ],
    "physical_actuation": false,
    "recipient": "SUPERVISOR_ONLY",
    "mode": "LOCAL_ONLY",
    "valid_from": "PENDING",
    "valid_until": "PENDING",
    "quota": 1,
    "owner_consent": "REQUIRED",
    "revocation": true
  },
  "policy": {
    "default": "DENY",
    "authentication": "REQUIRED",
    "on_missing_conditions": "REJECT_WITH_REASON",
    "on_revocation": "BLOCK_NEW_CALLS_AND_FOLLOW_VALIDATED_SAFE_STOP",
    "never": "EXPOSE_GENERAL_DEVICE_ADMIN_ACCESS"
  },
  "safety": {
    "hardware_qualification": "NOT_PERFORMED",
    "independent_interlock": "REQUIRED_FOR_ANY_FUTURE_ACTUATION",
    "human_supervision": "REQUIRED",
    "control_limit": "NO_MOTOR_HEAT_RELAY_OR_VALVE_COMMANDS"
  },
  "evidence": {
    "fields": [
      "owner_decision",
      "work_id",
      "capability_version",
      "timestamp_utc",
      "observed_readback",
      "result_or_refusal",
      "operator_id"
    ],
    "accepting_authority": "PENDING",
    "acceptance_is_not_automatic": true
  },
  "rejection_reasons": [
    "NOT_GRANTED",
    "EXPIRED",
    "OUT_OF_SCOPE",
    "DEVICE_UNREADY",
    "UNSAFE",
    "REVOKED",
    "QUOTA_EXCEEDED"
  ],
  "handoff": "A later physical pilot requires real device ID, signed authority, safe wiring, compatible protocol, supervision and tested rejection before any execution."
}