{
  "code": "REC-01",
  "slug": "recovery-and-quarantine",
  "title": "Recovery and Quarantine",
  "category": "Recovery",
  "status": "Current",
  "version": "2.0.4-wip",
  "summary": "Defines non-destructive handling for malformed, unsupported, conflicting, partial, or checksum-failing local artifacts.",
  "keywords": [
    "recovery",
    "quarantine",
    "malformed JSON",
    "checksum mismatch",
    "storage quota"
  ],
  "mission_phases": [
    "Validate",
    "Deliver",
    "Debrief"
  ],
  "canonical": "https://iarpg.com/standard/recovery-and-quarantine",
  "json": "https://iarpg.com/records/recovery-and-quarantine.json",
  "requirements": [
    {
      "level": "MUST",
      "text": "Malformed or incompatible artifacts enter quarantine with their original payload and a reason."
    },
    {
      "level": "MUST",
      "text": "Recovery actions clone into a repaired draft rather than mutating the quarantined original."
    },
    {
      "level": "MUST",
      "text": "Users can export the original payload and recovery report before deletion."
    },
    {
      "level": "MUST",
      "text": "Recovery interfaces state that repair does not establish source trustworthiness."
    }
  ],
  "research": [
    {
      "label": "Immutable records and UTC telemetry",
      "href": "/docs/report/monetary-architecture-genesis-allowance-and-economic-stabilization#ledger-schema-and-telemetry",
      "note": "Supports immutable records, reversals, and UTC event time."
    },
    {
      "label": "Evidence-based review and jurisdiction",
      "href": "/docs/report/justice-system-and-warrant-escalation-for-rogue-intelligence#recommended-warrant-architecture",
      "note": "Supports explainable evidence thresholds and reviewable decisions."
    }
  ],
  "related": [
    "browser-local-tool-handoff",
    "browser-local-backup-and-selective-restore"
  ],
  "roles": [
    "Operative",
    "Handler",
    "Intelligence Analyst",
    "Technical Operator",
    "Counterintelligence Officer",
    "Liaison Officer",
    "Logistics Specialist",
    "Source Handler"
  ],
  "interaction_types": [
    "Review",
    "Validate",
    "Record",
    "Export",
    "Recover"
  ],
  "authority_types": [
    "Civil administration",
    "Military command",
    "Commercial intelligence service",
    "International verification body",
    "Scientific or infrastructure consortium",
    "Independent investigative network"
  ],
  "collection_disciplines": [],
  "conformance_level": "Level D — Simulatable",
  "implementation_maturity": "Published WIP",
  "release": "IARPG-OPS-2",
  "revised_utc": "2026-07-20T12:04:07Z",
  "purpose": "Defines non-destructive handling for malformed, unsupported, conflicting, partial, or checksum-failing local artifacts.",
  "rationale": "Portable intelligence-operation artifacts require inspectable boundaries, deterministic evidence, explicit recovery, and no silent loss or identity overclaim.",
  "game_interaction": [
    "Inspect artifact",
    "Compare evidence",
    "Record reason code",
    "Export local result"
  ],
  "inputs": [
    "Browser-local artifact",
    "Applicable standard",
    "Declared source context"
  ],
  "outputs": [
    "Reviewable result",
    "Reason code",
    "Local export",
    "Preserved original"
  ],
  "state_transitions": [
    {
      "from": "received",
      "event": "requirement evaluated",
      "to": "accepted, quarantined, or rejected-with-source-untouched"
    }
  ],
  "evidence_and_provenance": [
    "Record source artifact ID, canonical digest, UTC event time, responsible local role label, and reason code.",
    "Do not convert a digest, label, or generated statement into an identity or authoritative fact claim."
  ],
  "ui_requirements": [
    "Show the record code and requirement level at the point of use.",
    "Expose the reason for pass, fail, quarantine, recovery, or rejection.",
    "Provide direct links to canonical human and machine records."
  ],
  "accessibility_requirements": [
    "Essential information is available without reliance on color, audio, motion, or a graph alone.",
    "Keyboard, screen-reader, reduced-motion, high-zoom, mobile, and print equivalents are documented."
  ],
  "telemetry_events": [
    {
      "name": "standard.recovery-and-quarantine.evaluated",
      "required_fields": [
        "event_id",
        "timestamp_utc",
        "artifact_id",
        "record_code",
        "result",
        "reason_code"
      ]
    }
  ],
  "abuse_and_exploit_cases": [
    "A participant attempts to remove unknown data during import or migration.",
    "A digest or declared label is presented as proof of human identity or approval.",
    "A consequential record is overwritten without a reason or preserved original."
  ],
  "failure_behavior": "Fail closed for irreversible publication or overwrite. Preserve original content, show the failing requirement, and allow export or non-destructive recovery.",
  "recovery_behavior": "Retain the original artifact and review event, clone any repaired draft, and require a new explicit validation event before continuing.",
  "example_implementation": "The local tool evaluates REC-01, writes a UTC reason-coded result, and exposes both original and resulting artifacts for export.",
  "evidence_requirement": "Reviewable provenance and deterministic local evidence required",
  "related_examples": [
    "port-access-anomaly-investigation"
  ],
  "revision_history": [
    {
      "version": "2.0.4-wip",
      "date_utc": "2026-07-20T12:04:07Z",
      "note": "Initial REC-01 publication for IARPG-OPS-2 release-candidate hardening."
    }
  ]
}