{
  "pilot_id": "robotgov-external-command-boundary-pilot-v0.1",
  "criteria_must_be_agreed_before_integration": true,
  "required_cases": [
    {
      "case": "EXACT_COMMAND_VALID_AUTHORITY",
      "expected_sandbox_effects": 1,
      "required_terminal_status": "EXPECTED_EFFECT_OBSERVED"
    },
    {
      "case": "DIRECT_COMMAND_WITHOUT_AUTHORITY",
      "expected_sandbox_effects": 0,
      "required_terminal_status": "AUTHORITY_MISSING"
    },
    {
      "case": "MATERIAL_COMMAND_MUTATION",
      "expected_sandbox_effects": 0,
      "required_terminal_status": "COMMAND_COMMITMENT_MISMATCH"
    },
    {
      "case": "REPLAYED_AUTHORITY",
      "expected_additional_sandbox_effects": 0,
      "required_terminal_status": "AUTHORITY_REPLAY_REJECTED"
    },
    {
      "case": "SANDBOX_OR_RECEIVER_OUTAGE",
      "expected_sandbox_effects": 0,
      "false_completion_receipt_permitted": false
    }
  ],
  "required_measurements": [
    "integration_engineer_hours",
    "adapter_source_lines",
    "authority_evaluation_latency",
    "receiver_verification_latency",
    "effect_observation_latency",
    "restart_recovery_behavior",
    "operator_review_time"
  ],
  "latency_threshold": "PARTNER_DEFINED_BEFORE_EXECUTION",
  "success_requires_all_required_cases": true,
  "external_llm_calls_permitted": false,
  "production_credentials_permitted": false,
  "physical_hardware_path_permitted": false,
  "safety_claim_authorized": false,
  "physical_action_authorized": false
}