{
  "schemaVersion": "0.3",
  "surfaceId": "NLAB-WEB-SRF-004",
  "domainFamilyRef": "NLAB-WEB-FAM-001",
  "identity": "N-Lab",
  "domain": "n-lab.systems",
  "familyRole": "SYSTEMS",
  "primaryRole": "systems-runtime-and-machine-interface-namespace",
  "canonicalUrl": "https://n-lab.systems/",
  "defaultLocale": "en",
  "lifecycle": "CONTROLLED_PREVIEW",
  "releaseState": "HOLD",
  "indexingPolicy": "NOINDEX",
  "productionAdmission": "NOT_ESTABLISHED",
  "qualifiedProviderReadbackAsOf": "2026-09-21",
  "publicEndpoints": {
    "surfaceContract": "https://n-lab.systems/.well-known/nlab-surface.json",
    "health": "https://n-lab.systems/health.json"
  },
  "apexPolicy": {
    "publicSafeIndex": true,
    "wwwPolicy": "308_TO_APEX",
    "childSurfaceDefault": "NOT_MATERIALIZED_UNLESS_INDEPENDENT_BOUNDARY_IS_PROVEN"
  },
  "interfaceClasses": [
    {
      "name": "app",
      "semanticRole": "authenticated-human-operating-surface",
      "disposition": "TARGET_ADOPTED_REALIZATION_PREPARED_NON_OPERATIVE_DNS_RUNTIME_IAM_RELEASE_HOLD",
      "publicHostnameEstablished": false,
      "decisionRef": "UIX-HOS-RES-DEC-001",
      "decisionDate": "2026-09-21",
      "operative": false
    },
    {
      "name": "auth",
      "semanticRole": "identity-and-authentication-boundary",
      "disposition": "RESERVED_SECURITY_GATE",
      "publicHostnameEstablished": false
    },
    {
      "name": "api",
      "semanticRole": "governed-external-machine-api",
      "disposition": "RESERVED_CONTRACT_GATE",
      "publicHostnameEstablished": false
    },
    {
      "name": "status",
      "semanticRole": "operational-status-projection",
      "disposition": "RESERVED_SOURCE_CONTRACT_GATE",
      "publicHostnameEstablished": false
    },
    {
      "name": "gateway",
      "semanticRole": "governed-provider-and-runtime-gateway",
      "disposition": "PRIVATE_BY_DEFAULT_EXTERNAL_NAMESPACE_HOLD",
      "publicHostnameEstablished": false
    },
    {
      "name": "registry",
      "semanticRole": "institutional-registry-projection",
      "disposition": "PRIVATE_PROJECTION_FIRST",
      "publicHostnameEstablished": false
    },
    {
      "name": "twin",
      "semanticRole": "institutional-twin-interaction-projection",
      "disposition": "PRIVATE_PROJECTION_FIRST_HOSTNAME_NOT_REQUIRED",
      "publicHostnameEstablished": false
    },
    {
      "name": "agents",
      "semanticRole": "governed-agent-runtime-interface",
      "disposition": "PRIVATE_BY_DEFAULT_RUNTIME_HOLD",
      "publicHostnameEstablished": false
    },
    {
      "name": "ops",
      "semanticRole": "operator-control-plane",
      "disposition": "PRIVATE_NO_PUBLIC_DNS_BY_DEFAULT",
      "publicHostnameEstablished": false
    },
    {
      "name": "data",
      "semanticRole": "private-data-service-boundary",
      "disposition": "PRIVATE_NO_PUBLIC_DNS_BY_DEFAULT",
      "publicHostnameEstablished": false
    }
  ],
  "nonCollapseRules": [
    "provider_deployment_does_not_establish_institutional_authority",
    "endpoint_availability_does_not_grant_caller_authorization_or_execution_permission",
    "registry_or_twin_projection_does_not_replace_competent_source_systems",
    "policy_permit_is_not_decision_mandate_aut_accessgrant_or_execution_authority",
    "provider_receipt_is_not_verified_outcome_or_assurance",
    "controlled_preview_is_not_production_admission"
  ],
  "providerReadback": {
    "provider": "Vercel",
    "observedAt": "2026-09-21",
    "apexHttpsStatus": 200,
    "wwwPolicy": "308_TO_APEX",
    "tlsStatus": "OPERATIONAL",
    "releaseHeader": "HOLD",
    "indexingHeader": "NOINDEX",
    "relianceBoundary": "provider realization only; production admission, institutional authority and Cloudflare registrar state are not established by this contract"
  },
  "provenanceRef": "WEB-SYS-V02-R2-CONTRIB-001",
  "publicContractBoundary": "PUBLIC_SAFE_TECHNICAL_PROJECTION_ONLY"
}