# Effect lock threat model

The fixture freezes the current `SyntheticReceiver` as its baseline. That
receiver accepts `mediated: true` from a direct caller and appends the accepted
value without receiving the mandate or decision records. The sibling locked
receiver accepts no caller-supplied mediation, reliance or trust status.

The candidate addresses wrapper bypass inside one declared receiver-controlled
Durable Object boundary. It tests target-side verification, receiver-local
single-use state, atomic append and effect-record persistence, exact replay, and
the declared runtime graph.

It does not establish cloud or platform administrator containment, absence of
copied receiver credentials, source or deployment immutability, worldly truth,
policy correctness, provider execution binding, absence of undisclosed external
effects, production safety, or legal effect. A grant never transfers inherited
reliance to another receiver or downstream jurisdiction.
