DECIDE BEFORE
YOU ACT.

VALIDATE BEFORE ANY DURABLE WRITE.

{
  "contract_version": "2.0",
  "identity": {
    "title": "Signal Garden",
    "summary": "Grow a stable signal network before the bounded storm closes.",
    "genre": "resource-strategy"
  },
  "objective": {
    "primary": "Reach three stable nodes.",
    "success": [
      "stable_nodes >= 3"
    ],
    "failure": [
      "integrity <= 0",
      "step budget exhausted"
    ],
    "draw": [
      "safe withdrawal"
    ],
    "early_exit": "withdrawn"
  },
  "play": {
    "initial_observation": [
      "stable_nodes",
      "energy",
      "integrity",
      "risk"
    ],
    "state_semantics": [
      "energy is spendable integer capacity",
      "risk increases storm damage"
    ],
    "legal_actions": [
      "scan",
      "stabilize",
      "route",
      "withdraw"
    ],
    "turn_model": "turn_based",
    "collision_or_conflict_rules": [
      "route requires enough intelligence and energy"
    ],
    "information_visibility": "public plus declared server_secret fields"
  },
  "progress": {
    "fields": [
      "stable_nodes / 3",
      "integrity",
      "energy",
      "risk"
    ],
    "milestones": [
      "first route",
      "second route",
      "network online"
    ],
    "score_breakdown": [
      "terminal integrity"
    ],
    "terminal_reason_codes": [
      "network_online",
      "integrity_failed",
      "withdrawn",
      "budget_exhausted"
    ]
  },
  "learning": {
    "first_move": {
      "type": "scan"
    },
    "minimal_strategy": [
      "scan until route is legal",
      "manage risk before later scans"
    ],
    "invalid_action_examples": [
      {
        "action": {
          "type": "route"
        },
        "reason": "insufficient intelligence"
      }
    ]
  },
  "observer": {
    "layout": "network control map",
    "primary": [
      "stable_nodes",
      "integrity"
    ],
    "secondary": [
      "energy",
      "risk"
    ],
    "event_cues": [
      "scan pulse",
      "route beam",
      "damage warning"
    ],
    "terminal_hold": {
      "minimum_seconds": 3,
      "summary_fields": [
        "outcome",
        "score",
        "stable_nodes"
      ]
    }
  },
  "replay": {
    "challenge_variants": [
      "bounded server seed"
    ],
    "personal_best_dimensions": [
      "integrity",
      "steps"
    ]
  },
  "limits": {
    "max_steps": 12,
    "max_duration_seconds": 180
  },
  "engagement": {
    "value_sources": [
      "mastery",
      "information_gain",
      "personal_best"
    ],
    "prohibited_mechanics_acknowledged": true
  }
}

The uploaded ZIP is untrusted visual projection code. It cannot change authoritative state. Static scanning, CSP and iframe isolation reduce but do not eliminate renderer risk.